last executing test programs: 4m39.955179611s ago: executing program 1 (id=7): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket(0x1e, 0x4, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) connect$tipc(r3, &(0x7f0000000040)=@name={0x1e, 0x2, 0x0, {{0x1, 0x1}}}, 0x10) sendmmsg$unix(r3, &(0x7f0000004400), 0x400000000000203, 0x0) 4m38.741658609s ago: executing program 1 (id=9): capset(&(0x7f0000000080)={0x20080522}, &(0x7f00000000c0)) socket$pppl2tp(0x18, 0x1, 0x1) socket$inet6_udp(0xa, 0x2, 0x0) r0 = syz_io_uring_setup(0xd2, &(0x7f0000000480)={0x0, 0xbd84, 0x0, 0x1, 0x24b}, &(0x7f0000000100)=0x0, &(0x7f0000000640)=0x0) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, &(0x7f0000000400)={0x1, &(0x7f0000000200)=[{0x2f, 0x8, 0x0, 0x4}]}, 0x10) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_MADVISE={0x19, 0x7b, 0x0, 0x0, 0x0, &(0x7f0000011000/0x4000)=nil, 0x4000, 0xc}) io_uring_enter(r0, 0x47bc, 0x20, 0x0, 0x0, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) r3 = fsopen(0x0, 0x0) r4 = fcntl$dupfd(r3, 0x0, r3) fsconfig$FSCONFIG_SET_STRING(r4, 0x1, 0x0, 0x0, 0x0) read$FUSE(r4, 0x0, 0x0) 4m38.66989681s ago: executing program 1 (id=10): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_mount_image$vfat(&(0x7f0000000100), &(0x7f00000005c0)='./file0\x00', 0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="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"], 0x6, 0x2c2, &(0x7f0000000bc0)="$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") r3 = openat(0xffffffffffffff9c, &(0x7f0000004400)='./bus\x00', 0x7a042, 0x0) writev(r3, &(0x7f0000000000), 0x0) 4m37.223374892s ago: executing program 1 (id=12): r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000080), 0x6) socket$inet_udp(0x2, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) ioctl$sock_bt_hci(r0, 0x800448d7, 0x0) 4m34.946723766s ago: executing program 1 (id=17): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000580)={0x50, 0x2, 0x6, 0x5, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_TYPENAME={0x15, 0x3, 'hash:ip,port,net\x00'}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}]}, 0x50}, 0x1, 0x0, 0x0, 0x40001}, 0x0) sendmsg$IPSET_CMD_DESTROY(r3, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000400)={0x28, 0x3, 0x6, 0x201, 0x0, 0x0, {0x5}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}]}, 0x28}}, 0x0) 4m32.931967727s ago: executing program 1 (id=21): openat$sndseq(0xffffffffffffff9c, 0x0, 0x62181) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000500)=@newsa={0x138, 0x17, 0x1, 0xfffffffe, 0x100, {{@in6=@ipv4={'\x00', '\xff\xff', @multicast2}, @in6=@private1={0xfc, 0x1, '\x00', 0x1}, 0x1, 0x71c, 0x4e23, 0x2, 0x0, 0x0, 0x0, 0xff}, {@in6=@mcast2, 0x4d6, 0x6c}, @in=@private=0xa010101, {0x0, 0x192, 0x9ba3, 0xffff, 0x251c, 0x3, 0xfffffffffffffffc}, {0xffffffffffffffff, 0x0, 0x1f, 0xfffffffffffffffe}, {0xfffffffa, 0xfffffffc}, 0x80, 0x3502, 0x2, 0x1, 0x0, 0x20}, [@algo_comp={0x48, 0x3, {{'deflate\x00'}}}]}, 0x138}, 0x1, 0x0, 0x0, 0x800}, 0x0) 4m16.8804774s ago: executing program 32 (id=21): openat$sndseq(0xffffffffffffff9c, 0x0, 0x62181) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000500)=@newsa={0x138, 0x17, 0x1, 0xfffffffe, 0x100, {{@in6=@ipv4={'\x00', '\xff\xff', @multicast2}, @in6=@private1={0xfc, 0x1, '\x00', 0x1}, 0x1, 0x71c, 0x4e23, 0x2, 0x0, 0x0, 0x0, 0xff}, {@in6=@mcast2, 0x4d6, 0x6c}, @in=@private=0xa010101, {0x0, 0x192, 0x9ba3, 0xffff, 0x251c, 0x3, 0xfffffffffffffffc}, {0xffffffffffffffff, 0x0, 0x1f, 0xfffffffffffffffe}, {0xfffffffa, 0xfffffffc}, 0x80, 0x3502, 0x2, 0x1, 0x0, 0x20}, [@algo_comp={0x48, 0x3, {{'deflate\x00'}}}]}, 0x138}, 0x1, 0x0, 0x0, 0x800}, 0x0) 3m45.379614487s ago: executing program 2 (id=137): shmctl$IPC_RMID(0x0, 0x0) r0 = bpf$PROG_LOAD(0x5, 0x0, 0x0) socket$inet(0x2, 0x4000000805, 0x0) socket$inet_udplite(0x2, 0x2, 0x88) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000005c00)={&(0x7f0000000000)=@newtaction={0xa0, 0x30, 0x9, 0x0, 0x0, {}, [{0x8c, 0x1, [@m_bpf={0x88, 0x1, 0x0, 0x0, {{0x8}, {0x60, 0x2, 0x0, 0x1, [@TCA_ACT_BPF_OPS_LEN={0x6, 0x3, 0x7}, @TCA_ACT_BPF_OPS={0x3c, 0x4, [{}, {}, {0x3}, {}, {}, {}, {0x6}]}, @TCA_ACT_BPF_PARMS={0x18}]}, {}, {0xc}, {0xc}}}]}]}, 0xa0}}, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000080)={{r3}, &(0x7f0000000000), &(0x7f0000000040)}, 0x20) bpf$TOKEN_CREATE(0x24, &(0x7f0000000300)={0x0, r0}, 0x8) bpf$BPF_GET_PROG_INFO(0xf, 0x0, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x4, 0x4, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000000000000000008850000007600000095"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) sendmsg$nl_route_sched(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000340)=@newtaction={0x64, 0x30, 0xffffffffffffffff, 0x0, 0x0, {}, [{0x50, 0x1, [@m_bpf={0x4c, 0x1, 0x0, 0x0, {{0x8}, {0x24, 0x2, 0x0, 0x1, [@TCA_ACT_BPF_PARMS={0x18, 0x2, {0x1}}, @TCA_ACT_BPF_FD={0x8, 0x5, r4}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x64}}, 0x0) 3m40.778219506s ago: executing program 2 (id=139): sendmsg$inet(0xffffffffffffffff, 0x0, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000b40)={0x0, 0x0, &(0x7f0000000b00)={&(0x7f00000005c0)=ANY=[@ANYBLOB="14000000100001ff00000000000000000000000a2c000000050a01020000000000000000020000000900030073797a32000000000900010073797a300000000014000000020a031747d21400000000000000000014000000110001"], 0x68}}, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000540)=ANY=[@ANYBLOB="14000000100001000b000000000000000000000a20000000000a03000000000000000000010000000900010073797a300000000044000000090a010400000000000000000100000008000a40000000000900020073797a32000000000900010073797a3000000000080005400000001f28000340000000045c0000000c0a01020000000000000000010000000900020073797a32000000000900010073797a3000000000300003802c00008028000180230001"], 0xe8}}, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) getsockopt$sock_buf(r2, 0x1, 0x1f, 0x0, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000200)=ANY=[@ANYBLOB="140000001000010007000000000000000000000a20000000000a03000000000000000000010000000900010073797a300000000048000000090a010400000000000000000100000008000a40000000000900020073797a32000000000900010073797a3000000000080005400000001f0c00098008000140000000075c0000000e0a01020000000000000000010000000900020073797a32000000000900010073797a30"], 0xec}}, 0x0) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$netlbl_cipso(0x0, r3) sendmsg$NLBL_CIPSOV4_C_ADD(r3, 0x0, 0x0) sendmsg$NLBL_UNLABEL_C_STATICADD(r3, 0x0, 0x800) 3m39.189173141s ago: executing program 2 (id=145): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r3 = socket$pptp(0x18, 0x1, 0x2) getsockopt$sock_buf(r3, 0x1, 0x1c, 0x0, &(0x7f0000000040)) 3m37.21258228s ago: executing program 2 (id=147): syz_mount_image$vfat(&(0x7f0000000280), &(0x7f00000002c0)='./file0\x00', 0x2bc3c1f, 0xffffffffffffffff, 0x7, 0x0, 0x0) mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) fcntl$addseals(0xffffffffffffffff, 0x409, 0x7) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) mount$bind(&(0x7f0000000440)='./file0/../file0\x00', &(0x7f00000000c0)='./file0/file0\x00', 0x0, 0x8b101a, 0x0) syz_emit_ethernet(0x82, 0x0, 0x0) mount$bind(0x0, &(0x7f00000003c0)='./file0/file0\x00', 0x0, 0x80000, 0x0) mount$bind(&(0x7f0000000380)='./file0\x00', &(0x7f0000000300)='./file0\x00', 0x0, 0x2125099, 0x0) r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000500)='./file0/../file0\x00', 0x89901) move_mount(r0, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000040)='devtmpfs\x00', 0x0, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000040)='mountinfo\x00') read$FUSE(r1, &(0x7f0000000f00)={0x2020}, 0x2020) 3m36.978701024s ago: executing program 2 (id=149): mount$tmpfs(0x0, 0x0, &(0x7f00000000c0), 0x0, &(0x7f0000000380)=ANY=[]) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) r3 = add_key$user(&(0x7f0000000380), &(0x7f0000000000)={'syz', 0x0}, &(0x7f0000000140)='_', 0x1, 0xfffffffffffffffe) r4 = add_key$user(&(0x7f0000000200), &(0x7f00000005c0), &(0x7f00000000c0), 0x390, 0xfffffffffffffffd) r5 = add_key$user(&(0x7f0000006400), &(0x7f0000006c00)={'syz', 0x3}, &(0x7f0000000840)="3e12d23d346cfdeb1716f738274bc1c03bee4423fa20837e6e86b86592e9be8351aabbd6e24f", 0x26, 0xfffffffffffffffe) keyctl$dh_compute(0x17, &(0x7f0000000100)={r3, r4, r5}, 0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)={'sha256\x00'}}) 3m33.456277507s ago: executing program 2 (id=156): timer_create(0x0, 0x0, &(0x7f0000bbdffc)) set_mempolicy(0x4005, &(0x7f0000000080)=0x7, 0x2) syz_mount_image$squashfs(&(0x7f0000000180), &(0x7f0000000280)='./file0\x00', 0x800000, &(0x7f0000000500)=ANY=[], 0x1, 0x1f4, &(0x7f0000000b80)="$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") r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000340), 0x0, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, 0x0) ioctl$FBIO_WAITFORVSYNC(r0, 0x4601, 0x20000000) timer_settime(0x0, 0x0, 0x0, 0x0) r1 = syz_open_dev$video4linux(0x0, 0x800000000401, 0x0) ioctl$VIDIOC_G_EXT_CTRLS(r1, 0xc040564a, 0x0) r2 = socket$inet6(0xa, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000040)={'sit0\x00', 0x0}) socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_inet6_SIOCSIFDSTADDR(r2, 0x8918, &(0x7f0000000080)={@loopback={0x0, 0xff00}, 0x0, r3}) 3m33.21933124s ago: executing program 33 (id=156): timer_create(0x0, 0x0, &(0x7f0000bbdffc)) set_mempolicy(0x4005, &(0x7f0000000080)=0x7, 0x2) syz_mount_image$squashfs(&(0x7f0000000180), &(0x7f0000000280)='./file0\x00', 0x800000, &(0x7f0000000500)=ANY=[], 0x1, 0x1f4, &(0x7f0000000b80)="$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") r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000340), 0x0, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, 0x0) ioctl$FBIO_WAITFORVSYNC(r0, 0x4601, 0x20000000) timer_settime(0x0, 0x0, 0x0, 0x0) r1 = syz_open_dev$video4linux(0x0, 0x800000000401, 0x0) ioctl$VIDIOC_G_EXT_CTRLS(r1, 0xc040564a, 0x0) r2 = socket$inet6(0xa, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000040)={'sit0\x00', 0x0}) socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_inet6_SIOCSIFDSTADDR(r2, 0x8918, &(0x7f0000000080)={@loopback={0x0, 0xff00}, 0x0, r3}) 3m19.91605209s ago: executing program 3 (id=198): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r0 = socket$inet_udp(0x2, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x804e20}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x40, &(0x7f00000004c0)=@nat={'nat\x00', 0x670, 0x5, 0x4e8, 0x450, 0x2c0, 0xffffffff, 0x3a8, 0x2c0, 0x450, 0x450, 0xffffffff, 0x450, 0x450, 0x5, 0x0, {[{{@uncond, 0x0, 0x1f0, 0x228, 0x48, {}, [@common=@unspec=@string={{0xc0}, {0x5, 0xc, 'kmp\x00', "0d01d3e4c6b2bfd892aa7400051624fa86999b13d39b99407a9b7abe75a728baa18da576811985de44110b8602025e1298ea55f1c5087ab16f67b18ca90ac68f0b3d6a068f727f7d23fa5fad26a59a5da2651212bdf9d29248ae63e2349b2470915eea2c39ade5129ff26b6fe772493180cfda2cdd49412e9469d85abdb467ba", 0x79, 0x2, {0x1}}}, @common=@unspec=@conntrack2={{0xc0}, {{@ipv6=@dev={0xfe, 0x80, '\x00', 0x10}, [0xffffff00, 0xff000000, 0x0, 0xffffff00], @ipv4=@dev={0xac, 0x14, 0x14, 0x29}, [0x0, 0xffffff00, 0xff000000, 0xffffffff], @ipv6=@local, [0xff000000, 0xff, 0x0, 0xff], @ipv4=@broadcast, [0xffffffff, 0xffffff00, 0xff], 0x3ff, 0x1, 0x5c, 0x4e20, 0x4e22, 0x4e24, 0x4e24, 0x804, 0x20c0}, 0x80, 0x2}}]}, @SNAT0={0x38, 'SNAT\x00', 0x0, {0x801, {0x0, @broadcast, @multicast2, @port=0x1, @port=0x4e24}}}}, {{@uncond, 0x0, 0x70, 0x98}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xffffffffffffffff}}, {{@ip={@multicast2, @broadcast, 0x0, 0x0, 'virt_wifi0\x00', 'veth1_vlan\x00'}, 0x0, 0xa0, 0xe8, 0x0, {}, [@common=@addrtype={{0x30}, {0x890, 0x218, 0x0, 0x1}}]}, @unspec=@SNAT1={0x48, 'SNAT\x00', 0x1, {0xe, @ipv6=@ipv4={'\x00', '\xff\xff', @empty}, @ipv6=@initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @icmp_id=0x65, @port=0x4e21}}}, {{@ip={@private=0xa010100, @rand_addr, 0x0, 0x0, 'nicvf0\x00', 'nr0\x00'}, 0x0, 0x70, 0xa8}, @DNAT0={0x38, 'DNAT\x00', 0x0, {0x1, {0x0, @rand_addr, @dev={0xac, 0x14, 0x14, 0x2a}, @icmp_id, @icmp_id}}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x548) 3m18.741208418s ago: executing program 3 (id=202): r0 = socket$unix(0x1, 0x1, 0x0) r1 = socket$unix(0x1, 0x1, 0x0) bind$unix(r1, &(0x7f00000000c0)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) listen(r1, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="17000000000000000400000003"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000058"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x37, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r3}, 0x10) shutdown(r0, 0x0) connect$unix(r0, &(0x7f0000fce000)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0xc) r4 = accept(r1, 0x0, 0x0) sendto$inet6(r4, &(0x7f0000000000)='\x00', 0x1, 0x0, 0x0, 0x0) 3m17.698925613s ago: executing program 3 (id=204): r0 = socket(0x1d, 0x2, 0x6) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000000)={'vcan0\x00', 0x0}) r2 = syz_io_uring_setup(0x88f, &(0x7f00000001c0)={0x0, 0xaee2, 0x10, 0xffffffff, 0x16}, &(0x7f0000000000)=0x0, &(0x7f0000000280)=0x0) socket$nl_netfilter(0x10, 0x3, 0xc) r5 = socket$inet_icmp_raw(0x2, 0x3, 0x1) dup(r5) userfaultfd(0x80001) socket$xdp(0x2c, 0x3, 0x0) pselect6(0x40, &(0x7f0000000240)={0x0, 0x0, 0x3, 0xfffffffffffffffd, 0x0, 0x8}, 0x0, &(0x7f0000000280)={0x3ff, 0x0, 0x0, 0xc, 0x0, 0x9, 0x466, 0xffffffffffffffff}, 0x0, 0x0) syz_io_uring_submit(r3, r4, &(0x7f00000002c0)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3}) io_uring_enter(r2, 0x47f6, 0x0, 0x0, 0x0, 0x0) bind$can_j1939(r0, &(0x7f0000000040)={0x1d, r1, 0x8000000000000003, {}, 0x2}, 0x18) sendmsg$IPVS_CMD_NEW_SERVICE(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000140)={0x14, 0x0, 0x400, 0x70bd2d, 0x25dfdbfb}, 0x14}, 0x1, 0x0, 0x0, 0x10}, 0x40000) 3m16.793031687s ago: executing program 3 (id=207): sched_setscheduler(0x0, 0x2, 0x0) r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) syz_mount_image$ext4(&(0x7f0000000880)='ext2\x00', &(0x7f0000000500)='./file0\x00', 0x0, &(0x7f00000003c0), 0xfe, 0x524, &(0x7f0000000e00)="$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") prlimit64(0x0, 0x7, &(0x7f0000000000), 0x0) signalfd4(0xffffffffffffffff, 0x0, 0x0, 0x0) connect$inet6(0xffffffffffffffff, &(0x7f0000000100)={0xa, 0x0, 0x0, @mcast2={0xff, 0x3}}, 0x1c) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) r2 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r2, 0x84, 0xd, 0x0, &(0x7f0000000040)) setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r1, 0x84, 0x25, 0x0, 0x0) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) fchdir(0xffffffffffffffff) migrate_pages(r0, 0x4, 0x0, &(0x7f0000000200)=0x100000001) 3m16.467270352s ago: executing program 3 (id=208): r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000180)={0xc, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000600)=@raw={'raw\x00', 0x8, 0x3, 0x4c0, 0x0, 0xffffffff, 0xffffffff, 0x0, 0xffffffff, 0x3f0, 0xffffffff, 0xffffffff, 0x3f0, 0xffffffff, 0xb, 0x0, {[{{@uncond, 0x0, 0x1a0, 0x1c0, 0x60030000, {0x0, 0xff000000}, [@common=@inet=@recent0={{0xf8}, {0x81, 0x300, 0x24, 0x0, 'syz1\x00'}}]}, @unspec=@TRACE={0x20}}, {{@uncond, 0x0, 0x1c8, 0x230, 0x0, {}, [@common=@inet=@recent0={{0xf8}, {0x0, 0x0, 0x1, 0x0, 'syz0\x00'}}, @common=@inet=@set2={{0x28}, {{0x0, 0x40}}}]}, @unspec=@CT1={0x68, 'CT\x00', 0x1, {0x0, 0x0, 0x0, 0x0, 'netbios-ns\x00', 'syz0\x00'}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x520) 3m6.812119147s ago: executing program 3 (id=226): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xa, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000070000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000a5df850000002d00000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x8, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) socket$vsock_stream(0x28, 0x1, 0x0) socket$vsock_stream(0x28, 0x1, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000540)=ANY=[@ANYBLOB="05000000030000008400000010"], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x20000000000000fe, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000001"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000002c0)={{r1}, &(0x7f00000001c0), &(0x7f0000000200)=r2}, 0x20) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={0x0}, 0x18) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000280)={0x0, 0x74000000, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="4c00000010004b0400f4ed00000000007a000000", @ANYRES32=0x0, @ANYBLOB="00000000000000002c0012800b00010062726964676500001c00028008000400000000000600060000000000060009"], 0x4c}}, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='timer_start\x00', r0}, 0x10) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xd, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='timer_start\x00', r4}, 0x10) 3m6.57897497s ago: executing program 34 (id=226): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xa, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000070000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000a5df850000002d00000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x8, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) socket$vsock_stream(0x28, 0x1, 0x0) socket$vsock_stream(0x28, 0x1, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000540)=ANY=[@ANYBLOB="05000000030000008400000010"], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x20000000000000fe, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000001"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000002c0)={{r1}, &(0x7f00000001c0), &(0x7f0000000200)=r2}, 0x20) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={0x0}, 0x18) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000280)={0x0, 0x74000000, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="4c00000010004b0400f4ed00000000007a000000", @ANYRES32=0x0, @ANYBLOB="00000000000000002c0012800b00010062726964676500001c00028008000400000000000600060000000000060009"], 0x4c}}, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='timer_start\x00', r0}, 0x10) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xd, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='timer_start\x00', r4}, 0x10) 32.896410716s ago: executing program 4 (id=584): prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = syz_io_uring_setup(0x40f, &(0x7f0000000000), &(0x7f0000000080)=0x0, &(0x7f00000000c0)=0x0) syz_io_uring_setup(0x2bac, &(0x7f0000000340), &(0x7f0000000100)=0x0, &(0x7f0000000000)) syz_io_uring_submit(r6, r5, &(0x7f0000000100)=@IORING_OP_READ=@pass_buffer={0x16, 0x29, 0x4000, @fd_index=0x5, 0x9, 0x0, 0x0, 0x14}) syz_memcpy_off$IO_URING_METADATA_GENERIC(r4, 0x40, &(0x7f0000000140)=0x80000004, 0x0, 0x4) io_uring_enter(r3, 0x1469, 0x0, 0x0, 0x0, 0x0) io_uring_enter(r3, 0x47e9, 0xeb13, 0x6, 0x0, 0x0) 31.577812696s ago: executing program 4 (id=585): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ieee802154(&(0x7f0000000080), r0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r4, &(0x7f0000000100)={0x0, 0x0, 0x0}, 0x8000) sendmsg$IPSET_CMD_FLUSH(r4, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000300)={0x1c, 0x4, 0x6, 0x201, 0x0, 0x0, {0x1, 0x0, 0x9}, [@IPSET_ATTR_PROTOCOL={0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x40000}, 0x800) 29.550059167s ago: executing program 4 (id=588): socket$inet6_icmp_raw(0xa, 0x3, 0x3a) syz_emit_ethernet(0x4e, &(0x7f0000000000)={@broadcast, @empty, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "120008", 0x18, 0x3a, 0x0, @loopback={0xfeffffff00000000}, @mcast2, {[], @mld={0x0, 0x0, 0x0, 0x0, 0x0, @mcast2}}}}}}, 0x0) r0 = openat(0xffffffffffffff9c, 0x0, 0x80400, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_ADD(r0, 0xc1105517, &(0x7f0000000380)={{0x6, 0x5, 0x800, 0x401, 'syz0\x00', 0x3}, 0x3, 0x2, 0xb9b9, 0x0, 0x0, 0x401, 'syz0\x00', 0x0}) r4 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000080)='oom_adj\x00') exit(0x5) write$cgroup_int(r4, &(0x7f0000000000)=0x1, 0x12) 28.356151474s ago: executing program 4 (id=592): r0 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r0, &(0x7f0000000400)={0x18, 0x0, {0x2, @dev={'\xaa\xaa\xaa\xaa\xaa', 0xa}, 'lo\x00'}}, 0x1e) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, 0x0, 0x0) prctl$PR_SET_TAGGED_ADDR_CTRL(0x37, 0x1) r1 = openat$binderfs_ctrl(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/binder-control\x00', 0x802, 0x0) ioctl$BINDER_CTL_ADD(r1, 0xc1086201, &(0x7f00000001c0)={'custom1\x00'}) r2 = socket$pppoe(0x18, 0x1, 0x0) syz_io_uring_setup(0x5092, &(0x7f0000000300)={0x0, 0xb36e, 0x10100, 0x3}, 0x0, &(0x7f0000000140)) socket$pppoe(0x18, 0x1, 0x0) keyctl$read(0x2, 0x0, &(0x7f00000000c0)=""/4087, 0xff7) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5, 0x12, 0xffffffffffffffff, 0x0) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f0000000000)=0x1b) connect$pppoe(r2, &(0x7f0000000080)={0x18, 0x0, {0xd, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}, 'veth1\x00'}}, 0x1e) r3 = openat$ppp(0xffffffffffffff9c, &(0x7f00000000c0), 0x40a40, 0x0) ioctl$PPPIOCATTCHAN(r3, 0x40047438, &(0x7f0000000040)=0x2) ioctl$PPPIOCBRIDGECHAN(r3, 0x40047435, &(0x7f0000000200)=0x1) 26.302693865s ago: executing program 4 (id=595): syz_genetlink_get_family_id$tipc2(0x0, 0xffffffffffffffff) socket$pptp(0x18, 0x1, 0x2) io_setup(0xa0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x48) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$MAP_CREATE(0x0, 0x0, 0x48) r1 = socket$inet_udp(0x2, 0x2, 0x0) r2 = socket$key(0xf, 0x3, 0x2) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) sendmsg$key(r2, &(0x7f0000000000)={0x40000000, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB="02070009"], 0x10}}, 0x0) bind$inet(r1, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x16) connect$inet(r1, &(0x7f0000000480)={0x2, 0x0, @multicast2}, 0x10) setsockopt$inet_IP_XFRM_POLICY(r1, 0x0, 0x11, &(0x7f00000002c0)={{{@in6=@dev, @in6=@dev, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0xee01}, {}, {}, 0x0, 0x0, 0x1}, {{@in6=@dev, 0x0, 0x33}, 0x0, @in=@private=0xa010100, 0x0, 0x0, 0x0, 0xb7, 0xffffffff}}, 0xe8) sendmmsg(r1, &(0x7f0000007fc0), 0x800001d, 0x0) 22.071761578s ago: executing program 4 (id=614): bpf$PROG_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f0000000240)=0x2) sched_setscheduler(r0, 0x1, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x2c, &(0x7f0000000000)='/proc/sys/net/\x00\x00v4\x00\x00s/\x92ync_\x00le\xf44.\xab%nN\xd4\xa2\x88\x00\xd1l,'}, 0x30) r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) fchdir(r3) r4 = openat$dir(0xffffffffffffff9c, &(0x7f0000000080)='.