last executing test programs: 3m14.820650771s ago: executing program 2 (id=718): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x2) syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r1) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000003c0)=0x14) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) sendmsg$NL80211_CMD_GET_WOWLAN(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={0x0, 0x28}}, 0x0) getsockname$packet(r1, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB="340000001000390400"/20, @ANYRES32=r5, @ANYBLOB="8106e2bc00000200140012800b000100627269646765"], 0x34}}, 0x20044002) r6 = socket(0x10, 0x803, 0x0) r7 = socket(0x1, 0x803, 0x0) getsockname$packet(r4, &(0x7f0000000180)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000340)=@ipv6_newaddr={0x2c, 0x14, 0x9535393fea6295b5, 0x0, 0x0, {0xa, 0x40, 0x0, 0x0, r8}, [@IFA_LOCAL={0x14, 0x2, @ipv4}]}, 0x2c}}, 0x0) r9 = socket(0x10, 0x803, 0x0) getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000280)=0x14) sendmsg$nl_route(r9, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000000)=@ipv6_newaddr={0x34, 0x14, 0x9535393fea6295b5, 0x0, 0x0, {0xa, 0x0, 0x0, 0x0, r10}, [@IFA_LOCAL={0x14, 0x2, @ipv4}, @IFA_FLAGS={0x8, 0x8, 0x681}]}, 0x34}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffff11ffffffff000000", @ANYRES32=r2, @ANYBLOB], 0x3c}}, 0x0) 3m11.896191381s ago: executing program 2 (id=722): socket$kcm(0x10, 0x2, 0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) bpf$PROG_LOAD(0x5, 0x0, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80202, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) socket$vsock_stream(0x28, 0x1, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) ioctl$KVM_SET_VCPU_EVENTS(0xffffffffffffffff, 0x4040aea0, 0x0) getsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, &(0x7f0000000000)={@remote, 0x4, 0x2, 0xff, 0x3, 0x9}, &(0x7f0000000040)=0x20) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x0, 0x100000000, 0xfffffffffffffffd, 0x0, 0x0, 0x1000001000, 0x49}, 0x0, &(0x7f00000002c0)={0x3ff, 0x7, 0xffffffffffffffff, 0x9, 0x0, 0xf, 0x80000006}, 0x0, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) r2 = add_key$keyring(&(0x7f0000000000), &(0x7f0000000840)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffe) keyctl$get_security(0x11, r2, &(0x7f0000000880)=""/4096, 0x1000) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) openat$cachefiles(0xffffff9c, 0x0, 0x210000, 0x0) 3m10.754987318s ago: executing program 2 (id=727): socket(0x25, 0x1, 0x0) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5) prlimit64(0x0, 0xe, &(0x7f0000000100)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000000)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000740)={{}, 0x0, &(0x7f0000000700)=r5}, 0x20) recvmsg$unix(r5, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000002380)}, 0x2000) shutdown(r4, 0x2) r6 = syz_open_dev$loop(&(0x7f0000000080), 0x47ffffa, 0x122c42) ioctl$LOOP_CONFIGURE(r6, 0x4c0a, 0x0) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r7, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a4c000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40fffffffc080003400000001408000c4000000e45400000000c0a010100000000000000000a0000060900020073797a31000000000900010073797a310000000014000380100000800c00018006000100d103000014000000110001"], 0xb4}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) r8 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x0, &(0x7f0000000480)}) close_range(r8, 0xffffffffffffffff, 0x0) 3m7.742252432s ago: executing program 2 (id=729): r0 = getpgrp(0x0) mkdir(&(0x7f0000000440)='./file1\x00', 0x0) mount(0x0, &(0x7f0000000240)='./file1\x00', &(0x7f00000002c0)='tmpfs\x00', 0x0, &(0x7f0000000300)='usrquota') lchown(&(0x7f00000000c0)='./file1\x00', 0xee01, 0x0) fchownat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0xee00, 0x0, 0x100) sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5) prlimit64(0x0, 0xe, &(0x7f0000000100)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000000)=0x3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) r5 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$vim2m_VIDIOC_S_FMT(r5, 0xc0d05640, &(0x7f0000000440)={0x1, @pix_mp={0x10001, 0x0, 0x47425247}}) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, 0x0}, 0x0) connect$inet6(r4, &(0x7f0000000340)={0xa, 0x5, 0x0, @ipv4={'\x00', '\xff\xff', @remote}, 0xfffffffe}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r4, 0x6, 0x1f, &(0x7f00000000c0), 0x4) setsockopt$inet6_tcp_TLS_TX(r4, 0x11a, 0x1, 0x0, 0x0) 3m4.744273826s ago: executing program 2 (id=733): socket(0x10, 0x3, 0x0) socket(0x10, 0x803, 0x0) creat(&(0x7f00000002c0)='./file0\x00', 0x0) socket$igmp(0x2, 0x3, 0x2) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5) prlimit64(0x0, 0xe, &(0x7f0000000100)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, r0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000000)=0x3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) r4 = open$dir(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) r5 = creat(&(0x7f00000002c0)='./file0\x00', 0x0) r6 = open$dir(&(0x7f0000000080)='./file0\x00', 0xc402, 0x80) mmap$xdp(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x12, r6, 0x0) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000003bc0)={0x2, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000300000000000000fe020010850000000700000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x100, 0x70, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100000}, 0x94) write$P9_RVERSION(r5, &(0x7f0000000c40)=ANY=[], 0x13) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000003c0)={r7, 0x0, 0x30, 0x0, @val=@uprobe_multi={&(0x7f0000000280)='./file0\x00', &(0x7f0000000300)=[0x5], &(0x7f0000000180), 0x0, 0x1, 0x1}}, 0x40) mmap$xdp(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x2000006, 0x12, r4, 0x2000000) 3m1.74784917s ago: executing program 2 (id=740): r0 = socket$nl_generic(0x10, 0x3, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) semctl$GETALL(0x0, 0x0, 0xd, 0xfffffffffffffffe) r4 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_tx_ring(r4, 0x107, 0xd, &(0x7f00000002c0)=@req3={0x10000, 0xfffffffd, 0x100, 0x100, 0x10, 0x0, 0xc2}, 0x1c) r5 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000300)={0x14, r5, 0x1}, 0x14}, 0x1, 0x0, 0x0, 0x20000801}, 0x4) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000600)={0xffffffffffffffff}) ioctl$sock_SIOCETHTOOL(r6, 0x8946, &(0x7f00000014c0)={'macvtap0\x00', &(0x7f00000013c0)=@ethtool_drvinfo={0x3, "3768ca9bdb9072480b2f1c8f8182ce0898651461231fb740854b22a4379de586", "43a38879022a99b405a660e7cd1d15725e68a25c5152bd0bd227ffb8739f1cfc", "131c5b4bdb8af434447f3cb705650db1c0f8ddb541648cc0b1d318873f8c9a85", "f16051bbcb4dda20aea0d433f8c6f05bce62635e71c972c7929a58603233d497", "1cb283a6b524caa0cfd3fc2d99e7cad81b31b74f347dff63fa93236b8a8a2ccb"}}) socket$can_j1939(0x1d, 0x2, 0x7) r7 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r7, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)={0x60, 0x1403, 0xc23, 0x70bd2a, 0x25dfdbff, "", [{{0x9, 0x2, 'syz1\x00'}, {0x8, 0x41, 'siw\x00'}, {0x14, 0x33, 'virt_wifi0\x00'}}, {{0x9, 0x2, 'syz2\x00'}, {0x8, 0x41, 'rxe\x00'}, {0x14, 0x33, 'wg2\x00'}}]}, 0x60}, 0x1, 0x0, 0x0, 0x400c080}, 0x0) 2m46.480382317s ago: executing program 32 (id=740): r0 = socket$nl_generic(0x10, 0x3, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) semctl$GETALL(0x0, 0x0, 0xd, 0xfffffffffffffffe) r4 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_tx_ring(r4, 0x107, 0xd, &(0x7f00000002c0)=@req3={0x10000, 0xfffffffd, 0x100, 0x100, 0x10, 0x0, 0xc2}, 0x1c) r5 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000300)={0x14, r5, 0x1}, 0x14}, 0x1, 0x0, 0x0, 0x20000801}, 0x4) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000600)={0xffffffffffffffff}) ioctl$sock_SIOCETHTOOL(r6, 0x8946, &(0x7f00000014c0)={'macvtap0\x00', &(0x7f00000013c0)=@ethtool_drvinfo={0x3, "3768ca9bdb9072480b2f1c8f8182ce0898651461231fb740854b22a4379de586", "43a38879022a99b405a660e7cd1d15725e68a25c5152bd0bd227ffb8739f1cfc", "131c5b4bdb8af434447f3cb705650db1c0f8ddb541648cc0b1d318873f8c9a85", "f16051bbcb4dda20aea0d433f8c6f05bce62635e71c972c7929a58603233d497", "1cb283a6b524caa0cfd3fc2d99e7cad81b31b74f347dff63fa93236b8a8a2ccb"}}) socket$can_j1939(0x1d, 0x2, 0x7) r7 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r7, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)={0x60, 0x1403, 0xc23, 0x70bd2a, 0x25dfdbff, "", [{{0x9, 0x2, 'syz1\x00'}, {0x8, 0x41, 'siw\x00'}, {0x14, 0x33, 'virt_wifi0\x00'}}, {{0x9, 0x2, 'syz2\x00'}, {0x8, 0x41, 'rxe\x00'}, {0x14, 0x33, 'wg2\x00'}}]}, 0x60}, 0x1, 0x0, 0x0, 0x400c080}, 0x0) 2m29.596068557s ago: executing program 1 (id=781): socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) ioctl$FS_IOC_RESVSP(0xffffffffffffffff, 0x402c5828, 0x0) openat$sndseq(0xffffffffffffff9c, 0x0, 0xe0c81) read$FUSE(0xffffffffffffffff, 0x0, 0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x800, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000240), 0x2, 0x40102) ioctl$IOCTL_VMCI_CTX_ADD_NOTIFICATION(0xffffffffffffffff, 0x7af, 0x0) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2f) r1 = socket(0x28, 0x5, 0x0) bind$vsock_stream(r1, &(0x7f0000000040), 0x10) listen(r1, 0x0) r2 = socket(0x28, 0x5, 0x0) connect$vsock_stream(r2, &(0x7f0000000080), 0x10) socket$xdp(0x2c, 0x3, 0x0) r3 = syz_open_dev$video(&(0x7f0000000440), 0x3ff, 0x0) ioctl$VIDIOC_STREAMOFF(r3, 0x40045613, &(0x7f0000000200)=0x1) 2m25.828649975s ago: executing program 1 (id=788): r0 = getpgrp(0x0) mkdir(&(0x7f0000000440)='./file1\x00', 0x0) mount(0x0, &(0x7f0000000240)='./file1\x00', &(0x7f00000002c0)='tmpfs\x00', 0x0, &(0x7f0000000300)='usrquota') lchown(&(0x7f00000000c0)='./file1\x00', 0xee01, 0x0) fchownat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0xee00, 0x0, 0x100) sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5) prlimit64(0x0, 0xe, &(0x7f0000000100)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000000)=0x3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) 2m24.683675811s ago: executing program 1 (id=790): r0 = getpgrp(0x0) mkdir(&(0x7f0000000440)='./file1\x00', 0x0) mount(0x0, &(0x7f0000000240)='./file1\x00', &(0x7f00000002c0)='tmpfs\x00', 0x0, &(0x7f0000000300)='usrquota') lchown(&(0x7f00000000c0)='./file1\x00', 0xee01, 0x0) fchownat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0xee00, 0x0, 0x100) sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5) prlimit64(0x0, 0xe, &(0x7f0000000100)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000000)=0x3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) socket$inet6_tcp(0xa, 0x1, 0x0) 2m23.085098425s ago: executing program 1 (id=791): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x65, &(0x7f0000000040)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r1 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r1, 0x1, 0x0) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x0) mount(0x0, &(0x7f00000001c0)='./file0\x00', &(0x7f0000000140)='ramfs\x00', 0x10, 0x0) syz_mount_image$fuse(&(0x7f0000000000), &(0x7f0000000040)='./file0\x00', 0x400a8, &(0x7f0000000380)=ANY=[], 0x5, 0x0, 0x0) symlinkat(&(0x7f0000000080)='.\x00', 0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00') mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', 0x0, 0x104000, 0x0) mount$bind(&(0x7f0000000480)='./file0/file0\x00', &(0x7f0000000340)='./file0/file0/../file0\x00', 0x0, 0xa1c08, 0x0) mount$fuse(0x0, &(0x7f00000005c0)='./file0/file0\x00', 0x0, 0x88000, 0x0) mount$9p_unix(0x0, &(0x7f0000000040)='./file0\x00', 0x0, 0x33f7499, 0x0) mount$bind(&(0x7f0000000380)='./file0\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x2125099, 0x0) 2m17.115745591s ago: executing program 1 (id=798): socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) ioctl$FS_IOC_RESVSP(0xffffffffffffffff, 0x402c5828, 0x0) openat$sndseq(0xffffffffffffff9c, 0x0, 0xe0c81) read$FUSE(0xffffffffffffffff, 0x0, 0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x800, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000240), 0x2, 0x40102) ioctl$IOCTL_VMCI_CTX_ADD_NOTIFICATION(0xffffffffffffffff, 0x7af, 0x0) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2f) r1 = socket(0x28, 0x5, 0x0) bind$vsock_stream(r1, &(0x7f0000000040), 0x10) listen(r1, 0x0) r2 = socket(0x28, 0x5, 0x0) connect$vsock_stream(r2, &(0x7f0000000080), 0x10) socket$xdp(0x2c, 0x3, 0x0) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x0, 0x3, 0xfffffffffffffffd}, 0x0, &(0x7f00000002c0)={0x3ff, 0xc, 0x0, 0x9, 0x0, 0x0, 0x7fffffff}, 0x0, 0x0) ioctl$VIDIOC_STREAMOFF(0xffffffffffffffff, 0x40045613, &(0x7f0000000200)=0x1) 2m15.218101001s ago: executing program 1 (id=800): r0 = socket$nl_generic(0x10, 0x3, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) semctl$GETALL(0x0, 0x0, 0xd, 0xfffffffffffffffe) r3 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_tx_ring(r3, 0x107, 0xd, &(0x7f00000002c0)=@req3={0x10000, 0xfffffffd, 0x100, 0x100, 0x10, 0x0, 0xc2}, 0x1c) r4 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000300)={0x14, r4, 0x1}, 0x14}, 0x1, 0x0, 0x0, 0x20000801}, 0x4) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000600)={0xffffffffffffffff}) ioctl$sock_SIOCETHTOOL(r5, 0x8946, &(0x7f00000014c0)={'macvtap0\x00', &(0x7f00000013c0)=@ethtool_drvinfo={0x3, "3768ca9bdb9072480b2f1c8f8182ce0898651461231fb740854b22a4379de586", "43a38879022a99b405a660e7cd1d15725e68a25c5152bd0bd227ffb8739f1cfc", "131c5b4bdb8af434447f3cb705650db1c0f8ddb541648cc0b1d318873f8c9a85", "f16051bbcb4dda20aea0d433f8c6f05bce62635e71c972c7929a58603233d497", "1cb283a6b524caa0cfd3fc2d99e7cad81b31b74f347dff63fa93236b8a8a2ccb"}}) socket$can_j1939(0x1d, 0x2, 0x7) r6 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r6, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)={0x60, 0x1403, 0xc23, 0x70bd2a, 0x25dfdbff, "", [{{0x9, 0x2, 'syz1\x00'}, {0x8, 0x41, 'siw\x00'}, {0x14, 0x33, 'virt_wifi0\x00'}}, {{0x9, 0x2, 'syz2\x00'}, {0x8, 0x41, 'rxe\x00'}, {0x14, 0x33, 'wg2\x00'}}]}, 0x60}, 0x1, 0x0, 0x0, 0x400c080}, 0x0) 1m58.319651682s ago: executing program 33 (id=800): r0 = socket$nl_generic(0x10, 0x3, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) semctl$GETALL(0x0, 0x0, 0xd, 0xfffffffffffffffe) r3 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_tx_ring(r3, 0x107, 0xd, &(0x7f00000002c0)=@req3={0x10000, 0xfffffffd, 0x100, 0x100, 0x10, 0x0, 0xc2}, 0x1c) r4 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000300)={0x14, r4, 0x1}, 0x14}, 0x1, 0x0, 0x0, 0x20000801}, 0x4) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000600)={0xffffffffffffffff}) ioctl$sock_SIOCETHTOOL(r5, 0x8946, &(0x7f00000014c0)={'macvtap0\x00', &(0x7f00000013c0)=@ethtool_drvinfo={0x3, "3768ca9bdb9072480b2f1c8f8182ce0898651461231fb740854b22a4379de586", "43a38879022a99b405a660e7cd1d15725e68a25c5152bd0bd227ffb8739f1cfc", "131c5b4bdb8af434447f3cb705650db1c0f8ddb541648cc0b1d318873f8c9a85", "f16051bbcb4dda20aea0d433f8c6f05bce62635e71c972c7929a58603233d497", "1cb283a6b524caa0cfd3fc2d99e7cad81b31b74f347dff63fa93236b8a8a2ccb"}}) socket$can_j1939(0x1d, 0x2, 0x7) r6 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r6, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)={0x60, 0x1403, 0xc23, 0x70bd2a, 0x25dfdbff, "", [{{0x9, 0x2, 'syz1\x00'}, {0x8, 0x41, 'siw\x00'}, {0x14, 0x33, 'virt_wifi0\x00'}}, {{0x9, 0x2, 'syz2\x00'}, {0x8, 0x41, 'rxe\x00'}, {0x14, 0x33, 'wg2\x00'}}]}, 0x60}, 0x1, 0x0, 0x0, 0x400c080}, 0x0) 1m31.954949232s ago: executing program 0 (id=835): close(0x3) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) mlock2(&(0x7f0000627000/0x3000)=nil, 0x3000, 0x0) mremap(&(0x7f0000286000/0x1000)=nil, 0x1000, 0x1000, 0x3, &(0x7f0000b26000/0x1000)=nil) mlock(&(0x7f0000626000/0x5000)=nil, 0x5000) openat$sysctl(0xffffffffffffff9c, 0x0, 0x1, 0x0) sendmsg$netlink(0xffffffffffffffff, &(0x7f0000001f80)={0x0, 0x0, 0x0}, 0x0) socket$netlink(0x10, 0x3, 0x0) socket$netlink(0x10, 0x3, 0x6) getsockopt$XDP_MMAP_OFFSETS(0xffffffffffffffff, 0x11b, 0x1, 0x0, &(0x7f0000000140)) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$batadv(&(0x7f0000000400), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r3, 0x8933, &(0x7f0000000440)={'batadv0\x00', 0x0}) sendmsg$BATADV_CMD_SET_MESH(r3, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000000)={0x2c, r4, 0x1, 0x70bd28, 0x1, {}, [@BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0x4}, @BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r5}, @BATADV_ATTR_GW_MODE={0x5, 0x33, 0x1}]}, 0x2c}}, 0x80) 1m30.168622056s ago: executing program 0 (id=838): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0xb, 0x0, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x2}, 0x94) openat$sw_sync(0xffffffffffffff9c, 0x0, 0x80b02, 0x0) socket$key(0xf, 0x3, 0x2) r3 = socket$inet_udp(0x2, 0x2, 0x0) socket$key(0xf, 0x3, 0x2) bind$inet(r3, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x16) connect$inet(r3, &(0x7f0000000480)={0x2, 0x0, @multicast2}, 0x10) setsockopt$inet_IP_XFRM_POLICY(r3, 0x0, 0x11, &(0x7f00000002c0)={{{@in=@dev={0xac, 0x14, 0x14, 0x24}, @in6=@mcast1, 0x0, 0x0, 0x0, 0x0, 0x2}, {0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {}, 0x5, 0x0, 0x1, 0x0, 0x0, 0x2}, {{@in6=@ipv4={'\x00', '\xff\xff', @rand_addr=0x64010101}, 0x1, 0x6c}, 0x0, @in6=@loopback, 0x0, 0x0, 0x0, 0xb7}}, 0xe8) sendmmsg(r3, &(0x7f0000007fc0), 0x800001d, 0x0) 1m29.162290245s ago: executing program 0 (id=839): socket$kcm(0x10, 0x2, 0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) bpf$PROG_LOAD(0x5, 0x0, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80202, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) socket$vsock_stream(0x28, 0x1, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) ioctl$KVM_SET_VCPU_EVENTS(0xffffffffffffffff, 0x4040aea0, 0x0) getsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, &(0x7f0000000000)={@remote, 0x4, 0x2, 0xff, 0x3, 0x9}, &(0x7f0000000040)=0x20) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x0, 0x100000000, 0xfffffffffffffffd, 0x0, 0x0, 0x1000001000, 0x49}, 0x0, &(0x7f00000002c0)={0x3ff, 0x7, 0xffffffffffffffff, 0x9, 0x0, 0xf, 0x80000006}, 0x0, 0x0) r1 = add_key$keyring(&(0x7f0000000000), &(0x7f0000000840)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffe) keyctl$get_security(0x11, r1, &(0x7f0000000880)=""/4096, 0x1000) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) openat$cachefiles(0xffffff9c, 0x0, 0x210000, 0x0) setsockopt$sock_int(0xffffffffffffffff, 0x28, 0x7, 0x0, 0x0) 1m26.683685368s ago: executing program 0 (id=841): r0 = getpgrp(0x0) mkdir(&(0x7f0000000440)='./file1\x00', 0x0) mount(0x0, &(0x7f0000000240)='./file1\x00', &(0x7f00000002c0)='tmpfs\x00', 0x0, &(0x7f0000000300)='usrquota') lchown(&(0x7f00000000c0)='./file1\x00', 0xee01, 0x0) fchownat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0xee00, 0x0, 0x100) sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5) prlimit64(0x0, 0xe, &(0x7f0000000100)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000000)=0x3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) r5 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$vim2m_VIDIOC_S_FMT(r5, 0xc0d05640, &(0x7f0000000440)={0x1, @pix_mp={0x10001, 0x0, 0x47425247}}) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, 0x0}, 0x0) connect$inet6(r4, &(0x7f0000000340)={0xa, 0x5, 0x0, @ipv4={'\x00', '\xff\xff', @remote}, 0xfffffffe}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r4, 0x6, 0x1f, &(0x7f00000000c0), 0x4) 1m25.350108936s ago: executing program 0 (id=842): r0 = getpgrp(0x0) mkdir(&(0x7f0000000440)='./file1\x00', 0x0) mount(0x0, &(0x7f0000000240)='./file1\x00', &(0x7f00000002c0)='tmpfs\x00', 0x0, &(0x7f0000000300)='usrquota') lchown(&(0x7f00000000c0)='./file1\x00', 0xee01, 0x0) fchownat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0xee00, 0x0, 0x100) sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5) prlimit64(0x0, 0xe, &(0x7f0000000100)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000000)=0x3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) r5 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$vim2m_VIDIOC_S_FMT(r5, 0xc0d05640, &(0x7f0000000440)={0x1, @pix_mp={0x10001, 0x0, 0x47425247}}) setsockopt$inet6_tcp_TLS_TX(r4, 0x11a, 0x1, 0x0, 0x0) 1m18.694968172s ago: executing program 0 (id=846): keyctl$instantiate(0xc, 0x0, &(0x7f0000000100)=@encrypted_update={'update ', 'default', 0x20, 'user:', '\x84rusted:'}, 0x1d, 0xfffffffffffffffd) prlimit64(0x0, 0xe, 0x0, 0x0) socket$inet_sctp(0x2, 0x1, 0x84) add_key$fscrypt_v1(0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_CLIENT(0xffffffffffffffff, 0xc0105303, &(0x7f00000003c0)={0x0, 0x0, 0x20000}) socket$alg(0x26, 0x5, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x8800, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000000)=0x14) ioctl$TIOCVHANGUP(r1, 0x5437, 0x0) r2 = syz_open_dev$vbi(&(0x7f0000000000), 0x0, 0x2) r3 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt(r3, 0x84, 0x11, &(0x7f0000000040)="020000000980", 0x6) ioctl$VIDIOC_SUBSCRIBE_EVENT(r2, 0x4020565a, &(0x7f0000000080)={0x5, 0x2}) ioctl$VIDIOC_S_INPUT(r2, 0xc0045627, &(0x7f00000000c0)=0x2) ppoll(0x0, 0x0, 0x0, &(0x7f0000000340)={[0x401]}, 0x8) r4 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/profiling', 0xa0042, 0x0) write$tcp_mem(r4, &(0x7f0000000280)={0x11, 0x2d, 0x0, 0x3a, 0xfffffffffffffffe, 