last executing test programs: 21.809497148s ago: executing program 2 (id=58): add_key$keyring(&(0x7f00000004c0), 0x0, 0x0, 0x0, 0x0) mknod(&(0x7f0000000040)='./file0\x00', 0x8001420, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x20842, 0xc) r1 = fanotify_init(0xf00, 0x0) syz_usb_connect(0x3, 0x2d, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000413f5f201d0650c16fce0102030109021b00010000100009043300011870f500090582020002"], 0x0) r2 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) setsockopt$WPAN_WANTACK(r2, 0x0, 0x0, &(0x7f0000000140), 0x4) write$P9_RLCREATE(r0, 0x0, 0xffffffffffffff52) creat(0x0, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$XFS_IOC_START_COMMIT(r1, 0x80585882, &(0x7f0000000100)={0xffffffffffffffff}) keyctl$update(0x2, 0x0, &(0x7f0000000480)="da05a33ab2555ac0cc214392b03fb0103433e0bdb2230ad8815ee0fd30d631e9bb64c913a0aa2b18d149f84a817fb8394fc2e633d194389bba9cbc", 0x3b) epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, r0, &(0x7f0000000300)={0x80000004}) r4 = socket$inet(0x2, 0x1, 0x0) setsockopt$inet_opts(r4, 0x0, 0x4, 0x0, 0x0) setsockopt$inet_opts(r4, 0x0, 0x4, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket$netlink(0x10, 0x3, 0x10) syz_open_dev$vim2m(&(0x7f0000000140), 0x200000001003, 0x2) r5 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000540)=ANY=[@ANYBLOB="030000000400000004000000b5"], 0x50) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x4, 0x8, &(0x7f0000000d80)=ANY=[@ANYBLOB="1800000000000000000000000000000018020000", @ANYRES32=r5, @ANYBLOB="0000000000000000b703000000000000850000000d000000b70000000000000095"], &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x33, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000003c0)={r6, 0x0, 0x38, 0x0, &(0x7f00000001c0)="c1dfb080cd21d398098ee68886ddfc30d80ce5ed87f6e9b83601f444ac505655d702cb0e4881a9fb5fbebe8f1e17d613fe24c2021a97a96b", 0x0, 0x3ff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 17.755642389s ago: executing program 2 (id=65): syz_mount_image$ext4(&(0x7f0000000200)='ext4\x00', &(0x7f0000000740)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0xc000, &(0x7f00000006c0), 0x2, 0x246, &(0x7f0000000ac0)="$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") prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0xfffffffe}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) unshare(0x2c020400) r3 = msgget$private(0x0, 0x0) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, 0x0) msgsnd(r3, &(0x7f0000000180)=ANY=[], 0x2000, 0x0) openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000080), 0x361800, 0x0) r4 = syz_open_dev$dri(&(0x7f00000000c0), 0x1ff, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r4, 0xc01864c6, &(0x7f00000003c0)={0x0, 0x0, 0x80800}) 15.051761566s ago: executing program 1 (id=71): syz_open_dev$tty1(0xc, 0x4, 0x1) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) socket$netlink(0x10, 0x3, 0x14) socketpair$unix(0x1, 0x2, 0x0, 0x0) socket$pppoe(0x18, 0x1, 0x0) openat$rtc(0xffffffffffffff9c, &(0x7f0000000000), 0x189182, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=@base={0x12, 0x8, 0x4, 0x2}, 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000180)={{r1}, &(0x7f0000000040), &(0x7f0000000140)=r0}, 0x20) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000000)={r1, &(0x7f00000001c0)="1a", &(0x7f00000002c0)=""/215}, 0x20) 14.954168359s ago: executing program 2 (id=72): r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) connect$packet(r0, &(0x7f0000000200)={0x1f, 0xf8, 0x0, 0x1, 0x82, 0x6, @random="a55378321800"}, 0x14) shutdown(r0, 0x1) 14.159593504s ago: executing program 1 (id=73): syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000300)='./file0\x00', 0x80a, &(0x7f0000000000)={[{@debug}, {@jqfmt_vfsold}, {@barrier_val={'barrier', 0x3d, 0x5}}, {@nobh}, {@norecovery}, {@min_batch_time={'min_batch_time', 0x3d, 0xc619}}, {@errors_remount}]}, 0x1, 0x7ca, &(0x7f00000014c0)="$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") r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), r0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000002c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000640)={&(0x7f0000000000)=ANY=[@ANYBLOB="88020000", @ANYRES16=r1, @ANYBLOB="010000000000000000003b00000008000300", @ANYRES32=r2, @ANYBLOB="6102330050300100080211000001080211000000505050505050"], 0x288}, 0x1, 0x0, 0x0, 0x800}, 0x0) connect$inet(0xffffffffffffffff, 0x0, 0x0) 13.715571378s ago: executing program 2 (id=75): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000380)=0x34) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) bpf$PROG_LOAD(0x5, 0x0, 0x0) ioctl$SNDRV_PCM_IOCTL_HW_REFINE(0xffffffffffffffff, 0xc25c4110, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x5a) mount$afs(0x0, &(0x7f0000002840)='./file0\x00', &(0x7f0000000140), 0x4700, &(0x7f0000000200)=ANY=[@ANYBLOB='dyn']) r1 = fspick(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) fsconfig$FSCONFIG_CMD_RECONFIGURE(r1, 0x7, 0x0, 0x0, 0x0) syz_genetlink_get_family_id$nbd(&(0x7f0000000300), 0xffffffffffffffff) r2 = syz_init_net_socket$x25(0x9, 0x5, 0x0) ioctl$sock_SIOCGSKNS(r2, 0x894c, 0x0) setns(0xffffffffffffffff, 0x26020080) openat$kvm(0xffffff9c, &(0x7f0000000000), 0x41, 0x0) r3 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f0000000380)={[0xf, 0x3, 0x4, 0x1000000000000002, 0x102000000000002, 0x8000000d, 0x2004c8, 0xffff, 0x3, 0xffffffff, 0xffffffffffffffff, 0x7fffffffffffffff, 0xd0b, 0x4, 0x2000000000000003, 0x5], 0x80a0000, 0x4284}) ioctl$KVM_RUN(r3, 0xae80, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) 13.435172617s ago: executing program 1 (id=76): r0 = socket(0x80000000000000a, 0x2, 0x0) setsockopt$inet6_group_source_req(r0, 0x29, 0x2e, &(0x7f0000000200)={0x0, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}, 0x2}}, {{0xa, 0x0, 0xffffffff, @remote}}}, 0x108) socket$xdp(0x2c, 0x3, 0x0) unshare(0x20000400) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r1 = socket$inet6_udp(0xa, 0x2, 0x0) bind$inet6(r1, &(0x7f0000000000)={0xa, 0xe22, 0x0, @empty}, 0x1c) syz_emit_ethernet(0x48, &(0x7f0000000140)={@link_local, @random="ece65fbcee55", @void, {@ipv6={0x86dd, @udp={0x0, 0x6, "010100", 0x12, 0x11, 0x0, @remote, @local, {[], {0x3, 0xe22, 0x12, 0x0, @gue={{0x2, 0x0, 0x0, 0x3}, "ffb0"}}}}}}}, 0x0) r2 = getpgrp(0x0) sched_setaffinity(r2, 0x8, &(0x7f0000000040)=0x10000005) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x2, 0x0) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000000)=0x3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r4 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r4, 0x1, 0x0) r5 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r5, &(0x7f0000019680)=""/102392, 0x18ff8) connect$bt_l2cap(0xffffffffffffffff, &(0x7f0000000040)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0xb}, 0xe) shutdown(0xffffffffffffffff, 0x1) setsockopt$inet6_group_source_req(0xffffffffffffffff, 0x29, 0x2b, &(0x7f0000000200)={0x0, {{0xa, 0xffff, 0x0, @mcast1={0xff, 0x7}, 0x10000}}, {{0xa, 0x0, 0x0, @mcast1}}}, 0x108) 11.679804854s ago: executing program 1 (id=78): connect$unix(0xffffffffffffffff, 0x0, 0x0) r0 = socket$kcm(0xa, 0x2, 0x0) openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000007c0), 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f00000007c0)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x8) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) ioctl$DRM_IOCTL_GET_CLIENT(0xffffffffffffffff, 0xc0186405, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r2 = socket(0x2, 0x2, 0x1) bind$unix(r2, 0x0, 0x0) r3 = syz_open_dev$usbfs(&(0x7f00000000c0), 0x201, 0x2002) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x11, r3, 0x0) r4 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r4, 0x0, 0x40044) recvmmsg(r4, 0x0, 0x0, 0x2, 0x0) r5 = socket$inet_sctp(0x2, 0x5, 0x84) setsockopt$IP_VS_SO_SET_ADDDEST(0xffffffffffffffff, 0x0, 0x487, 0x0, 0x0) setsockopt$IP_VS_SO_SET_ADDDEST(r5, 0x0, 0x487, 0x0, 0x0) mount(0x0, &(0x7f0000000080)='./file0\x00', 0xffffffffffffffff, 0x80, &(0x7f00000000c0)='/dev/vhost-vsock\x00') r6 = openat$comedi(0xffffff9c, &(0x7f0000000040)='/dev/comedi4\x00', 0x101402, 0x0) ioctl$COMEDI_INSNLIST(r6, 0x8008640b, &(0x7f0000000400)={0x0, 0x0}) sendmsg$sock(r0, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000000)}, 0x40004) openat$dsp(0xffffff9c, &(0x7f0000000140), 0x40000, 0x0) ioctl$FS_IOC_READ_VERITY_METADATA(0xffffffffffffffff, 0xc0286687, &(0x7f0000000100)={0x3, 0x8000000000000000, 0x0, 0x0}) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x5, &(0x7f0000000600)=0xdf8, 0x4) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xb, 0xc3072, 0xffffffffffffffff, 0x0) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) 10.927845728s ago: executing program 4 (id=80): r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/profiling', 0xa0642, 0x0) openat$kvm(0xffffffffffffff9c, 0x0, 0x3a1dc0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x1) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x32, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) keyctl$instantiate(0xc, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="6e65772064656661756c74eb2fbb527d46b04f9365643a73797a2030303030303030"], 0x2d, 0xfffffffffffffff9) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$net_dm(&(0x7f0000000000), r2) sendmsg$NET_DM_CMD_START(r2, &(0x7f0000004c00)={0x0, 0x0, &(0x7f0000004bc0)={&(0x7f0000004b80)={0x14, r3, 0x1, 0x70bd2c, 0x25dfdbfc}, 0x14}, 0x1, 0x0, 0x0, 0x4}, 0x8000) add_key(&(0x7f0000000140)='encrypted\x00', &(0x7f0000000180), &(0x7f0000000100), 0xca, 0xfffffffffffffffe) sendmsg$IPSET_CMD_ADD(0xffffffffffffffff, &(0x7f0000000500)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000480)={&(0x7f00000003c0)=ANY=[@ANYBLOB="a000000009060500000000000000000002000005050001000700000008000940fffffffa1c0007801800148014000240ff02000000000000000000000000000114000780080009400000000730000880100007800c001b4000000000000000090c00078008001c4000000006100007800c001940ffffffffffffffff08000940000000050900020073797a3300"/160], 0xa0}, 0x1, 0x0, 0x0, 0x8054}, 0x804) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) writev(0xffffffffffffffff, &(0x7f0000000840)=[{0x0}], 0x1) r4 = socket$inet_udp(0x2, 0x2, 0x0) socket$key(0xf, 0x3, 0x2) bind$inet(r4, &(0x7f0000000280)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x15}}, 0x10) setsockopt$inet_IP_XFRM_POLICY(r4, 0x0, 0x11, &(0x7f00000002c0)={{{@in=@multicast2, @in6=@mcast1, 0x4e20, 0x4, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0xee01}, {0x0, 0xfffffffffffffffe, 0x0, 0x0, 0x5, 0x2, 0x3, 0xfffffffffffffffe}, {0x0, 0x0, 0xfffffffffffffffc, 0xff}, 0x200000, 0x6e6fb5, 0x1, 0x0, 0x0, 0x3}, {{@in=@multicast2, 0x0, 0x32}, 0x0, @in=@local, 0xfffffffd, 0x2, 0x0, 0xb7, 0x5, 0xffffff7e, 0xffffffff}}, 0xe8) sendmmsg(r4, &(0x7f0000007fc0), 0x800001d, 0x1c) r5 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r5, 0x4020ae46, 0x0) ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0) write$tcp_mem(r0, &(0x7f0000000280)={0x11, 0x2d, 0x0, 0x3a, 0xfffffffffffffffe, 0x2c}, 0x48) bind$inet6(r0, &(0x7f00000001c0)={0xa, 0x4e21, 0x6, @local, 0x4}, 0x1c) 9.915128211s ago: executing program 0 (id=81): r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$PIO_UNISCRNMAP(r0, 0x4b6a, 0x0) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) sendto$packet(0xffffffffffffffff, &(0x7f00000000c0)="05", 0x1, 0x4, 0x0, 0x0) write$FUSE_INIT(0xffffffffffffffff, &(0x7f0000000040)={0x50, 0x0, 0x0, {0x7, 0x1f, 0x8, 0xffffffffd24b2432, 0x83, 0xffff, 0x0, 0xabe6, 0x0, 0x0, 0x80, 0x8001}}, 0x50) socket$netlink(0x10, 0x3, 0x14) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r5 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r5, 0x0, 0x0) r6 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000000), 0x189182, 0x0) ioctl$RTC_ALM_SET(r6, 0x40247007, 0x0) ioctl$PPPIOCGCHAN(r5, 0x80047437, 0xfffffffffffffffd) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) syz_emit_vhci(&(0x7f0000000040)=ANY=[@ANYBLOB="043ef50d"], 0xf8) ioctl$sock_TIOCOUTQ(r7, 0x5411, 0x0) r8 = bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=@base={0x12, 0x8, 0x4, 0x2}, 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000180)={{r8}, &(0x7f0000000040), &(0x7f0000000140)=r1}, 0x20) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000000)={r8, &(0x7f00000001c0)="1a", &(0x7f00000002c0)=""/215}, 0x20) r9 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r9, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)=@newlink={0x3c, 0x10, 0x403, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x4}}}, @IFLA_NUM_TX_QUEUES={0x8, 0x1f, 0x7}]}, 0x3c}}, 0x0) 9.884991791s ago: executing program 4 (id=82): r0 = socket$inet_mptcp(0x2, 0x1, 0x106) openat(0xffffffffffffff9c, 0x0, 0x8242, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r2 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x8081) openat$binfmt(0xffffffffffffff9c, 0x0, 0x42, 0x1ff) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r3 = socket(0x1d, 0x2, 0x6) syz_open_dev$hidraw(&(0x7f00000004c0), 0x0, 0x14a042) getsockopt$inet6_IPV6_FLOWLABEL_MGR(r3, 0x29, 0x20, &(0x7f0000000400)={@rand_addr=' \x01\x00', 0x6, 0x0, 0x0, 0x0, 0x280, 0xf4}, 0x0) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x0, 0x20000000000, 0xffffffffffffffff, 0x0, 0xfffffffffffffffd, 0x1000001000, 0x46}, 0x0, &(0x7f0000000000)={0x3ff, 0x7, 0xff00, 0x9, 0x0, 0xf, 0x80000002}, 0x0, 0x0) setsockopt$packet_int(0xffffffffffffffff, 0x107, 0x12, &(0x7f0000000480)=0xdb26, 0x4) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f00000005c0)={'batadv_slave_1\x00', 0x0}) ioctl$ifreq_SIOCGIFINDEX_team(r1, 0x8933, &(0x7f0000000600)={'team0\x00', 0x0}) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(r3, 0x89f2, &(0x7f00000006c0)={'syztnl1\x00', &(0x7f0000000640)={'syztnl1\x00', 0x0, 0x0, 0x0, 0x2, 0x9, 0x30, @mcast2, @loopback, 0x7, 0x80, 0x36, 0x81}}) r7 = socket(0x10, 0x803, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000400)={'veth0_to_hsr\x00', 0x0}) sendmsg$nl_route_sched(r7, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000480)=@newqdisc={0x58, 0x24, 0x4ee4e6a52ff56541, 0x70bd25, 0x25dfdbfe, {0x0, 0x0, 0x0, r8, {0x0, 0xffe1}, {0xffff, 0xffff}, {0xffe0, 0xfff3}}, [@qdisc_kind_options=@q_sfb={{0x8}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28, 0x1, {0xc, 0x1, 0x4, 0x12, 0x3, 0xaa, 0x9, 0xa61, 