\x00', 0x101000, 0x108) getdents64(r4, &(0x7f0000000f80)=""/4096, 0x1000) 14.480746022s ago: executing program 6 (id=617): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1b, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r1}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8e}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0/file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r5 = syz_open_dev$usbfs(&(0x7f0000000480), 0x76, 0x160341) ioctl$USBDEVFS_IOCTL(r5, 0xc0105512, &(0x7f0000000200)) ioctl$USBDEVFS_IOCTL(r5, 0xc0105512, &(0x7f0000000000)=@usbdevfs_connect) 13.28962019s ago: executing program 5 (id=621): bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f000007"], 0x48) socket$nl_route(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) socket$unix(0x1, 0x1, 0x0) socket$unix(0x1, 0x1, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$packet(0x11, 0x3, 0x300) socket$inet6_sctp(0xa, 0x801, 0x84) socket$inet(0x2, 0x4000000000000001, 0x0) socket$pppl2tp(0x18, 0x1, 0x1) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x1e, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000000000000000000000000071122e000000000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_COALESCE_SET(r0, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000180)=ANY=[@ANYBLOB='\\\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010000000000000000001400000008000a00fc00000018000180140002006e657464657673696d300000000000000800050000fcffff08000900fc000000080011000700000008000e00800000000800", @ANYRES64=r0], 0x5c}, 0x1, 0x0, 0x0, 0x800}, 0x0) 11.058503784s ago: executing program 6 (id=623): openat$tun(0xffffffffffffff9c, 0x0, 0xa2f01, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_mount_image$erofs(&(0x7f0000000180), &(0x7f00000001c0)='./file1\x00', 0x0, &(0x7f0000000900)=ANY=[@ANYBLOB="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"], 0x1, 0x17d, &(0x7f00000004c0)="$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") r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file2\x00', 0x80000, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x0, 0x10012, r3, 0x0) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) syz_mount_image$fuse(0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0) openat$yama_ptrace_scope(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) 10.819006648s ago: executing program 5 (id=625): syz_mount_image$squashfs(&(0x7f0000000040), &(0x7f0000000240)='./file0\x00', 0x800, &(0x7f0000000000)=ANY=[@ANYRES8=0x0], 0x1, 0x1cd, &(0x7f00000004c0)="$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") prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x6) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0xffffffffffffff2b, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket$inet(0xa, 0x801, 0x84) connect$inet(r3, &(0x7f0000004cc0)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) listen(r3, 0xfffffffd) r4 = accept4(r3, 0x0, 0x0, 0x0) recvmmsg(r4, &(0x7f0000001000), 0x581, 0x40000000, 0x0) setsockopt$inet_sctp6_SCTP_EVENTS(r4, 0x84, 0xb, &(0x7f0000000040)={0xfe, 0x9, 0x2, 0xff, 0xa7, 0x0, 0x1, 0x0, 0x5, 0x8, 0x0, 0x0, 0x2, 0x20}, 0xe) 9.706678284s ago: executing program 0 (id=626): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket$inet6_sctp(0xa, 0x1, 0x84) r4 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r4, 0x84, 0x6f, &(0x7f0000000040)={0x0, 0x10, &(0x7f0000000000)=[@in={0x2, 0x0, @private=0xa010101}]}, &(0x7f0000000080)=0x10) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r4, 0x84, 0x1d, &(0x7f0000000140)={0x1, [0x0]}, &(0x7f0000000240)=0x8) setsockopt$inet_sctp6_SCTP_RTOINFO(r4, 0x84, 0x0, &(0x7f0000010280)={r5, 0x9, 0x0, 0x5}, 0x10) getsockopt$inet_sctp6_SCTP_MAX_BURST(r3, 0x84, 0x83, 0x0, 0x0) ioctl$FITRIM(0xffffffffffffffff, 0x40406f06, 0x0) 9.500275417s ago: executing program 6 (id=627): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) connect$unix(0xffffffffffffffff, 0x0, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r1) listen(0xffffffffffffffff, 0x0) r2 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r2, &(0x7f0000000000)={0x2, 0x4e22, @empty}, 0x10) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r3, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000300)={0x28, r4, 0x1, 0x0, 0x0, {}, [@MPTCP_PM_ATTR_ADDR={0x14, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @multicast1=0xac1414aa}]}]}, 0x28}}, 0x10) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_DEL_ADDR(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000280)={0x20, r6, 0x7, 0x0, 0x0, {}, [@MPTCP_PM_ATTR_ADDR={0xc, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x1}]}]}, 0x20}, 0x1, 0x0, 0x0, 0x48050}, 0x0) 9.275046981s ago: executing program 7 (id=628): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_int(r3, 0x29, 0x46, 0x0, 0x0) r4 = syz_open_dev$tty1(0xc, 0x4, 0x1) r5 = dup(r4) write$UHID_INPUT(r5, &(0x7f0000000180)={0x9, {"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", 0x1000}}, 0x1006) sendmsg$inet6(r3, 0x0, 0x0) 7.860159362s ago: executing program 5 (id=629): ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, 0x0) r0 = socket$inet6(0xa, 0x80002, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f00000001c0)=0x8) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000340)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x6770c000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) connect$inet6(r0, &(0x7f0000000140)={0xa, 0x4e24, 0x1ff, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x2a}}, 0x6}, 0x1c) connect$inet6(r0, &(0x7f0000000340)={0xa, 0x4e21, 0xfffffffd, @local, 0x8}, 0x1c) sendmmsg$inet6(r0, &(0x7f0000003cc0)=[{{0x0, 0x0, &(0x7f0000003980), 0x171}}], 0x400000000000172, 0x4001c00) 7.855552702s ago: executing program 0 (id=630): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$sndtimer(0xffffffffffffff9c, 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r1, 0x40345410, &(0x7f0000000400)={{0x3}}) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, 0x0, 0x0) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, 0x0, 0x0) r3 = accept4(r2, 0x0, 0x0, 0x800) sendmsg$TIPC_NL_LINK_GET(r3, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4004}, 0x20000000) recvmsg(r3, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f00000000c0)=""/81, 0x51}, {&(0x7f0000000000)=""/82, 0x52}], 0x2}, 0x0) pipe2(&(0x7f0000001040), 0x0) gettid() r4 = openat$mixer(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r5 = syz_open_dev$sndctrl(&(0x7f0000000000), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_SUBSCRIBE_EVENTS(r5, 0xc0045516, &(0x7f0000000b00)=0x6) ioctl$SOUND_MIXER_WRITE_RECSRC(r4, 0xc0044dff, &(0x7f0000000080)=0x3ff) close_range(r0, 0xffffffffffffffff, 0x0) 7.049664774s ago: executing program 7 (id=631): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000080)={0x26, 'skcipher\x00', 0x0, 0x0, 'pcbc(fcrypt)\x00'}, 0x58) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000412ff8)="3665a1ab415b7ac7", 0x8) r4 = accept(r0, 0x0, 0x0) sendmmsg$alg(r4, 0x0, 0x0, 0x0) recvmsg(r4, &(0x7f000000b680)={0x0, 0x0, &(0x7f000000b600)=[{&(0x7f000000b4c0)=""/5, 0x5}], 0x1}, 0x0) 6.983003985s ago: executing program 35 (id=614): bpf$PROG_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f0000000240)=0x2) sched_setscheduler(r0, 0x1, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x2c, &(0x7f0000000000)='/proc/sys/net/\x00\x00v4\x00\x00s/\x92ync_\x00le\xf44.\xab%nN\xd4\xa2\x88\x00\xd1l,'}, 0x30) r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) fchdir(r3) r4 = openat$dir(0xffffffffffffff9c, &(0x7f0000000080)='.\x00', 0x101000, 0x108) getdents64(r4, &(0x7f0000000f80)=""/4096, 0x1000) 6.919315606s ago: executing program 0 (id=633): ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, 0x0) socket$inet(0x2, 0x3, 0x6) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000080)='/proc/diskstats\x00', 0x0, 0x0) r4 = openat$tcp_mem(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/net/ipv4/tcp_wmem\x00', 0x1, 0x0) syz_open_dev$sndctrl(0x0, 0x7ca6, 0x400) sendfile(r4, r3, 0x0, 0x3fffff) syz_mount_image$squashfs(&(0x7f0000000180), &(0x7f00000001c0)='./file0\x00', 0x83, &(0x7f0000000000)=ANY=[], 0x3, 0x18f, &(0x7f0000000200)="$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") 5.943926061s ago: executing program 5 (id=634): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1b, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r1}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8e}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0/file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r5 = syz_open_dev$usbfs(&(0x7f0000000480), 0x76, 0x160341) ioctl$USBDEVFS_IOCTL(r5, 0xc0105512, &(0x7f0000000200)) ioctl$USBDEVFS_IOCTL(r5, 0xc0105512, &(0x7f0000000000)=@usbdevfs_connect) 4.480682423s ago: executing program 0 (id=635): r0 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r1 = syz_open_dev$dri(&(0x7f0000000180), 0x1, 0x0) r2 = syz_open_dev$dri(&(0x7f0000000180), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000100)={0x6, 0x1f, 0x6}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f00000000c0)={0xdb, 0x1ff, 0xb}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000000)={0x7fff, 0x8, 0x104}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000080)={0x2, 0x5, 0x3}) r3 = syz_open_dev$dri(&(0x7f0000000180), 0x1, 0x0) r4 = syz_open_dev$dri(&(0x7f0000000180), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r4, 0xc02064b2, &(0x7f0000000340)={0x8, 0x8169, 0x10, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r3, 0xc02064b2, &(0x7f00000000c0)={0xdb, 0x1ff, 0xb}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r4, 0xc02064b2, &(0x7f0000000000)={0x171, 0x2, 0x6}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r3, 0xc00464b4, &(0x7f0000000400)={r5}) dup(r2) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f00000002c0)={0x8, 0xd7, 0x8}) close_range(r0, 0xffffffffffffffff, 0x0) 4.479553433s ago: executing program 7 (id=636): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) pwrite64(0xffffffffffffffff, 0x0, 0x0, 0x2) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) ioctl$BTRFS_IOC_SNAP_CREATE_V2(0xffffffffffffffff, 0x50009417, 0x0) r3 = socket(0x2, 0x80805, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r3, 0x84, 0x6f, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0xf, &(0x7f0000000000)=ANY=[@ANYBLOB="18"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) getsockopt$inet_sctp_SCTP_MAX_BURST(r3, 0x84, 0x7d, &(0x7f0000000000)=@assoc_value, &(0x7f0000000040)=0x8) 4.479018313s ago: executing program 6 (id=637): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e24}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = socket$alg(0x26, 0x5, 0x0) bind$alg(r3, &(0x7f0000000000)={0x26, 'hash\x00', 0x0, 0x0, 'ghash-generic\x00'}, 0x58) r4 = accept4(r3, 0x0, 0x0, 0x0) accept4(r4, 0x0, 0x0, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) syz_emit_ethernet(0x4a, &(0x7f0000000240)={@local, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "0a8435", 0x14, 0x6, 0x1, @remote, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0x59}}}}}}}, 0x0) 2.926917086s ago: executing program 6 (id=638): sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000600)={0x0, 0x0, &(0x7f00000005c0)={0x0}, 0x1, 0x0, 0x0, 0x5}, 0x4000000) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000003c0)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mknodat$loop(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', 0x1000, 0x1) r3 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r3}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) name_to_handle_at(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', &(0x7f00000000c0)=ANY=[@ANYBLOB="14"], &(0x7f0000000180), 0x0) open_by_handle_at(0xffffffffffffff9c, &(0x7f00000000c0)=ANY=[], 0x0) 2.926382886s ago: executing program 7 (id=639): syz_io_uring_setup(0x9e, &(0x7f0000000640)={0x0, 0xec25, 0x0, 0x0, 0x40000333}, &(0x7f00000006c0), 0x0) sched_setscheduler(0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000300)=0x10001) r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) preadv(r1, &(0x7f0000000240)=[{&(0x7f0000033a80)=""/102386, 0xfffffd6e}], 0x1, 0x0, 0x0) syz_emit_ethernet(0x46, 0x0, 0x0) syz_emit_ethernet(0x4e, &(0x7f0000000880)={@link_local, @multicast, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "010448", 0x18, 0x3a, 0xff, @remote, @local, {[], @ndisc_na={0x88, 0x0, 0x0, 0x0, '\x00', @remote}}}}}}, 0x0) syz_mount_image$f2fs(&(0x7f0000000140), &(0x7f00000000c0)='./file0\x00', 0x101880a, &(0x7f0000000400)=ANY=[@ANYBLOB="6e6f646973636172642c6261636b67726f756e645f67633d73796e632c61636c2c6673796e635f6d6f64653d7374726963742c696e6c696e655f78617474722c6673796e635f6d6f64653d706f7369782c646973636172645f756e69743d7365676d656e742c6261636b67726f756e645f67633d6f6e2c6e6f696e6c696e655f78617474722c646973636172645f756e69743d626c6f636b2c6673796e635f6d6f64653d7374726963742c617467632c657874656e745f63616368652c6661756c745f696e6a656374696f6e3d30303030303030303030303030303031343033302c00271d57a599b8b169a579679e220c689eaaec4fa6229021e75c68a687d319b615573b0b0ceefba8e2e2419434463974ef8174b66469344931de0ccad650792761"], 0x1, 0x550b, &(0x7f00000079c0)="$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") r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f00000015c0)=ANY=[@ANYBLOB="b702000003000000bfa30000000000000703000000feffff7a0af0fff8ffffff79a4f0ff00000000b7060000ffffffff2e6405000000000065040400010000000404000001007d60b7030000000000006a0a00fe00ee0000850000000d000000b70000000000000095000000000000002c3f2cc2b7956244cef7baf48e6d2885a09a87507ebfc75b5b0f4e4309ebcdac5f7a860c000c9c781f6410457253e89ad528d985636a86ec0f68f59cd1159a2c2e85d726859a919cc9548a349980d1ccdce27f94bc074c27f81078545c146a0857153b7b8f00034debae58a4ab415b0d7ff0575cc272cd3d7e8d974927676468ff2d86e0ffac94792ed9cf6b40b3cf252a47c05af3a70d57cc3e067d1867b54d24e20000000000000020009ebf84d3b042d6e4e4e29d8b33fbdd02e86a6432cd080e3b57239f0127473e6ba922aff649609d40b47ec331ccba3ce8f530ffff19a6471bf5abc742d9cbcfb964b13831034694a6aad84cf08a6c7b2235dc99de9aa3e6b77c7a2877261ed32da90864987f30926c9013eec3b86836ae50447aa5a79f40c235000000453302712c3d8fc4e2b61adb0695e800000000d4f4e91f0000002c33df871a8e782339bc424d1bafe5725c8a404724f8a4f1cda7997b65954f74097579b91da309b887af2485c2d9ab09b506000000000000000bf7b2ff4602aec1eea200000064881c5630521a08e051374cf05c921a06fb78183e7e68de9dc8d95e0e5b365d10e1004dae58b3b5b89709b0ff47b200000000004000cbefd9a6bb70f60eb9c01dd2fc79b85e4d961498f3a80131d21d85618ba2189f45d011ef1da5c6d57bb8fd387ccea9c3899a914e47e82f040000009de2323f927355408f87264797d3fa970949793b94329d580500d1f91c0d22587e05a61e3d8576ca168e88d7a9af95b04a37c27bfffab9abbb31fa8c0080258cfa6d3f166e695f3c56490aeef464d9965d70a50f1282619344f223548e75fa39643adac1322c87ca253ff2fb1882760d6feab16bacdf83c11816dbe959ebc5ec479c8319f73e2249eab0486b110702a481d3b51976a52303056e800b4ae5acc2df636a65eb1d672bf2000000cda8462cc9b16624998be65683321e970000000009b8e20762c1bf4a3eb6769f2b23e842bacd9c685edea0ffa3e975424f8ede49e61a4de808a38ba3512d64dc71867df4eee3f1ff791cf7c9862f98b45852e4b2f78721b978addf2f2a29a387c6f0576b36038f819286eea99a6a434811cf2a117d775fe986a49fb82cf5f15972d55185ab18f1045384501adabb20f7b0e15ff47f1744e2341b59034959a1289ba6e243668e671d305707e3de7652bfc5b60c76deff43a1d6fd6a4180ab723735abbeffe7f2ec3a0bb86f9eddfc0f3d1d503d7a540f64000000000000fbb4c256409e54daefbb107c381fa729ff5fe607d93430da178d685d7730f5e129438a5214f722096d2986334c25e454474f92e65828b018174a9f4738b8c71fbdead06ab95e02f9a847182766964976b1fccdb9f35721e43e33883cf16ed1343fb7429eb395123b0a4262b7023c22039b9002589a379ed4c6267965af78b861bd335312538cec97966b8973d4e299d9802264d06e40ae118e1d242d1128dcedeb44030df12ef68ffce8d141e8960ef790fb0078215d65f96eb55db8cbcb060000000d988374e45451a694ffe38a1d03912b31c98d42e1a1bda1290de1a499a5d6849914c1788a7aca37177cc34102f44fec5c5e0abae01c439a1b0311e074e81ae9993b5b3459553ecece78d4c1541c70f5d81e0725d5b273755c0000000000000000aa4234e282182952a76233d18e7d49638aeb04e7a9e9e7eafb7c255372795d2d192a0a33cab0f5bf2e93e0544fcdf2df2bc6ce96e5a7d72fcdb0a11993d54d97a23754ac828674dbb93c0ad345715be4a13678b01edf76d8a9236558fea2c88cce004505ab45d8f5f88aa887bbce5c18970428516f6099bdbb2cd7a2356397f1a0a23e662e2a6c4834400cbaa41c3c574ea68da5ec1ae49f968bbe0e0bf9878516f553639f5b4828e92019b61f5874be1c7cdd9482df50bc24a8a1fa10d291390eb84e26a2e8dbeaa45604b05a116c1210a7540bf81005044273f5a8ffc538db289350eb248e483bd8920efcf30a798c2b636243e0a37262ca47dfeefa1ce69b4475d7d714ba0c636e6ae9f710411d30ef424aeaabe057c7df6ff8f767bcd9012e1047c686f5ccb76ab3a5df53cbc22ba7ea8f6a8edc19d6c1be841503850803bc2c2d5e0e34270a7f1cca0c6c53a8e5f891f7a793a70da62d6d88fbb90d220acc687931b42d6be83ab870da3c0a567f5e65ec0457f4ad2a4ec0b671b36388afd5520a8483a4b11f7d02a41b315f0f9e59f47668d68a74838d6976e12fd45200014041dffacbf60892ec8bd7560686f137a806d3dfaba900b47cac62f828342fff009adb5b2251461a1b9d6ba625b8fe04e69a1a4be2696f24bb68f486e172932e03000000000000005942e1b9d6dc28ab8e19e1111dd893e8d5bc5642faf21eef40d6e7de3ef62c4bc5ff17e7aeb2841098f0cf74f845d1cc9ec4eee79c290fb0ba939b13707004e2e9cc0d350538c1c8c6bb9a38c6ac5ca07df32601240ea3f160d3a7b83ecd0509ce9eba0c7bf7843799b1b56a234f9eaab8a3f14f1472bb6aaeb8ac9ee4055f05558ab31f339f6a4caf2ee2fd01f34dca330000000000000000000000000000000000000000000000000000000000000000000000000095e6f945ba9a941cef5e70b8c152321e24b5b29bcf374dcf5a29a35d76e6e2bf8df95462690a4fc9ec8129e92b6ebb4b40a992a75d3c5954d0bfc87db24d856359079b29b3c374d081c300b2cfaa596d24e800ef8e2201f2fb7a9946f89f9f31f7cbd6f7fd7f8898c70b5c65f2e28f22e983892c383882809f557affbda5e1850d66a4a1ee73b2084681f880a754acddcdafe3ceeeebc0b5f2fedfe7d198e3067f3dbac9441a9ab8409cbbb7e15b9ae3944097de34de2001c8533a3766e6e4c4c4702ccb932a27a3962814cd6aa8fc684beeaa3932efae9052be8eec1e95f6ad8d41dd34829504ba4b66e27154cb6e34aa13450522df1723130b6fe347c93f00e40e293c98d849a33f773c743728992f40faccd5c23130a1c6bfd6fc661bca1598137ddd1090ded672f5a48a40cab3f640c8241a364cbdd3f188eec7da7bccafbd5bf28a46f0eecc6b550471b06a5a411c0e0b19e15a461e7c6833ba936e214b013f2819ec6572a43b5cd32b11d7e4f8dcf8f7820a17b7b2ee6178a03351dd31091e46bfd82a3979b9cad109fd6217cd52aa81bdabd50826a474bd16b8f7e6aed12a305366599f5f029a7b24558c02750500002f1c19d16a6f391906000000cc03bbfb8c698ecc137d96711100e01031aa74fad86b99eebf0527552a9331e646c424b14ffbb815622bfd2f635855bed1b164d0a56bd104be069854111c5b26ec3c652b5f0a6b9676dae987ec23456ba05a4dfb15321ef6b76e7e547a688c67ab531cfc86784c9f940d9fb0464a72ce635e14b80dc5c1c64e8f58c570e7afd83ee77f157c146aa747b728969aeb4aba1d8f9de1b3fb8ab6ea50e884c2ea98e6400bf0c5ae2887cd1da0e57ccfdf5eca2b455247efcc13102846c0a85f20c80007c0ce6efce627b95b8ad3003385de97101678fb2163ecea6e70a77a6fbc089e31a5ccece932229b8f79faa6863d6857c3d9a9710f938ad16eeb8342278f1c1cbc226498028234d21466892983378fe64acbb44f694cd78e43c74aa75505cb1c91b189f8f89f233a05f5cd4e173a373178557843dd705268f74a9e5429945503195aefd6706e587f7ee8375fa559c3ad195d3795df1a8364cd13acc3256ee4634c73eeb6954d0fcf09ab84df0b8900e0c6fea2cc0e7c207b8942fafd70530a0fc4622ecf132d1d5bdc9ffc79f0549b82df521817651d5fead5128205b92ccdccc69407ab556217af277af999dbd456dfc43dd061b6c91485dcc208cf0b3d0bf851de413f5de5ec015e296914afab6411109355e027ce04990d9aae251b9deb11b7db45b9f15b7b55d8fdbedd9e6cf891205694f02be8b9ea8ecd41308a0e1b93ae3435bfa88b440b1f701b4d0fc49c82193f27f8023b630ea97edbf3bf421a0a1a2b4ac7bb30bcd1cdd172c0df37408fd6827bb03e8742fc1c7a2be0d1299928c5f79e846a8dc7ca648d960a759e6711b69776896a9656d59af6d44bff348229fa84034faf8421a22c4b4c17a3d24a4aeee0d0850371feefd77cc4eef51c2b417c8c7458ddd7dd9d1a863bf0a9e1a30a19020490038017a5c7e474c83302a2b59654d49a11c6736ac63e8eb383760fc2b5c976dacf3dda7191c757f28e44f6a5f95db7055f7ed983f5665210f20a494fabb0dbcd335700000000000000000000000000000086666201251aa4f139d0485ffcf89f01639fd1579a3802f720a0215c720a97071f5065a23642a5826fdbca444b00e2e5835185d5d5b2796eb0fe32cf3b0633f58ecc7648c3c6efe82f93a3008052416512eea30ea9472e0b456a652883c0907323cf03be193ad0438cdef7a98a1671a1918df310dc4bfd61c3db3c22673884dca370558936b85737e14819ab1c57b348a8ff16d36364a20fe846d11d045de81f069bac8425b31c5d08b433562ffb318c1285011f9b78b2401989384311101e452f54661ecdb251ab9eefc8e400191f0f0f8c679b0000000000000000000000b41b0ae67d9351c49e1ff285d05a3cc39a5b0cd20afe0a00086650f8fad20c0e1e7131836c85b2cbacd41593928207312189fdd66abc45a139f0c9dbcc58237cec5bd56ffe0c6de23254a7951a298501ca04ab30b5723df6dd01d0b1a87c197b83b286374ba9a9dd1bd09ea1b71b24a1f527bf59d9633e3d15ed3757acc494f464482e49884c13780cc392bfe67b5d91e5b513daea48cac7645db35f07ba41aa187f65c5344717d7a0ee353a7e36b14fdce5898a613cef224d3addb3d2de74cef73f7520dc8cc8ffaa62cbd25e691ef4c45fdd25675b32c129a8464f08c4da9c08713b54416f3b56a04086dab1d196884e062287ad4758e883d2f99833d8aaf0c56718f6b0434740900faf4ab824662a719bf370fd0b2de04c1455ec14908ce5cbec79466f2f2cc337c53437d626254e00000000000000000000000000000000c34646f8ae68c095e7298300feab8a3dfe2c43fc971385b13b4f3b61ddbf5044ff572defcc67930f0e715774e1e970751534398faf79350255cfa9021378f10c2043e7ecd5649c9720530da7ea227b792f31cb5d688b5f1eba9ff5f85c97b35e00ecf76282912b483e31c76e303e527e98a9ca14f718d495ad45db16c4500011de506f0ca35f7ea96ed1831e3c1219f985b26cb8a70e7c8efcb287984871e0fed3f1985cf63f00289292b378188ad0dfae12c265b88961a9223b48cf7055d641595e0cb926d63c1f8a207f48bd482290b79867285c2155e655e017bca6cbba43f9b49042fb2fb390c436b3306e8a0800000090d159004da838a50235b91f5273c1fe083067ce1e2d8011c9e2b6d3ea69dfc3712e5ce440432fbd29ffd004000000"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000000c0)={r2, 0x20e, 0x5ee, 0xfd000004, &(0x7f00000004c0)="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", 0x0, 0x31, 0x2f, 0xfffffffffffffe7e, 0x1d4}, 0x28) 2.911460596s ago: executing program 5 (id=640): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet6_IPV6_RTHDR(r0, 0x29, 0x39, &(0x7f0000000080)=ANY=[@ANYBLOB="00020201"], 0x18) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x651, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) bind$netlink(r2, &(0x7f00000000c0)={0x10, 0x0, 0x0, 0x8822d55593a2179}, 0xc) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000004c0)=ANY=[@ANYBLOB="3c010000190001000000000000000000e0000001000000000000000000000000fe8000000000000000000000000000aa4e220000000000000a00000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="00000000000000000104000000000000feffffffffffffff030000000000000000000000000000000000000000000000000000000000000001000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001000000000000008400050020010000000000000000000000000000000000002b00000000000000000000000000000000000000000500000000000002000700000000000000000000000000e00000020000000000000000000000004000000033"], 0x13c}}, 0x20040880) sendmmsg$inet6(r0, &(0x7f0000000a80)=[{{&(0x7f0000000200)={0xa, 0x4e20, 0x4d7, @private0={0xfc, 0x0, '\x00', 0x1}}, 0x1c, &(0x7f0000000900)=[{&(0x7f0000000400)="fc", 0x1}], 0x1}}], 0x1, 0x4c040) 1.806365643s ago: executing program 7 (id=641): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000400)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r3, 0x6, 0x13, &(0x7f0000000180)=0x100000001, 0x4) connect$inet6(r3, &(0x7f0000000080)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @dev}}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r3, 0x6, 0x1f, &(0x7f00000002c0), 0x3) write$binfmt_script(0xffffffffffffffff, 0x0, 0x0) setsockopt$inet6_tcp_TLS_TX(r3, 0x11a, 0x1, 0x0, 0x0) 1.800177443s ago: executing program 6 (id=642): openat$fuse(0xffffffffffffff9c, 0x0, 0x2, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x651, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) sendmsg$inet(0xffffffffffffffff, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xb, 0x7, 0x8, 0x8, 0x5, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$inet6(0xa, 0x2, 0x3a) r2 = dup(r1) bind$unix(r2, &(0x7f00000001c0)=@abs={0xa, 0x2}, 0x6e) 1.679927475s ago: executing program 0 (id=643): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x6) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000240)=0x1) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file1\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x5) mkdirat(0xffffffffffffff9c, 0x0, 0x10) renameat2(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x0) r3 = socket$packet(0x11, 0x3, 0x300) r4 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_int(r3, 0x107, 0xf, &(0x7f0000000100)=0x9, 0x4) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000a00)={'wlan0\x00', 0x0}) sendto$packet(r3, &(0x7f0000000180)="02030c65420002000000ab5d71acedd7c9560385dcb1080084d7dc039806112405ce811cc352", 0xff88, 0x0, &(0x7f0000000140)={0x11, 0x0, r5, 0x1, 0x0, 0x6, @broadcast}, 0x14) 385.514124ms ago: executing program 5 (id=644): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000340)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket$inet_tcp(0x2, 0x1, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x80383, 0x0) r4 = syz_open_dev$admmidi(&(0x7f0000000140), 0x20, 0x0) read$midi(r4, 0x0, 0x14) close_range(r3, 0xffffffffffffffff, 0x0) 331.560575ms ago: executing program 7 (id=645): syz_mount_image$hfsplus(&(0x7f0000003000), &(0x7f0000000240)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x208000, &(0x7f0000003f80)=ANY=[@ANYBLOB="6e6c733d63703935302c6e6f626172726965722c666f7263652c756d61736b3d30303030303030303030303030303030303030313030302c00d01280f532b0f4cf3b36fd5c6ef64269a533fc6b052f92ffcac08ca18519d5b3711b97ec291e41355fa65d9c0d15e7c10c63ab0bba736f92ab9d30478ae1452a017be98c2a0507febf295db17e98d0fffc0d349264ce2acdedc0a61ae132d4024d39e11de2dc8679fac7efcb6137aa2e361c5f6cb851e3a60ba05f834666694667f27f0d632cf9a85fe247e27251acbd739ff85088cb201010900132000000000000000000002593d600000000"], 0xfd, 0x691, &(0x7f00000002c0)="$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") prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) socket(0x840000000002, 0x3, 0xff) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = io_uring_setup(0x497c, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x1, 0xfffffffe}) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x80383, 0x0) read$midi(0xffffffffffffffff, 0x0, 0x0) close_range(r3, 0xffffffffffffffff, 0x0) 0s ago: executing program 0 (id=646): r0 = socket(0x2a, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20000008b}, 0x0) read$FUSE(0xffffffffffffffff, &(0x7f0000001cc0)={0x2020, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x2020) sched_setscheduler(r1, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() sched_setscheduler(r2, 0x1, &(0x7f0000000400)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) close(0x3) close(0xffffffffffffffff) bpf$BPF_PROG_TEST_RUN(0x1c, 0x0, 0x0) sendmsg$nl_route_sched(r0, 0x0, 0x0) sendmmsg(r0, 0x0, 0x0, 0x4000000) kernel console output (not intermixed with test programs): eep mac addresses unique to avoid problems! [ 41.552593][ T4309] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 41.557040][ T4297] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 41.559337][ T4297] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 41.561587][ T4297] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 41.563802][ T4297] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 41.568178][ T166] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 41.570795][ T166] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 41.573640][ T166] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 41.576927][ T166] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 41.579600][ T166] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 41.585906][ T4309] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 41.588327][ T4309] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 41.590584][ T4309] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 41.593102][ T4309] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 41.622095][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 41.624610][ T47] Bluetooth: hci4: command 0x041b tx timeout [ 41.627504][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 41.629653][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 41.650025][ T4303] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 41.670874][ T166] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 41.673518][ T166] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 41.681675][ T166] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 41.690226][ T166] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 41.705359][ T47] Bluetooth: hci1: command 0x041b tx timeout [ 41.705385][ T4299] Bluetooth: hci3: command 0x041b tx timeout [ 41.707060][ T47] Bluetooth: hci0: command 0x041b tx timeout [ 41.708653][ T4299] Bluetooth: hci2: command 0x041b tx timeout [ 41.719848][ T4296] device veth0_macvtap entered promiscuous mode [ 41.743035][ T4296] device veth1_macvtap entered promiscuous mode [ 41.751646][ T166] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 41.755646][ T166] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 41.758296][ T166] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 41.761084][ T166] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 41.767802][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 41.770532][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 41.774058][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 41.777192][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 41.812077][ T4307] device veth0_vlan entered promiscuous mode [ 41.819036][ T4307] device veth1_vlan entered promiscuous mode [ 41.838257][ T4296] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 41.841087][ T4296] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 41.843646][ T4296] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 41.847464][ T4296] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 41.851400][ T4296] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 41.869920][ T166] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 41.872173][ T166] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 41.878031][ T9] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 41.881150][ T55] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 41.883814][ T55] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 41.888922][ T9] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 41.891620][ T55] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 41.895610][ T55] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 41.898489][ T55] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 41.901070][ T55] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 41.903767][ T55] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 41.907936][ T55] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 41.911942][ T4296] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 41.917793][ T9] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 41.919947][ T9] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 41.919974][ T4296] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 41.925300][ T4296] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 41.928120][ T4296] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 41.932296][ T4296] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 41.938081][ T4303] device veth0_vlan entered promiscuous mode [ 41.956908][ T55] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 41.961809][ T55] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 41.965209][ T55] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 41.967858][ T55] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 41.970699][ T55] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 41.976100][ T4296] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 41.978508][ T4296] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 41.980897][ T4296] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 41.983346][ T4296] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 42.023457][ T4307] device veth0_macvtap entered promiscuous mode [ 42.028067][ T55] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 42.031492][ T55] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 42.041866][ T4303] device veth1_vlan entered promiscuous mode [ 42.046999][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 42.050162][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 42.055894][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 42.059570][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 42.064054][ T4307] device veth1_macvtap entered promiscuous mode [ 42.120149][ T55] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 42.122423][ T55] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 42.145940][ T55] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 42.148647][ T55] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 42.217692][ T4371] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 42.219930][ T4371] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 42.223767][ T4371] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 42.235149][ T4380] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 42.239858][ T4380] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 42.241033][ T4307] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 42.246207][ T4307] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 42.249212][ T4307] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 42.252092][ T4307] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 42.258275][ T4380] loop3: detected capacity change from 0 to 512 [ 42.259186][ T4307] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 42.273600][ T4307] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 42.277920][ T4307] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 42.284764][ T4307] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 42.288792][ T4307] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 42.291397][ T4307] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 42.294663][ T4307] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 42.297648][ T4307] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 42.300486][ T4307] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 42.305151][ T4307] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 42.307547][ T4371] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 42.310285][ T4371] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 42.313054][ T4371] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 42.313421][ T4380] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 42.316793][ T4371] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 42.320802][ T4371] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 42.323402][ T4371] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 42.336027][ T4303] device veth0_macvtap entered promiscuous mode [ 42.356309][ T4303] device veth1_macvtap entered promiscuous mode [ 42.420511][ T4307] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 42.422937][ T4307] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 42.446760][ T4307] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 42.449167][ T4307] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 42.501277][ T4303] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 42.510436][ T4303] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 42.511461][ T4385] binder: 4384:4385 tried to acquire reference to desc 0, got 1 instead [ 42.513155][ T4303] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 42.528032][ T4385] binder: 4384:4385 ERROR: Thread waiting for process work before calling BC_REGISTER_LOOPER or BC_ENTER_LOOPER (state 10) [ 42.541969][ T4303] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 42.542227][ T4385] binder: 4385 RLIMIT_NICE not set [ 42.546398][ T4385] binder: 4385 RLIMIT_NICE not set [ 42.554419][ T4303] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 42.557285][ T4303] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 42.560063][ T4303] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 42.573995][ T4380] Quota error (device loop3): v2_read_file_info: Free block number 58381 out of range (1, 6). [ 42.574923][ T4303] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 42.581252][ T4303] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 42.583423][ T4347] binder: release 4384:4385 transaction 5 out, still active [ 42.584437][ T4380] EXT4-fs warning (device loop3): ext4_enable_quotas:7066: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 42.592464][ T4303] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 42.594380][ T4347] binder: undelivered TRANSACTION_COMPLETE [ 42.600800][ T4303] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 42.602196][ T4347] binder: release 4384:4385 transaction 5 in, still active [ 42.603676][ T4303] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 42.603699][ T4303] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 42.603712][ T4303] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 42.603722][ T4303] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 42.607047][ T4347] binder: send failed reply for transaction 5, target dead [ 42.609472][ T4303] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 42.629270][ T4303] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 42.633463][ T4303] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 42.654590][ T4303] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 42.656939][ T4303] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 42.659315][ T4303] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 42.661645][ T4303] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 42.794605][ T11] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 42.795526][ T4389] EXT4-fs (loop3): warning: mounting unchecked fs, running e2fsck is recommended [ 42.796820][ T11] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 42.803714][ T4371] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 42.812668][ T4371] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 42.821194][ T4371] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 43.710981][ T4371] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 43.713985][ T4371] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 43.717621][ T4371] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 43.721763][ T4371] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 43.778333][ T4389] Quota error (device loop3): v2_read_file_info: Free block number 58381 out of range (1, 6). [ 43.781337][ T4389] EXT4-fs warning (device loop3): ext4_enable_quotas:7066: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 43.788840][ T4299] Bluetooth: hci2: command 0x040f tx timeout [ 43.790456][ T4299] Bluetooth: hci4: command 0x040f tx timeout [ 43.792104][ T4299] Bluetooth: hci0: command 0x040f tx timeout [ 43.793710][ T4299] Bluetooth: hci3: command 0x040f tx timeout [ 43.795477][ T4299] Bluetooth: hci1: command 0x040f tx timeout [ 43.870970][ T473] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 43.873281][ T473] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 43.880413][ T11] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 43.883043][ T11] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 43.884316][ T4395] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 43.887151][ T4395] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 43.888840][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 43.892119][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 43.916289][ T473] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 44.534476][ T4406] loop1: detected capacity change from 0 to 256 [ 45.584141][ C1] sched: RT throttling activated [ 45.968089][ T4299] Bluetooth: hci3: command 0x0419 tx timeout [ 45.970461][ T4306] Bluetooth: hci1: command 0x0419 tx timeout [ 45.972765][ T4306] Bluetooth: hci0: command 0x0419 tx timeout [ 45.974961][ T4299] Bluetooth: hci4: command 0x0419 tx timeout [ 45.977531][ T4306] Bluetooth: hci2: command 0x0419 tx timeout [ 46.204599][ T4309] EXT4-fs (loop3): unmounting filesystem. [ 46.279420][ T4424] loop0: detected capacity change from 0 to 512 [ 47.945047][ T4443] capability: warning: `syz.3.15' uses deprecated v2 capabilities in a way that may be insecure [ 49.607042][ T4424] infiniband syz1: set active [ 49.614935][ T4424] infiniband syz1: added syz_tun [ 49.719577][ T4424] infiniband syz1: Couldn't open port 1 [ 49.729807][ T4424] RDS/IB: syz1: added [ 49.731224][ T4424] smc: adding ib device syz1 with port count 1 [ 49.733073][ T4424] smc: ib device syz1 port 1 has pnetid [ 51.368547][ T4462] loop4: detected capacity change from 0 to 1024 [ 51.464542][ T4462] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 51.786501][ T4474] netlink: 'syz.3.24': attribute type 1 has an invalid length. [ 51.855245][ T4307] EXT4-fs (loop4): unmounting filesystem. [ 52.075555][ T4479] loop4: detected capacity change from 0 to 8192 [ 53.395626][ T4488] netlink: 12 bytes leftover after parsing attributes in process `syz.3.30'. [ 57.285639][ T4506] A link change request failed with some changes committed already. Interface team0 may have been left with an inconsistent configuration, please check. [ 57.467108][ T4511] loop0: detected capacity change from 0 to 256 [ 57.703356][ T4516] netlink: 28 bytes leftover after parsing attributes in process `syz.4.38'. [ 58.615677][ T4511] FAT-fs (loop0): Directory bread(block 64) failed [ 58.617769][ T4511] FAT-fs (loop0): Directory bread(block 65) failed [ 58.619648][ T4511] FAT-fs (loop0): Directory bread(block 66) failed [ 58.645919][ T4511] FAT-fs (loop0): Directory bread(block 67) failed [ 58.647832][ T4511] FAT-fs (loop0): Directory bread(block 68) failed [ 58.649615][ T4511] FAT-fs (loop0): Directory bread(block 69) failed [ 58.651469][ T4511] FAT-fs (loop0): Directory bread(block 70) failed [ 58.676266][ T4511] FAT-fs (loop0): Directory bread(block 71) failed [ 58.678229][ T4511] FAT-fs (loop0): Directory bread(block 72) failed [ 58.680104][ T4511] FAT-fs (loop0): Directory bread(block 73) failed [ 61.314235][ T4540] netlink: 165 bytes leftover after parsing attributes in process `syz.3.42'. [ 61.565063][ T4543] vhci_hcd: invalid port number 96 [ 61.566552][ T4543] vhci_hcd: default hub control req: 0000 vfffc i0060 l0 [ 62.526346][ T4535] Zero length message leads to an empty skb [ 65.544668][ T2059] ieee802154 phy0 wpan0: encryption failed: -22 [ 65.546551][ T2059] ieee802154 phy1 wpan1: encryption failed: -22 [ 65.566326][ T4553] mac80211_hwsim hwsim5 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 65.713250][ T27] audit: type=1326 audit(65.680:2): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4565 comm="syz.2.51" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffa115a8a8 code=0x7ffc0000 [ 65.723841][ T27] audit: type=1326 audit(65.690:3): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4565 comm="syz.2.51" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffa115a8a8 code=0x7ffc0000 [ 65.760433][ T27] audit: type=1326 audit(65.690:4): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4565 comm="syz.2.51" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=280 compat=0 ip=0xffffa115a8a8 code=0x7ffc0000 [ 65.798790][ T27] audit: type=1326 audit(65.690:5): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4565 comm="syz.2.51" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffa115a8a8 code=0x7ffc0000 [ 65.834278][ T27] audit: type=1326 audit(65.690:6): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4565 comm="syz.2.51" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffa115a8a8 code=0x7ffc0000 [ 65.872829][ T27] audit: type=1326 audit(65.710:7): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4565 comm="syz.2.51" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=280 compat=0 ip=0xffffa115a8a8 code=0x7ffc0000 [ 65.878805][ T27] audit: type=1326 audit(65.710:8): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4565 comm="syz.2.51" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffa115a8a8 code=0x7ffc0000 [ 65.884622][ T27] audit: type=1326 audit(65.710:9): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4565 comm="syz.2.51" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffa115a8a8 code=0x7ffc0000 [ 65.890289][ T27] audit: type=1326 audit(65.710:10): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4565 comm="syz.2.51" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=280 compat=0 ip=0xffffa115a8a8 code=0x7ffc0000 [ 65.896056][ T27] audit: type=1326 audit(65.710:11): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4565 comm="syz.2.51" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffa115a8a8 code=0x7ffc0000 [ 65.946650][ T4306] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 65.950586][ T4299] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 65.953185][ T4299] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 65.966083][ T4299] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 65.968559][ T4299] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 65.971187][ T4299] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 66.149242][ T4553] netlink: 136 bytes leftover after parsing attributes in process `syz.3.47'. [ 67.421328][ T4586] netlink: 28 bytes leftover after parsing attributes in process `syz.3.56'. [ 67.423836][ T4586] netlink: 8 bytes leftover after parsing attributes in process `syz.3.56'. [ 67.602329][ T4586] netlink: 'syz.3.56': attribute type 10 has an invalid length. [ 67.604833][ T4586] bridge0: port 3(team0) entered blocking state [ 67.608850][ T4586] bridge0: port 3(team0) entered disabled state [ 67.612241][ T4586] device team0 entered promiscuous mode [ 67.613867][ T4586] device team_slave_0 entered promiscuous mode [ 67.623308][ T4586] device team_slave_1 entered promiscuous mode [ 67.626019][ T4586] bridge0: port 3(team0) entered blocking state [ 67.627944][ T4586] bridge0: port 3(team0) entered forwarding state [ 68.208520][ T47] Bluetooth: hci5: command 0x0409 tx timeout [ 68.835396][ T4604] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 68.837541][ T4604] IPv6: NLM_F_CREATE should be set when creating new route [ 68.874100][ T4569] chnl_net:caif_netlink_parms(): no params data found [ 69.663939][ T14] cfg80211: failed to load regulatory.db [ 69.784820][ T4614] input: syz1 as /devices/virtual/input/input2 [ 69.857869][ T4437] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 70.553923][ T4299] Bluetooth: hci5: command 0x041b tx timeout [ 70.959846][ T4631] loop3: detected capacity change from 0 to 4096 [ 71.047202][ T4631] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 72.656037][ T47] Bluetooth: hci5: command 0x040f tx timeout [ 72.716003][ T4437] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 72.774324][ T4569] bridge0: port 1(bridge_slave_0) entered blocking state [ 72.776312][ T4569] bridge0: port 1(bridge_slave_0) entered disabled state [ 72.778892][ T4569] device bridge_slave_0 entered promiscuous mode [ 72.848398][ T4650] binder: 4647:4650 tried to acquire reference to desc 0, got 1 instead [ 74.452693][ T4437] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 74.497235][ T4650] binder_alloc: 4647: pid 4647 spamming oneway? 2 buffers allocated for a total size of 5120 [ 74.515532][ T4650] binder_alloc: 4647: pid 4647 spamming oneway? 