0x2c}, 0x48) add_key(&(0x7f0000000140)='encrypted\x00', &(0x7f0000000180), &(0x7f0000000100), 0xca, 0xfffffffffffffffe) 1m3.316327134s ago: executing program 34 (id=846): keyctl$instantiate(0xc, 0x0, &(0x7f0000000100)=@encrypted_update={'update ', 'default', 0x20, 'user:', '\x84rusted:'}, 0x1d, 0xfffffffffffffffd) prlimit64(0x0, 0xe, 0x0, 0x0) socket$inet_sctp(0x2, 0x1, 0x84) add_key$fscrypt_v1(0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_CLIENT(0xffffffffffffffff, 0xc0105303, &(0x7f00000003c0)={0x0, 0x0, 0x20000}) socket$alg(0x26, 0x5, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x8800, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000000)=0x14) ioctl$TIOCVHANGUP(r1, 0x5437, 0x0) r2 = syz_open_dev$vbi(&(0x7f0000000000), 0x0, 0x2) r3 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt(r3, 0x84, 0x11, &(0x7f0000000040)="020000000980", 0x6) ioctl$VIDIOC_SUBSCRIBE_EVENT(r2, 0x4020565a, &(0x7f0000000080)={0x5, 0x2}) ioctl$VIDIOC_S_INPUT(r2, 0xc0045627, &(0x7f00000000c0)=0x2) ppoll(0x0, 0x0, 0x0, &(0x7f0000000340)={[0x401]}, 0x8) r4 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/profiling', 0xa0042, 0x0) write$tcp_mem(r4, &(0x7f0000000280)={0x11, 0x2d, 0x0, 0x3a, 0xfffffffffffffffe, 0x2c}, 0x48) add_key(&(0x7f0000000140)='encrypted\x00', &(0x7f0000000180), &(0x7f0000000100), 0xca, 0xfffffffffffffffe) 17.727648631s ago: executing program 3 (id=889): socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) ioctl$FS_IOC_RESVSP(0xffffffffffffffff, 0x402c5828, 0x0) openat$sndseq(0xffffffffffffff9c, 0x0, 0xe0c81) read$FUSE(0xffffffffffffffff, 0x0, 0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x800, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000240), 0x2, 0x40102) ioctl$IOCTL_VMCI_CTX_ADD_NOTIFICATION(0xffffffffffffffff, 0x7af, 0x0) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2f) r1 = socket(0x28, 0x5, 0x0) bind$vsock_stream(r1, &(0x7f0000000040), 0x10) r2 = socket(0x28, 0x5, 0x0) connect$vsock_stream(r2, &(0x7f0000000080), 0x10) socket$xdp(0x2c, 0x3, 0x0) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x0, 0x3, 0xfffffffffffffffd}, 0x0, &(0x7f00000002c0)={0x3ff, 0xc, 0x0, 0x9, 0x0, 0x0, 0x7fffffff}, 0x0, 0x0) r3 = syz_open_dev$video(&(0x7f0000000440), 0x3ff, 0x0) ioctl$VIDIOC_STREAMOFF(r3, 0x40045613, &(0x7f0000000200)=0x1) 17.56542393s ago: executing program 6 (id=890): syz_mount_image$ext4(&(0x7f0000000680)='ext2\x00', &(0x7f0000000040)='./file2\x00', 0x10000, &(0x7f00000000c0)={[{@jqfmt_vfsv1}]}, 0x1, 0x559, &(0x7f0000000100)="$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") sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x804}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10138, 0x2, 0x0) r3 = socket$igmp(0x2, 0x3, 0x2) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000180)={'bond0\x00', 0x0}) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000380)={0x6, 0x3, &(0x7f0000000080)=@framed, &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x40, '\x00', r4}, 0x90) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r3, 0x8933, &(0x7f0000000780)={'batadv_slave_1\x00'}) r5 = socket$inet6(0xa, 0x1, 0x0) socket$key(0xf, 0x3, 0x2) setsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, &(0x7f0000000700)={@remote, 0x40, 0x2, 0xff, 0x6, 0x0, 0x3}, 0x20) r6 = syz_open_dev$video4linux(&(0x7f0000000100), 0x5, 0x20000) ioctl$VIDIOC_SUBDEV_G_SELECTION(r6, 0xc040563d, &(0x7f00000003c0)={0x1, 0x0, 0x103, 0x4, {0x9, 0x0, 0x3, 0x1097}}) setsockopt$inet6_IPV6_XFRM_POLICY(r5, 0x29, 0x23, &(0x7f0000000180)={{{@in=@private, @in6=@dev, 0x0, 0x0, 0x0, 0x0, 0x2}, {}, {0x0, 0x0, 0x1}, 0x0, 0x0, 0x1, 0x0, 0x0, 0x3}, {{@in=@local, 0x0, 0x6c}, 0x0, @in6=@loopback, 0x0, 0x0, 0x0, 0x4}}, 0xe8) syz_open_dev$tty1(0xc, 0x4, 0x1) 13.021550334s ago: executing program 6 (id=897): r0 = getpgrp(0x0) mkdir(&(0x7f0000000440)='./file1\x00', 0x0) mount(0x0, &(0x7f0000000240)='./file1\x00', &(0x7f00000002c0)='tmpfs\x00', 0x0, &(0x7f0000000300)='usrquota') lchown(&(0x7f00000000c0)='./file1\x00', 0xee01, 0x0) fchownat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0xee00, 0x0, 0x100) sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5) prlimit64(0x0, 0xe, &(0x7f0000000100)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000000)=0x3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) r5 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$vim2m_VIDIOC_S_FMT(r5, 0xc0d05640, &(0x7f0000000440)={0x1, @pix_mp={0x10001, 0x0, 0x47425247}}) connect$inet6(r4, &(0x7f0000000340)={0xa, 0x5, 0x0, @ipv4={'\x00', '\xff\xff', @remote}, 0xfffffffe}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r4, 0x6, 0x1f, &(0x7f00000000c0), 0x4) setsockopt$inet6_tcp_TLS_TX(r4, 0x11a, 0x1, 0x0, 0x0) 11.350785201s ago: executing program 5 (id=891): listen(0xffffffffffffffff, 0x8) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = socket$inet(0x2, 0x1, 0x0) bind$inet(r3, 0x0, 0x0) r4 = socket$inet(0x2, 0x1, 0x0) setsockopt$sock_int(r4, 0x1, 0xf, &(0x7f0000356ffc)=0xffffffffffffff40, 0x4) bind$inet(r4, &(0x7f0000e15000)={0x2, 0x4e20, @empty=0xe0000002}, 0x10) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) bpf$PROG_LOAD(0x5, 0x0, 0x0) sendto(0xffffffffffffffff, &(0x7f0000000040), 0x0, 0x4000000, 0x0, 0x0) r5 = syz_open_procfs(0xffffffffffffffff, &(0x7f00000000c0)='comm\x00') write$P9_RWRITE(r5, 0x0, 0x0) r6 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r6, &(0x7f0000000e00)={0x0, 0x18, 0xfa00, {0x1, &(0x7f000000bb00)={0xffffffffffffffff}, 0x106, 0x1}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_ADDR(r6, &(0x7f0000000280)={0x15, 0x110, 0xfa00, {r7, 0x0, 0x0, 0x30, 0x0, @in6={0x1b, 0xfefe, 0x807, @empty, 0x3aa7}, @ib={0x1b, 0xffff, 0xfffffffd, {'\x00\x00\x00i\x00'}, 0x0, 0xfffffffffffffffc, 0x6}}}, 0x118) write$RDMA_USER_CM_CMD_RESOLVE_IP(r5, 0x0, 0x0) 11.346267771s ago: executing program 6 (id=899): socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) ioctl$FS_IOC_RESVSP(0xffffffffffffffff, 0x402c5828, 0x0) openat$sndseq(0xffffffffffffff9c, 0x0, 0xe0c81) read$FUSE(0xffffffffffffffff, 0x0, 0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x800, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000240), 0x2, 0x40102) ioctl$IOCTL_VMCI_CTX_ADD_NOTIFICATION(0xffffffffffffffff, 0x7af, 0x0) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2f) r1 = socket(0x28, 0x5, 0x0) bind$vsock_stream(r1, &(0x7f0000000040), 0x10) r2 = socket(0x28, 0x5, 0x0) connect$vsock_stream(r2, &(0x7f0000000080), 0x10) socket$xdp(0x2c, 0x3, 0x0) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x0, 0x3, 0xfffffffffffffffd}, 0x0, &(0x7f00000002c0)={0x3ff, 0xc, 0x0, 0x9, 0x0, 0x0, 0x7fffffff}, 0x0, 0x0) r3 = syz_open_dev$video(&(0x7f0000000440), 0x3ff, 0x0) ioctl$VIDIOC_STREAMOFF(r3, 0x40045613, &(0x7f0000000200)=0x1) 11.343096142s ago: executing program 3 (id=900): r0 = getpgrp(0x0) mkdir(&(0x7f0000000440)='./file1\x00', 0x0) mount(0x0, &(0x7f0000000240)='./file1\x00', &(0x7f00000002c0)='tmpfs\x00', 0x0, &(0x7f0000000300)='usrquota') lchown(&(0x7f00000000c0)='./file1\x00', 0xee01, 0x0) fchownat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0xee00, 0x0, 0x100) sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5) prlimit64(0x0, 0xe, &(0x7f0000000100)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000000)=0x3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) r5 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$vim2m_VIDIOC_S_FMT(r5, 0xc0d05640, &(0x7f0000000440)={0x1, @pix_mp={0x10001, 0x0, 0x47425247}}) connect$inet6(r4, &(0x7f0000000340)={0xa, 0x5, 0x0, @ipv4={'\x00', '\xff\xff', @remote}, 0xfffffffe}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r4, 0x6, 0x1f, &(0x7f00000000c0), 0x4) setsockopt$inet6_tcp_TLS_TX(r4, 0x11a, 0x1, 0x0, 0x0) 9.416980293s ago: executing program 5 (id=892): r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5) prlimit64(0x0, 0xe, &(0x7f0000000100)={0x8, 0x80000100008b}, 0x0) r1 = fsopen(&(0x7f00000001c0)='ramfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r1, 0x6, 0x0, 0x0, 0x0) r2 = fsmount(r1, 0x0, 0x0) fchdir(r2) fchmodat(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0xfffffffb) r3 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) openat(r3, &(0x7f00000000c0)='.\x00', 0x515401, 0x408) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r4 = getpid() sched_setscheduler(r4, 0x2, &(0x7f0000000000)=0x3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r5 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r5, 0x1, 0x0) r6 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r6, &(0x7f0000019680)=""/102392, 0x18ff8) msgget$private(0x0, 0x790) r7 = socket$inet_dccp(0x2, 0x6, 0x0) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r8, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x7}}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x301, 0x0, 0x0, {0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz1\x00'}]}, @NFT_MSG_NEWCHAIN={0x54, 0x3, 0xa, 0x201, 0x0, 0x0, {0x1}, [@NFTA_CHAIN_NAME={0x9, 0x3, 'syz2\x00'}, @NFTA_CHAIN_HOOK={0x28, 0x4, 0x0, 0x1, [@NFTA_HOOK_PRIORITY={0x8}, @NFTA_HOOK_HOOKNUM={0x8, 0x1, 0x1, 0x0, 0x5}, @NFTA_HOOK_DEV={0x14, 0x3, 'veth1_macvtap\x00'}]}, @NFTA_CHAIN_TABLE={0x9, 0x1, 'syz1\x00'}]}, @NFT_MSG_DELCHAIN={0x4c, 0x5, 0xa, 0x201, 0x0, 0x0, {0x1, 0x0, 0x2000}, [@NFTA_CHAIN_HANDLE={0xc, 0x2, 0x1, 0x0, 0x1}, @NFTA_CHAIN_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_CHAIN_HOOK={0x20, 0x4, 0x0, 0x1, [@NFTA_HOOK_DEV={0x14, 0x3, 'veth1_macvtap\x00'}, @NFTA_HOOK_HOOKNUM={0x8, 0x1, 0x1, 0x0, 0x5}]}]}], {0x14}}, 0xe8}}, 0x0) sendmmsg(r7, 0x0, 0x0, 0x0) 9.416753753s ago: executing program 3 (id=893): socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) ioctl$FS_IOC_RESVSP(0xffffffffffffffff, 0x402c5828, 0x0) openat$sndseq(0xffffffffffffff9c, 0x0, 0xe0c81) read$FUSE(0xffffffffffffffff, 0x0, 0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x800, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000240), 0x2, 0x40102) ioctl$IOCTL_VMCI_CTX_ADD_NOTIFICATION(0xffffffffffffffff, 0x7af, 0x0) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2f) r1 = socket(0x28, 0x5, 0x0) bind$vsock_stream(r1, &(0x7f0000000040), 0x10) listen(r1, 0x0) connect$vsock_stream(0xffffffffffffffff, &(0x7f0000000080), 0x10) socket$xdp(0x2c, 0x3, 0x0) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x0, 0x3, 0xfffffffffffffffd}, 0x0, &(0x7f00000002c0)={0x3ff, 0xc, 0x0, 0x9, 0x0, 0x0, 0x7fffffff}, 0x0, 0x0) r2 = syz_open_dev$video(&(0x7f0000000440), 0x3ff, 0x0) ioctl$VIDIOC_STREAMOFF(r2, 0x40045613, &(0x7f0000000200)=0x1) 7.75201802s ago: executing program 5 (id=894): socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) ioctl$FS_IOC_RESVSP(0xffffffffffffffff, 0x402c5828, 0x0) openat$sndseq(0xffffffffffffff9c, 0x0, 0xe0c81) read$FUSE(0xffffffffffffffff, 0x0, 0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x800, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000240), 0x2, 0x40102) ioctl$IOCTL_VMCI_CTX_ADD_NOTIFICATION(0xffffffffffffffff, 0x7af, 0x0) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2f) r1 = socket(0x28, 0x5, 0x0) bind$vsock_stream(r1, &(0x7f0000000040), 0x10) listen(r1, 0x0) connect$vsock_stream(0xffffffffffffffff, &(0x7f0000000080), 0x10) socket$xdp(0x2c, 0x3, 0x0) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x0, 0x3, 0xfffffffffffffffd}, 0x0, &(0x7f00000002c0)={0x3ff, 0xc, 0x0, 0x9, 0x0, 0x0, 0x7fffffff}, 0x0, 0x0) r2 = syz_open_dev$video(&(0x7f0000000440), 0x3ff, 0x0) ioctl$VIDIOC_STREAMOFF(r2, 0x40045613, &(0x7f0000000200)=0x1) 6.674152862s ago: executing program 5 (id=895): syz_mount_image$ext4(&(0x7f00000000c0)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x1200004, &(0x7f0000000100), 0x1, 0x599, &(0x7f0000000540)="$eJzs3T9sG2UbAPDnznHTP/m+9JO+T/pAHSpAKlJVJ+kfKEztiqhUqQMSC0SOG1Vx4ipOoIkike4VogMC1KVsMDCCGBgQCyMrC4gZqaIRSE0HMHJ8TtPULk6I4xL/ftLZ73t39vO+d35e+053cgB962j9IY14KiIuJhHDG5YNRLbwaGO91ZWl4v2VpWIStdqlX5JIIuLeylKxuX6SPR+KiOWI+H9EfJOPOJ6uv+W+ZqG6sDg1Xi6XZrP6yNz01ZHqwuKJK9Pjk6XJ0sypF186c/b0mbGTYxube7+2sZbfWl9v/Hjz3RvfvXL75qefHVkuvj+exLkYypZt7MdOamyTfJzbNP90N4L1UNLrBrAtuSzP66n0vxiOXJb1rdQ2Dg6Du9I8oItqgxE1oE8l8h/6VPN3QP34tznt5u+PO+cbByD1uKsrS8V3ohl/oHFuIvavHZsc/DV56Mikfrx5eDcbyp60fD0iRgcGHv38J9nnb/tGd6KBdNXX5xs76tH9n66PP9Fi/Blqnjv9m5rj32o2/q22iJ9rM/5d7DDG76//9FHb+NcH4+mW8ZP1+EmL+GlEvNlh/FuvfXm23bLaxxHHonX8puTx54dHLl8pl0Ybjy1jfHXsyMvt+x9xsE38xjnb/WtfMxv7vy9rU9ph/7/49vNnlh8T//lnH7//W23/AxHxXofx/3Pvk1fbLbtzPblb/xWw1f2fRD5udxj/hXNHf8iKzhoCAAAAAAAAAMAOSteuZUvSwno5TQuFxj28/42DablSnTt+uTI/M9G45u1w5NPmlVbDjXpSr49l1+M26yc31U/lsoC5A2v1QrFSnuhx3wEAAAAAAAAAAAAAAAAAAOBJcWjT/f+/5dbu/9/8d9XAXtX+L7+BvU7+Q/96OP+TnrUD2H2+/6Fv1eQ/9C/5D/1L/kP/kv/Qv+Q/9C/5D/1L/gMAAAAAAAAAAAAAAAAAAAAAAAAAQFdcvHChPtXurywV6/WJgYX5qcpbJyZK1anC9HyxUKzMXi1MViqT5VKhWJn+q/dLKpWrozEzf21krlSdG6kuLL4xXZmfaf6naCnf9R4BAAAAAAAAAAAAAAAAAADAP8/Q2pSkhYh8o56mhULEvyLicBLJ5Svl0mhE/Dsivs/lB+v1sV43GgAAAAAAAAAAAAAAAAAAAPaY6sLi1Hi5XJrtXmEgC9XFEJ0XBrayckQs72wz6u+45Vflsw3Y4023Nwq5J+Nz+OQXejgoAQAAAAAAAAAAAAAAAABAn3pw02+nr/ijuw0CAAAAAAAAAAAAAAAAAACAvpT+nEREfTo2/NzQ5qX7ktXc2nNEvH3r0gfXxufmZsfq8++uz5/7MJt/shftBzrVzNM0Iup5DAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADxQXVicGi+XS7PbLAx2sE6v+wgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACwHX8GAAD//xLkz18=") r0 = socket$nl_xfrm(0x10, 0x3, 0x6) socket$packet(0x11, 0x0, 0x300) sendmsg$nl_xfrm(r0, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000580)=ANY=[@ANYBLOB="f80000001600850200000000000000002001006f000000000000000000000002e000000200"/64, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="fe8000000000000000000000000000aa000000006c000000e000000200000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000040"], 0xf8}}, 0x0) r1 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r1, 0x3b81, &(0x7f0000000040)={0xc, 0x0, 0x0}) prlimit64(0x0, 0xe, &(0x7f00000007c0)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r3 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r3, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN(r1, 0x3ba0, &(0x7f0000000440)={0x48, 0x2, r2}) r4 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000), 0x42, 0x0) r5 = socket$alg(0x26, 0x5, 0x0) bind$alg(r5, &(0x7f0000000000)={0x26, 'aead\x00', 0x0, 0x0, 'authenc(michael_mic-generic,pcbc(fcrypt-generic))\x00'}, 0x58) close_range(r4, 0xffffffffffffffff, 0x0) ioctl$IOMMU_IOAS_MAP$PAGES(r1, 0x3b85, &(0x7f0000000100)={0x28, 0x6, r2, 0x0, &(0x7f0000c00000/0x400000)=nil, 0x400000, 0x51e}) fallocate(0xffffffffffffffff, 0x20, 0x0, 0x8000) openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x161042, 0x91) r6 = syz_io_uring_setup(0x10d, &(0x7f00000000c0)={0x0, 0x127d, 0x4104, 0x0, 0x90}, &(0x7f0000000280)=0x0, &(0x7f0000000140)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r7, 0x4, &(0x7f0000000080)=0x401, 0x0, 0x4) syz_io_uring_submit(r7, r8, &(0x7f00000002c0)=@IORING_OP_ASYNC_CANCEL={0xe, 0x40, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1}) io_uring_enter(r6, 0x3516, 0x58b3, 0x0, 0x0, 0x0) 5.034691338s ago: executing program 6 (id=896): socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) ioctl$FS_IOC_RESVSP(0xffffffffffffffff, 0x402c5828, 0x0) openat$sndseq(0xffffffffffffff9c, 0x0, 0xe0c81) read$FUSE(0xffffffffffffffff, 0x0, 0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x800, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000240), 0x2, 0x40102) ioctl$IOCTL_VMCI_CTX_ADD_NOTIFICATION(0xffffffffffffffff, 0x7af, 0x0) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2f) r1 = socket(0x28, 0x5, 0x0) bind$vsock_stream(r1, &(0x7f0000000040), 0x10) listen(r1, 0x0) connect$vsock_stream(0xffffffffffffffff, &(0x7f0000000080), 0x10) socket$xdp(0x2c, 0x3, 0x0) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x0, 0x3, 0xfffffffffffffffd}, 0x0, &(0x7f00000002c0)={0x3ff, 0xc, 0x0, 0x9, 0x0, 0x0, 0x7fffffff}, 0x0, 0x0) r2 = syz_open_dev$video(&(0x7f0000000440), 0x3ff, 0x0) ioctl$VIDIOC_STREAMOFF(r2, 0x40045613, &(0x7f0000000200)=0x1) 4.005324118s ago: executing program 5 (id=898): socket$netlink(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) openat(0xffffffffffffff9c, &(0x7f0000000280)='./cgroup\x00', 0x0, 0x0) syz_mount_image$hfsplus(&(0x7f0000000980), &(0x7f0000000a80)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x2000010, &(0x7f00000009c0)=ANY=[@ANYRES8=0x0, @ANYRES8, @ANYBLOB="4a3a9f8c2aab73255ecca15a5ad5b0b10a818868cc63e509dca434325eec52c449bc0f78c4d4996b7c34f8c4027731d8084daf83fa32ac4f26093d06abe1c066b64b56d81577ccc09ee10fa7258f8c9a08a6fa6f21d52366469e697011812e7133138514e15b9fe1f64a7d3062ee9a77ca0a5d9f6af20321dc3f0f0577b860b69773048ec9a9a6d40e94d2f4aca5a132897494efd6232446f0d416f1a75c1e7e1e233ad655fc58f85c"], 0xff, 0x6de, &(0x7f0000000180)="$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") r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_IP_XFRM_POLICY(r0, 0x0, 0x11, &(0x7f00000002c0)={{{@in6=@mcast2, @in6=@private2, 0x0, 0x0, 0x4e21, 0xfffe, 0x2, 0x0, 0x0, 0x0, 0x0, 0xee01}, {0x0, 0x0, 0x6, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x100000000000}, {}, 0x4, 0x0, 0x1, 0x0, 0x3}, {{@in=@rand_addr=0x64010101, 0x0, 0x6c}, 0x0, @in=@loopback, 0x0, 0x0, 0x0, 0xb7, 0xfffffffe}}, 0xe8) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) r1 = getpid() sched_setscheduler(r1, 0x1, &(0x7f0000000200)=0x7) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) setsockopt$sock_linger(0xffffffffffffffff, 0x1, 0xd, 0x0, 0x0) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) prctl$PR_TASK_PERF_EVENTS_ENABLE(0x20) memfd_create(&(0x7f00000000c0)='-B\xd5N4\xa6Ey\xdb\xd1\xa7\xb1S\xf1:)\x00\x8a\xd7Uw\x00\xbc\xa92\xb3\xbb\x8d\xac\xacva}knh#\xcf)\x0f\xc8\xc0:\x9cc\x10d\xee\xa9\x8b\x066\xb8G\xd1c\xe1$\xff\x97\x8f~\xb90a\xa9\xb2\x04K\x98\x93=\xabQ\xf7\x19\xea\xef\xe3\xe1@\x84\x13\xefZb:\xf56\x01B\xec\xde\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00@Ip]D\xd6\r\xac\v#co\xd5\xb9\xc806\xa8\x99\xffs7\xa1b1\xb1;i)j\x0e\x1e\xedI\xa2\x80\x89\x1d\xd9p!\xc86s\xe07(\xae\xf9<\"\xf0\xc8\xae\x96J\xe2]\x01\x86\xb7.<\xf5N\xd3\x94W1\xff\x18z>\xa7q,\xf7\x96\xb8{\x8e\xbf4\xe0\x95\x1ce\xe4\x85\xcdi\xed\xd3>\xeb\xa5\xaf\x87\x90@\xd1\xbd`^\xfa\xb6\x9cj\x13/\xc5\\W\x04\br\x17X\xe3\xfb\xc8\xd4\xaeX\xc9s\xd18\xd9L\xbf\xa0\xa6\xdf2\a\x99i\xb1/\x19@\x1cq\xeb?\xc1z:\x913\xfa8\xac\xd3q\xe4vPGU', 0x1) r4 = syz_open_procfs(0x0, &(0x7f0000000380)='clear_refs\x00') writev(r4, &(0x7f0000000100)=[{&(0x7f0000000000)='4', 0x1}], 0x1) fanotify_init(0x200, 0x0) mknod$loop(0x0, 0x100000000000600d, 0x1) creat(&(0x7f00000000c0)='./file0\x00', 0xc9028ba210c11f8b) 3.917140823s ago: executing program 3 (id=901): r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f00000000c0)={0xc, 0x0, 0x0}) ioctl$IOMMU_TEST_OP_CREATE_ACCESS(r0, 0x3ba0, &(0x7f0000000280)={0x48, 0x5, r1, 0x0, 0xffffffffffffffff, 0x1}) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt(r2, 0x84, 0x81, &(0x7f0000000280)="1a00000002000000", 0x8) setsockopt$inet_sctp6_SCTP_AUTH_CHUNK(r2, 0x84, 0x15, &(0x7f0000000200), 0x1) syz_mount_image$msdos(&(0x7f0000000300), &(0x7f0000000340)='./file1\x00', 0x0, &(0x7f0000000200)=ANY=[], 0x1, 0x2ca, &(0x7f00000006c0)="$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") syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) openat$sequencer2(0xffffffffffffff9c, &(0x7f00000005c0), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r3 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102) writev(r3, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0, 0x13}], 0x2) syz_open_dev$swradio(&(0x7f0000002980), 0x1, 0x2) fcntl$setstatus(0xffffffffffffffff, 0x4, 0x42000) ioctl$KDFONTOP_SET(0xffffffffffffffff, 0x4b72, &(0x7f0000000040)={0x0, 0x1, 0x16, 0xc, 0x1c6, 0x0}) bpf$MAP_CREATE(0x0, 0x0, 0x48) setsockopt$XDP_TX_RING(0xffffffffffffffff, 0x11b, 0x3, 0x0, 0x0) statfs(&(0x7f0000000200)='.