0x80}}}}]}, 0x58}}, 0xc840) sendmsg$nl_route_sched(r7, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)=@newtfilter={0x38, 0x2c, 0xd2b, 0x70bd2d, 0x25dfdbfb, {0x0, 0x0, 0x0, r8, {0x2}, {}, {0x7, 0x3}}, [@filter_kind_options=@f_u32={{0x8}, {0xc, 0x2, [@TCA_U32_DIVISOR={0x8, 0x4, 0x4}]}}]}, 0x38}, 0x1, 0x0, 0x0, 0x4084}, 0x0) sendmsg$ETHTOOL_MSG_LINKINFO_GET(r1, &(0x7f0000000800)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f00000007c0)={&(0x7f0000000700)={0xac, 0x0, 0x10, 0x70bd2b, 0x25dfdbff, {}, [@HEADER={0x3c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'tunl0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'netpci0\x00'}]}, @HEADER={0x2c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r4}]}, @HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r5}]}, @HEADER={0x24, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r6}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}]}]}, 0xac}}, 0x4) mount_setattr(0xffffffffffffffff, &(0x7f0000000000)='./file0\x00', 0x900, &(0x7f00000000c0)={0x0, 0x80, 0x180000}, 0x20) symlink(&(0x7f0000001640)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa/../file0\x00', &(0x7f0000000000)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') setsockopt$inet_int(r0, 0x0, 0x7, 0x0, 0x0) 9.772421995s ago: executing program 3 (id=83): syz_open_dev$tty1(0xc, 0x4, 0x1) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) socket$netlink(0x10, 0x3, 0x14) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)) socket$pppoe(0x18, 0x1, 0x0) openat$rtc(0xffffffffffffff9c, 0x0, 0x189182, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=@base={0x12, 0x8, 0x4, 0x2}, 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000180)={{r1}, &(0x7f0000000040), &(0x7f0000000140)=r0}, 0x20) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000000)={r1, &(0x7f00000001c0)="1a", &(0x7f00000002c0)=""/215}, 0x20) 8.511779656s ago: executing program 4 (id=84): splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x7c1c, 0x8) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r0 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) fdatasync(r0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r2 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r2, 0x10e, 0xc, 0x0, 0x0) write(r2, &(0x7f0000000000)="240000001a005f0214f9f407000901000000000000000005000000000800040001000000", 0x24) socket$inet6(0xa, 0x1, 0x8010000000000084) r3 = socket(0xf, 0x80000, 0x0) setsockopt$XDP_RX_RING(r3, 0x11b, 0x2, &(0x7f0000000040)=0x100001, 0x4) capset(&(0x7f0000000440)={0x20071026}, &(0x7f0000000300)={0x6, 0x4, 0x5, 0x40087, 0xffffffff, 0x40}) r4 = socket$nl_crypto(0x10, 0x3, 0x15) sendmsg$netlink(r4, &(0x7f0000000880)={0x0, 0x0, &(0x7f0000000280)=[{&(0x7f0000000340)=ANY=[@ANYBLOB="e00000001100015fb7eb2683db499cb2903453e3325ceb5a18b7335b46095079704e144e3b2e"], 0xe0}], 0x1, 0x0, 0x0, 0x2000081}, 0x20048040) bpf$MAP_CREATE(0x0, &(0x7f0000000540)=ANY=[], 0x50) openat$full(0xffffffffffffff9c, &(0x7f0000000100), 0x5010c0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) pipe2$watch_queue(&(0x7f0000000500)={0xffffffffffffffff}, 0x80) keyctl$KEYCTL_WATCH_KEY(0x20, 0x0, r5, 0x0) pipe2$watch_queue(0x0, 0x80) keyctl$KEYCTL_WATCH_KEY(0x20, 0x0, 0xffffffffffffffff, 0xffffffffffffffff) memfd_secret(0x0) 8.500673267s ago: executing program 3 (id=85): r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) connect$packet(r0, &(0x7f0000000200)={0x1f, 0xf8, 0x0, 0x1, 0x82, 0x6, @random="a55378321800"}, 0x14) shutdown(r0, 0x1) 8.07202081s ago: executing program 0 (id=86): r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) connect$packet(r0, &(0x7f0000000200)={0x1f, 0xf8, 0x0, 0x1, 0x82, 0x6, @random="a55378321800"}, 0x14) shutdown(r0, 0x1) 6.891388778s ago: executing program 4 (id=87): syz_mount_image$nilfs2(&(0x7f0000000000), &(0x7f0000000f00)='./file1\x00', 0x200000, &(0x7f0000003e00)=ANY=[@ANYBLOB="009183ca169ea49b017c4525460e942861bdc4abce9dbb90bc2b4e8baf45173cca8416aad7588b75890f0417639f4a0f9733c06e63ecdf790818598bcab8ec62d21a3221757ec98d355e6d4f1794d2254f18beca38ff286a24f78e2ce4147c97a358e0d6f00bd0e176a499868ac13b8e5485922a1a05851e32a3147b22f9c663", @ANYRES32, @ANYRES16, @ANYRESDEC, @ANYRESOCT, @ANYBLOB="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"], 0x1, 0xee7, &(0x7f0000001e40)="$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") r0 = open(&(0x7f00000000c0)='.\x00', 0x0, 0x0) getdents64(r0, 0x0, 0x10) 6.611770487s ago: executing program 3 (id=88): r0 = socket(0xa, 0x3, 0xff) syz_emit_ethernet(0x3e, &(0x7f00000000c0)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaa3986dd6c40000000000000000100000000"], 0x0) setsockopt$inet6_int(r0, 0x29, 0x8, &(0x7f0000000080)=0x8000, 0x4) syz_mount_image$udf(&(0x7f0000000100), &(0x7f0000000500)='./file0\x00', 0x0, &(0x7f0000000000)=ANY=[], 0x1, 0x495, &(0x7f0000000a40)="$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") bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000040)={&(0x7f00000010c0)=ANY=[@ANYBLOB="9feb01001800000000000000480000004800000006000000000000000000000300000000030000000200000000000000000000000000000a040000000000000000000003000000000300000004000000030000000400000000000008030000000000ba2e5f"], 0x0, 0x66}, 0x28) r1 = socket(0x400000000010, 0x3, 0x0) openat$fuse(0xffffffffffffff9c, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) socket$nl_route(0x10, 0x3, 0x0) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'batadv_slave_1\x00'}) sendmsg$NL80211_CMD_GET_WOWLAN(r0, &(0x7f00000004c0)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000480)={&(0x7f0000000440)=ANY=[@ANYBLOB="02000000", @ANYRES16=0x0, @ANYBLOB="00012abd7000fedbdf254900000008000300", @ANYRES32=0x0, @ANYBLOB], 0x1c}, 0x1, 0x0, 0x0, 0x80}, 0x40080d1) setsockopt$inet6_tcp_buf(0xffffffffffffffff, 0x6, 0x1f, &(0x7f0000001540)='t', 0x1) r3 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000002c0)='/sys/power/resume', 0x149a82, 0x10) write$cgroup_int(r3, &(0x7f0000000000)=0xb00, 0x12) r4 = syz_open_dev$dri(&(0x7f00000000c0), 0x1ff, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r4, 0xc04064a0, &(0x7f00000003c0)={0x0, &(0x7f0000000000)=[0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0x0, 0x0, 0x10}) ioctl$DRM_IOCTL_MODE_OBJ_GETPROPERTIES(r4, 0xc02064b9, &(0x7f0000000100)={&(0x7f0000000040), &(0x7f0000000080)=[0x0, 0x0, 0x0, 0x0], 0x0, r5, 0xdededede}) syz_open_dev$loop(&(0x7f0000000280), 0xa4f, 0x0) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpuacct.usage_user\x00', 0x275a, 0x0) write$binfmt_misc(r6, &(0x7f0000000040), 0xe09) 6.52400894s ago: executing program 0 (id=89): mkdir(&(0x7f00000003c0)='./file0\x00', 0x10) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='map_files\x00') mount$tmpfs(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f00000000c0), 0x842, &(0x7f0000000340)=ANY=[@ANYBLOB='huge=always,huge=within_size,n', @ANYRESDEC=r0]) chdir(&(0x7f0000000140)='./file0\x00') r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) write$binfmt_script(r1, &(0x7f0000000400)={'#! ', '', [], 0xa, "201100000000b073dbc2e1e649efc1d73828a06efe233dc8013ff03212750dda49e8d9eed99dedf65d632853f4dfe6d11ac5eb9dc22d5ec2b368dd84d61c"}, 0xffffff9b) 6.428351563s ago: executing program 1 (id=90): r0 = socket(0x80000000000000a, 0x2, 0x0) setsockopt$inet6_group_source_req(r0, 0x29, 0x2e, &(0x7f0000000200)={0x0, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}, 0x2}}, {{0xa, 0x0, 0xffffffff, @remote}}}, 0x108) socket$xdp(0x2c, 0x3, 0x0) unshare(0x20000400) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r1 = socket$inet6_udp(0xa, 0x2, 0x0) bind$inet6(r1, &(0x7f0000000000)={0xa, 0xe22, 0x0, @empty}, 0x1c) syz_emit_ethernet(0x48, &(0x7f0000000140)={@link_local, @random="ece65fbcee55", @void, {@ipv6={0x86dd, @udp={0x0, 0x6, "010100", 0x12, 0x11, 0x0, @remote, @local, {[], {0x3, 0xe22, 0x12, 0x0, @gue={{0x2, 0x0, 0x0, 0x3}, "ffb0"}}}}}}}, 0x0) r2 = getpgrp(0x0) sched_setaffinity(r2, 0x8, &(0x7f0000000040)=0x10000005) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x2, 0x0) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000000)=0x3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r4 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r4, 0x1, 0x0) r5 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r5, &(0x7f0000019680)=""/102392, 0x18ff8) connect$bt_l2cap(0xffffffffffffffff, &(0x7f0000000040)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0xb}, 0xe) shutdown(0xffffffffffffffff, 0x1) setsockopt$inet6_group_source_req(0xffffffffffffffff, 0x29, 0x2b, &(0x7f0000000200)={0x0, {{0xa, 0xffff, 0x0, @mcast1={0xff, 0x7}, 0x10000}}, {{0xa, 0x0, 0x0, @mcast1}}}, 0x108) 4.463876446s ago: executing program 1 (id=91): r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$PIO_UNISCRNMAP(r0, 0x4b6a, 0x0) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) sendto$packet(0xffffffffffffffff, &(0x7f00000000c0)="05", 0x1, 0x4, 0x0, 0x0) write$FUSE_INIT(0xffffffffffffffff, &(0x7f0000000040)={0x50, 0x0, 0x0, {0x7, 0x1f, 0x8, 0xffffffffd24b2432, 0x83, 0xffff, 0x0, 0xabe6, 0x0, 0x0, 0x80, 0x8001}}, 0x50) socket$netlink(0x10, 0x3, 0x14) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x651, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r3, 0x0, 0x0) r4 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000000), 0x189182, 0x0) ioctl$RTC_ALM_SET(r4, 0x40247007, 0x0) ioctl$PPPIOCGCHAN(r3, 0x80047437, 0xfffffffffffffffd) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) syz_emit_vhci(&(0x7f0000000040)=ANY=[@ANYBLOB="043ef50d"], 0xf8) ioctl$sock_TIOCOUTQ(r5, 0x5411, 0x0) r6 = bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=@base={0x12, 0x8, 0x4, 0x2}, 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000180)={{r6}, &(0x7f0000000040), &(0x7f0000000140)=r1}, 0x20) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000000)={r6, &(0x7f00000001c0)="1a", &(0x7f00000002c0)=""/215}, 0x20) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r7, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)=@newlink={0x3c, 0x10, 0x403, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x4}}}, @IFLA_NUM_TX_QUEUES={0x8, 0x1f, 0x7}]}, 0x3c}}, 0x0) 3.69497379s ago: executing program 2 (id=92): r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/profiling', 0xa0642, 0x0) openat$kvm(0xffffffffffffff9c, 0x0, 0x3a1dc0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x1) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x32, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) keyctl$instantiate(0xc, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="6e65772064656661756c74eb2fbb527d46b04f9365643a73797a2030303030303030"], 0x2d, 0xfffffffffffffff9) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$net_dm(&(0x7f0000000000), r2) sendmsg$NET_DM_CMD_START(r2, &(0x7f0000004c00)={0x0, 0x0, &(0x7f0000004bc0)={&(0x7f0000004b80)={0x14, r3, 0x1, 0x70bd2c, 0x25dfdbfc}, 0x14}, 0x1, 0x0, 0x0, 0x4}, 0x8000) add_key(&(0x7f0000000140)='encrypted\x00', &(0x7f0000000180), &(0x7f0000000100), 0xca, 0xfffffffffffffffe) sendmsg$IPSET_CMD_ADD(0xffffffffffffffff, &(0x7f0000000500)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000480)={&(0x7f00000003c0)=ANY=[@ANYBLOB="a000000009060500000000000000000002000005050001000700000008000940fffffffa1c0007801800148014000240ff02000000000000000000000000000114000780080009400000000730000880100007800c001b4000000000000000090c00078008001c4000000006100007800c001940ffffffffffffffff08000940000000050900020073797a3300"/160], 0xa0}, 0x1, 0x0, 0x0, 0x8054}, 0x804) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x1, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) writev(0xffffffffffffffff, &(0x7f0000000840)=[{0x0}], 0x1) r4 = socket$inet_udp(0x2, 0x2, 0x0) socket$key(0xf, 0x3, 0x2) bind$inet(r4, &(0x7f0000000280)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x15}}, 0x10) setsockopt$inet_IP_XFRM_POLICY(r4, 0x0, 0x11, &(0x7f00000002c0)={{{@in=@multicast2, @in6=@mcast1, 0x4e20, 0x4, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0xee01}, {0x0, 0xfffffffffffffffe, 0x0, 0x0, 0x5, 0x2, 0x3, 0xfffffffffffffffe}, {0x0, 0x0, 0xfffffffffffffffc, 0xff}, 0x200000, 0x6e6fb5, 0x1, 0x0, 0x0, 0x3}, {{@in=@multicast2, 0x0, 0x32}, 0x0, @in=@local, 0xfffffffd, 0x2, 0x0, 0xb7, 0x5, 0xffffff7e, 0xffffffff}}, 0xe8) sendmmsg(r4, &(0x7f0000007fc0), 0x800001d, 0x1c) r5 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r5, 0x4020ae46, 0x0) ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0) write$tcp_mem(r0, &(0x7f0000000280)={0x11, 0x2d, 0x0, 0x3a, 0xfffffffffffffffe, 0x2c}, 0x48) bind$inet6(r0, &(0x7f00000001c0)={0xa, 0x4e21, 0x6, @local, 0x4}, 0x1c) 3.632251893s ago: executing program 0 (id=93): timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)) r0 = socket$unix(0x1, 0x1, 0x0) bind$unix(r0, 0x0, 0x0) listen(r0, 0x0) r1 = socket$unix(0x1, 0x1, 0x0) connect$unix(r1, &(0x7f0000000000)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) r2 = socket$unix(0x1, 0x1, 0x0) connect$unix(r2, &(0x7f0000000000)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(0x0, 0x1, &(0x7f0000000040)={{0x77359400}, {0x0, 0x989680}}, 0x0) 3.587715064s ago: executing program 4 (id=94): r0 = socket$inet_mptcp(0x2, 0x1, 0x106) openat(0xffffffffffffff9c, 0x0, 0x8242, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r2 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x8081) openat$binfmt(0xffffffffffffff9c, 0x0, 0x42, 0x1ff) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r3 = socket(0x1d, 0x2, 0x6) syz_open_dev$hidraw(&(0x7f00000004c0), 0x0, 0x14a042) getsockopt$inet6_IPV6_FLOWLABEL_MGR(r3, 0x29, 0x20, &(0x7f0000000400)={@rand_addr=' \x01\x00', 0x6, 0x0, 0x0, 0x0, 0x280, 0xf4}, 0x0) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x0, 0x20000000000, 0xffffffffffffffff, 0x0, 0xfffffffffffffffd, 0x1000001000, 0x46}, 0x0, &(0x7f0000000000)={0x3ff, 0x7, 0xff00, 0x9, 0x0, 0xf, 0x80000002}, 0x0, 0x0) setsockopt$packet_int(0xffffffffffffffff, 0x107, 0x12, &(0x7f0000000480)=0xdb26, 0x4) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f00000005c0)={'batadv_slave_1\x00', 0x0}) ioctl$ifreq_SIOCGIFINDEX_team(r1, 0x8933, &(0x7f0000000600)={'team0\x00', 0x0}) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(r3, 0x89f2, &(0x7f00000006c0)={'syztnl1\x00', &(0x7f0000000640)={'syztnl1\x00', 0x0, 0x0, 0x0, 0x2, 0x9, 0x30, @mcast2, @loopback, 0x7, 0x80, 0x36, 0x81}}) r7 = socket(0x10, 