3 buffers allocated for a total size of 5128 [ 74.679749][ T24] binder: undelivered transaction 11, process died. [ 74.680516][ T47] Bluetooth: hci5: command 0x0419 tx timeout [ 74.682212][ T24] binder: undelivered transaction 12, process died. [ 74.685669][ T4569] bridge0: port 2(bridge_slave_1) entered blocking state [ 74.687694][ T4569] bridge0: port 2(bridge_slave_1) entered disabled state [ 74.690333][ T4569] device bridge_slave_1 entered promiscuous mode [ 74.693852][ T24] binder: undelivered transaction 10, process died. [ 74.697486][ T24] binder: undelivered TRANSACTION_COMPLETE [ 74.699047][ T24] binder: undelivered TRANSACTION_COMPLETE [ 74.700680][ T4659] netlink: 4 bytes leftover after parsing attributes in process `syz.2.74'. [ 74.705279][ T24] binder: undelivered TRANSACTION_COMPLETE [ 74.815220][ C0] vcan0: j1939_tp_rxtimer: 0x00000000d1b07c11: rx timeout, send abort [ 75.315590][ C0] vcan0: j1939_tp_rxtimer: 0x00000000ceae91bc: rx timeout, send abort [ 75.318002][ C0] vcan0: j1939_tp_rxtimer: 0x00000000d1b07c11: abort rx timeout. Force session deactivation [ 75.480303][ T4309] EXT4-fs (loop3): unmounting filesystem. [ 75.608355][ T4437] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 75.634585][ T4569] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 75.652375][ T4569] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 75.701552][ T4569] team0: Port device team_slave_0 added [ 75.711921][ T4569] team0: Port device team_slave_1 added [ 75.713682][ T4673] netlink: 12 bytes leftover after parsing attributes in process `syz.4.79'. [ 75.753074][ T4569] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 75.755205][ T4569] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 75.782842][ T4569] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 75.798032][ T4674] device veth3 entered promiscuous mode [ 75.817966][ C0] vcan0 (unregistered): j1939_tp_rxtimer: 0x00000000ceae91bc: abort rx timeout. Force session deactivation [ 75.822418][ T4569] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 75.824576][ T4569] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 75.842078][ T4569] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 75.936240][ T4569] device hsr_slave_0 entered promiscuous mode [ 76.134891][ T4569] device hsr_slave_1 entered promiscuous mode [ 76.194454][ T4569] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 76.201071][ T4569] Cannot create hsr debugfs directory [ 76.259414][ T27] kauditd_printk_skb: 4 callbacks suppressed [ 76.259447][ T27] audit: type=1326 audit(76.230:16): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4675 comm="syz.2.80" exe="/root/syz-executor" sig=31 arch=c00000b7 syscall=98 compat=0 ip=0xffffa115a8a8 code=0x0 [ 79.108299][ T4707] loop3: detected capacity change from 0 to 512 [ 80.323387][ T4707] EXT2-fs (loop3): warning: mounting ext3 filesystem as ext2 [ 80.806233][ T4727] loop2: detected capacity change from 0 to 128 [ 81.191718][ T4727] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 81.419578][ T4733] binder: 4732:4733 tried to acquire reference to desc 0, got 1 instead [ 81.423144][ T4733] binder: 4732:4733 ioctl c0306201 20000280 returned -14 [ 81.447751][ T4716] binder: undelivered TRANSACTION_COMPLETE [ 81.449530][ T4716] binder: undelivered TRANSACTION_COMPLETE [ 81.529566][ T4722] fscrypt: Error allocating hmac(sha512): -2 [ 81.544592][ T4716] binder: undelivered transaction 18, process died. [ 81.546571][ T4716] binder: undelivered transaction 17, process died. [ 82.934275][ T4752] xt_bpf: check failed: parse error [ 82.945217][ T4296] EXT4-fs (loop2): unmounting filesystem. [ 82.967069][ T4569] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 84.988650][ T4569] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 85.058292][ T4569] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 85.231062][ T4772] netlink: 'syz.3.102': attribute type 4 has an invalid length. [ 85.252620][ T4569] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 86.426172][ T4790] tipc: Started in network mode [ 86.431736][ T4790] tipc: Node identity e2ba5a453f15, cluster identity 4711 [ 86.440981][ T4790] tipc: Enabled bearer , priority 0 [ 86.549918][ T4784] tipc: Resetting bearer [ 86.613046][ T4799] device syzkaller0 entered promiscuous mode [ 86.629805][ T4799] IPv6: ADDRCONF(NETDEV_CHANGE): syzkaller0: link becomes ready [ 86.635669][ T4569] 8021q: adding VLAN 0 to HW filter on device bond0 [ 87.118310][ T4371] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 87.132279][ T4371] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 87.423697][ T4783] tipc: Resetting bearer [ 87.528750][ T4783] tipc: Disabling bearer [ 87.611472][ T4569] 8021q: adding VLAN 0 to HW filter on device team0 [ 87.617557][ T4827] loop2: detected capacity change from 0 to 512 [ 87.670304][ T4827] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support! [ 87.749255][ T4827] EXT4-fs (loop2): 1 orphan inode deleted [ 87.750885][ T4827] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 87.834639][ T4791] Quota error (device loop2): do_check_range: Getting dqdh_entries 15 out of range 0-14 [ 87.837576][ T4791] EXT4-fs error (device loop2): ext4_release_dquot:6850: comm kworker/u4:14: Failed to release dquot type 1 [ 88.677579][ T4371] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 88.680606][ T4371] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 88.683347][ T4371] bridge0: port 1(bridge_slave_0) entered blocking state [ 88.685398][ T4371] bridge0: port 1(bridge_slave_0) entered forwarding state [ 88.694630][ T4371] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 88.708897][ T4371] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 88.733287][ T4371] bridge0: port 2(bridge_slave_1) entered blocking state [ 88.735403][ T4371] bridge0: port 2(bridge_slave_1) entered forwarding state [ 88.760387][ T4371] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 88.769988][ T4371] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 88.782911][ T4296] EXT4-fs (loop2): unmounting filesystem. [ 88.787428][ T4371] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 88.800774][ T4371] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 88.807788][ T4371] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 88.810704][ T4371] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 90.763010][ T4851] netlink: 4 bytes leftover after parsing attributes in process `syz.4.115'. [ 90.765740][ T4851] device bridge_slave_1 left promiscuous mode [ 90.767437][ T4851] bridge0: port 2(bridge_slave_1) entered disabled state [ 90.820492][ T4851] device bridge_slave_0 left promiscuous mode [ 90.822510][ T4851] bridge0: port 1(bridge_slave_0) entered disabled state [ 90.988972][ T4569] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 90.992037][ T4569] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 91.003698][ T4581] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 91.007335][ T4581] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 91.010175][ T4581] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 91.013346][ T4581] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 91.034895][ T4581] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 91.038892][ T4581] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 91.076229][ T4878] device syzkaller0 entered promiscuous mode [ 91.093882][ T4581] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 91.710208][ T4569] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 91.824536][ T4526] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 91.826728][ T4526] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 91.952039][ T4917] loop2: detected capacity change from 0 to 256 [ 93.468079][ T4917] FAT-fs (loop2): Directory bread(block 64) failed [ 93.469977][ T4917] FAT-fs (loop2): Directory bread(block 65) failed [ 93.471913][ T4917] FAT-fs (loop2): Directory bread(block 66) failed [ 93.473703][ T4917] FAT-fs (loop2): Directory bread(block 67) failed [ 93.475548][ T4917] FAT-fs (loop2): Directory bread(block 68) failed [ 93.477368][ T4917] FAT-fs (loop2): Directory bread(block 69) failed [ 93.479230][ T4917] FAT-fs (loop2): Directory bread(block 70) failed [ 93.480969][ T4917] FAT-fs (loop2): Directory bread(block 71) failed [ 93.482799][ T4917] FAT-fs (loop2): Directory bread(block 72) failed [ 93.484605][ T4917] FAT-fs (loop2): Directory bread(block 73) failed [ 93.613257][ T4437] device hsr_slave_0 left promiscuous mode [ 93.622168][ T4922] loop3: detected capacity change from 0 to 512 [ 93.640242][ T4922] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 93.719797][ T4437] device hsr_slave_1 left promiscuous mode [ 93.745969][ T4922] EXT4-fs (loop3): 1 truncate cleaned up [ 93.747615][ T4922] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none. [ 93.978571][ T4437] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 94.848138][ T4437] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 94.869649][ T4437] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 94.871814][ T4437] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 94.880895][ T4437] device bridge_slave_1 left promiscuous mode [ 94.893733][ T4437] bridge0: port 2(bridge_slave_1) entered disabled state [ 94.977956][ T4437] device bridge_slave_0 left promiscuous mode [ 94.979967][ T4437] bridge0: port 1(bridge_slave_0) entered disabled state [ 95.060033][ T4309] EXT4-fs (loop3): unmounting filesystem. [ 95.240929][ T4437] device veth1_macvtap left promiscuous mode [ 95.242885][ T4437] device veth0_macvtap left promiscuous mode [ 95.245461][ T4437] device veth1_vlan left promiscuous mode [ 95.247189][ T4437] device veth0_vlan left promiscuous mode [ 98.409407][ T4437] team0 (unregistering): Port device team_slave_1 removed [ 98.575980][ T4437] team0 (unregistering): Port device team_slave_0 removed [ 98.726038][ T4437] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 98.944906][ T4437] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 101.366867][ T4437] bond0 (unregistering): Released all slaves [ 101.613177][ T4919] tipc: Started in network mode [ 101.614651][ T4919] tipc: Node identity ac1414aa, cluster identity 4711 [ 101.617317][ T4919] tipc: Enabled bearer , priority 10 [ 101.628813][ T4971] netlink: 28 bytes leftover after parsing attributes in process `syz.2.137'. [ 101.631333][ T4971] netlink: 28 bytes leftover after parsing attributes in process `syz.2.137'. [ 101.664396][ T4930] tipc: Enabled bearer , priority 0 [ 101.799611][ T4981] MPTCP: kernel_bind error, err=-98 [ 101.964363][ T4985] netlink: 8 bytes leftover after parsing attributes in process `syz.2.139'. [ 103.170259][ T4347] tipc: Node number set to 2886997162 [ 103.366071][ T55] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 103.368828][ T55] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 103.382784][ T55] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 103.385673][ T55] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 103.388555][ T55] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 103.546217][ T55] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 103.557267][ T4569] device veth0_vlan entered promiscuous mode [ 105.115945][ T4569] device veth1_vlan entered promiscuous mode [ 105.129460][ T166] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 105.132126][ T166] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 105.134829][ T166] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 105.138023][ T166] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 105.142428][ T4569] device veth0_macvtap entered promiscuous mode [ 105.147565][ T4569] device veth1_macvtap entered promiscuous mode [ 105.177839][ T4569] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 105.187918][ T4569] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 105.194546][ T4569] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 105.197335][ T4569] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 105.254326][ T4569] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 105.257184][ T4569] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 105.259930][ T4569] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 105.262615][ T4569] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 105.270625][ T4299] Bluetooth: hci3: Malformed Event: 0x48 [ 105.280084][ T4569] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 105.283706][ T4453] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 105.293111][ T4453] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 105.297066][ T4453] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 105.325478][ T4569] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 105.334302][ T4569] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 105.336933][ T4569] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 105.339724][ T4569] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 105.366815][ T4569] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 105.369636][ T4569] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 105.382571][ T4569] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 105.392712][ T4569] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 105.402212][ T4569] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 105.444670][ T4569] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 105.447165][ T4569] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 105.476186][ T4569] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 105.478542][ T4569] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 105.506450][ T4453] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 105.509303][ T4453] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 106.326141][ T4842] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 106.329069][ T4842] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 106.339426][ T4395] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 108.805053][ T4526] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 108.807470][ T4526] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 108.821155][ T4526] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 108.910049][ T5046] loop3: detected capacity change from 0 to 512 [ 108.912263][ T5046] ======================================================= [ 108.912263][ T5046] WARNING: The mand mount option has been deprecated and [ 108.912263][ T5046] and is ignored by this kernel. Remove the mand [ 108.912263][ T5046] option from the mount to silence this warning. [ 108.912263][ T5046] ======================================================= [ 108.947141][ T5046] EXT2-fs (loop3): warning: feature flags set on rev 0 fs, running e2fsck is recommended [ 108.949780][ T5046] EXT2-fs (loop3): error: couldn't mount RDWR because of unsupported optional features (1000000) [ 108.995531][ T4977] I/O error, dev loop3, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 109.174256][ T4347] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 109.340707][ T5060] netlink: 4 bytes leftover after parsing attributes in process `syz.5.158'. [ 109.358504][ T4347] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 109.362247][ T4347] usb 1-1: New USB device found, idVendor=056e, idProduct=00fc, bcdDevice= 0.00 [ 109.367105][ T4347] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 109.388800][ T4347] usb 1-1: config 0 descriptor?? [ 109.467381][ T47] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 109.475126][ T47] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 109.477802][ T47] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 109.481340][ T47] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 109.483769][ T47] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 109.486247][ T47] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 109.678182][ T5074] trusted_key: encrypted_key: insufficient parameters specified [ 110.764782][ T4347] usbhid 1-1:0.0: can't add hid device: -71 [ 110.766701][ T4347] usbhid: probe of 1-1:0.0 failed with error -71 [ 110.777703][ T4437] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 110.780732][ T4347] usb 1-1: USB disconnect, device number 2 [ 110.791415][ T5089] loop5: detected capacity change from 0 to 8 [ 110.833351][ T5089] SQUASHFS error: zlib decompression failed, data probably corrupt [ 110.840085][ T5089] SQUASHFS error: Failed to read block 0x9b: -5 [ 110.842876][ T5089] SQUASHFS error: Unable to read metadata cache entry [99] [ 110.864244][ T5089] SQUASHFS error: Unable to read inode 0x127 [ 110.902968][ T4437] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 110.918020][ T4977] I/O error, dev loop5, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 111.050314][ T5099] loop5: detected capacity change from 0 to 2048 [ 111.078487][ T5099] loop5: p2 p3 < > p4 < p5 > [ 111.079978][ T5099] loop5: partition table partially beyond EOD, truncated [ 111.081931][ T4437] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 111.095841][ T5099] loop5: p3 start 4284289 is beyond EOD, truncated [ 111.245777][ T5104] loop4: detected capacity change from 0 to 1024 [ 111.329475][ T5104] EXT4-fs (loop4): revision level too high, forcing read-only mode [ 111.714300][ T4299] Bluetooth: hci0: command 0x0409 tx timeout [ 112.134662][ T4437] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 112.139623][ T5104] EXT4-fs (loop4): orphan cleanup on readonly fs [ 112.147699][ T5104] EXT4-fs error (device loop4): ext4_free_blocks:6210: comm syz.4.167: Freeing blocks not in datazone - block = 0, count = 4096 [ 112.182649][ T5104] EXT4-fs (loop4): 1 orphan inode deleted [ 112.194713][ T5104] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 114.011853][ T4307] EXT4-fs (loop4): unmounting filesystem. [ 114.110980][ T47] Bluetooth: hci0: command 0x041b tx timeout [ 114.208483][ T5064] chnl_net:caif_netlink_parms(): no params data found [ 115.259728][ T5064] bridge0: port 1(bridge_slave_0) entered blocking state [ 115.262025][ T5064] bridge0: port 1(bridge_slave_0) entered disabled state [ 115.282284][ T5064] device bridge_slave_0 entered promiscuous mode [ 115.289062][ T5064] bridge0: port 2(bridge_slave_1) entered blocking state [ 115.292368][ T5064] bridge0: port 2(bridge_slave_1) entered disabled state [ 115.344241][ T5064] device bridge_slave_1 entered promiscuous mode [ 115.430240][ T5152] binder: 5151:5152 tried to acquire reference to desc 0, got 1 instead [ 115.502427][ T5064] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 115.514505][ T5064] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 115.644229][ T24] binder: undelivered transaction 24, process died. [ 115.646071][ T24] binder: undelivered transaction 23, process died. [ 116.164306][ T5064] team0: Port device team_slave_0 added [ 116.214348][ T4299] Bluetooth: hci0: command 0x040f tx timeout [ 116.363637][ T5167] loop3: detected capacity change from 0 to 128 [ 116.371354][ T24] binder: undelivered TRANSACTION_COMPLETE [ 116.373045][ T24] binder: undelivered TRANSACTION_COMPLETE [ 116.389871][ T5167] FAT-fs (loop3): bogus logical sector size 0 [ 116.391650][ T5167] FAT-fs (loop3): Can't find a valid FAT filesystem [ 116.428523][ T4977] I/O error, dev loop3, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 116.454807][ T5064] team0: Port device team_slave_1 added [ 116.547899][ T5064] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 116.549761][ T5064] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 116.570455][ T5064] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 116.589063][ T5064] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 116.590968][ T5064] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 116.629570][ T5064] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 116.904289][ T5064] device hsr_slave_0 entered promiscuous mode [ 117.369411][ T5064] device hsr_slave_1 entered promiscuous mode [ 117.626423][ T5181] netlink: 8 bytes leftover after parsing attributes in process `syz.0.183'. [ 117.628841][ T5181] netlink: 'syz.0.183': attribute type 5 has an invalid length. [ 117.630895][ T5181] netlink: 28 bytes leftover after parsing attributes in process `syz.0.183'. [ 117.645784][ T5181] netdevsim netdevsim0 netdevsim0: set [1, 1] type 2 family 0 port 256 - 0 [ 117.648207][ T5181] netdevsim netdevsim0 netdevsim1: set [1, 1] type 2 family 0 port 256 - 0 [ 117.650521][ T5181] netdevsim netdevsim0 netdevsim2: set [1, 1] type 2 family 0 port 256 - 0 [ 117.652864][ T5181] netdevsim netdevsim0 netdevsim3: set [1, 1] type 2 family 0 port 256 - 0 [ 117.656194][ T5181] device geneve2 entered promiscuous mode [ 118.398559][ T47] Bluetooth: hci0: command 0x0419 tx timeout [ 120.235794][ T5216] device syz_tun entered promiscuous mode [ 120.237521][ T5216] device vlan2 entered promiscuous mode [ 121.418432][ T27] audit: type=1326 audit(377.387:17): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5234 comm="syz.3.194" exe="/root/syz-executor" sig=31 arch=c00000b7 syscall=98 compat=0 ip=0xffffab15a8a8 code=0x0 [ 121.518275][ T5230] loop5: detected capacity change from 0 to 32768 [ 122.470377][ T5230] XFS (loop5): Mounting V5 Filesystem [ 122.582699][ T5230] XFS (loop5): Ending clean mount [ 122.593291][ T5230] XFS (loop5): Quotacheck needed: Please wait. [ 122.718630][ T5230] XFS (loop5): Quotacheck: Done. [ 123.036259][ T5265] xt_nat: multiple ranges no longer supported [ 123.779961][ T5064] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 123.806269][ T4569] XFS (loop5): Unmounting Filesystem [ 123.818957][ T5064] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 124.556505][ T5064] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 124.654556][ T5064] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 124.900727][ T4437] device hsr_slave_0 left promiscuous mode [ 125.805314][ T4437] device hsr_slave_1 left promiscuous mode [ 125.865546][ T4437] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 125.867804][ T4437] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 125.871925][ T4437] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 125.878901][ T4437] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 125.885992][ T4437] device bridge_slave_1 left promiscuous mode [ 125.891639][ T4437] bridge0: port 2(bridge_slave_1) entered disabled state [ 125.897972][ T5299] loop3: detected capacity change from 0 to 512 [ 125.945486][ T2059] ieee802154 phy0 wpan0: encryption failed: -22 [ 125.947278][ T2059] ieee802154 phy1 wpan1: encryption failed: -22 [ 125.960659][ T4437] device bridge_slave_0 left promiscuous mode [ 125.962525][ T4437] bridge0: port 1(bridge_slave_0) entered disabled state [ 126.049030][ T4309] syz-executor: attempt to access beyond end of device [ 126.049030][ T4309] loop3: rw=0, sector=1022032, nr_sectors = 8 limit=512 [ 126.056917][ T4309] EXT2-fs (loop3): error: ext2_readdir: bad page in #2 [ 126.134779][ T4437] device veth1_macvtap left promiscuous mode [ 126.136493][ T4437] device veth0_macvtap left promiscuous mode [ 126.138895][ T4437] device veth1_vlan left promiscuous mode [ 126.140661][ T4437] device veth0_vlan left promiscuous mode [ 126.927187][ T5313] binder: 5311:5313 tried to acquire reference to desc 0, got 1 instead [ 126.930777][ T5313] binder: release 5311:5313 transaction 29 out, still active [ 126.964295][ T5313] binder: undelivered TRANSACTION_COMPLETE [ 127.712736][ T4348] binder: send failed reply for transaction 29, target dead [ 127.962410][ T4437] team0 (unregistering): Port device team_slave_1 removed [ 128.956374][ T4437] team0 (unregistering): Port device team_slave_0 removed [ 129.815876][ T4437] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 130.144979][ T4437] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 131.373986][ T5332] loop5: detected capacity change from 0 to 8 [ 131.695973][ T5332] SQUASHFS error: Failed to read block 0x4e8: -5 [ 131.698287][ T5332] SQUASHFS error: Failed to read block 0x4de: -5 [ 131.700336][ T5332] SQUASHFS error: Failed to read block 0x4de: -5 [ 131.702616][ T5332] SQUASHFS error: Failed to read block 0x4de: -5 [ 131.704686][ T5332] SQUASHFS error: Failed to read block 0x4de: -5 [ 131.706951][ T5332] SQUASHFS error: Failed to read block 0x4de: -5 [ 131.708924][ T5332] SQUASHFS error: Failed to read block 0x4de: -5 [ 131.710786][ T5332] SQUASHFS error: Failed to read block 0x4de: -5 [ 131.712711][ T5332] SQUASHFS error: Failed to read block 0x4de: -5 [ 131.714972][ T5332] SQUASHFS error: Failed to read block 0x4de: -5 [ 131.717008][ T5332] SQUASHFS error: Failed to read block 0x4de: -5 [ 131.719176][ T5332] SQUASHFS error: Failed to read block 0x4de: -5 [ 131.721249][ T5332] SQUASHFS error: Failed to read block 0x4de: -5 [ 131.723457][ T5332] SQUASHFS error: Failed to read block 0x4de: -5 [ 131.725736][ T5332] SQUASHFS error: Failed to read block 0x4de: -5 [ 131.727950][ T5332] SQUASHFS error: Failed to read block 0x4de: -5 [ 131.729982][ T5332] SQUASHFS error: Failed to read block 0x4de: -5 [ 131.732269][ T5332] SQUASHFS error: Failed to read block 0x4de: -5 [ 131.734385][ T5332] SQUASHFS error: Failed to read block 0x4de: -5 [ 131.736715][ T5332] SQUASHFS error: Failed to read block 0x4de: -5 [ 131.738750][ T5332] SQUASHFS error: Failed to read block 0x4de: -5 [ 131.740737][ T5332] SQUASHFS error: Failed to read block 0x4de: -5 [ 131.742854][ T5332] SQUASHFS error: Failed to read block 0x4de: -5 [ 131.745044][ T5332] SQUASHFS error: Failed to read block 0x4de: -5 [ 131.747172][ T5332] SQUASHFS error: Failed to read block 0x4de: -5 [ 131.749424][ T5332] SQUASHFS error: Failed to read block 0x4de: -5 [ 131.751460][ T5332] SQUASHFS error: Failed to read block 0x4de: -5 [ 