\x00', 0x0) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r2, 0x84, 0x64, &(0x7f0000000000)=[@in6={0xa, 0x4e23, 0x401, @loopback}], 0x1c) sendto$inet6(r2, &(0x7f0000000080)="b1", 0x1, 0x400c0d4, &(0x7f0000000140)={0xa, 0x4e23, 0x0, @loopback, 0xffffffff}, 0x1c) writev(r2, &(0x7f0000000100)=[{&(0x7f0000000180)="c2", 0x1}], 0x1) write$UHID_SET_REPORT_REPLY(r2, &(0x7f00000007c0)=ANY=[], 0xffe0) 3.821243528s ago: executing program 6 (id=902): r0 = getpgrp(0x0) mkdir(&(0x7f0000000440)='./file1\x00', 0x0) mount(0x0, &(0x7f0000000240)='./file1\x00', &(0x7f00000002c0)='tmpfs\x00', 0x0, &(0x7f0000000300)='usrquota') lchown(&(0x7f00000000c0)='./file1\x00', 0xee01, 0x0) fchownat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0xee00, 0x0, 0x100) sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5) prlimit64(0x0, 0xe, &(0x7f0000000100)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000000)=0x3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) r5 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$vim2m_VIDIOC_S_FMT(r5, 0xc0d05640, &(0x7f0000000440)={0x1, @pix_mp={0x10001, 0x0, 0x47425247}}) connect$inet6(r4, &(0x7f0000000340)={0xa, 0x5, 0x0, @ipv4={'\x00', '\xff\xff', @remote}, 0xfffffffe}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r4, 0x6, 0x1f, &(0x7f00000000c0), 0x4) setsockopt$inet6_tcp_TLS_TX(r4, 0x11a, 0x1, 0x0, 0x0) 2.312971675s ago: executing program 6 (id=903): prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x6) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x0, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000380)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket$inet6_udp(0xa, 0x2, 0x0) r4 = socket(0x2, 0x2, 0x1) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x12, 0x4, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000071180a000000000095"], &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_sock_addr=0xb, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r6 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./cgroup\x00', 0x40000, 0x6) bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000100)={r5, r6, 0xb, 0x0, @val=@netfilter={0x0, 0x1, 0x100, 0x1}}, 0x20) connect$inet(r4, &(0x7f0000000080)={0x2, 0x4e24, @rand_addr=0x64010102}, 0x10) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), r7) ioctl$sock_SIOCGIFINDEX_80211(r7, 0x8933, &(0x7f00000001c0)={'wlan1\x00', 0x0}) r11 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r11, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000880)=@newlink={0x38, 0x10, 0x439, 0x70bd2c, 0xffffffea, {0x0, 0x0, 0xe403, 0x0, 0x3, 0x610c3}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @sit={{0x8}, {0xc, 0x2, 0x0, 0x1, [@IFLA_IPTUN_ENCAP_DPORT={0x6, 0x12, 0x4e23}]}}}]}, 0x38}, 0x1, 0x0, 0x0, 0x8000}, 0x4008040) sendmsg$NL80211_CMD_GET_STATION(r8, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000980)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r9, @ANYBLOB="11072dbd7000fedbdf25110000000800030075bd091eaaba5ad2ef43fa5d3776d96be9801b12612c294728825cbdb192706280bdf4b548ccb1a319151af4a2cafd0084cb936182a3fb87069f9d10f0b50560de2ddc991792d8b3bf3eb02fcb9fa0c8227959000000f0f6be34bbb9a186a62ae24f18336d3ad37efaed723dc03f26ba0ef154c1928b15c6712c158100000000000800c4f0cd8a4636ac", @ANYRES32=r10, @ANYBLOB], 0x1c}}, 0x4040044) setsockopt$IP6T_SO_SET_REPLACE(r3, 0x29, 0x40, &(0x7f00000004c0)=@raw={'raw\x00', 0x3c1, 0x3, 0x458, 0x0, 0x2b8, 0xb0000010, 0x2, 0x5c8f0200, 0x388, 0x3a8, 0x3a8, 0x388, 0x3a8, 0x3, 0x0, {[{{@ipv6={@private1, @local, [], [], 'vlan1\x00', 'veth0_to_team\x00'}, 0x0, 0x248, 0x290, 0x700, {}, [@common=@inet=@hashlimit3={{0x158}, {'geneve1\x00', {0xf1, 0x0, 0x33, 0x0, 0x0, 0x1, 0x7fffffff}}}, @common=@unspec=@limit={{0x48}, {0x0, 0x3}}]}, @common=@unspec=@IDLETIMER={0x48, 'IDLETIMER\x00', 0x0, {0x206, 'syz1\x00'}}}, {{@uncond, 0x0, 0xd0, 0xf8, 0x0, {}, [@inet=@rpfilter={{0x28}}]}, @common=@unspec=@CONNSECMARK={0x28}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x4b8) 1.843150323s ago: executing program 3 (id=904): prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x200000087}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x0, 0x0) ptrace$ARCH_SET_CPUID(0x1e, r0, 0x1, 0x1012) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e24}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) openat$dir(0xffffffffffffff9c, 0x0, 0x8880, 0x4d) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f0000000a80)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x4, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x3}, 0x94) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x1ff) bpf$MAP_CREATE(0x0, 0x0, 0x0) socketpair(0xa, 0x3, 0x87, &(0x7f0000000040)) r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r4 = openat$cgroup_ro(r3, &(0x7f0000000040)='cgroup.freeze\x00', 0x275a, 0x0) write$cgroup_int(r4, &(0x7f0000000200)=0x1, 0x12) mkdirat$cgroup(r3, &(0x7f00000000c0)='syz1\x00', 0x1ff) write$cgroup_pid(r4, &(0x7f0000000080), 0x12) write$cgroup_int(r4, 0x0, 0x0) openat(0xffffffffffffff9c, 0x0, 0x105042, 0x0) 1.175257572s ago: executing program 5 (id=905): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)=0x0) r1 = open(&(0x7f0000000180)='.\x00', 0x0, 0x0) flock(r1, 0x2) r2 = open(&(0x7f0000000300)='.\x00', 0x102000, 0x0) flock(r2, 0x1) r3 = socket(0x840000000002, 0x3, 0x100) r4 = socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000100)) sendmsg$nl_route_sched(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000080)=@newqdisc={0x24, 0x24, 0xd0f, 0x70bd2d, 0x0, {0x60, 0x0, 0x0, 0x0, {0x0, 0xa}, {0xffff, 0xffff}, {0x0, 0xffff}}}, 0x24}}, 0x44080) sendmmsg$inet(r3, &(0x7f0000010580)=[{{&(0x7f00000000c0)={0x2, 0x4e24, @multicast1}, 0x10, 0x0, 0x0, &(0x7f0000010540)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @local, @broadcast}}}], 0x20}}], 0x1, 0x20000) sendmsg$NL80211_CMD_GET_WIPHY(r3, &(0x7f0000000580)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000540)={&(0x7f0000000240)={0x28, 0x0, 0x2, 0x70bd25, 0x25dfdbfe, {{}, {@val={0x8, 0x1, 0x3e}, @void, @val={0xc, 0x99, {0x5, 0x38}}}}, ["", "", "", "", "", ""]}, 0x28}, 0x1, 0x0, 0x0, 0x20040048}, 0x4800) r5 = open(&(0x7f0000000180)='.\x00', 0x0, 0x0) flock(r5, 0x2) fcntl$lock(0xffffffffffffffff, 0x6, &(0x7f0000000040)={0x0, 0x0, 0x60d3, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r0, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) 72.368345ms ago: executing program 3 (id=906): socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) ioctl$FS_IOC_RESVSP(0xffffffffffffffff, 0x402c5828, 0x0) openat$sndseq(0xffffffffffffff9c, 0x0, 0xe0c81) read$FUSE(0xffffffffffffffff, 0x0, 0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x800, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000240), 0x2, 0x40102) ioctl$IOCTL_VMCI_CTX_ADD_NOTIFICATION(0xffffffffffffffff, 0x7af, 0x0) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2f) r1 = socket(0x28, 0x5, 0x0) bind$vsock_stream(r1, &(0x7f0000000040), 0x10) listen(r1, 0x0) r2 = socket(0x28, 0x5, 0x0) connect$vsock_stream(r2, &(0x7f0000000080), 0x10) socket$xdp(0x2c, 0x3, 0x0) r3 = syz_open_dev$video(&(0x7f0000000440), 0x3ff, 0x0) ioctl$VIDIOC_STREAMOFF(r3, 0x40045613, &(0x7f0000000200)=0x1) 0s ago: executing program 4 (id=760): socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) ioctl$FS_IOC_RESVSP(0xffffffffffffffff, 0x402c5828, 0x0) openat$sndseq(0xffffffffffffff9c, 0x0, 0xe0c81) read$FUSE(0xffffffffffffffff, 0x0, 0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x800, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000240), 0x2, 0x40102) ioctl$IOCTL_VMCI_CTX_ADD_NOTIFICATION(0xffffffffffffffff, 0x7af, 0x0) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2f) r1 = socket(0x28, 0x5, 0x0) bind$vsock_stream(r1, &(0x7f0000000040), 0x10) listen(r1, 0x0) r2 = socket(0x28, 0x5, 0x0) connect$vsock_stream(r2, &(0x7f0000000080), 0x10) socket$xdp(0x2c, 0x3, 0x0) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x0, 0x3, 0xfffffffffffffffd}, 0x0, &(0x7f00000002c0)={0x3ff, 0xc, 0x0, 0x9, 0x0, 0x0, 0x7fffffff}, 0x0, 0x0) ioctl$VIDIOC_STREAMOFF(0xffffffffffffffff, 0x40045613, &(0x7f0000000200)=0x1) kernel console output (not intermixed with test programs): 755] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 59.142721][ T5755] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 60.544092][ T5771] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 60.554871][ T5776] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 60.563255][ T5776] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 60.572936][ T5776] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 60.581063][ T5776] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 60.589198][ T5776] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 60.594220][ T5778] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 60.607407][ T5776] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 60.617997][ T5776] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 60.625768][ T5776] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 60.632887][ T5778] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 60.638296][ T5779] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 60.640410][ T5778] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 60.648294][ T5779] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 60.654710][ T5776] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 60.669631][ T5778] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 60.677160][ T5776] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 60.695054][ T5781] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 60.703592][ T5771] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 60.714619][ T51] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 60.714946][ T5771] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 60.727253][ T51] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 60.730433][ T5771] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 60.745156][ T5771] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 61.148458][ T5770] chnl_net:caif_netlink_parms(): no params data found [ 61.243815][ T5767] chnl_net:caif_netlink_parms(): no params data found [ 61.276268][ T5769] chnl_net:caif_netlink_parms(): no params data found [ 61.320499][ T5768] chnl_net:caif_netlink_parms(): no params data found [ 61.341617][ T5770] bridge0: port 1(bridge_slave_0) entered blocking state [ 61.349094][ T5770] bridge0: port 1(bridge_slave_0) entered disabled state [ 61.356620][ T5770] bridge_slave_0: entered allmulticast mode [ 61.363671][ T5770] bridge_slave_0: entered promiscuous mode [ 61.400567][ T5770] bridge0: port 2(bridge_slave_1) entered blocking state [ 61.408537][ T5770] bridge0: port 2(bridge_slave_1) entered disabled state [ 61.415668][ T5770] bridge_slave_1: entered allmulticast mode [ 61.423267][ T5770] bridge_slave_1: entered promiscuous mode [ 61.478308][ T5770] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 61.500591][ T5770] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 61.522913][ T5767] bridge0: port 1(bridge_slave_0) entered blocking state [ 61.530416][ T5767] bridge0: port 1(bridge_slave_0) entered disabled state [ 61.538121][ T5767] bridge_slave_0: entered allmulticast mode [ 61.544770][ T5767] bridge_slave_0: entered promiscuous mode [ 61.552839][ T5767] bridge0: port 2(bridge_slave_1) entered blocking state [ 61.560111][ T5767] bridge0: port 2(bridge_slave_1) entered disabled state [ 61.567617][ T5767] bridge_slave_1: entered allmulticast mode [ 61.574303][ T5767] bridge_slave_1: entered promiscuous mode [ 61.645586][ T5769] bridge0: port 1(bridge_slave_0) entered blocking state [ 61.652904][ T5769] bridge0: port 1(bridge_slave_0) entered disabled state [ 61.660421][ T5769] bridge_slave_0: entered allmulticast mode [ 61.667837][ T5769] bridge_slave_0: entered promiscuous mode [ 61.684384][ T5770] team0: Port device team_slave_0 added [ 61.693493][ T5770] team0: Port device team_slave_1 added [ 61.699628][ T5768] bridge0: port 1(bridge_slave_0) entered blocking state [ 61.706700][ T5768] bridge0: port 1(bridge_slave_0) entered disabled state [ 61.714143][ T5768] bridge_slave_0: entered allmulticast mode [ 61.721413][ T5768] bridge_slave_0: entered promiscuous mode [ 61.729201][ T5769] bridge0: port 2(bridge_slave_1) entered blocking state [ 61.736322][ T5769] bridge0: port 2(bridge_slave_1) entered disabled state [ 61.746374][ T5769] bridge_slave_1: entered allmulticast mode [ 61.753374][ T5769] bridge_slave_1: entered promiscuous mode [ 61.772425][ T5767] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 61.791282][ T5768] bridge0: port 2(bridge_slave_1) entered blocking state [ 61.798449][ T5768] bridge0: port 2(bridge_slave_1) entered disabled state [ 61.805894][ T5768] bridge_slave_1: entered allmulticast mode [ 61.812788][ T5768] bridge_slave_1: entered promiscuous mode [ 61.838388][ T5767] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 61.875731][ T5769] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 61.895073][ T5770] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 61.902275][ T5770] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 61.928592][ T5770] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 61.941770][ T5770] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 61.948839][ T5770] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 61.974830][ T5770] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 61.988277][ T5768] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 62.001834][ T5769] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 62.013809][ T5767] team0: Port device team_slave_0 added [ 62.024350][ T5767] team0: Port device team_slave_1 added [ 62.046321][ T5768] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 62.073709][ T5769] team0: Port device team_slave_0 added [ 62.104992][ T5767] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 62.112147][ T5767] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 62.140749][ T5767] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 62.153129][ T5767] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 62.160347][ T5767] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 62.186681][ T5767] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 62.199729][ T5769] team0: Port device team_slave_1 added [ 62.261107][ T5768] team0: Port device team_slave_0 added [ 62.270592][ T5768] team0: Port device team_slave_1 added [ 62.280829][ T5770] hsr_slave_0: entered promiscuous mode [ 62.288069][ T5770] hsr_slave_1: entered promiscuous mode [ 62.312126][ T5769] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 62.323996][ T5769] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 62.350488][ T5769] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 62.385624][ T5767] hsr_slave_0: entered promiscuous mode [ 62.391903][ T5767] hsr_slave_1: entered promiscuous mode [ 62.398183][ T5767] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 62.405884][ T5767] Cannot create hsr debugfs directory [ 62.412823][ T5769] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 62.420206][ T5769] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 62.446808][ T5769] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 62.467977][ T5768] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 62.474946][ T5768] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 62.501132][ T5768] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 62.561398][ T5768] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 62.569127][ T5768] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 62.597676][ T5768] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 62.674049][ T5769] hsr_slave_0: entered promiscuous mode [ 62.680723][ T5769] hsr_slave_1: entered promiscuous mode [ 62.687848][ T5769] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 62.695424][ T5769] Cannot create hsr debugfs directory [ 62.718037][ T5771] Bluetooth: hci1: command tx timeout [ 62.731357][ T5768] hsr_slave_0: entered promiscuous mode [ 62.738106][ T5768] hsr_slave_1: entered promiscuous mode [ 62.744389][ T5768] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 62.752314][ T5768] Cannot create hsr debugfs directory [ 62.797100][ T5771] Bluetooth: hci2: command tx timeout [ 62.797247][ T5083] Bluetooth: hci0: command tx timeout [ 62.802770][ T5771] Bluetooth: hci3: command tx timeout [ 63.049414][ T5767] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 63.072347][ T5767] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 63.082462][ T5767] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 63.092671][ T5767] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 63.179531][ T5770] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 63.189223][ T5770] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 63.208055][ T5770] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 63.220570][ T5770] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 63.288559][ T5769] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 63.302215][ T5769] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 63.311666][ T5769] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 63.321406][ T5769] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 63.414183][ T5768] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 63.423364][ T5768] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 63.436698][ T5768] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 63.457324][ T5768] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 63.545233][ T5767] 8021q: adding VLAN 0 to HW filter on device bond0 [ 63.585197][ T5767] 8021q: adding VLAN 0 to HW filter on device team0 [ 63.624496][ T5769] 8021q: adding VLAN 0 to HW filter on device bond0 [ 63.645332][ T5769] 8021q: adding VLAN 0 to HW filter on device team0 [ 63.664654][ T5770] 8021q: adding VLAN 0 to HW filter on device bond0 [ 63.675613][ T59] bridge0: port 1(bridge_slave_0) entered blocking state [ 63.682873][ T59] bridge0: port 1(bridge_slave_0) entered forwarding state [ 63.693519][ T59] bridge0: port 1(bridge_slave_0) entered blocking state [ 63.700653][ T59] bridge0: port 1(bridge_slave_0) entered forwarding state [ 63.725057][ T59] bridge0: port 2(bridge_slave_1) entered blocking state [ 63.732285][ T59] bridge0: port 2(bridge_slave_1) entered forwarding state [ 63.756287][ T59] bridge0: port 2(bridge_slave_1) entered blocking state [ 63.763422][ T59] bridge0: port 2(bridge_slave_1) entered forwarding state [ 63.795606][ T5768] 8021q: adding VLAN 0 to HW filter on device bond0 [ 63.820243][ T5770] 8021q: adding VLAN 0 to HW filter on device team0 [ 63.859180][ T145] bridge0: port 1(bridge_slave_0) entered blocking state [ 63.866262][ T145] bridge0: port 1(bridge_slave_0) entered forwarding state [ 63.875743][ T145] bridge0: port 2(bridge_slave_1) entered blocking state [ 63.882861][ T145] bridge0: port 2(bridge_slave_1) entered forwarding state [ 63.899160][ T5768] 8021q: adding VLAN 0 to HW filter on device team0 [ 63.949575][ T1148] bridge0: port 1(bridge_slave_0) entered blocking state [ 63.956740][ T1148] bridge0: port 1(bridge_slave_0) entered forwarding state [ 64.001512][ T41] bridge0: port 2(bridge_slave_1) entered blocking state [ 64.008716][ T41] bridge0: port 2(bridge_slave_1) entered forwarding state [ 64.094998][ T5770] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 64.362552][ T5767] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 64.439619][ T5769] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 64.473518][ T5767] veth0_vlan: entered promiscuous mode [ 64.504321][ T5767] veth1_vlan: entered promiscuous mode [ 64.569053][ T5769] veth0_vlan: entered promiscuous mode [ 64.603480][ T5769] veth1_vlan: entered promiscuous mode [ 64.632393][ T5770] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 64.648765][ T5767] veth0_macvtap: entered promiscuous mode [ 64.664527][ T5768] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 64.675269][ T5767] veth1_macvtap: entered promiscuous mode [ 64.711432][ T5769] veth0_macvtap: entered promiscuous mode [ 64.735173][ T5769] veth1_macvtap: entered promiscuous mode [ 64.753991][ T5767] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 64.773563][ T5767] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 64.794055][ T5767] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 64.805403][ T5771] Bluetooth: hci1: command tx timeout [ 64.810991][ T5767] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 64.819992][ T5767] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 64.828849][ T5767] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 64.855950][ T5769] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 64.870367][ T5769] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 64.880459][ T5771] Bluetooth: hci0: command tx timeout [ 64.880497][ T5771] Bluetooth: hci2: command tx timeout [ 64.887654][ T5083] Bluetooth: hci3: command tx timeout [ 64.897724][ T5769] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 64.911555][ T5770] veth0_vlan: entered promiscuous mode [ 64.940056][ T5768] veth0_vlan: entered promiscuous mode [ 64.959374][ T5769] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 64.971556][ T5769] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 64.983494][ T5769] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 64.996883][ T5769] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 65.006050][ T5769] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 65.014832][ T5769] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 65.023586][ T5769] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 65.055039][ T5770] veth1_vlan: entered promiscuous mode [ 65.075656][ T5768] veth1_vlan: entered promiscuous mode [ 65.162975][ T145] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 65.171824][ T145] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 65.185608][ T5768] veth0_macvtap: entered promiscuous mode [ 65.211821][ T5768] veth1_macvtap: entered promiscuous mode [ 65.220490][ T5770] veth0_macvtap: entered promiscuous mode [ 65.245625][ T5770] veth1_macvtap: entered promiscuous mode [ 65.264185][ T11] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 65.295963][ T11] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 65.305671][ T1148] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 65.316735][ T5768] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 65.328191][ T1148] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 65.336267][ T5768] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 65.346248][ T5768] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 65.356735][ T5768] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 65.370895][ T5768] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 65.386294][ T5770] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 65.400632][ T5770] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 65.411821][ T5770] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 