0x803, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000400)={'veth0_to_hsr\x00', 0x0}) sendmsg$nl_route_sched(r7, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000480)=@newqdisc={0x58, 0x24, 0x4ee4e6a52ff56541, 0x70bd25, 0x25dfdbfe, {0x0, 0x0, 0x0, r8, {0x0, 0xffe1}, {0xffff, 0xffff}, {0xffe0, 0xfff3}}, [@qdisc_kind_options=@q_sfb={{0x8}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28, 0x1, {0xc, 0x1, 0x4, 0x12, 0x3, 0xaa, 0x9, 0xa61, 0x80}}}}]}, 0x58}}, 0xc840) sendmsg$nl_route_sched(r7, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)=@newtfilter={0x38, 0x2c, 0xd2b, 0x70bd2d, 0x25dfdbfb, {0x0, 0x0, 0x0, r8, {0x2}, {}, {0x7, 0x3}}, [@filter_kind_options=@f_u32={{0x8}, {0xc, 0x2, [@TCA_U32_DIVISOR={0x8, 0x4, 0x4}]}}]}, 0x38}, 0x1, 0x0, 0x0, 0x4084}, 0x0) sendmsg$ETHTOOL_MSG_LINKINFO_GET(r1, &(0x7f0000000800)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f00000007c0)={&(0x7f0000000700)={0xac, 0x0, 0x10, 0x70bd2b, 0x25dfdbff, {}, [@HEADER={0x3c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'tunl0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'netpci0\x00'}]}, @HEADER={0x2c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r4}]}, @HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r5}]}, @HEADER={0x24, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r6}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}]}]}, 0xac}}, 0x4) mount_setattr(0xffffffffffffffff, &(0x7f0000000000)='./file0\x00', 0x900, &(0x7f00000000c0)={0x0, 0x80, 0x180000}, 0x20) symlink(&(0x7f0000001640)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa/../file0\x00', &(0x7f0000000000)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') setsockopt$inet_int(r0, 0x0, 0x7, 0x0, 0x0) 3.41292207s ago: executing program 3 (id=95): syz_open_dev$tty1(0xc, 0x4, 0x1) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) socket$netlink(0x10, 0x3, 0x14) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)) socket$pppoe(0x18, 0x1, 0x0) openat$rtc(0xffffffffffffff9c, 0x0, 0x189182, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=@base={0x12, 0x8, 0x4, 0x2}, 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000180)={{r1}, &(0x7f0000000040), &(0x7f0000000140)=r0}, 0x20) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000000)={r1, &(0x7f00000001c0)="1a", &(0x7f00000002c0)=""/215}, 0x20) 2.422281412s ago: executing program 0 (id=96): r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$PIO_UNISCRNMAP(r0, 0x4b6a, 0x0) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) sendto$packet(0xffffffffffffffff, &(0x7f00000000c0)="05", 0x1, 0x4, 0x0, 0x0) write$FUSE_INIT(0xffffffffffffffff, &(0x7f0000000040)={0x50, 0x0, 0x0, {0x7, 0x1f, 0x8, 0xffffffffd24b2432, 0x83, 0xffff, 0x0, 0xabe6, 0x0, 0x0, 0x80, 0x8001}}, 0x50) socket$netlink(0x10, 0x3, 0x14) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r5 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r5, 0x0, 0x0) r6 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000000), 0x189182, 0x0) ioctl$RTC_ALM_SET(r6, 0x40247007, 0x0) ioctl$PPPIOCGCHAN(r5, 0x80047437, 0xfffffffffffffffd) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) syz_emit_vhci(&(0x7f0000000040)=ANY=[@ANYBLOB="043ef50d"], 0xf8) ioctl$sock_TIOCOUTQ(r7, 0x5411, 0x0) r8 = bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=@base={0x12, 0x8, 0x4, 0x2}, 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000180)={{r8}, &(0x7f0000000040), &(0x7f0000000140)=r1}, 0x20) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000000)={r8, &(0x7f00000001c0)="1a", &(0x7f00000002c0)=""/215}, 0x20) r9 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r9, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)=@newlink={0x3c, 0x10, 0x403, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x4}}}, @IFLA_NUM_TX_QUEUES={0x8, 0x1f, 0x7}]}, 0x3c}}, 0x0) 1.85586264s ago: executing program 3 (id=97): splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x7c1c, 0x8) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r0 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) fdatasync(r0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r2 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r2, 0x10e, 0xc, 0x0, 0x0) write(r2, &(0x7f0000000000)="240000001a005f0214f9f407000901000000000000000005000000000800040001000000", 0x24) socket$inet6(0xa, 0x1, 0x8010000000000084) r3 = socket(0xf, 0x80000, 0x0) setsockopt$XDP_RX_RING(r3, 0x11b, 0x2, &(0x7f0000000040)=0x100001, 0x4) capset(&(0x7f0000000440)={0x20071026}, &(0x7f0000000300)={0x6, 0x4, 0x5, 0x40087, 0xffffffff, 0x40}) socket$nl_crypto(0x10, 0x3, 0x15) r4 = add_key$keyring(0x0, &(0x7f0000000400)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffb) bpf$MAP_CREATE(0x0, &(0x7f0000000540)=ANY=[], 0x50) openat$full(0xffffffffffffff9c, &(0x7f0000000100), 0x5010c0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) pipe2$watch_queue(&(0x7f0000000500)={0xffffffffffffffff}, 0x80) keyctl$KEYCTL_WATCH_KEY(0x20, r4, r5, 0x0) pipe2$watch_queue(0x0, 0x80) keyctl$KEYCTL_WATCH_KEY(0x20, r4, 0xffffffffffffffff, 0xffffffffffffffff) memfd_secret(0x0) 1.365992056s ago: executing program 4 (id=98): socket$inet6_tcp(0xa, 0x1, 0x0) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x3, 0x5) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f00000000c0)={@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x800, 0x0, 0x3, 0x9}, 0x20) setsockopt$inet6_int(r0, 0x29, 0x1000000000021, &(0x7f0000000000)=0x1ff, 0x4) sendmmsg(r0, &(0x7f0000001500)=[{{&(0x7f0000000040)=@l2tp6={0xa, 0x0, 0x7080000, @ipv4={'\x00', '\xff\xff', @broadcast}, 0x7, 0x1}, 0x80, 0x0, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="080100000000000029000000", @ANYRES64=r0], 0x108}}], 0x1, 0xc040) r1 = socket$inet_udp(0x2, 0x2, 0x0) syz_open_procfs(0x0, 0x0) syz_open_dev$tty1(0xc, 0x4, 0x1) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r2 = getpgrp(0x0) sched_setaffinity(r2, 0x8, &(0x7f0000000040)=0x5) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x2, 0x0) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000000)=0x3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r4 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r4, 0x1, 0x0) r5 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r5, &(0x7f0000019680)=""/102392, 0x18ff8) r6 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) connect$packet(r6, &(0x7f0000000200)={0x1f, 0xf8, 0x0, 0x1, 0x82, 0x6, @random="a55378321800"}, 0x14) shutdown(r6, 0x1) bind$inet(r1, &(0x7f00000002c0)={0x2, 0x4e20, @multicast1}, 0x10) syz_emit_ethernet(0x2e, &(0x7f00000000c0)={@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}, @empty, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x20, 0x68, 0x0, 0x0, 0x11, 0x0, @initdev={0xac, 0x1e, 0x1, 0x0}, @empty=0xe0000001}, {0x0, 0x4e20, 0xc, 0x0, @gue={{0x1, 0x1, 0x0, 0x3d, 0x0, @void}}}}}}}, 0x0) 1.364930805s ago: executing program 0 (id=99): socket$inet6_tcp(0xa, 0x1, 0x0) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x3, 0x5) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f00000000c0)={@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x800, 0x0, 0x3, 0x9}, 0x20) setsockopt$inet6_int(r0, 0x29, 0x1000000000021, &(0x7f0000000000)=0x1ff, 0x4) sendmmsg(r0, &(0x7f0000001500)=[{{&(0x7f0000000040)=@l2tp6={0xa, 0x0, 0x7080000, @ipv4={'\x00', '\xff\xff', @broadcast}, 0x7, 0x1}, 0x80, 0x0, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="080100000000000029000000", @ANYRES64=r0], 0x108}}], 0x1, 0xc040) r1 = socket$inet_udp(0x2, 0x2, 0x0) syz_open_procfs(0x0, 0x0) syz_open_dev$tty1(0xc, 0x4, 0x1) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r2 = getpgrp(0x0) sched_setaffinity(r2, 0x8, &(0x7f0000000040)=0x5) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x2, 0x0) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000000)=0x3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r4 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r4, 0x1, 0x0) r5 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r5, &(0x7f0000019680)=""/102392, 0x18ff8) r6 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) connect$packet(r6, &(0x7f0000000200)={0x1f, 0xf8, 0x0, 0x1, 0x82, 0x6, @random="a55378321800"}, 0x14) shutdown(r6, 0x1) bind$inet(r1, &(0x7f00000002c0)={0x2, 0x4e20, @multicast1}, 0x10) syz_emit_ethernet(0x2e, &(0x7f00000000c0)={@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}, @empty, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x20, 0x68, 0x0, 0x0, 0x11, 0x0, @initdev={0xac, 0x1e, 0x1, 0x0}, @empty=0xe0000001}, {0x0, 0x4e20, 0xc, 0x0, @gue={{0x1, 0x1, 0x0, 0x3d, 0x0, @void}}}}}}}, 0x0) 1.22328633s ago: executing program 2 (id=100): connect$unix(0xffffffffffffffff, 0x0, 0x0) r0 = socket$kcm(0xa, 0x2, 0x0) openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000007c0), 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f00000007c0)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x8) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) ioctl$DRM_IOCTL_GET_CLIENT(0xffffffffffffffff, 0xc0186405, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r2 = socket(0x2, 0x2, 0x1) bind$unix(r2, 0x0, 0x0) r3 = syz_open_dev$usbfs(&(0x7f00000000c0), 0x201, 0x2002) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x11, r3, 0x0) r4 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r4, 0x0, 0x40044) recvmmsg(r4, 0x0, 0x0, 0x2, 0x0) r5 = socket$inet_sctp(0x2, 0x5, 0x84) setsockopt$IP_VS_SO_SET_ADDDEST(0xffffffffffffffff, 0x0, 0x487, 0x0, 0x0) setsockopt$IP_VS_SO_SET_ADDDEST(r5, 0x0, 0x487, 0x0, 0x0) mount(0x0, &(0x7f0000000080)='./file0\x00', 0xffffffffffffffff, 0x80, &(0x7f00000000c0)='/dev/vhost-vsock\x00') r6 = openat$comedi(0xffffff9c, &(0x7f0000000040)='/dev/comedi4\x00', 0x101402, 0x0) ioctl$COMEDI_INSNLIST(r6, 0x8008640b, &(0x7f0000000400)={0x0, 0x0}) sendmsg$sock(r0, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000000)}, 0x40004) openat$dsp(0xffffff9c, &(0x7f0000000140), 0x40000, 0x0) ioctl$FS_IOC_READ_VERITY_METADATA(0xffffffffffffffff, 0xc0286687, &(0x7f0000000100)={0x3, 0x8000000000000000, 0x0, 0x0}) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x5, &(0x7f0000000600)=0xdf8, 0x4) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xb, 0xc3072, 0xffffffffffffffff, 0x0) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) 0s ago: executing program 3 (id=101): r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/profiling', 0xa0642, 0x0) openat$kvm(0xffffffffffffff9c, 0x0, 0x3a1dc0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x1) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) read$msr(0xffffffffffffffff, &(0x7f0000019680)=""/102392, 0x18ff8) keyctl$instantiate(0xc, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="6e65772064656661756c74eb2fbb527d46b04f9365643a73797a20303030303030303030303030303030303031"], 0x2d, 0xfffffffffffffff9) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$net_dm(&(0x7f0000000000), r1) sendmsg$NET_DM_CMD_START(r1, &(0x7f0000004c00)={0x0, 0x0, &(0x7f0000004bc0)={&(0x7f0000004b80)={0x14, r2, 0x1, 0x70bd2c, 0x25dfdbfc}, 0x14}, 0x1, 0x0, 0x0, 0x4}, 0x8000) add_key(&(0x7f0000000140)='encrypted\x00', &(0x7f0000000180), &(0x7f0000000100), 0xca, 0xfffffffffffffffe) sendmsg$IPSET_CMD_ADD(0xffffffffffffffff, &(0x7f0000000500)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000480)={&(0x7f00000003c0)=ANY=[@ANYBLOB="a000000009060500000000000000000002000005050001000700000008000940fffffffa1c0007801800148014000240ff02000000000000000000000000000114000780080009400000000730000880100007800c001b4000000000000000090c00078008001c4000000006100007800c001940ffffffffffffffff08000940000000050900020073797a3300"/160], 0xa0}, 0x1, 0x0, 0x0, 0x8054}, 0x804) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) writev(0xffffffffffffffff, 0x0, 0x0) r3 = socket$inet_udp(0x2, 0x2, 0x0) r4 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r4, &(0x7f0000000140)={0x40000000, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB="0207000902"], 0x10}}, 0x0) bind$inet(r3, &(0x7f0000000280)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x15}}, 0x10) setsockopt$inet_IP_XFRM_POLICY(r3, 0x0, 0x11, &(0x7f00000002c0)={{{@in=@multicast2, @in6=@mcast1, 0x4e20, 0x4, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0xee01}, {0x0, 0xfffffffffffffffe, 0x0, 0x0, 0x5, 0x2, 0x3, 0xfffffffffffffffe}, {0x0, 0x0, 0xfffffffffffffffc, 0xff}, 0x200000, 0x6e6fb5, 0x1, 0x0, 0x0, 0x3}, {{@in=@multicast2, 0x0, 0x32}, 0x0, @in=@local, 0xfffffffd, 0x2, 0x0, 0xb7, 0x5, 0xffffff7e, 0xffffffff}}, 0xe8) sendmmsg(r3, &(0x7f0000007fc0), 0x800001d, 0x1c) r5 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r5, 0x4020ae46, 0x0) ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0) write$tcp_mem(r0, &(0x7f0000000280)={0x11, 0x2d, 0x0, 0x3a, 0xfffffffffffffffe, 0x2c}, 0x48) bind$inet6(r0, &(0x7f00000001c0)={0xa, 0x4e21, 0x6, @local, 0x4}, 0x1c) kernel console output (not intermixed with test programs): [ 57.316308][ T3934] 8021q: adding VLAN 0 to HW filter on device bond0 [ 57.337603][ T3934] eql: remember to turn off Van-Jacobson compression on your slave devices Starting crond: OK Starting sshd: OK [ 58.347001][ T4022] sshd (4022) used greatest stack depth: 20824 bytes left syzkaller Warning: Permanently added '10.128.1.75' (ED25519) to the list of known hosts. syzkaller login: [ 84.823992][ T4259] cgroup: Unknown subsys name 'net' [ 84.930140][ T4259] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 86.603349][ T4259] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k FS [ 88.217837][ T4273] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 88.242439][ T4275] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 88.250893][ T4275] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 88.269753][ T4279] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 88.281066][ T4286] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 88.289691][ T4286] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 88.298850][ T4287] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 88.306793][ T4287] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 88.315897][ T4287] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 88.323918][ T4287] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 88.334466][ T4287] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 88.342826][ T4287] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 88.365331][ T4286] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 