131.753798][ T5332] SQUASHFS error: Failed to read block 0x4de: -5 [ 131.755920][ T5332] SQUASHFS error: Failed to read block 0x4de: -5 [ 131.758166][ T5332] SQUASHFS error: Failed to read block 0x4de: -5 [ 131.760171][ T5332] SQUASHFS error: Failed to read block 0x4de: -5 [ 131.762287][ T5332] SQUASHFS error: Failed to read block 0x4de: -5 [ 133.059346][ T5338] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 133.062077][ T5338] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 133.720184][ T4437] bond0 (unregistering): Released all slaves [ 134.318370][ T5291] device gtp0 entered promiscuous mode [ 134.849140][ T5064] 8021q: adding VLAN 0 to HW filter on device bond0 [ 134.910681][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 134.913182][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 135.709981][ T5064] 8021q: adding VLAN 0 to HW filter on device team0 [ 135.763075][ T5358] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 135.770040][ T5358] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 135.801509][ T5358] bridge0: port 1(bridge_slave_0) entered blocking state [ 135.803628][ T5358] bridge0: port 1(bridge_slave_0) entered forwarding state [ 135.811248][ T5358] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 135.822334][ T5358] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 135.826918][ T5358] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 135.841113][ T5358] bridge0: port 2(bridge_slave_1) entered blocking state [ 135.843171][ T5358] bridge0: port 2(bridge_slave_1) entered forwarding state [ 135.860450][ T5358] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 135.924418][ T4453] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 135.927963][ T4453] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 135.940471][ T4453] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 135.968957][ T4453] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 136.674615][ T5064] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 136.677353][ T5064] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 136.685127][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 136.687890][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 136.690477][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 136.693028][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 136.712569][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 136.715929][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 136.726743][ T4504] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 137.625113][ T47] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 137.635672][ T47] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 137.638891][ T47] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 137.642002][ T47] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 137.647717][ T47] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 137.649840][ T47] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 139.905059][ T47] Bluetooth: hci1: command 0x0409 tx timeout [ 140.551815][ T5414] Bluetooth: MGMT ver 1.22 [ 141.449840][ T5064] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 141.452020][ T166] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 141.455388][ T166] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 141.634778][ T5428] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2 [ 141.637574][ T5428] platform regulatory.0: Falling back to sysfs fallback for: regulatory.db [ 141.797639][ T5440] loop4: detected capacity change from 0 to 2048 [ 141.803857][ T5440] EXT4-fs (loop4): invalid inodes per group: 1 [ 141.803857][ T5440] [ 142.226515][ T47] Bluetooth: hci1: command 0x041b tx timeout [ 144.607294][ T47] Bluetooth: hci1: command 0x040f tx timeout [ 144.612272][ T5379] chnl_net:caif_netlink_parms(): no params data found [ 145.153017][ T4437] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 145.766730][ T4437] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 146.601816][ T4437] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 146.623387][ T5379] bridge0: port 1(bridge_slave_0) entered blocking state [ 146.640784][ T5379] bridge0: port 1(bridge_slave_0) entered disabled state [ 146.646492][ T5379] device bridge_slave_0 entered promiscuous mode [ 146.655242][ T4371] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 146.658059][ T4371] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 146.664521][ T47] Bluetooth: hci1: command 0x0419 tx timeout [ 146.778271][ T4437] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 146.823762][ T5064] device veth0_vlan entered promiscuous mode [ 146.829548][ T5064] device veth1_vlan entered promiscuous mode [ 146.835855][ T5379] bridge0: port 2(bridge_slave_1) entered blocking state [ 146.837794][ T5379] bridge0: port 2(bridge_slave_1) entered disabled state [ 146.840224][ T5379] device bridge_slave_1 entered promiscuous mode [ 146.842806][ T5358] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 146.861468][ T5358] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 146.867327][ T5358] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 146.870679][ T5358] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 146.873289][ T5358] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 147.416399][ T5358] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 147.688497][ T5358] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 147.699262][ T5358] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 148.220528][ T5064] device veth0_macvtap entered promiscuous mode [ 148.283463][ T4453] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 148.503509][ T5379] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 148.582097][ T5064] device veth1_macvtap entered promiscuous mode [ 148.655133][ T5513] loop5: detected capacity change from 0 to 8192 [ 149.699926][ T5379] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 150.671818][ T5064] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 150.734659][ T5064] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 150.737432][ T5064] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 150.767925][ T5064] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 150.770796][ T5064] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 150.773641][ T5064] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 150.888408][ T5064] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 150.891633][ T5064] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 150.900856][ T5064] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 150.956324][ T5358] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 150.959209][ T5358] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 150.992069][ T5064] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 151.156055][ T5064] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 151.201775][ T5064] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 151.234078][ T5064] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 151.306758][ T5064] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 151.541245][ T5064] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 151.680595][ T5064] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 151.683379][ T5064] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 151.699569][ T5064] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 151.708002][ T5379] team0: Port device team_slave_0 added [ 151.718348][ T5379] team0: Port device team_slave_1 added [ 151.850748][ T5545] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 151.853726][ T5545] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 151.860801][ T5064] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 151.863275][ T5064] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 151.866723][ T5064] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 151.869145][ T5064] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 151.877964][ T5379] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 151.879864][ T5379] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 151.887172][ T4437] tipc: Left network mode [ 151.933943][ T5379] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 152.732867][ T5379] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 152.735422][ T5379] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 152.742523][ T5379] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 152.911315][ T39] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 152.913621][ T39] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 152.919088][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 152.976438][ T5379] device hsr_slave_0 entered promiscuous mode [ 153.017821][ T5379] device hsr_slave_1 entered promiscuous mode [ 153.084332][ T5379] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 153.086451][ T5379] Cannot create hsr debugfs directory [ 153.161147][ T5545] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 153.163460][ T5545] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 153.180282][ T4371] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 153.321509][ T5573] loop5: detected capacity change from 0 to 1024 [ 153.371450][ T5575] netlink: 4 bytes leftover after parsing attributes in process `syz.6.157'. [ 153.455912][ T5545] hfsplus: b-tree write err: -5, ino 4 [ 153.616129][ T5586] loop5: detected capacity change from 0 to 512 [ 153.624512][ T4346] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 154.384943][ T4346] usb 1-1: Using ep0 maxpacket: 16 [ 154.799280][ T4346] usb 1-1: New USB device found, idVendor=056a, idProduct=0325, bcdDevice= 0.00 [ 154.801818][ T4346] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 154.828887][ T4346] usb 1-1: config 0 descriptor?? [ 154.861532][ T5379] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 155.011064][ T5379] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 155.041538][ T5379] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 155.048715][ T5586] EXT4-fs (loop5): Test dummy encryption mode enabled [ 155.050622][ T5586] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode [ 155.071974][ T5586] EXT4-fs error (device loop5): ext4_orphan_get:1426: comm syz.5.264: bad orphan inode 131083 [ 155.081529][ T5586] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: none. [ 155.190039][ T5379] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 155.294079][ T4346] usbhid 1-1:0.0: can't add hid device: -71 [ 155.295982][ T4346] usbhid: probe of 1-1:0.0 failed with error -71 [ 155.333607][ T4346] usb 1-1: USB disconnect, device number 3 [ 155.493387][ T5379] 8021q: adding VLAN 0 to HW filter on device bond0 [ 155.532384][ T4569] EXT4-fs (loop5): unmounting filesystem. [ 155.566170][ T4526] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 155.568742][ T4526] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 155.576942][ T5379] 8021q: adding VLAN 0 to HW filter on device team0 [ 155.581081][ T4371] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 155.583943][ T4371] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 155.589492][ T4371] bridge0: port 1(bridge_slave_0) entered blocking state [ 155.591394][ T4371] bridge0: port 1(bridge_slave_0) entered forwarding state [ 155.604437][ T4371] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 155.822429][ T4371] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 155.825340][ T4371] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 155.827893][ T4371] bridge0: port 2(bridge_slave_1) entered blocking state [ 155.829817][ T4371] bridge0: port 2(bridge_slave_1) entered forwarding state [ 155.837811][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 155.844998][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 155.850369][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 155.855329][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 155.935349][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 155.938048][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 155.940950][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 155.947247][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 155.958360][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 156.070918][ T5636] loop6: detected capacity change from 0 to 8192 [ 157.158259][ T5379] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 157.191864][ T5379] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 158.154559][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 158.166042][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 158.439778][ T39] bridge0: port 2(bridge_slave_1) entered disabled state [ 160.137640][ T4437] device hsr_slave_0 left promiscuous mode [ 160.215130][ T4437] device hsr_slave_1 left promiscuous mode [ 160.455936][ T4437] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 160.458199][ T4437] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 160.460887][ T4437] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 160.464830][ T4437] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 160.470605][ T4437] device team0 left promiscuous mode [ 161.727664][ T4437] device team_slave_0 left promiscuous mode [ 161.729766][ T4437] device team_slave_1 left promiscuous mode [ 161.731541][ T4437] bridge0: port 3(team0) entered disabled state [ 161.885383][ T5694] loop4: detected capacity change from 0 to 128 [ 161.899436][ T4437] device bridge_slave_1 left promiscuous mode [ 161.908033][ T4437] bridge0: port 2(bridge_slave_1) entered disabled state [ 161.947475][ T5694] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 161.949980][ T5694] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 161.966117][ T4437] device bridge_slave_0 left promiscuous mode [ 161.967919][ T4437] bridge0: port 1(bridge_slave_0) entered disabled state [ 162.124578][ T4437] device veth1_macvtap left promiscuous mode [ 162.126363][ T4437] device veth0_macvtap left promiscuous mode [ 162.128084][ T4437] device veth1_vlan left promiscuous mode [ 162.129744][ T4437] device veth0_vlan left promiscuous mode [ 162.651886][ T5714] netlink: 32 bytes leftover after parsing attributes in process `syz.4.286'. [ 163.864578][ T4299] Bluetooth: hci2: command 0x0406 tx timeout [ 163.865261][ T47] Bluetooth: hci3: command 0x0406 tx timeout [ 164.607011][ T4437] team0 (unregistering): Port device team_slave_1 removed [ 164.787432][ T4437] team0 (unregistering): Port device team_slave_0 removed [ 164.985854][ T4437] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 165.206306][ T4437] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 167.597692][ T4437] bond0 (unregistering): Released all slaves [ 167.838517][ T5379] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 167.880850][ T4664] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 167.883283][ T4664] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 167.934830][ T5726] netlink: 12 bytes leftover after parsing attributes in process `syz.5.288'. [ 167.991345][ T5726] bridge1: port 1(ip6gretap1) entered blocking state [ 167.993440][ T5726] bridge1: port 1(ip6gretap1) entered disabled state [ 168.026181][ T5726] device ip6gretap1 entered promiscuous mode [ 168.085205][ T5731] device veth3 entered promiscuous mode [ 168.110391][ T5731] bridge1: port 2(veth3) entered blocking state [ 168.112225][ T5731] bridge1: port 2(veth3) entered disabled state [ 168.278030][ T5738] loop4: detected capacity change from 0 to 1024 [ 169.122880][ T5738] EXT4-fs error (device loop4): ext4_ext_check_inode:520: inode #3: comm syz.4.292: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 3, max 3(4), depth 0(0) [ 169.128339][ T5738] EXT4-fs error (device loop4): ext4_quota_enable:7025: comm syz.4.292: Bad quota inode: 3, type: 0 [ 169.134499][ T5738] EXT4-fs warning (device loop4): ext4_enable_quotas:7066: Failed to enable quota tracking (type=0, err=-117, ino=3). Please run e2fsck to fix. [ 169.139560][ T5738] EXT4-fs (loop4): mount failed [ 171.439418][ T166] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 171.442551][ T166] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 172.265810][ T473] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 172.268606][ T473] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 172.271478][ T473] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 172.284610][ T473] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 172.315041][ T5379] device veth0_vlan entered promiscuous mode [ 172.342285][ T5379] device veth1_vlan entered promiscuous mode [ 172.452468][ T473] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 172.455579][ T473] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 172.459228][ T473] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 172.495217][ T473] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 172.499670][ T5775] loop5: detected capacity change from 0 to 128 [ 172.508634][ T5379] device veth0_macvtap entered promiscuous mode [ 172.525564][ T5379] device veth1_macvtap entered promiscuous mode [ 173.576118][ T5767] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 173.580749][ T5379] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 173.583650][ T5379] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 173.593140][ T5379] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 173.613547][ T5379] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 173.616281][ T5379] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 173.684285][ T5379] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 173.702809][ T5379] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 173.706230][ T5775] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 173.725783][ T5775] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 173.729703][ T5379] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 173.750661][ T5379] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 173.754780][ T4664] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 173.761834][ T4664] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 174.729632][ T5379] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 174.732593][ T5379] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 174.793325][ T5379] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 174.800449][ T5379] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 174.803105][ T5379] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 174.817435][ T5379] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 174.820198][ T5379] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 174.832766][ T5379] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 174.839374][ T5379] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 174.849427][ T4664] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 174.856672][ T4664] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 174.874020][ T5379] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 174.893248][ T5379] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 174.904415][ T5379] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 174.907138][ T5379] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 175.071219][ T5813] tipc: Started in network mode [ 175.072600][ T5813] tipc: Node identity ac1414aa, cluster identity 4711 [ 175.075400][ T5813] tipc: Enabled bearer , priority 10 [ 175.087484][ T5815] loop5: detected capacity change from 0 to 128 [ 175.156732][ T5545] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 175.159138][ T5545] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 175.161392][ T5815] EXT4-fs (loop5): Test dummy encryption mode enabled [ 175.175419][ T4453] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 175.179522][ T4371] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 175.188272][ T5724] udevd[5724]: incorrect ext4 checksum on /dev/loop5 [ 175.189392][ T4371] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 175.193567][ T5815] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: none. [ 175.565864][ T473] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 175.866258][ T5815] netlink: 4 bytes leftover after parsing attributes in process `syz.5.307'. [ 175.922552][ T5815] netlink: 4 bytes leftover after parsing attributes in process `syz.5.307'. [ 176.102799][ T4569] EXT4-fs (loop5): unmounting filesystem. [ 176.359538][ T112] tipc: Node number set to 2886997162 [ 179.772119][ T47] Bluetooth: hci1: command 0x0405 tx timeout [ 181.816429][ T5867] netdevsim netdevsim7 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 181.819027][ T5867] netdevsim netdevsim7 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 181.821305][ T5867] netdevsim netdevsim7 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 181.823671][ T5867] netdevsim netdevsim7 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 181.828489][ T5879] loop6: detected capacity change from 0 to 128 [ 181.848063][ T5867] bond0: (slave vxlan0): Enslaving as an active interface with an up link [ 181.864953][ T5879] EXT4-fs (loop6): Test dummy encryption mode enabled [ 181.911583][ T5879] EXT4-fs (loop6): mounted filesystem without journal. Quota mode: none. [ 181.924016][ T5879] netlink: 4 bytes leftover after parsing attributes in process `syz.6.321'. [ 181.940336][ T5883] xt_hashlimit: overflow, try lower: 18446744073709551615/255 [ 181.951809][ T5879] netlink: 4 bytes leftover after parsing attributes in process `syz.6.321'. [ 182.103666][ T5064] EXT4-fs (loop6): unmounting filesystem. [ 182.135765][ T5889] set match dimension is over the limit! [ 187.386613][ T2059] ieee802154 phy0 wpan0: encryption failed: -22 [ 187.389062][ T2059] ieee802154 phy1 wpan1: encryption failed: -22 [ 189.432494][ T27] audit: type=1326 audit(445.397:18): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5963 comm="syz.7.340" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff9d55a8a8 code=0x7ffc0000 [ 189.441261][ T5966] netlink: 76 bytes leftover after parsing attributes in process `syz.5.341'. [ 189.444945][ T27] audit: type=1326 audit(445.407:19): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5963 comm="syz.7.340" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=172 compat=0 ip=0xffff9d55a8a8 code=0x7ffc0000 [ 189.461098][ T27] audit: type=1326 audit(445.417:20): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5963 comm="syz.7.340" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff9d55a8a8 code=0x7ffc0000 [ 189.491503][ T27] audit: type=1326 audit(445.417:21): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5963 comm="syz.7.340" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=434 compat=0 ip=0xffff9d55a8a8 code=0x7ffc0000 [ 189.523360][ T5959] netlink: 4 bytes leftover after parsing attributes in process `syz.0.336'. [ 189.545053][ T27] audit: type=1326 audit(445.417:22): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5963 comm="syz.7.340" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff9d55a8a8 code=0x7ffc0000 [ 189.550860][ T27] audit: type=1326 audit(445.417:23): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5963 comm="syz.7.340" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=268 compat=0 ip=0xffff9d55a8a8 code=0x7ffc0000 [ 189.555683][ T5959] netlink: 4 bytes leftover after parsing attributes in process `syz.0.336'. [ 189.576075][ T27] audit: type=1326 audit(445.417:24): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5963 comm="syz.7.340" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff9d55a8a8 code=0x7ffc0000 [ 189.624185][ T27] audit: type=1326 audit(445.417:25): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5963 comm="syz.7.340" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=39 compat=0 ip=0xffff9d55a8a8 code=0x7ffc0000 [ 190.161532][ T27] audit: type=1326 audit(445.417:26): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5963 comm="syz.7.340" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff9d55a8a8 