65.422370][ T5770] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 65.432441][ T5770] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 65.448593][ T5770] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 65.459954][ T5770] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 65.473285][ T5770] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 65.483843][ T5770] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 65.494611][ T5770] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 65.505183][ T5770] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 65.516029][ T5770] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 65.525894][ T5768] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 65.542895][ T5768] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 65.552872][ T5768] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 65.563474][ T5768] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 65.574369][ T5768] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 65.585259][ T5768] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 65.596678][ T5768] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 65.629084][ T5770] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 65.638874][ T5770] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 65.648033][ T5770] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 65.656758][ T5770] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 65.674435][ T5768] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 65.687085][ T5768] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 65.695823][ T5768] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 65.704838][ T5768] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 65.803250][ T11] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 65.821143][ T11] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 66.019849][ T1112] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 66.027991][ T1112] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 66.136386][ T5855] syz.1.2[5855]: memfd_create() called without MFD_EXEC or MFD_NOEXEC_SEAL set [ 66.172775][ T5855] loop1: detected capacity change from 0 to 164 [ 66.214959][ T5855] ISOFS: unable to read i-node block [ 66.221374][ T5855] ISOFS: root inode is unusable. Disabling Rock Ridge and switching to Joliet. [ 66.839969][ T1112] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 66.857404][ T1112] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 66.888026][ T5083] Bluetooth: hci1: command tx timeout [ 66.969440][ T5083] Bluetooth: hci3: command tx timeout [ 66.974899][ T5083] Bluetooth: hci2: command tx timeout [ 66.982006][ T5771] Bluetooth: hci0: command tx timeout [ 67.546281][ T5861] netlink: 'syz.2.3': attribute type 33 has an invalid length. [ 67.554301][ T5861] netlink: 51 bytes leftover after parsing attributes in process `syz.2.3'. [ 67.570422][ T145] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 67.582786][ T145] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 67.591483][ T5860] netlink: 76 bytes leftover after parsing attributes in process `syz.1.5'. [ 67.620202][ T59] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 67.688953][ T59] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 68.158276][ T5854] usb 3-1: new full-speed USB device number 2 using dummy_hcd [ 68.578211][ T5854] usb 3-1: device descriptor read/64, error -71 [ 68.979213][ T5876] loop0: detected capacity change from 0 to 512 [ 68.992597][ T5876] ext4: Unknown parameter 'seclabel' [ 69.031605][ T5775] Bluetooth: hci1: command tx timeout [ 69.049213][ T5775] Bluetooth: hci2: command tx timeout [ 69.055078][ T5775] Bluetooth: hci0: command tx timeout [ 69.061618][ T5083] Bluetooth: hci3: command tx timeout [ 69.089289][ T5854] usb 3-1: new full-speed USB device number 3 using dummy_hcd [ 69.387166][ T5854] usb 3-1: device descriptor read/64, error -71 [ 69.688183][ T5854] usb usb3-port1: attempt power cycle [ 70.462237][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 70.537066][ T5854] usb 3-1: new full-speed USB device number 4 using dummy_hcd [ 70.627703][ T5854] usb 3-1: device descriptor read/8, error -71 [ 70.787642][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 70.797989][ T0] NOHZ tick-stop error: local softirq work is pending, handler #08!!! [ 71.171926][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 71.221551][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 71.297266][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 71.306315][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 71.315568][ T0] NOHZ tick-stop error: local softirq work is pending, handler #01!!! [ 71.727785][ T1283] ieee802154 phy0 wpan0: encryption failed: -22 [ 71.735120][ T1283] ieee802154 phy1 wpan1: encryption failed: -22 [ 72.158258][ T0] NOHZ tick-stop error: local softirq work is pending, handler #08!!! [ 72.816421][ T5917] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 73.352253][ T0] NOHZ tick-stop error: local softirq work is pending, handler #140!!! [ 75.233255][ T5933] Zero length message leads to an empty skb [ 77.707740][ T5944] (null): rxe_set_mtu: Set mtu to 1024 [ 77.864021][ T5944] infiniband syz2: set active [ 77.869021][ T5944] infiniband syz2: added veth1_to_team [ 77.967396][ T5944] RDS/IB: syz2: added [ 77.972258][ T5944] smc: adding ib device syz2 with port count 1 [ 77.978747][ T5944] smc: ib device syz2 port 1 has pnetid [ 78.745078][ T5949] warning: `syz.0.22' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 81.485445][ T5965] netlink: 12 bytes leftover after parsing attributes in process `syz.1.25'. [ 81.645448][ T5965] netdevsim netdevsim1 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 81.654592][ T5965] netdevsim netdevsim1 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 81.663404][ T5965] netdevsim netdevsim1 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 81.672797][ T5965] netdevsim netdevsim1 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 81.683543][ T5965] netlink: 12 bytes leftover after parsing attributes in process `syz.1.25'. [ 81.845961][ T23] cfg80211: failed to load regulatory.db [ 83.199931][ T5965] netlink: 4 bytes leftover after parsing attributes in process `syz.1.25'. [ 83.229956][ T5965] netlink: 4 bytes leftover after parsing attributes in process `syz.1.25'. [ 83.563486][ T5976] overlayfs: failed to get inode (-116) [ 83.569663][ T5976] overlayfs: failed to get inode (-116) [ 83.717571][ T5978] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 86.335208][ T5988] Illegal XDP return value 4294967294 on prog (id 10) dev syz_tun, expect packet loss! [ 86.636772][ T23] usb 1-1: new full-speed USB device number 2 using dummy_hcd [ 87.447140][ T23] usb 1-1: device descriptor read/64, error -71 [ 93.871889][ T6049] loop0: detected capacity change from 0 to 2048 [ 94.796914][ C0] sched: RT throttling activated [ 95.524452][ T6058] netlink: 168 bytes leftover after parsing attributes in process `syz.3.47'. [ 95.995681][ T6060] netlink: 4 bytes leftover after parsing attributes in process `syz.0.48'. [ 97.229698][ T9] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 97.341149][ T6076] loop2: detected capacity change from 0 to 1024 [ 97.420556][ T8] usb 1-1: new high-speed USB device number 4 using dummy_hcd [ 98.159616][ T9] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 254, changing to 11 [ 98.210640][ T9] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 98.243762][ T9] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 5 [ 98.288187][ T9] usb 4-1: New USB device found, idVendor=1038, idProduct=1410, bcdDevice= 0.00 [ 98.326662][ T9] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 98.366001][ T9] usb 4-1: config 0 descriptor?? [ 100.273215][ T5775] Bluetooth: hci0: command tx timeout [ 100.670260][ T6094] netlink: 'syz.1.55': attribute type 1 has an invalid length. [ 102.123184][ T6094] 8021q: adding VLAN 0 to HW filter on device bond1 [ 102.179419][ T9] usbhid 4-1:0.0: can't add hid device: -71 [ 102.284803][ T9] usbhid: probe of 4-1:0.0 failed with error -71 [ 102.358805][ T9] usb 4-1: USB disconnect, device number 2 [ 102.380505][ T6094] vlan2: entered allmulticast mode [ 102.385694][ T6094] veth0_to_bond: entered allmulticast mode [ 102.457345][ T6111] netlink: 4 bytes leftover after parsing attributes in process `syz.3.58'. [ 102.837649][ T5769] hfsplus: node 4:3 still has 1 user(s)! [ 102.950222][ T6115] (null): rxe_set_mtu: Set mtu to 1024 [ 102.960549][ T6115] rdma_rxe: rxe_newlink: failed to add wg2 [ 104.823649][ T6119] kvm_intel: L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 104.910763][ T6126] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 105.022115][ T9] usb 2-1: new full-speed USB device number 2 using dummy_hcd [ 105.327325][ T9] usb 2-1: device descriptor read/64, error -71 [ 105.340900][ T6126] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 105.617711][ T9] usb 2-1: new full-speed USB device number 3 using dummy_hcd [ 106.783306][ T27] audit: type=1326 audit(1769835974.659:2): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6131 comm="syz.0.57" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7feec939aeb9 code=0x7ffc0000 [ 106.817385][ T27] audit: type=1326 audit(1769835974.659:3): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6131 comm="syz.0.57" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7feec939aeb9 code=0x7ffc0000 [ 106.855223][ T27] audit: type=1326 audit(1769835974.839:4): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6131 comm="syz.0.57" exe="/root/syz-executor" sig=0 arch=c000003e syscall=228 compat=0 ip=0x7feec939aeb9 code=0x7ffc0000 [ 106.892756][ T6126] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 106.911006][ T27] audit: type=1326 audit(1769835974.839:5): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6131 comm="syz.0.57" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7feec939aeb9 code=0x7ffc0000 [ 107.059292][ T27] audit: type=1326 audit(1769835974.839:6): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6131 comm="syz.0.57" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7feec939aeb9 code=0x7ffc0000 [ 107.086204][ T27] audit: type=1326 audit(1769835975.049:7): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6131 comm="syz.0.57" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7feec939aeb9 code=0x7ffc0000 [ 107.283218][ T6146] loop1: detected capacity change from 0 to 256 [ 107.367505][ T6145] netlink: 64 bytes leftover after parsing attributes in process `syz.1.64'. [ 107.610364][ T6146] exFAT-fs (loop1): failed to load upcase table (idx : 0x000104d0, chksum : 0x60d18cac, utbl_chksum : 0xe619d30d) [ 107.808681][ T27] audit: type=1326 audit(1769835975.049:8): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6131 comm="syz.0.57" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7feec939aeb9 code=0x7ffc0000 [ 107.950816][ T27] audit: type=1326 audit(1769835975.049:9): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6131 comm="syz.0.57" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7feec939aeb9 code=0x7ffc0000 [ 107.982542][ T27] audit: type=1326 audit(1769835975.169:10): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6131 comm="syz.0.57" exe="/root/syz-executor" sig=0 arch=c000003e syscall=258 compat=0 ip=0x7feec939aeb9 code=0x7ffc0000 [ 108.477254][ T6148] sg_write: data in/out 477/14 bytes for SCSI command 0x0-- guessing data in; [ 108.477254][ T6148] program syz.2.65 not setting count and/or reply_len properly [ 109.286020][ T27] audit: type=1326 audit(1769835975.169:11): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6131 comm="syz.0.57" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7feec939aeb9 code=0x7ffc0000 [ 109.299118][ T6126] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 109.328421][ T6152] netlink: 4 bytes leftover after parsing attributes in process `syz.0.67'. [ 111.062111][ T6160] netlink: 'syz.1.69': attribute type 1 has an invalid length. [ 111.119608][ T6160] 8021q: adding VLAN 0 to HW filter on device bond2 [ 111.394157][ T6126] netdevsim netdevsim3 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 112.127529][ T6126] netdevsim netdevsim3 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 112.143043][ T6126] netdevsim netdevsim3 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 112.173606][ T6126] netdevsim netdevsim3 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 115.462711][ T6182] loop2: detected capacity change from 0 to 512 [ 115.497684][ T6182] EXT4-fs (loop2): mounting ext3 file system using the ext4 subsystem [ 115.512707][ T6182] EXT4-fs (loop2): invalid journal inode [ 115.532312][ T6182] EXT4-fs (loop2): can't get journal size [ 118.650819][ T6182] workqueue: Failed to create a rescuer kthread for wq "ext4-rsv-conversion": -EINTR [ 118.658420][ T6182] EXT4-fs: failed to create workqueue [ 118.727108][ T6182] EXT4-fs (loop2): mount failed [ 118.951580][ T6196] netlink: 4 bytes leftover after parsing attributes in process `syz.3.77'. [ 118.965275][ T6196] netlink: 28 bytes leftover after parsing attributes in process `syz.3.77'. [ 119.966225][ T6203] netlink: 4 bytes leftover after parsing attributes in process `syz.0.78'. [ 120.445242][ T6209] netlink: 36 bytes leftover after parsing attributes in process `syz.2.80'. [ 122.988247][ T6221] mmap: syz.0.85 (6221) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 123.240797][ T6224] loop1: detected capacity change from 0 to 1024 [ 124.361348][ T6231] loop2: detected capacity change from 0 to 764 [ 127.996456][ T6238] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 128.061800][ T6238] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 128.224569][ T6243] netlink: 4 bytes leftover after parsing attributes in process `syz.3.92'. [ 128.991993][ T6247] loop6: detected capacity change from 0 to 7 [ 129.075402][ T6238] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 129.137863][ T6247] Dev loop6: unable to read RDB block 7 [ 129.143839][ T6247] loop6: unable to read partition table [ 129.151238][ T6247] loop6: partition table beyond EOD, truncated [ 129.158248][ T6247] loop_reread_partitions: partition scan of loop6 (Sj̖P=ý?}X %`ր5) failed (rc=-5) [ 129.449862][ T6249] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 129.784004][ T6261] loop0: detected capacity change from 0 to 128 [ 130.675848][ T6271] loop2: detected capacity change from 0 to 764 [ 131.691876][ T6273] orangefs_mount: mount request failed with -4 [ 131.771474][ T6279] loop1: detected capacity change from 0 to 512 [ 131.901500][ T6279] ext4: Unknown parameter 'noacl' [ 133.096812][ T1283] ieee802154 phy0 wpan0: encryption failed: -22 [ 133.105287][ T1283] ieee802154 phy1 wpan1: encryption failed: -22 [ 134.804982][ T6302] netlink: 4 bytes leftover after parsing attributes in process `syz.1.103'. [ 135.254286][ T6311] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 135.515175][ T6317] (null): rxe_set_mtu: Set mtu to 1024 [ 135.523202][ T6317] rdma_rxe: rxe_newlink: failed to add wg2 [ 137.550220][ T6311] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 137.742790][ T6323] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 137.818648][ T6311] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 138.148446][ T6331] ufs: You didn't specify the type of your ufs filesystem [ 138.148446][ T6331] [ 138.148446][ T6331] mount -t ufs -o ufstype=sun|sunx86|44bsd|ufs2|5xbsd|old|hp|nextstep|nextstep-cd|openstep ... [ 138.148446][ T6331] [ 138.148446][ T6331] >>>WARNING<<< Wrong ufstype may corrupt your filesystem, default is ufstype=old [ 138.180570][ T6331] ufs: ufstype=old is supported read-only [ 138.244440][ T6331] syz.0.111: attempt to access beyond end of device [ 138.244440][ T6331] loop1: rw=0, sector=16, nr_sectors = 2 limit=0 [ 138.813992][ T6332] loop3: detected capacity change from 0 to 16 [ 138.881374][ T6332] erofs: (device loop3): mounted with root inode @ nid 36. [ 139.682877][ T6337] loop3: detected capacity change from 0 to 128 [ 139.993613][ T6342] (null): rxe_set_mtu: Set mtu to 1024 [ 140.002034][ T6342] rdma_rxe: rxe_newlink: failed to add wg2 [ 141.878344][ T6349] syz.2.116 (6349) used greatest stack depth: 20656 bytes left [ 142.527346][ T6352] loop3: detected capacity change from 0 to 1024 [ 142.534642][ T6352] ======================================================= [ 142.534642][ T6352] WARNING: The mand mount option has been deprecated and [ 142.534642][ T6352] and is ignored by this kernel. Remove the mand [ 142.534642][ T6352] option from the mount to silence this warning. [ 142.534642][ T6352] ======================================================= [ 142.570509][ T6352] EXT4-fs: inline encryption not supported [ 142.576452][ T6352] EXT4-fs: Ignoring removed nobh option [ 142.582127][ T6352] EXT4-fs: Ignoring removed bh option [ 142.602205][ T6352] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 142.688713][ T6352] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 143.801587][ T5770] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 145.607013][ T9] usb 2-1: new high-speed USB device number 4 using dummy_hcd [ 145.949764][ T9] usb 2-1: New USB device found, idVendor=133e, idProduct=0815, bcdDevice=7e.66 [ 146.104200][ T9] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 146.224848][ T9] usb 2-1: Product: syz [ 146.301898][ T9] usb 2-1: Manufacturer: syz [ 146.392895][ T9] usb 2-1: SerialNumber: syz [ 147.788012][ T9] usb 2-1: config 0 descriptor?? [ 147.825735][ T9] snd-usb-audio: probe of 2-1:0.0 failed with error -22 [ 147.925327][ T6382] netlink: 4 bytes leftover after parsing attributes in process `syz.2.120'. [ 147.969365][ T9] usb 2-1: USB disconnect, device number 4 [ 148.409694][ T6390] (null): rxe_set_mtu: Set mtu to 1024 [ 148.415484][ T6390] rdma_rxe: rxe_newlink: failed to add wg2 [ 153.992582][ T6400] loop0: detected capacity change from 0 to 256 [ 154.030108][ T6400] exFAT-fs (loop0): failed to load upcase table (idx : 0x00010000, chksum : 0xb89b369d, utbl_chksum : 0xe619d30d) [ 155.563204][ T6423] netlink: 4 bytes leftover after parsing attributes in process `syz.2.135'. [ 155.851361][ T6429] (null): rxe_set_mtu: Set mtu to 1024 [ 155.857297][ T6429] rdma_rxe: rxe_newlink: failed to add wg2 [ 159.480864][ T27] kauditd_printk_skb: 1 callbacks suppressed [ 159.480878][ T27] audit: type=1326 audit(1769836028.109:13): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6445 comm="syz.3.142" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc48599aeb9 code=0x7ffc0000 [ 159.746967][ T27] audit: type=1326 audit(1769836028.109:14): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6445 comm="syz.3.142" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc48599aeb9 code=0x7ffc0000 [ 160.584482][ T27] audit: type=1326 audit(1769836028.109:15): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6445 comm="syz.3.142" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fc48599aeb9 code=0x7ffc0000 [ 160.631158][ T27] audit: type=1326 audit(1769836028.119:16): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6445 comm="syz.3.142" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc48599aeb9 code=0x7ffc0000 [ 160.861943][ T27] audit: type=1326 audit(1769836028.119:17): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6445 comm="syz.3.142" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fc48599aeb9 code=0x7ffc0000 [ 161.087770][ T27] audit: type=1326 audit(1769836028.119:18): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6445 comm="syz.3.142" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc48599aeb9 code=0x7ffc0000 [ 161.111235][ T27] audit: type=1326 audit(1769836028.119:19): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6445 comm="syz.3.142" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc48599aeb9 code=0x7ffc0000 [ 161.573311][ T27] audit: type=1326 audit(1769836028.119:20): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6445 comm="syz.3.142" exe="/root/syz-executor" sig=0 arch=c000003e syscall=179 compat=0 ip=0x7fc48599aeb9 code=0x7ffc0000 [ 161.714353][ T27] audit: type=1326 audit(1769836028.119:21): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6445 comm="syz.3.142" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc48599aeb9 code=0x7ffc0000 [ 163.027309][ T27] audit: type=1326 audit(1769836028.119:22): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6445 comm="syz.3.142" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc48599aeb9 code=0x7ffc0000 [ 164.931023][ T6489] ip6t_srh: unknown srh invflags 7F00 [ 169.901012][ T6516] (null): rxe_set_mtu: Set mtu to 1024 [ 169.906981][ T6516] rdma_rxe: rxe_newlink: failed to add wg2 [ 171.554663][ T6529] (null): rxe_set_mtu: Set mtu to 1024 [ 171.560647][ T6529] rdma_rxe: rxe_newlink: failed to add wg2 [ 172.610176][ T6538] netlink: 'syz.3.154': attribute type 1 has an invalid length. [ 172.623736][ T6536] loop2: detected capacity change from 0 to 1024 [ 172.847769][ T6538] 8021q: adding VLAN 0 to HW filter on device bond1 [ 173.514670][ T6545] netlink: 4 bytes leftover after parsing attributes in process `syz.0.161'. [ 173.540507][ T6545] netlink: 28 bytes leftover after parsing attributes in process `syz.0.161'. [ 178.482974][ T6576] (null): rxe_set_mtu: Set mtu to 1024 [ 178.490609][ T6576] rdma_rxe: rxe_newlink: failed to add wg2 [ 182.127906][ T6594] netlink: 4 bytes leftover after parsing attributes in process `syz.1.173'. [ 182.150590][ T6594] netlink: 28 bytes leftover after parsing attributes in process `syz.1.173'. [ 182.303538][ T6598] netlink: 'syz.0.176': attribute type 1 has an invalid length. [ 182.334517][ T6598] 8021q: adding VLAN 0 to HW filter on device bond1 [ 182.403284][ T6600] ceph: No source [ 182.411260][ T6600] kAFS: unable to lookup cell '\/' [ 185.316034][ T6613] (null): rxe_set_mtu: Set mtu to 1024 [ 185.321995][ T6613] rdma_rxe: rxe_newlink: failed to add wg2 [ 187.811922][ T5775] Bluetooth: hci3: command 0x0406 tx timeout [ 187.819794][ T5775] Bluetooth: hci0: command 0x0406 tx timeout [ 187.825798][ T5775] Bluetooth: hci2: command 0x0406 tx timeout [ 190.358090][ T6639] netlink: 4 bytes leftover after parsing attributes in process `syz.1.186'. [ 191.921439][ T6647] netlink: 28 bytes leftover after parsing attributes in process `syz.1.186'. [ 194.361521][ T6647] syz.1.186 (6647) used greatest stack depth: 20424 bytes left [ 194.515550][ T1283] ieee802154 phy0 wpan0: encryption failed: -22 [ 194.696951][ T1283] ieee802154 phy1 wpan1: encryption failed: -22 [ 199.752323][ T6677] loop2: detected capacity change from 0 to 512 [ 199.765094][ T6677] EXT4-fs: Ignoring removed oldalloc option [ 200.360756][ T6677] EXT4-fs (loop2): can't mount with data_err=abort, fs mounted w/o journal [ 200.528099][ T6680] netlink: 'syz.3.190': attribute type 1 has an invalid length. [ 200.700202][ T6680] 8021q: adding VLAN 0 to HW filter on device bond2 [ 201.134810][ T27] kauditd_printk_skb: 51 callbacks suppressed [ 201.134824][ T27] audit: type=1326 audit(1769836069.769:74): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6683 comm="syz.1.197" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f41d819aeb9 code=0x7ffc0000 [ 201.207321][ T27] audit: type=1326 audit(1769836069.769:75): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6683 comm="syz.1.197" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f41d819aeb9 code=0x7ffc0000 [ 201.231074][ T27] audit: type=1326 audit(1769836069.769:76): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6683 comm="syz.1.197" exe="/root/syz-executor" sig=0 arch=c000003e syscall=448 compat=0 ip=0x7f41d819aeb9 code=0x7ffc0000 [ 201.278307][ T27] audit: type=1326 audit(1769836069.769:77): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6683 comm="syz.1.197" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f41d819aeb9 code=0x7ffc0000 [ 201.372696][ T27] audit: type=1326 audit(1769836069.799:78): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6683 comm="syz.1.197" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f41d819c747 code=0x7ffc0000 [ 201.565843][ T27] audit: type=1326 audit(1769836069.799:79): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6683 comm="syz.1.197" exe="/root/syz-executor" sig=0 arch=c000003e syscall=44 compat=0 ip=0x7f41d815b78e code=0x7ffc0000 [ 201.589286][ T27] audit: type=1326 audit(1769836069.799:80): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6683 comm="syz.1.197" exe="/root/syz-executor" sig=0 arch=c000003e syscall=45 compat=0 ip=0x7f41d815b78e code=0x7ffc0000 [ 201.715601][ T27] audit: type=1326 audit(1769836069.799:81): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6683 comm="syz.1.197" exe="/root/syz-executor" sig=0 arch=c000003e syscall=45 compat=0 ip=0x7f41d815b78e code=0x7ffc0000 [ 201.822150][ T27] audit: type=1326 audit(1769836069.799:82): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6683 comm="syz.1.197" exe="/root/syz-executor" sig=0 arch=c000003e syscall=3 compat=0 ip=0x7f41d815b78e code=0x7ffc0000 [ 202.418309][ T6692] xt_CT: You must specify a L4 protocol and not use inversions on it [ 203.092141][ T27] audit: type=1326 audit(1769836069.809:83): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6683 comm="syz.1.197" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f41d819aeb9 code=0x7ffc0000 [ 203.401188][ T6698] (null): rxe_set_mtu: Set mtu to 1024 [ 203.408140][ T6698] rdma_rxe: rxe_newlink: failed to add wg2 [ 203.565402][ T6702] netlink: 4 bytes leftover after parsing attributes in process `syz.0.204'. [ 203.755142][ T6705] netlink: 28 bytes leftover after parsing attributes in process `syz.0.204'. [ 204.161163][ T6716] netlink: 'syz.0.209': attribute type 1 has an invalid length. [ 204.406340][ T6721] loop2: detected capacity change from 0 to 16 [ 204.414728][ T6721] erofs: (device loop2): mounted with root inode @ nid 36. [ 204.426606][ T6721] erofs: (device loop2): z_erofs_do_map_blocks: invalid logical cluster 0 at nid 36 [ 204.436489][ T6721] syz.2.207: attempt to access beyond end of device [ 204.436489][ T6721] loop2: rw=0, sector=296, nr_sectors = 8 limit=16 [ 204.449853][ T6721] erofs: (device loop2): z_erofs_read_folio: read error -117 @ 0 of nid 36 [ 204.458593][ T6721] erofs: (device loop2): erofs_readdir: fail to readdir of logical block 0 of nid 36 [ 204.471076][ T6721] erofs: (device loop2): z_erofs_readahead: readahead error at folio 87 @ nid 36 [ 204.480594][ T6721] erofs: (device loop2): z_erofs_readahead: readahead error at folio 86 @ nid 36 [ 204.489912][ T6721] syz.2.207: attempt to access beyond end of device [ 204.489912][ T6721] loop2: rw=524288, sector=8, nr_sectors = 24 limit=16 [ 204.504393][ T6721] syz.2.207: attempt to access beyond end of device [ 204.504393][ T6721] loop2: rw=524288, sector=14425508768, nr_sectors = 8 limit=16 [ 204.995681][ T6716] 8021q: adding VLAN 0 to HW filter on device bond2 [ 206.365998][ T6739] netlink: 4 bytes leftover after parsing attributes in process `syz.3.215'. [ 206.421260][ T6739] netlink: 28 bytes leftover after parsing attributes in process `syz.3.215'. [ 212.209372][ T6766] netlink: 'syz.3.222': attribute type 1 has an invalid length. [ 212.252577][ T6766] 8021q: adding VLAN 0 to HW filter on device bond3 [ 212.298522][ T6778] netlink: 4 bytes leftover after parsing attributes in process `syz.0.229'. [ 212.494746][ T6778] netlink: 28 bytes leftover after parsing attributes in process `syz.0.229'. [ 215.639105][ T6779] syz.2.228 (6779) used greatest stack depth: 20400 bytes left [ 216.598332][ T6802] (null): rxe_set_mtu: Set mtu to 1024 [ 216.604160][ T6802] rdma_rxe: rxe_newlink: failed to add wg2 [ 220.684099][ T6817] netlink: 4 bytes leftover after parsing attributes in process `syz.1.240'. [ 220.739296][ T6817] netlink: 28 bytes leftover after parsing attributes in process `syz.1.240'. [ 224.392696][ T6831] netlink: 'syz.2.239': attribute type 1 has an invalid length. [ 224.652260][ T6831] 8021q: adding VLAN 0 to HW filter on device bond1 [ 226.825116][ T6849] loop1: detected capacity change from 0 to 512 [ 226.836545][ T6849] ext4: Unknown parameter 'seclabel' [ 228.515258][ T6832] I/O error, dev loop1, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 232.006883][ T6875] (null): rxe_set_mtu: Set mtu to 1024 [ 232.012809][ T6875] rdma_rxe: rxe_newlink: failed to add wg2 [ 233.797263][ T6886] netlink: 'syz.0.257': attribute type 1 has an invalid length. [ 233.895035][ T6886] 8021q: adding VLAN 0 to HW filter on device bond3 [ 233.952154][ T6894] netlink: 4 bytes leftover after parsing attributes in process `syz.2.254'. [ 233.973523][ T6894] netlink: 28 bytes leftover after parsing attributes in process `syz.2.254'. [ 237.658797][ T5083] Bluetooth: hci1: command 0x0406 tx timeout [ 240.857158][ T6920] loop2: detected capacity change from 0 to 512 [ 240.868967][ T6920] ext4: Unknown parameter 'seclabel' [ 241.282623][ T6860] I/O error, dev loop2, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 243.514182][ T6935] netlink: 'syz.3.269': attribute type 1 has an invalid length. [ 244.763142][ T6935] 8021q: adding VLAN 0 to HW filter on device bond4 [ 246.594605][ T6951] netlink: 'syz.0.281': attribute type 1 has an invalid length. [ 246.653061][ T6951] 8021q: adding VLAN 0 to HW filter on device bond4 [ 247.006970][ T27] kauditd_printk_skb: 28 callbacks suppressed [ 247.398602][ T27] audit: type=1800 audit(1769836115.579:112): pid=6960 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.272" name="SYSV00000000" dev="hugetlbfs" ino=0 res=0 errno=0 [ 250.509087][ T6970] netlink: 'syz.0.285': attribute type 1 has an invalid length. [ 250.572889][ T6970] 8021q: adding VLAN 0 to HW filter on device bond5 [ 252.306039][ T6979] (null): rxe_set_mtu: Set mtu to 1024 [ 252.311916][ T6979] rdma_rxe: rxe_newlink: failed to add wg2 [ 252.456497][ T6982] netlink: 4 bytes leftover after parsing attributes in process `syz.0.280'. [ 253.809520][ T6982] netlink: 28 bytes leftover after parsing attributes in process `syz.0.280'. [ 255.158902][ T7001] kernel profiling enabled (shift: 17) [ 255.254678][ T7002] trusted_key: encrypted_key: keylen parameter is missing [ 256.719289][ T1283] ieee802154 phy0 wpan0: encryption failed: -22 [ 256.725595][ T1283] ieee802154 phy1 wpan1: encryption failed: -22 [ 260.277723][ T7022] netlink: 'syz.3.290': attribute type 1 has an invalid length. [ 260.949866][ T7022] 8021q: adding VLAN 0 to HW filter on device bond5 [ 261.202411][ T7028] (null): rxe_set_mtu: Set mtu to 1024 [ 261.208366][ T7028] rdma_rxe: rxe_newlink: failed to add wg2 [ 267.107766][ T7056] netlink: 4 bytes leftover after parsing attributes in process `syz.2.294'. [ 267.181862][ T7056] netlink: 28 bytes leftover after parsing attributes in process `syz.2.294'. [ 272.769485][ T7077] loop1: detected capacity change from 0 to 1024 [ 273.112025][ T7079] (null): rxe_set_mtu: Set mtu to 1024 [ 273.119441][ T7079] rdma_rxe: rxe_newlink: failed to add wg2 [ 276.391153][ T7093] netlink: 'syz.2.306': attribute type 1 has an invalid length. [ 276.519771][ T7093] 8021q: adding VLAN 0 to HW filter on device bond2 [ 279.054117][ T7106] (null): rxe_set_mtu: Set mtu to 1024 [ 279.060977][ T7106] rdma_rxe: rxe_newlink: failed to add wg2 [ 279.604073][ T7109] netlink: 4 bytes leftover after parsing attributes in process `syz.3.311'. [ 279.659084][ T7109] netlink: 28 bytes leftover after parsing attributes in process `syz.3.311'. [ 283.242133][ T7127] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 283.327399][ T7132] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 283.454313][ T7132] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 283.476137][ T7127] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 283.799200][ T7138] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 283.936221][ T7138] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 283.985789][ T7139] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 284.052887][ T7138] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 284.246309][ T7142] (null): rxe_set_mtu: Set mtu to 1024 [ 284.252150][ T7142] rdma_rxe: rxe_newlink: failed to add wg2 [ 284.759033][ T7148] (null): rxe_set_mtu: Set mtu to 1024 [ 284.765880][ T7148] rdma_rxe: rxe_newlink: failed to add wg2 [ 291.995356][ T7183] (null): rxe_set_mtu: Set mtu to 1024 [ 292.002317][ T7183] rdma_rxe: rxe_newlink: failed to add wg2 [ 295.060848][ T7194] netlink: 4 bytes leftover after parsing attributes in process `syz.0.339'. [ 295.169098][ T7194] netlink: 28 bytes leftover after parsing attributes in process `syz.0.339'. [ 295.414975][ T7202] (null): rxe_set_mtu: Set mtu to 1024 [ 295.421846][ T7202] rdma_rxe: rxe_newlink: failed to add wg2 [ 295.652433][ T7204] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 295.760604][ T7204] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 295.851131][ T7204] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 297.739804][ T7217] loop1: detected capacity change from 0 to 128 [ 297.790487][ T7217] UDF-fs: error (device loop1): udf_read_tagged: read failed, block=256, location=256 [ 298.743258][ T7228] (null): rxe_set_mtu: Set mtu to 1024 [ 298.750209][ T7228] rdma_rxe: rxe_newlink: failed to add wg2 [ 300.762549][ T7234] loop2: detected capacity change from 0 to 128 [ 303.119686][ T7234] EXT4-fs (loop2): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 303.133675][ T7234] ext4 filesystem being mounted at /81/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 303.411709][ T5769] EXT4-fs (loop2): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 303.453242][ T7244] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 303.541502][ T7244] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 303.577562][ T7244] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 303.609388][ T7244] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 306.867658][ T7256] netlink: 4 bytes leftover after parsing attributes in process `syz.3.350'. [ 307.090777][ T7256] netlink: 28 bytes leftover after parsing attributes in process `syz.3.350'. [ 309.627211][ T7267] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 309.697086][ T7267] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 309.739703][ T7267] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 311.664899][ T7280] No such timeout policy "syz1" [ 315.029469][ T7293] xt_CONNSECMARK: only valid in 'mangle' or 'security' table, not 'raw' [ 315.412511][ T7295] netlink: 4 bytes leftover after parsing attributes in process `syz.3.365'. [ 315.513123][ T7295] netlink: 28 bytes leftover after parsing attributes in process `syz.3.365'. [ 317.404844][ T1283] ieee802154 phy0 wpan0: encryption failed: -22 [ 317.411638][ T1283] ieee802154 phy1 wpan1: encryption failed: -22 [ 318.993692][ T7313] (null): rxe_set_mtu: Set mtu to 1024 [ 319.002400][ T7313] rdma_rxe: rxe_newlink: failed to add wg2 [ 319.549863][ T7315] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 319.598889][ T7315] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 321.056303][ T7315] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 321.160580][ T7322] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 321.223088][ T7322] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 321.376347][ T7322] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 321.413973][ T7322] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 321.592803][ T7328] ufs: You didn't specify the type of your ufs filesystem [ 321.592803][ T7328] [ 321.592803][ T7328] mount -t ufs -o ufstype=sun|sunx86|44bsd|ufs2|5xbsd|old|hp|nextstep|nextstep-cd|openstep ... [ 321.592803][ T7328] [ 321.592803][ T7328] >>>WARNING<<< Wrong ufstype may corrupt your filesystem, default is ufstype=old [ 321.624715][ T7328] ufs: ufstype=old is supported read-only [ 321.635109][ T7328] ufs: ufs_fill_super(): bad magic number [ 322.124027][ T7329] iommufd_mock iommufd_mock1: Adding to iommu group 0 [ 327.274024][ T7356] netlink: 4 bytes leftover after parsing attributes in process `syz.1.375'. [ 327.340582][ T7356] netlink: 28 bytes leftover after parsing attributes in process `syz.1.375'. [ 327.569318][ T7358] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 327.659122][ T7358] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 327.707122][ T7358] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 327.761365][ T7358] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 327.940590][ T7363] Bluetooth: MGMT ver 1.22 [ 327.945431][ T7363] Bluetooth: hci0: invalid length 0, exp 2 for type 20 [ 330.071553][ T7375] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 330.120322][ T7375] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 330.146089][ T7377] loop2: detected capacity change from 0 to 512 [ 330.205147][ T7377] EXT4-fs (loop2): mounting ext2 file system using the ext4 subsystem [ 330.229449][ T7375] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 331.432135][ T7377] EXT4-fs error (device loop2): ext4_orphan_get:1398: inode #15: comm syz.2.388: iget: bogus i_mode (5) [ 331.436956][ T7375] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 331.491852][ T7377] EXT4-fs error (device loop2): ext4_orphan_get:1403: comm syz.2.388: couldn't read orphan inode 15 (err -117) [ 331.553680][ T7377] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 331.587189][ T7377] ext2 filesystem being mounted at /89/file2 supports timestamps until 2038-01-19 (0x7fffffff) [ 334.138962][ T5769] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 334.259060][ T7400] loop2: detected capacity change from 0 to 512 [ 334.272514][ T7400] EXT4-fs: Ignoring removed nobh option [ 334.331378][ T7400] EXT4-fs error (device loop2): ext4_orphan_get:1398: inode #15: comm syz.2.393: iget: bad i_size value: 38620345925642 [ 334.366993][ T7400] EXT4-fs error (device loop2): ext4_orphan_get:1403: comm syz.2.393: couldn't read orphan inode 15 (err -117) [ 334.388427][ T7400] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 336.415132][ T5769] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 336.628262][ T27] audit: type=1326 audit(1769836205.269:113): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7410 comm="syz.2.395" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5e8d39aeb9 code=0x7fc00000 [ 336.811646][ T7413] overlay: Unknown parameter '/' [ 336.958027][ T7416] netlink: 4 bytes leftover after parsing attributes in process `syz.3.391'. [ 337.025335][ T7416] netlink: 28 bytes leftover after parsing attributes in process `syz.3.391'. [ 337.224086][ T7418] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 337.289368][ T7418] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 337.322755][ T7418] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 337.466493][ T7419] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 337.985546][ T27] audit: type=1326 audit(1769836206.619:114): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7410 comm="syz.2.395" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f5e8d394cd7 code=0x7fc00000 [ 338.148346][ T27] audit: type=1326 audit(1769836206.649:115): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7410 comm="syz.2.395" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f5e8d33c2d9 code=0x7fc00000 [ 340.855574][ T7435] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 340.871534][ T7435] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 340.885276][ T7435] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 340.910872][ T7435] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 348.126739][ T7468] loop1: detected capacity change from 0 to 512 [ 351.706311][ T7483] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 351.733480][ T7483] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 351.799472][ T7483] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 351.834636][ T7483] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 355.193160][ T7496] loop1: detected capacity change from 0 to 1024 [ 355.200631][ T7496] EXT4-fs: inline encryption not supported [ 355.206526][ T7496] EXT4-fs: Ignoring removed nobh option [ 355.212172][ T7496] EXT4-fs: Ignoring removed bh option [ 355.228919][ T7496] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 356.468408][ T7496] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 358.490669][ T5767] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 360.883959][ T7535] loop2: detected capacity change from 0 to 16 [ 360.899758][ T7535] erofs: (device loop2): mounted with root inode @ nid 36. [ 360.950358][ T7535] syz.2.421: attempt to access beyond end of device [ 360.950358][ T7535] loop2: rw=0, sector=8, nr_sectors = 16 limit=16 [ 361.348992][ T7539] syz.2.421: attempt to access beyond end of device [ 361.348992][ T7539] loop2: rw=0, sector=8, nr_sectors = 16 limit=16 [ 363.361320][ T7545] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 363.470367][ T7545] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 363.510494][ T7545] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 370.328492][ T7567] netlink: 4 bytes leftover after parsing attributes in process `syz.1.432'. [ 370.371552][ T7567] netlink: 28 bytes leftover after parsing attributes in process `syz.1.432'. [ 374.303369][ T7587] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 374.352309][ T7587] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 375.082226][ T7590] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 380.855242][ T1283] ieee802154 phy0 wpan0: encryption failed: -22 [ 380.861934][ T1283] ieee802154 phy1 wpan1: encryption failed: -22 [ 386.265852][ T7620] (null): rxe_set_mtu: Set mtu to 1024 [ 386.272818][ T7620] rdma_rxe: rxe_newlink: failed to add wg2 [ 394.463045][ T7653] netlink: 'syz.0.448': attribute type 1 has an invalid length. [ 394.647928][ T7653] 8021q: adding VLAN 0 to HW filter on device bond6 [ 394.779188][ T7657] (null): rxe_set_mtu: Set mtu to 1024 [ 394.786208][ T7657] rdma_rxe: rxe_newlink: failed to add wg2 [ 401.285195][ T7678] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 401.365997][ T7678] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 401.468008][ T7678] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 401.700179][ T7680] (null): rxe_set_mtu: Set mtu to 1024 [ 401.705957][ T7680] rdma_rxe: rxe_newlink: failed to add wg2 [ 403.802130][ T7689] orangefs_mount: mount request failed with -4 [ 403.880186][ T7691] loop6: detected capacity change from 0 to 7 [ 403.931019][ T7691] Dev loop6: unable to read RDB block 7 [ 403.937259][ T7691] loop6: unable to read partition table [ 403.952510][ T7691] loop6: partition table beyond EOD, truncated [ 403.959315][ T7691] loop_reread_partitions: partition scan of loop6 (Sj̖P=ý?