88.374727][ T4286] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 88.382805][ T4286] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 88.391208][ T4286] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 88.398822][ T4286] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 88.414152][ T4286] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 88.425738][ T47] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 88.435400][ T47] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 88.435664][ T4287] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 88.447016][ T47] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 88.458163][ T47] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 88.465673][ T47] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 88.473041][ T47] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 88.482942][ T4279] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 88.493322][ T4279] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 88.501721][ T4279] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 88.510500][ T4279] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 88.519653][ T4279] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 88.948425][ T4278] chnl_net:caif_netlink_parms(): no params data found [ 89.098144][ T4276] chnl_net:caif_netlink_parms(): no params data found [ 89.109152][ T4281] chnl_net:caif_netlink_parms(): no params data found [ 89.148597][ T4277] chnl_net:caif_netlink_parms(): no params data found [ 89.205540][ T4278] bridge0: port 1(bridge_slave_0) entered blocking state [ 89.214305][ T4278] bridge0: port 1(bridge_slave_0) entered disabled state [ 89.223063][ T4278] device bridge_slave_0 entered promiscuous mode [ 89.263940][ T4278] bridge0: port 2(bridge_slave_1) entered blocking state [ 89.271214][ T4278] bridge0: port 2(bridge_slave_1) entered disabled state [ 89.279647][ T4278] device bridge_slave_1 entered promiscuous mode [ 89.317268][ T4272] chnl_net:caif_netlink_parms(): no params data found [ 89.374214][ T4278] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 89.400845][ T4276] bridge0: port 1(bridge_slave_0) entered blocking state [ 89.408473][ T4276] bridge0: port 1(bridge_slave_0) entered disabled state [ 89.419677][ T4276] device bridge_slave_0 entered promiscuous mode [ 89.438918][ T4278] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 89.467839][ T4276] bridge0: port 2(bridge_slave_1) entered blocking state [ 89.475431][ T4276] bridge0: port 2(bridge_slave_1) entered disabled state [ 89.487563][ T4276] device bridge_slave_1 entered promiscuous mode [ 89.505480][ T4281] bridge0: port 1(bridge_slave_0) entered blocking state [ 89.512774][ T4281] bridge0: port 1(bridge_slave_0) entered disabled state [ 89.522007][ T4281] device bridge_slave_0 entered promiscuous mode [ 89.563393][ T4281] bridge0: port 2(bridge_slave_1) entered blocking state [ 89.570677][ T4281] bridge0: port 2(bridge_slave_1) entered disabled state [ 89.579636][ T4281] device bridge_slave_1 entered promiscuous mode [ 89.593027][ T4278] team0: Port device team_slave_0 added [ 89.602906][ T4277] bridge0: port 1(bridge_slave_0) entered blocking state [ 89.610357][ T4277] bridge0: port 1(bridge_slave_0) entered disabled state [ 89.621264][ T4277] device bridge_slave_0 entered promiscuous mode [ 89.657870][ T4278] team0: Port device team_slave_1 added [ 89.664780][ T4277] bridge0: port 2(bridge_slave_1) entered blocking state [ 89.672027][ T4277] bridge0: port 2(bridge_slave_1) entered disabled state [ 89.681511][ T4277] device bridge_slave_1 entered promiscuous mode [ 89.691080][ T4276] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 89.712617][ T4276] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 89.751840][ T4281] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 89.772762][ T4272] bridge0: port 1(bridge_slave_0) entered blocking state [ 89.780259][ T4272] bridge0: port 1(bridge_slave_0) entered disabled state [ 89.788832][ T4272] device bridge_slave_0 entered promiscuous mode [ 89.814130][ T4281] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 89.841759][ T4272] bridge0: port 2(bridge_slave_1) entered blocking state [ 89.849700][ T4272] bridge0: port 2(bridge_slave_1) entered disabled state [ 89.859009][ T4272] device bridge_slave_1 entered promiscuous mode [ 89.876828][ T4278] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 89.884303][ T4278] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 89.911134][ T4278] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 89.925946][ T4277] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 89.952532][ T4276] team0: Port device team_slave_0 added [ 89.980043][ T4278] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 89.987619][ T4278] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 90.015006][ T4278] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 90.030198][ T4277] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 90.045307][ T4281] team0: Port device team_slave_0 added [ 90.061379][ T4276] team0: Port device team_slave_1 added [ 90.069372][ T4272] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 90.083340][ T4272] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 90.100118][ T4281] team0: Port device team_slave_1 added [ 90.148933][ T4277] team0: Port device team_slave_0 added [ 90.157881][ T4277] team0: Port device team_slave_1 added [ 90.183002][ T4272] team0: Port device team_slave_0 added [ 90.207275][ T4276] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 90.217716][ T4276] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 90.253259][ T4276] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 90.267711][ T4281] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 90.278186][ T4281] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 90.308940][ T4281] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 90.323119][ T4272] team0: Port device team_slave_1 added [ 90.348235][ T4276] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 90.356198][ T4276] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 90.383602][ T4276] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 90.396466][ T4281] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 90.405945][ T4281] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 90.433347][ T4281] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 90.465444][ T4277] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 90.472473][ T4277] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 90.500050][ T4277] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 90.514098][ T4288] Bluetooth: hci2: command 0x0409 tx timeout [ 90.514113][ T4279] Bluetooth: hci1: command 0x0409 tx timeout [ 90.514422][ T4279] Bluetooth: hci0: command 0x0409 tx timeout [ 90.537588][ T4278] device hsr_slave_0 entered promiscuous mode [ 90.547530][ T4278] device hsr_slave_1 entered promiscuous mode [ 90.568336][ T4272] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 90.576671][ T4272] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 90.595055][ T4279] Bluetooth: hci4: command 0x0409 tx timeout [ 90.604477][ T4283] Bluetooth: hci3: command 0x0409 tx timeout [ 90.619476][ T4272] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 90.632452][ T4277] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 90.639851][ T4277] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 90.667378][ T4277] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 90.705371][ T4272] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 90.712517][ T4272] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 90.739339][ T4272] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 90.799332][ T4276] device hsr_slave_0 entered promiscuous mode [ 90.806732][ T4276] device hsr_slave_1 entered promiscuous mode [ 90.815035][ T4276] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 90.823368][ T4276] Cannot create hsr debugfs directory [ 90.876379][ T4281] device hsr_slave_0 entered promiscuous mode [ 90.888917][ T4281] device hsr_slave_1 entered promiscuous mode [ 90.896849][ T4281] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 90.906849][ T4281] Cannot create hsr debugfs directory [ 90.967438][ T4277] device hsr_slave_0 entered promiscuous mode [ 90.975306][ T4277] device hsr_slave_1 entered promiscuous mode [ 90.982694][ T4277] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 90.992185][ T4277] Cannot create hsr debugfs directory [ 91.011550][ T4272] device hsr_slave_0 entered promiscuous mode [ 91.021089][ T4272] device hsr_slave_1 entered promiscuous mode [ 91.029051][ T4272] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 91.037755][ T4272] Cannot create hsr debugfs directory [ 91.428965][ T4278] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 91.456505][ T4278] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 91.479659][ T4278] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 91.497645][ T4278] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 91.528355][ T4276] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 91.556913][ T4276] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 91.568869][ T4276] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 91.587037][ T4276] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 91.627708][ T4272] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 91.638715][ T4272] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 91.649187][ T4272] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 91.668752][ T4272] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 91.806322][ T4281] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 91.818970][ T4281] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 91.850779][ T4281] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 91.870126][ T4281] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 91.940675][ T4278] 8021q: adding VLAN 0 to HW filter on device bond0 [ 91.956235][ T14] cfg80211: failed to load regulatory.db [ 91.971368][ T4276] 8021q: adding VLAN 0 to HW filter on device bond0 [ 91.991890][ T4278] 8021q: adding VLAN 0 to HW filter on device team0 [ 92.011274][ T62] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 92.022673][ T62] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 92.040144][ T62] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 92.051943][ T62] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 92.093562][ T62] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 92.104766][ T62] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 92.115966][ T62] bridge0: port 1(bridge_slave_0) entered blocking state [ 92.123654][ T62] bridge0: port 1(bridge_slave_0) entered forwarding state [ 92.135410][ T62] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 92.147917][ T62] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 92.158901][ T62] bridge0: port 2(bridge_slave_1) entered blocking state [ 92.166373][ T62] bridge0: port 2(bridge_slave_1) entered forwarding state [ 92.185208][ T4277] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 92.206865][ T4276] 8021q: adding VLAN 0 to HW filter on device team0 [ 92.225910][ T62] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 92.237534][ T62] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 92.248920][ T62] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 92.259222][ T4277] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 92.280963][ T62] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 92.295409][ T62] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 92.307381][ T62] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 92.319474][ T62] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 92.328714][ T62] bridge0: port 1(bridge_slave_0) entered blocking state [ 92.335915][ T62] bridge0: port 1(bridge_slave_0) entered forwarding state [ 92.346089][ T62] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 92.354514][ T62] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 92.378122][ T4277] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 92.392096][ T4277] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 92.415672][ T2891] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 92.436093][ T2891] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 92.445468][ T2891] bridge0: port 2(bridge_slave_1) entered blocking state [ 92.453407][ T2891] bridge0: port 2(bridge_slave_1) entered forwarding state [ 92.467166][ T2891] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 92.476497][ T2891] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 92.486549][ T2891] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 92.496156][ T2891] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 92.505738][ T2891] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 92.521969][ T4272] 8021q: adding VLAN 0 to HW filter on device bond0 [ 92.538665][ T2891] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 92.572589][ T4278] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 92.589733][ T4278] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 92.600809][ T4283] Bluetooth: hci2: command 0x041b tx timeout [ 92.600875][ T4283] Bluetooth: hci1: command 0x041b tx timeout [ 92.605240][ T4283] Bluetooth: hci0: command 0x041b tx timeout [ 92.626804][ T48] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 92.640693][ T48] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 92.651479][ T48] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 92.667861][ T48] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 92.677139][ T4279] Bluetooth: hci4: command 0x041b tx timeout [ 92.677434][ T4283] Bluetooth: hci3: command 0x041b tx timeout [ 92.696387][ T48] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 92.745293][ T4272] 8021q: adding VLAN 0 to HW filter on device team0 [ 92.767581][ T48] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 92.783981][ T48] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 92.799387][ T48] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 92.808972][ T48] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 92.822881][ T48] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 92.832178][ T48] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 92.854818][ T4276] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 92.884477][ T4276] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 92.897635][ T4281] 8021q: adding VLAN 0 to HW filter on device bond0 [ 92.916812][ T48] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 92.931720][ T48] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 92.942205][ T48] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 92.960767][ T48] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 92.970169][ T48] bridge0: port 1(bridge_slave_0) entered blocking state [ 92.978312][ T48] bridge0: port 1(bridge_slave_0) entered forwarding state [ 92.989967][ T48] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 93.025673][ T62] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 93.035643][ T62] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 93.051292][ T62] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 93.068964][ T62] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 93.078655][ T62] bridge0: port 2(bridge_slave_1) entered blocking state [ 93.085887][ T62] bridge0: port 2(bridge_slave_1) entered forwarding state [ 93.122000][ T4281] 8021q: adding VLAN 0 to HW filter on device team0 [ 93.163630][ T62] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 93.179399][ T62] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 93.216583][ T2891] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 93.249307][ T2891] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 93.274804][ T2891] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 93.305492][ T2891] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 93.316299][ T2891] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 93.327664][ T2891] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 93.341633][ T2891] bridge0: port 1(bridge_slave_0) entered blocking state [ 93.348968][ T2891] bridge0: port 1(bridge_slave_0) entered forwarding state [ 93.387956][ T4278] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 93.402432][ T2891] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 93.412304][ T2891] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 93.428311][ T2891] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 93.447274][ T2891] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 93.459664][ T2891] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 93.475723][ T2891] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 93.513883][ T2891] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 93.536477][ T2891] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 93.546064][ T2891] bridge0: port 2(bridge_slave_1) entered blocking state [ 93.553367][ T2891] bridge0: port 2(bridge_slave_1) entered forwarding state [ 93.562437][ T2891] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 93.574588][ T2891] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 93.589653][ T2891] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 93.604394][ T4272] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 93.638924][ T2891] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 93.657254][ T2891] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 93.668972][ T2891] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 93.679723][ T2891] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 93.696229][ T2891] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 93.705359][ T2891] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 93.748011][ T48] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 93.763340][ T48] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 93.772289][ T48] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 93.785085][ T48] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 93.794746][ T48] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 93.805811][ T48] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 93.839009][ T4281] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 93.860938][ T48] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 93.875775][ T48] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 93.897821][ T4277] 8021q: adding VLAN 0 to HW filter on device bond0 [ 93.924529][ T4276] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 93.933720][ T4278] device veth0_vlan entered promiscuous mode [ 93.940908][ T2891] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 93.964887][ T2891] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 93.982564][ T2891] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 93.999374][ T2891] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 94.031664][ T4278] device veth1_vlan entered promiscuous mode [ 94.080977][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 94.090874][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 94.106557][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 94.127594][ T4277] 8021q: adding VLAN 0 to HW filter on device team0 [ 94.154837][ T4334] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 94.173959][ T4334] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 94.194954][ T4334] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 94.283899][ T62] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 94.292834][ T62] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 94.316170][ T62] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 94.325260][ T62] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 94.341755][ T4278] device veth0_macvtap entered promiscuous mode [ 94.367486][ T62] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 94.390201][ T62] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 94.430423][ T62] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 94.454116][ T62] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 94.468575][ T62] bridge0: port 1(bridge_slave_0) entered blocking state [ 94.476168][ T62] bridge0: port 1(bridge_slave_0) entered forwarding state [ 94.486057][ T62] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 94.503788][ T62] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 94.516346][ T4276] device veth0_vlan entered promiscuous mode [ 94.537695][ T4278] device veth1_macvtap entered promiscuous mode [ 94.588369][ T48] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 94.600478][ T48] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 94.619769][ T48] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 94.630994][ T48] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 94.646115][ T48] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 94.658126][ T48] bridge0: port 2(bridge_slave_1) entered blocking state [ 94.666436][ T48] bridge0: port 2(bridge_slave_1) entered forwarding state [ 94.678335][ T48] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 94.693411][ T4283] Bluetooth: hci0: command 0x040f tx timeout [ 94.699596][ T4283] Bluetooth: hci1: command 0x040f tx timeout [ 94.708261][ T4279] Bluetooth: hci2: command 0x040f tx timeout [ 94.733573][ T4272] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 94.744850][ T4276] device veth1_vlan entered promiscuous mode [ 94.753671][ T4279] Bluetooth: hci3: command 0x040f tx timeout [ 94.753790][ T4283] Bluetooth: hci4: command 0x040f tx timeout [ 94.775118][ T4278] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 94.803561][ T4278] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 94.827900][ T41] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 94.837911][ T41] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 94.851721][ T41] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 94.862725][ T41] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 94.872018][ T41] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 94.881700][ T41] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 94.891928][ T41] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 94.902666][ T41] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 94.912992][ T41] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 94.924935][ T41] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 94.936562][ T41] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 94.954244][ T4281] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 94.972542][ T4278] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 94.989901][ T4278] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 95.003371][ T4278] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 95.012679][ T4278] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 95.033084][ T62] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 95.043963][ T62] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 95.062505][ T62] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 95.075705][ T62] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 95.167996][ T2891] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 95.189769][ T2891] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 95.199103][ T2891] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 95.212077][ T2891] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 95.221226][ T2891] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 95.247113][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 95.258284][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 95.279522][ T4277] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 95.316541][ T4272] device veth0_vlan entered promiscuous mode [ 95.327744][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 95.338433][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 95.408478][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 95.421577][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 95.432781][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 95.445432][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 95.457759][ T4276] device veth0_macvtap entered promiscuous mode [ 95.471495][ T4272] device veth1_vlan entered promiscuous mode [ 95.508703][ T4276] device veth1_macvtap entered promiscuous mode [ 95.532557][ T41] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 95.555732][ T41] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 95.606638][ T62] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 95.617329][ T62] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 95.627902][ T62] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 95.638691][ T62] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 95.647905][ T62] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 95.656479][ T62] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 95.665947][ T62] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 95.690085][ T4276] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 95.701546][ T4276] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 95.715261][ T4276] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 95.740165][ T4272] device veth0_macvtap entered promiscuous mode [ 95.754065][ T62] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 95.764031][ T62] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 95.774124][ T62] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 95.784609][ T62] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 95.798047][ T62] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 95.811353][ T4281] device veth0_vlan entered promiscuous mode [ 95.822237][ T4276] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 95.836360][ T4276] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 95.849912][ T4276] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 95.876296][ T4272] device veth1_macvtap entered promiscuous mode [ 95.886575][ T62] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 95.901273][ T62] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 95.910819][ T62] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 95.920699][ T62] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 95.931058][ T62] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 95.955973][ T4276] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 95.968676][ T2891] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 95.977040][ T4276] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 95.987067][ T2891] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 95.996277][ T4276] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 96.006052][ T4276] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 96.030330][ T4281] device veth1_vlan entered promiscuous mode [ 96.051362][ T2891] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 96.062126][ T2891] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 96.109142][ T4272] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 96.125728][ T4272] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 96.141333][ T4272] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 96.153028][ T4272] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 96.167190][ T4272] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 96.209212][ T4281] device veth0_macvtap entered promiscuous mode [ 96.227301][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 96.241414][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 96.276645][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 96.296236][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 96.313109][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 96.325210][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 96.365219][ T4272] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 96.393835][ T4272] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 96.405585][ T4272] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 96.417373][ T4272] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 96.430539][ T4272] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 96.441971][ T4281] device veth1_macvtap entered promiscuous mode [ 96.477473][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 96.488684][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 96.504390][ T4272] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 96.525757][ T4272] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 96.539901][ T4272] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 96.551159][ T4272] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 96.596186][ T4277] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 96.612150][ T48] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 96.632046][ T48] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 96.680983][ T11] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 96.693922][ T11] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 96.705286][ T4281] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 96.726145][ T4281] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 96.746383][ T4281] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 96.761934][ T4283] Bluetooth: hci2: command 0x0419 tx timeout [ 96.761956][ T4279] Bluetooth: hci1: command 0x0419 tx timeout [ 96.762019][ T4279] Bluetooth: hci0: command 0x0419 tx timeout [ 96.789769][ T4281] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 96.809435][ T4281] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 96.821862][ T4281] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 96.833771][ T4279] Bluetooth: hci3: command 0x0419 tx timeout [ 96.841055][ T4279] Bluetooth: hci4: command 0x0419 tx timeout [ 96.866820][ T4281] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 96.892642][ T4334] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 96.993202][ T0] NOHZ tick-stop error: local softirq work is pending, handler #382!!! [ 97.003563][ T0] NOHZ tick-stop error: local softirq work is pending, handler #382!!! [ 97.013218][ T0] NOHZ tick-stop error: local softirq work is pending, handler #382!!! [ 97.023205][ T0] NOHZ tick-stop error: local softirq work is pending, handler #382!!! [ 97.033231][ T0] NOHZ tick-stop error: local softirq work is pending, handler #382!!! [ 97.043222][ T0] NOHZ tick-stop error: local softirq work is pending, handler #382!!! [ 97.053239][ T0] NOHZ tick-stop error: local softirq work is pending, handler #382!!! [ 97.063217][ T0] NOHZ tick-stop error: local softirq work is pending, handler #382!!! [ 97.073228][ T0] NOHZ tick-stop error: local softirq work is pending, handler #382!!! [ 97.083209][ T0] NOHZ tick-stop error: local softirq work is pending, handler #382!!! [ 97.184811][ T4334] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 97.204785][ T4334] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 97.232859][ T4281] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 97.272582][ T4281] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 97.286595][ T4281] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 97.298725][ T4281] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 97.313303][ T4281] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 97.333586][ T4281] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 97.380400][ T4281] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 97.433710][ T41] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 97.454664][ T41] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 97.523037][ T4281] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 97.563350][ T4281] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 97.583451][ T4281] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 97.606503][ T4281] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 97.676981][ T62] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 97.726960][ T62] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 97.753932][ T4334] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 97.794228][ T2891] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 97.802344][ T2891] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 97.869885][ T4334] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 98.000321][ T4357] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 98.020430][ T4357] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 98.045372][ T4334] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 98.085870][ T4334] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 98.133840][ T4357] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 98.150029][ T4357] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 98.461960][ T4366] capability: warning: `syz.2.6' uses deprecated v2 capabilities in a way that may be insecure [ 99.218350][ T48] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 99.243919][ T48] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 99.267546][ T48] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 99.389580][ T48] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 99.417142][ T48] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 99.971064][ T4367] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 100.068867][ T4367] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 100.209756][ T4277] device veth0_vlan entered promiscuous mode [ 102.566419][ T4367] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 102.584865][ T4367] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 102.647633][ T4277] device veth1_vlan entered promiscuous mode [ 102.759313][ T4357] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 102.773882][ T4380] loop0: detected capacity change from 0 to 512 [ 102.802942][ T4357] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 102.875832][ T4380] FAT-fs (loop0): Unrecognized mount option "shortname=Uo|winn4ZvStUIYA)E0sʉwvP)\'v5EyE䷴Jlt/" or missing value [ 102.905736][ T4277] device veth0_macvtap entered promiscuous mode [ 102.939181][ T4277] device veth1_macvtap entered promiscuous mode [ 102.996873][ T4277] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 103.023522][ T4277] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 103.043392][ T4277] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 103.073830][ T4277] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 103.093504][ T4277] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 103.113608][ T4277] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 103.133969][ T4277] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 104.660328][ T4279] Bluetooth: hci3: command 0x0405 tx timeout [ 104.722478][ T4277] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 104.757347][ T4277] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 104.784110][ T4369] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 104.964360][ T4369] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 105.010071][ T4369] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 105.061219][ T4369] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 105.138841][ T4380] loop0: detected capacity change from 0 to 40427 [ 105.173491][ T4277] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 105.193678][ T4277] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 105.203929][ T4380] F2FS-fs (loop0): invalid crc value [ 105.306249][ T4380] F2FS-fs (loop0): Found nat_bits in checkpoint [ 105.348712][ T4380] F2FS-fs (loop0): Start checkpoint disabled! [ 105.385862][ T4380] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e6 [ 105.413079][ T4277] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 105.791504][ T4277] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 105.883455][ T4277] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 105.895232][ T4277] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 105.906877][ T4277] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 106.161489][ T4277] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 106.409291][ T4277] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 106.421681][ T41] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 106.457093][ T26] audit: type=1800 audit(1779490280.823:2): pid=4393 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.8" name="regulatory.db" dev="sda1" ino=448 res=0 errno=0 [ 106.508227][ T4393] platform regulatory.0: loading /lib/firmware/regulatory.db failed with error -12 [ 106.530965][ T41] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 106.574236][ T4393] platform regulatory.0: Direct firmware load for regulatory.db failed with error -12 [ 106.589982][ T4277] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 106.613538][ T4393] platform regulatory.0: Falling back to sysfs fallback for: regulatory.db [ 106.630670][ T4277] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 106.661264][ T4277] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 106.717507][ T4277] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 106.848858][ T4393] syz.1.8 (4393) used greatest stack depth: 20120 bytes left [ 106.876080][ T4357] kworker/u4:7: attempt to access beyond end of device [ 106.876080][ T4357] loop0: rw=2049, sector=40960, nr_sectors = 24 limit=40427 [ 107.016809][ T4369] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 107.049858][ T4369] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 107.135930][ T4357] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 107.193720][ T22] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 107.463723][ T22] usb 4-1: Using ep0 maxpacket: 16 [ 107.522520][ T22] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 107.692694][ T22] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 107.910143][ T4357] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 107.934595][ T22] usb 4-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 107.990183][ T4357] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 107.998271][ T4357] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 108.057784][ T22] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 108.087435][ T22] usb 4-1: Product: syz [ 108.092658][ T22] usb 4-1: Manufacturer: syz [ 108.118980][ T4410] trusted_key: encrypted_key: keylen parameter is missing [ 108.139872][ T22] usb 4-1: SerialNumber: syz [ 108.390525][ T4414] loop4: detected capacity change from 0 to 128 [ 108.407993][ T22] usb 4-1: 0:2 : does not exist [ 108.448896][ T22] usb 4-1: 5:0: failed to get current value for ch 0 (-22) [ 108.543026][ T4414] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 108.555101][ T4414] ext4 filesystem being mounted at /0/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 109.436429][ T22] usb 4-1: USB disconnect, device number 2 [ 109.488125][ T4277] EXT4-fs (loop4): unmounting filesystem. [ 110.278771][ T4343] udevd[4343]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 110.340883][ T4422] syz.1.17 (4422) used greatest stack depth: 16824 bytes left [ 114.522195][ T4457] loop3: detected capacity change from 0 to 128 [ 114.775609][ T4457] UDF-fs: error (device loop3): udf_read_tagged: read failed, block=256, location=256 [ 114.804560][ T4457] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 115.129922][ T4460] loop0: detected capacity change from 0 to 128 [ 115.287542][ T4460] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none. [ 115.323001][ T4460] ext4 filesystem being mounted at /3/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 115.746677][ T4319] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 116.404392][ T4281] EXT4-fs (loop0): unmounting filesystem. [ 116.443266][ T4319] usb 3-1: Using ep0 maxpacket: 16 [ 116.463246][ T4319] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 116.483596][ T4319] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 116.525755][ T4319] usb 3-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 116.565610][ T4319] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 116.596030][ T4319] usb 3-1: Product: syz [ 116.600324][ T4319] usb 3-1: Manufacturer: syz [ 116.627586][ T4319] usb 3-1: SerialNumber: syz [ 116.788289][ T26] audit: type=1800 audit(1779490291.153:3): pid=4462 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.26" name="file1" dev="loop3" ino=104 res=0 errno=0 [ 116.873621][ T4319] usb 3-1: 0:2 : does not exist [ 116.904908][ T4319] usb 3-1: 5:0: failed to get current value for ch 0 (-22) [ 116.990229][ T4319] usb 3-1: USB disconnect, device number 2 [ 117.294725][ T4343] udevd[4343]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 117.495151][ T4288] Bluetooth: hci4: Malformed LE Event: 0x0d [ 119.971914][ T4499] 9pnet_fd: Insufficient options for proto=fd [ 120.891367][ T4508] loop3: detected capacity change from 0 to 128 [ 120.992525][ T4508] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none. [ 121.037050][ T4508] ext4 filesystem being mounted at /7/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 121.070226][ C1] vkms_vblank_simulate: vblank timer overrun [ 121.526198][ T4512] loop2: detected capacity change from 0 to 32768 [ 121.651463][ T4512] gfs2: fsid=syz:syz: Trying to join cluster "lock_nolock", "syz:syz" [ 121.660326][ T4512] gfs2: fsid=syz:syz: Now mounting FS (format 1801)... [ 121.840484][ T4512] gfs2: fsid=syz:syz.0: journal 0 mapped with 5 extents in 0ms [ 121.853983][ T4319] gfs2: fsid=syz:syz.0: jid=0, already locked for use [ 122.052445][ T4319] gfs2: fsid=syz:syz.0: jid=0: Looking at journal... [ 122.561480][ T4276] EXT4-fs (loop3): unmounting filesystem. [ 122.591519][ T4319] gfs2: fsid=syz:syz.0: jid=0: Journal head lookup took 539ms [ 122.635549][ T4319] gfs2: fsid=syz:syz.0: jid=0: Done [ 122.642032][ T4512] gfs2: fsid=syz:syz.0: first mount done, others may mount [ 122.771487][ T4512] gfs2: fsid=syz:syz.0: found 1 quota changes [ 122.827346][ T4522] gfs2: fsid=syz:syz.0: fatal: filesystem consistency error [ 122.827346][ T4522] inode = 11 2339 [ 122.827346][ T4522] function = gfs2_dinode_in, file = fs/gfs2/glops.c, line = 464 [ 123.023354][ T4522] gfs2: fsid=syz:syz.0: G: s:EX n:2/923 f:qobnN t:EX d:EX/0 a:0 v:0 r:3 m:20 p:1 [ 123.139771][ T4522] gfs2: fsid=syz:syz.0: H: s:EX f:H e:0 p:4522 [gfs2_quotad] gfs2_quota_sync+0x32c/0x700 [ 123.186956][ T4522] gfs2: fsid=syz:syz.0: I: n:11/2339 t:0 f:0x00 d:0x00000000 s:0 p:0 [ 123.217469][ T4522] gfs2: fsid=syz:syz.0: about to withdraw this file system [ 123.342357][ T4522] gfs2: fsid=syz:syz.0: Journal recovery skipped for jid 0 until next mount. [ 123.356502][ T4522] gfs2: fsid=syz:syz.0: Glock dequeues delayed: 0 [ 123.367327][ T4522] gfs2: fsid=syz:syz.0: File system withdrawn [ 123.373797][ T4522] CPU: 1 PID: 4522 Comm: gfs2_quotad Not tainted syzkaller #0 [ 123.381646][ T4522] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 123.391872][ T4522] Call Trace: [ 123.395561][ T4522] [ 123.398699][ T4522] dump_stack_lvl+0x188/0x24e [ 123.403465][ T4522] ? kobject_uevent_env+0x35f/0x8a0 [ 123.408762][ T4522] ? show_regs_print_info+0x12/0x12 [ 123.414050][ T4522] ? load_image+0x400/0x400 [ 123.418617][ T4522] ? kobject_uevent_env+0x35f/0x8a0 [ 123.424905][ T4522] gfs2_withdraw+0xde6/0x15d0 [ 123.429822][ T4522] ? gfs2_lm+0x240/0x240 [ 123.434099][ T4522] ? gfs2_consist_inode_i+0xf1/0x110 [ 123.439395][ T4522] gfs2_inode_refresh+0xb64/0xfd0 [ 123.444633][ T4522] ? gfs2_inode_metasync+0xf0/0xf0 [ 123.450518][ T4522] ? gfs2_glock_nq+0xcf0/0x14e0 [ 123.455433][ T4522] gfs2_instantiate+0x15e/0x210 [ 123.460615][ T4522] gfs2_glock_wait+0x1d0/0x2a0 [ 123.465439][ T4522] do_sync+0x4bf/0xc40 [ 123.469576][ T4522] ? gfs2_quota_sync+0x32c/0x700 [ 123.474591][ T4522] ? slot_put+0x1e0/0x1e0 [ 123.478986][ T4522] ? __lock_acquire+0x7d10/0x7d10 [ 123.484078][ T4522] ? do_raw_spin_lock+0x128/0x2f0 [ 123.489431][ T4522] ? gfs2_quota_sync+0x32c/0x700 [ 123.494450][ T4522] ? do_raw_spin_unlock+0x11d/0x230 [ 123.499903][ T4522] gfs2_quota_sync+0x32c/0x700 [ 123.504922][ T4522] gfs2_quotad+0x420/0x680 [ 123.509404][ T4522] ? gfs2_wake_up_statfs+0xc0/0xc0 [ 123.514571][ T4522] ? _raw_spin_unlock_irqrestore+0x82/0x120 [ 123.521638][ T4522] ? wake_bit_function+0x200/0x200 [ 123.527068][ T4522] ? _raw_spin_unlock_irqrestore+0xc1/0x120 [ 123.533290][ T4522] ? __kthread_parkme+0x162/0x1c0 [ 123.539105][ T4522] kthread+0x29d/0x330 [ 123.543322][ T4522] ? gfs2_wake_up_statfs+0xc0/0xc0 [ 123.548679][ T4522] ? kthread_blkcg+0xd0/0xd0 [ 123.553497][ T4522] ret_from_fork+0x1f/0x30 [ 123.557982][ T4522] [ 123.561432][ C1] vkms_vblank_simulate: vblank timer overrun [ 123.595425][ T4278] gfs2: fsid=syz:syz.0: warning: assertion "!qd->qd_change" failed at function = gfs2_quota_cleanup, file = fs/gfs2/quota.c, line = 1485 [ 123.664601][ T4278] CPU: 0 PID: 4278 Comm: syz-executor Not tainted syzkaller #0 [ 123.672336][ T4278] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 123.683365][ T4278] Call Trace: [ 123.686981][ T4278] [ 123.690383][ T4278] dump_stack_lvl+0x188/0x24e [ 123.695112][ T4278] ? gfs2_assert_warn_i+0xc3/0x2c0 [ 123.700342][ T4278] ? show_regs_print_info+0x12/0x12 [ 123.706495][ T4278] ? load_image+0x400/0x400 [ 123.711090][ T4278] ? do_raw_spin_unlock+0x11d/0x230 [ 123.716779][ T4278] gfs2_assert_warn_i+0x18f/0x2c0 [ 123.722141][ T4278] gfs2_quota_cleanup+0x4b4/0x6a0 [ 123.728665][ T4278] gfs2_put_super+0x22f/0x8c0 [ 123.733932][ T4278] ? gfs2_evict_inode+0x11d0/0x11d0 [ 123.739271][ T4278] generic_shutdown_super+0x130/0x340 [ 123.743524][ C1] hrtimer: interrupt took 425271 ns [ 123.744675][ T4278] kill_block_super+0x7c/0xe0 [ 123.755609][ T4278] deactivate_locked_super+0x93/0xf0 [ 123.761593][ T4278] cleanup_mnt+0x42c/0x4b0 [ 123.766781][ T4278] ? lockdep_hardirqs_on+0x94/0x140 [ 123.772129][ T4278] task_work_run+0x1d0/0x260 [ 123.777432][ T4278] ? task_work_cancel+0x220/0x220 [ 123.783145][ T4278] ? exit_to_user_mode_loop+0x3b/0x110 [ 123.788685][ T4278] exit_to_user_mode_loop+0xe6/0x110 [ 123.794030][ T4278] exit_to_user_mode_prepare+0xee/0x180 [ 123.800025][ T4278] syscall_exit_to_user_mode+0x16/0x40 [ 123.806525][ T4278] do_syscall_64+0x58/0xa0 [ 123.811723][ T4278] ? clear_bhb_loop+0x60/0xb0 [ 123.816729][ T4278] ? clear_bhb_loop+0x60/0xb0 [ 123.823564][ T4278] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 123.830936][ T4278] RIP: 0033:0x7fa6ba99e097 [ 123.835679][ T4278] Code: a2 c7 05 5c 06 25 00 00 00 00 00 eb 96 e8 e1 12 00 00 90 31 f6 e9 09 00 00 00 66 0f 1f 84 00 00 00 00 00 b8 a6 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 01 c3 48 c7 c2 e8 ff ff ff f7 d8 64 89 02 b8 [ 123.857933][ T4278] RSP: 002b:00007ffc9405d898 EFLAGS: 00000246 ORIG_RAX: 00000000000000a6 [ 123.867739][ T4278] RAX: 0000000000000000 RBX: 00007fa6baa321ca RCX: 00007fa6ba99e097 [ 123.876782][ T4278] RDX: 0000000000000000 RSI: 0000000000000009 RDI: 00007ffc9405d950 [ 123.887828][ T4278] RBP: 00007ffc9405d950 R08: 00007ffc9405e950 R09: 00000000ffffffff [ 123.896758][ T4278] R10: 0000000000000000 R11: 0000000000000246 R12: 00007ffc9405e9e0 [ 123.905650][ T4278] R13: 00007fa6baa321ca R14: 000000000001dfd9 R15: 00007ffc9405ea20 [ 123.914076][ T4278] [ 126.300657][ T4288] Bluetooth: hci1: Malformed LE Event: 0x0d [ 128.176533][ T4559] loop3: detected capacity change from 0 to 32768 [ 128.189842][ T4558] loop4: detected capacity change from 0 to 128 [ 128.210043][ T4559] gfs2: fsid=syz:syz: Trying to join cluster "lock_nolock", "syz:syz" [ 128.218674][ T4559] gfs2: fsid=syz:syz: Now mounting FS (format 1801)... [ 128.238065][ T4559] gfs2: fsid=syz:syz.0: journal 0 mapped with 5 extents in 0ms [ 128.252469][ T4323] gfs2: fsid=syz:syz.0: jid=0, already locked for use [ 128.260284][ T4323] gfs2: fsid=syz:syz.0: jid=0: Looking at journal... [ 128.300688][ T4558] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 128.331664][ T4323] gfs2: fsid=syz:syz.0: jid=0: Journal head lookup took 71ms [ 128.343049][ T4323] gfs2: fsid=syz:syz.0: jid=0: Done [ 128.353899][ T4558] ext4 filesystem being mounted at /7/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 128.404889][ T4559] gfs2: fsid=syz:syz.0: first mount done, others may mount [ 128.693405][ T4323] usb 3-1: new high-speed USB device number 3 using dummy_hcd [ 128.747910][ T4559] gfs2: fsid=syz:syz.0: found 1 quota changes [ 128.820840][ T4276] gfs2: fsid=syz:syz.0: fatal: filesystem consistency error [ 128.820840][ T4276] inode = 11 2339 [ 128.820840][ T4276] function = gfs2_dinode_in, file = fs/gfs2/glops.c, line = 464 [ 128.914357][ T4276] gfs2: fsid=syz:syz.0: G: s:EX n:2/923 f:qobnN t:EX d:EX/0 a:0 v:0 r:3 m:20 p:1 [ 128.943645][ T4323] usb 3-1: Using ep0 maxpacket: 16 [ 128.954886][ T4276] gfs2: fsid=syz:syz.0: H: s:EX f:H e:0 p:4276 [syz-executor] gfs2_quota_sync+0x32c/0x700 [ 128.966779][ T4323] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 128.978640][ T4277] EXT4-fs (loop4): unmounting filesystem. [ 128.992632][ T4276] gfs2: fsid=syz:syz.0: I: n:11/2339 t:0 f:0x00 d:0x00000000 s:0 p:0 [ 129.016874][ T4323] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 129.032250][ T4276] gfs2: fsid=syz:syz.0: about to withdraw this file system [ 129.053430][ T4323] usb 3-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 129.127062][ T4323] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 129.151992][ T4276] gfs2: fsid=syz:syz.0: Journal recovery skipped for jid 0 until next mount. [ 129.171893][ T4323] usb 3-1: Product: syz [ 129.178395][ T4323] usb 3-1: Manufacturer: syz [ 129.188281][ T4276] gfs2: fsid=syz:syz.0: Glock dequeues delayed: 0 [ 129.195738][ T4323] usb 3-1: SerialNumber: syz [ 129.219787][ T4276] gfs2: fsid=syz:syz.0: File system withdrawn [ 129.247095][ T4276] CPU: 0 PID: 4276 Comm: syz-executor Not tainted syzkaller #0 [ 129.255187][ T4276] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 129.265559][ T4276] Call Trace: [ 129.268906][ T4276] [ 129.271897][ T4276] dump_stack_lvl+0x188/0x24e [ 129.276662][ T4276] ? kobject_uevent_env+0x35f/0x8a0 [ 129.282380][ T4276] ? show_regs_print_info+0x12/0x12 [ 129.287682][ T4276] ? load_image+0x400/0x400 [ 129.292289][ T4276] ? kobject_uevent_env+0x35f/0x8a0 [ 129.297685][ T4276] gfs2_withdraw+0xde6/0x15d0 [ 129.302554][ T4276] ? gfs2_lm+0x240/0x240 [ 129.306960][ T4276] ? gfs2_consist_inode_i+0xf1/0x110 [ 129.312500][ T4276] gfs2_inode_refresh+0xb64/0xfd0 [ 129.316737][ T4569] loop4: detected capacity change from 0 to 512 [ 129.317696][ T4276] ? gfs2_inode_metasync+0xf0/0xf0 [ 129.329704][ T4276] ? gfs2_glock_nq+0xcf0/0x14e0 [ 129.334671][ T4276] gfs2_instantiate+0x15e/0x210 [ 129.340124][ T4276] gfs2_glock_wait+0x1d0/0x2a0 [ 129.345427][ T4276] do_sync+0x4bf/0xc40 [ 129.349904][ T4276] ? gfs2_quota_sync+0x32c/0x700 [ 129.355373][ T4276] ? slot_put+0x1e0/0x1e0 [ 129.360147][ T4276] ? gfs2_quota_sync+0x32c/0x700 [ 129.365360][ T4276] ? do_raw_spin_unlock+0x11d/0x230 [ 129.370825][ T4276] gfs2_quota_sync+0x32c/0x700 [ 129.375690][ T4276] gfs2_sync_fs+0x48/0xb0 [ 129.380369][ T4276] sync_filesystem+0xe6/0x220 [ 129.385671][ T4276] generic_shutdown_super+0x6b/0x340 [ 129.391385][ T4276] kill_block_super+0x7c/0xe0 [ 129.396138][ T4276] deactivate_locked_super+0x93/0xf0 [ 129.401748][ T4276] cleanup_mnt+0x42c/0x4b0 [ 129.406319][ T4276] ? lockdep_hardirqs_on+0x94/0x140 [ 129.412374][ T4276] task_work_run+0x1d0/0x260 [ 129.417042][ T4276] ? task_work_cancel+0x220/0x220 [ 129.422182][ T4276] ? exit_to_user_mode_loop+0x3b/0x110 [ 129.427889][ T4276] exit_to_user_mode_loop+0xe6/0x110 [ 129.434081][ T4276] exit_to_user_mode_prepare+0xee/0x180 [ 129.440040][ T4276] syscall_exit_to_user_mode+0x16/0x40 [ 129.445824][ T4276] do_syscall_64+0x58/0xa0 [ 129.451186][ T4276] ? clear_bhb_loop+0x60/0xb0 [ 129.455936][ T4276] ? clear_bhb_loop+0x60/0xb0 [ 129.461222][ T4276] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 129.467708][ T4276] RIP: 0033:0x7f06f379e097 [ 129.472174][ T4276] Code: a2 c7 05 5c 06 25 00 00 00 00 00 eb 96 e8 e1 12 00 00 90 31 f6 e9 09 00 00 00 66 0f 1f 84 00 00 00 00 00 b8 a6 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 01 c3 48 c7 c2 e8 ff ff ff f7 d8 64 89 02 b8 [ 129.493144][ T4276] RSP: 002b:00007fff97b18358 EFLAGS: 00000246 ORIG_RAX: 00000000000000a6 [ 129.501634][ T4276] RAX: 0000000000000000 RBX: 00007f06f38321ca RCX: 00007f06f379e097 [ 129.510252][ T4276] RDX: 0000000000000000 RSI: 0000000000000009 RDI: 00007fff97b18410 [ 129.518449][ T4276] RBP: 00007fff97b18410 R08: 00007fff97b19410 R09: 00000000ffffffff [ 129.526557][ T4276] R10: 0000000000000000 R11: 0000000000000246 R12: 00007fff97b194a0 [ 129.535966][ T4276] R13: 00007f06f38321ca R14: 000000000001f6dc R15: 00007fff97b194e0 [ 129.545053][ T4276] [ 129.565202][ T4569] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support! [ 129.572085][ T4323] usb 3-1: 0:2 : does not exist [ 129.588117][ T4276] gfs2: fsid=syz:syz.0: warning: assertion "!qd->qd_change" failed at function = gfs2_quota_cleanup, file = fs/gfs2/quota.c, line = 1485 [ 129.603105][ T4276] CPU: 0 PID: 4276 Comm: syz-executor Not tainted syzkaller #0 [ 129.611600][ T4276] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 129.621707][ T4276] Call Trace: [ 129.625037][ T4276] [ 129.628002][ T4276] dump_stack_lvl+0x188/0x24e [ 129.632835][ T4276] ? gfs2_assert_warn_i+0xc3/0x2c0 [ 129.638343][ T4276] ? show_regs_print_info+0x12/0x12 [ 129.643799][ T4276] ? load_image+0x400/0x400 [ 129.648962][ T4276] ? do_raw_spin_unlock+0x11d/0x230 [ 129.654495][ T4276] gfs2_assert_warn_i+0x18f/0x2c0 [ 129.659666][ T4276] gfs2_quota_cleanup+0x4b4/0x6a0 [ 129.664900][ T4276] gfs2_put_super+0x22f/0x8c0 [ 129.670186][ T4276] ? gfs2_evict_inode+0x11d0/0x11d0 [ 129.675608][ T4276] generic_shutdown_super+0x130/0x340 [ 129.681961][ T4276] kill_block_super+0x7c/0xe0 [ 129.686909][ T4276] deactivate_locked_super+0x93/0xf0 [ 129.693906][ T4276] cleanup_mnt+0x42c/0x4b0 [ 129.698456][ T4276] ? lockdep_hardirqs_on+0x94/0x140 [ 129.704134][ T4276] task_work_run+0x1d0/0x260 [ 129.708945][ T4276] ? task_work_cancel+0x220/0x220 [ 129.714120][ T4276] ? exit_to_user_mode_loop+0x3b/0x110 [ 129.719684][ T4276] exit_to_user_mode_loop+0xe6/0x110 [ 129.725027][ T4276] exit_to_user_mode_prepare+0xee/0x180 [ 129.730799][ T4276] syscall_exit_to_user_mode+0x16/0x40 [ 129.736505][ T4276] do_syscall_64+0x58/0xa0 [ 129.741421][ T4276] ? clear_bhb_loop+0x60/0xb0 [ 129.746930][ T4276] ? clear_bhb_loop+0x60/0xb0 [ 129.751684][ T4276] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 129.757645][ T4276] RIP: 0033:0x7f06f379e097 [ 129.762138][ T4276] Code: a2 c7 05 5c 06 25 00 00 00 00 00 eb 96 e8 e1 12 00 00 90 31 f6 e9 09 00 00 00 66 0f 1f 84 00 00 00 00 00 b8 a6 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 01 c3 48 c7 c2 e8 ff ff ff f7 d8 64 89 02 b8 [ 129.781857][ T4276] RSP: 002b:00007fff97b18358 EFLAGS: 00000246 ORIG_RAX: 00000000000000a6 [ 129.790409][ T4276] RAX: 0000000000000000 RBX: 00007f06f38321ca RCX: 00007f06f379e097 [ 129.798740][ T4276] RDX: 0000000000000000 RSI: 0000000000000009 RDI: 00007fff97b18410 [ 129.807609][ T4276] RBP: 00007fff97b18410 R08: 00007fff97b19410 R09: 00000000ffffffff [ 129.815995][ T4276] R10: 0000000000000000 R11: 0000000000000246 R12: 00007fff97b194a0 [ 129.825388][ T4276] R13: 00007f06f38321ca R14: 000000000001f6dc R15: 00007fff97b194e0 [ 129.833839][ T4276] [ 129.859846][ T4323] usb 3-1: 5:0: failed to get current value for ch 0 (-22) [ 129.867697][ T4569] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 129.990963][ T4569] EXT4-fs (loop4): 1 truncate cleaned up [ 130.008240][ T4323] usb 3-1: USB disconnect, device number 3 [ 130.029531][ T4569] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 130.458829][ T4277] EXT4-fs (loop4): unmounting filesystem. [ 131.996228][ T4342] usb 3-1: new high-speed USB device number 4 using dummy_hcd [ 132.653653][ T4342] usb 3-1: Using ep0 maxpacket: 32 [ 132.677076][ T4342] usb 3-1: config 0 has an invalid interface number: 51 but max is 0 [ 132.694111][ T4342] usb 3-1: config 0 has no interface number 0 [ 132.739375][ T4342] usb 3-1: New USB device found, idVendor=061d, idProduct=c150, bcdDevice=ce.6f [ 132.919222][ T1274] ieee802154 phy0 wpan0: encryption failed: -22 [ 132.929507][ T1274] ieee802154 phy1 wpan1: encryption failed: -22 [ 132.944448][ T4342] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 134.508857][ T4342] usb 3-1: Product: syz [ 134.956951][ T4342] usb 3-1: Manufacturer: syz [ 135.357668][ T4342] usb 3-1: SerialNumber: syz [ 135.369942][ T4342] usb 3-1: config 0 descriptor?? [ 135.386883][ T4342] usb 3-1: can't set config #0, error -71 [ 135.402453][ T4342] usb 3-1: USB disconnect, device number 4 [ 135.533081][ T4604] loop2: detected capacity change from 0 to 128 [ 135.595857][ T4604] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 137.361435][ T4604] ext4 filesystem being mounted at /14/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 138.087033][ T4319] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 138.228927][ T4278] EXT4-fs (loop2): unmounting filesystem. [ 138.313309][ T4319] usb 5-1: Using ep0 maxpacket: 16 [ 138.357632][ T4319] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 138.469186][ T4319] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 138.591777][ T4319] usb 5-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 138.689719][ T4319] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 138.777059][ T4319] usb 5-1: Product: syz [ 138.817242][ T4319] usb 5-1: Manufacturer: syz [ 138.894546][ T4319] usb 5-1: SerialNumber: syz [ 139.081454][ T4628] loop1: detected capacity change from 0 to 2048 [ 139.094483][ T4628] EXT4-fs: Ignoring removed nobh option [ 139.207806][ T4628] EXT4-fs error (device loop1): ext4_ext_check_inode:520: inode #2: comm syz.1.73: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 