code=0x7ffc0000 [ 190.292839][ T4306] Bluetooth: hci5: command 0x0406 tx timeout [ 190.434529][ T27] audit: type=1326 audit(445.437:27): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5963 comm="syz.7.340" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=436 compat=0 ip=0xffff9d55a8a8 code=0x7ffc0000 [ 191.407487][ T5986] netlink: 28 bytes leftover after parsing attributes in process `syz.7.348'. [ 193.088933][ T6012] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 193.091176][ T6012] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 193.093349][ T6012] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 193.095195][ T6012] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 193.097156][ T6012] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 193.098904][ T6012] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 193.100843][ T6012] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 193.102468][ T6012] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 193.104462][ T6012] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 193.106223][ T6012] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 193.779007][ T6011] loop5: detected capacity change from 0 to 512 [ 193.882038][ T6011] EXT4-fs (loop5): orphan cleanup on readonly fs [ 193.919279][ T6011] EXT4-fs error (device loop5): ext4_validate_block_bitmap:438: comm syz.5.354: bg 0: block 248: padding at end of block bitmap is not set [ 193.950316][ T6013] netlink: 12 bytes leftover after parsing attributes in process `syz.6.353'. [ 193.984786][ T6011] EXT4-fs error (device loop5): ext4_acquire_dquot:6814: comm syz.5.354: Failed to acquire dquot type 1 [ 194.027960][ T6011] EXT4-fs (loop5): 1 truncate cleaned up [ 194.124067][ T6011] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: writeback. [ 195.047188][ T6037] EXT4-fs (loop5): warning: mounting fs with errors, running e2fsck is recommended [ 195.099097][ T6037] EXT4-fs (loop5): re-mounted. Quota mode: writeback. [ 195.101791][ T6042] __quota_error: 4 callbacks suppressed [ 195.101802][ T6042] Quota error (device loop5): do_check_range: Getting block 1536 out of range 0-5 [ 196.112866][ T6011] could not allocate digest TFM handle sha1-ssse3 [ 197.634320][ T6065] loop4: detected capacity change from 0 to 256 [ 197.664592][ T6065] exfat: Deprecated parameter 'utf8' [ 197.667310][ T6065] exfat: Deprecated parameter 'namecase' [ 197.670872][ T6065] exfat: Deprecated parameter 'namecase' [ 197.673107][ T6065] exfat: Deprecated parameter 'utf8' [ 198.639497][ T6065] exFAT-fs (loop4): failed to load upcase table (idx : 0x00012153, chksum : 0xc9bffc20, utbl_chksum : 0xe619d30d) [ 199.286442][ T4569] EXT4-fs (loop5): unmounting filesystem. [ 202.002046][ T6099] loop4: detected capacity change from 0 to 512 [ 202.029772][ T6099] Quota error (device loop4): v2_read_file_info: Number of blocks too big for quota file size (268288 > 6144). [ 202.033516][ T6099] EXT4-fs warning (device loop4): ext4_enable_quotas:7066: Failed to enable quota tracking (type=0, err=-117, ino=3). Please run e2fsck to fix. [ 202.042533][ T6099] EXT4-fs (loop4): mount failed [ 202.970193][ T6110] netlink: 4 bytes leftover after parsing attributes in process `syz.7.374'. [ 202.975256][ T6112] netlink: 'syz.6.376': attribute type 1 has an invalid length. [ 202.995743][ T6110] netlink: 4 bytes leftover after parsing attributes in process `syz.7.374'. [ 203.086906][ T6112] bond1: (slave veth3): Enslaving as an active interface with a down link [ 203.119927][ T6116] loop5: detected capacity change from 0 to 4096 [ 203.242243][ T6112] bond1: (slave veth5): Enslaving as an active interface with a down link [ 203.305635][ T47] Bluetooth: hci3: Controller not accepting commands anymore: ncmd = 0 [ 203.308710][ T47] Bluetooth: hci3: Injecting HCI hardware error event [ 203.311668][ T47] Bluetooth: hci3: hardware error 0x00 [ 204.107266][ T6112] netlink: 28 bytes leftover after parsing attributes in process `syz.6.376'. [ 204.110942][ T6112] 8021q: adding VLAN 0 to HW filter on device bond1 [ 204.594452][ T6140] loop6: detected capacity change from 0 to 256 [ 204.600543][ T6140] exfat: Deprecated parameter 'utf8' [ 204.602256][ T6140] exfat: Deprecated parameter 'namecase' [ 204.604103][ T6140] exfat: Deprecated parameter 'namecase' [ 204.605832][ T6140] exfat: Deprecated parameter 'utf8' [ 204.684816][ T6140] exFAT-fs (loop6): failed to load upcase table (idx : 0x00012153, chksum : 0xc9bffc20, utbl_chksum : 0xe619d30d) [ 205.383424][ T6116] Injecting memory failure for pfn 0x137a3c at process virtual address 0x20000000 [ 205.530400][ T6116] Memory failure: 0x137a3c: corrupted page was clean: dropped without side effects [ 205.558277][ T6116] Memory failure: 0x137a3c: recovery action for clean LRU page: Recovered [ 205.560646][ T6116] Injecting memory failure for pfn 0x124918 at process virtual address 0x20001000 [ 205.571677][ T6116] Memory failure: 0x124918: corrupted page was clean: dropped without side effects [ 205.600099][ T6116] Memory failure: 0x124918: recovery action for clean LRU page: Recovered [ 206.238498][ T47] Bluetooth: hci3: Opcode 0x0c03 failed: -110 [ 206.296066][ T6116] Injecting memory failure for pfn 0x138405 at process virtual address 0x20002000 [ 206.354431][ T6116] Memory failure: 0x138405: corrupted page was clean: dropped without side effects [ 206.369304][ T6116] Memory failure: 0x138405: recovery action for clean LRU page: Recovered [ 206.371613][ T6116] Injecting memory failure for pfn 0x122143 at process virtual address 0x20003000 [ 206.509758][ T6116] Memory failure: 0x122143: corrupted page was clean: dropped without side effects [ 206.531527][ T6116] Memory failure: 0x122143: recovery action for clean LRU page: Recovered [ 206.549713][ T6116] Injecting memory failure for pfn 0x138b53 at process virtual address 0x20004000 [ 206.568690][ T6116] Memory failure: 0x138b53: corrupted page was clean: dropped without side effects [ 206.572838][ T6116] Memory failure: 0x138b53: recovery action for clean LRU page: Recovered [ 206.592519][ T6116] Injecting memory failure for pfn 0x124919 at process virtual address 0x20005000 [ 207.293857][ T6116] Memory failure: 0x124919: corrupted page was clean: dropped without side effects [ 207.304071][ T6116] Memory failure: 0x124919: recovery action for clean LRU page: Recovered [ 207.307232][ T6116] Injecting memory failure for pfn 0x1380ba at process virtual address 0x20006000 [ 207.313735][ T6116] Memory failure: 0x1380ba: corrupted page was clean: dropped without side effects [ 207.334100][ T6116] Memory failure: 0x1380ba: recovery action for clean LRU page: Recovered [ 207.344157][ T6116] Injecting memory failure for pfn 0x138949 at process virtual address 0x20007000 [ 207.449164][ T6116] Memory failure: 0x138949: corrupted page was clean: dropped without side effects [ 207.470192][ T6116] Memory failure: 0x138949: recovery action for clean LRU page: Recovered [ 207.472564][ T6116] Injecting memory failure for pfn 0x136fce at process virtual address 0x20008000 [ 207.475998][ T6116] Memory failure: 0x136fce: corrupted page was clean: dropped without side effects [ 207.478530][ T6116] Memory failure: 0x136fce: recovery action for clean LRU page: Recovered [ 207.548036][ T6116] Injecting memory failure for pfn 0x136f4a at process virtual address 0x20009000 [ 208.314308][ T6116] Memory failure: 0x136f4a: corrupted page was clean: dropped without side effects [ 208.317098][ T6116] Memory failure: 0x136f4a: recovery action for clean LRU page: Recovered [ 208.319512][ T6116] Injecting memory failure for pfn 0x138919 at process virtual address 0x2000a000 [ 208.322045][ T6116] Memory failure: 0x138919: corrupted page was clean: dropped without side effects [ 208.397521][ T6171] serio: Serial port pts0 [ 208.399952][ T6116] Memory failure: 0x138919: recovery action for clean LRU page: Recovered [ 208.402346][ T6116] Injecting memory failure for pfn 0x121947 at process virtual address 0x2000b000 [ 208.409582][ T6116] Memory failure: 0x121947: corrupted page was clean: dropped without side effects [ 208.412270][ T6116] Memory failure: 0x121947: recovery action for clean LRU page: Recovered [ 208.419214][ T6116] Injecting memory failure for pfn 0x136f82 at process virtual address 0x2000c000 [ 208.426511][ T6116] Memory failure: 0x136f82: corrupted page was clean: dropped without side effects [ 208.429320][ T6116] Memory failure: 0x136f82: recovery action for clean LRU page: Recovered [ 208.431694][ T6116] Injecting memory failure for pfn 0x136f38 at process virtual address 0x2000d000 [ 208.441117][ T6116] Memory failure: 0x136f38: corrupted page was clean: dropped without side effects [ 208.443814][ T6116] Memory failure: 0x136f38: recovery action for clean LRU page: Recovered [ 208.449942][ T6116] Injecting memory failure for pfn 0x121b3e at process virtual address 0x2000e000 [ 208.467019][ T6116] Memory failure: 0x121b3e: corrupted page was clean: dropped without side effects [ 208.469741][ T6116] Memory failure: 0x121b3e: recovery action for clean LRU page: Recovered [ 208.472084][ T6116] Injecting memory failure for pfn 0x1248b2 at process virtual address 0x2000f000 [ 208.619051][ T6116] Memory failure: 0x1248b2: corrupted page was clean: dropped without side effects [ 208.650468][ T6116] Memory failure: 0x1248b2: recovery action for clean LRU page: Recovered [ 209.001451][ T4569] ntfs3: loop5: ntfs_evict_inode r=5 failed, -22. [ 209.076986][ T4569] ntfs3: loop5: Mark volume as dirty due to NTFS errors [ 209.339432][ T6195] process 'syz.6.392' launched './file1' with NULL argv: empty string added [ 210.541458][ T6222] loop4: detected capacity change from 0 to 1024 [ 210.726066][ T6223] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 210.726681][ T6230] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 213.093111][ T6246] loop5: detected capacity change from 0 to 1024 [ 213.095481][ T6246] EXT4-fs: Ignoring removed oldalloc option [ 213.097175][ T6246] EXT4-fs: Ignoring removed nobh option [ 213.098655][ T6246] EXT4-fs: Ignoring removed bh option [ 213.150111][ T6246] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 213.703979][ T6246] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: none. [ 214.199642][ T6250] Injecting memory failure for pfn 0x122153 at process virtual address 0x20000000 [ 214.253059][ T6250] Memory failure: 0x122153: recovery action for dirty LRU page: Recovered [ 214.297135][ T6250] Injecting memory failure for pfn 0x122156 at process virtual address 0x20001000 [ 214.666888][ T6275] loop4: detected capacity change from 0 to 2048 [ 214.824556][ T6250] Memory failure: 0x122156: recovery action for dirty LRU page: Recovered [ 214.826878][ T6250] Injecting memory failure for pfn 0x124ec1 at process virtual address 0x20002000 [ 214.840637][ T4569] EXT4-fs (loop5): unmounting filesystem. [ 214.875162][ T6250] Memory failure: 0x124ec1: recovery action for dirty LRU page: Recovered [ 214.877588][ T6250] Injecting memory failure for pfn 0x138ca0 at process virtual address 0x20003000 [ 214.880733][ T6275] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 214.903976][ T6250] Memory failure: 0x138ca0: recovery action for dirty LRU page: Recovered [ 214.933076][ T6250] Injecting memory failure for pfn 0x138ca6 at process virtual address 0x20004000 [ 214.956369][ T6250] Memory failure: 0x138ca6: recovery action for dirty LRU page: Recovered [ 214.958687][ T6250] Injecting memory failure for pfn 0x124c52 at process virtual address 0x20005000 [ 214.993888][ T6275] netlink: 'syz.4.411': attribute type 13 has an invalid length. [ 214.996757][ T6250] Memory failure: 0x124c52: recovery action for dirty LRU page: Recovered [ 214.999115][ T6250] Injecting memory failure for pfn 0x138b49 at process virtual address 0x20006000 [ 215.036866][ T6250] Memory failure: 0x138b49: recovery action for dirty LRU page: Recovered [ 215.039337][ T6250] Injecting memory failure for pfn 0x124c50 at process virtual address 0x20007000 [ 215.045464][ T6250] Memory failure: 0x124c50: recovery action for dirty LRU page: Recovered [ 215.047863][ T6250] Injecting memory failure for pfn 0x138ca3 at process virtual address 0x20008000 [ 215.050434][ T6250] Memory failure: 0x138ca3: recovery action for dirty LRU page: Recovered [ 215.081468][ T4307] EXT4-fs (loop4): unmounting filesystem. [ 215.088036][ T6250] Injecting memory failure for pfn 0x123afd at process virtual address 0x20009000 [ 215.099631][ T6250] Memory failure: 0x123afd: recovery action for dirty LRU page: Recovered [ 215.118414][ T6250] Injecting memory failure for pfn 0x123ba6 at process virtual address 0x2000a000 [ 215.137439][ T6250] Memory failure: 0x123ba6: recovery action for dirty LRU page: Recovered [ 215.139817][ T6250] Injecting memory failure for pfn 0x138ca1 at process virtual address 0x2000b000 [ 215.160183][ T6250] Memory failure: 0x138ca1: recovery action for dirty LRU page: Recovered [ 215.162586][ T6250] Injecting memory failure for pfn 0x138ca2 at process virtual address 0x2000c000 [ 215.188145][ T6250] Memory failure: 0x138ca2: recovery action for dirty LRU page: Recovered [ 215.196033][ T6250] Injecting memory failure for pfn 0x121337 at process virtual address 0x2000d000 [ 215.200952][ T6250] Memory failure: 0x121337: recovery action for dirty LRU page: Recovered [ 215.206719][ T6250] Injecting memory failure for pfn 0x121bd6 at process virtual address 0x2000e000 [ 215.213212][ T6250] Memory failure: 0x121bd6: recovery action for dirty LRU page: Recovered [ 215.219213][ T6250] Injecting memory failure for pfn 0x121bd7 at process virtual address 0x2000f000 [ 215.224035][ T6250] Memory failure: 0x121bd7: recovery action for dirty LRU page: Recovered [ 216.593397][ T4346] net_ratelimit: 1052 callbacks suppressed [ 216.593412][ T4346] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 219.700915][ T6359] loop4: detected capacity change from 0 to 40427 [ 219.748987][ T47] Bluetooth: hci2: Controller not accepting commands anymore: ncmd = 0 [ 219.752728][ T47] Bluetooth: hci2: Injecting HCI hardware error event [ 219.774718][ T4306] Bluetooth: hci2: hardware error 0x00 [ 219.809550][ T4346] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 219.824950][ T112] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 220.191607][ T6359] F2FS-fs (loop4): build fault injection attr: rate: 771, type: 0x3ffff [ 220.205206][ T4541] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 220.205792][ T6359] F2FS-fs (loop4): invalid crc value [ 220.903829][ T6359] F2FS-fs (loop4): Failed to start F2FS issue_checkpoint_thread (-12) [ 220.944556][ T24] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 220.965675][ T6378] netlink: 12 bytes leftover after parsing attributes in process `syz.4.432'. [ 221.985207][ T6389] netlink: 'syz.7.436': attribute type 12 has an invalid length. [ 222.030173][ T6370] Injecting memory failure for pfn 0x13bce8 at process virtual address 0x20000000 [ 222.089372][ T24] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 222.106140][ T6370] Memory failure: 0x13bce8: recovery action for dirty LRU page: Recovered [ 222.108426][ T6370] Injecting memory failure for pfn 0x13bce9 at process virtual address 0x20001000 [ 222.124385][ T6370] Memory failure: 0x13bce9: recovery action for dirty LRU page: Recovered [ 222.126777][ T6370] Injecting memory failure for pfn 0x13bcea at process virtual address 0x20002000 [ 222.146311][ T6370] Memory failure: 0x13bcea: recovery action for dirty LRU page: Recovered [ 222.148795][ T6370] Injecting memory failure for pfn 0x13bceb at process virtual address 0x20003000 [ 222.151684][ T6370] Memory failure: 0x13bceb: recovery action for dirty LRU page: Recovered [ 222.274410][ T6391] XFS (loop4): Invalid superblock magic number [ 223.078518][ T6370] Injecting memory failure for pfn 0x13bcec at process virtual address 0x20004000 [ 223.168394][ T5232] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 223.171138][ T4541] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 223.174367][ T6370] Memory failure: 0x13bcec: recovery action for dirty LRU page: Recovered [ 223.176776][ T6370] Injecting memory failure for pfn 0x13bced at process virtual address 0x20005000 [ 223.194459][ T6370] Memory failure: 0x13bced: recovery action for dirty LRU page: Recovered [ 223.196809][ T6370] Injecting memory failure for pfn 0x13bcee at process virtual address 0x20006000 [ 223.216998][ T6370] Memory failure: 0x13bcee: recovery action for dirty LRU page: Recovered [ 223.219333][ T6370] Injecting memory failure for pfn 0x13bcef at process virtual address 0x20007000 [ 223.241542][ T6370] Memory failure: 0x13bcef: recovery action for dirty LRU page: Recovered [ 223.243860][ T6370] Injecting memory failure for pfn 0x13bcf0 at process virtual address 0x20008000 [ 223.259826][ T6370] Memory failure: 0x13bcf0: recovery action for dirty LRU page: Recovered [ 223.262169][ T6370] Injecting memory failure for pfn 0x13bcf1 at process virtual address 0x20009000 [ 223.271930][ T6370] Memory failure: 0x13bcf1: recovery action for dirty LRU page: Recovered [ 223.272061][ T6411] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 223.283710][ T6411] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 223.285865][ T6370] Injecting memory failure for pfn 0x13bcf2 at process virtual address 0x2000a000 [ 223.295361][ T6370] Memory failure: 0x13bcf2: recovery action for dirty LRU page: Recovered [ 223.297776][ T6370] Injecting memory failure for pfn 0x13bcf3 at process virtual address 0x2000b000 [ 223.308509][ T6414] netlink: 'syz.7.438': attribute type 1 has an invalid length. [ 223.311357][ T6370] Memory failure: 0x13bcf3: recovery action for dirty LRU page: Recovered [ 223.313653][ T6370] Injecting memory failure for pfn 0x13bcf4 at process virtual address 0x2000c000 [ 223.331579][ T6414] 8021q: adding VLAN 0 to HW filter on device bond1 [ 223.336068][ T6370] Memory failure: 0x13bcf4: recovery action for dirty LRU page: Recovered [ 223.338322][ T6370] Injecting memory failure for pfn 0x13bcf5 at process virtual address 0x2000d000 [ 223.350725][ T6370] Memory failure: 0x13bcf5: recovery action for dirty LRU page: Recovered [ 223.353185][ T6370] Injecting memory failure for pfn 0x13bcd0 at process virtual address 0x2000e000 [ 223.360061][ T6370] Memory failure: 0x13bcd0: recovery action for dirty LRU page: Recovered [ 223.388439][ T6370] Injecting memory failure for pfn 0x13bcd1 at process virtual address 0x2000f000 [ 223.415153][ T6370] Memory failure: 0x13bcd1: recovery action for dirty LRU page: Recovered [ 223.464262][ T4306] Bluetooth: hci2: Opcode 0x0c03 failed: -110 [ 223.477550][ T6414] bond1: (slave veth3): Enslaving as an active interface with a down link [ 223.581747][ T6414] bond1: (slave veth0_to_bond): making interface the new active one [ 223.837459][ T6414] device veth0_to_bond entered promiscuous mode [ 224.323308][ T24] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 224.353205][ T6414] bond1: (slave veth0_to_bond): Enslaving as an active interface with an up link [ 224.406327][ T4664] IPv6: ADDRCONF(NETDEV_CHANGE): bond1: link becomes ready [ 224.410778][ T6437] loop6: detected capacity change from 0 to 8 [ 224.412362][ T6433] device veth1 entered promiscuous mode [ 224.413921][ T6437] MTD: Attempt to mount non-MTD device "/dev/loop6" [ 224.421825][ T6433] device veth1 left promiscuous mode [ 224.445160][ T6433] bond1: (slave vlan2): Enslaving as an active interface with an up link [ 224.649899][ T5724] udevd[5724]: incorrect cramfs checksum on /dev/loop6 [ 224.777568][ T6447] cramfs: Error -3 while decompressing! [ 224.779375][ T6447] cramfs: 000000007f46a526(26)->0000000080051986(4096) [ 224.781427][ T6447] cramfs: Error -3 while decompressing! [ 224.783053][ T6447] cramfs: 00000000fd9b8bd9(26)->0000000078259226(4096) [ 224.785234][ T6447] cramfs: Error -3 while decompressing! [ 224.786745][ T6447] cramfs: 0000000030c58439(16)->0000000092c58c2f(4096) [ 224.789083][ T6447] cramfs: Error -3 while decompressing! [ 224.790641][ T6447] cramfs: 000000007f46a526(26)->0000000080051986(4096) [ 225.860445][ T5724] udevd[5724]: incorrect cramfs checksum on /dev/loop6 [ 226.056809][ T24] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 226.063169][ T5724] udevd[5724]: incorrect cramfs checksum on /dev/loop6 [ 226.190181][ T112] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 226.359438][ T6456] netlink: 'syz.7.446': attribute type 13 has an invalid length. [ 226.614491][ T6472] lo speed is unknown, defaulting to 1000 [ 226.657415][ T6472] lo speed is unknown, defaulting to 1000 [ 226.666822][ T6472] lo speed is unknown, defaulting to 1000 [ 227.138324][ T6472] infiniband syz0: set down [ 227.139570][ T6472] infiniband syz0: added lo [ 227.144005][ T6472] infiniband syz0: Couldn't open port 1 [ 227.192150][ T6472] RDS/IB: syz0: added [ 227.193385][ T6472] smc: adding ib device syz0 with port count 1 [ 227.195156][ T6472] smc: ib device syz0 port 1 has pnetid [ 227.197024][ T6472] lo speed is unknown, defaulting to 1000 [ 227.224512][ T24] lo speed is unknown, defaulting to 1000 [ 227.237606][ T6472] lo speed is unknown, defaulting to 1000 [ 227.869235][ T6472] lo speed is unknown, defaulting to 1000 [ 227.901993][ T5232] lo speed is unknown, defaulting to 1000 [ 227.914695][ T4346] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 227.926359][ T6472] lo speed is unknown, defaulting to 1000 [ 227.959725][ T6472] lo speed is unknown, defaulting to 1000 [ 229.131414][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 229.185850][ T4541] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 229.188013][ T4541] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 229.354642][ T112] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 231.203565][ T6499] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 231.206384][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 231.996245][ T5232] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 232.914685][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 232.917503][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 232.924252][ C1] net_ratelimit: 30 callbacks suppressed [ 232.924265][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 232.928144][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 232.930408][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 232.932960][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 232.935410][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 232.937968][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 232.940440][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 232.942971][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 232.945499][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 232.948054][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 234.583275][ T6511] netlink: 'syz.0.457': attribute type 1 has an invalid length. [ 234.618174][ T6511] 8021q: adding VLAN 0 to HW filter on device bond1 [ 234.711340][ T6514] bond1: (slave veth3): Enslaving as an active interface with a down link [ 234.809953][ T6519] bond1: (slave veth0_to_bond): making interface the new active one [ 235.572519][ T6519] device veth0_to_bond entered promiscuous mode [ 235.576271][ T6519] bond1: (slave veth0_to_bond): Enslaving as an active interface with an up link [ 235.610571][ T6524] device veth1 entered promiscuous mode [ 235.612366][ T6524] device veth1 left promiscuous mode [ 235.694546][ T6524] bond1: (slave vlan2): Enslaving as an active interface with an up link [ 235.822332][ T5358] IPv6: ADDRCONF(NETDEV_CHANGE): bond1: link becomes ready [ 236.267726][ T6549] ptrace attach of "./syz-executor exec"[4569] was attempted by " Àÿ Ðÿ ð¥ Àÿ Àÿ Ðÿ àÿ ðÿ °ÿ Àÿ ÿÿÿÿ  "[6549] [ 236.325245][ T5358] bridge0: port 