}X %`ր5) failed (rc=-5) [ 404.967275][ T7701] (null): rxe_set_mtu: Set mtu to 1024 [ 404.975154][ T7701] rdma_rxe: rxe_newlink: failed to add wg2 [ 405.459457][ T7705] netlink: 'syz.2.466': attribute type 1 has an invalid length. [ 405.598618][ T7705] 8021q: adding VLAN 0 to HW filter on device bond3 [ 405.623429][ T7707] vlan2: entered allmulticast mode [ 405.659172][ T7707] veth0_to_bond: entered allmulticast mode [ 405.747834][ T7707] bond3: (slave vlan2): making interface the new active one [ 405.758246][ T7707] bond3: (slave vlan2): Enslaving as an active interface with an up link [ 406.084112][ T7713] (null): rxe_set_mtu: Set mtu to 1024 [ 406.089980][ T7713] rdma_rxe: rxe_newlink: failed to add wg2 [ 406.959113][ T7717] loop1: detected capacity change from 0 to 128 [ 409.299042][ T7729] netlink: 4 bytes leftover after parsing attributes in process `syz.2.471'. [ 409.379495][ T7729] netlink: 28 bytes leftover after parsing attributes in process `syz.2.471'. [ 411.626407][ T7745] (null): rxe_set_mtu: Set mtu to 1024 [ 411.633585][ T7745] rdma_rxe: rxe_newlink: failed to add wg2 [ 412.447964][ T7752] netlink: 36 bytes leftover after parsing attributes in process `syz.0.472'. [ 413.513076][ T7755] netlink: 'syz.1.478': attribute type 1 has an invalid length. [ 414.119464][ T7755] 8021q: adding VLAN 0 to HW filter on device bond3 [ 414.649977][ T7748] sg_write: data in/out 477/14 bytes for SCSI command 0x0-- guessing data in; [ 414.649977][ T7748] program syz.3.477 not setting count and/or reply_len properly [ 415.414304][ T7774] netlink: 4 bytes leftover after parsing attributes in process `syz.3.483'. [ 415.511488][ T7774] netlink: 28 bytes leftover after parsing attributes in process `syz.3.483'. [ 415.839233][ T7783] loop2: detected capacity change from 0 to 128 [ 418.083663][ T7790] netlink: 36 bytes leftover after parsing attributes in process `syz.3.494'. [ 419.533023][ T7794] netlink: 36 bytes leftover after parsing attributes in process `syz.1.496'. [ 422.507431][ T7811] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 422.573814][ T7812] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 422.644900][ T7811] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 423.198319][ T7817] sg_write: data in/out 477/14 bytes for SCSI command 0x0-- guessing data in; [ 423.198319][ T7817] program syz.0.493 not setting count and/or reply_len properly [ 425.084074][ T6090] usb 3-1: new high-speed USB device number 6 using dummy_hcd [ 425.837170][ T6090] usb 3-1: Using ep0 maxpacket: 8 [ 427.407870][ T7843] netlink: 168 bytes leftover after parsing attributes in process `syz.0.504'. [ 429.749335][ T7852] loop6: detected capacity change from 0 to 7 [ 429.760549][ T7852] Dev loop6: unable to read RDB block 7 [ 429.766493][ T7852] loop6: unable to read partition table [ 429.773198][ T7852] loop6: partition table beyond EOD, truncated [ 429.779525][ T7852] loop_reread_partitions: partition scan of loop6 (Sj̖P=ý?}X %`ր5) failed (rc=-5) [ 430.758486][ T6090] usb 3-1: device descriptor read/all, error -71 [ 431.542065][ T7863] loop6: detected capacity change from 0 to 7 [ 431.837360][ T7863] Dev loop6: unable to read RDB block 7 [ 431.991723][ T7863] loop6: unable to read partition table [ 431.999806][ T7863] loop6: partition table beyond EOD, truncated [ 432.076991][ T7863] loop_reread_partitions: partition scan of loop6 (Sj̖P=ý?}X %`ր5) failed (rc=-5) [ 432.645078][ T7862] netlink: 36 bytes leftover after parsing attributes in process `syz.0.503'. [ 433.386732][ T7879] sg_write: data in/out 477/14 bytes for SCSI command 0x0-- guessing data in; [ 433.386732][ T7879] program syz.1.505 not setting count and/or reply_len properly [ 440.613905][ T1283] ieee802154 phy0 wpan0: encryption failed: -22 [ 440.614482][ T6090] usb 4-1: new high-speed USB device number 3 using dummy_hcd [ 440.626917][ T1283] ieee802154 phy1 wpan1: encryption failed: -22 [ 443.234327][ T7919] (null): rxe_set_mtu: Set mtu to 1024 [ 443.269733][ T7919] rdma_rxe: rxe_newlink: failed to add wg2 [ 445.136100][ T7929] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 445.683217][ T7930] sg_write: data in/out 477/14 bytes for SCSI command 0x0-- guessing data in; [ 445.683217][ T7930] program syz.2.518 not setting count and/or reply_len properly [ 446.410920][ T5083] Bluetooth: hci1: command 0x0406 tx timeout [ 446.459198][ T7929] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 446.702975][ T7933] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 449.537854][ T7950] orangefs_mount: mount request failed with -4 [ 449.735509][ T7953] netlink: 'syz.2.528': attribute type 1 has an invalid length. [ 449.895461][ T7953] 8021q: adding VLAN 0 to HW filter on device bond4 [ 451.149778][ T7968] loop2: detected capacity change from 0 to 128 [ 451.799739][ T7973] (null): rxe_set_mtu: Set mtu to 1024 [ 451.829627][ T7973] rdma_rxe: rxe_newlink: failed to add wg2 [ 452.200476][ T7977] loop2: detected capacity change from 0 to 1024 [ 452.208965][ T7977] EXT4-fs: inline encryption not supported [ 452.214881][ T7977] EXT4-fs: Ignoring removed nobh option [ 452.220565][ T7977] EXT4-fs: Ignoring removed bh option [ 452.233987][ T7977] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 452.278348][ T7977] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 453.228204][ T5769] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 453.247231][ T7989] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 453.355057][ T7989] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 453.424823][ T7989] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 454.139909][ T7998] netlink: 'syz.0.536': attribute type 1 has an invalid length. [ 454.163534][ T7998] 8021q: adding VLAN 0 to HW filter on device bond7 [ 454.258059][ T8001] netlink: 168 bytes leftover after parsing attributes in process `syz.2.533'. [ 454.848288][ T7998] vlan2: entered allmulticast mode [ 454.995545][ T7998] veth0_to_bond: entered allmulticast mode [ 455.102814][ T8005] loop6: detected capacity change from 0 to 7 [ 455.112685][ T8005] Dev loop6: unable to read RDB block 7 [ 455.118545][ T8005] loop6: unable to read partition table [ 455.124874][ T8005] loop6: partition table beyond EOD, truncated [ 455.131736][ T8005] loop_reread_partitions: partition scan of loop6 (Sj̖P=ý?}X %`ր5) failed (rc=-5) [ 455.912508][ T7998] bond7: (slave vlan2): making interface the new active one [ 456.123015][ T7998] bond7: (slave vlan2): Enslaving as an active interface with an up link [ 457.982477][ T8030] ceph: No source [ 457.989721][ T8030] kAFS: unable to lookup cell '\/' [ 458.014962][ T8022] (null): rxe_set_mtu: Set mtu to 1024 [ 458.022140][ T8022] rdma_rxe: rxe_newlink: failed to add wg2 [ 462.144931][ T8046] netlink: 'syz.0.549': attribute type 1 has an invalid length. [ 462.248745][ T8046] 8021q: adding VLAN 0 to HW filter on device bond8 [ 462.256213][ T8050] loop6: detected capacity change from 0 to 7 [ 462.272255][ T8050] Dev loop6: unable to read RDB block 7 [ 462.278197][ T8050] loop6: unable to read partition table [ 462.284958][ T8050] loop6: partition table beyond EOD, truncated [ 462.293528][ T8050] loop_reread_partitions: partition scan of loop6 (Sj̖P=ý?}X %`ր5) failed (rc=-5) [ 464.977844][ T8068] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 465.342165][ T8076] ceph: No source [ 465.347733][ T8076] kAFS: unable to lookup cell '\/' [ 468.852309][ T8091] (null): rxe_set_mtu: Set mtu to 1024 [ 468.859373][ T8091] rdma_rxe: rxe_newlink: failed to add wg2 [ 469.377243][ T9] usb 1-1: new high-speed USB device number 5 using dummy_hcd [ 469.701065][ T9] usb 1-1: New USB device found, idVendor=133e, idProduct=0815, bcdDevice=7e.66 [ 469.761724][ T9] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 469.816607][ T9] usb 1-1: Product: syz [ 469.857281][ T9] usb 1-1: Manufacturer: syz [ 469.887488][ T9] usb 1-1: SerialNumber: syz [ 469.983375][ T9] usb 1-1: config 0 descriptor?? [ 470.080400][ T9] snd-usb-audio: probe of 1-1:0.0 failed with error -22 [ 471.662565][ T6090] usb 1-1: USB disconnect, device number 5 [ 472.933441][ T8099] netlink: 'syz.3.559': attribute type 1 has an invalid length. [ 473.645881][ T8099] 8021q: adding VLAN 0 to HW filter on device bond6 [ 473.960212][ T8109] vlan2: entered allmulticast mode [ 473.987951][ T8109] veth0_to_bond: entered allmulticast mode [ 474.029047][ T8109] bond6: (slave vlan2): making interface the new active one [ 474.068268][ T8109] bond6: (slave vlan2): Enslaving as an active interface with an up link [ 474.707474][ T8117] loop6: detected capacity change from 0 to 7 [ 474.718462][ T8117] Dev loop6: unable to read RDB block 7 [ 474.724413][ T8117] loop6: unable to read partition table [ 474.731409][ T8117] loop6: partition table beyond EOD, truncated [ 474.740921][ T8117] loop_reread_partitions: partition scan of loop6 (Sj̖P=ý?}X %`ր5) failed (rc=-5) [ 475.191317][ T8114] orangefs_mount: mount request failed with -4 [ 478.934134][ T8136] ceph: No source [ 478.941771][ T8136] kAFS: unable to lookup cell '\/' [ 481.153630][ T8147] netlink: 168 bytes leftover after parsing attributes in process `syz.1.564'. [ 483.989389][ T8159] netlink: 'syz.0.575': attribute type 10 has an invalid length. [ 486.389428][ T8159] bond0: (slave wlan1): Enslaving as an active interface with an up link [ 486.810126][ T8179] ceph: No source [ 486.817317][ T8179] kAFS: unable to lookup cell '\/' [ 488.480669][ T8184] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 488.787816][ T9] usb 3-1: new high-speed USB device number 8 using dummy_hcd [ 489.144149][ T9] usb 3-1: New USB device found, idVendor=133e, idProduct=0815, bcdDevice=7e.66 [ 489.270573][ T9] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 489.398739][ T9] usb 3-1: Product: syz [ 489.465163][ T9] usb 3-1: Manufacturer: syz [ 489.539833][ T9] usb 3-1: SerialNumber: syz [ 489.729569][ T9] usb 3-1: config 0 descriptor?? [ 489.984705][ T9] snd-usb-audio: probe of 3-1:0.0 failed with error -22 [ 494.619869][ T6090] usb 3-1: USB disconnect, device number 8 [ 497.620563][ T8230] tipc: Can't bind to reserved service type 0 [ 499.592860][ T8235] loop6: detected capacity change from 0 to 7 [ 500.377711][ T8235] Dev loop6: unable to read RDB block 7 [ 500.383492][ T8235] loop6: unable to read partition table [ 500.390406][ T8235] loop6: partition table beyond EOD, truncated [ 500.397157][ T8235] loop_reread_partitions: partition scan of loop6 (Sj̖P=ý?}X %`ր5) failed (rc=-5) [ 501.681958][ T1283] ieee802154 phy0 wpan0: encryption failed: -22 [ 501.691674][ T1283] ieee802154 phy1 wpan1: encryption failed: -22 [ 502.207148][ T8258] loop2: detected capacity change from 0 to 1024 [ 502.214515][ T8258] EXT4-fs: inline encryption not supported [ 502.220507][ T8258] EXT4-fs: Ignoring removed nobh option [ 502.226076][ T8258] EXT4-fs: Ignoring removed bh option [ 502.232592][ T8258] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 502.385746][ T8258] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 503.713103][ T5769] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 505.082821][ T8274] netlink: 4 bytes leftover after parsing attributes in process `syz.2.599'. [ 506.045811][ T8280] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 506.963443][ T8285] DRBG: could not allocate CTR cipher TFM handle: ctr(aes) [ 507.328600][ T8295] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 507.712661][ T8298] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 507.747895][ T8299] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 511.727386][ T8319] netlink: 4 bytes leftover after parsing attributes in process `syz.2.611'. [ 515.939280][ T8346] ceph: No source [ 515.946201][ T8346] kAFS: unable to lookup cell '\/' [ 519.272768][ T8365] netlink: 4 bytes leftover after parsing attributes in process `syz.2.623'. [ 520.354986][ T8376] netlink: 4 bytes leftover after parsing attributes in process `syz.2.633'. [ 521.920644][ T8376] netlink: 28 bytes leftover after parsing attributes in process `syz.2.633'. [ 528.004885][ T8424] netlink: 4 bytes leftover after parsing attributes in process `syz.3.639'. [ 528.509221][ T8424] netlink: 28 bytes leftover after parsing attributes in process `syz.3.639'. [ 528.677262][ T8432] netlink: 'syz.1.648': attribute type 1 has an invalid length. [ 529.968108][ T8432] 8021q: adding VLAN 0 to HW filter on device bond4 [ 534.580424][ T8468] netlink: 4 bytes leftover after parsing attributes in process `syz.0.649'. [ 534.621223][ T8468] netlink: 28 bytes leftover after parsing attributes in process `syz.0.649'. [ 540.195528][ T8499] netlink: 'syz.3.652': attribute type 1 has an invalid length. [ 541.070478][ T8504] xt_CT: You must specify a L4 protocol and not use inversions on it [ 541.888317][ T8499] 8021q: adding VLAN 0 to HW filter on device bond7 [ 548.127606][ T8546] xt_CT: You must specify a L4 protocol and not use inversions on it [ 550.570688][ T8558] (null): rxe_set_mtu: Set mtu to 1024 [ 550.585683][ T8558] rdma_rxe: rxe_newlink: failed to add wg2 [ 561.298531][ T8622] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 561.380007][ T8622] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 561.541177][ T8622] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 563.138735][ T1283] ieee802154 phy0 wpan0: encryption failed: -22 [ 563.147091][ T1283] ieee802154 phy1 wpan1: encryption failed: -22 [ 566.516257][ T8661] netlink: 'syz.3.713': attribute type 1 has an invalid length. [ 566.590361][ T8661] 8021q: adding VLAN 0 to HW filter on device bond8 [ 573.479560][ T8697] xt_CT: You must specify a L4 protocol and not use inversions on it [ 575.032518][ T8705] netlink: 4 bytes leftover after parsing attributes in process `syz.2.718'. [ 575.109717][ T8705] netlink: 28 bytes leftover after parsing attributes in process `syz.2.718'. [ 578.617570][ T8734] netlink: 'syz.0.719': attribute type 1 has an invalid length. [ 578.728423][ T8734] 8021q: adding VLAN 0 to HW filter on device bond9 [ 581.122205][ T8751] xt_CT: You must specify a L4 protocol and not use inversions on it [ 582.337686][ T8757] netlink: 4 bytes leftover after parsing attributes in process `syz.1.731'. [ 582.563460][ T8757] netlink: 28 bytes leftover after parsing attributes in process `syz.1.731'. [ 589.919997][ T8804] netlink: 4 bytes leftover after parsing attributes in process `syz.3.745'. [ 591.259748][ T8804] netlink: 28 bytes leftover after parsing attributes in process `syz.3.745'. [ 592.356268][ T8816] netlink: 4 bytes leftover after parsing attributes in process `syz.0.755'. [ 592.467380][ T8816] netlink: 28 bytes leftover after parsing attributes in process `syz.0.755'. [ 603.218386][ T8861] netlink: 'syz.3.754': attribute type 1 has an invalid length. [ 603.403556][ T8861] 8021q: adding VLAN 0 to HW filter on device bond9 [ 604.666578][ T8874] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 604.677299][ T8874] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 604.687213][ T8874] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 604.696654][ T8874] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 604.704497][ T8874] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 604.712637][ T8874] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 606.798660][ T8874] Bluetooth: hci4: command tx timeout [ 608.877417][ T8874] Bluetooth: hci4: command tx timeout [ 609.061868][ T8903] netlink: 'syz.1.771': attribute type 1 has an invalid length. [ 609.158650][ T8903] 8021q: adding VLAN 0 to HW filter on device bond5 [ 610.519361][ T7983] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 610.956895][ T8874] Bluetooth: hci4: command tx timeout [ 611.001389][ T7983] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 611.253407][ T8915] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 611.340294][ T8915] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 611.419099][ T7983] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 611.431312][ T8915] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 611.526869][ T8872] chnl_net:caif_netlink_parms(): no params data found [ 611.718054][ T7983] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 611.990419][ T8872] bridge0: port 1(bridge_slave_0) entered blocking state [ 611.997728][ T8872] bridge0: port 1(bridge_slave_0) entered disabled state [ 612.017838][ T8872] bridge_slave_0: entered allmulticast mode [ 612.040891][ T8872] bridge_slave_0: entered promiscuous mode [ 612.099408][ T8872] bridge0: port 2(bridge_slave_1) entered blocking state [ 612.126267][ T8872] bridge0: port 2(bridge_slave_1) entered disabled state [ 612.136414][ T8872] bridge_slave_1: entered allmulticast mode [ 612.149844][ T8872] bridge_slave_1: entered promiscuous mode [ 612.188285][ T8923] (null): rxe_set_mtu: Set mtu to 1024 [ 612.193974][ T8923] rdma_rxe: rxe_newlink: failed to add wg2 [ 613.485252][ T8874] Bluetooth: hci4: command tx timeout [ 613.572966][ T8872] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 613.684052][ T8872] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 613.825221][ T8872] team0: Port device team_slave_0 added [ 613.855150][ T8872] team0: Port device team_slave_1 added [ 614.293061][ T8872] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 614.323359][ T8872] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 614.532137][ T8872] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 614.682847][ T8872] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 614.758281][ T8872] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 615.004953][ T8872] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 616.275046][ T8872] hsr_slave_0: entered promiscuous mode [ 617.538801][ T8872] hsr_slave_1: entered promiscuous mode [ 617.547067][ T8872] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 617.569110][ T8872] Cannot create hsr debugfs directory [ 620.013680][ T8990] (null): rxe_set_mtu: Set mtu to 1024 [ 620.067495][ T8990] rdma_rxe: rxe_newlink: failed to add wg2 [ 624.135519][ T8872] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 624.350214][ T8872] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 624.529148][ T8872] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 624.562479][ T1283] ieee802154 phy0 wpan0: encryption failed: -22 [ 624.569650][ T1283] ieee802154 phy1 wpan1: encryption failed: -22 [ 625.136591][ T8872] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 629.160194][ T8872] 8021q: adding VLAN 0 to HW filter on device bond0 [ 629.520565][ T8872] 8021q: adding VLAN 0 to HW filter on device team0 [ 629.865489][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 629.872657][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 629.933161][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 629.940366][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 630.436839][ T7983] hsr_slave_0: left promiscuous mode [ 630.613010][ T7983] hsr_slave_1: left promiscuous mode [ 630.740055][ T7983] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 630.758809][ T7983] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 631.598526][ T7983] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 631.606009][ T7983] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 631.778485][ T7983] bridge_slave_1: left allmulticast mode [ 631.784208][ T7983] bridge_slave_1: left promiscuous mode [ 631.857511][ T7983] bridge0: port 2(bridge_slave_1) entered disabled state [ 632.047780][ T7983] bridge_slave_0: left allmulticast mode [ 632.053501][ T7983] bridge_slave_0: left promiscuous mode [ 632.077356][ T7983] bridge0: port 1(bridge_slave_0) entered disabled state [ 632.363283][ T7983] veth1_macvtap: left promiscuous mode [ 632.388100][ T7983] veth0_macvtap: left promiscuous mode [ 632.393811][ T7983] veth1_vlan: left promiscuous mode [ 632.417762][ T7983] veth0_vlan: left promiscuous mode [ 632.737617][ T9067] (null): rxe_set_mtu: Set mtu to 1024 [ 632.743429][ T9067] rdma_rxe: rxe_newlink: failed to add wg2 [ 639.526273][ T7983] bond4 (unregistering): Released all slaves [ 639.857739][ T7983] bond3 (unregistering): (slave vlan2): Releasing active interface [ 643.320620][ T7983] bond3 (unregistering): Released all slaves [ 645.678837][ T7983] bond2 (unregistering): Released all slaves [ 646.598731][ T7983] bond1 (unregistering): Released all slaves [ 650.559066][ T5083] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 650.569676][ T5083] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 650.587056][ T5083] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 650.599145][ T5083] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 650.627959][ T5083] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 650.638577][ T5083] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 652.993341][ T8874] Bluetooth: hci5: command tx timeout [ 654.826540][ T7983] team0 (unregistering): Port device team_slave_1 removed [ 655.698728][ T8874] Bluetooth: hci5: command tx timeout [ 655.714031][ T7983] team0 (unregistering): Port device team_slave_0 removed [ 655.819969][ T7983] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 655.914432][ T7983] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 658.134147][ T8874] Bluetooth: hci5: command tx timeout [ 659.392247][ T7983] bond0 (unregistering): Released all slaves [ 659.641094][ T8872] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 660.427002][ T5083] Bluetooth: hci5: command tx timeout [ 662.317120][ T5767] syz-executor (5767) used greatest stack depth: 20328 bytes left [ 662.984684][ T8874] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 663.000416][ T8874] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 663.011349][ T8874] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 663.028741][ T8874] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 663.046949][ T8874] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 663.054531][ T8874] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 663.178153][ T9125] chnl_net:caif_netlink_parms(): no params data found [ 664.141250][ T9125] bridge0: port 1(bridge_slave_0) entered blocking state [ 664.184448][ T9125] bridge0: port 1(bridge_slave_0) entered disabled state [ 664.213587][ T9125] bridge_slave_0: entered allmulticast mode [ 664.221041][ T9125] bridge_slave_0: entered promiscuous mode [ 664.230187][ T9125] bridge0: port 2(bridge_slave_1) entered blocking state [ 664.239391][ T9125] bridge0: port 2(bridge_slave_1) entered disabled state [ 664.246627][ T9125] bridge_slave_1: entered allmulticast mode [ 664.254040][ T9125] bridge_slave_1: entered promiscuous mode [ 665.117967][ T5083] Bluetooth: hci2: command tx timeout [ 665.295268][ T9125] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 665.668439][ T9125] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 667.196821][ T8874] Bluetooth: hci2: command tx timeout [ 667.829887][ T9125] team0: Port device team_slave_0 added [ 667.922430][ T9125] team0: Port device team_slave_1 added [ 668.922942][ T9125] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 668.947412][ T9125] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 669.008253][ T9125] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 669.079088][ T9125] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 669.086100][ T9125] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 669.177242][ T9125] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 669.277488][ T8874] Bluetooth: hci2: command tx timeout [ 670.357549][ T9125] hsr_slave_0: entered promiscuous mode [ 670.393286][ T9125] hsr_slave_1: entered promiscuous mode [ 670.404741][ T9125] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 670.427008][ T9125] Cannot create hsr debugfs directory [ 671.357600][ T8874] Bluetooth: hci2: command tx timeout [ 671.364994][ T7983] netdevsim netdevsim1 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 671.396511][ T7983] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 671.420022][ T9179] chnl_net:caif_netlink_parms(): no params data found [ 671.505657][ T7983] netdevsim netdevsim1 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 671.629316][ T7983] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 672.368862][ T7983] netdevsim netdevsim1 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 672.379849][ T7983] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 673.262262][ T7983] netdevsim netdevsim1 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 673.310982][ T7983] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 674.153684][ T9179] bridge0: port 1(bridge_slave_0) entered blocking state [ 674.173924][ T9179] bridge0: port 1(bridge_slave_0) entered disabled state [ 674.190126][ T9179] bridge_slave_0: entered allmulticast mode [ 674.211092][ T9179] bridge_slave_0: entered promiscuous mode [ 674.283379][ T9179] bridge0: port 2(bridge_slave_1) entered blocking state [ 674.310108][ T9179] bridge0: port 2(bridge_slave_1) entered disabled state [ 674.329452][ T9179] bridge_slave_1: entered allmulticast mode [ 674.347847][ T9179] bridge_slave_1: entered promiscuous mode [ 674.474497][ T9179] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 674.535835][ T9179] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 674.754990][ T9179] team0: Port device team_slave_0 added [ 674.771090][ T9179] team0: Port device team_slave_1 added [ 675.142268][ T9125] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 675.955399][ T9125] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 676.100138][ T9179] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 676.107551][ T9179] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 676.134306][ T9179] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 676.255711][ T9179] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 676.262788][ T9179] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 676.288979][ T9179] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 676.308401][ T9125] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 676.676382][ T9125] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 680.394074][ T9179] hsr_slave_0: entered promiscuous mode [ 680.467349][ T9179] hsr_slave_1: entered promiscuous mode [ 681.776940][ T9179] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 681.784574][ T9179] Cannot create hsr debugfs directory [ 684.936356][ T9125] 8021q: adding VLAN 0 to HW filter on device bond0 [ 685.321001][ T9125] 8021q: adding VLAN 0 to HW filter on device team0 [ 685.358502][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 685.365653][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 685.490726][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 685.497937][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 685.849324][ T9125] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 687.106597][ T1283] ieee802154 phy0 wpan0: encryption failed: -22 [ 687.113140][ T1283] ieee802154 phy1 wpan1: encryption failed: -22 [ 688.519715][ T9179] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 688.638179][ T9179] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 688.704892][ T7983] hsr_slave_0: left promiscuous mode [ 688.717530][ T7983] hsr_slave_1: left promiscuous mode [ 688.724196][ T7983] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 688.771598][ T7983] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 688.780490][ T7983] bridge_slave_1: left allmulticast mode [ 688.786173][ T7983] bridge_slave_1: left promiscuous mode [ 688.815079][ T7983] bridge0: port 2(bridge_slave_1) entered disabled state [ 688.848493][ T7983] bridge_slave_0: left allmulticast mode [ 688.854193][ T7983] bridge_slave_0: left promiscuous mode [ 688.887752][ T7983] bridge0: port 1(bridge_slave_0) entered disabled state [ 688.976024][ T7983] hsr_slave_0: left promiscuous mode [ 688.982824][ T7983] hsr_slave_1: left promiscuous mode [ 688.997577][ T7983] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 689.005045][ T7983] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 689.036471][ T7983] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 689.056826][ T7983] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 689.087767][ T7983] bridge_slave_1: left allmulticast mode [ 689.093463][ T7983] bridge_slave_1: left promiscuous mode [ 689.113646][ T7983] bridge0: port 2(bridge_slave_1) entered disabled state [ 689.138801][ T7983] bridge_slave_0: left allmulticast mode [ 689.144605][ T7983] bridge_slave_0: left promiscuous mode [ 689.166968][ T7983] bridge0: port 1(bridge_slave_0) entered disabled state [ 689.310776][ T7983] veth1_macvtap: left promiscuous mode [ 689.316374][ T7983] veth0_macvtap: left promiscuous mode [ 689.337598][ T7983] veth1_vlan: left promiscuous mode [ 689.342998][ T7983] veth0_vlan: left promiscuous mode [ 690.833278][ T9378] trusted_key: encrypted_key: keylen parameter is missing [ 692.991625][ T7983] team0 (unregistering): Port device team_slave_1 removed [ 694.355002][ T7983] team0 (unregistering): Port device team_slave_0 removed [ 694.468071][ T7983] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 694.569999][ T7983] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 695.640323][ T7983] bond0 (unregistering): Released all slaves [ 697.038756][ T7983] bond5 (unregistering): Released all slaves [ 697.385169][ T7983] bond4 (unregistering): Released all slaves [ 697.665974][ T7983] bond3 (unregistering): Released all slaves [ 702.075335][ T7983] bond2 (unregistering): Released all slaves [ 702.303121][ T7983] bond1 (unregistering): Released all slaves [ 704.236860][ T5083] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 704.255704][ T5083] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 704.264508][ T5083] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 704.304944][ T5083] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 704.323510][ T5083] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 704.345139][ T5083] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 705.719940][ T7983] team0 (unregistering): Port device team_slave_1 removed [ 705.783289][ T7983] team0 (unregistering): Port device team_slave_0 removed [ 705.867882][ T7983] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 705.963936][ T7983] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 706.402009][ T8874] Bluetooth: hci4: command tx timeout [ 706.498890][ T9427] ufs: You didn't specify the type of your ufs filesystem [ 706.498890][ T9427] [ 706.498890][ T9427] mount -t ufs -o ufstype=sun|sunx86|44bsd|ufs2|5xbsd|old|hp|nextstep|nextstep-cd|openstep ... [ 706.498890][ T9427] [ 706.498890][ T9427] >>>WARNING<<< Wrong ufstype may corrupt your filesystem, default is ufstype=old [ 706.529830][ T9427] ufs: ufstype=old is supported read-only [ 706.537765][ T9427] ufs: ufs_fill_super(): bad magic number [ 707.069906][ T7983] bond0 (unregistering): Released all slaves [ 707.319340][ T9179] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 707.336374][ T9179] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 708.775454][ T8874] Bluetooth: hci4: command tx timeout [ 710.387524][ T9179] 8021q: adding VLAN 0 to HW filter on device bond0 [ 710.497545][ T9179] 8021q: adding VLAN 0 to HW filter on device team0 [ 710.883001][ T8874] Bluetooth: hci4: command tx timeout [ 710.989071][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 710.996264][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 711.038182][ T5083] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 711.051288][ T5083] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 711.076223][ T1104] bridge0: port 2(bridge_slave_1) entered blocking state [ 711.083404][ T1104] bridge0: port 2(bridge_slave_1) entered forwarding state [ 711.091566][ T5083] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 711.121771][ T5083] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 711.147248][ T5083] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 711.155647][ T5083] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 711.493482][ T9179] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 712.353373][ T9416] chnl_net:caif_netlink_parms(): no params data found [ 713.653149][ T8874] Bluetooth: hci4: command tx timeout [ 713.659342][ T5083] Bluetooth: hci1: command tx timeout [ 713.727168][ T9416] bridge0: port 1(bridge_slave_0) entered blocking state [ 713.734753][ T9416] bridge0: port 1(bridge_slave_0) entered disabled state [ 713.758558][ T9416] bridge_slave_0: entered allmulticast mode [ 713.765716][ T9416] bridge_slave_0: entered promiscuous mode [ 713.837538][ T9416] bridge0: port 2(bridge_slave_1) entered blocking state [ 713.844706][ T9416] bridge0: port 2(bridge_slave_1) entered disabled state [ 713.867218][ T9416] bridge_slave_1: entered allmulticast mode [ 713.888263][ T9416] bridge_slave_1: entered promiscuous mode [ 714.003815][ T9416] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 714.039768][ T9179] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 714.144850][ T9416] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 714.372364][ T7983] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 714.425858][ T9416] team0: Port device team_slave_0 added [ 714.434517][ T9460] chnl_net:caif_netlink_parms(): no params data found [ 714.489405][ T7983] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 714.534168][ T9416] team0: Port device team_slave_1 added [ 714.608814][ T7983] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 714.683531][ T9416] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 714.696409][ T9416] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 714.732530][ T9416] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 714.915959][ T7983] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 714.955175][ T9416] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 714.997376][ T9416] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 715.218093][ T9524] xt_CONNSECMARK: only valid in 'mangle' or 'security' table, not 'raw' [ 715.279592][ T9416] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 715.817913][ T5083] Bluetooth: hci1: command tx timeout [ 715.965590][ T9460] bridge0: port 1(bridge_slave_0) entered blocking state [ 715.993791][ T9460] bridge0: port 1(bridge_slave_0) entered disabled state [ 716.017051][ T9460] bridge_slave_0: entered allmulticast mode [ 716.040047][ T9460] bridge_slave_0: entered promiscuous mode [ 716.069652][ T9179] veth0_vlan: entered promiscuous mode [ 717.300054][ T9416] hsr_slave_0: entered promiscuous mode [ 717.337048][ T9416] hsr_slave_1: entered promiscuous mode [ 717.357170][ T9416] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 717.364958][ T9416] Cannot create hsr debugfs directory [ 717.388410][ T9460] bridge0: port 2(bridge_slave_1) entered blocking state [ 717.395744][ T9460] bridge0: port 2(bridge_slave_1) entered disabled state [ 717.428148][ T9460] bridge_slave_1: entered allmulticast mode [ 717.435404][ T9460] bridge_slave_1: entered promiscuous mode [ 717.596380][ T9179] veth1_vlan: entered promiscuous mode [ 717.730401][ T9460] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 717.783822][ T9179] veth0_macvtap: entered promiscuous mode [ 717.794175][ T9460] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 717.824481][ T9179] veth1_macvtap: entered promiscuous mode [ 717.843908][ T5083] Bluetooth: hci1: command tx timeout [ 718.022699][ T9179] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 718.037570][ T9179] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 718.048728][ T9179] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 718.059703][ T9179] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 718.071408][ T9179] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 718.084304][ T9179] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 718.095226][ T9179] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 718.105820][ T9179] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 718.116470][ T9179] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 718.127858][ T9179] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 718.147664][ T9460] team0: Port device team_slave_0 added [ 718.214176][ T9179] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 718.223466][ T9179] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 718.235419][ T9179] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 718.244773][ T9179] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 718.268674][ T9460] team0: Port device team_slave_1 added [ 720.045247][ T5083] Bluetooth: hci1: command tx timeout [ 720.157304][ T9460] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 720.166127][ T9460] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 720.223911][ T9460] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 720.407989][ T9460] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 720.415227][ T9460] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 720.477197][ T9460] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 720.785220][ T9460] hsr_slave_0: entered promiscuous mode [ 720.796206][ T9460] hsr_slave_1: entered promiscuous mode [ 720.811173][ T9460] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 720.822159][ T9460] Cannot create hsr debugfs directory [ 721.842924][ T9416] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 722.871440][ T9577] No such timeout policy "syz1" [ 723.720532][ T9416] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 723.792095][ T9416] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 725.098749][ T7983] bond0: (slave wlan1): Releasing backup interface [ 725.137095][ T9416] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 725.160357][ T8874] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 725.173581][ T8874] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 725.184507][ T8874] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 725.206806][ T8874] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 725.214899][ T8874] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 725.222523][ T8874] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 725.950610][ T9416] 8021q: adding VLAN 0 to HW filter on device bond0 [ 726.114613][ T9416] 8021q: adding VLAN 0 to HW filter on device team0 [ 726.169247][ T6585] bridge0: port 1(bridge_slave_0) entered blocking state [ 726.176408][ T6585] bridge0: port 1(bridge_slave_0) entered forwarding state [ 727.342957][ T5083] Bluetooth: hci2: command tx timeout [ 727.443513][ T6585] bridge0: port 2(bridge_slave_1) entered blocking state [ 727.450744][ T6585] bridge0: port 2(bridge_slave_1) entered forwarding state [ 727.783891][ T9416] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 727.823803][ T9416] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 727.963340][ T7983] hsr_slave_0: left promiscuous mode [ 727.997467][ T7983] hsr_slave_1: left promiscuous mode [ 728.003917][ T7983] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 728.028113][ T7983] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 728.060067][ T7983] bridge_slave_1: left allmulticast mode [ 728.065761][ T7983] bridge_slave_1: left promiscuous mode [ 728.077770][ T7983] bridge0: port 2(bridge_slave_1) entered disabled state [ 728.108659][ T7983] bridge_slave_0: left allmulticast mode [ 728.122864][ T7983] bridge_slave_0: left promiscuous mode [ 728.137204][ T7983] bridge0: port 1(bridge_slave_0) entered disabled state [ 728.191332][ T7983] hsr_slave_0: left promiscuous mode [ 728.207447][ T7983] hsr_slave_1: left promiscuous mode [ 728.220477][ T7983] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 728.229105][ T7983] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 728.239919][ T7983] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 728.256933][ T7983] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 728.277294][ T7983] bridge_slave_1: left allmulticast mode [ 728.282988][ T7983] bridge_slave_1: left promiscuous mode [ 729.098495][ T7983] bridge0: port 2(bridge_slave_1) entered disabled state [ 729.121074][ T7983] bridge_slave_0: left allmulticast mode [ 729.134200][ T7983] bridge_slave_0: left promiscuous mode [ 729.143356][ T7983] bridge0: port 1(bridge_slave_0) entered disabled state [ 729.249613][ T7983] veth1_macvtap: left promiscuous mode [ 729.255208][ T7983] veth0_macvtap: left promiscuous mode [ 729.276299][ T7983] veth1_vlan: left promiscuous mode [ 729.294325][ T7983] veth0_vlan: left promiscuous mode [ 729.356788][ T8874] Bluetooth: hci2: command tx timeout [ 731.265520][ T7983] team0 (unregistering): Port device team_slave_1 removed [ 731.362322][ T7983] team0 (unregistering): Port device team_slave_0 removed [ 731.444166][ T8874] Bluetooth: hci2: command tx timeout [ 731.451246][ T7983] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 731.538210][ T7983] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 733.284748][ T7983] bond0 (unregistering): Released all slaves [ 733.516761][ T8874] Bluetooth: hci2: command tx timeout [ 735.375960][ T7983] bond9 (unregistering): Released all slaves [ 735.668004][ T7983] bond8 (unregistering): Released all slaves [ 735.695211][ T7983] bond7 (unregistering): (slave vlan2): Releasing active interface [ 735.883081][ T7983] bond7 (unregistering): Released all slaves [ 736.553223][ T7983] bond6 (unregistering): Released all slaves [ 738.185314][ T7983] bond5 (unregistering): Released all slaves [ 738.403471][ T7983] bond4 (unregistering): Released all slaves [ 738.936314][ T7983] bond3 (unregistering): Released all slaves [ 739.326316][ T7983] bond2 (unregistering): Released all slaves [ 739.494577][ T7983] bond1 (unregistering): Released all slaves [ 740.124195][ T7983] team0 (unregistering): Port device team_slave_1 removed [ 740.173537][ T7983] team0 (unregistering): Port device team_slave_0 removed [ 740.216475][ T7983] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 740.269024][ T7983] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 740.615226][ T7983] bond0 (unregistering): Released all slaves [ 740.811280][ T9460] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 740.874253][ T9460] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 740.897106][ T9460] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 740.933037][ T9460] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 741.056236][ T9416] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 741.147554][ T9583] chnl_net:caif_netlink_parms(): no params data found [ 741.421841][ T9583] bridge0: port 1(bridge_slave_0) entered blocking state [ 741.456940][ T9583] bridge0: port 1(bridge_slave_0) entered disabled state [ 741.464288][ T9583] bridge_slave_0: entered allmulticast mode [ 741.492502][ T9583] bridge_slave_0: entered promiscuous mode [ 741.568161][ T9583] bridge0: port 2(bridge_slave_1) entered blocking state [ 741.575468][ T9583] bridge0: port 2(bridge_slave_1) entered disabled state [ 741.612742][ T9583] bridge_slave_1: entered allmulticast mode [ 741.634354][ T9583] bridge_slave_1: entered promiscuous mode [ 741.731960][ T9460] 8021q: adding VLAN 0 to HW filter on device bond0 [ 741.748675][ T9583] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 741.764885][ T9583] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 741.854280][ T9460] 8021q: adding VLAN 0 to HW filter on device team0 [ 741.879877][ T9583] team0: Port device team_slave_0 added [ 741.890750][ T9583] team0: Port device team_slave_1 added [ 741.921263][ T42] bridge0: port 1(bridge_slave_0) entered blocking state [ 741.928446][ T42] bridge0: port 1(bridge_slave_0) entered forwarding state [ 741.951793][ T9583] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 741.959425][ T9583] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 741.987685][ T9583] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 742.008171][ T42] bridge0: port 2(bridge_slave_1) entered blocking state [ 742.015322][ T42] bridge0: port 2(bridge_slave_1) entered forwarding state [ 742.040019][ T9583] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 742.049486][ T9583] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 742.086256][ T9583] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 742.148299][ T7983] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 742.251024][ T7983] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 742.286048][ T9416] veth0_vlan: entered promiscuous mode [ 742.359323][ T9583] hsr_slave_0: entered promiscuous mode [ 742.371559][ T9583] hsr_slave_1: entered promiscuous mode [ 742.380104][ T9583] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 742.393650][ T9583] Cannot create hsr debugfs directory [ 742.427219][ T7983] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 742.483504][ T9416] veth1_vlan: entered promiscuous mode [ 742.510374][ T7983] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 742.630761][ T9416] veth0_macvtap: entered promiscuous mode [ 742.666537][ T9416] veth1_macvtap: entered promiscuous mode [ 742.842622][ T9416] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 742.853900][ T9416] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 742.863941][ T9416] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 742.874577][ T9416] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 742.885742][ T9416] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 742.918728][ T9416] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 742.929602][ T9416] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 742.943800][ T9416] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 742.954368][ T9416] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 742.967878][ T9416] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 743.030385][ T9416] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 743.039746][ T9416] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 743.049194][ T9416] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 743.063376][ T9416] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 743.109185][ T9460] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 743.444137][ T41] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 743.476147][ T41] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 743.609083][ T1104] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 743.625099][ T1104] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 743.968019][ T9460] veth0_vlan: entered promiscuous mode [ 744.781838][ T9460] veth1_vlan: entered promiscuous mode [ 746.505658][ T9460] veth0_macvtap: entered promiscuous mode [ 746.661862][ T9583] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 746.908198][ T9460] veth1_macvtap: entered promiscuous mode [ 746.995761][ T9583] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 747.212705][ T9583] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 747.429801][ T9583] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 747.451634][ T1283] ieee802154 phy0 wpan0: encryption failed: -22 [ 747.461046][ T1283] ieee802154 phy1 wpan1: encryption failed: -22 [ 748.545370][ T7983] hsr_slave_0: left promiscuous mode [ 748.551263][ T7983] hsr_slave_1: left promiscuous mode [ 748.562621][ T7983] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 748.570948][ T7983] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 748.579500][ T7983] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 748.587176][ T7983] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 748.715367][ T7983] bridge_slave_1: left allmulticast mode [ 748.741998][ T7983] bridge_slave_1: left promiscuous mode [ 748.827010][ T9770] ufs: You didn't specify the type of your ufs filesystem [ 748.827010][ T9770] [ 748.827010][ T9770] mount -t ufs -o ufstype=sun|sunx86|44bsd|ufs2|5xbsd|old|hp|nextstep|nextstep-cd|openstep ... [ 748.827010][ T9770] [ 748.827010][ T9770] >>>WARNING<<< Wrong ufstype may corrupt your filesystem, default is ufstype=old [ 748.858011][ T9770] ufs: ufstype=old is supported read-only [ 748.867428][ T9770] ufs: ufs_fill_super(): bad magic number [ 749.236247][ T7983] bridge0: port 2(bridge_slave_1) entered disabled state [ 749.314334][ T7983] bridge_slave_0: left allmulticast mode [ 749.380970][ T7983] bridge_slave_0: left promiscuous mode [ 749.387872][ T7983] bridge0: port 1(bridge_slave_0) entered disabled state [ 749.591458][ T9779] loop6: detected capacity change from 0 to 512 [ 749.599424][ T7983] veth1_macvtap: left promiscuous mode [ 749.605233][ T7983] veth0_macvtap: left promiscuous mode [ 749.612858][ T7983] veth1_vlan: left promiscuous mode [ 749.618617][ T7983] veth0_vlan: left promiscuous mode [ 749.665206][ T9779] EXT4-fs (loop6): mounting ext2 file system using the ext4 subsystem [ 750.102348][ T9779] EXT4-fs error (device loop6): ext4_orphan_get:1398: inode #15: comm syz.6.890: iget: bogus i_mode (5) [ 750.419421][ T9779] EXT4-fs error (device loop6): ext4_orphan_get:1403: comm syz.6.890: couldn't read orphan inode 15 (err -117) [ 750.495259][ T9779] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 750.507963][ T9779] ext2 filesystem being mounted at /5/file2 supports timestamps until 2038-01-19 (0x7fffffff) [ 751.804842][ T7983] team0 (unregistering): Port device team_slave_1 removed [ 751.862776][ T7983] team0 (unregistering): Port device team_slave_0 removed [ 751.953091][ T7983] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 752.034257][ T7983] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 752.622363][ T9416] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 753.151720][ T7983] bond0 (unregistering): Released all slaves [ 753.297927][ T9460] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 753.314118][ T9460] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 753.325492][ T9460] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 753.337349][ T9460] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 753.369090][ T9460] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 753.405881][ T9460] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 753.420898][ T9460] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 753.432817][ T9460] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 753.443404][ T9460] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 753.455311][ T9460] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 753.513078][ T9460] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 753.522129][ T9460] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 753.531843][ T9460] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 753.540930][ T9460] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 753.797400][ T59] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 753.805268][ T59] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 753.861980][ T9583] 8021q: adding VLAN 0 to HW filter on device bond0 [ 753.905426][ T59] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 753.924147][ T9583] 8021q: adding VLAN 0 to HW filter on device team0 [ 753.933306][ T59] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 753.971999][ T1148] bridge0: port 1(bridge_slave_0) entered blocking state [ 753.979235][ T1148] bridge0: port 1(bridge_slave_0) entered forwarding state [ 754.016251][ T42] bridge0: port 2(bridge_slave_1) entered blocking state [ 754.023503][ T42] bridge0: port 2(bridge_slave_1) entered forwarding state [ 754.133442][ T9583] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 754.166728][ T9583] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 757.844682][ T9583] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 760.597308][ T9853] loop5: detected capacity change from 0 to 1024 [ 760.723512][ T9853] EXT4-fs (loop5): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 760.819987][ T9853] ext4 filesystem being mounted at /4/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 761.722538][ T9583] veth0_vlan: entered promiscuous mode [ 761.737115][ T9865] iommufd_mock iommufd_mock1: Adding to iommu group 0 [ 761.995956][ T9583] veth1_vlan: entered promiscuous mode [ 762.179965][ T9583] veth0_macvtap: entered promiscuous mode [ 762.991061][ T9583] veth1_macvtap: entered promiscuous mode [ 763.013334][ T9583] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 763.024161][ T9583] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 763.035260][ T9583] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 763.048582][ T9583] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 763.067159][ T9583] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 763.173807][ T9583] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 763.186872][ T9583] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 763.195386][ T9460] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 763.198951][ T9583] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 763.215078][ T9583] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 763.226363][ T9583] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 763.237131][ T9583] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 763.247010][ T9583] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 763.266753][ T9583] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 763.341977][ T9583] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 763.404812][ T9583] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 763.490276][ T9583] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 763.594727][ T9583] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 764.863540][ T9583] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 764.906023][ T9888] loop5: detected capacity change from 0 to 1024 [ 766.442100][ T42] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 766.732373][ T59] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 766.768866][ T42] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 766.786694][ T59] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 842.172806][ T1283] ieee802154 phy0 wpan0: encryption failed: -22 [ 872.226608][ C1] rcu: INFO: rcu_preempt detected stalls on CPUs/tasks: [ 872.233683][ C1] rcu: Tasks blocked on level-0 rcu_node (CPUs 0-1): P9416/1:b..l P9660/1:b..l [ 872.243279][ C1] rcu: (detected by 1, t=10502 jiffies, g=44209, q=548 ncpus=2) [ 872.251011][ C1] task:udevd state:R running task stack:23624 pid:9660 ppid:5138 flags:0x00004002 [ 872.263117][ C1] Call Trace: [ 872.266433][ C1] [ 872.269379][ C1] __schedule+0x1553/0x45a0 [ 872.274019][ C1] ? asan.module_dtor+0x20/0x20 [ 872.278921][ C1] ? ep_poll_callback+0x5cb/0xa40 [ 872.284063][ C1] ? preempt_schedule+0xc0/0xd0 [ 872.288943][ C1] preempt_schedule_common+0x82/0xc0 [ 872.294250][ C1] preempt_schedule+0xc0/0xd0 [ 872.298949][ C1] ? schedule_preempt_disabled+0x20/0x20 [ 872.304609][ C1] ? lockdep_hardirqs_on_prepare+0x40d/0x770 [ 872.310611][ C1] ? lock_chain_count+0x20/0x20 [ 872.315472][ C1] preempt_schedule_thunk+0x1a/0x30 [ 872.320703][ C1] _raw_spin_unlock_irqrestore+0x111/0x120 [ 872.326524][ C1] ? _raw_spin_unlock+0x40/0x40 [ 872.331469][ C1] ? __wake_up_common+0x2a4/0x4e0 [ 872.336514][ C1] __wake_up_sync_key+0x12c/0x1a0 [ 872.341556][ C1] ? __wake_up_locked_key_bookmark+0x20/0x20 [ 872.347556][ C1] ? __lock_acquire+0x7d40/0x7d40 [ 872.352598][ C1] ? sock_def_readable+0xad/0x420 [ 872.357733][ C1] sock_def_readable+0x1e1/0x420 [ 872.362687][ C1] unix_dgram_sendmsg+0x106c/0x16d0 [ 872.367930][ C1] ? unix_dgram_poll+0x680/0x680 [ 872.372887][ C1] ? tomoyo_socket_sendmsg_permission+0x1e1/0x2f0 [ 872.379326][ C1] ? aa_sock_msg_perm+0x94/0x150 [ 872.384278][ C1] ? bpf_lsm_socket_sendmsg+0x9/0x10 [ 872.389574][ C1] ? security_socket_sendmsg+0x80/0xa0 [ 872.395050][ C1] sock_write_iter+0x2df/0x420 [ 872.399828][ C1] ? sock_read_iter+0x3e0/0x3e0 [ 872.404718][ C1] ? common_file_perm+0x198/0x1f0 [ 872.409764][ C1] vfs_write+0x46c/0x990 [ 872.414026][ C1] ? file_end_write+0x250/0x250 [ 872.418885][ C1] ? call_rcu+0x68c/0x950 [ 872.423243][ C1] ? __se_sys_sendmsg+0x1da/0x2b0 [ 872.428284][ C1] ? __fdget_pos+0x1d8/0x330 [ 872.432905][ C1] ksys_write+0x150/0x260 [ 872.437249][ C1] ? __ia32_sys_read+0x90/0x90 [ 872.442026][ C1] ? lockdep_hardirqs_on+0x98/0x150 [ 872.447241][ C1] do_syscall_64+0x55/0xa0 [ 872.451767][ C1] ? clear_bhb_loop+0x40/0x90 [ 872.456452][ C1] ? clear_bhb_loop+0x40/0x90 [ 872.461138][ C1] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 872.467044][ C1] RIP: 0033:0x7f51bfea7407 [ 872.471493][ C1] RSP: 002b:00007ffccb19a900 EFLAGS: 00000202 ORIG_RAX: 0000000000000001 [ 872.479928][ C1] RAX: ffffffffffffffda RBX: 00007f51c0562880 RCX: 00007f51bfea7407 [ 872.487933][ C1] RDX: 0000000000000000 RSI: 00007ffccb19a9a7 RDI: 000000000000000a [ 872.495931][ C1] RBP: 000000000000000a R08: 0000000000000000 R09: 0000000000000000 [ 872.503914][ C1] R10: 0000000000000000 R11: 0000000000000202 R12: 00007f51c05626e8 [ 872.511898][ C1] R13: 0000000000000000 R14: 0000000000000000 R15: 000056112df6a560 [ 872.519897][ C1] [ 872.522921][ C1] task:syz-executor state:R running task stack:21256 pid:9416 ppid:9415 flags:0x00004002 [ 872.533718][ C1] Call Trace: [ 872.537003][ C1] [ 872.539945][ C1] __schedule+0x1553/0x45a0 [ 872.544490][ C1] ? asan.module_dtor+0x20/0x20 [ 872.549441][ C1] ? mark_lock+0x94/0x320 [ 872.553878][ C1] ? lockdep_hardirqs_on_prepare+0x40d/0x770 [ 872.559891][ C1] ? preempt_schedule_irq+0xb4/0x150 [ 872.565193][ C1] preempt_schedule_irq+0xbf/0x150 [ 872.570407][ C1] ? preempt_schedule_notrace+0x110/0x110 [ 872.576150][ C1] ? rcu_irq_exit_check_preempt+0xdf/0x210 [ 872.581973][ C1] irqentry_exit+0x67/0x70 [ 872.586408][ C1] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 872.592410][ C1] RIP: 0010:__sanitizer_cov_trace_pc+0x0/0x60 [ 872.598489][ C1] Code: 00 0f 0b 0f 1f 80 00 00 00 00 f3 0f 1e fa 53 48 89 fb e8 13 00 00 00 48 8b 3d 2c cd 03 0d 48 89 de 5b e9 93 57 57 00 cc cc cc 0f 1e fa 48 8b 04 24 65 48 8b 0d 00 a1 7c 7e 65 8b 15 01 a1 7c [ 872.618108][ C1] RSP: 0018:ffffc90003a27720 EFLAGS: 00000246 [ 872.624191][ C1] RAX: ffffffff8a76f770 RBX: 1ffff92000744f06 RCX: ffff88805ce79e00 [ 872.632182][ C1] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 872.640169][ C1] RBP: ffffc90003a27832 R08: ffff88805ce79e00 R09: 0000000000000002 [ 872.648150][ C1] R10: 0000000000000003 R11: 0000000000000000 R12: ffffc90003a27838 [ 872.656138][ C1] R13: 0000000000002c80 R14: 0000000000000000 R15: 0000000000000000 [ 872.664123][ C1] ? xas_find+0x2c0/0xab0 [ 872.668475][ C1] xas_find+0x2ce/0xab0 [ 872.672668][ C1] ? folio_contains+0x29f/0x5c0 [ 872.677541][ C1] find_lock_entries+0x1e9/0xfe0 [ 872.682513][ C1] ? find_lock_entries+0x126/0xfe0 [ 872.687745][ C1] ? find_get_entries+0x8f0/0x8f0 [ 872.692793][ C1] shmem_undo_range+0x2b3/0x1b20 [ 872.697765][ C1] ? shmem_truncate_range+0xa0/0xa0 [ 872.703001][ C1] ? inode_wait_for_writeback+0x1e3/0x230 [ 872.708733][ C1] ? __lock_acquire+0x7d40/0x7d40 [ 872.713771][ C1] ? do_raw_spin_lock+0x11f/0x2c0 [ 872.718824][ C1] shmem_evict_inode+0x245/0x9e0 [ 872.723788][ C1] ? inode_wait_for_writeback+0x1e3/0x230 [ 872.729523][ C1] ? shmem_free_in_core_inode+0xb0/0xb0 [ 872.735082][ C1] ? sb_clear_inode_writeback+0x360/0x360 [ 872.740815][ C1] ? do_raw_spin_lock+0x11f/0x2c0 [ 872.745858][ C1] ? bit_waitqueue+0x30/0x30 [ 872.750476][ C1] ? do_raw_spin_unlock+0x121/0x230 [ 872.755690][ C1] ? shmem_free_in_core_inode+0xb0/0xb0 [ 872.761243][ C1] evict+0x4ca/0x8d0 [ 872.765157][ C1] ? proc_nr_inodes+0x230/0x230 [ 872.770032][ C1] ? do_raw_spin_unlock+0x121/0x230 [ 872.775241][ C1] ? _raw_spin_unlock+0x28/0x40 [ 872.780101][ C1] ? iput+0x706/0x920 [ 872.784134][ C1] do_unlinkat+0x38c/0x590 [ 872.788615][ C1] ? fsnotify_link_count+0xf0/0xf0 [ 872.793742][ C1] ? getname_flags+0x20a/0x500 [ 872.798528][ C1] __x64_sys_unlink+0x49/0x50 [ 872.803215][ C1] do_syscall_64+0x55/0xa0 [ 872.807643][ C1] ? clear_bhb_loop+0x40/0x90 [ 872.812328][ C1] ? clear_bhb_loop+0x40/0x90 [ 872.817013][ C1] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 872.822911][ C1] RIP: 0033:0x7fddb5b99fa7 [ 872.827334][ C1] RSP: 002b:00007ffe7a2d41a8 EFLAGS: 00000206 ORIG_RAX: 0000000000000057 [ 872.835768][ C1] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007fddb5b99fa7 [ 872.843748][ C1] RDX: 00007ffe7a2d41d0 RSI: 00007ffe7a2d4260 RDI: 00007ffe7a2d4260 [ 872.851728][ C1] RBP: 00007ffe7a2d4260 R08: 00007ffe7a2d5260 R09: 00000000ffffffff [ 872.859708][ C1] R10: 0000000000000100 R11: 0000000000000206 R12: 00007ffe7a2d52f0 [ 872.867684][ C1] R13: 00007fddb5c0471f R14: 00000000000ba6b3 R15: 00007ffe7a2d5330 [ 872.875690][ C1] [ 872.878734][ C1] rcu: rcu_preempt kthread starved for 567 jiffies! g44209 f0x0 RCU_GP_WAIT_FQS(5) ->state=0x0 ->cpu=1 [ 872.889770][ C1] rcu: Unless rcu_preempt kthread gets sufficient CPU time, OOM is now expected behavior. [ 872.899749][ C1] rcu: RCU grace-period kthread stack dump: [ 872.905649][ C1] task:rcu_preempt state:R running task stack:26024 pid:17 ppid:2 flags:0x00004000 [ 872.916443][ C1] Call Trace: [ 872.919736][ C1] [ 872.922677][ C1] __schedule+0x1553/0x45a0 [ 872.927210][ C1] ? _raw_spin_lock_bh+0x30/0x50 [ 872.932158][ C1] ? _raw_spin_unlock_irqrestore+0xc5/0x120 [ 872.938062][ C1] ? asan.module_dtor+0x20/0x20 [ 872.942929][ C1] ? enqueue_timer+0x23d/0x550 [ 872.947752][ C1] ? __mod_timer+0x984/0xdb0 [ 872.952399][ C1] schedule+0xbd/0x170 [ 872.956505][ C1] schedule_timeout+0x188/0x2d0 [ 872.961379][ C1] ? console_conditional_schedule+0x40/0x40 [ 872.967286][ C1] ? _raw_spin_unlock_irqrestore+0x86/0x120 [ 872.973191][ C1] ? update_process_times+0x1b0/0x1b0 [ 872.978586][ C1] ? prepare_to_swait_event+0x339/0x360 [ 872.984202][ C1] rcu_gp_fqs_loop+0x313/0x1590 [ 872.989071][ C1] ? rcu_gp_init+0x1162/0x1560 [ 872.993855][ C1] ? rcu_gp_kthread+0x3b0/0x3b0 [ 872.998721][ C1] ? dyntick_save_progress_counter+0x2b0/0x2b0 [ 873.004888][ C1] ? rcu_gp_init+0x1560/0x1560 [ 873.009657][ C1] ? rcu_gp_cleanup+0xb41/0xc90 [ 873.014522][ C1] ? _raw_spin_unlock_irq+0x23/0x50 [ 873.019749][ C1] ? lockdep_hardirqs_on+0x98/0x150 [ 873.024980][ C1] rcu_gp_kthread+0x9d/0x3b0 [ 873.029701][ C1] ? rcu_report_qs_rsp+0x1a0/0x1a0 [ 873.034826][ C1] ? __kthread_parkme+0x7a/0x1c0 [ 873.039868][ C1] ? __kthread_parkme+0x162/0x1c0 [ 873.044906][ C1] kthread+0x2fa/0x390 [ 873.048996][ C1] ? rcu_report_qs_rsp+0x1a0/0x1a0 [ 873.054122][ C1] ? kthread_blkcg+0xd0/0xd0 [ 873.058737][ C1] ret_from_fork+0x48/0x80 [ 873.063178][ C1] ? kthread_blkcg+0xd0/0xd0 [ 873.067787][ C1] ret_from_fork_asm+0x11/0x20 [ 873.072601][ C1] [ 873.075699][ C1] rcu: Stack dump where RCU GP kthread last ran: [ 873.082046][ C1] CPU: 1 PID: 0 Comm: swapper/1 Not tainted syzkaller #0 [ 873.089085][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 873.099238][ C1] RIP: 0010:pv_native_safe_halt+0xf/0x10 [ 873.104891][ C1] Code: f8 22 02 c3 cc cc cc cc cc cc cc f3 0f 1e fa 0f 0b 66 2e 0f 1f 84 00 00 00 00 00 f3 0f 1e fa 66 90 0f 00 2d 33 02 44 00 fb f4 66 0f 1f 00 55 41 57 41 56 41 54 53 50 8b 2f eb 2e 41 89 de 80 [ 873.124694][ C1] RSP: 0018:ffffc90000187de0 EFLAGS: 000002c2 [ 873.130780][ C1] RAX: 87ecbfd4e89fbd00 RBX: ffffffff8162a490 RCX: 87ecbfd4e89fbd00 [ 873.138778][ C1] RDX: 0000000000000001 RSI: ffffffff8acac900 RDI: ffffffff8b1c81e0 [ 873.146856][ C1] RBP: ffffc90000187f20 R08: ffff8880b8f36b2b R09: 1ffff110171e6d65 [ 873.154839][ C1] R10: dffffc0000000000 R11: ffffed10171e6d66 R12: 1ffff110036ce780 [ 873.162903][ C1] R13: 1ffff92000030fc8 R14: 0000000000000001 R15: dffffc0000000000 [ 873.170884][ C1] FS: 0000000000000000(0000) GS:ffff8880b8f00000(0000) knlGS:0000000000000000 [ 873.179823][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 873.186423][ C1] CR2: 00007f2656286f95 CR3: 000000005defc000 CR4: 00000000003506e0 [ 873.194501][ C1] Call Trace: [ 873.197793][ C1] [ 873.200732][ C1] default_idle+0x13/0x20 [ 873.205079][ C1] default_idle_call+0x6c/0xa0 [ 873.209862][ C1] do_idle+0x1f0/0x4e0 [ 873.213948][ C1] ? idle_inject_timer_fn+0x60/0x60 [ 873.219338][ C1] ? lockdep_hardirqs_on+0x98/0x150 [ 873.224547][ C1] ? asm_sysvec_call_function_single+0x1a/0x20 [ 873.230731][ C1] cpu_startup_entry+0x43/0x60 [ 873.235509][ C1] start_secondary+0xee/0xf0 [ 873.240115][ C1] secondary_startup_64_no_verify+0x179/0x17b [ 873.246214][ C1]