1, max 4(4), depth 5(5) [ 139.236909][ T4319] usb 5-1: 0:2 : does not exist [ 139.278957][ T4635] ======================================================= [ 139.278957][ T4635] WARNING: The mand mount option has been deprecated and [ 139.278957][ T4635] and is ignored by this kernel. Remove the mand [ 139.278957][ T4635] option from the mount to silence this warning. [ 139.278957][ T4635] ======================================================= [ 139.317464][ T4635] tmpfs: Unknown parameter 'n00000000000000000003' [ 139.335460][ T4319] usb 5-1: 5:0: failed to get current value for ch 0 (-22) [ 139.400229][ T4628] EXT4-fs (loop1): Remounting filesystem read-only [ 139.412911][ T4628] EXT4-fs (loop1): get root inode failed [ 139.440081][ T4628] EXT4-fs (loop1): mount failed [ 139.522537][ T4319] usb 5-1: USB disconnect, device number 2 [ 139.585336][ T4628] netlink: 8 bytes leftover after parsing attributes in process `syz.1.73'. [ 139.815848][ T4344] udevd[4344]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 142.229176][ T4647] loop0: detected capacity change from 0 to 65536 [ 142.360708][ T4647] XFS (loop0): Mounting V5 Filesystem [ 142.608247][ T4647] XFS (loop0): Ending clean mount [ 142.730801][ T4659] trusted_key: encrypted_key: master key parameter 'default/R}FOed:syz' is invalid [ 142.788099][ T4659] kernel profiling enabled (shift: 17) [ 143.270062][ T4281] XFS (loop0): Unmounting Filesystem [ 144.843627][ T4288] Bluetooth: hci4: adv larger than maximum supported [ 144.843663][ T4288] Bluetooth: hci4: Unknown advertising packet type: 0x500 [ 144.854971][ T4288] Bluetooth: hci4: Malformed LE Event: 0x0d [ 146.394950][ T4689] loop4: detected capacity change from 0 to 4096 [ 146.815661][ T4696] tmpfs: Unknown parameter 'n00000000000000000003' [ 146.886685][ T4698] NILFS (loop4): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 146.923543][ T4693] loop3: detected capacity change from 0 to 128 [ 148.710603][ T4693] UDF-fs: error (device loop3): udf_read_tagged: read failed, block=256, location=256 [ 148.740758][ T4693] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 150.816205][ T4722] trusted_key: encrypted_key: master key parameter 'default/R}FOed:syz' is invalid [ 151.363571][ T4288] Bluetooth: hci4: adv larger than maximum supported [ 151.363606][ T4288] Bluetooth: hci4: Unknown advertising packet type: 0x500 [ 151.371755][ T4288] Bluetooth: hci4: Malformed LE Event: 0x0d [ 155.059872][ T4522] ================================================================== [ 155.070657][ T4522] BUG: KASAN: use-after-free in __lock_acquire+0x106/0x7d10 [ 155.078231][ T4522] Read of size 8 at addr ffff88807ada4bb0 by task gfs2_quotad/4522 [ 155.086526][ T4522] [ 155.089256][ T4522] CPU: 0 PID: 4522 Comm: gfs2_quotad Not tainted syzkaller #0 [ 155.096855][ T4522] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 155.106967][ T4522] Call Trace: [ 155.110284][ T4522] [ 155.113390][ T4522] dump_stack_lvl+0x188/0x24e [ 155.118390][ T4522] ? __lock_acquire+0x7d10/0x7d10 [ 155.123567][ T4522] ? show_regs_print_info+0x12/0x12 [ 155.129350][ T4522] ? load_image+0x400/0x400 [ 155.133902][ T4522] ? _raw_spin_lock_irqsave+0xbc/0x100 [ 155.140018][ T4522] ? __virt_addr_valid+0x188/0x540 [ 155.145209][ T4522] ? __virt_addr_valid+0x465/0x540 [ 155.150373][ T4522] ? __lock_acquire+0x106/0x7d10 [ 155.155360][ T4522] print_report+0xa8/0x210 [ 155.160135][ T4522] kasan_report+0x10b/0x140 [ 155.164780][ T4522] ? __lock_acquire+0x106/0x7d10 [ 155.169755][ T4522] __lock_acquire+0x106/0x7d10 [ 155.175154][ T4522] ? verify_lock_unused+0x140/0x140 [ 155.180676][ T4522] ? lockdep_hardirqs_on_prepare+0x409/0x770 [ 155.187427][ T4522] ? lock_chain_count+0x20/0x20 [ 155.192319][ T4522] ? __free_object+0x218/0xa70 [ 155.198008][ T4522] ? lockdep_hardirqs_on+0x94/0x140 [ 155.203804][ T4522] ? verify_lock_unused+0x140/0x140 [ 155.209462][ T4522] ? alloc_object+0x640/0x640 [ 155.214195][ T4522] ? lockdep_hardirqs_on_prepare+0x409/0x770 [ 155.220464][ T4522] ? lock_chain_count+0x20/0x20 [ 155.225343][ T4522] lock_acquire+0x1bb/0x4a0 [ 155.230422][ T4522] ? finish_wait+0xb8/0x1d0 [ 155.235321][ T4522] ? timer_delete_sync+0x20/0x20 [ 155.240406][ T4522] ? __mod_timer+0x91e/0xd00 [ 155.246704][ T4522] ? read_lock_is_recursive+0x10/0x10 [ 155.252391][ T4522] _raw_spin_lock_irqsave+0xb0/0x100 [ 155.257847][ T4522] ? finish_wait+0xb8/0x1d0 [ 155.263161][ T4522] ? _raw_spin_lock+0x40/0x40 [ 155.268011][ T4522] ? update_process_times+0x1b0/0x1b0 [ 155.273501][ T4522] finish_wait+0xb8/0x1d0 [ 155.277880][ T4522] gfs2_quotad+0x4f3/0x680 [ 155.282342][ T4522] ? gfs2_wake_up_statfs+0xc0/0xc0 [ 155.287539][ T4522] ? _raw_spin_unlock_irqrestore+0x82/0x120 [ 155.293594][ T4522] ? wake_bit_function+0x200/0x200 [ 155.298750][ T4522] ? _raw_spin_unlock_irqrestore+0xc1/0x120 [ 155.305252][ T4522] ? __kthread_parkme+0x162/0x1c0 [ 155.310395][ T4522] kthread+0x29d/0x330 [ 155.314601][ T4522] ? gfs2_wake_up_statfs+0xc0/0xc0 [ 155.319749][ T4522] ? kthread_blkcg+0xd0/0xd0 [ 155.324737][ T4522] ret_from_fork+0x1f/0x30 [ 155.329373][ T4522] [ 155.332936][ T4522] [ 155.335302][ T4522] Allocated by task 4710: [ 155.339665][ T4522] kasan_set_track+0x4b/0x70 [ 155.344375][ T4522] __kasan_kmalloc+0x8e/0xa0 [ 155.349184][ T4522] __kmalloc+0xb0/0x240 [ 155.353741][ T4522] snd_seq_oss_readq_new+0x7e/0x240 [ 155.359077][ T4522] snd_seq_oss_open+0x7e4/0xf50 [ 155.364137][ T4522] odev_open+0x63/0x90 [ 155.368722][ T4522] chrdev_open+0x5c5/0x6a0 [ 155.373186][ T4522] do_dentry_open+0x7e9/0x10d0 [ 155.378056][ T4522] path_openat+0x2635/0x2ee0 [ 155.382881][ T4522] do_filp_open+0x1f1/0x430 [ 155.387411][ T4522] do_sys_openat2+0x150/0x4b0 [ 155.392116][ T4522] __x64_sys_openat+0x135/0x160 [ 155.397314][ T4522] do_syscall_64+0x4c/0xa0 [ 155.401829][ T4522] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 155.407778][ T4522] [ 155.410126][ T4522] Freed by task 4706: [ 155.414130][ T4522] kasan_set_track+0x4b/0x70 [ 155.418777][ T4522] kasan_save_free_info+0x2d/0x50 [ 155.424268][ T4522] ____kasan_slab_free+0x126/0x1e0 [ 155.429420][ T4522] slab_free_freelist_hook+0x131/0x1a0 [ 155.435032][ T4522] __kmem_cache_free+0xb6/0x1f0 [ 155.440111][ T4522] snd_seq_oss_readq_delete+0x3a/0x50 [ 155.445761][ T4522] free_devinfo+0x87/0xa0 [ 155.450223][ T4522] port_delete+0xc9/0x1a0 [ 155.454753][ T4522] snd_seq_delete_port+0x1c0/0x200 [ 155.460097][ T4522] snd_seq_ioctl_delete_port+0x8d/0x190 [ 155.466047][ T4522] snd_seq_event_port_detach+0xe1/0x160 [ 155.471800][ T4522] snd_seq_oss_release+0x17b/0x310 [ 155.477047][ T4522] odev_release+0x52/0x70 [ 155.481593][ T4522] __fput+0x22c/0x920 [ 155.485645][ T4522] task_work_run+0x1d0/0x260 [ 155.490281][ T4522] exit_to_user_mode_loop+0xe6/0x110 [ 155.495602][ T4522] exit_to_user_mode_prepare+0xee/0x180 [ 155.501367][ T4522] syscall_exit_to_user_mode+0x16/0x40 [ 155.507554][ T4522] do_syscall_64+0x58/0xa0 [ 155.512043][ T4522] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 155.518153][ T4522] [ 155.520621][ T4522] Last potentially related work creation: [ 155.526835][ T4522] kasan_save_stack+0x3a/0x60 [ 155.531575][ T4522] __kasan_record_aux_stack+0xb2/0xc0 [ 155.537023][ T4522] kvfree_call_rcu+0x103/0x870 [ 155.541921][ T4522] process_one_work+0x8a2/0x1160 [ 155.547156][ T4522] worker_thread+0xaa2/0x1270 [ 155.551953][ T4522] kthread+0x29d/0x330 [ 155.556421][ T4522] ret_from_fork+0x1f/0x30 [ 155.561039][ T4522] [ 155.563520][ T4522] Second to last potentially related work creation: [ 155.570228][ T4522] kasan_save_stack+0x3a/0x60 [ 155.575465][ T4522] __kasan_record_aux_stack+0xb2/0xc0 [ 155.581048][ T4522] insert_work+0x54/0x3c0 [ 155.585440][ T4522] __queue_work+0xba3/0xfb0 [ 155.590194][ T4522] rcu_work_rcufn+0xdb/0x120 [ 155.595991][ T4522] rcu_core+0xa99/0x1740 [ 155.600465][ T4522] handle_softirqs+0x2a1/0x930 [ 155.605520][ T4522] __irq_exit_rcu+0x13b/0x230 [ 155.610247][ T4522] irq_exit_rcu+0x5/0x20 [ 155.614524][ T4522] sysvec_apic_timer_interrupt+0xa0/0xc0 [ 155.620182][ T4522] asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 155.626545][ T4522] [ 155.628876][ T4522] The buggy address belongs to the object at ffff88807ada4000 [ 155.628876][ T4522] which belongs to the cache kmalloc-8k of size 8192 [ 155.643539][ T4522] The buggy address is located 2992 bytes inside of [ 155.643539][ T4522] 8192-byte region [ffff88807ada4000, ffff88807ada6000) [ 155.657616][ T4522] [ 155.660161][ T4522] The buggy address belongs to the physical page: [ 155.667151][ T4522] page:ffffea0001eb6800 refcount:1 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x7ada0 [ 155.678054][ T4522] head:ffffea0001eb6800 order:3 compound_mapcount:0 compound_pincount:0 [ 155.687122][ T4522] flags: 0xfff00000010200(slab|head|node=0|zone=1|lastcpupid=0x7ff) [ 155.695321][ T4522] raw: 00fff00000010200 ffffea0001dd5200 dead000000000003 ffff888017442280 [ 155.704090][ T4522] raw: 0000000000000000 0000000000020002 00000001ffffffff 0000000000000000 [ 155.712988][ T4522] page dumped because: kasan: bad access detected [ 155.719881][ T4522] page_owner tracks the page as allocated [ 155.725784][ T4522] page last allocated via order 3, migratetype Unmovable, gfp_mask 0xd2040(__GFP_IO|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC), pid 4259, tgid 4259 (sh), ts 82370140128, free_ts 82335183475 [ 155.747521][ T4522] post_alloc_hook+0x173/0x1a0 [ 155.753886][ T4522] get_page_from_freelist+0x1a1e/0x1ab0 [ 155.760761][ T4522] __alloc_pages+0x1ec/0x4f0 [ 155.766285][ T4522] alloc_slab_page+0x5d/0x160 [ 155.772483][ T4522] new_slab+0x87/0x2c0 [ 155.778261][ T4522] ___slab_alloc+0xbc6/0x1240 [ 155.783176][ T4522] __kmem_cache_alloc_node+0x1a0/0x260 [ 155.789715][ T4522] kmalloc_trace+0x26/0xe0 [ 155.795828][ T4522] tomoyo_init_log+0x1090/0x1f80 [ 155.801621][ T4522] tomoyo_supervisor+0x35f/0x11a0 [ 155.809095][ T4522] tomoyo_env_perm+0x14e/0x1f0 [ 155.814102][ T4522] tomoyo_find_next_domain+0x1578/0x1a50 [ 155.820164][ T4522] tomoyo_bprm_check_security+0x100/0x150 [ 155.826220][ T4522] security_bprm_check+0x5e/0x90 [ 155.831395][ T4522] bprm_execve+0xa50/0x17e0 [ 155.835935][ T4522] do_execveat_common+0x51b/0x6c0 [ 155.842325][ T4522] page last free stack trace: [ 155.848006][ T4522] free_unref_page_prepare+0x8b4/0x9a0 [ 155.853614][ T4522] free_unref_page+0x2e/0x3f0 [ 155.858787][ T4522] __unfreeze_partials+0x1a5/0x200 [ 155.865319][ T4522] put_cpu_partial+0x17c/0x250 [ 155.870364][ T4522] qlist_free_all+0x76/0xe0 [ 155.875020][ T4522] kasan_quarantine_reduce+0x144/0x160 [ 155.880628][ T4522] __kasan_slab_alloc+0x1e/0x80 [ 155.885776][ T4522] slab_post_alloc_hook+0x4b/0x480 [ 155.891053][ T4522] __kmem_cache_alloc_node+0x140/0x260 [ 155.896678][ T4522] __kmalloc+0xa0/0x240 [ 155.901607][ T4522] tomoyo_realpath_from_path+0xdf/0x5d0 [ 155.907254][ T4522] tomoyo_path_perm+0x26f/0x610 [ 155.913033][ T4522] security_inode_getattr+0xcf/0x120 [ 155.919871][ T4522] vfs_getattr+0x26/0x3a0 [ 155.925636][ T4522] __x64_sys_newfstat+0x13d/0x220 [ 155.932344][ T4522] do_syscall_64+0x4c/0xa0 [ 155.937282][ T4522] [ 155.939892][ T4522] Memory state around the buggy address: [ 155.950353][ T4522] ffff88807ada4a80: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 155.961180][ T4522] ffff88807ada4b00: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 155.970507][ T4522] >ffff88807ada4b80: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 155.980107][ T4522] ^ [ 155.987354][ T4522] ffff88807ada4c00: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 155.995505][ T4522] ffff88807ada4c80: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 156.004539][ T4522] ================================================================== [ 156.012721][ T4522] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 156.020899][ T4522] CPU: 0 PID: 4522 Comm: gfs2_quotad Not tainted syzkaller #0 [ 156.029947][ T4522] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 156.041093][ T4522] Call Trace: [ 156.046557][ T4522] [ 156.049538][ T4522] dump_stack_lvl+0x188/0x24e [ 156.055392][ T4522] ? memcpy+0x3c/0x60 [ 156.060122][ T4522] ? show_regs_print_info+0x12/0x12 [ 156.066873][ T4522] ? load_image+0x400/0x400 [ 156.071888][ T4522] panic+0x2e5/0x730 [ 156.076885][ T4522] ? __lock_acquire+0x7d10/0x7d10 [ 156.082038][ T4522] ? bpf_jit_dump+0xd0/0xd0 [ 156.087111][ T4522] ? _raw_spin_unlock_irqrestore+0xc1/0x120 [ 156.093066][ T4522] ? _raw_spin_unlock+0x40/0x40 [ 156.098494][ T4522] check_panic_on_warn+0x80/0xa0 [ 156.103832][ T4522] ? __lock_acquire+0x106/0x7d10 [ 156.109453][ T4522] end_report+0x66/0x110 [ 156.114091][ T4522] kasan_report+0x118/0x140 [ 156.118817][ T4522] ? __lock_acquire+0x106/0x7d10 [ 156.124178][ T4522] __lock_acquire+0x106/0x7d10 [ 156.129010][ T4522] ? verify_lock_unused+0x140/0x140 [ 156.134257][ T4522] ? lockdep_hardirqs_on_prepare+0x409/0x770 [ 156.140269][ T4522] ? lock_chain_count+0x20/0x20 [ 156.145474][ T4522] ? __free_object+0x218/0xa70 [ 156.150473][ T4522] ? lockdep_hardirqs_on+0x94/0x140 [ 156.155811][ T4522] ? verify_lock_unused+0x140/0x140 [ 156.161316][ T4522] ? alloc_object+0x640/0x640 [ 156.166738][ T4522] ? lockdep_hardirqs_on_prepare+0x409/0x770 [ 156.174037][ T4522] ? lock_chain_count+0x20/0x20 [ 156.179763][ T4522] lock_acquire+0x1bb/0x4a0 [ 156.184590][ T4522] ? finish_wait+0xb8/0x1d0 [ 156.190043][ T4522] ? timer_delete_sync+0x20/0x20 [ 156.195098][ T4522] ? __mod_timer+0x91e/0xd00 [ 156.199818][ T4522] ? read_lock_is_recursive+0x10/0x10 [ 156.205822][ T4522] _raw_spin_lock_irqsave+0xb0/0x100 [ 156.211148][ T4522] ? finish_wait+0xb8/0x1d0 [ 156.215950][ T4522] ? _raw_spin_lock+0x40/0x40 [ 156.220783][ T4522] ? update_process_times+0x1b0/0x1b0 [ 156.227088][ T4522] finish_wait+0xb8/0x1d0 [ 156.231568][ T4522] gfs2_quotad+0x4f3/0x680 [ 156.236213][ T4522] ? gfs2_wake_up_statfs+0xc0/0xc0 [ 156.241797][ T4522] ? _raw_spin_unlock_irqrestore+0x82/0x120 [ 156.248664][ T4522] ? wake_bit_function+0x200/0x200 [ 156.254117][ T4522] ? _raw_spin_unlock_irqrestore+0xc1/0x120 [ 156.260071][ T4522] ? __kthread_parkme+0x162/0x1c0 [ 156.265986][ T4522] kthread+0x29d/0x330 [ 156.271488][ T4522] ? gfs2_wake_up_statfs+0xc0/0xc0 [ 156.277480][ T4522] ? kthread_blkcg+0xd0/0xd0 [ 156.283564][ T4522] ret_from_fork+0x1f/0x30 [ 156.289855][ T4522] [ 156.293744][ T4522] Kernel Offset: disabled [ 156.298558][ T4522] Rebooting in 86400 seconds..