2(bridge_slave_1) entered disabled state [ 236.573239][ T6558] netlink: 28 bytes leftover after parsing attributes in process `syz.6.469'. [ 236.594387][ T47] Bluetooth: hci0: command 0x0406 tx timeout [ 238.365270][ T24] net_ratelimit: 50 callbacks suppressed [ 238.365286][ T24] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 238.561846][ T6576] loop6: detected capacity change from 0 to 1024 [ 238.588142][ T4343] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 238.755000][ T6576] EXT4-fs (loop6): mounted filesystem without journal. Quota mode: writeback. [ 239.432571][ T4501] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 239.445861][ T5232] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 239.566848][ T4526] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 239.571472][ T4501] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 239.766400][ T6612] netlink: 'syz.5.480': attribute type 1 has an invalid length. [ 239.941640][ T4541] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 239.989684][ T6612] 8021q: adding VLAN 0 to HW filter on device bond1 [ 240.710132][ T5232] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 240.804587][ T4501] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 240.882445][ T6618] bond1: (slave veth5): Enslaving as an active interface with a down link [ 240.923006][ T4664] bridge0: port 2(bridge_slave_1) entered disabled state [ 240.961421][ T5064] EXT4-fs (loop6): unmounting filesystem. [ 241.816241][ T5232] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 242.472420][ T6612] bond1: (slave veth0_to_bond): making interface the new active one [ 242.505808][ T6612] device veth0_to_bond entered promiscuous mode [ 242.507967][ T6612] bond1: (slave veth0_to_bond): Enslaving as an active interface with an up link [ 242.527714][ T4504] IPv6: ADDRCONF(NETDEV_CHANGE): bond1: link becomes ready [ 242.553339][ T6618] device veth1 entered promiscuous mode [ 242.713253][ T6618] device veth1 left promiscuous mode [ 242.754976][ T6618] bond1: (slave vlan2): Enslaving as an active interface with an up link [ 243.474572][ T5232] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 243.814443][ T112] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 244.304308][ T112] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 244.321294][ T6656] loop5: detected capacity change from 0 to 1024 [ 244.579286][ T6656] hfsplus: request for non-existent node 33423360 in B*Tree [ 244.581418][ T6656] hfsplus: request for non-existent node 33423360 in B*Tree [ 244.609165][ T5232] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 244.638529][ T6656] hfsplus: request for non-existent node 33423360 in B*Tree [ 244.642129][ T6656] hfsplus: request for non-existent node 33423360 in B*Tree [ 244.652395][ T6656] hfsplus: request for non-existent node 33423360 in B*Tree [ 245.608827][ T5358] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 245.629283][ T6656] hfsplus: request for non-existent node 33423360 in B*Tree [ 245.667790][ T6656] hfsplus: request for non-existent node 33423360 in B*Tree [ 245.670009][ T6656] hfsplus: request for non-existent node 33423360 in B*Tree [ 245.686003][ T6656] hfsplus: request for non-existent node 33423360 in B*Tree [ 245.688265][ T6656] hfsplus: request for non-existent node 33423360 in B*Tree [ 245.855495][ T5232] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 245.858212][ T5232] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 245.860677][ T3419] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 245.864090][ T4371] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 245.867786][ T112] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 245.886079][ T6656] hfsplus: request for non-existent node 33423360 in B*Tree [ 245.889297][ T6656] hfsplus: request for non-existent node 33423360 in B*Tree [ 246.375987][ T6677] hfsplus: request for non-existent node 33423360 in B*Tree [ 246.452353][ T6677] hfsplus: request for non-existent node 33423360 in B*Tree [ 246.474865][ T6656] hfsplus: request for non-existent node 33423360 in B*Tree [ 246.480654][ T6656] hfsplus: request for non-existent node 33423360 in B*Tree [ 246.501619][ T6656] hfsplus: request for non-existent node 33423360 in B*Tree [ 246.515725][ T6656] hfsplus: request for non-existent node 33423360 in B*Tree [ 246.686717][ T6656] hfsplus: request for non-existent node 33423360 in B*Tree [ 246.689103][ T6656] hfsplus: request for non-existent node 33423360 in B*Tree [ 246.705938][ T6656] hfsplus: request for non-existent node 33423360 in B*Tree [ 246.713982][ T6656] hfsplus: request for non-existent node 33423360 in B*Tree [ 247.566513][ T6656] hfsplus: request for non-existent node 33423360 in B*Tree [ 247.568684][ T6656] hfsplus: request for non-existent node 33423360 in B*Tree [ 248.391228][ T6707] loop6: detected capacity change from 0 to 40427 [ 248.463504][ T6707] F2FS-fs (loop6): Invalid log_blocksize (268), supports only 12 [ 248.465839][ T6707] F2FS-fs (loop6): Can't find valid F2FS filesystem in 1th superblock [ 248.471606][ T6707] F2FS-fs (loop6): invalid crc value [ 248.641359][ T6707] F2FS-fs (loop6): Found nat_bits in checkpoint [ 248.731817][ T6707] F2FS-fs (loop6): Try to recover 1th superblock, ret: 0 [ 248.734124][ T6707] F2FS-fs (loop6): Mounted with checkpoint version = 48b305e5 [ 248.854683][ T2059] ieee802154 phy0 wpan0: encryption failed: -22 [ 248.856480][ T2059] ieee802154 phy1 wpan1: encryption failed: -22 [ 248.889764][ T6724] netlink: 'syz.5.498': attribute type 1 has an invalid length. [ 248.904717][ T112] net_ratelimit: 3 callbacks suppressed [ 248.904731][ T112] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 249.005839][ T6724] 8021q: adding VLAN 0 to HW filter on device bond2 [ 249.234461][ T24] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 250.069659][ T6724] bond2: (slave gretap1): making interface the new active one [ 250.073104][ T6724] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 250.119975][ T6724] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 250.126375][ T6724] bond2: (slave gretap1): Enslaving as an active interface with an up link [ 250.128868][ T166] IPv6: ADDRCONF(NETDEV_CHANGE): bond2: link becomes ready [ 250.915379][ T24] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 250.920075][ T4664] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 250.925404][ T4346] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 250.928504][ T3419] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 251.174277][ T11] device veth0_to_bond left promiscuous mode [ 251.224586][ T3419] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 252.762718][ T4501] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 254.014985][ T166] net_ratelimit: 7 callbacks suppressed [ 254.015000][ T166] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 254.102527][ T6770] dccp_check_seqno: Step 6 failed for RESET packet, (LSWL(49102287134529) <= P.seqno(0) <= S.SWH(49102287134603)) and (P.ackno exists or LAWL(77972224900388) <= P.ackno(77972224900389) <= S.AWH(77972224900389), sending SYNC... [ 254.141495][ T6770] block nbd4: shutting down sockets [ 255.059935][ T5232] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 255.199869][ T6795] loop4: detected capacity change from 0 to 16 [ 255.353568][ T6795] erofs: (device loop4): mounted with root inode @ nid 36. [ 255.355556][ T4501] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 255.759724][ T6801] binder: 6789:6801 ioctl 4018620d 0 returned -22 [ 256.864440][ T6802] loop6: detected capacity change from 0 to 32768 [ 257.110126][ T11] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 257.365291][ T4501] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 257.433156][ T5232] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 257.794656][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 257.796390][ T6808] erofs: (device loop4): z_erofs_readahead: readahead error at page 86 @ nid 36 [ 257.804223][ T6808] erofs: (device loop4): z_erofs_readahead: readahead error at page 84 @ nid 36 [ 257.824264][ T6808] erofs: (device loop4): z_erofs_readahead: readahead error at page 80 @ nid 36 [ 257.867605][ T6808] erofs: (device loop4): z_erofs_readahead: readahead error at page 74 @ nid 36 [ 257.874226][ T6808] erofs: (device loop4): z_erofs_readahead: readahead error at page 72 @ nid 36 [ 257.894239][ T6808] erofs: (device loop4): z_erofs_readahead: readahead error at page 70 @ nid 36 [ 257.944247][ T6808] erofs: (device loop4): z_erofs_extent_lookback: bogus lookback distance @ nid 36 [ 257.947981][ T6808] erofs: (device loop4): z_erofs_readahead: readahead error at page 63 @ nid 36 [ 257.964214][ T6808] erofs: (device loop4): z_erofs_extent_lookback: bogus lookback distance @ nid 36 [ 257.969944][ T6808] erofs: (device loop4): z_erofs_readahead: readahead error at page 62 @ nid 36 [ 258.044227][ T6808] syz.4.518: attempt to access beyond end of device [ 258.044227][ T6808] loop4: rw=524288, sector=14552337248, nr_sectors = 16 limit=16 [ 258.071989][ T6808] syz.4.518: attempt to access beyond end of device [ 258.071989][ T6808] loop4: rw=524288, sector=14546590680, nr_sectors = 16 limit=16 [ 258.141027][ T6808] syz.4.518: attempt to access beyond end of device [ 258.141027][ T6808] loop4: rw=524288, sector=1183600, nr_sectors = 16 limit=16 [ 258.164203][ T6808] syz.4.518: attempt to access beyond end of device [ 258.164203][ T6808] loop4: rw=524288, sector=24, nr_sectors = 16 limit=16 [ 258.174823][ T6808] syz.4.518: attempt to access beyond end of device [ 258.174823][ T6808] loop4: rw=524288, sector=296, nr_sectors = 16 limit=16 [ 258.186593][ T6808] syz.4.518: attempt to access beyond end of device [ 258.186593][ T6808] loop4: rw=524288, sector=1048976, nr_sectors = 16 limit=16 [ 258.204214][ T6808] syz.4.518: attempt to access beyond end of device [ 258.204214][ T6808] loop4: rw=524288, sector=8, nr_sectors = 16 limit=16 [ 258.214187][ T6808] syz.4.518: attempt to access beyond end of device [ 258.214187][ T6808] loop4: rw=524288, sector=672, nr_sectors = 16 limit=16 [ 259.478477][ T6811] netlink: 'syz.0.523': attribute type 1 has an invalid length. [ 259.551821][ T3419] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 260.009065][ T6364] device veth0_to_bond left promiscuous mode [ 260.369175][ T5767] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 260.469594][ T112] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 260.595007][ T3419] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 260.737883][ T4501] usb 1-1: new high-speed USB device number 4 using dummy_hcd [ 261.796458][ T47] Bluetooth: hci1: command 0x0406 tx timeout [ 263.491296][ T5232] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 263.655376][ T4343] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 264.897076][ T112] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 264.899437][ T112] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 265.808280][ T6865] overlayfs: failed to clone upperpath [ 265.830493][ T4842] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 266.023567][ T4346] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 267.811740][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 268.532039][ T4501] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 269.403591][ T6889] loop4: detected capacity change from 0 to 32768 [ 269.895215][ T5232] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 270.615907][ T4453] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 270.931786][ T24] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 270.935500][ T4504] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 270.938949][ T4501] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 270.949020][ T24] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 272.478095][ T5232] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 273.604674][ T112] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 273.665534][ T5232] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 273.748082][ T6927] loop5: detected capacity change from 0 to 512 [ 274.746193][ T6942] Cannot find add_set index 0 as target [ 275.285741][ T112] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 275.389622][ T6927] EXT4-fs error (device loop5): ext4_orphan_get:1400: inode #15: comm syz.5.548: casefold flag without casefold feature [ 275.393417][ T6927] EXT4-fs error (device loop5): ext4_orphan_get:1405: comm syz.5.548: couldn't read orphan inode 15 (err -117) [ 275.407491][ T6927] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: writeback. [ 275.455472][ T5358] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 275.499186][ T6950] loop4: detected capacity change from 0 to 64 [ 276.951970][ T4541] net_ratelimit: 1 callbacks suppressed [ 276.951985][ T4541] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 276.958028][ T5232] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 276.963083][ T4569] EXT4-fs (loop5): unmounting filesystem. [ 278.142931][ T4453] device veth0_to_bond left promiscuous mode [ 278.145702][ T5232] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 280.268140][ T6994] loop5: detected capacity change from 0 to 256 [ 280.274667][ T5358] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 280.341566][ T6994] exFAT-fs (loop5): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 280.909602][ T5232] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 280.919214][ T6994] exFAT-fs (loop5): Medium has reported failures. Some data may be lost. [ 280.940543][ T6994] exFAT-fs (loop5): failed to load upcase table (idx : 0x00010000, chksum : 0xe62de5da, utbl_chksum : 0xe619d30d) [ 280.962190][ T14] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 282.853760][ T7012] loop6: detected capacity change from 0 to 256 [ 282.965167][ T7012] FAT-fs (loop6): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 283.566939][ T5595] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 285.054393][ T7031] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 285.057219][ T7031] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 285.059503][ T7031] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 285.061842][ T7031] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 285.064241][ T7031] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 285.066562][ T7031] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 285.068823][ T7031] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 285.071106][ T7031] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 285.073395][ T7031] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 288.689576][ T5232] net_ratelimit: 35 callbacks suppressed [ 288.689591][ T5232] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 288.707424][ T4501] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 289.453103][ T4371] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 291.062865][ T7091] loop5: detected capacity change from 0 to 256 [ 291.111793][ T7091] FAT-fs (loop5): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 291.768724][ T24] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 291.784598][ T4501] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 292.104354][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 293.255439][ T24] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 293.289354][ T7109] siw: device registration error -23 [ 294.405407][ T24] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 294.516760][ T5767] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 296.201929][ T4541] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 296.204539][ T4541] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 296.363677][ T24] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 296.471673][ T7144] loop6: detected capacity change from 0 to 256 [ 296.542377][ T7144] exFAT-fs (loop6): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 296.545876][ T7144] exFAT-fs (loop6): Medium has reported failures. Some data may be lost. [ 297.679988][ T4306] Bluetooth: hci1: command 0x0406 tx timeout [ 298.026115][ T5595] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 298.057731][ T7144] exFAT-fs (loop6): failed to load upcase table (idx : 0x00010000, chksum : 0xe62de5da, utbl_chksum : 0xe619d30d) [ 298.528327][ T4437] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 300.097275][ T5232] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 300.186233][ T14] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 300.322329][ T7172] syz.6.601 uses obsolete (PF_INET,SOCK_PACKET) [ 301.657204][ T5232] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 303.314601][ T4541] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 303.335638][ T5232] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 303.440675][ T9] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 305.040064][ T7212] loop6: detected capacity change from 0 to 4096 [ 305.245956][ T5595] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 306.814425][ T14] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 306.818135][ T4541] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 306.820839][ T7212] EXT4-fs: error -4 creating inode table initialization thread [ 306.823543][ T7212] EXT4-fs (loop6): mount failed [ 306.827419][ T5595] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 308.010284][ T5595] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 309.173509][ T5232] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 309.202658][ T4842] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 310.409119][ T7262] hub 8-0:1.0: USB hub found [ 310.414891][ T7262] hub 8-0:1.0: 8 ports detected [ 311.298366][ T2059] ieee802154 phy0 wpan0: encryption failed: -22 [ 311.300171][ T2059] ieee802154 phy1 wpan1: encryption failed: -22 [ 311.315233][ T5232] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 311.352892][ T14] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 312.114328][ T7281] loop6: detected capacity change from 0 to 16 [ 312.345663][ T24] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 312.515486][ T7281] erofs: (device loop6): mounted with root inode @ nid 36. [ 312.604229][ T4306] erofs: (device loop6): z_erofs_lz4_decompress_mem: failed to decompress -26 in[46, 4050] out[9000] [ 312.864279][ T7286] loop5: detected capacity change from 0 to 8 [ 312.897595][ T7286] SQUASHFS error: zlib decompression failed, data probably corrupt [ 312.907404][ T7286] SQUASHFS error: Failed to read block 0x9b: -5 [ 312.909185][ T7286] SQUASHFS error: Unable to read metadata cache entry [99] [ 312.928758][ T7286] SQUASHFS error: Unable to read inode 0x127 [ 313.200955][ T5724] I/O error, dev loop5, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 314.106947][ T55] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 314.633344][ T5595] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 314.651300][ T112] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 315.710600][ T7313] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 315.714216][ T7313] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 315.717438][ T7313] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 315.720486][ T7313] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 316.395927][ T4541] net_ratelimit: 366 callbacks suppressed [ 316.395941][ T4541] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 316.521504][ T5595] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 316.567458][ T5767] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 317.643097][ T24] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 317.936701][ T4501] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 318.888915][ T7341] hub 8-0:1.0: USB hub found [ 318.891039][ T7341] hub 8-0:1.0: 8 ports detected [ 319.417395][ T5595] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 319.469094][ T47] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 319.494852][ T47] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 319.504687][ T47] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 319.508011][ T47] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 319.513044][ T47] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 319.521085][ T47] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 320.395187][ T4581] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 320.658753][ T5232] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 321.979186][ T4306] Bluetooth: hci4: command 0x0409 tx timeout [ 321.989353][ T4345] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 322.498232][ T5595] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 322.654669][ T9] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 323.851267][ C1] ------------[ cut here ]------------ [ 323.853228][ C1] refcount_t: addition on 0; use-after-free. [ 323.855193][ C1] WARNING: CPU: 1 PID: 21 at lib/refcount.c:25 refcount_warn_saturate+0x134/0x1f8 [ 323.857742][ C1] Modules linked in: [ 323.858793][ C1] CPU: 1 PID: 21 Comm: ksoftirqd/1 Not tainted 6.1.141-syzkaller #0 [ 323.860872][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 323.863583][ C1] pstate: 60400005 (nZCv daif +PAN -UAO -TCO -DIT -SSBS BTYPE=--) [ 323.865685][ C1] pc : refcount_warn_saturate+0x134/0x1f8 [ 323.867350][ C1] lr : refcount_warn_saturate+0x134/0x1f8 [ 323.868907][ C1] sp : ffff80001c8e7680 [ 323.870025][ C1] x29: ffff80001c8e7680 x28: ffff0000d2fa6800 x27: ffff0000d2ea3208 [ 323.872218][ C1] x26: ffff0000cd071770 x25: dfff800000000000 x24: 1fffe0001a5d4641 [ 323.874432][ C1] x23: ffff0000f466e400 x22: ffff0000d20639d4 x21: ffff0000defb1880 [ 323.876601][ C1] x20: ffff0000d20639d4 x19: ffff800017a32000 x18: ffff800011a7bce0 [ 323.878756][ C1] x17: 0000000000000000 x16: ffff8000082d1c00 x15: 0000000000000000 [ 323.880976][ C1] x14: 00000000ffffffff x13: 0000000000000001 x12: 0000000000ff0100 [ 323.883085][ C1] x11: ff0080000819149c x10: 0000000000000000 x9 : 7641be936690ee00 [ 323.885243][ C1] x8 : 7641be936690ee00 x7 : 0000000000000001 x6 : 0000000000000001 [ 323.887357][ C1] x5 : ffff80001c8e7118 x4 : ffff800015154700 x3 : ffff8000083115f4 [ 323.889523][ C1] x2 : 0000000000000001 x1 : 0000000000000100 x0 : 0000000000000000 [ 323.891825][ C1] Call trace: [ 323.892728][ C1] refcount_warn_saturate+0x134/0x1f8 [ 323.894218][ C1] tipc_crypto_xmit+0x1518/0x2014 [ 323.895568][ C1] tipc_bearer_xmit_skb+0x1f0/0x384 [ 323.897015][ C1] tipc_disc_timeout+0x4c8/0x608 [ 323.898370][ C1] call_timer_fn+0x1b8/0x964 [ 323.899592][ C1] __run_timers+0x460/0x6bc [ 323.900866][ C1] run_timer_softirq+0x7c/0x114 [ 323.902201][ C1] handle_softirqs+0x318/0xc6c [ 323.903519][ C1] run_ksoftirqd+0x7c/0x2a0 [ 323.904721][ C1] smpboot_thread_fn+0x4b0/0x964 [ 323.906084][ C1] kthread+0x250/0x2d8 [ 323.907245][ C1] ret_from_fork+0x10/0x20 [ 323.908436][ C1] irq event stamp: 1180729 [ 323.909639][ C1] hardirqs last enabled at (1180728): [] __up_console_sem+0xb4/0x100 [ 323.912371][ C1] hardirqs last disabled at (1180729): [] el1_dbg+0x24/0x80 [ 323.914725][ C1] softirqs last enabled at (1180676): [] handle_softirqs+0xaf8/0xc6c [ 323.917413][ C1] softirqs last disabled at (1180681): [] run_ksoftirqd+0x7c/0x2a0 [ 323.920044][ C1] ---[ end trace 0000000000000000 ]--- [ 323.921618][ C1] vkms_vblank_simulate: vblank timer overrun [ 323.923195][ C1] ------------[ cut here ]------------ [ 323.924657][ C1] refcount_t: underflow; use-after-free. [ 323.926486][ C1] WARNING: CPU: 1 PID: 21 at lib/refcount.c:28 refcount_warn_saturate+0x154/0x1f8 [ 323.928944][ C1] Modules linked in: [ 323.929921][ C1] CPU: 1 PID: 21 Comm: ksoftirqd/1 Tainted: G W 6.1.141-syzkaller #0 [ 323.932507][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 323.935262][ C1] pstate: 60400005 (nZCv daif +PAN -UAO -TCO -DIT -SSBS BTYPE=--) [ 323.937287][ C1] pc : refcount_warn_saturate+0x154/0x1f8 [ 323.938898][ C1] lr : refcount_warn_saturate+0x154/0x1f8 [ 323.940412][ C1] sp : ffff80001c8e7680 [ 323.941452][ C1] x29: ffff80001c8e7680 x28: ffff0000d2fa6800 x27: 0000000000000000 [ 323.943620][ C1] x26: ffff0000cd071770 x25: dfff800000000000 x24: 1fffe00019a0e2f8 [ 323.945874][ C1] x23: 1fffe0001814a379 x22: ffff0000d2ea3200 x21: 00000000c0000000 [ 323.948022][ C1] x20: ffff0000d20639d4 x19: ffff800017a32000 x18: ffff800011a7bce0 [ 323.950212][ C1] x17: 0000000000000000 x16: ffff8000082d1c00 x15: 0000000000000000 [ 323.952404][ C1] x14: 00000000ffffffff x13: 0000000000000001 x12: 0000000000ff0100 [ 323.954603][ C1] x11: ff0080000819149c x10: 0000000000000000 x9 : 7641be936690ee00 [ 323.956894][ C1] x8 : 7641be936690ee00 x7 : 0000000000000001 x6 : 0000000000000001 [ 323.959087][ C1] x5 : ffff80001c8e7118 x4 : ffff800015154700 x3 : ffff8000083115f4 [ 323.961275][ C1] x2 : 0000000000000001 x1 : 0000000000000100 x0 : 0000000000000000 [ 323.963459][ C1] Call trace: [ 323.964323][ C1] refcount_warn_saturate+0x154/0x1f8 [ 323.965843][ C1] tipc_crypto_xmit+0x1664/0x2014 [ 323.967223][ C1] tipc_bearer_xmit_skb+0x1f0/0x384 [ 323.968615][ C1] tipc_disc_timeout+0x4c8/0x608 [ 323.970023][ C1] call_timer_fn+0x1b8/0x964 [ 323.971287][ C1] __run_timers+0x460/0x6bc [ 323.972506][ C1] run_timer_softirq+0x7c/0x114 [ 323.973848][ C1] handle_softirqs+0x318/0xc6c [ 323.975197][ C1] run_ksoftirqd+0x7c/0x2a0 [ 323.976417][ C1] smpboot_thread_fn+0x4b0/0x964 [ 323.977797][ C1] kthread+0x250/0x2d8 [ 323.978925][ C1] ret_from_fork+0x10/0x20 [ 323.980065][ C1] irq event stamp: 1180761 [ 323.981257][ C1] hardirqs last enabled at (1180760): [] __up_console_sem+0xb4/0x100 [ 323.983853][ C1] hardirqs last disabled at (1180761): [] el1_dbg+0x24/0x80 [ 323.986249][ C1] softirqs last enabled at (1180676): [] handle_softirqs+0xaf8/0xc6c [ 323.988852][ C1] softirqs last disabled at (1180681): [] run_ksoftirqd+0x7c/0x2a0 [ 323.991403][ C1] ---[ end trace 0000000000000000 ]--- [ 323.992894][ C1] vkms_vblank_simulate: vblank timer overrun [ 323.994760][ C1] ------------[ cut here ]------------ [ 323.996268][ C1] refcount_t: saturated; leaking memory. [ 323.998170][ C1] WARNING: CPU: 1 PID: 21 at lib/refcount.c:22 refcount_warn_saturate+0x1b4/0x1f8 [ 324.000639][ C1] Modules linked in: [ 324.001721][ C1] CPU: 1 PID: 21 Comm: ksoftirqd/1 Tainted: G W 6.1.141-syzkaller #0 [ 324.004237][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 324.006985][ C1] pstate: 60400005 (nZCv daif +PAN -UAO -TCO -DIT -SSBS BTYPE=--) [ 324.009092][ C1] pc : refcount_warn_saturate+0x1b4/0x1f8 [ 324.010574][ C1] lr : refcount_warn_saturate+0x1b4/0x1f8 [ 324.012146][ C1] sp : ffff80001c8e7680 [ 324.013263][ C1] x29: ffff80001c8e7680 x28: ffff0000d2fa6000 x27: ffff0000d2ea3208 [ 324.015424][ C1] x26: ffff0000cd0714f0 x25: dfff800000000000 x24: 1fffe0001a5d4641 [ 324.017602][ C1] x23: ffff0000d2894400 x22: ffff0000d20639d4 x21: 000000007ffffffe [ 324.019741][ C1] x20: ffff0000d20639d4 x19: ffff800017a32000 x18: ffff800011a7bce0 [ 324.021862][ C1] x17: 0000000000000000 x16: ffff8000082d1c00 x15: 0000000000000000 [ 324.024050][ C1] x14: 00000000ffffffff x13: 0000000000000001 x12: 0000000000ff0100 [ 324.024389][ T47] Bluetooth: hci4: command 0x041b tx timeout [ 324.026246][ C1] x11: ff0080000819149c x10: 0000000000000000 x9 : 7641be936690ee00 [ 324.030104][ C1] x8 : 7641be936690ee00 x7 : 0000000000000001 x6 : 0000000000000001 [ 324.032389][ C1] x5 : ffff80001c8e7118 x4 : ffff800015154700 x3 : ffff8000083115f4 [ 324.034537][ C1] x2 : 0000000000000001 x1 : 0000000000000100 x0 : 0000000000000000 [ 324.036769][ C1] Call trace: [ 324.037661][ C1] refcount_warn_saturate+0x1b4/0x1f8 [ 324.039163][ C1] tipc_crypto_xmit+0x1518/0x2014 [ 324.040513][ C1] tipc_bearer_xmit_skb+0x1f0/0x384 [ 324.041942][ C1] tipc_disc_timeout+0x4c8/0x608 [ 324.043284][ C1] call_timer_fn+0x1b8/0x964 [ 324.044481][ C1] __run_timers+0x460/0x6bc [ 324.045673][ C1] run_timer_softirq+0x7c/0x114 [ 324.046978][ C1] handle_softirqs+0x318/0xc6c [ 324.048233][ C1] run_ksoftirqd+0x7c/0x2a0 [ 324.049419][ C1] smpboot_thread_fn+0x4b0/0x964 [ 324.050692][ C1] kthread+0x250/0x2d8 [ 324.051853][ C1] ret_from_fork+0x10/0x20 [ 324.053064][ C1] irq event stamp: 1180835 [ 324.054220][ C1] hardirqs last enabled at (1180834): [] __up_console_sem+0xb4/0x100 [ 324.056833][ C1] hardirqs last disabled at (1180835): [] el1_dbg+0x24/0x80 [ 324.059224][ C1] softirqs last enabled at (1180676): [] handle_softirqs+0xaf8/0xc6c [ 324.061835][ C1] softirqs last disabled at (1180681): [] run_ksoftirqd+0x7c/0x2a0 [ 324.064326][ C1] ---[ end trace 0000000000000000 ]--- [ 324.065839][ C1] vkms_vblank_simulate: vblank timer overrun [ 324.071968][ T3419] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 325.064658][ T4501] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 325.145114][ T3419] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 325.250493][ T6364] ------------[ cut here ]------------ [ 325.252285][ T6364] refcount_t: saturated; leaking memory. [ 325.257540][ T6364] WARNING: CPU: 1 PID: 6364 at lib/refcount.c:19 refcount_warn_saturate+0x174/0x1f8 [ 325.260170][ T6364] Modules linked in: [ 325.261264][ T6364] CPU: 1 PID: 6364 Comm: kworker/u4:20 Tainted: G W 6.1.141-syzkaller #0 [ 325.263999][ T6364] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 325.266763][ T6364] Workqueue: netns cleanup_net [ 325.268075][ T6364] pstate: 60400005 (nZCv daif +PAN -UAO -TCO -DIT -SSBS BTYPE=--) [ 325.270175][ T6364] pc : refcount_warn_saturate+0x174/0x1f8 [ 325.271766][ T6364] lr : refcount_warn_saturate+0x174/0x1f8 [ 325.273328][ T6364] sp : ffff800021b17280 [ 325.274394][ T6364] x29: ffff800021b17280 x28: 1ffff00004362e58 x27: dfff800000000000 [ 325.276646][ T6364] x26: 00000000c0000000 x25: 00000000c0000000 x24: ffff0000d20639d4 [ 325.278847][ T6364] x23: 0000000000000046 x22: 0000000000000cc0 x21: 000000007ffffffe [ 325.281036][ T6364] x20: ffff0000d20639d4 x19: ffff800017a32000 x18: ffff800011a7bce0 [ 325.283204][ T6364] x17: 1fffe00033ee7176 x16: ffff8000082d1c00 x15: 0000000040000000 [ 325.285420][ T6364] x14: 0000000000000002 x13: 1ffff00002a0e0b1 x12: 0000000000ff0100 [ 325.287551][ T6364] x11: ff0080000a88a3b4 x10: 0000000000000003 x9 : 8d65ef5039fef800 [ 325.289683][ T6364] x8 : 8d65ef5039fef800 x7 : ffff8000082516dc x6 : 0000000000000000 [ 325.291894][ T6364] x5 : 0000000000000080 x4 : 0000000000000001 x3 : 0000000000000000 [ 325.294118][ T6364] x2 : 0000000000000006 x1 : ffff800011a7d7e0 x0 : ffff80018a773000 [ 325.296384][ T6364] Call trace: [ 325.297265][ T6364] refcount_warn_saturate+0x174/0x1f8 [ 325.298718][ T6364] nf_nat_masq_schedule+0x478/0x54c [ 325.300133][ T6364] masq_device_event+0x9c/0xe0 [ 325.301379][ T6364] raw_notifier_call_chain+0xd4/0x164 [ 325.302790][ T6364] dev_close_many+0x2cc/0x440 [ 325.304026][ T6364] unregister_netdevice_many+0x3c4/0x1740 [ 325.305580][ T6364] unregister_netdevice_queue+0x2ac/0x2f8 [ 325.307158][ T6364] nsim_destroy+0x58/0x164 [ 325.308386][ T6364] __nsim_dev_port_del+0x144/0x1a4 [ 325.309747][ T6364] nsim_dev_reload_destroy+0x240/0x43c [ 325.311218][ T6364] nsim_dev_reload_down+0x9c/0xd4 [ 325.312545][ T6364] devlink_reload+0x1b4/0x570 [ 325.313866][ T6364] devlink_pernet_pre_exit+0x118/0x2a8 [ 325.315320][ T6364] cleanup_net+0x470/0xa74 [ 325.316582][ T6364] process_one_work+0x7f4/0x13a8 [ 325.317904][ T6364] worker_thread+0x8c8/0xfbc [ 325.319109][ T6364] kthread+0x250/0x2d8 [ 325.320228][ T6364] ret_from_fork+0x10/0x20 [ 325.321448][ T6364] irq event stamp: 211758 [ 325.322583][ T6364] hardirqs last enabled at (211757): [] finish_lock_switch+0xb0/0x1c4 [ 325.325300][ T6364] hardirqs last disabled at (211758): [] el1_dbg+0x24/0x80 [ 325.327686][ T6364] softirqs last enabled at (211732): [] pppoe_device_event+0x48c/0x4bc [ 325.330561][ T6364] softirqs last disabled at (211730): [] pppoe_device_event+0xdc/0x4bc [ 325.333353][ T6364] ---[ end trace 0000000000000000 ]--- [ 325.339742][ T6364] ------------[ cut here ]------------ [ 325.341281][ T6364] WARNING: CPU: 1 PID: 6364 at lib/ref_tracker.c:77 ref_tracker_alloc+0x230/0x3cc [ 325.343866][ T6364] Modules linked in: [ 325.344895][ T6364] CPU: 1 PID: 6364 Comm: kworker/u4:20 Tainted: G W 6.1.141-syzkaller #0 [ 325.347526][ T6364] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 325.350208][ T6364] Workqueue: netns cleanup_net [ 325.351492][ T6364] pstate: 80400005 (Nzcv daif +PAN -UAO -TCO -DIT -SSBS BTYPE=--) [ 325.353593][ T6364] pc : ref_tracker_alloc+0x230/0x3cc [ 325.355130][ T6364] lr : ref_tracker_alloc+0x230/0x3cc [ 325.356523][ T6364] sp : ffff800021b17160 [ 325.357624][ T6364] x29: ffff800021b17240 x28: 1ffff00004362e58 x27: dfff800000000000 [ 325.359829][ T6364] x26: dfff800000000000 x25: ffff700004362e2c x24: ffff0000f1615608 [ 325.361992][ T6364] x23: ffff800021b17160 x22: ffff0000d2063a24 x21: ffff0000f1615650 [ 325.364185][ T6364] x20: 0000000000000cc0 x19: ffff0000d20639d8 x18: ffff800011a7bce0 [ 325.366296][ T6364] x17: ffff8000181a1000 x16: ffff8000082d1c00 x15: ffff800010a233ec [ 325.368442][ T6364] x14: ffff80000d4f3814 x13: 1ffff00002a0e0b1 x12: 0000000000ff0100 [ 325.370688][ T6364] x11: ff0080000aa23d44 x10: 0000000000000000 x9 : ffff80000aa23d44 [ 325.372911][ T6364] x8 : ffff0000d9ac0000 x7 : 0000000000000000 x6 : 000000000000003f [ 325.375042][ T6364] x5 : 0000000000000040 x4 : 0000000000000000 x3 : 0000000000000004 [ 325.377198][ T6364] x2 : 0000000000000000 x1 : 0000000000000000 x0 : ffff800021b17180 [ 325.379398][ T6364] Call trace: [ 325.380300][ T6364] ref_tracker_alloc+0x230/0x3cc [ 325.381665][ T6364] nf_nat_masq_schedule+0x328/0x54c [ 325.383023][ T6364] masq_device_event+0x9c/0xe0 [ 325.384354][ T6364] raw_notifier_call_chain+0xd4/0x164 [ 325.385884][ T6364] dev_close_many+0x2cc/0x440 [ 325.387153][ T6364] unregister_netdevice_many+0x3c4/0x1740 [ 325.388636][ T6364] unregister_netdevice_queue+0x2ac/0x2f8 [ 325.390198][ T6364] nsim_destroy+0x58/0x164 [ 325.391419][ T6364] __nsim_dev_port_del+0x144/0x1a4 [ 325.392793][ T6364] nsim_dev_reload_destroy+0x240/0x43c [ 325.394264][ T6364] nsim_dev_reload_down+0x9c/0xd4 [ 325.395667][ T6364] devlink_reload+0x1b4/0x570 [ 325.396941][ T6364] devlink_pernet_pre_exit+0x118/0x2a8 [ 325.398396][ T6364] cleanup_net+0x470/0xa74 [ 325.399677][ T6364] process_one_work+0x7f4/0x13a8 [ 325.401077][ T6364] worker_thread+0x8c8/0xfbc [ 325.402334][ T6364] kthread+0x250/0x2d8 [ 325.403446][ T6364] ret_from_fork+0x10/0x20 [ 325.404667][ T6364] irq event stamp: 211860 [ 325.405793][ T6364] hardirqs last enabled at (211859): [] _raw_spin_unlock_irqrestore+0x48/0xac [ 325.408726][ T6364] hardirqs last disabled at (211860): [] el1_dbg+0x24/0x80 [ 325.411183][ T6364] softirqs last enabled at (211844): [] handle_softirqs+0xaf8/0xc6c [ 325.413932][ T6364] softirqs last disabled at (211761): [] __do_softirq+0x14/0x20 [ 325.416453][ T6364] ---[ end trace 0000000000000000 ]--- [ 325.428958][ T24] ------------[ cut here ]------------ [ 325.430755][ T24] WARNING: CPU: 1 PID: 24 at lib/ref_tracker.c:110 ref_tracker_free+0x484/0x694 [ 325.433288][ T24] Modules linked in: [ 325.434324][ T24] CPU: 1 PID: 24 Comm: kworker/1:1 Tainted: G W 6.1.141-syzkaller #0 [ 325.436922][ T24] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 325.439584][ T24] Workqueue: events iterate_cleanup_work [ 325.441076][ T24] pstate: 80400005 (Nzcv daif +PAN -UAO -TCO -DIT -SSBS BTYPE=--) [ 325.443180][ T24] pc : ref_tracker_free+0x484/0x694 [ 325.444537][ T24] lr : ref_tracker_free+0x484/0x694 [ 325.445981][ T24] sp : ffff80001c917940 [ 325.447076][ T24] x29: ffff80001c917a40 x28: ffff00019f750800 x27: ffff0000f1615600 [ 325.449195][ T24] x26: dfff800000000000 x25: ffff700003922f2c x24: ffff80001c917aa0 [ 325.451331][ T24] x23: ffff700003922f54 x22: ffff80001c917960 x21: ffff0000d2063a24 [ 325.453471][ T24] x20: ffff0000f1615650 x19: ffff0000d20639d8 x18: ffff800011a7bce0 [ 325.455700][ T24] x17: ffff80018a773000 x16: ffff8000082d0750 x15: 0000000000010000 [ 325.457867][ T24] x14: 0000000000000003 x13: 1ffff00002a0e0b1 x12: 0000000000ff0100 [ 325.460150][ T24] x11: ff0080000aa2441c x10: 0000000000000000 x9 : ffff80000aa2441c [ 325.462424][ T24] x8 : ffff0000c0a58000 x7 : 0000000000000000 x6 : 000000000000003f [ 325.464688][ T24] x5 : 0000000000000040 x4 : 0000000000000000 x3 : 0000000000000004 [ 325.466925][ T24] x2 : 0000000000000000 x1 : 0000000000000000 x0 : ffff80001c917980 [ 325.469119][ T24] Call trace: [ 325.470009][ T24] ref_tracker_free+0x484/0x694 [ 325.471339][ T24] iterate_cleanup_work+0xe8/0x230 [ 325.472755][ T24] process_one_work+0x7f4/0x13a8 [ 325.474100][ T24] worker_thread+0x8c8/0xfbc [ 325.475405][ T24] kthread+0x250/0x2d8 [ 325.476523][ T24] ret_from_fork+0x10/0x20 [ 325.477767][ T24] irq event stamp: 267224 [ 325.478970][ T24] hardirqs last enabled at (267223): [] __local_bh_enable_ip+0x1f8/0x380 [ 325.481755][ T24] hardirqs last disabled at (267224): [] el1_dbg+0x24/0x80 [ 325.484163][ T24] softirqs last enabled at (267222): [] local_bh_enable+0x10/0x34 [ 325.486738][ T24] softirqs last disabled at (267220): [] local_bh_disable+0x10/0x34 [ 325.489339][ T24] ---[ end trace 0000000000000000 ]--- [ 325.547819][ T6364] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 325.626046][ T4541] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 325.675972][ T6364] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 325.682069][ T7334] lo speed is unknown, defaulting to 1000 [ 325.760830][ T4371] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 325.818105][ T6364] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 325.925922][ T6364] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 325.932405][ T7334] chnl_net:caif_netlink_parms(): no params data found [ 325.991288][ T7334] bridge0: port 1(bridge_slave_0) entered blocking state [ 325.993237][ T7334] bridge0: port 1(bridge_slave_0) entered disabled state [ 325.997081][ T7334] device bridge_slave_0 entered promiscuous mode [ 326.003568][ T7334] bridge0: port 2(bridge_slave_1) entered blocking state [ 326.007077][ T7334] bridge0: port 2(bridge_slave_1) entered disabled state [ 326.009634][ T7334] device bridge_slave_1 entered promiscuous mode [ 326.037006][ T7334] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 326.041262][ T7334] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 326.063073][ T7334] team0: Port device team_slave_0 added [ 326.066444][ T7334] team0: Port device team_slave_1 added [ 326.078980][ T7334] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 326.080952][ T7334] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 326.092485][ T7334] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 326.097821][ T7334] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 326.099666][ T7334] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 326.107118][ T47] Bluetooth: hci4: command 0x040f tx timeout [ 326.108854][ T7334] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 326.184583][ T24] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 326.188920][ T7334] device hsr_slave_0 entered promiscuous mode [ 326.224787][ T7334] device hsr_slave_1 entered promiscuous mode [ 326.265666][ T7334] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 326.267874][ T7334] Cannot create hsr debugfs directory [ 326.510699][ T7334] netdevsim netdevsim8 netdevsim0: renamed from eth0 [ 326.545788][ T6364] tipc: Disabling bearer [ 326.548238][ T6364] tipc: Disabling bearer [ 326.550242][ T6364] tipc: Left network mode [ 326.551826][ T7334] netdevsim netdevsim8 netdevsim1: renamed from eth1 [ 326.582412][ T7334] netdevsim netdevsim8 netdevsim2: renamed from eth2 [ 326.763886][ T7334] netdevsim netdevsim8 netdevsim3: renamed from eth3 [ 326.866195][ T4371] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 326.922269][ T7334] 8021q: adding VLAN 0 to HW filter on device bond0 [ 326.995161][ T7334] 8021q: adding VLAN 0 to HW filter on device team0 [ 326.998434][ T55] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 327.001001][ T55] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 327.007955][ T55] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 327.011934][ T55] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 327.015265][ T55] bridge0: port 1(bridge_slave_0) entered blocking state [ 327.017243][ T55] bridge0: port 1(bridge_slave_0) entered forwarding state [ 327.103514][ T55] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 327.106761][ T55] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 327.109432][ T55] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 327.114790][ T55] bridge0: port 2(bridge_slave_1) entered blocking state [ 327.116812][ T55] bridge0: port 2(bridge_slave_1) entered forwarding state [ 327.119133][ T55] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 327.123862][ T55] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 327.212847][ T55] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 327.223383][ T55] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 327.224646][ T24] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 327.232501][ T55] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 327.241128][ T55] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 327.243949][ T55] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 327.252805][ T7334] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 327.259974][ T7334] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 327.264447][ T4371] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 327.266968][ T4371] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 327.269655][ T4371] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 327.272193][ T4371] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 327.333980][ T4371] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 327.554552][ T4371] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 327.556728][ T4371] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 327.560815][ T7334] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 327.830040][ T55] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 327.832883][ T55] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 327.852649][ T55] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 327.858275][ T55] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 327.975312][ T9] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 328.104751][ T4501] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 328.130879][ T55] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 328.133521][ T55] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 328.138222][ T7334] device veth0_vlan entered promiscuous mode [ 328.146054][ T7334] device veth1_vlan entered promiscuous mode [ 328.161485][ T4437] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 328.164085][ T4437] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 328.166893][ T4437] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 328.170021][ T4437] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 328.175742][ T7334] device veth0_macvtap entered promiscuous mode [ 328.184845][ T4306] Bluetooth: hci4: command 0x0419 tx timeout [ 328.216994][ T7334] device veth1_macvtap entered promiscuous mode [ 328.234037][ T7334] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 328.237546][ T7334] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 328.240389][ T7334] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 328.243436][ T7334] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 328.252372][ T7334] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 328.255943][ T7334] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 328.258694][ T7334] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 328.261633][ T7334] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 328.270939][ T5232] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 328.273365][ T7334] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 328.277054][ T7334] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 328.281283][ T7334] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 328.579569][ T55] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 328.582369][ T55] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 328.585202][ T55] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 328.587857][ T55] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 328.593454][ T7334] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 328.596912][ T7334] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 328.599701][ T7334] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 328.602503][ T7334] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 328.605277][ T7334] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 328.608089][ T7334] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 328.610686][ T7334] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 328.613435][ T7334] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 328.616232][ T7334] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 328.619034][ T7334] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 328.622747][ T7334] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 328.632770][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 328.637918][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 328.669670][ T7334] netdevsim netdevsim8 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 328.672235][ T7334] netdevsim netdevsim8 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 328.675010][ T7334] netdevsim netdevsim8 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 328.677543][ T7334] netdevsim netdevsim8 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 328.760691][ T9] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 328.763014][ T9] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 328.769558][ T4581] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 328.810669][ T9] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 328.813110][ T9] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 328.827199][ T4581] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 328.861691][ T6364] device hsr_slave_0 left promiscuous mode [ 328.876985][ T6364] device hsr_slave_1 left promiscuous mode [ 328.974349][ T6364] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 328.976532][ T6364] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 328.980622][ T6364] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 328.982691][ T6364] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 329.084591][ T6364] device veth1_macvtap left promiscuous mode [ 329.086534][ T6364] device veth0_macvtap left promiscuous mode [ 329.088329][ T6364] device veth1_vlan left promiscuous mode [ 329.091658][ T6364] device veth0_vlan left promiscuous mode [ 329.115252][ T55] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 329.347369][ T22] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 330.244355][ T5767] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 330.424587][ T7531] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 331.144598][ T4345] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 331.339416][ T6364] team0 (unregistering): Port device team_slave_1 removed [ 331.364423][ T55] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 331.526009][ T6364] team0 (unregistering): Port device team_slave_0 removed [ 331.715770][ T6364] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 331.935734][ T6364] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 332.484332][ T9] net_ratelimit: 1 callbacks suppressed [ 332.484347][ T9] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 332.506267][ T3419] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 333.544536][ T4347] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 333.604352][ T55] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog