last executing test programs: 17m8.446808291s ago: executing program 32 (id=996): prlimit64(0x0, 0xe, &(0x7f0000000240)={0x8, 0x248}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xffffe000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x3fffffffffffeda, 0x2, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000300)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x68042, 0xe) 13m42.870524361s ago: executing program 0 (id=1510): r0 = socket$kcm(0x10, 0x2, 0x4) sendmsg$kcm(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000340)="89000000120081ae08060cdc030000007f03e3f7000000006ee2ffca1b1f0000000004c00e72f750375ed08a56331dbf9ed7815e381ad6e747033a0093b837dc6cc01e32efaec8c7a6ec0012100001400a0c0c00bdad446b9bbc7a46e3988285dcdf12f21308f868fece01955fed0009d78f0a947ee2b49e33538afa8af9234751", 0x81}], 0x1}, 0x8000) 13m41.812688585s ago: executing program 0 (id=1513): openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, 0x0}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) pipe2$9p(0x0, 0x80000) r3 = fcntl$dupfd(0xffffffffffffffff, 0x406, 0xffffffffffffffff) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, r3, 0x0) r4 = fsopen(0x0, 0x0) fsconfig$FSCONFIG_CMD_CREATE(r4, 0x6, 0x0, 0x0, 0x0) fsmount(r4, 0x0, 0xc) r5 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) fcntl$lock(r5, 0x25, 0x0) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000300)=@bpf_lsm={0xa, 0x4, &(0x7f0000000040)=@framed={{0x66, 0xa, 0x0, 0x0, 0x0, 0x61, 0x11, 0x4c}, [@call={0x85, 0x0, 0x0, 0xa9}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x10, 0x4, &(0x7f0000000040)=ANY=[], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xd}, 0x94) 13m39.935763237s ago: executing program 0 (id=1516): ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = dup(r0) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000040)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}) write$tun(0xffffffffffffffff, &(0x7f0000000440)={@val={0x70}, @void, @eth={@broadcast, @remote, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x2c, 0x0, 0x4000, 0x0, 0x2f, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @multicast1}, {0x0, 0x6558, 0x18, 0x0, @wg=@data={0x4, 0x40000, 0x5865}}}}}}}, 0x3e) 13m39.263376939s ago: executing program 0 (id=1519): r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0xe00, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0xffffffff, {0x0, 0x0, 0x0, r2, {0x0, 0xfff1}, {0xffff, 0xffff}, {0xd, 0xf}}, [@qdisc_kind_options=@q_qfg={0x8}]}, 0x2c}}, 0x0) r3 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r5 = openat$tun(0xffffffffffffff9c, &(0x7f00000004c0), 0x0, 0x0) close(r5) socket$unix(0x1, 0x2, 0x0) r6 = socket$kcm(0x11, 0x3, 0x0) r7 = socket(0x400000000010, 0x3, 0x0) r8 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r7, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000001300)=@newtfilter={0xe8c, 0x2c, 0xd27, 0x30bd29, 0x25dfdc00, {0x0, 0x0, 0x0, r9, {0x1, 0x4}, {}, {0x8}}, [@filter_kind_options=@f_matchall={{0xd}, {0xe58, 0x2, [@TCA_MATCHALL_ACT={0xe54, 0x2, [@m_pedit={0xe50, 0x1, 0x0, 0x0, {{0xa}, {0xe24, 0x2, 0x0, 0x1, [@TCA_PEDIT_PARMS={0xe20, 0x2, {{{0x2, 0x9, 0x5, 0x6}, 0x1, 0xfb}, [{0x2, 0x9c, 0x81, 0x6, 0x2, 0x7}, {0x1, 0x6, 0x4, 0x3, 0xfffffffd, 0x81}, {0x1, 0x80000001, 0x8, 0x101, 0x3}, {0x3, 0x9, 0x0, 0x7, 0x5, 0x4}, {0xf, 0x7, 0x9, 0x51, 0x8}, {0x3, 0x4, 0xc, 0x101, 0x3, 0x84b5}, {0x9c, 0x4, 0x9, 0x2, 0x487, 0x8}, {0x1, 0x10000, 0x5, 0x4, 0x3, 0x8000}, {0x7, 0x9, 0x1ff, 0x8, 0x2, 0x7fff}, {0x439356e7, 0x609, 0x16, 0x0, 0x10000, 0x6}, {0x5, 0x3, 0x8, 0x3, 0x0, 0xffffffff}, {0x5, 0x0, 0x7, 0x7, 0x8, 0x5}, {0x5, 0x8, 0x9, 0x5, 0xfffff000, 0x7}, {0x768d, 0xcd, 0x8, 0x7, 0x5, 0x9}, {0x1, 0xfffffffb, 0x6, 0x5, 0x7ff, 0x6}, {0xfffffffb, 0x3, 0xfffffffe, 0x6, 0x2}, {0xfffff9fd, 0x9, 0xa5f, 0xa, 0x5, 0x2}, {0xffff997c, 0x9, 0x167, 0x2, 0x71, 0xa2}, {0x140, 0x2, 0xc, 0x8, 0x87, 0x60}, {0x5, 0xa, 0x2, 0x4, 0x3, 0x2000}, {0x32d, 0x8, 0x7fff, 0x4, 0x8, 0x9}, {0x8, 0x200, 0x58fe, 0x7ff, 0x4, 0x3}, {0x101, 0xd, 0x101, 0x1, 0x3, 0x8}, {0x0, 0x3, 0x1ff, 0x7437ec78, 0x2, 0x9}, {0xffffffff, 0x1, 0x9, 0x0, 0x1, 0x4}, {0xc, 0xe, 0x0, 0x3, 0x8, 0x81}, {0x3, 0x3, 0x6, 0xe, 0x0, 0x80}, {0xd, 0x0, 0x7ff, 0x0, 0x80000000, 0x2}, {0x4, 0xb, 0x6c5f1878, 0x57c4, 0x8, 0x25ff}, {0x4, 0xd, 0x1fadd976, 0x3071, 0x0, 0x1}, {0x5, 0x800, 0x3, 0x3, 0x3, 0x9}, {0x9, 0x1ff, 0x81, 0x9c, 0x1, 0x5}, {0x9, 0xd76, 0x6, 0xdc2, 0xa16a, 0x2}, {0x1ff, 0x5, 0x7, 0x2, 0x2, 0x1}, {0x1, 0x32158140, 0x0, 0x8, 0x6, 0x7}, {0xe, 0x4, 0x9000, 0x5, 0x2, 0x7f}, {0x3, 0x2ec74d53, 0x0, 0x0, 0x8, 0x2}, {0x5, 0xfff, 0xffffff13, 0x6, 0x2002, 0x6}, {0x1, 0x6, 0x3, 0x4, 0xffb, 0xc}, {0x6, 0x6, 0x1ff, 0x8, 0x7ff, 0x8001}, {0x4, 0xffffffff, 0x0, 0xfffff740, 0x4, 0x4}, {0xffff, 0x5, 0x7, 0xac, 0xf}, {0x5, 0x3, 0x6, 0x1000, 0xd8fe, 0x8001}, {0xd, 0x3, 0x80000000, 0x0, 0xffffff81, 0x7ff}, {0xfffffffb, 0x2, 0x1ff, 0xf9, 0xffff8001}, {0x0, 0x6, 0x7ffc, 0x9, 0x500, 0x7}, {0x1, 0xffffffff, 0x834, 0x7, 0x0, 0x3}, {0x7fff, 0x6, 0x0, 0x2002, 0x2, 0x8}, {0xf61, 0x101, 0x9, 0x2, 0x80000000, 0x7fff}, {0xc7, 0x1, 0x8, 0x2, 0xffff, 0x20000000}, {0x0, 0x5, 0x1, 0xffff, 0x3, 0x3}, {0x8, 0x10001, 0x9f98, 0x1, 0x8, 0x66a}, {0xfff, 0x6, 0x8, 0x80000001, 0x0, 0x7f}, {0x8, 0x6, 0x7f, 0x5, 0x3, 0xb}, {0x4, 0x4b, 0x0, 0x1, 0x7f, 0x7fffffff}, {0xfff, 0x47e4, 0x1, 0x0, 0x80000001, 0x9}, {0x3, 0x9, 0x7, 0x6, 0x3e6b7592, 0xe5}, {0x9, 0x9, 0x1, 0x9, 0x0, 0x2}, {0x8, 0x80000001, 0x7fff, 0xb2d9, 0xfffffffe, 0x8}, {0x80000001, 0x9, 0x5202, 0x2, 0x53ce, 0x3}, {0x6, 0x7, 0x8, 0x8, 0x7f, 0x80000000}, {0xfffffff9, 0x9, 0x6, 0x6, 0x9, 0x3}, {0xfffffffd, 0x8, 0x6, 0x5, 0x3, 0x8f}, {0x741, 0x0, 0x9, 0x7fffffff, 0x2, 0x200}, {0x401, 0x2, 0x8, 0x6, 0x4, 0xc6e9}, {0x1, 0x2d73, 0x3ff, 0x5, 0x9f17, 0xffffff7f}, {0x2, 0x401, 0x2b00, 0xfffff57b, 0xfffffc00, 0xd}, {0x3, 0x4, 0xc52b, 0x9, 0x5, 0xff}, {0x0, 0x4, 0x401, 0x0, 0x1, 0x9}, {0x8, 0x4, 0x1, 0x2, 0x10, 0x1}, {0xff, 0x8, 0x6, 0x5, 0xff, 0x5}, {0x2, 0xb15ce2d, 0x80000001, 0xbeab, 0x8, 0x5}, {0x3, 0x8, 0x3, 0x7, 0x8, 0x4}, {0xfff, 0x9, 0x6, 0x3, 0x100, 0x57}, {0x9, 0x5, 0x4, 0x3, 0xa, 0x2}, {0xb3, 0xe, 0x3, 0x8000, 0x7, 0x9}, {0xff, 0x7, 0x5, 0x10001, 0x6, 0x6}, {0x2, 0x8f, 0x9, 0xffffff46, 0x4, 0x80000000}, {0x9, 0x2, 0xfffffffc, 0x1, 0xd50, 0x3}, {0xd203, 0x7, 0x1, 0x10000, 0x43, 0x1ff}, {0x4, 0x3ff, 0xffffffff, 0x1, 0x5, 0x100}, {0x1ff, 0x3, 0x7ff, 0xfffffff8, 0x1ff, 0xfffffffc}, {0x7, 0x9, 0x3ff, 0x1, 0x7, 0x4}, {0x0, 0x6, 0x0, 0x9, 0xffff0001, 0xcca}, {0x7, 0x1, 0xfffffff1, 0x3ff, 0x100, 0x4}, {0x3, 0x9, 0x0, 0xed4, 0x4, 0x6}, {0x9, 0x7, 0x8001, 0x7, 0x7, 0x2}, {0x3, 0xfff, 0x9, 0x5, 0xb5, 0x3}, {0x0, 0x1, 0x1, 0x5, 0xffffff01, 0xfff}, {0x7, 0x5, 0x2, 0x2, 0x0, 0xfffff9de}, {0x5, 0xffffffff, 0xe6b, 0xb, 0xb, 0x4}, {0x1d, 0xffffff10, 0x1, 0x2, 0xff, 0x52e2}, {0x0, 0x9, 0x0, 0x7, 0xdb, 0x5}, {0x7, 0x2, 0x9, 0x8, 0xa, 0x100}, {0x81, 0x4, 0x988, 0x0, 0x0, 0x7}, {0xdc03, 0x5, 0x402c, 0xffff, 0xfffffff9, 0x4}, {0xa, 0xfffffffe, 0x1, 0x1ff, 0x1ff, 0xc1b7}, {0xa24b, 0x947d, 0x40, 0x4, 0x9, 0x2}, {0x9, 0x401, 0xa89, 0x5ef, 0x9, 0x8}, {0x4, 0x7fff, 0x0, 0x4, 0x7fffffff}, {0x3, 0xb8c, 0x6, 0x21761f6a, 0x1, 0x4}, {0xfff, 0xda, 0x1f, 0x4, 0x8, 0x2}, {0x8, 0x10, 0x100, 0x0, 0xfffffff7, 0x43}, {0xfffff000, 0x8, 0xe96, 0x9, 0x9, 0x34b0}, {0x4, 0x8, 0x8, 0x3, 0x6cf4, 0x1}, {0x3, 0x3, 0x7, 0x4, 0xbe, 0x81}, {0x4, 0x800, 0x0, 0x5, 0x8, 0xfa2f}, {0x3, 0x8d, 0x81, 0x2, 0x8, 0x6}, {0x9, 0x2, 0x6, 0x4, 0xf, 0x5}, {0x100, 0x1, 0x2, 0xffffffff, 0x9, 0x74}, {0x4, 0x4, 0x8, 0x1, 0x0, 0x3}, {0xfffffff8, 0xfffffffb, 0xffffffff, 0x62f, 0x401, 0x30564e0}, {0x9a2f, 0x800, 0x8, 0x7, 0x7}, {0x20000006, 0x2, 0x800, 0x200, 0x9, 0x3}, {0x7, 0x6, 0x8936, 0xdcb, 0x0, 0x2}, {0x6, 0x80000000, 0x8, 0xe, 0xfffffffa, 0x8de3}, {0x0, 0x9, 0x8, 0xfff, 0x6, 0x1ff}, {0x8195, 0x2, 0x1000}, {0x1, 0x5, 0xff, 0x9e0f, 0x5, 0x6}, {0x7fff, 0x6, 0x0, 0x5, 0x8000, 0x3}, {0x7ff, 0x9, 0xa, 0x6, 0x7, 0xe77}, {0x1, 0x5e12, 0x3, 0xfffffffa, 0x2, 0x80000001}, {0xffffff8c, 0x2, 0x1, 0x1, 0x10, 0x5}, {0x4, 0x7, 0x104, 0x78d, 0xffffcff9, 0x9}, {0x1, 0xe, 0x7, 0x2, 0x2, 0x207f}, {0x10, 0x5, 0xfffffffa, 0xff, 0x80000, 0xfff}, {0x1, 0x7ff, 0x696e, 0xa, 0x49d, 0xb}, {0x9bf4, 0x0, 0x5, 0x3, 0x3, 0x1000}], [{0x1, 0x1}, {0x2}, {0x5}, {0x2}, {0x2, 0x745e81639ff0f356}, {0x4}, {0x5}, {0x3, 0x1}, {0x3}, {0x2}, {0x3}, {0x4, 0x1}, {0x0, 0x1}, {0x2}, {0x2}, {}, {0x3, 0x1}, {0x0, 0x1}, {0x0, 0x1}, {0x5, 0x1}, {0x3, 0x1}, {0x1}, {0x2, 0x1}, {0x2}, {0x3, 0x1}, {0x2}, {0x5}, {0x2}, {0x1, 0x1}, {0x1}, {0x1, 0x1}, {0x5}, {0x4}, {0x5, 0x1}, {0x5, 0x1}, {}, {0x4, 0x1}, {0x3, 0x1}, {0x4, 0x1}, {0x1, 0x1}, {0x5}, {0xa}, {0x3}, {0x3}, {0x2, 0x1}, {0x3}, {0x4, 0x1}, {0x2, 0x1}, {}, {0x0, 0x1}, {0x2}, {0x4}, {0x4, 0x1}, {0x4}, {0x4}, {0x2, 0x1}, {0x2, 0x1}, {0x5, 0x3}, {0x4, 0x1}, {0x1}, {0x4}, {0x0, 0x1}, {0x2}, {0x1, 0x1}, {0x3, 0x1}, {0x5}, {0x3, 0x1}, {0x1, 0x1}, {0x5, 0x1}, {0x0, 0x1}, {0x2, 0x1}, {0x3, 0x1}, {0x0, 0x1}, {0x0, 0x1}, {0x3}, {0x6}, {0xa}, {0x3, 0x1}, {}, {0x2, 0x1}, {0x1}, {0x4}, {0x5}, {0x3}, {0x3, 0x1}, {0x4}, {0x0, 0x1}, {0x5, 0x1}, {0x6}, {0x2}, {0xb82e57098c7a44ef}, {0x3, 0x1}, {0x1}, {0x0, 0x1}, {0x5}, {0x1, 0x1}, {0x5}, {0x0, 0x1}, {0x4}, {0x4}, {0x0, 0x1}, {0x2}, {0x4, 0x1}, {0x1, 0x1}, {0x1, 0x1}, {0x2}, {0x3}, {0x1, 0x1}, {}, {0x4}, {0x3}, {0x3}, {0x1}, {0x5}, {0x3, 0x1}, {0x4}, {0x3, 0x1}, {0x0, 0x1}, {0x1}, {0x4, 0x1}, {0x1}, {0x5, 0x1}, {0x4}, {0x0, 0x1}, {0x3}, {0x1}, {0x0, 0x1}, {0x4}], 0x1}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}]}]}}]}, 0xe8c}, 0x1, 0x0, 0x0, 0x10}, 0x0) sendmsg$kcm(r6, &(0x7f0000002900)={&(0x7f0000000500)=@xdp={0x2c, 0x8, r4, 0x40}, 0x80, &(0x7f00000000c0)=[{&(0x7f0000000380)="da", 0x14}], 0x1}, 0x4000880) 13m33.703167321s ago: executing program 4 (id=1527): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000040)={0x3, 0x5, &(0x7f0000000140)=@framed={{0x18, 0x2, 0x0, 0x0, 0x2}, [@call={0x85, 0x0, 0x0, 0x20}, @call={0x85, 0x0, 0x0, 0xf}]}, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x20}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r0, 0x0, 0xe, 0x0, &(0x7f00000001c0)="e0b9547ed387dbe9abc89b6f5bec", 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x50) 13m33.470738318s ago: executing program 4 (id=1529): ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = dup(r0) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000040)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}) write$tun(0xffffffffffffffff, &(0x7f0000000440)={@val={0x70}, @void, @eth={@broadcast, @remote, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x2c, 0x0, 0x4000, 0x0, 0x2f, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @multicast1}, {0x0, 0x6558, 0x18, 0x0, @wg=@data={0x4, 0x40000, 0x5865}}}}}}}, 0x3e) 13m28.881517288s ago: executing program 4 (id=1533): r0 = socket$inet6(0xa, 0x1, 0x8010000000000084) sendmmsg$inet6(r0, &(0x7f0000000240)=[{{&(0x7f0000000480)={0xa, 0x4e24, 0x3, @private2={0xfc, 0x2, '\x00', 0x1}, 0x8e}, 0x1c, &(0x7f0000000d80)=[{&(0x7f0000000c40)="ea", 0x1}], 0x1}}], 0x1, 0x40) shutdown(r0, 0x1) r1 = socket(0x2, 0x80805, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x10, &(0x7f0000000380)=[@in={0x2, 0x4e20, @initdev={0xac, 0x1e, 0x0, 0x0}}]}, &(0x7f0000000180)=0x10) getsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f0000000380)={0x0, @in6={{0xa, 0x4e22, 0x100000, @empty, 0x2}}, 0xad7, 0x2, 0x5, 0x3, 0x50, 0x1, 0x6}, &(0x7f0000000440)=0x9c) 13m28.638362266s ago: executing program 0 (id=1535): prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = openat$vimc0(0xffffffffffffff9c, &(0x7f0000000a40), 0x2, 0x0) ioctl$VIDIOC_G_CROP(r3, 0xc014563b, &(0x7f0000001b40)={0xe, {0x1, 0x8, 0x8001, 0x8}}) 13m28.349582106s ago: executing program 4 (id=1537): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_CONNECT(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000dc0)={0x34, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}, @NL80211_ATTR_BG_SCAN_PERIOD={0x6, 0x98, 0x9}, @NL80211_ATTR_DISABLE_VHT={0x4}]}, 0x34}}, 0x0) 13m27.465435634s ago: executing program 4 (id=1541): r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040), 0x802, 0x0) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x3) r1 = openat(0xffffffffffffff9c, 0x0, 0x101042, 0x15) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r5, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x4) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r5, 0x6, 0x14, &(0x7f0000000280)=0x1, 0x4) connect$inet6(r5, 0x0, 0x0) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r5, 0x6, 0x23, 0x0, &(0x7f0000000000)) pwrite64(r1, 0x0, 0x0, 0xe7c) ioctl$EXT4_IOC_GET_ES_CACHE(r1, 0xc020662a, 0x0) geteuid() write$uinput_user_dev(r0, &(0x7f00000017c0)={'syz0\x00', {0x0, 0x0, 0x0, 0x9}, 0x30, [0x0, 0x0, 0x0, 0x9, 0x0, 0x7ff, 0x0, 0x0, 0x0, 0x1, 0x7, 0x0, 0x0, 0x0, 0x5, 0x1, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x101], [0x0, 0x0, 0x8, 0xb16, 0x0, 0x200000, 0x0, 0x0, 0x0, 0x0, 0x7ff, 0x0, 0x0, 0x0, 0x2, 0x0, 0x9, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xd, 0x1000, 0x0, 0xf, 0x0, 0x2, 0x0, 0x0, 0x0, 0xfffffffe, 0x4, 0x1, 0x0, 0x0, 0x0, 0xfffffffd, 0xfffffffd, 0x0, 0xfffffff9, 0x0, 0x80000000, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, 0xe], [0x7, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xddc, 0x0, 0x0, 0xfffffffc, 0xff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0xe, 0x1, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7ffffff, 0x0, 0x0, 0xffffffff, 0x2, 0x0, 0x0, 0x1, 0x0, 0xfffffffc, 0x0, 0x7, 0x4], [0xfffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000, 0x0, 0x80, 0x0, 0x3, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x200000, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, 0xfffffffe, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x4, 0x0, 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0x4, 0x0, 0x5]}, 0x45c) ioctl$XFS_IOC_GETVERSION(r0, 0x80087601, &(0x7f0000000000)) r6 = syz_open_dev$dri(&(0x7f0000000000), 0x1, 0x400) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r6, 0xc04064a0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000380)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_GETCONNECTOR(r6, 0xc05064a7, &(0x7f0000000280)={&(0x7f00000059c0), 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r7}) 13m26.436316578s ago: executing program 4 (id=1544): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=@newqdisc={0x30, 0x24, 0x4ee4e6a52ff56541, 0x70bd27, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_htb={{0x8}, {0x4}}]}, 0x30}}, 0x20040084) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) r5 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000380)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000800)=@newtfilter={0x94, 0x2c, 0xd27, 0x170bd2c, 0x2, {0x0, 0x0, 0x0, r6, {0x0, 0x10}, {}, {0x8, 0xffe0}}, [@filter_kind_options=@f_flow={{0x9}, {0x64, 0x2, [@TCA_FLOW_MODE={0x8, 0x2, 0x1}, @TCA_FLOW_KEYS={0x8, 0x1, 0x1a29d}, @TCA_FLOW_ACT={0x50, 0x9, 0x0, 0x1, [@m_csum={0x4c, 0x1, 0x0, 0x0, {{0x9}, {0x20, 0x2, 0x0, 0x1, [@TCA_CSUM_PARMS={0x1c, 0x1, {{0x8, 0x0, 0x20000000, 0xb2, 0xa8}, 0x38}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x1, 0x1}}}}]}]}}]}, 0x94}, 0x1, 0x0, 0x0, 0x4894}, 0x2) close(r4) socket(0x10, 0x3, 0x0) ioctl$SIOCSIFHWADDR(r4, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r7 = socket$kcm(0x11, 0x3, 0x0) setsockopt$sock_attach_bpf(r7, 0x107, 0xf, &(0x7f0000000600), 0x56) sendmsg$kcm(r7, &(0x7f0000000280)={&(0x7f0000000540)=@xdp={0x2c, 0x0, r6, 0x42}, 0x80, &(0x7f0000000440)=[{&(0x7f00000001c0)="27030200dc0f14000e0000000001002500000088125ce882cbf400930bf4533f00429c65112a093bbf60b85bcb06", 0x2e}], 0x1}, 0x4005) 13m23.316074219s ago: executing program 0 (id=1549): socket(0x23, 0x80805, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, 0x0, 0x0) socket$netlink(0x10, 0x3, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ethtool(&(0x7f0000000240), 0xffffffffffffffff) r0 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)={0x38, 0x1403, 0xc23, 0x70bd2e, 0x25dfdbff, "", [{{0x9, 0x2, 'syz1\x00'}, {0x8, 0x41, 'siw\x00'}, {0x14, 0x33, 'syz_tun\x00'}}]}, 0x38}, 0x1, 0x0, 0x0, 0x14f7325d9d03b00}, 0x4000) 13m11.168926627s ago: executing program 33 (id=1544): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=@newqdisc={0x30, 0x24, 0x4ee4e6a52ff56541, 0x70bd27, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_htb={{0x8}, {0x4}}]}, 0x30}}, 0x20040084) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) r5 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000380)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000800)=@newtfilter={0x94, 0x2c, 0xd27, 0x170bd2c, 0x2, {0x0, 0x0, 0x0, r6, {0x0, 0x10}, {}, {0x8, 0xffe0}}, [@filter_kind_options=@f_flow={{0x9}, {0x64, 0x2, [@TCA_FLOW_MODE={0x8, 0x2, 0x1}, @TCA_FLOW_KEYS={0x8, 0x1, 0x1a29d}, @TCA_FLOW_ACT={0x50, 0x9, 0x0, 0x1, [@m_csum={0x4c, 0x1, 0x0, 0x0, {{0x9}, {0x20, 0x2, 0x0, 0x1, [@TCA_CSUM_PARMS={0x1c, 0x1, {{0x8, 0x0, 0x20000000, 0xb2, 0xa8}, 0x38}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x1, 0x1}}}}]}]}}]}, 0x94}, 0x1, 0x0, 0x0, 0x4894}, 0x2) close(r4) socket(0x10, 0x3, 0x0) ioctl$SIOCSIFHWADDR(r4, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r7 = socket$kcm(0x11, 0x3, 0x0) setsockopt$sock_attach_bpf(r7, 0x107, 0xf, &(0x7f0000000600), 0x56) sendmsg$kcm(r7, &(0x7f0000000280)={&(0x7f0000000540)=@xdp={0x2c, 0x0, r6, 0x42}, 0x80, &(0x7f0000000440)=[{&(0x7f00000001c0)="27030200dc0f14000e0000000001002500000088125ce882cbf400930bf4533f00429c65112a093bbf60b85bcb06", 0x2e}], 0x1}, 0x4005) 13m7.70760453s ago: executing program 34 (id=1549): socket(0x23, 0x80805, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, 0x0, 0x0) socket$netlink(0x10, 0x3, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ethtool(&(0x7f0000000240), 0xffffffffffffffff) r0 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)={0x38, 0x1403, 0xc23, 0x70bd2e, 0x25dfdbff, "", [{{0x9, 0x2, 'syz1\x00'}, {0x8, 0x41, 'siw\x00'}, {0x14, 0x33, 'syz_tun\x00'}}]}, 0x38}, 0x1, 0x0, 0x0, 0x14f7325d9d03b00}, 0x4000) 12m24.278105818s ago: executing program 7 (id=1575): r0 = bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x6, 0x21, &(0x7f00000006c0)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000000}, {{0x18, 0x1, 0x1, 0x0, r0}}, {}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x8}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x1}}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x800005}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x1}}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x35, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x40, 0x1ff) socket$inet6(0xa, 0x80000, 0xe6a2) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r2 = getpid() sched_setscheduler(r2, 0x1, &(0x7f00000000c0)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) syz_pidfd_open(r2, 0x0) connect$unix(r3, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r5 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r5, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) socket$netlink(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000240), 0xffffffffffffffff) sendmsg$NL80211_CMD_CHANNEL_SWITCH(0xffffffffffffffff, &(0x7f0000001640)={0x0, 0x0, &(0x7f0000001600)={&(0x7f0000000000)={0x2c, r6, 0x1, 0x70bd2d, 0x25dfdbfd, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_CH_SWITCH_COUNT={0x8, 0xb7, 0xf6}, @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x980}]]}, 0x2c}, 0x1, 0x0, 0x0, 0x8040}, 0x44000) setsockopt$IP6T_SO_SET_REPLACE(r1, 0x29, 0x40, &(0x7f0000000f00)=@raw={'raw\x00', 0x3c1, 0x3, 0x2d8, 0x118, 0x1170, 0x1170, 0x0, 0x1170, 0x208, 0x1398, 0x1398, 0x208, 0x1398, 0x3, 0x0, {[{{@ipv6={@ipv4={'\x00', '\xff\xff', @multicast2}, @private2={0xfc, 0x2, '\x00', 0x1}, [0xffffffff, 0xff000000, 0xffffffff], [0x0, 0x0, 0xffffff00, 0xffffff00], 'veth0_vlan\x00', 'veth0_to_hsr\x00', {}, {}, 0x2e, 0x0, 0x0, 0x46}, 0x0, 0xf8, 0x118, 0x0, {}, [@common=@inet=@socket2={{0x28}, 0x1}, @inet=@rpfilter={{0x28}, {0x6}}]}, @unspec=@NOTRACK={0x20}}, {{@uncond, 0x0, 0xa8, 0xf0}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'snmp\x00'}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x338) 12m23.202592823s ago: executing program 7 (id=1649): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = openat$vimc0(0xffffffffffffff9c, &(0x7f0000000a40), 0x2, 0x0) sync_file_range(r3, 0xb8a, 0xd4, 0xd) write(0xffffffffffffffff, 0x0, 0x0) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000000340)={'tunl0\x00', &(0x7f0000000240)={'erspan0\x00', 0x0, 0x7, 0x20, 0x400, 0x7ff, {{0x14, 0x4, 0x3, 0x2, 0x50, 0x66, 0x0, 0x7, 0x29, 0x0, @loopback, @empty, {[@rr={0x7, 0x3, 0xdb}, @timestamp_addr={0x44, 0x4, 0x18, 0x1, 0xd}, @cipso={0x86, 0x34, 0x3, [{0x5, 0x2}, {0x1, 0xb, "6d85eadc92850842da"}, {0x2, 0x2}, {0x7, 0xe, "5d10a492b7003c0792a6d706"}, {0x7, 0x9, "d1fc4b374772c7"}, {0x5, 0x4, "cdaa"}, {0x2, 0x4, "b57e"}]}]}}}}}) setsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x1b, &(0x7f0000000380)={@loopback, r4}, 0x14) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f00000003c0)=ANY=[@ANYBLOB], &(0x7f0000003ff6)='GPL\x00', 0x5, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f00000000c0), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x94) syz_emit_vhci(&(0x7f0000000480)=@HCI_EVENT_PKT={0x4, @hci_ev_cmd_complete={{0xe, 0x4}, @HCI_OP_LE_SET_EXT_ADV_ENABLE={{0x9}, 0x3d}}}, 0x7) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) socket$inet_smc(0x2b, 0x1, 0x0) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000480)='./file0\x00', 0x10, &(0x7f0000000000)={[{@grpjquota, 0x4a}, {@debug}, {@jqfmt_vfsold}, {@noquota}, {@bsdgroups}, {@usrjquota, 0x22}, {@nojournal_checksum}, {@errors_remount}], [], 0x2c}, 0x84, 0x4c2, &(0x7f0000000980)="$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") r5 = openat(0xffffffffffffff9c, &(0x7f0000000240)='.\x00', 0x800, 0x0) ioctl$FS_IOC_REMOVE_ENCRYPTION_KEY(r5, 0x8004587d, &(0x7f00000001c0)={@id={0x2, 0x0, @c}}) ioctl$FS_IOC_SET_ENCRYPTION_POLICY(r5, 0x800c6613, &(0x7f0000000080)=@v2={0x2, @adiantum, 0x8, '\x00', @a}) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)=ANY=[], 0x48}, 0x1, 0x0, 0x0, 0x800}, 0x0) sendmmsg$inet(r6, 0x0, 0x0, 0x0) 12m21.543136918s ago: executing program 7 (id=1651): syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000280)={0x18, 0x0, 0x0, &(0x7f0000000100)='syzkaller\x00'}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x0, 0x0) recvmmsg(r1, &(0x7f0000000040), 0x80002c1, 0x2, 0x0) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x5}, 0x38) bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f0000000200)={0x0, 0x0, 0x0, &(0x7f0000000b00)="4155eeb476bb994a7adbf9ced4cff73ffcc565c90d1d14d488c98904e0d534423e707c", 0x3}, 0x38) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f000000c280)={&(0x7f0000000600)=ANY=[@ANYBLOB], 0xac}, 0x1, 0x0, 0x0, 0x4008855}, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000cc0)={0x0, 0x0, &(0x7f0000000ac0)={&(0x7f0000000bc0)=ANY=[@ANYBLOB="14000000100001f500000000000000000100000a14000000020a497f75241d4e1deb0000050000061400000011"], 0x3c}, 0x1, 0x0, 0x0, 0x2004c040}, 0xc050) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x1) mount$9p_virtio(&(0x7f00000001c0), &(0x7f0000000480)='./file0\x00', 0x0, 0x8c, &(0x7f0000000c00)=ANY=[@ANYBLOB="56c78e3c733d"]) r3 = socket$inet6_sctp(0xa, 0x1, 0x84) dup(r3) r4 = io_uring_setup(0x4126, &(0x7f0000000c40)={0x0, 0xc09, 0x0, 0x0, 0x1000000}) io_uring_register$IORING_REGISTER_RING_FDS(r4, 0x13, &(0x7f0000001bc0), 0x2) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r5, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000f80)=@newqdisc={0x24, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {}, {0xffff, 0xffff}, {0x0, 0x8}}}, 0x24}}, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'veth0\x00'}) 12m5.662566177s ago: executing program 35 (id=1651): syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000280)={0x18, 0x0, 0x0, &(0x7f0000000100)='syzkaller\x00'}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x0, 0x0) recvmmsg(r1, &(0x7f0000000040), 0x80002c1, 0x2, 0x0) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x5}, 0x38) bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f0000000200)={0x0, 0x0, 0x0, &(0x7f0000000b00)="4155eeb476bb994a7adbf9ced4cff73ffcc565c90d1d14d488c98904e0d534423e707c", 0x3}, 0x38) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f000000c280)={&(0x7f0000000600)=ANY=[@ANYBLOB], 0xac}, 0x1, 0x0, 0x0, 0x4008855}, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000cc0)={0x0, 0x0, &(0x7f0000000ac0)={&(0x7f0000000bc0)=ANY=[@ANYBLOB="14000000100001f500000000000000000100000a14000000020a497f75241d4e1deb0000050000061400000011"], 0x3c}, 0x1, 0x0, 0x0, 0x2004c040}, 0xc050) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x1) mount$9p_virtio(&(0x7f00000001c0), &(0x7f0000000480)='./file0\x00', 0x0, 0x8c, &(0x7f0000000c00)=ANY=[@ANYBLOB="56c78e3c733d"]) r3 = socket$inet6_sctp(0xa, 0x1, 0x84) dup(r3) r4 = io_uring_setup(0x4126, &(0x7f0000000c40)={0x0, 0xc09, 0x0, 0x0, 0x1000000}) io_uring_register$IORING_REGISTER_RING_FDS(r4, 0x13, &(0x7f0000001bc0), 0x2) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r5, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000f80)=@newqdisc={0x24, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {}, {0xffff, 0xffff}, {0x0, 0x8}}}, 0x24}}, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'veth0\x00'}) 9m51.964928757s ago: executing program 8 (id=2038): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r1) r2 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), r2) sendmsg$TIPC_CMD_ENABLE_BEARER(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={0x0, 0x38}}, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000440)={'syzkaller0\x00', @multicast}) r3 = socket$unix(0x1, 0x1, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000340)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000006c0)=@newqdisc={0x3c, 0x24, 0x4ee4e6a52ff56541, 0xffffffff, 0x0, {0x0, 0x0, 0x0, r5, {0x0, 0xb}, {0xffff, 0xffff}, {0x0, 0x3}}, [@qdisc_kind_options=@q_cake={{0x9}, {0xc, 0x2, [@TCA_CAKE_ATM={0x8, 0x4, 0x1}]}}]}, 0x3c}}, 0x20008804) ioctl$SIOCSIFHWADDR(r1, 0x8922, &(0x7f0000002280)={'syzkaller0\x00', @random="640000004ec6"}) 9m50.465978046s ago: executing program 8 (id=2043): syz_open_procfs$userns(0x0, &(0x7f00000045c0)) openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x1, 0x0) openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x42, 0x0) openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) socket$unix(0x1, 0x5, 0x0) socket$packet(0x11, 0x3, 0x300) socket$can_bcm(0x1d, 0x2, 0x2) syz_open_dev$tty20(0xc, 0x4, 0x1) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$sock_inet_SIOCADDRT(0xffffffffffffffff, 0x890b, &(0x7f0000000000)={0x4000000, {0x2, 0x4e21, @loopback}, {0x2, 0x0, @remote}, {0x2, 0x4e23, @multicast1}, 0x1d7, 0x0, 0x0, 0x0, 0xfff8, 0x0, 0x4, 0x6}) sendmsg$NL80211_CMD_CONNECT(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)=ANY=[@ANYRES32, @ANYRES16=0x0, @ANYRES8=r0], 0x1c}, 0x1, 0x0, 0x0, 0x20000844}, 0x24018807) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1400000007"], 0x50) pwrite64(0xffffffffffffffff, &(0x7f0000000000), 0x0, 0x7ffffffe) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r1, &(0x7f0000000040)={0x1f, 0xffff, 0x3}, 0x6) write$binfmt_misc(r1, &(0x7f0000000000), 0xd) 9m49.946012793s ago: executing program 8 (id=2046): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000540)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a80000000060a0b0400000000000000000200fffe540004802800018007000100637400001c0002800800014000000002080002400000000e05000300010000002800018007000100637400001c0002800800024000000011080004400000000c05000300010000000900010073797a30000000000900020073797a320000000014000000110001"], 0xa8}, 0x1, 0x0, 0x0, 0x840}, 0x2000c0c2) 9m49.042165703s ago: executing program 8 (id=2051): syz_mount_image$ext4(&(0x7f0000000080)='ext2\x00', &(0x7f0000000380)='./file0\x00', 0x280801f, &(0x7f0000000200)={[{@min_batch_time={'min_batch_time', 0x3d, 0x10}}]}, 0xff, 0x52a, &(0x7f0000000c40)="$eJzs3c9vG1kdAPDvTOw2abM4CxxgJWDFLkorWCfZ0G3EoS0S4lYJVO4lJG4UxYmrxGmbqIJU/AFICAESFzhxQeLAEQn1yo1LJXpHgEAIWrhUKgyyPS5uYjtB+IdIPh/pxfNmxvN9z848vzczmgngzHo7Ii5FRJZl2eWIKOXz0zzFQSs11nv+7OFKIyWRZbf+mkSSz2tv63z+ejF/22Se/0ZyNO7O3v7GcrVa2c7zc/XN5GX26zy3VtlaXFz4YOnq0pWl+YHUcyYirn3pj9//zk+/fO1Xn7v/u9t/vvTNVgVbOusxSK2qF199Fg2FiNgeRrAxKTRr2HJlzGUBAKC/Rn//wxHx6Yi4HKWYaPbmTmBy2CUDAAAABiW7Ph0vk9b5PwAAAOB0SiNiOpK0nF/vOx1pWi63ruH9aFxIq7Wd+mez0qvjBTNRTO+sVyvz+bUDM1FMGvmF/Brbdv79Q/nFiHgzIr5Xmmrmyyu16upYj3wAAADA2XHx0Pj/H6XW+B8AAAA4ZWbGXQAAAABg6Iz/AQAA4PQz/gcAAIBT7Ss3bzZS1n7+9eq9vd2N2r33Vis7G+XN3ZWJqG3fLa/VamvNe/ZtHre9aq129/Oxtftgrl7Zqc/t7O3f3qztbtVvr3tiIAAAAIzLm596/DSJiIMvTKURkSUdy4oR2UTnyoXRlw8YnvS/WfkPwysHMHoT/RY6Yg+nmi49nF3FcRcAGLvj2oGeQ4HfdGY+NLDyAAAAgzf78cdPo3X+v5kazuXLknEWDBi6/Px/0tjXb4y7MMBI9Tv/79wgnG7O/8HZVezXA3AAAE699AS7+snO/x9yvjOTZUdXeOP4wgEAAAMz3UxJWv5FaxwwHWlaLrd65jNRTO6sVyvz+ZW9vy0VzzfyC813Jg4PAAAAAAAAAAAAAAAAAAAAAAAAAMAJZVkSWQ9T+dPBei0HAAAA/j9EpH9K8ud/zZbene44NNB+elep8edcRNz/0a0fPFiu17cXIs4lf3s1v/7DfP77YziAAQAAABzRHqe3x/EAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAMEjPnz1caadRxv3LFyNipiN+Enn8Qkw2XyejGBEX/p5EoeN9SURMDCD+waOI+Fi3+ieNYsVMXorD8dOImBpz/IsDiA9n2eNG+3Oj2/6XxtvN1+77XyFP/6sj7V9H/Hb7N9Gj/Xuj2wbTo7PeevLzuZ7xH0W8Veje/rTjJz3iv3PCOn79a/v7vZZlP4mY7fr7k7wWay4p3J3b2dt/b31zea2yVtlaXFz4YOnq0pWl+bk769VK/rdrjO9+4pf/6lf/CxGTvdrffvV/t3NDL3rX/59PHjz7SMRBl0XF+HGWXXqn7+/v9cPx2799n8m/7kZ+tj190Jru9MmflXuWbepRxGqPz/+Y77/Lf1p3l7/67d+fdF0AYPh29vY3lqvVynbXiVbfov86w5iYGGEsE8OfmIrBbGfyJNtZjn7rtDuxI6j7t/JQI/zAX2QD22DvNiMZRcMEAAAM3H86/eMuCQAAAAAAAAAAAAAAAAAAAJxdr9/0K4nDtwGLAdxO7HDMbjdCBgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAYt38HAAD//xaYwkc=") r0 = syz_clone(0x0, 0x0, 0x1d, 0x0, 0x0, 0x0) r1 = syz_open_procfs(0x0, 0x0) fchdir(r1) mount(0x0, &(0x7f0000000080)='.\x00', &(0x7f0000000000)='proc\x00', 0x0, 0x0) r2 = syz_open_procfs(r0, &(0x7f0000000040)='cmdline\x00') pread64(r2, 0x0, 0x0, 0x4) 9m47.554441731s ago: executing program 8 (id=2055): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, 0x0, 0x0) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, 0x0}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000240)={0x8, 0x248}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x0, 0x0) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xffffe000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000840)=@abs={0x0, 0x0, 0x4e20}, 0x6e) recvmmsg(r2, &(0x7f00000000c0), 0x3fffffffffffeda, 0x2, 0x0) syz_open_procfs(0x0, 0x0) r3 = socket(0x2000000000000021, 0x2, 0x10000000000002) connect$rxrpc(r3, &(0x7f0000000140)=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x8, @multicast2}}, 0x24) sendmmsg(r3, &(0x7f0000000180)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="18000000000000001001000001"], 0x18, 0xe000}, 0x5}], 0x1, 0x0) recvmmsg(r3, &(0x7f0000000d00), 0xf000, 0x10002, 0x0) 9m45.806510969s ago: executing program 8 (id=2059): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r0, &(0x7f0000000040), 0x80002c1, 0x2, 0x0) mbind(&(0x7f00001fa000/0x2000)=nil, 0x2000, 0x1, 0x0, 0x0, 0x0) r2 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r2, 0x11b, 0x4, &(0x7f0000000080)={&(0x7f0000000000)=""/59, 0x304000, 0x800, 0x0, 0x2}, 0x20) 9m30.983100673s ago: executing program 36 (id=2059): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r0, &(0x7f0000000040), 0x80002c1, 0x2, 0x0) mbind(&(0x7f00001fa000/0x2000)=nil, 0x2000, 0x1, 0x0, 0x0, 0x0) r2 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r2, 0x11b, 0x4, &(0x7f0000000080)={&(0x7f0000000000)=""/59, 0x304000, 0x800, 0x0, 0x2}, 0x20) 4m28.473272418s ago: executing program 1 (id=3021): r0 = fsopen(&(0x7f0000000000)='cgroup2\x00', 0x1) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) r1 = fsmount(r0, 0x0, 0x0) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000200)={@cgroup=r1, 0x2b, 0x0, 0x50d6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40) bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x19, 0x3, &(0x7f00000003c0)=ANY=[@ANYBLOB="180000000100"/15], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_sockopt=0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = socket$inet(0xa, 0x801, 0x84) socket$inet_sctp(0x2, 0x800000000000001, 0x84) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) connect$inet(r2, &(0x7f0000004cc0)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) listen(r2, 0x8) accept4(r2, 0x0, 0x0, 0x0) 4m27.328033474s ago: executing program 1 (id=3025): setresgid(0xee00, 0xffffffffffffffff, 0x0) openat$fuse(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) syz_mount_image$fuse(&(0x7f0000002040), &(0x7f0000000000)='./file0\x00', 0x0, &(0x7f0000000280)=ANY=[], 0x0, 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x40, 0x1ff) socket$inet6(0xa, 0x80000, 0xe6a2) socket$inet6_tcp(0xa, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f00000000c0)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) bind$netlink(0xffffffffffffffff, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) execveat(0xffffffffffffff9c, 0x0, 0x0, 0x0, 0x0) bind$inet6(0xffffffffffffffff, 0x0, 0x0) utimensat(0xffffffffffffff9c, &(0x7f0000000340)='./file0\x00', 0x0, 0x0) 4m26.251627118s ago: executing program 1 (id=3028): r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040), 0x802, 0x0) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x3) r1 = openat(0xffffffffffffff9c, 0x0, 0x101042, 0x15) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r5, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x4) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r5, 0x6, 0x14, &(0x7f0000000280)=0x1, 0x4) connect$inet6(r5, 0x0, 0x0) mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x12, r5, 0x604ab000) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r5, 0x6, 0x23, 0x0, &(0x7f0000000000)) pwrite64(r1, 0x0, 0x0, 0xe7c) ioctl$EXT4_IOC_GET_ES_CACHE(r1, 0xc020662a, 0x0) geteuid() write$uinput_user_dev(r0, &(0x7f00000017c0)={'syz0\x00', {0x0, 0x0, 0x0, 0x9}, 0x30, [0x0, 0x0, 0x0, 0x9, 0x0, 0x7ff, 0x0, 0x0, 0x0, 0x1, 0x7, 0x0, 0x0, 0x0, 0x5, 0x1, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x101], [0x0, 0x0, 0x8, 0xb16, 0x0, 0x200000, 0x0, 0x0, 0x0, 0x0, 0x7ff, 0x0, 0x0, 0x0, 0x2, 0x0, 0x9, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xd, 0x1000, 0x0, 0xf, 0x0, 0x2, 0x0, 0x0, 0x0, 0xfffffffe, 0x4, 0x1, 0x0, 0x0, 0x0, 0xfffffffd, 0xfffffffd, 0x0, 0xfffffff9, 0x0, 0x80000000, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, 0xe], [0x7, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xddc, 0x0, 0x0, 0xfffffffc, 0xff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0xe, 0x1, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7ffffff, 0x0, 0x0, 0xffffffff, 0x2, 0x0, 0x0, 0x1, 0x0, 0xfffffffc, 0x0, 0x7, 0x4], [0xfffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000, 0x0, 0x80, 0x0, 0x3, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x200000, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, 0xfffffffe, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x4, 0x0, 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0x4, 0x0, 0x5]}, 0x45c) ioctl$XFS_IOC_GETVERSION(r0, 0x80087601, &(0x7f0000000000)) r6 = syz_open_dev$dri(&(0x7f0000000000), 0x1, 0x400) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r6, 0xc04064a0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000380), 0x0}) ioctl$DRM_IOCTL_MODE_GETCONNECTOR(r6, 0xc05064a7, &(0x7f0000000280)={&(0x7f00000059c0), 0x0, 0x0, 0x0}) 4m24.986066858s ago: executing program 1 (id=3030): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$IPVS_CMD_SET_INFO(r1, 0x0, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000480)=ANY=[@ANYBLOB="4000000010001fe2080000880100000000000000a306ac95a9131984ea261b1c7ce4bf7096be7e706d105f9f78e201af92017abfbe74a3bd24dddb488775a3fd23a976f3f1b3654d3d9e6f9bc977cef8775f47886edf16ae9399ced473300693bdaa3153c5ef28585f1a459322ae6bb4d45a1566f2776da91351474e22f99f92aaf421d77d751a1e6b08ca126aa8bb0b800c75c189a153f0721ae93533366c70558d3308ec052d5b4106ff1c", @ANYRES32=0x0, @ANYBLOB="00000000000000001800128008000100", @ANYRES32=r2, @ANYBLOB], 0x40}, 0x1, 0x0, 0x0, 0x48095}, 0x0) sendmsg$NFT_MSG_GETRULE(r1, &(0x7f0000000400)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000380)={&(0x7f00000002c0)={0x30, 0x7, 0xa, 0x801, 0x0, 0x0, {0x7, 0x0, 0xa}, [@NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_RULE_POSITION_ID={0x8, 0xa, 0x1, 0x0, 0x3}, @NFTA_RULE_ID={0x8, 0x9, 0x1, 0x0, 0x1}]}, 0x30}}, 0x4040001) socket$nl_route(0x10, 0x3, 0x0) r3 = socket$inet_tcp(0x2, 0x1, 0x0) r4 = socket$packet(0x11, 0x2, 0x300) socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000340)={'macsec0\x00'}) socket$nl_route(0x10, 0x3, 0x0) setsockopt$packet_add_memb(r4, 0x107, 0x1, 0x0, 0x0) bind$inet(r3, &(0x7f0000000280)={0x2, 0x4e21, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r3, 0x6, 0xd, &(0x7f0000000040)='htcp', 0x4) connect$inet(r3, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) r5 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000740)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x40000, 0x25dfdbfb, {0x0, 0x0, 0x0, r6, {0x0, 0xb}, {0xffff, 0xffff}, {0x3, 0xfff3}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c, 0x2, {{0x6, 0x6b7, 0x80, 0x0, 0x1, 0x91b1}}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x4000400}, 0x24000000) socket(0x400000000010, 0x3, 0x0) r7 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r7, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)=@newqdisc={0x54, 0x10, 0x1, 0x0, 0x0, {0x6, 0x0, 0x8100, 0x0, {0xc3}, {}, {0xe, 0xc}}, [@TCA_RATE={0x6}, @TCA_STAB={0x28, 0x8, 0x0, 0x1, [{{0x1c, 0x11, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}}, {0x6, 0x1b, [0x0]}}]}]}, 0x54}}, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet(r3, &(0x7f0000000900)="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", 0xffffff5d, 0x12, 0x0, 0x0) socket$pppl2tp(0x18, 0x1, 0x1) recvfrom$inet(r3, &(0x7f0000000080), 0xffffffffffffffa9, 0xc9100120, 0x0, 0x1500) 4m23.047312799s ago: executing program 1 (id=3035): socketpair(0x1e, 0x80005, 0x0, &(0x7f0000000000)={0x0, 0x0}) close(r0) setsockopt$sock_attach_bpf(r1, 0x10f, 0x87, &(0x7f0000000180), 0x127) recvmmsg$unix(r1, &(0x7f0000001480)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000940)}}], 0x1, 0x40000100, 0x0) 4m22.277550373s ago: executing program 1 (id=3038): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, 0x0, 0x10) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = fsopen(0x0, 0x0) fsmount(r1, 0x1, 0x7) fsconfig$FSCONFIG_CMD_CREATE(r1, 0x8, 0x0, 0x0, 0x0) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x5) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000540)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file1\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f0000000480), 0x400034f, 0x2, 0x0) quotactl$Q_SYNC(0xffffffff80000102, 0x0, 0x0, 0x0) sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000280)=ANY=[], 0x80}}, 0x0) setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x5, 0x0, 0x0) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000840)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x2, &(0x7f00000003c0)={[{@usrjquota}, {@abort}, {@nombcache}, {@noload}, {@init_itable}, {@max_batch_time={'max_batch_time', 0x3d, 0x1}}, {@barrier_val={'barrier', 0x3d, 0xc5}}, {@inode_readahead_blks={'inode_readahead_blks', 0x3d, 0x4000000}}, {@jqfmt_vfsold}, {@nobarrier}]}, 0xfa, 0x48d, &(0x7f0000000e00)="$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") mkdirat(0xffffffffffffff9c, &(0x7f0000001dc0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0) symlinkat(&(0x7f0000000140)='./file0\x00', 0xffffffffffffff9c, &(0x7f0000000240)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') openat(0xffffffffffffff9c, &(0x7f0000000440)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x181341, 0x84) 4m7.518151416s ago: executing program 37 (id=3038): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, 0x0, 0x10) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = fsopen(0x0, 0x0) fsmount(r1, 0x1, 0x7) fsconfig$FSCONFIG_CMD_CREATE(r1, 0x8, 0x0, 0x0, 0x0) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x5) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000540)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file1\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f0000000480), 0x400034f, 0x2, 0x0) quotactl$Q_SYNC(0xffffffff80000102, 0x0, 0x0, 0x0) sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000280)=ANY=[], 0x80}}, 0x0) setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x5, 0x0, 0x0) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000840)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x2, &(0x7f00000003c0)={[{@usrjquota}, {@abort}, {@nombcache}, {@noload}, {@init_itable}, {@max_batch_time={'max_batch_time', 0x3d, 0x1}}, {@barrier_val={'barrier', 0x3d, 0xc5}}, {@inode_readahead_blks={'inode_readahead_blks', 0x3d, 0x4000000}}, {@jqfmt_vfsold}, {@nobarrier}]}, 0xfa, 0x48d, &(0x7f0000000e00)="$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") mkdirat(0xffffffffffffff9c, &(0x7f0000001dc0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0) symlinkat(&(0x7f0000000140)='./file0\x00', 0xffffffffffffff9c, &(0x7f0000000240)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') openat(0xffffffffffffff9c, &(0x7f0000000440)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x181341, 0x84) 24.101915443s ago: executing program 3 (id=3846): socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000b40)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = socket$inet6_mptcp(0xa, 0x1, 0x106) listen(r3, 0x9) pselect6(0x40, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x800}, 0x0, &(0x7f0000000240)={0x1f, 0x0, 0xffffffffffffffff}, &(0x7f0000000280)={0x0, 0x3938700}, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) r5 = syz_open_dev$tty1(0xc, 0x4, 0x3) ioctl$TIOCL_UNBLANKSCREEN(r5, 0x541c, &(0x7f0000000040)) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x11, 0x4, 0x4, 0x2, 0x10, 0x1, 0xfffffffc}, 0x50) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0x15, &(0x7f0000000440)=@framed={{0x18, 0x0, 0x0, 0x0, 0x100}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r4}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x86}}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, r6}, {}, {}, {0x4}, {0x6, 0x0, 0xa}, {}, {}, {0x85, 0x0, 0x0, 0x33}}]}, &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x38, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000b80)={r7, 0x2000012, 0xe, 0x0, &(0x7f0000000c40)="63eced8e46dc3f2ddf33c9e9b986", 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0xb}, 0x50) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r8 = getpid() sched_setscheduler(r8, 0x2, &(0x7f00000005c0)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xf94d8000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r9, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r10, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r9, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r11 = socket$inet6(0xa, 0x3, 0x4) connect$inet6(r11, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_IPV6_XFRM_POLICY(r11, 0x29, 0x23, 0x0, 0x0) sendmmsg(r11, &(0x7f0000000480), 0x2e9, 0xffe0) getsockname$inet6(r2, &(0x7f0000000080)={0xa, 0x0, 0x0, @private1}, &(0x7f00000001c0)=0x1c) ioctl$sock_SIOCBRDELBR(r0, 0x89a1, &(0x7f0000000040)) ioctl$SIOCSIFHWADDR(r1, 0x8b04, &(0x7f0000000000)={'wlan1\x00', @random="020000000100"}) 22.307045969s ago: executing program 3 (id=3849): r0 = socket$inet6(0xa, 0x2, 0x0) r1 = dup(r0) bind$unix(r1, &(0x7f00000001c0)=@abs={0xa, 0x2}, 0x6e) ioctl$EXT4_IOC_SWAP_BOOT(r0, 0x6611) syz_mount_image$f2fs(&(0x7f0000001080), &(0x7f0000000000)='./file1\x00', 0x2800000, &(0x7f0000000380)=ANY=[@ANYBLOB="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"], 0x2, 0x5515, &(0x7f0000001300)="$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") prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) rt_tgsigqueueinfo(r2, 0x0, 0x1d, 0x0) r5 = socket$inet_tcp(0x2, 0x1, 0x0) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFULNL_MSG_CONFIG(r6, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x20000010}, 0x4000) syz_emit_ethernet(0x86, &(0x7f00000004c0)=ANY=[@ANYBLOB="aaaaaaaaaaaabbbbbbbbbbbb08004700007800000000000190780a010102ac1414aa040090c5d909293e27846873c44578010000004700000000000000001100000000000000000000440c0001ac1414bb4e210000443c0001e000000100000000ac141414140000000000000000000000000000000000000000001324c881eb57e2778cbf1fb23d5d83c8a3d8a688ffc994783b5d1a047ee3cfe2c6d5111eaf6dc4b6a7c3ce0af82c0fa142420b0ab57548da8550b2848d07a530354447dbd4fae1973fe1aeec25485ea1f1e168b7c80dc2edacecf3f8623c84cc055aeba3254b24c9f77dba19ae1e4d6d68d84954af1bbd9144be00"/266], 0x0) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r5, 0x6, 0x14, 0x0, 0x0) openat$vcsa(0xffffffffffffff9c, &(0x7f0000000240), 0x80, 0x0) sendto(r5, 0x0, 0x0, 0x40008c1, 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000001c0)={&(0x7f0000000300)=ANY=[@ANYBLOB="9feb010018000000000000001c0000001c00000007000000000000000000000200000000020000000000000e010000000000000000002e5f30e900f8c5b91c5905e9b2"], &(0x7f0000000100)=""/189, 0x3b, 0xbd, 0x1}, 0x28) syz_mount_image$exfat(0x0, &(0x7f00000000c0)='./file0\x00', 0xe1c00, 0x0, 0x4, 0x0, &(0x7f0000000000)) renameat2(0xffffffffffffff9c, &(0x7f0000000480)='./file0\x00', 0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x4) getsockname$inet6(r1, 0x0, &(0x7f0000000280)) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000280)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fffffff}]}) 17.038554735s ago: executing program 3 (id=3862): timer_create(0xfffffffffffffff4, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000280)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f0000000080)=0x2) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeea, 0x8031, 0xffffffffffffffff, 0x28f43000) socket$inet_tcp(0x2, 0x1, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f0000000180)=@abs={0x0, 0x0, 0x1}, 0x6e) sendmmsg$unix(r1, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) capset(&(0x7f0000000000)={0x20080522}, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x81, 0xffffffff}) mmap(&(0x7f0000ff7000/0x7000)=nil, 0x7000, 0x2000001, 0x50, r0, 0xc7bb4000) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000001880)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0xffa3}, 0x48) 15.560427461s ago: executing program 6 (id=3869): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x25104000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) syz_init_net_socket$nfc_llcp(0x27, 0x1, 0x1) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000280)={&(0x7f0000000080)=ANY=[@ANYBLOB="9feb0100180000000000000024000000240000000c000000000000000000000200000000070000000000000803000000000000000000000d000000000000305f2e"], 0x0, 0x44}, 0x28) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x8, 0x6, &(0x7f0000000300)=ANY=[@ANYBLOB="b4210000000000007311530000000000000000b7000000000000009500c200000000009500001200000000000000000088ceb58e970befec77eec6ad88edd6a19e207f6e0f5ce8de7e6745cc0c79baa0349ab7be60b37f6ca8f01c0bad59b28310992e2538fa1ecc0ef82360a2f74e018089319e24fb95f2927dd631568c9cf98e20c0b63ff62f7c73e8741f78525386787ddd943bdccaed0b08fc92a9"], 0x0, 0x4, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @cgroup_skb}, 0x94) openat$fuse(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(r1, 0x8983, &(0x7f0000000000)={0x0, 'erspan0\x00', {0x4}, 0x40}) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) execveat(0xffffffffffffff9c, 0x0, 0x0, 0x0, 0x0) setxattr$system_posix_acl(&(0x7f0000002a00)='.\x00', 0x0, &(0x7f0000000100)=ANY=[], 0x24, 0x0) listxattr(&(0x7f0000000040)='./bus\x00', 0x0, 0x0) 15.476599354s ago: executing program 5 (id=3870): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000680), 0x901800, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000040)={0x3, 0x2, 0x3000, 0x1000, &(0x7f0000feb000/0x1000)=nil}) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000027c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x2000401}, 0x28) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x400000000008d}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r2, 0x1, &(0x7f0000000240)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x4000087, 0x2, 0x0) r5 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$SO_TIMESTAMPING(r5, 0x1, 0x25, &(0x7f0000000200)=0x474c, 0x4) bind$inet(r5, &(0x7f0000000240)={0x2, 0x0, @local}, 0x6f) connect$inet(r5, &(0x7f0000000480)={0x2, 0x0, @multicast1}, 0x10) sendmmsg(r5, &(0x7f0000007fc0), 0x800001d, 0x300) setsockopt$inet_int(r5, 0x0, 0x7, &(0x7f0000000280)=0x1f5, 0x4) 15.241058431s ago: executing program 9 (id=3871): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = openat$vimc0(0xffffffffffffff9c, &(0x7f0000000a40), 0x2, 0x0) ioctl$VIDIOC_G_CROP(r3, 0xc014563b, &(0x7f0000001b40)={0xe, {0x1, 0x8, 0x8001, 0x8}}) sync_file_range(r3, 0xb8a, 0xd4, 0xd) write(0xffffffffffffffff, 0x0, 0x0) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000000340)={'tunl0\x00', &(0x7f0000000240)={'erspan0\x00', 0x0, 0x7, 0x20, 0x400, 0x7ff, {{0x14, 0x4, 0x3, 0x2, 0x50, 0x66, 0x0, 0x7, 0x29, 0x0, @loopback, @empty, {[@rr={0x7, 0x3, 0xdb}, @timestamp_addr={0x44, 0x4, 0x18, 0x1, 0xd}, @cipso={0x86, 0x34, 0x3, [{0x5, 0x2}, {0x1, 0xb, "6d85eadc92850842da"}, {0x2, 0x2}, {0x7, 0xe, "5d10a492b7003c0792a6d706"}, {0x7, 0x9, "d1fc4b374772c7"}, {0x5, 0x4, "cdaa"}, {0x2, 0x4, "b57e"}]}]}}}}}) setsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x1b, &(0x7f0000000380)={@loopback, r4}, 0x14) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f00000003c0)=ANY=[], &(0x7f0000003ff6)='GPL\x00', 0x5, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f00000000c0), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x94) syz_emit_vhci(&(0x7f0000000480)=@HCI_EVENT_PKT={0x4, @hci_ev_cmd_complete={{0xe, 0x4}, @HCI_OP_LE_SET_EXT_ADV_ENABLE={{0x9}, 0x3d}}}, 0x7) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) socket$inet_smc(0x2b, 0x1, 0x0) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000480)='./file0\x00', 0x10, &(0x7f0000000000)={[{@grpjquota, 0x4a}, {@debug}, {@jqfmt_vfsold}, {@noquota}, {@bsdgroups}, {@usrjquota, 0x22}, {@nojournal_checksum}, {@errors_remount}], [], 0x2c}, 0x84, 0x4c2, &(0x7f0000000980)="$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") r5 = openat(0xffffffffffffff9c, &(0x7f0000000240)='.\x00', 0x800, 0x0) ioctl$FS_IOC_REMOVE_ENCRYPTION_KEY(r5, 0x8004587d, &(0x7f00000001c0)={@id={0x2, 0x0, @c}}) ioctl$FS_IOC_SET_ENCRYPTION_POLICY(r5, 0x800c6613, &(0x7f0000000080)=@v2={0x2, @adiantum, 0x8, '\x00', @a}) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)=ANY=[], 0x48}, 0x1, 0x0, 0x0, 0x800}, 0x0) sendmmsg$inet(r6, 0x0, 0x0, 0x0) 8.771624114s ago: executing program 6 (id=3872): socketpair$unix(0x1, 0x5, 0x0, 0x0) pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) splice(0xffffffffffffffff, 0x0, r1, 0x0, 0xf3a, 0x0) close(r0) write(0xffffffffffffffff, 0x0, 0x0) mmap(&(0x7f00009fd000/0x600000)=nil, 0x600000, 0x100000d, 0x6031, 0xffffffffffffffff, 0xa1b92000) r2 = socket$rds(0x15, 0x5, 0x0) bind$rds(r2, &(0x7f0000000840)={0x2, 0x0, @loopback}, 0x10) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x0) sendmsg$rds(r2, &(0x7f0000000080)={&(0x7f0000000040)={0x2, 0x4, @local}, 0x10, 0x0, 0x0, &(0x7f0000000240)=[@rdma_args={0x48, 0x114, 0x1, {{0x5, 0x8}, {0x0}, &(0x7f0000000440)=[{0x0}], 0x1, 0x20}}], 0x48, 0x80}, 0x0) 8.456975984s ago: executing program 2 (id=3873): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$team(&(0x7f00000044c0), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000004700)={'team0\x00', 0x0}) r3 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r3, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) sendmsg$TEAM_CMD_OPTIONS_SET(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=ANY=[@ANYRES16=r1, @ANYBLOB="050427bd7000fedbdf250100000008000100", @ANYRES32=r2, @ANYBLOB="f400028061000100240001006e6f746966795f70656572735f696e74657276616c00000000000000000000000500030003000000080004"], 0x110}, 0x1, 0x0, 0x0, 0x4000401}, 0x2404c080) 8.450360915s ago: executing program 9 (id=3874): setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x34, &(0x7f0000000040)=0x101, 0xff12) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x1, &(0x7f0000000240)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x4000087, 0x2, 0x0) r3 = openat(0xffffffffffffff9c, 0x0, 0x40042, 0x29) r4 = syz_open_procfs(0x0, &(0x7f0000004600)='map_files\x00') fchdir(r4) munmap(&(0x7f0000002000/0x1000)=nil, 0x1000) r5 = open(&(0x7f0000000140)='.\x00', 0x0, 0x112) getdents(r5, &(0x7f0000001fc0)=""/184, 0xb8) r6 = syz_open_procfs(0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0xa000)=nil, 0xa000, 0xd3283d0368e269b3, 0x8031, r6, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r8, 0x1, 0x1a, &(0x7f0000000240)={0x3, &(0x7f0000000000)=[{0x30, 0x0, 0x3, 0x5ae9}, {0x20, 0x7f, 0x6, 0xffff700c}, {0x6, 0x0, 0xa1, 0x1000}]}, 0x10) r9 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r9, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000700)=ANY=[@ANYBLOB="400100001000010000000008fbdbdf257f0000010000000000000000000000000000000000000001000000000000000200000000000000000000000087000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="ffffffff0000000000000000000000000000000033000000ac1e0001000000000000000000000000fdd08a3800000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ffffffffffffffff0000008056000000feffffffffffffff0000000000000000000000000000000010000000030000000000000000000000000000000a00010008000000000000000800160009000000480001007368613235362d6e656f6e00"/248], 0x140}}, 0x4008000) syz_open_dev$tty1(0xc, 0x4, 0x1) sendmmsg$inet(r7, &(0x7f0000002c40)=[{{0x0, 0x0, &(0x7f0000000e80)=[{&(0x7f0000000a80)="2a73ed35", 0x732a}], 0x1}}], 0x400000000000292, 0x0) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(r3, 0x89f0, &(0x7f0000000280)={'ip6_vti0\x00', &(0x7f00000000c0)={'ip6gre0\x00', 0x0, 0x29, 0x4, 0x3, 0x4, 0x1d, @remote, @ipv4={'\x00', '\xff\xff', @private=0xa010102}, 0x8, 0x700, 0x9, 0x6}}) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000300)={r4, r10, 0x25, 0x6, @val=@perf_event={0x49}}, 0x18) read$FUSE(r6, &(0x7f0000002600)={0x2020}, 0x2020) 8.26683333s ago: executing program 2 (id=3875): syz_genetlink_get_family_id$fou(&(0x7f0000000380), 0xffffffffffffffff) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000200)=0x7) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x300000b, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r3, &(0x7f0000000140)={0xa, 0x4e22}, 0x1c) r4 = socket$netlink(0x10, 0x3, 0x8000000004) r5 = openat$binfmt_register(0xffffffffffffff9c, &(0x7f0000000080), 0x1, 0x0) write$binfmt_register(r5, &(0x7f00000000c0)={0x3a, 'syz2', 0x3a, 'E', 0x3a, 0x800, 0x3a, '*{', 0x3a, '@', 0x3a, './bus', 0x3a, [0x4f, 0x50, 0x4f, 0x43, 0x43, 0x5]}, 0x2e) writev(r4, &(0x7f0000000080), 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f00000003c0), 0xffffffffffffffff) connect$nfc_raw(0xffffffffffffffff, &(0x7f0000000080)={0x27, 0x0, 0x1, 0x6}, 0x10) r6 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r6, 0x84, 0x1f, 0x0, 0x0) r7 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r7, 0x8933, &(0x7f0000000540)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_NEW_KEY(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000680)={&(0x7f0000000180)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYBLOB="010800040000000000000b01000008000300", @ANYRES32=r8], 0x44}}, 0x0) r9 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r9, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000005c0)=ANY=[@ANYBLOB="240000002400c7bb000000000000000000000000060002fff300000006"], 0x24}}, 0x4044000) sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000019680)=[{{&(0x7f0000000100)={0xa, 0x0, 0x0, @loopback={0x0, 0xac141414}}, 0x1c, 0x0}}], 0xfc, 0x20004855) 6.426744368s ago: executing program 2 (id=3876): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, 0x0}, 0x20000840) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) r1 = getpid() sched_setscheduler(r1, 0x1, &(0x7f0000000200)=0x7) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) bpf$MAP_CREATE(0x0, 0x0, 0x48) r4 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000740)={0x3, 0x4, 0x4, 0xa, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x3, 0x8, &(0x7f0000000940)=@framed={{0x18, 0x9}, [@tail_call={{0x18, 0x2, 0x1, 0x0, r4}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0xa000000}}]}, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r6 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000080)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x3163, '\x00', 0x0, 0x0}, 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000001c0)={{r4, 0xffffffffffffffff}, &(0x7f0000000140), &(0x7f0000000180)=r5}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x6, 0x14, &(0x7f0000001740)=@ringbuf={{0x18, 0x8}, {{0x18, 0x1, 0x1, 0x0, r6}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x1ab92b}, {0x85, 0x0, 0x0, 0x8}, {0x4}}, {{0x5, 0x0, 0x4, 0x9, 0x0, 0x1, 0x2000}}, [@tail_call={{0x18, 0x2, 0x1, 0x0, r7}}], {{0x7, 0x1, 0xb, 0x8}, {0x6, 0x0, 0x5, 0x9}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @xdp, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r8 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000080), 0x900, 0x0) ioctl$FBIO_WAITFORVSYNC(r8, 0x40044620, 0x0) clock_adjtime(0x0, 0x0) 6.385653999s ago: executing program 5 (id=3877): socket$igmp6(0xa, 0x3, 0x2) sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0x800c000) r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/schedstat\x00', 0x0, 0x0) read$FUSE(r0, &(0x7f0000003900)={0x2020, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x2020) syz_mount_image$exfat(&(0x7f0000000340), &(0x7f0000001540)='./file3\x00', 0x20010202, &(0x7f0000000140)=ANY=[@ANYBLOB='allow_utime=00000000000000000000007,dmask=00000000000000001,iocharset=macroman,allow_utime=00000000000000000000002,uid=', @ANYRES64=r4, @ANYRESOCT=r2, @ANYRESHEX=r1, @ANYRESDEC=r4, @ANYRESHEX=r3, @ANYRESOCT=r0], 0x5, 0x14f3, &(0x7f0000006b40)="$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") r5 = syz_open_procfs(0x0, &(0x7f0000001400)='mounts\x00') read$FUSE(r5, &(0x7f0000003ac0)={0x2020}, 0x2023) 5.337734132s ago: executing program 9 (id=3878): socket$unix(0x1, 0x2, 0x0) mkdir(&(0x7f0000000000)='./file0\x00', 0xfffffffffffffffe) r0 = socket$unix(0x1, 0x2, 0x0) r1 = socket$unix(0x1, 0x2, 0x0) connect$unix(r1, &(0x7f0000000180)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) sendmmsg(r1, &(0x7f0000002dc0), 0x307017fdb7a66cb, 0x0) connect$unix(r0, &(0x7f0000000180)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) r2 = dup(r0) mount$9p_fd(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000040), 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESDEC=r1, @ANYBLOB=',wfdno=', @ANYRESHEX=r2]) 5.332348382s ago: executing program 2 (id=3879): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000300), 0x88481, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r1, r2, &(0x7f0000fe8000/0x18000)=nil, &(0x7f00000002c0)=[@text64={0x40, 0x0}], 0x1, 0x43, 0x0, 0x0) ioctl$KVM_SET_CPUID(r2, 0x4008ae8a, &(0x7f0000000100)={0x1, 0x0, [{0x1, 0x5, 0x6, 0x4164, 0xc}]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 5.169673267s ago: executing program 6 (id=3880): syz_emit_ethernet(0x29, &(0x7f00000003c0)={@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}, @local, @void, {@generic={0x11, "dd8f62e9a7e4c5f5b9aa86572bc57d25877e14db25c58d76cc1947"}}}, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000300), 0x88481, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r1, r2, &(0x7f0000fe8000/0x18000)=nil, &(0x7f00000002c0)=[@text64={0x40, &(0x7f0000000200)="f7790066baa00066efc4423d3ca09e0000006846e20000efb805000000b9bc0000000f01d9c4e2b1ba8c88d9000000666666440f38826b41c7442400b8000000c7442402ffffffffff1c240f07b8d0010000df4c00df4c00c4033921820f47a753fd", 0x62}], 0x1, 0x43, 0x0, 0x0) ioctl$KVM_SET_VAPIC_ADDR(r2, 0x4008ae93, &(0x7f0000000040)=0x1000) ioctl$KVM_SET_VCPU_EVENTS(r2, 0x4400ae8f, &(0x7f0000000180)=@arm64={0xff, 0x5, 0x3, '\x00', 0x2}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 5.169562658s ago: executing program 5 (id=3881): r0 = socket$unix(0x1, 0x2, 0x0) bind$unix(r0, &(0x7f0000000080)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) mkdir(&(0x7f0000000000)='./file0\x00', 0xfffffffffffffffe) r1 = socket$unix(0x1, 0x2, 0x0) r2 = socket$unix(0x1, 0x2, 0x0) connect$unix(r2, &(0x7f0000000180)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) sendmmsg(r2, &(0x7f0000002dc0), 0x307017fdb7a66cb, 0x0) connect$unix(r1, &(0x7f0000000180)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) r3 = dup(r1) mount$9p_fd(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000040), 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESDEC=r2, @ANYBLOB=',wfdno=', @ANYRESHEX=r3]) close(0x3) 5.070683961s ago: executing program 9 (id=3882): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x25104000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) setsockopt$nfc_llcp_NFC_LLCP_MIUX(0xffffffffffffffff, 0x118, 0x1, 0xffffffffffffffff, 0xfe93) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000280)={&(0x7f0000000080)=ANY=[@ANYBLOB="9feb0100180000000000000024000000240000000c000000000000000000000200000000070000000000000803000000000000000000000d000000000000305f2e"], 0x0, 0x44}, 0x28) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x8, 0x6, &(0x7f0000000300)=ANY=[@ANYBLOB="b4210000000000007311530000000000000000b7000000000000009500c200000000009500001200000000000000000088ceb58e970befec77eec6ad88edd6a19e207f6e0f5ce8de7e6745cc0c79baa0349ab7be60b37f6ca8f01c0bad59b28310992e2538fa1ecc0ef82360a2f74e018089319e24fb95f2927dd631568c9cf98e20c0b63ff62f7c73e8741f78525386787ddd943bdccaed0b08fc92a9"], 0x0, 0x4, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @cgroup_skb}, 0x94) openat$fuse(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(r1, 0x8983, &(0x7f0000000000)={0x0, 'erspan0\x00', {0x4}, 0x40}) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) execveat(0xffffffffffffff9c, 0x0, 0x0, 0x0, 0x0) setxattr$system_posix_acl(&(0x7f0000002a00)='.\x00', 0x0, &(0x7f0000000100)=ANY=[], 0x24, 0x0) listxattr(&(0x7f0000000040)='./bus\x00', 0x0, 0x0) 5.019884612s ago: executing program 3 (id=3883): r0 = getpid() r1 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r1, 0x107, 0x12, 0x0, 0x0) setsockopt$packet_fanout(r1, 0x107, 0x12, &(0x7f0000000000)={0x400, 0x2}, 0x4) sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) r2 = socket$inet6(0xa, 0x80002, 0x0) setsockopt$sock_linger(r2, 0x1, 0x3c, &(0x7f0000000180)={0x200000000000001}, 0x8) connect$inet6(r2, &(0x7f0000002140)={0xa, 0x4e24, 0x4, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x11}}, 0x8}, 0x1c) sendmmsg$inet6(r2, &(0x7f0000003cc0)=[{{0x0, 0x0, &(0x7f0000003980), 0x171}}], 0x400000000000172, 0x4001c00) 4.925552565s ago: executing program 6 (id=3884): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = openat$vimc0(0xffffffffffffff9c, &(0x7f0000000a40), 0x2, 0x0) ioctl$VIDIOC_G_CROP(r3, 0xc014563b, &(0x7f0000001b40)={0xe, {0x1, 0x8, 0x8001, 0x8}}) sync_file_range(r3, 0xb8a, 0xd4, 0xd) write(0xffffffffffffffff, 0x0, 0x0) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000000340)={'tunl0\x00', &(0x7f0000000240)={'erspan0\x00', 0x0, 0x7, 0x20, 0x400, 0x7ff, {{0x14, 0x4, 0x3, 0x2, 0x50, 0x66, 0x0, 0x7, 0x29, 0x0, @loopback, @empty, {[@rr={0x7, 0x3, 0xdb}, @timestamp_addr={0x44, 0x4, 0x18, 0x1, 0xd}, @cipso={0x86, 0x34, 0x3, [{0x5, 0x2}, {0x1, 0xb, "6d85eadc92850842da"}, {0x2, 0x2}, {0x7, 0xe, "5d10a492b7003c0792a6d706"}, {0x7, 0x9, "d1fc4b374772c7"}, {0x5, 0x4, "cdaa"}, {0x2, 0x4, "b57e"}]}]}}}}}) setsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x1b, &(0x7f0000000380)={@loopback, r4}, 0x14) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f00000003c0)=ANY=[], &(0x7f0000003ff6)='GPL\x00', 0x5, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f00000000c0), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x94) syz_emit_vhci(&(0x7f0000000480)=@HCI_EVENT_PKT={0x4, @hci_ev_cmd_complete={{0xe, 0x4}, @HCI_OP_LE_SET_EXT_ADV_ENABLE={{0x9}, 0x3d}}}, 0x7) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) socket$inet_smc(0x2b, 0x1, 0x0) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000480)='./file0\x00', 0x10, &(0x7f0000000000)={[{@grpjquota, 0x4a}, {@debug}, {@jqfmt_vfsold}, {@noquota}, {@bsdgroups}, {@usrjquota, 0x22}, {@nojournal_checksum}, {@errors_remount}], [], 0x2c}, 0x84, 0x4c2, &(0x7f0000000980)="$eJzs3DtvHEUcAPD/rh+JSYxNeOYBMQSExcOOnWdBAwIpDRIIhEJpbCcKcRIUGymJLGwQCiXKJwBKJD4BFTQIqEC0IFqEFCE3CRRo0d7tOWff+fyIz0dyv5909uzu7M7Mzoy9M6O9ANrWQP4jidgZEb9GRF95c2mEgfKvmwuz438vzI4nkWVv/JWU4t1YmB2vRK2ct6PYGEwj0o+T2Fsn3enLV86OTU1NXiy2h2fOvTc8ffnK82fOjZ2ePD15fvT48cOHeo4dHT2yKeXszfO654ML+3afePvaq+Mnr73zw1d5frPi+PaaM/rXmUJHzZ6BGFh6L6s8tc6r/9/1VoWTzhZmhHXJW21eXV2l/t8XHXGr8vrilY9amjmgqbIsy7bV7F38XzafVUuS8gnAXSLRpaFNVf7R31jIR6qz49Xj+XZw/cUojYDyct8sPuUjnZHmY/j+8tioWR6IiJPz/3yWf2LZfAoAQDN8kz//PFd+7qh8ykfSeKgq3r3F2lB/RNwXEbsi4v7i+eXBiFLchyPikSVXn1s1/YFl27XPPz/3bLhwa5A//71QrG0tff5LK1H6O4qt3lL5u5JTZ6YmDxb3ZDC6tuXbI7WXXpxW+/blXz5dKf2Bque//JOnX3kWLPLxZ+eyCbqJsZmx2y13xfUPS1N6c7XlTxZXAvKRwe6I2LOB6+f37MwzX+6re7ByixuWv4FNWGfKvoh4ulz/87Gs/LnuIlR/fXLk2NHRI8PbY2ry4HClVdT68aerrxXBmqHE6vXfXHn937PY/su/y0cWVy77k+r12un1p3H1t09WHNNstP13J2+Wwt3FvktjMzMXRyK6k/na/aO3zr001rMkfl7+wQP1+/+uiH8/L87bGxF5I340Ih6LiP1F3h+PiCci4kCD8n//0pPv1qv7tZW/ufLyT9T9+7dS/a8/0HH2u69XSn9t9X+4FBos9kyMzdQu1y+z1gzezr0DAACAO8X+iNgZSTpUTMftjDQdGorYsTiDMj3z7KkL75+fKL8j0B9daWWmq69qPnSkmBvOt/OzRqu28+OHSvPGWZZlPaXtofELU72tLTq0vR0r9P/cH7WvtAB3m3Wto630RhtwR9r4Onq2qfkAtp73taF96f/Qvtbc/5v5JhzQEvX6/1zEzRZkBdhi9fr/Wy3IB7D1jP+hfen/0L5q+3/aknwAW+p23utvFNh1okGcpLM5ia4cSKPxtwD0R6zvgr+nEZuTw45NLWnPGup0e2xGWpGuGqezwRcxvF57w/PoW9Qk0q1tfo0D2yJilda72NjmKoErzc5Yq/8yAQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAbI7/AgAA//+7BdPO") r5 = openat(0xffffffffffffff9c, &(0x7f0000000240)='.\x00', 0x800, 0x0) ioctl$FS_IOC_REMOVE_ENCRYPTION_KEY(r5, 0x8004587d, &(0x7f00000001c0)={@id={0x2, 0x0, @c}}) ioctl$FS_IOC_SET_ENCRYPTION_POLICY(r5, 0x800c6613, &(0x7f0000000080)=@v2={0x2, @adiantum, 0x8, '\x00', @a}) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)=ANY=[], 0x48}, 0x1, 0x0, 0x0, 0x800}, 0x0) sendmmsg$inet(r6, 0x0, 0x0, 0x0) 4.837292748s ago: executing program 2 (id=3885): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$team(&(0x7f00000044c0), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000004700)={'team0\x00', 0x0}) r3 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r3, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) sendmsg$TEAM_CMD_OPTIONS_SET(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=ANY=[@ANYBLOB, @ANYRES16=r1, @ANYBLOB="050427bd7000fedbdf250100000008000100", @ANYRES32=r2, @ANYBLOB="f400028061000100240001006e6f746966795f70656572735f696e74657276616c00000000000000000000000500030003000000080004"], 0x110}, 0x1, 0x0, 0x0, 0x4000401}, 0x2404c080) 2.516059691s ago: executing program 9 (id=3886): syz_genetlink_get_family_id$fou(&(0x7f0000000380), 0xffffffffffffffff) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000200)=0x7) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x300000b, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r3, &(0x7f0000000140)={0xa, 0x4e22}, 0x1c) r4 = socket$netlink(0x10, 0x3, 0x8000000004) r5 = openat$binfmt_register(0xffffffffffffff9c, &(0x7f0000000080), 0x1, 0x0) write$binfmt_register(r5, &(0x7f00000000c0)={0x3a, 'syz2', 0x3a, 'E', 0x3a, 0x800, 0x3a, '*{', 0x3a, '@', 0x3a, './bus', 0x3a, [0x4f, 0x50, 0x4f, 0x43, 0x43, 0x5]}, 0x2e) writev(r4, &(0x7f0000000080), 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f00000003c0), 0xffffffffffffffff) connect$nfc_raw(0xffffffffffffffff, &(0x7f0000000080)={0x27, 0x0, 0x1, 0x6}, 0x10) r6 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r6, 0x84, 0x1f, 0x0, 0x0) r7 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r7, 0x8933, &(0x7f0000000540)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_NEW_KEY(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000680)={&(0x7f0000000180)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYBLOB="010800040000000000000b01000008000300", @ANYRES32=r8], 0x44}}, 0x0) r9 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r9, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000005c0)=ANY=[@ANYBLOB="240000002400c7bb000000000000000000000000060002fff300000006"], 0x24}}, 0x4044000) sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000019680)=[{{&(0x7f0000000100)={0xa, 0x0, 0x0, @loopback={0x0, 0xac141414}}, 0x1c, 0x0}}], 0xfc, 0x20004855) 2.515666331s ago: executing program 6 (id=3887): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000680), 0x901800, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000040)={0x3, 0x2, 0x3000, 0x1000, &(0x7f0000feb000/0x1000)=nil}) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000027c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x2000401}, 0x28) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x400000000008d}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r2, 0x1, &(0x7f0000000240)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x4000087, 0x2, 0x0) r5 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$SO_TIMESTAMPING(r5, 0x1, 0x25, &(0x7f0000000200)=0x474c, 0x4) bind$inet(r5, &(0x7f0000000240)={0x2, 0x0, @local}, 0x6f) connect$inet(r5, &(0x7f0000000480)={0x2, 0x0, @multicast1}, 0x10) sendmmsg(r5, &(0x7f0000007fc0), 0x800001d, 0x300) setsockopt$inet_int(r5, 0x0, 0x7, &(0x7f0000000280)=0x1f5, 0x4) 2.501892342s ago: executing program 5 (id=3888): syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000340)='./file0\x00', 0x210000, &(0x7f0000000440)={[{@nodelalloc}, {@dioread_lock}, {@bsdgroups}, {@discard}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0xc}}, {@data_err_ignore}, {@errors_remount}, {@stripe={'stripe', 0x3d, 0x2}}, {@bh}, {@auto_da_alloc}]}, 0x1, 0x578, &(0x7f0000000500)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./file1\x00', 0xc41, 0x20) truncate(&(0x7f0000000900)='./file1\x00', 0x3000000) socket$inet6_tcp(0xa, 0x1, 0x0) write$tun(r0, &(0x7f0000000040)=ANY=[], 0x1c) sendmsg$BATADV_CMD_GET_MESH(0xffffffffffffffff, &(0x7f00000004c0)={0x0, 0x0, 0x0}, 0x0) fallocate(r0, 0x20, 0x4000, 0x3000000) 1.514717782s ago: executing program 2 (id=3889): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, 0x0}, 0x20000840) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) r1 = getpid() sched_setscheduler(r1, 0x1, &(0x7f0000000200)=0x7) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) bpf$MAP_CREATE(0x0, 0x0, 0x48) r4 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000740)={0x3, 0x4, 0x4, 0xa, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x3, 0x8, &(0x7f0000000940)=@framed={{0x18, 0x9}, [@tail_call={{0x18, 0x2, 0x1, 0x0, r4}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0xa000000}}]}, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r6 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000080)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x3163, '\x00', 0x0, 0x0}, 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000001c0)={{r4, 0xffffffffffffffff}, &(0x7f0000000140), &(0x7f0000000180)=r5}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x6, 0x14, &(0x7f0000001740)=@ringbuf={{0x18, 0x8}, {{0x18, 0x1, 0x1, 0x0, r6}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x1ab92b}, {0x85, 0x0, 0x0, 0x8}, {0x4}}, {{0x5, 0x0, 0x4, 0x9, 0x0, 0x1, 0x2000}}, [@tail_call={{0x18, 0x2, 0x1, 0x0, r7}}], {{0x7, 0x1, 0xb, 0x8}, {0x6, 0x0, 0x5, 0x9}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @xdp, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r8 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000080), 0x900, 0x0) ioctl$FBIO_WAITFORVSYNC(r8, 0x40044620, 0x0) clock_adjtime(0x0, 0x0) 705.930198ms ago: executing program 9 (id=3890): socketpair$unix(0x1, 0x5, 0x0, 0x0) pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) splice(0xffffffffffffffff, 0x0, r1, 0x0, 0xf3a, 0x0) close(r0) write(0xffffffffffffffff, 0x0, 0x0) mmap(&(0x7f00009fd000/0x600000)=nil, 0x600000, 0x100000d, 0x6031, 0xffffffffffffffff, 0xa1b92000) r2 = socket$rds(0x15, 0x5, 0x0) bind$rds(r2, &(0x7f0000000840)={0x2, 0x0, @loopback}, 0x10) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x0) sendmsg$rds(r2, &(0x7f0000000080)={&(0x7f0000000040)={0x2, 0x4, @local}, 0x10, 0x0, 0x0, &(0x7f0000000240)=[@rdma_args={0x48, 0x114, 0x1, {{0x5, 0x8}, {0x0}, &(0x7f0000000440)=[{0x0}], 0x1, 0x20}}], 0x48, 0x80}, 0x0) 704.870428ms ago: executing program 3 (id=3891): madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) r0 = openat$kvm(0xffffff9c, &(0x7f00000001c0), 0x20000, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x2, 0x9, 0xfffffffffffffffd, 0x2, 0x2, 0x0, 0x4002004c4, 0x1004, 0x8000000000000000, 0xc595, 0x0, 0x1, 0xffffffffffffffff, 0x2000000000000000, 0xb3, 0x8d], 0xeeee8000, 0x2010d3}) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x101042, 0x15) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r3, 0x0) 51.869508ms ago: executing program 5 (id=3892): socket$unix(0x1, 0x2, 0x0) mkdir(&(0x7f0000000000)='./file0\x00', 0xfffffffffffffffe) r0 = socket$unix(0x1, 0x2, 0x0) r1 = socket$unix(0x1, 0x2, 0x0) connect$unix(r1, &(0x7f0000000180)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) sendmmsg(r1, &(0x7f0000002dc0), 0x307017fdb7a66cb, 0x0) connect$unix(r0, &(0x7f0000000180)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) r2 = dup(r0) mount$9p_fd(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000040), 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESDEC=r1, @ANYBLOB=',wfdno=', @ANYRESHEX=r2]) 51.700839ms ago: executing program 3 (id=3893): timer_create(0xfffffffffffffff4, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000280)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f0000000080)=0x2) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeea, 0x8031, 0xffffffffffffffff, 0x28f43000) socket$inet_tcp(0x2, 0x1, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f0000000180)=@abs={0x0, 0x0, 0x1}, 0x6e) sendmmsg$unix(r1, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) capset(&(0x7f0000000000)={0x20080522}, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x81, 0xffffffff}) mmap(&(0x7f0000ff7000/0x7000)=nil, 0x7000, 0x2000001, 0x50, r0, 0xc7bb4000) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000001880)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0xffa3}, 0x48) 51.286148ms ago: executing program 6 (id=3894): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-serpent-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, 0x0, 0x0) r1 = accept4(r0, 0x0, 0x0, 0x0) sendmmsg$alg(r1, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{0x0}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0x4d}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e34", 0xc3}], 0x3}], 0x1, 0x40800) recvmsg(r1, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) 0s ago: executing program 5 (id=3895): openat$sysfs(0xffffffffffffff9c, 0x0, 0x82802, 0xf) ioctl$LOOP_GET_STATUS64(0xffffffffffffffff, 0x4c05, 0x0) r0 = socket(0x10, 0x803, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000400)={'veth0_to_hsr\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x70bd25, 0x25dfdbfe, {0x0, 0x0, 0x0, r1, {0x0, 0xffe1}, {0xffff, 0xffff}, {0xffe0}}, [@qdisc_kind_options=@q_htb={{0x8}, {0x1c, 0x2, [@TCA_HTB_INIT={0x18, 0x2, {0x3, 0x4, 0x9}}]}}]}, 0x48}}, 0xc840) sendmsg$nl_route_sched(r0, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000800)=@newtfilter={0x54, 0x2c, 0xd2b, 0x70bd2b, 0x25dfdbfb, {0x0, 0x0, 0x0, r1, {0x6}, {}, {0x7, 0x3}}, [@filter_kind_options=@f_u32={{0x8}, {0x28, 0x2, [@TCA_U32_SEL={0x24, 0x5, {0xd, 0x7, 0x1, 0x3d3f, 0x0, 0xfff, 0xb709, 0x58f, [{0x0, 0x20008000, 0x4, 0x1}]}}]}}]}, 0x54}, 0x1, 0x0, 0x0, 0x4084}, 0x24040084) recvmmsg$unix(r0, &(0x7f0000000580)=[{{0x0, 0x0, &(0x7f0000000040)=[{&(0x7f00000002c0)=""/219, 0xdb}], 0x1}}], 0x1, 0x60, 0x0) sendmsg$GTP_CMD_NEWPDP(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000300)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="010002000000fedbdf250000000008000100", @ANYRES32=0x0, @ANYBLOB="0800080001000000060006"], 0x2c}, 0x1, 0x0, 0x0, 0x4004054}, 0x4000044) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={0x0}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)=ANY=[], 0xc3}, 0x1, 0x100000000000000, 0x0, 0x2000}, 0x40400c0) r2 = socket(0x10, 0x3, 0x0) sendmmsg(r2, &(0x7f0000000000), 0x4000000000001f2, 0x0) kernel console output (not intermixed with test programs): EXT4-fs (loop1): Remounting filesystem read-only [ 916.442883][T13294] EXT4-fs (loop1): Cannot turn on journaled quota: type 1: error -117 [ 916.481559][T13294] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 916.573417][T13294] EXT4-fs (loop1): shut down requested (2) [ 916.702055][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 916.729065][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 916.791647][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 916.819848][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 916.858008][T12852] device veth0_vlan entered promiscuous mode [ 916.875431][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 916.894725][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 916.929661][T12852] device veth1_vlan entered promiscuous mode [ 917.003694][ T5846] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 917.040725][ T5846] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 917.070943][ T5846] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 917.114783][ T5846] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 917.145213][T12852] device veth0_macvtap entered promiscuous mode [ 917.181085][T12852] device veth1_macvtap entered promiscuous mode [ 917.279070][T12852] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 917.339882][T12852] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 917.370341][T12852] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 917.420944][T12852] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 917.449771][T12852] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 917.537457][T12852] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 917.646447][T12852] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 918.095433][ T5700] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 918.123777][ T5700] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 918.172640][ T5700] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 918.181448][ T5700] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 918.214128][T12852] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 918.253527][T12852] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 918.297595][T12852] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 918.336126][T12852] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 918.346102][T12852] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 918.357426][T12852] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 918.369235][T12852] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 918.385148][ T5700] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 918.412734][ T5700] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 918.485249][T12852] netdevsim netdevsim9 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 918.524693][T12852] netdevsim netdevsim9 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 918.548717][T12852] netdevsim netdevsim9 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 918.576901][T12852] netdevsim netdevsim9 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 918.869747][ T4275] EXT4-fs (loop1): unmounting filesystem. [ 918.977766][ T4412] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 919.004323][ T4412] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 919.035578][ T5387] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 919.142534][ T5387] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 919.195724][ T5387] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 919.248339][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 920.423949][T13356] Can't find ip_set type hash [ 922.033208][T13371] netdevsim netdevsim6 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 922.306899][T13371] netdevsim netdevsim6 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 922.462055][T13371] netdevsim netdevsim6 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 922.608830][T13394] device syzkaller0 entered promiscuous mode [ 922.764094][T13371] netdevsim netdevsim6 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 924.403743][T13406] loop1: detected capacity change from 0 to 256 [ 924.517950][T13406] FAT-fs (loop1): Directory bread(block 64) failed [ 924.554527][T13406] FAT-fs (loop1): Directory bread(block 65) failed [ 924.622214][T13406] FAT-fs (loop1): Directory bread(block 66) failed [ 924.661719][T13406] FAT-fs (loop1): Directory bread(block 67) failed [ 924.668738][T13406] FAT-fs (loop1): Directory bread(block 68) failed [ 924.684565][T13406] FAT-fs (loop1): Directory bread(block 69) failed [ 924.691663][T13406] FAT-fs (loop1): Directory bread(block 70) failed [ 924.698439][T13406] FAT-fs (loop1): Directory bread(block 71) failed [ 924.705748][T13406] FAT-fs (loop1): Directory bread(block 72) failed [ 924.712998][T13406] FAT-fs (loop1): Directory bread(block 73) failed [ 925.370290][T13431] netlink: 16 bytes leftover after parsing attributes in process `syz.9.2203'. [ 928.044490][ T1277] ieee802154 phy0 wpan0: encryption failed: -22 [ 928.050862][ T1277] ieee802154 phy1 wpan1: encryption failed: -22 [ 931.890975][T13371] netdevsim netdevsim6 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 931.969777][T13371] netdevsim netdevsim6 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 931.990388][T13371] netdevsim netdevsim6 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 932.042989][T13371] netdevsim netdevsim6 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 932.081274][T13472] netlink: 4 bytes leftover after parsing attributes in process `syz.5.2214'. [ 932.337584][T13485] netlink: 16 bytes leftover after parsing attributes in process `syz.1.2215'. [ 937.490032][T13549] device syzkaller0 entered promiscuous mode [ 937.817412][T13556] netlink: 16 bytes leftover after parsing attributes in process `syz.5.2228'. [ 939.061383][T13576] input: syz0 as /devices/virtual/input/input21 [ 940.175691][T13578] loop1: detected capacity change from 0 to 512 [ 940.182948][T13578] ext4: Unknown parameter 'nouser_xattr' [ 942.646384][T13607] device syzkaller0 entered promiscuous mode [ 942.932724][T13612] netlink: 16 bytes leftover after parsing attributes in process `syz.1.2242'. [ 945.744247][T13634] loop1: detected capacity change from 0 to 512 [ 945.763515][T13634] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a806e02c, mo2=0002] [ 945.771547][T13634] System zones: 1-12 [ 945.802160][T13634] EXT4-fs error (device loop1): dx_probe:823: inode #2: comm syz.1.2248: Directory hole found for htree index block 0 [ 945.815160][T13634] EXT4-fs (loop1): Remounting filesystem read-only [ 945.821816][T13634] EXT4-fs (loop1): Cannot turn on journaled quota: type 0: error -117 [ 945.830067][T13634] EXT4-fs error (device loop1): dx_probe:823: inode #2: comm syz.1.2248: Directory hole found for htree index block 0 [ 945.844314][T13634] EXT4-fs (loop1): Remounting filesystem read-only [ 945.850942][T13634] EXT4-fs (loop1): Cannot turn on journaled quota: type 1: error -117 [ 945.859143][T13634] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 945.871533][T13634] EXT4-fs (loop1): shut down requested (2) [ 946.115508][ T4275] EXT4-fs (loop1): unmounting filesystem. [ 947.642374][T13672] netlink: 16 bytes leftover after parsing attributes in process `syz.6.2255'. [ 948.242632][T13670] loop1: detected capacity change from 0 to 512 [ 948.349893][T13670] EXT4-fs error (device loop1): ext4_iget_extra_inode:4763: inode #15: comm syz.1.2257: corrupted in-inode xattr [ 948.455395][T13670] EXT4-fs error (device loop1): ext4_orphan_get:1410: comm syz.1.2257: couldn't read orphan inode 15 (err -117) [ 948.744750][T13670] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none. [ 951.214423][ T4275] EXT4-fs (loop1): unmounting filesystem. [ 952.816644][T13733] netlink: 16 bytes leftover after parsing attributes in process `syz.5.2268'. [ 956.816037][T13775] fuse: Bad value for 'fd' [ 958.490603][T13807] device bridge4 entered promiscuous mode [ 958.580591][T13807] team0: Port device bridge4 added [ 959.533246][T13817] netlink: 68 bytes leftover after parsing attributes in process `syz.9.2287'. [ 960.155565][T13807] device bridge5 entered promiscuous mode [ 960.887765][T13807] team0: Port device bridge5 added [ 961.433190][T13841] netlink: 148 bytes leftover after parsing attributes in process `syz.9.2290'. [ 962.953871][T13878] netlink: 68 bytes leftover after parsing attributes in process `syz.9.2300'. [ 965.203002][T13900] device bridge3 entered promiscuous mode [ 965.346518][T13900] team0: Port device bridge3 added [ 965.476073][T13907] device bridge4 entered promiscuous mode [ 965.583436][T13907] team0: Port device bridge4 added [ 967.206590][T13939] netlink: 68 bytes leftover after parsing attributes in process `syz.3.2314'. [ 969.106164][T13957] device syzkaller0 entered promiscuous mode [ 970.152098][T13973] device bridge2 entered promiscuous mode [ 970.261121][T13973] team0: Port device bridge2 added [ 971.115379][T13983] 8021q: adding VLAN 0 to HW filter on device bond1 [ 971.227345][T13988] device bridge3 entered promiscuous mode [ 971.242824][T13988] team0: Port device bridge3 added [ 971.264526][T13991] bridge0: port 3(team0) entered blocking state [ 971.348094][T13991] bridge0: port 3(team0) entered disabled state [ 971.388652][T13991] device team0 entered promiscuous mode [ 971.415215][T13991] device team_slave_0 entered promiscuous mode [ 971.451958][T13991] device team_slave_1 entered promiscuous mode [ 972.733601][T14034] netlink: 68 bytes leftover after parsing attributes in process `syz.1.2327'. [ 973.832883][T14045] loop9: detected capacity change from 0 to 512 [ 973.956304][T14045] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a806e02c, mo2=0002] [ 973.964567][T14045] System zones: 1-12 [ 973.993150][T14045] EXT4-fs error (device loop9): dx_probe:823: inode #2: comm syz.9.2333: Directory hole found for htree index block 0 [ 974.006385][T14045] EXT4-fs (loop9): Remounting filesystem read-only [ 974.013179][T14045] EXT4-fs (loop9): Cannot turn on journaled quota: type 0: error -117 [ 974.021538][T14045] EXT4-fs error (device loop9): dx_probe:823: inode #2: comm syz.9.2333: Directory hole found for htree index block 0 [ 974.034700][T14045] EXT4-fs (loop9): Remounting filesystem read-only [ 974.041335][T14045] EXT4-fs (loop9): Cannot turn on journaled quota: type 1: error -117 [ 974.049670][T14045] EXT4-fs (loop9): mounted filesystem without journal. Quota mode: writeback. [ 974.061561][T14045] EXT4-fs (loop9): shut down requested (2) [ 974.568272][T12852] EXT4-fs (loop9): unmounting filesystem. [ 974.818670][T14076] device bridge1 entered promiscuous mode [ 974.854242][T14076] team0: Port device bridge1 added [ 974.974759][T14076] device bridge2 entered promiscuous mode [ 975.007939][T14076] team0: Port device bridge2 added [ 975.675439][T14076] bridge0: port 3(team0) entered blocking state [ 975.704070][T14076] bridge0: port 3(team0) entered disabled state [ 975.730334][T14076] device team0 entered promiscuous mode [ 975.789456][T14076] device team_slave_0 entered promiscuous mode [ 975.796438][T14076] device team_slave_1 entered promiscuous mode [ 975.805254][T14076] bridge0: port 3(team0) entered blocking state [ 975.811659][T14076] bridge0: port 3(team0) entered forwarding state [ 976.218947][T14097] netlink: 68 bytes leftover after parsing attributes in process `syz.6.2342'. [ 979.300716][T14136] device bridge6 entered promiscuous mode [ 979.365249][T14136] team0: Port device bridge6 added [ 979.475277][T14136] device bridge7 entered promiscuous mode [ 979.519624][T14136] team0: Port device bridge7 added [ 980.100947][T14156] netlink: 68 bytes leftover after parsing attributes in process `syz.5.2357'. [ 983.760677][T14215] xt_hashlimit: size too large, truncated to 1048576 [ 983.921082][T14218] netlink: 'syz.5.2371': attribute type 1 has an invalid length. [ 983.992278][T14223] netlink: 68 bytes leftover after parsing attributes in process `syz.9.2372'. [ 985.196738][T14233] loop9: detected capacity change from 0 to 512 [ 985.595577][T14233] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a806e02c, mo2=0002] [ 985.698234][T14233] System zones: 1-12 [ 985.784905][T14233] EXT4-fs error (device loop9): dx_probe:823: inode #2: comm syz.9.2373: Directory hole found for htree index block 0 [ 985.915926][T14233] EXT4-fs (loop9): Remounting filesystem read-only [ 985.932458][T14233] EXT4-fs (loop9): Cannot turn on journaled quota: type 0: error -117 [ 985.946572][T14233] EXT4-fs error (device loop9): dx_probe:823: inode #2: comm syz.9.2373: Directory hole found for htree index block 0 [ 985.971066][T14233] EXT4-fs (loop9): Remounting filesystem read-only [ 986.101984][T14233] EXT4-fs (loop9): Cannot turn on journaled quota: type 1: error -117 [ 986.150458][T14233] EXT4-fs (loop9): mounted filesystem without journal. Quota mode: writeback. [ 986.261303][T14233] EXT4-fs error (device loop9): ext4_empty_dir:3139: inode #2: comm syz.9.2373: Directory hole found for htree leaf block 0 [ 986.391719][T14233] EXT4-fs (loop9): Remounting filesystem read-only [ 987.316626][T14265] netlink: 32 bytes leftover after parsing attributes in process `syz.1.2378'. [ 987.560787][T14268] IPVS: sh: FWM 3 0x00000003 - no destination available [ 988.221880][ T1277] ieee802154 phy0 wpan0: encryption failed: -22 [ 988.228347][ T1277] ieee802154 phy1 wpan1: encryption failed: -22 [ 988.756735][T12852] EXT4-fs (loop9): unmounting filesystem. [ 989.265660][T14305] netlink: 28 bytes leftover after parsing attributes in process `syz.3.2383'. [ 989.940775][T14288] syz.3.2383 (14288) used greatest stack depth: 17912 bytes left [ 993.159638][T14356] tipc: Started in network mode [ 993.169098][T14356] tipc: Node identity 4, cluster identity 4711 [ 993.217713][T14356] tipc: Node number set to 4 [ 995.214462][ T48] Bluetooth: hci4: command 0x0406 tx timeout [ 995.597530][T14402] device team0 left promiscuous mode [ 995.641571][T14402] device team_slave_0 left promiscuous mode [ 995.658044][T14402] device team_slave_1 left promiscuous mode [ 995.688024][T14402] bridge0: port 3(team0) entered disabled state [ 995.732621][T14402] bond0: (slave dummy0): Releasing backup interface [ 995.811237][T14402] device bridge_slave_0 left promiscuous mode [ 995.840594][T14402] bridge0: port 1(bridge_slave_0) entered disabled state [ 995.877326][T14402] device bridge_slave_1 left promiscuous mode [ 995.909945][T14402] bridge0: port 2(bridge_slave_1) entered disabled state [ 995.983139][T14402] device veth0_to_bond left promiscuous mode [ 995.989328][T14402] bridge1: port 2(veth0_to_bond) entered disabled state [ 996.035059][T14402] bond0: (slave bond_slave_0): Releasing backup interface [ 996.079070][T14402] bond0: (slave bond_slave_1): Releasing backup interface [ 996.536754][T14402] team0: Port device team_slave_0 removed [ 996.762531][T14402] team0: Port device team_slave_1 removed [ 996.770623][T14402] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 996.876593][T14402] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 997.849573][T14402] device veth3 left promiscuous mode [ 997.855804][T14402] bridge1: port 1(veth3) entered disabled state [ 998.505637][T14402] device vlan2 left promiscuous mode [ 998.511024][T14402] device veth1_to_team left promiscuous mode [ 998.530914][T14402] bridge1: port 3(vlan2) entered disabled state [ 998.580749][T14402] team0: Port device bridge2 removed [ 998.607074][T14402] team0: Port device bridge3 removed [ 998.630194][T14417] platform regulatory.0: loading /lib/firmware/regulatory.db failed with error -12 [ 998.658462][T14417] platform regulatory.0: Direct firmware load for regulatory.db failed with error -12 [ 998.717291][T14417] platform regulatory.0: Falling back to sysfs fallback for: regulatory.db [ 1000.225793][T14461] netlink: 200 bytes leftover after parsing attributes in process `syz.6.2414'. [ 1000.261962][T14461] netlink: 4 bytes leftover after parsing attributes in process `syz.6.2414'. [ 1000.401577][T14467] netlink: 8 bytes leftover after parsing attributes in process `syz.6.2414'. [ 1001.177763][T14477] loop9: detected capacity change from 0 to 512 [ 1001.298949][T14477] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a806e02c, mo2=0002] [ 1001.369434][T14477] System zones: 1-12 [ 1001.410888][T14477] EXT4-fs error (device loop9): dx_probe:823: inode #2: comm syz.9.2415: Directory hole found for htree index block 0 [ 1001.460359][T14477] EXT4-fs (loop9): Remounting filesystem read-only [ 1001.485377][T14477] EXT4-fs (loop9): Cannot turn on journaled quota: type 0: error -117 [ 1001.535193][T14477] EXT4-fs error (device loop9): dx_probe:823: inode #2: comm syz.9.2415: Directory hole found for htree index block 0 [ 1001.613385][T14477] EXT4-fs (loop9): Remounting filesystem read-only [ 1001.677419][T14477] EXT4-fs (loop9): Cannot turn on journaled quota: type 1: error -117 [ 1001.764814][T14477] EXT4-fs (loop9): mounted filesystem without journal. Quota mode: writeback. [ 1001.906285][T14477] EXT4-fs error (device loop9): ext4_empty_dir:3139: inode #2: comm syz.9.2415: Directory hole found for htree leaf block 0 [ 1002.054929][T14477] EXT4-fs (loop9): Remounting filesystem read-only [ 1002.584948][T14484] EXT4-fs error (device loop9): ext4_validate_block_bitmap:438: comm ext4lazyinit: bg 0: block 361: padding at end of block bitmap is not set [ 1002.656570][T14484] EXT4-fs (loop9): Remounting filesystem read-only [ 1005.168280][T12852] EXT4-fs (loop9): unmounting filesystem. [ 1008.037101][T14572] netlink: 4 bytes leftover after parsing attributes in process `syz.9.2437'. [ 1012.197520][T14627] device bridge1 entered promiscuous mode [ 1012.260734][T14627] team0: Port device bridge1 added [ 1012.453831][T14627] device bridge2 entered promiscuous mode [ 1012.704058][T14643] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2453'. [ 1014.760317][T14663] IPVS: sh: FWM 3 0x00000003 - no destination available [ 1016.306462][T14681] netlink: 'syz.5.2462': attribute type 39 has an invalid length. [ 1017.044558][T14701] device bridge8 entered promiscuous mode [ 1017.239163][T14701] team0: Port device bridge8 added [ 1021.215537][T14776] device bridge4 entered promiscuous mode [ 1021.254548][T14776] team0: Port device bridge4 added [ 1022.329087][T14801] xt_CHECKSUM: CHECKSUM should be avoided. If really needed, restrict with "-p udp" and only use in OUTPUT [ 1022.860467][T14808] netlink: 'syz.9.2488': attribute type 10 has an invalid length. [ 1022.907923][T14808] device syz_tun entered promiscuous mode [ 1022.952101][T14808] bond0: (slave syz_tun): Enslaving as an active interface with an up link [ 1023.045752][T14813] netlink: 41 bytes leftover after parsing attributes in process `syz.9.2488'. [ 1024.700999][T14832] loop9: detected capacity change from 0 to 512 [ 1024.777223][T14832] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a806e02c, mo2=0002] [ 1024.785481][T14832] System zones: 1-12 [ 1024.802000][T14833] device bridge5 entered promiscuous mode [ 1024.816150][T14832] EXT4-fs error (device loop9): dx_probe:823: inode #2: comm syz.9.2492: Directory hole found for htree index block 0 [ 1024.833747][T14832] EXT4-fs (loop9): Remounting filesystem read-only [ 1024.840498][T14832] EXT4-fs (loop9): Cannot turn on journaled quota: type 0: error -117 [ 1024.849263][T14832] EXT4-fs error (device loop9): dx_probe:823: inode #2: comm syz.9.2492: Directory hole found for htree index block 0 [ 1024.864128][T14832] EXT4-fs (loop9): Remounting filesystem read-only [ 1024.870781][T14832] EXT4-fs (loop9): Cannot turn on journaled quota: type 1: error -117 [ 1024.879073][T14832] EXT4-fs (loop9): mounted filesystem without journal. Quota mode: writeback. [ 1024.890366][T14832] EXT4-fs error (device loop9): ext4_empty_dir:3139: inode #2: comm syz.9.2492: Directory hole found for htree leaf block 0 [ 1024.903870][T14832] EXT4-fs (loop9): Remounting filesystem read-only [ 1024.992514][T14833] team0: Port device bridge5 added [ 1025.068972][T12852] EXT4-fs (loop9): unmounting filesystem. [ 1027.449203][T14886] netlink: 'syz.1.2505': attribute type 11 has an invalid length. [ 1027.676458][T14888] loop9: detected capacity change from 0 to 512 [ 1027.778687][T14888] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a806e02c, mo2=0002] [ 1027.786870][T14888] System zones: 1-12 [ 1028.128169][T14888] EXT4-fs error (device loop9): dx_probe:823: inode #2: comm syz.9.2506: Directory hole found for htree index block 0 [ 1028.142901][T14888] EXT4-fs (loop9): Remounting filesystem read-only [ 1028.149504][T14888] EXT4-fs (loop9): Cannot turn on journaled quota: type 0: error -117 [ 1028.158020][T14888] EXT4-fs error (device loop9): dx_probe:823: inode #2: comm syz.9.2506: Directory hole found for htree index block 0 [ 1028.171684][T14888] EXT4-fs (loop9): Remounting filesystem read-only [ 1028.178337][T14888] EXT4-fs (loop9): Cannot turn on journaled quota: type 1: error -117 [ 1028.186825][T14888] EXT4-fs (loop9): mounted filesystem without journal. Quota mode: writeback. [ 1028.198871][T14888] EXT4-fs error (device loop9): ext4_empty_dir:3139: inode #2: comm syz.9.2506: Directory hole found for htree leaf block 0 [ 1028.222857][T14888] EXT4-fs (loop9): Remounting filesystem read-only [ 1028.442203][T12852] EXT4-fs (loop9): unmounting filesystem. [ 1028.564228][T14905] device bridge6 entered promiscuous mode [ 1028.584480][T14905] team0: Port device bridge6 added [ 1029.773962][T14921] syz.1.2511 sent an empty control message without MSG_MORE. [ 1029.833656][T14923] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 1029.912886][T14926] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2511'. [ 1031.660810][T14967] device bridge3 entered promiscuous mode [ 1031.668428][T14967] team0: Port device bridge3 added [ 1031.745876][T14970] device bridge4 entered promiscuous mode [ 1031.795767][T14970] team0: Port device bridge4 added [ 1034.737354][T15025] device syzkaller0 entered promiscuous mode [ 1035.247710][T15037] device bridge5 entered promiscuous mode [ 1035.316021][T15037] team0: Port device bridge5 added [ 1035.421216][T15040] device bridge6 entered promiscuous mode [ 1036.773461][T15059] loop9: detected capacity change from 0 to 512 [ 1036.780800][T15059] ext4: Unknown parameter 'nouser_xattr' [ 1037.692443][T15064] device syzkaller0 entered promiscuous mode [ 1038.897669][T15088] device bridge6 entered promiscuous mode [ 1039.042438][T15088] team0: Port device bridge6 added [ 1039.125728][T15091] device bridge7 entered promiscuous mode [ 1039.666315][T15111] netlink: 32 bytes leftover after parsing attributes in process `syz.5.2550'. [ 1039.928912][T15115] loop9: detected capacity change from 0 to 512 [ 1039.936247][T15115] ext4: Unknown parameter 'nouser_xattr' [ 1040.656240][T14793] I/O error, dev loop9, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 1042.371910][T15132] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 1044.329200][T15179] device bridge9 entered promiscuous mode [ 1044.381689][T15179] team0: Port device bridge9 added [ 1044.718390][T15189] netlink: 32 bytes leftover after parsing attributes in process `syz.9.2564'. [ 1046.716051][T15246] device bridge5 entered promiscuous mode [ 1046.850948][T15246] team0: Port device bridge5 added [ 1048.123278][ T1277] ieee802154 phy0 wpan0: encryption failed: -22 [ 1048.135120][ T1277] ieee802154 phy1 wpan1: encryption failed: -22 [ 1048.688256][T15286] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2587'. [ 1048.908888][T15294] sctp: [Deprecated]: syz.6.2586 (pid 15294) Use of int in max_burst socket option. [ 1048.908888][T15294] Use struct sctp_assoc_value instead [ 1049.241002][T15307] device bridge7 entered promiscuous mode [ 1049.309828][T15307] team0: Port device bridge7 added [ 1049.362358][T15308] bridge0: port 1(team0) entered blocking state [ 1049.420777][T15308] bridge0: port 1(team0) entered disabled state [ 1049.467759][T15308] device team0 entered promiscuous mode [ 1051.041589][T15345] netlink: 4 bytes leftover after parsing attributes in process `syz.9.2599'. [ 1051.147369][T15347] netlink: 'syz.3.2600': attribute type 4 has an invalid length. [ 1051.279257][T15350] netlink: 'syz.3.2600': attribute type 4 has an invalid length. [ 1052.927401][T15354] bridge0: port 3(dummy0) entered disabled state [ 1052.933977][T15354] bridge0: port 2(bridge_slave_1) entered disabled state [ 1052.941219][T15354] bridge0: port 1(bridge_slave_0) entered disabled state [ 1053.437954][T15354] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1053.491170][T15354] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1053.984601][T15354] netdevsim netdevsim3 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1053.993929][T15354] netdevsim netdevsim3 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1054.003467][T15354] netdevsim netdevsim3 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1054.013312][T15354] netdevsim netdevsim3 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1054.173805][T15356] netlink: 'syz.5.2603': attribute type 1 has an invalid length. [ 1055.960212][T15418] netlink: 4 bytes leftover after parsing attributes in process `syz.9.2614'. [ 1056.193351][T15436] device syzkaller0 entered promiscuous mode [ 1061.926901][T15585] netlink: 4 bytes leftover after parsing attributes in process `syz.6.2651'. [ 1064.085031][T15624] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2663'. [ 1065.678055][T15651] tipc: Enabling of bearer rejected, failed to enable media [ 1066.984123][T15677] netlink: 4 bytes leftover after parsing attributes in process `syz.5.2675'. [ 1068.705653][T15719] tipc: Enabling of bearer rejected, failed to enable media [ 1073.439731][T15783] tipc: Enabling of bearer rejected, failed to enable media [ 1076.270527][T15824] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1076.810294][T15847] netlink: 4 bytes leftover after parsing attributes in process `syz.6.2714'. [ 1076.828979][T15844] netlink: 28 bytes leftover after parsing attributes in process `syz.9.2711'. [ 1076.867071][T15847] device veth0_macvtap left promiscuous mode [ 1077.969560][T15884] netlink: 20 bytes leftover after parsing attributes in process `syz.5.2721'. [ 1083.756252][T15931] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 1083.784721][T15931] A link change request failed with some changes committed already. Interface team0 may have been left with an inconsistent configuration, please check. [ 1090.487382][T16057] netlink: 8 bytes leftover after parsing attributes in process `syz.6.2756'. [ 1093.969792][T16103] netlink: 4 bytes leftover after parsing attributes in process `syz.5.2769'. [ 1094.774754][T16138] tipc: Enabling of bearer rejected, failed to enable media [ 1096.411273][T16161] netlink: 32 bytes leftover after parsing attributes in process `syz.6.2780'. [ 1097.996072][T16188] device bridge7 entered promiscuous mode [ 1098.054639][T16188] team0: Port device bridge7 added [ 1098.125444][T16188] device bridge8 entered promiscuous mode [ 1098.208125][T16188] team0: Port device bridge8 added [ 1098.452659][T16205] tipc: Enabling of bearer rejected, failed to enable media [ 1100.237364][T16227] netlink: 32 bytes leftover after parsing attributes in process `syz.9.2796'. [ 1100.304296][T16234] netlink: 4 bytes leftover after parsing attributes in process `syz.6.2798'. [ 1100.340861][T16227] IPVS: sh: FWM 3 0x00000003 - no destination available [ 1100.369133][ C1] IPVS: sh: FWM 3 0x00000003 - no destination available [ 1102.956483][T16283] netlink: 'syz.3.2804': attribute type 2 has an invalid length. [ 1104.960292][T16266] device bridge10 entered promiscuous mode [ 1104.967690][T16266] team0: Port device bridge10 added [ 1104.978675][T16271] device bridge11 entered promiscuous mode [ 1104.992331][T16271] team0: Port device bridge11 added [ 1105.208629][T16295] netlink: 4 bytes leftover after parsing attributes in process `syz.9.2806'. [ 1105.243795][T16295] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1105.273311][T16295] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1105.292285][T16295] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1105.311180][T16295] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1105.330569][T16295] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1105.489579][T16295] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1105.929916][T16295] batman_adv: batadv0: Adding interface: ipvlan2 [ 1105.936473][T16295] batman_adv: batadv0: The MTU of interface ipvlan2 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1106.008515][T16295] batman_adv: batadv0: Interface activated: ipvlan2 [ 1107.362009][T16329] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1107.578267][T16337] device bridge8 entered promiscuous mode [ 1107.605837][T16337] team0: Port device bridge8 added [ 1107.690896][T16339] device bridge9 entered promiscuous mode [ 1107.723317][T16339] team0: Port device bridge9 added [ 1108.307867][ T1277] ieee802154 phy0 wpan0: encryption failed: -22 [ 1108.314257][ T1277] ieee802154 phy1 wpan1: encryption failed: -22 [ 1110.767459][ T4280] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 1110.778882][ T4280] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 1110.786916][ T4280] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 1110.796216][ T4280] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 1110.817732][ T4280] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 1110.825000][ T4280] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 1110.979454][T16384] device vlan2 entered promiscuous mode [ 1111.018721][T16384] device team0 entered promiscuous mode [ 1111.029985][T16384] device team_slave_0 entered promiscuous mode [ 1111.050646][T16384] device team_slave_1 entered promiscuous mode [ 1111.131650][T16382] netlink: 'syz.6.2828': attribute type 10 has an invalid length. [ 1111.397487][T16397] netlink: 20 bytes leftover after parsing attributes in process `syz.3.2834'. [ 1111.427649][T16401] device bridge12 entered promiscuous mode [ 1111.437865][T16401] team0: Port device bridge12 added [ 1111.781783][T16405] bridge0: port 3(dummy0) entered disabled state [ 1111.793406][T16405] device bridge_slave_0 left promiscuous mode [ 1111.808140][T16405] bridge0: port 1(bridge_slave_0) entered disabled state [ 1111.820141][T16405] device bridge_slave_1 left promiscuous mode [ 1111.828119][T16405] bridge0: port 2(bridge_slave_1) entered disabled state [ 1111.838399][T16405] bond0: (slave bond_slave_0): Releasing backup interface [ 1111.849719][T16405] bond0: (slave bond_slave_1): Releasing backup interface [ 1111.858701][T16405] device team_slave_0 left promiscuous mode [ 1111.871061][T16405] team0: Port device team_slave_0 removed [ 1111.883430][T16405] device team_slave_1 left promiscuous mode [ 1111.893666][T16405] team0: Port device team_slave_1 removed [ 1111.900574][T16405] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1111.909357][T16405] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1111.920769][T16405] team0: Port device bridge1 removed [ 1111.931412][T16406] device bridge13 entered promiscuous mode [ 1111.945203][T16406] team0: Port device bridge13 added [ 1112.843585][ T48] Bluetooth: hci2: command 0x0409 tx timeout [ 1113.051521][T16377] chnl_net:caif_netlink_parms(): no params data found [ 1113.702180][T16377] bridge0: port 1(bridge_slave_0) entered blocking state [ 1113.765563][T16377] bridge0: port 1(bridge_slave_0) entered disabled state [ 1113.794327][T16377] device bridge_slave_0 entered promiscuous mode [ 1113.942365][T16377] bridge0: port 2(bridge_slave_1) entered blocking state [ 1113.957934][T16377] bridge0: port 2(bridge_slave_1) entered disabled state [ 1113.966127][T16377] device bridge_slave_1 entered promiscuous mode [ 1114.247652][T16377] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1114.318769][T16377] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1114.516189][T16377] team0: Port device team_slave_0 added [ 1114.582333][T16377] team0: Port device team_slave_1 added [ 1114.708291][T16469] device bridge9 entered promiscuous mode [ 1114.744797][T16469] team0: Port device bridge9 added [ 1114.791061][T16377] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1114.836550][T16377] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1114.882068][ T48] Bluetooth: hci2: command 0x041b tx timeout [ 1114.966288][T16377] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1115.025380][T16472] device bridge10 entered promiscuous mode [ 1115.071047][T16472] team0: Port device bridge10 added [ 1115.220759][T16377] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1115.233582][T16377] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1115.297434][T16377] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1115.493711][T16377] device hsr_slave_0 entered promiscuous mode [ 1115.526298][T16377] device hsr_slave_1 entered promiscuous mode [ 1115.556841][T16377] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1115.579705][T16377] Cannot create hsr debugfs directory [ 1116.317016][T16483] netlink: 4 bytes leftover after parsing attributes in process `syz.9.2850'. [ 1116.450442][ T4476] device hsr_slave_0 left promiscuous mode [ 1116.475870][ T4476] device hsr_slave_1 left promiscuous mode [ 1116.524688][ T4476] device team0 left promiscuous mode [ 1116.530784][ T4476] bridge0: port 1(team0) entered disabled state [ 1116.749145][ T4476] team0 (unregistering): Port device bridge9 removed [ 1116.892278][ T48] Bluetooth: hci2: command 0x040f tx timeout [ 1116.906408][ T4476] team0 (unregistering): Port device bridge8 removed [ 1117.034738][ T4476] team0 (unregistering): Port device bridge7 removed [ 1117.154473][ T4476] team0 (unregistering): Port device bridge6 removed [ 1117.269625][ T4476] team0 (unregistering): Port device bridge5 removed [ 1117.368727][ T4476] team0 (unregistering): Port device bridge4 removed [ 1118.934400][ T48] Bluetooth: hci2: command 0x0419 tx timeout [ 1120.346984][ T4476] bond0 (unregistering): Released all slaves [ 1120.477070][T16519] tipc: Enabling of bearer rejected, failed to enable media [ 1120.618615][T16539] device bridge11 entered promiscuous mode [ 1120.703737][T16539] team0: Port device bridge11 added [ 1120.805208][T16542] device bridge12 entered promiscuous mode [ 1120.841515][T16542] team0: Port device bridge12 added [ 1120.853823][T16562] netlink: 4 bytes leftover after parsing attributes in process `syz.5.2862'. [ 1122.072226][T16601] netlink: 52 bytes leftover after parsing attributes in process `syz.6.2870'. [ 1122.154009][T16601] netlink: 'syz.6.2870': attribute type 1 has an invalid length. [ 1122.719425][T16377] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 1122.760568][T16377] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 1122.814364][T16377] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 1122.845445][T16377] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 1122.934561][T16626] tipc: Enabling of bearer rejected, failed to enable media [ 1123.100639][T16377] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1123.157430][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 1123.177855][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 1123.213089][T16377] 8021q: adding VLAN 0 to HW filter on device team0 [ 1123.241381][ T4311] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 1123.271260][ T4311] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 1123.333122][ T4311] bridge0: port 1(bridge_slave_0) entered blocking state [ 1123.340426][ T4311] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1123.387682][ T4311] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 1123.418612][ T4311] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 1123.450924][ T4311] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 1123.477180][ T4311] bridge0: port 2(bridge_slave_1) entered blocking state [ 1123.484430][ T4311] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1123.518044][ T4311] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 1123.561932][ T4311] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 1123.611841][ T4311] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 1123.663825][ T4311] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 1123.730786][ T4311] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 1123.783636][ T4311] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 1123.824358][ T4311] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 1123.956414][T16377] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 1124.016453][T16377] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 1124.381727][ T4311] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 1124.448150][ T4311] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 1124.728897][ T4311] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 1124.773746][ T4311] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 1124.829010][ T4311] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 1124.924491][T16652] netlink: 4 bytes leftover after parsing attributes in process `syz.9.2875'. [ 1125.980748][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 1125.996151][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 1126.032651][T16377] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1126.150563][T13833] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 1126.174946][T13833] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 1126.243060][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 1126.262220][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 1126.417839][T16377] device veth0_vlan entered promiscuous mode [ 1126.531217][T16377] device veth1_vlan entered promiscuous mode [ 1126.761647][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 1126.785296][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 1126.801932][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 1126.859710][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 1127.050937][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 1127.135402][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 1127.190377][T16377] device veth0_macvtap entered promiscuous mode [ 1127.256013][T16377] device veth1_macvtap entered promiscuous mode [ 1127.343766][T16377] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1127.391709][T16377] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1127.425168][T16377] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1127.473765][T16377] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1127.569432][T16377] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1127.580495][T16377] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1127.590769][T16377] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: ipvlan2 [ 1127.600806][T16377] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1127.613156][T16377] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1127.622522][ T4311] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 1127.644525][ T4311] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 1128.043133][T16377] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1128.286270][T16377] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1128.296210][T16377] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1128.306676][T16377] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1128.316542][T16377] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1128.327012][T16377] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1128.338378][T16377] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1128.351562][T16377] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1128.377015][T16377] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1128.400418][T16377] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1128.468550][T16377] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1128.510132][ T4311] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 1128.549616][ T4311] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 1128.746620][ T4311] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1128.769820][ T4311] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1128.797921][T16724] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2888'. [ 1128.909040][T10540] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 1128.965098][T10540] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1128.979684][T10540] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1129.003188][T10540] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 1133.000731][T16786] netlink: 32 bytes leftover after parsing attributes in process `syz.3.2901'. [ 1133.084931][T16792] IPVS: sh: FWM 3 0x00000003 - no destination available [ 1133.790221][T16809] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2904'. [ 1137.401961][T16870] loop9: detected capacity change from 0 to 512 [ 1138.168313][T16870] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a806e02c, mo2=0002] [ 1138.178853][T16870] System zones: 1-12 [ 1138.271956][T16870] EXT4-fs error (device loop9): dx_probe:823: inode #2: comm syz.9.2919: Directory hole found for htree index block 0 [ 1138.290194][T16870] EXT4-fs (loop9): Remounting filesystem read-only [ 1138.297019][T16870] EXT4-fs (loop9): Cannot turn on journaled quota: type 0: error -117 [ 1138.308974][T16870] EXT4-fs error (device loop9): dx_probe:823: inode #2: comm syz.9.2919: Directory hole found for htree index block 0 [ 1138.327302][T16870] EXT4-fs (loop9): Remounting filesystem read-only [ 1138.334044][T16870] EXT4-fs (loop9): Cannot turn on journaled quota: type 1: error -117 [ 1138.342361][T16870] EXT4-fs (loop9): mounted filesystem without journal. Quota mode: writeback. [ 1138.370686][T16870] EXT4-fs error (device loop9): ext4_empty_dir:3139: inode #2: comm syz.9.2919: Directory hole found for htree leaf block 0 [ 1138.387658][T16870] EXT4-fs (loop9): Remounting filesystem read-only [ 1138.639147][T12852] EXT4-fs (loop9): unmounting filesystem. [ 1140.387490][T16902] loop9: detected capacity change from 0 to 512 [ 1141.067218][T16902] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a806e02c, mo2=0002] [ 1141.075570][T16902] System zones: 1-12 [ 1141.080627][T16902] EXT4-fs error (device loop9): dx_probe:823: inode #2: comm syz.9.2926: Directory hole found for htree index block 0 [ 1141.093957][T16902] EXT4-fs (loop9): Remounting filesystem read-only [ 1141.100687][T16902] EXT4-fs (loop9): Cannot turn on journaled quota: type 0: error -117 [ 1141.109012][T16902] EXT4-fs error (device loop9): dx_probe:823: inode #2: comm syz.9.2926: Directory hole found for htree index block 0 [ 1141.122818][T16902] EXT4-fs (loop9): Remounting filesystem read-only [ 1141.129811][T16902] EXT4-fs (loop9): Cannot turn on journaled quota: type 1: error -117 [ 1141.138137][T16902] EXT4-fs (loop9): mounted filesystem without journal. Quota mode: writeback. [ 1141.153145][T16901] EXT4-fs (loop9): shut down requested (2) [ 1141.367679][T12852] EXT4-fs (loop9): unmounting filesystem. [ 1141.697949][T16923] device syzkaller0 entered promiscuous mode [ 1143.439198][T16941] netlink: 14 bytes leftover after parsing attributes in process `syz.1.2935'. [ 1145.101651][T16971] device syzkaller0 entered promiscuous mode [ 1150.757769][T17054] netlink: 40 bytes leftover after parsing attributes in process `syz.6.2964'. [ 1151.557998][T17071] loop9: detected capacity change from 0 to 512 [ 1151.898732][T17071] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a806e02c, mo2=0002] [ 1151.907453][T17071] System zones: 1-12 [ 1152.005539][T17071] EXT4-fs error (device loop9): dx_probe:823: inode #2: comm syz.9.2967: Directory hole found for htree index block 0 [ 1152.019473][T17071] EXT4-fs (loop9): Remounting filesystem read-only [ 1152.026307][T17071] EXT4-fs (loop9): Cannot turn on journaled quota: type 0: error -117 [ 1152.034839][T17071] EXT4-fs error (device loop9): dx_probe:823: inode #2: comm syz.9.2967: Directory hole found for htree index block 0 [ 1152.053660][T17071] EXT4-fs (loop9): Remounting filesystem read-only [ 1152.060582][T17071] EXT4-fs (loop9): Cannot turn on journaled quota: type 1: error -117 [ 1152.068973][T17071] EXT4-fs (loop9): mounted filesystem without journal. Quota mode: writeback. [ 1152.093934][T17071] EXT4-fs (loop9): shut down requested (2) [ 1152.419409][T12852] EXT4-fs (loop9): unmounting filesystem. [ 1152.985415][T17084] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1153.402197][T17084] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1153.667478][T17106] loop9: detected capacity change from 0 to 512 [ 1153.674998][T17106] ext4: Unknown parameter 'nouser_xattr' [ 1153.714087][T17084] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1153.727172][T16379] I/O error, dev loop9, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 1153.940431][T17084] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1154.147604][T17084] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1154.271526][T17084] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1154.536767][T17084] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1154.968566][T17084] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1155.845315][ T48] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 1155.872105][ T48] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 1155.880397][ T48] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 1155.888419][ T48] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 1155.898705][ T48] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 1155.906335][ T48] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 1156.141106][T17134] loop1: detected capacity change from 0 to 512 [ 1156.211054][ T4391] tipc: Left network mode [ 1156.267181][T17134] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a806e02c, mo2=0002] [ 1156.328580][T17134] System zones: 1-12 [ 1156.342173][T17134] EXT4-fs error (device loop1): dx_probe:823: inode #2: comm syz.1.2981: Directory hole found for htree index block 0 [ 1156.412895][T17134] EXT4-fs (loop1): Remounting filesystem read-only [ 1156.431661][T17134] EXT4-fs (loop1): Cannot turn on journaled quota: type 0: error -117 [ 1156.455742][T17134] EXT4-fs error (device loop1): dx_probe:823: inode #2: comm syz.1.2981: Directory hole found for htree index block 0 [ 1156.495434][T17134] EXT4-fs (loop1): Remounting filesystem read-only [ 1156.502040][T17134] EXT4-fs (loop1): Cannot turn on journaled quota: type 1: error -117 [ 1156.553468][T17134] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 1156.611164][T17122] EXT4-fs (loop1): shut down requested (2) [ 1156.678740][T17130] chnl_net:caif_netlink_parms(): no params data found [ 1157.120461][T16377] EXT4-fs (loop1): unmounting filesystem. [ 1157.244775][T17130] bridge0: port 1(bridge_slave_0) entered blocking state [ 1157.261418][T17130] bridge0: port 1(bridge_slave_0) entered disabled state [ 1157.272486][T17130] device bridge_slave_0 entered promiscuous mode [ 1157.895526][ T48] Bluetooth: hci1: command 0x0409 tx timeout [ 1158.255715][T17130] bridge0: port 2(bridge_slave_1) entered blocking state [ 1158.275713][T17130] bridge0: port 2(bridge_slave_1) entered disabled state [ 1158.302732][T17130] device bridge_slave_1 entered promiscuous mode [ 1158.578767][T17179] device syzkaller0 entered promiscuous mode [ 1159.910467][ T4280] Bluetooth: hci1: command 0x041b tx timeout [ 1159.924966][T17203] loop9: detected capacity change from 0 to 512 [ 1159.932219][T17203] ext4: Unknown parameter 'nouser_xattr' [ 1159.977248][T16379] I/O error, dev loop9, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 1161.939086][ T48] Bluetooth: hci1: command 0x040f tx timeout [ 1163.958245][ T48] Bluetooth: hci1: command 0x0419 tx timeout [ 1164.430129][T17130] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1164.450072][T17130] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1164.539892][T17211] device syzkaller0 entered promiscuous mode [ 1165.002991][T17130] team0: Port device team_slave_0 added [ 1165.393302][T17130] team0: Port device team_slave_1 added [ 1165.655142][T17271] loop9: detected capacity change from 0 to 512 [ 1165.818931][T17271] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a806e02c, mo2=0002] [ 1165.830224][T17271] System zones: 1-12 [ 1165.901532][T17271] EXT4-fs error (device loop9): dx_probe:823: inode #2: comm syz.9.3006: Directory hole found for htree index block 0 [ 1165.915824][T17271] EXT4-fs (loop9): Remounting filesystem read-only [ 1165.922730][T17271] EXT4-fs (loop9): Cannot turn on journaled quota: type 0: error -117 [ 1165.931310][T17271] EXT4-fs error (device loop9): dx_probe:823: inode #2: comm syz.9.3006: Directory hole found for htree index block 0 [ 1165.949731][T17271] EXT4-fs (loop9): Remounting filesystem read-only [ 1165.956580][T17271] EXT4-fs (loop9): Cannot turn on journaled quota: type 1: error -117 [ 1165.964883][T17271] EXT4-fs (loop9): mounted filesystem without journal. Quota mode: writeback. [ 1165.993146][T17271] EXT4-fs (loop9): shut down requested (2) [ 1166.238321][ T4391] device hsr_slave_0 left promiscuous mode [ 1166.256194][ T4391] device hsr_slave_1 left promiscuous mode [ 1166.321915][T12852] EXT4-fs (loop9): unmounting filesystem. [ 1166.482858][T17280] loop1: detected capacity change from 0 to 512 [ 1166.558859][T17280] ext4: Unknown parameter 'nouser_xattr' [ 1167.818142][T17296] L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 1167.912658][ T4391] bond1 (unregistering): Released all slaves [ 1168.256692][ T1277] ieee802154 phy0 wpan0: encryption failed: -22 [ 1168.264002][ T1277] ieee802154 phy1 wpan1: encryption failed: -22 [ 1169.753728][T17339] loop1: detected capacity change from 0 to 512 [ 1169.955438][T17339] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a806e02c, mo2=0002] [ 1169.963840][T17339] System zones: 1-12 [ 1169.999864][T17339] EXT4-fs error (device loop1): dx_probe:823: inode #2: comm syz.1.3017: Directory hole found for htree index block 0 [ 1170.014415][T17339] EXT4-fs (loop1): Remounting filesystem read-only [ 1170.021172][T17339] EXT4-fs (loop1): Cannot turn on journaled quota: type 0: error -117 [ 1170.029769][T17339] EXT4-fs error (device loop1): dx_probe:823: inode #2: comm syz.1.3017: Directory hole found for htree index block 0 [ 1170.052525][T17339] EXT4-fs (loop1): Remounting filesystem read-only [ 1170.059395][T17339] EXT4-fs (loop1): Cannot turn on journaled quota: type 1: error -117 [ 1170.067851][T17339] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 1170.092743][T17339] EXT4-fs (loop1): shut down requested (2) [ 1170.443463][T16377] EXT4-fs (loop1): unmounting filesystem. [ 1171.881641][ T4391] bond0 (unregistering): Released all slaves [ 1171.987923][T17130] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1172.003676][T17130] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1172.029640][ C0] vkms_vblank_simulate: vblank timer overrun [ 1172.044433][T17130] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1172.063149][T17311] device syzkaller0 entered promiscuous mode [ 1172.159918][T17130] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1172.195273][T17130] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1172.252635][T17130] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1172.345492][T17353] netlink: 'syz.5.3020': attribute type 10 has an invalid length. [ 1172.489060][ T48] Bluetooth: hci2: command 0x0406 tx timeout [ 1172.532027][T17130] device hsr_slave_0 entered promiscuous mode [ 1172.621844][T17130] device hsr_slave_1 entered promiscuous mode [ 1172.658439][T17130] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1172.857195][T17130] Cannot create hsr debugfs directory [ 1176.250105][T17387] netlink: 32 bytes leftover after parsing attributes in process `syz.1.3030'. [ 1176.984952][T17392] netlink: 'syz.1.3030': attribute type 17 has an invalid length. [ 1177.016018][T17392] netlink: 'syz.1.3030': attribute type 27 has an invalid length. [ 1179.534419][T17130] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 1179.567535][T17130] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 1179.617174][T17130] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 1179.650552][T17130] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 1179.741427][T17440] loop9: detected capacity change from 0 to 1024 [ 1179.757731][T17437] netlink: 14 bytes leftover after parsing attributes in process `syz.6.3042'. [ 1180.092656][T17440] EXT4-fs (loop9): mounted filesystem without journal. Quota mode: writeback. [ 1180.563807][T12852] EXT4-fs (loop9): unmounting filesystem. [ 1180.652391][T17448] loop1: detected capacity change from 0 to 512 [ 1180.671044][T17130] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1180.729599][T17130] 8021q: adding VLAN 0 to HW filter on device team0 [ 1180.824174][ T5387] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 1180.846493][ T5387] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 1180.885334][ T5387] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 1180.891848][T17448] EXT4-fs error (device loop1): ext4_iget_extra_inode:4763: inode #15: comm syz.1.3038: corrupted in-inode xattr [ 1180.895533][ T5387] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 1180.914610][ T5387] bridge0: port 1(bridge_slave_0) entered blocking state [ 1180.921775][ T5387] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1181.134695][ T5387] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 1181.166520][T17448] EXT4-fs error (device loop1): ext4_orphan_get:1410: comm syz.1.3038: couldn't read orphan inode 15 (err -117) [ 1181.187552][ T5387] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 1181.224295][ T5387] bridge0: port 2(bridge_slave_1) entered blocking state [ 1181.231546][ T5387] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1181.286580][ T5387] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 1181.299184][T17448] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none. [ 1181.348515][ T5387] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 1181.363928][ T5387] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 1181.398283][ T5387] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 1181.421135][ T5387] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 1181.453689][ T5387] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 1181.497131][ T5387] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 1181.570896][T17130] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 1181.621006][T17130] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 1181.636509][ T5387] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 1181.653707][ T5387] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 1181.711090][ T5387] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 1181.757838][ T5387] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 1181.774697][ T5387] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 1181.809728][ T5387] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 1181.832990][T17460] device syzkaller0 entered promiscuous mode [ 1184.041145][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 1184.059369][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 1184.107897][T17130] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1184.225283][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 1184.255219][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 1184.363289][T10540] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 1184.793194][T10540] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 1185.052922][T10540] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 1185.112040][T10540] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 1185.162472][T17130] device veth0_vlan entered promiscuous mode [ 1185.227378][T17130] device veth1_vlan entered promiscuous mode [ 1185.341570][ T5387] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 1185.375867][ T5387] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 1185.436956][T17130] device veth0_macvtap entered promiscuous mode [ 1185.471503][T17130] device veth1_macvtap entered promiscuous mode [ 1185.565885][T17130] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1185.613361][T17130] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1185.649700][T17130] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1185.698993][T17130] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1185.757106][T17130] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1185.817855][T17130] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1185.866477][T17130] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: ipvlan2 [ 1185.896012][T17130] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1185.963677][T17130] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1186.024666][T17130] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1186.036217][T17130] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1186.054238][T10540] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 1186.100852][T10540] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 1186.108983][T10540] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 1186.210255][T10540] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 1186.302750][T17130] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1186.374130][T17130] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1186.451773][T17130] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1186.508736][T17130] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1186.518734][T17130] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1186.537298][T17130] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1186.547593][T17130] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1186.565788][T17130] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1186.739946][T17130] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1186.962261][T17130] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1187.875514][T17130] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1187.928611][T17130] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1187.955441][T17130] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1187.989613][T10540] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 1188.004590][T10540] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 1188.329962][T10676] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1188.361442][T10676] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1188.417723][ T5387] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 1188.487313][T10540] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1188.504735][T17543] netlink: 14 bytes leftover after parsing attributes in process `syz.6.3062'. [ 1188.514274][T10540] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1188.549417][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 1188.848967][T17552] netlink: 'syz.3.2978': attribute type 6 has an invalid length. [ 1188.930033][T17552] netlink: 84 bytes leftover after parsing attributes in process `syz.3.2978'. [ 1189.793945][T17566] loop3: detected capacity change from 0 to 512 [ 1190.247809][T17566] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a806e02c, mo2=0002] [ 1190.256377][T17566] System zones: 1-12 [ 1190.297946][T17566] EXT4-fs error (device loop3): dx_probe:823: inode #2: comm syz.3.3063: Directory hole found for htree index block 0 [ 1190.318738][T17566] EXT4-fs (loop3): Remounting filesystem read-only [ 1190.325544][T17566] EXT4-fs (loop3): Cannot turn on journaled quota: type 0: error -117 [ 1190.334111][T17566] EXT4-fs error (device loop3): dx_probe:823: inode #2: comm syz.3.3063: Directory hole found for htree index block 0 [ 1190.354333][T17566] EXT4-fs (loop3): Remounting filesystem read-only [ 1190.361235][T17566] EXT4-fs (loop3): Cannot turn on journaled quota: type 1: error -117 [ 1190.369749][T17566] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 1190.392966][T17566] EXT4-fs (loop3): shut down requested (2) [ 1190.706924][T17130] EXT4-fs (loop3): unmounting filesystem. [ 1194.279920][T17618] loop9: detected capacity change from 0 to 512 [ 1194.512731][T17618] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a806e02c, mo2=0002] [ 1194.521231][T17618] System zones: 1-12 [ 1194.530230][T17618] EXT4-fs error (device loop9): dx_probe:823: inode #2: comm syz.9.3079: Directory hole found for htree index block 0 [ 1194.545840][T17618] EXT4-fs (loop9): Remounting filesystem read-only [ 1194.552602][T17618] EXT4-fs (loop9): Cannot turn on journaled quota: type 0: error -117 [ 1194.561132][T17618] EXT4-fs error (device loop9): dx_probe:823: inode #2: comm syz.9.3079: Directory hole found for htree index block 0 [ 1194.582481][T17618] EXT4-fs (loop9): Remounting filesystem read-only [ 1194.589361][T17618] EXT4-fs (loop9): Cannot turn on journaled quota: type 1: error -117 [ 1194.597705][T17618] EXT4-fs (loop9): mounted filesystem without journal. Quota mode: writeback. [ 1194.628262][T17618] EXT4-fs (loop9): shut down requested (2) [ 1195.152518][T12852] EXT4-fs (loop9): unmounting filesystem. [ 1196.138460][T17445] EXT4-fs (loop1): unmounting filesystem. [ 1196.440349][T17646] UBIFS error (pid: 17646): cannot open "./file0", error -22 [ 1196.462123][T17646] netlink: 24 bytes leftover after parsing attributes in process `syz.9.3089'. [ 1197.973210][ T48] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 1197.991016][ T48] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 1197.998929][ T4274] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 1198.007382][ T48] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 1198.015528][ T4274] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 1198.039005][ T48] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 1199.285586][ T46] netdevsim netdevsim1 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1199.372895][T17688] loop9: detected capacity change from 0 to 512 [ 1199.492925][ T46] netdevsim netdevsim1 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1199.630063][T17688] EXT4-fs (loop9): mounted filesystem without journal. Quota mode: writeback. [ 1199.661308][ T46] netdevsim netdevsim1 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1199.698622][T17688] ext4 filesystem being mounted at /201/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 1199.758028][T17666] chnl_net:caif_netlink_parms(): no params data found [ 1199.774045][T17688] EXT4-fs (loop9): shut down requested (2) [ 1199.794468][ T46] netdevsim netdevsim1 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1200.045016][ T4274] Bluetooth: hci3: command 0x0409 tx timeout [ 1200.876745][T17688] EXT4-fs (loop9): unmounting filesystem. [ 1202.527094][T17718] loop3: detected capacity change from 0 to 512 [ 1202.836264][T17718] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a806e02c, mo2=0002] [ 1202.844657][T17718] System zones: 1-12 [ 1202.851333][T17666] bridge0: port 1(bridge_slave_0) entered blocking state [ 1202.866894][T17718] EXT4-fs error (device loop3): dx_probe:823: inode #2: comm syz.3.3106: Directory hole found for htree index block 0 [ 1202.882150][T17718] EXT4-fs (loop3): Remounting filesystem read-only [ 1202.888880][T17718] EXT4-fs (loop3): Cannot turn on journaled quota: type 0: error -117 [ 1202.897241][T17718] EXT4-fs error (device loop3): dx_probe:823: inode #2: comm syz.3.3106: Directory hole found for htree index block 0 [ 1202.915393][T17718] EXT4-fs (loop3): Remounting filesystem read-only [ 1202.922006][T17718] EXT4-fs (loop3): Cannot turn on journaled quota: type 1: error -117 [ 1202.930274][T17718] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 1202.969966][T17666] bridge0: port 1(bridge_slave_0) entered disabled state [ 1203.035386][T17666] device bridge_slave_0 entered promiscuous mode [ 1203.132201][T17666] bridge0: port 2(bridge_slave_1) entered blocking state [ 1203.274287][T17666] bridge0: port 2(bridge_slave_1) entered disabled state [ 1203.485141][ T4274] Bluetooth: hci3: command 0x041b tx timeout [ 1203.527689][T17666] device bridge_slave_1 entered promiscuous mode [ 1204.216903][T17130] EXT4-fs (loop3): unmounting filesystem. [ 1204.701798][T17666] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1205.282657][T17666] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1205.472290][ T4280] Bluetooth: hci3: command 0x040f tx timeout [ 1206.338454][T17666] team0: Port device team_slave_0 added [ 1206.450174][T17758] capability: warning: `syz.5.3116' uses deprecated v2 capabilities in a way that may be insecure [ 1206.464089][T17666] team0: Port device team_slave_1 added [ 1206.655222][T17762] netlink: 14 bytes leftover after parsing attributes in process `syz.5.3117'. [ 1206.849957][T17762] device vlan2 left promiscuous mode [ 1206.881414][T17762] device dummy0 left promiscuous mode [ 1206.912326][T17762] bridge0: port 3(vlan2) entered disabled state [ 1207.130890][T17666] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1207.156749][T17666] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1207.601395][ T4280] Bluetooth: hci3: command 0x0419 tx timeout [ 1207.811711][T17666] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1207.973808][T17666] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1207.980915][T17666] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1208.025759][T17666] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1208.579826][T17666] device hsr_slave_0 entered promiscuous mode [ 1208.839075][T17666] device hsr_slave_1 entered promiscuous mode [ 1209.013884][T17666] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1209.050550][T17666] Cannot create hsr debugfs directory [ 1209.149022][T17793] netlink: 'syz.5.3124': attribute type 4 has an invalid length. [ 1209.188689][T17798] netlink: 'syz.5.3124': attribute type 4 has an invalid length. [ 1209.956642][ T46] device hsr_slave_0 left promiscuous mode [ 1210.000107][ T46] device hsr_slave_1 left promiscuous mode [ 1210.020451][ T46] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1210.033195][ T46] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1210.072392][ T46] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1210.079854][ T46] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1210.121096][ T46] device bridge_slave_1 left promiscuous mode [ 1210.127365][ T46] bridge0: port 2(bridge_slave_1) entered disabled state [ 1210.189787][ T46] device bridge_slave_0 left promiscuous mode [ 1210.199170][ T46] bridge0: port 1(bridge_slave_0) entered disabled state [ 1210.409589][ T46] device veth1_macvtap left promiscuous mode [ 1210.415803][ T46] device veth0_macvtap left promiscuous mode [ 1210.467138][ T46] device veth1_vlan left promiscuous mode [ 1210.525230][ T46] device veth0_vlan left promiscuous mode [ 1213.280263][T17855] loop9: detected capacity change from 0 to 512 [ 1213.351856][T17855] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a806e02c, mo2=0002] [ 1213.373154][T17855] System zones: 1-12 [ 1213.489169][T17855] EXT4-fs error (device loop9): dx_probe:823: inode #2: comm syz.9.3139: Directory hole found for htree index block 0 [ 1213.534514][T17855] EXT4-fs (loop9): Remounting filesystem read-only [ 1213.550753][T17855] EXT4-fs (loop9): Cannot turn on journaled quota: type 0: error -117 [ 1213.559045][T17855] EXT4-fs error (device loop9): dx_probe:823: inode #2: comm syz.9.3139: Directory hole found for htree index block 0 [ 1213.574377][T17855] EXT4-fs (loop9): Remounting filesystem read-only [ 1213.603605][T17855] EXT4-fs (loop9): Cannot turn on journaled quota: type 1: error -117 [ 1213.617021][T17855] EXT4-fs (loop9): mounted filesystem without journal. Quota mode: writeback. [ 1213.630197][T17855] EXT4-fs (loop9): shut down requested (2) [ 1213.860817][ T46] team0 (unregistering): Port device team_slave_1 removed [ 1214.499757][ T46] team0 (unregistering): Port device team_slave_0 removed [ 1214.603350][T12852] EXT4-fs (loop9): unmounting filesystem. [ 1214.682574][ T46] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1214.742470][ T46] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1215.090643][ T46] bond0 (unregistering): Released all slaves [ 1215.594938][T17881] netlink: 14 bytes leftover after parsing attributes in process `syz.5.3144'. [ 1216.679600][T17899] loop3: detected capacity change from 0 to 256 [ 1216.737549][T17899] exfat: Deprecated parameter 'utf8' [ 1216.780575][T17899] exfat: Deprecated parameter 'utf8' [ 1216.785943][T17899] exfat: Deprecated parameter 'utf8' [ 1217.271494][T17899] exFAT-fs (loop3): failed to load upcase table (idx : 0x00010000, chksum : 0xffade8b4, utbl_chksum : 0xe619d30d) [ 1218.883597][T17936] netlink: 14 bytes leftover after parsing attributes in process `syz.6.3160'. [ 1219.632198][T17666] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 1219.754593][ T4313] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 1219.825181][T17666] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 1219.867533][T17666] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 1219.916444][T17666] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 1219.954533][ T4313] usb 4-1: config 220 has an invalid interface number: 76 but max is 2 [ 1220.000251][ T4313] usb 4-1: config 220 contains an unexpected descriptor of type 0x2, skipping [ 1220.049973][ T4313] usb 4-1: config 220 has an invalid descriptor of length 0, skipping remainder of the config [ 1220.085709][ T4313] usb 4-1: config 220 has no interface number 2 [ 1220.105080][T17966] loop9: detected capacity change from 0 to 128 [ 1220.107752][ T4313] usb 4-1: config 220 interface 1 altsetting 5 has 0 endpoint descriptors, different from the interface descriptor's value: 12 [ 1220.159992][T17966] EXT4-fs: inline encryption not supported [ 1220.186533][T17966] ext4: Unknown parameter 'noacl' [ 1220.198355][ T4313] usb 4-1: config 220 interface 0 has no altsetting 0 [ 1220.219035][T17666] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1220.228123][ T4313] usb 4-1: config 220 interface 76 has no altsetting 0 [ 1220.260116][ T4313] usb 4-1: config 220 interface 1 has no altsetting 0 [ 1220.301249][ T4476] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 1220.315561][ T4313] usb 4-1: New USB device found, idVendor=8086, idProduct=0b07, bcdDevice=6c.b9 [ 1220.339414][ T4476] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 1220.345117][ T4313] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1220.380030][ T4313] usb 4-1: Product: syz [ 1220.385967][T17666] 8021q: adding VLAN 0 to HW filter on device team0 [ 1220.413084][ T4313] usb 4-1: Manufacturer: syz [ 1220.418340][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 1220.436732][ T4313] usb 4-1: SerialNumber: syz [ 1220.447656][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 1220.487932][ T46] bridge0: port 1(bridge_slave_0) entered blocking state [ 1220.495222][ T46] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1220.562483][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 1220.593978][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 1220.623698][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 1220.645847][ T46] bridge0: port 2(bridge_slave_1) entered blocking state [ 1220.653063][ T46] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1220.676402][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 1220.692094][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 1220.801894][T17666] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 1220.821759][ T4313] usb 4-1: Found UVC 7.01 device syz (8086:0b07) [ 1220.856647][ T4313] usb 4-1: No valid video chain found. [ 1220.862331][T17666] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 1220.886173][ T4313] usb 4-1: selecting invalid altsetting 0 [ 1220.941815][ T4476] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 1220.972175][ T4476] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 1221.003687][ T4476] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 1221.025998][ T4313] usb 4-1: selecting invalid altsetting 0 [ 1221.033561][ T4476] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 1221.043775][ T4476] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 1221.045604][ T4313] usbtest: probe of 4-1:220.1 failed with error -22 [ 1221.066487][ T4476] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 1221.085143][ T4476] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 1221.121346][ T4476] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 1221.134821][ T4313] usb 4-1: USB disconnect, device number 2 [ 1221.141988][ T4476] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 1221.168842][ T4476] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 1222.622262][T18009] netlink: 76 bytes leftover after parsing attributes in process `syz.6.3178'. [ 1222.752571][T18007] netlink: 14 bytes leftover after parsing attributes in process `syz.3.3177'. [ 1222.972174][ T5700] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 1222.984219][ T5700] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 1223.014704][T17666] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1223.094604][ T5700] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 1223.148334][ T5700] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 1223.224720][ T5700] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 1223.243088][ T5700] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 1223.291892][ T5700] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 1223.460924][ T5700] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 1223.515647][T17666] device veth0_vlan entered promiscuous mode [ 1223.855626][T18036] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 1224.141827][T17666] device veth1_vlan entered promiscuous mode [ 1224.154767][ T4391] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 1224.298944][ T5700] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 1224.319572][ T5700] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 1224.356392][T17666] device veth0_macvtap entered promiscuous mode [ 1224.385698][T17666] device veth1_macvtap entered promiscuous mode [ 1224.455451][T17666] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1224.488644][T17666] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1224.489677][T18049] netlink: 68 bytes leftover after parsing attributes in process `syz.5.3188'. [ 1224.507834][T17666] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1224.507904][T17666] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1224.507922][T17666] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1224.700783][T17666] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1224.759022][T17666] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: ipvlan2 [ 1224.769212][T17666] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1224.951620][T17666] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1225.319755][T17666] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1225.377623][T17666] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1225.446671][T17666] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1225.475969][T17666] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1225.486043][T17666] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1225.498002][T17666] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1225.507897][T17666] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1225.519136][T17666] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1225.529330][T17666] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1225.540020][T17666] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1225.551547][T17666] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1225.567848][ T6016] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 1225.585094][ T6016] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 1225.607661][ T6016] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 1225.620472][ T6016] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 1225.629966][ T6016] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 1225.640455][ T6016] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 1225.664130][T17666] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1225.710853][T17666] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1225.744247][T17666] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1225.794991][T17666] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1227.235365][T18085] netlink: 68 bytes leftover after parsing attributes in process `syz.6.3199'. [ 1227.376516][ T4328] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1227.384498][ T4328] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1227.491157][T13833] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 1227.551204][ T4476] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1227.615754][ T4476] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1227.729938][T13833] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 1228.154077][T18095] fuse: Bad value for 'fd' [ 1228.247218][T18095] loop2: detected capacity change from 0 to 1024 [ 1228.364516][ T1277] ieee802154 phy0 wpan0: encryption failed: -22 [ 1228.371136][ T1277] ieee802154 phy1 wpan1: encryption failed: -22 [ 1228.388870][T18101] netlink: 12 bytes leftover after parsing attributes in process `syz.5.3203'. [ 1228.543893][T18095] EXT4-fs: inline encryption not supported [ 1229.436418][T18095] EXT4-fs: Ignoring removed mblk_io_submit option [ 1229.567008][T18095] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 1232.068731][T18149] loop9: detected capacity change from 0 to 512 [ 1232.360125][T17243] I/O error, dev loop9, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 1232.879220][T17666] EXT4-fs (loop2): unmounting filesystem. [ 1237.490557][T18186] overlayfs: failed to clone upperpath [ 1237.897341][T18182] loop9: detected capacity change from 0 to 131072 [ 1237.939995][T18182] F2FS-fs (loop9): invalid crc value [ 1238.032839][T18182] F2FS-fs (loop9): Found nat_bits in checkpoint [ 1238.081553][T18182] F2FS-fs (loop9): Cannot turn on quotas: -2 on 2 [ 1238.092589][T18182] F2FS-fs (loop9): Mounted with checkpoint version = 48b305e4 [ 1241.378586][T18227] netlink: 64 bytes leftover after parsing attributes in process `syz.3.3234'. [ 1243.009781][T18256] fuse: Bad value for 'fd' [ 1245.030428][T18301] loop3: detected capacity change from 0 to 1024 [ 1245.121648][T18301] EXT4-fs: Ignoring removed mblk_io_submit option [ 1245.203445][T18301] EXT4-fs: inline encryption not supported [ 1245.982994][T18301] EXT4-fs error (device loop3): ext4_map_blocks:637: inode #3: block 2: comm syz.3.3253: lblock 2 mapped to illegal pblock 2 (length 1) [ 1246.040180][T18301] EXT4-fs (loop3): Remounting filesystem read-only [ 1246.114095][T18301] Quota error (device loop3): qtree_write_dquot: dquota write failed [ 1246.122488][T18301] EXT4-fs error (device loop3): ext4_map_blocks:637: inode #3: block 48: comm syz.3.3253: lblock 0 mapped to illegal pblock 48 (length 1) [ 1246.238960][T18301] EXT4-fs (loop3): Remounting filesystem read-only [ 1246.245671][T18301] Quota error (device loop3): v2_write_file_info: Can't write info structure [ 1246.306367][T18301] EXT4-fs error (device loop3): ext4_acquire_dquot:6841: comm syz.3.3253: Failed to acquire dquot type 0 [ 1247.120130][T18301] EXT4-fs (loop3): Remounting filesystem read-only [ 1247.156766][T18301] EXT4-fs error (device loop3) in ext4_reserve_inode_write:5952: Corrupt filesystem [ 1247.192613][T18301] EXT4-fs (loop3): Remounting filesystem read-only [ 1247.211399][T18301] EXT4-fs error (device loop3): ext4_evict_inode:281: inode #11: comm syz.3.3253: mark_inode_dirty error [ 1247.229546][T18301] EXT4-fs (loop3): Remounting filesystem read-only [ 1247.246373][T18301] EXT4-fs warning (device loop3): ext4_evict_inode:284: couldn't mark inode dirty (err -117) [ 1247.264429][T18301] EXT4-fs (loop3): 1 orphan inode deleted [ 1247.277203][T18301] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none. [ 1247.298569][ T5700] EXT4-fs error (device loop3): ext4_map_blocks:637: inode #3: block 1: comm kworker/u4:16: lblock 1 mapped to illegal pblock 1 (length 1) [ 1247.330321][T18301] EXT4-fs error (device loop3): ext4_map_blocks:637: inode #2: block 16: comm syz.3.3253: lblock 0 mapped to illegal pblock 16 (length 1) [ 1247.378560][T18301] EXT4-fs (loop3): Remounting filesystem read-only [ 1247.413024][ T5700] EXT4-fs (loop3): Remounting filesystem read-only [ 1247.437026][ T5700] Quota error (device loop3): remove_tree: Can't read quota data block 1 [ 1247.475626][ T5700] EXT4-fs error (device loop3): ext4_release_dquot:6877: comm kworker/u4:16: Failed to release dquot type 0 [ 1247.525012][ T5700] EXT4-fs (loop3): Remounting filesystem read-only [ 1247.536493][T17130] EXT4-fs (loop3): unmounting filesystem. [ 1247.553196][T17130] EXT4-fs error (device loop3): __ext4_get_inode_loc:4520: comm syz-executor: Invalid inode table block 1 in block_group 0 [ 1247.608237][T17130] EXT4-fs (loop3): Remounting filesystem read-only [ 1247.635191][T17130] EXT4-fs error (device loop3) in ext4_reserve_inode_write:5952: Corrupt filesystem [ 1247.657031][T17130] EXT4-fs (loop3): Remounting filesystem read-only [ 1247.663599][T17130] EXT4-fs error (device loop3): ext4_quota_off:7147: inode #3: comm syz-executor: mark_inode_dirty error [ 1247.681332][T17130] EXT4-fs (loop3): Remounting filesystem read-only [ 1247.789002][T18332] loop3: detected capacity change from 0 to 512 [ 1247.799176][T18332] EXT4-fs (loop3): feature flags set on rev 0 fs, running e2fsck is recommended [ 1247.875770][T18332] EXT4-fs (loop3): orphan cleanup on readonly fs [ 1247.939451][T18332] EXT4-fs error (device loop3): mb_free_blocks:1839: group 0, inode 12: block 14:freeing already freed block (bit 14); block bitmap corrupt. [ 1247.975928][T18332] EXT4-fs error (device loop3): ext4_do_update_inode:5279: inode #12: comm syz.3.3262: corrupted inode contents [ 1247.991138][T18332] EXT4-fs error (device loop3): ext4_dirty_inode:6156: inode #12: comm syz.3.3262: mark_inode_dirty error [ 1248.003811][T18332] EXT4-fs error (device loop3): ext4_do_update_inode:5279: inode #12: comm syz.3.3262: corrupted inode contents [ 1248.017133][T18332] EXT4-fs error (device loop3): __ext4_ext_dirty:202: inode #12: comm syz.3.3262: mark_inode_dirty error [ 1248.029766][T18332] EXT4-fs error (device loop3): ext4_do_update_inode:5279: inode #12: comm syz.3.3262: corrupted inode contents [ 1248.059699][T18332] EXT4-fs error (device loop3) in ext4_orphan_del:303: Corrupt filesystem [ 1248.130466][T18332] EXT4-fs error (device loop3): ext4_do_update_inode:5279: inode #12: comm syz.3.3262: corrupted inode contents [ 1248.167576][T18332] EXT4-fs error (device loop3): ext4_truncate:4325: inode #12: comm syz.3.3262: mark_inode_dirty error [ 1248.220929][T18332] EXT4-fs error (device loop3) in ext4_process_orphan:345: Corrupt filesystem [ 1248.269537][T18332] EXT4-fs (loop3): 1 truncate cleaned up [ 1248.621974][ T5758] Quota error (device loop3): remove_tree: Cycle in quota tree detected: block 3 index 0 [ 1248.643700][ T5758] EXT4-fs error (device loop3): ext4_release_dquot:6877: comm kworker/u4:17: Failed to release dquot type 1 [ 1248.683494][T18332] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 1248.884715][T17130] EXT4-fs (loop3): unmounting filesystem. [ 1252.808130][T18382] netlink: 68 bytes leftover after parsing attributes in process `syz.5.3274'. [ 1255.623995][T18429] netlink: 68 bytes leftover after parsing attributes in process `syz.5.3287'. [ 1255.703867][T18423] loop2: detected capacity change from 0 to 4096 [ 1255.759415][T18423] EXT4-fs: inline encryption not supported [ 1255.809675][T18423] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 1256.208418][T18423] [EXT4 FS bs=4096, gc=1, bpg=524288, ipg=32, mo=a842c1a8, mo2=0003] [ 1257.390048][ T26] audit: type=1326 audit(1833173134.044:2): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18438 comm="syz.9.3289" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8315b9ce59 code=0x7ffc0000 [ 1257.448987][T18423] System zones: 0-5 [ 1257.584266][ T26] audit: type=1326 audit(1833173134.044:3): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18438 comm="syz.9.3289" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8315b9ce59 code=0x7ffc0000 [ 1257.620157][T18423] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 1257.810879][ T26] audit: type=1326 audit(1833173134.075:4): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18438 comm="syz.9.3289" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8315b9ce59 code=0x7ffc0000 [ 1258.057221][T17666] EXT4-fs (loop2): unmounting filesystem. [ 1258.475233][ T26] audit: type=1326 audit(1833173134.075:5): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18438 comm="syz.9.3289" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8315b9ce59 code=0x7ffc0000 [ 1258.553275][ T26] audit: type=1326 audit(1833173134.085:6): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18438 comm="syz.9.3289" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=17 compat=0 ip=0x7f8315b9ce59 code=0x7ffc0000 [ 1258.803201][ T26] audit: type=1326 audit(1833173134.085:7): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18438 comm="syz.9.3289" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8315b9ce59 code=0x7ffc0000 [ 1258.830087][T18470] netlink: 68 bytes leftover after parsing attributes in process `syz.9.3300'. [ 1258.911873][ T26] audit: type=1326 audit(1833173134.085:8): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18438 comm="syz.9.3289" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8315b9ce59 code=0x7ffc0000 [ 1259.020346][ T26] audit: type=1326 audit(1833173134.085:9): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18438 comm="syz.9.3289" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=436 compat=0 ip=0x7f8315b9ce59 code=0x7ffc0000 [ 1259.106928][ T26] audit: type=1326 audit(1833173134.085:10): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18438 comm="syz.9.3289" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=231 compat=0 ip=0x7f8315b9ce59 code=0x7ffc0000 [ 1259.178130][ T26] audit: type=1800 audit(1833173134.424:11): pid=18423 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.3284" name="file2" dev="loop2" ino=16 res=0 errno=0 [ 1261.747795][T18504] netlink: 52 bytes leftover after parsing attributes in process `syz.6.3309'. [ 1263.288768][T18530] netlink: 68 bytes leftover after parsing attributes in process `syz.3.3316'. [ 1266.752915][T18577] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready [ 1266.793231][T18577] IPv6: ADDRCONF(NETDEV_CHANGE): tunl0: link becomes ready [ 1266.888107][T18577] IPv6: ADDRCONF(NETDEV_CHANGE): gre0: link becomes ready [ 1266.934821][T18581] netlink: 68 bytes leftover after parsing attributes in process `syz.9.3334'. [ 1267.087305][T18577] IPv6: ADDRCONF(NETDEV_CHANGE): gretap0: link becomes ready [ 1267.109465][T18577] IPv6: ADDRCONF(NETDEV_CHANGE): erspan0: link becomes ready [ 1267.194532][T18577] IPv6: ADDRCONF(NETDEV_CHANGE): ip_vti0: link becomes ready [ 1267.233543][T18577] IPv6: ADDRCONF(NETDEV_CHANGE): ip6_vti0: link becomes ready [ 1272.299189][T18663] fuse: Bad value for 'fd' [ 1274.058340][T18656] loop2: detected capacity change from 0 to 40427 [ 1274.092062][T18656] F2FS-fs (loop2): Unrecognized mount option "whint_mode=fs-based" or missing value [ 1275.378576][ T4274] Bluetooth: hci1: command 0x0406 tx timeout [ 1275.446580][T18704] netlink: 20 bytes leftover after parsing attributes in process `syz.3.3368'. [ 1275.501501][T18704] netlink: 20 bytes leftover after parsing attributes in process `syz.3.3368'. [ 1278.308123][T18766] xt_hashlimit: size too large, truncated to 1048576 [ 1279.115823][T18789] overlayfs: failed to clone upperpath [ 1280.069783][T18798] netlink: 68 bytes leftover after parsing attributes in process `syz.6.3392'. [ 1283.710258][T18835] netlink: 68 bytes leftover after parsing attributes in process `syz.6.3404'. [ 1286.304202][T18876] netlink: 68 bytes leftover after parsing attributes in process `syz.9.3416'. [ 1287.813498][T18895] netlink: 244 bytes leftover after parsing attributes in process `syz.5.3421'. [ 1288.487260][ T1277] ieee802154 phy0 wpan0: encryption failed: -22 [ 1288.493611][ T1277] ieee802154 phy1 wpan1: encryption failed: -22 [ 1288.949389][T18917] netlink: 60 bytes leftover after parsing attributes in process `syz.6.3429'. [ 1290.954715][T18947] netlink: 244 bytes leftover after parsing attributes in process `syz.5.3435'. [ 1291.309314][T18960] netlink: 60 bytes leftover after parsing attributes in process `syz.6.3441'. [ 1292.332454][T18978] netlink: 4 bytes leftover after parsing attributes in process `syz.9.3442'. [ 1293.759068][T19001] netlink: 244 bytes leftover after parsing attributes in process `syz.9.3450'. [ 1294.636085][T19012] netlink: 60 bytes leftover after parsing attributes in process `syz.9.3453'. [ 1294.963996][T19021] netlink: 14 bytes leftover after parsing attributes in process `syz.6.3455'. [ 1295.866923][T19039] netlink: 12 bytes leftover after parsing attributes in process `syz.6.3458'. [ 1298.064883][T19071] netlink: 68 bytes leftover after parsing attributes in process `syz.9.3466'. [ 1299.592533][T19087] netlink: 14 bytes leftover after parsing attributes in process `syz.6.3468'. [ 1302.697477][T19104] fuse: Bad value for 'fd' [ 1303.669988][T19121] fuse: Bad value for 'fd' [ 1303.844100][T19125] netlink: 68 bytes leftover after parsing attributes in process `syz.2.3478'. [ 1308.520526][T19191] netlink: 68 bytes leftover after parsing attributes in process `syz.3.3491'. [ 1308.726973][T19196] fuse: Bad value for 'fd' [ 1308.952756][T19172] loop2: detected capacity change from 0 to 40427 [ 1309.067937][T19172] F2FS-fs (loop2): Corrupted extension count (64 + 1 > 64) [ 1309.195502][T19172] F2FS-fs (loop2): Can't find valid F2FS filesystem in 1th superblock [ 1309.462248][T19172] F2FS-fs (loop2): Unrecognized mount option "whint_mode=user-based" or missing value [ 1311.613438][T19217] netlink: 20 bytes leftover after parsing attributes in process `syz.5.3497'. [ 1313.798465][T19234] loop2: detected capacity change from 0 to 512 [ 1313.981459][T19234] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a806e02c, mo2=0002] [ 1313.989882][T19234] System zones: 1-12 [ 1314.278813][T19234] EXT4-fs error (device loop2): dx_probe:823: inode #2: comm syz.2.3501: Directory hole found for htree index block 0 [ 1314.301504][T19234] EXT4-fs (loop2): Remounting filesystem read-only [ 1314.309956][T19234] EXT4-fs (loop2): Cannot turn on journaled quota: type 0: error -117 [ 1314.318266][T19234] EXT4-fs error (device loop2): dx_probe:823: inode #2: comm syz.2.3501: Directory hole found for htree index block 0 [ 1314.332129][T19234] EXT4-fs (loop2): Remounting filesystem read-only [ 1314.338886][T19234] EXT4-fs (loop2): Cannot turn on journaled quota: type 1: error -117 [ 1314.347217][T19234] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 1314.366617][T19232] EXT4-fs error (device loop2): ext4_empty_dir:3139: inode #2: comm syz.2.3501: Directory hole found for htree leaf block 0 [ 1314.380102][T19232] EXT4-fs (loop2): Remounting filesystem read-only [ 1315.375868][T17666] EXT4-fs (loop2): unmounting filesystem. [ 1316.877089][T19271] netlink: 20 bytes leftover after parsing attributes in process `syz.2.3510'. [ 1317.693361][T19285] fuse: Bad value for 'fd' [ 1319.494162][T19310] netlink: 4 bytes leftover after parsing attributes in process `syz.9.3522'. [ 1319.533087][T19308] netlink: 20 bytes leftover after parsing attributes in process `syz.5.3524'. [ 1320.534837][ T4274] Bluetooth: hci3: command 0x0406 tx timeout [ 1320.978028][T19336] netlink: 49 bytes leftover after parsing attributes in process `syz.6.3532'. [ 1321.124977][T19311] loop2: detected capacity change from 0 to 40427 [ 1321.168334][T19311] F2FS-fs (loop2): invalid crc value [ 1321.304293][T19311] F2FS-fs (loop2): Found nat_bits in checkpoint [ 1322.072385][T19359] netlink: 104 bytes leftover after parsing attributes in process `syz.3.3536'. [ 1322.082437][T19358] netlink: 20 bytes leftover after parsing attributes in process `syz.5.3537'. [ 1322.499454][T19311] F2FS-fs (loop2): Start checkpoint disabled! [ 1323.229540][T19380] fuse: Bad value for 'fd' [ 1324.027061][T19401] netlink: 49 bytes leftover after parsing attributes in process `syz.9.3545'. [ 1324.076321][T19391] netlink: 14 bytes leftover after parsing attributes in process `syz.2.3544'. [ 1326.204601][T19430] netlink: 20 bytes leftover after parsing attributes in process `syz.2.3551'. [ 1326.403529][T19436] fuse: Bad value for 'fd' [ 1327.551593][T19453] netlink: 49 bytes leftover after parsing attributes in process `syz.6.3558'. [ 1329.053280][T19485] loop2: detected capacity change from 0 to 128 [ 1329.071521][T19484] netlink: 20 bytes leftover after parsing attributes in process `syz.5.3568'. [ 1329.797072][T19492] netlink: 104 bytes leftover after parsing attributes in process `syz.9.3569'. [ 1329.832439][T19493] 9pnet_fd: Insufficient options for proto=fd [ 1329.937040][T19495] netlink: 49 bytes leftover after parsing attributes in process `syz.3.3571'. [ 1330.049307][T19501] netlink: 14 bytes leftover after parsing attributes in process `syz.6.3572'. [ 1331.986264][T19548] netlink: 104 bytes leftover after parsing attributes in process `syz.6.3583'. [ 1332.014981][T19549] netlink: 20 bytes leftover after parsing attributes in process `syz.5.3582'. [ 1332.430662][T19559] netlink: 49 bytes leftover after parsing attributes in process `syz.6.3584'. [ 1333.087079][ T27] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 1333.678530][ T27] usb 3-1: Using ep0 maxpacket: 32 [ 1334.711450][ T27] usb 3-1: config index 0 descriptor too short (expected 29220, got 36) [ 1334.720001][ T27] usb 3-1: config 0 has too many interfaces: 81, using maximum allowed: 32 [ 1336.066593][ T27] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 81 [ 1336.284909][ T27] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 1336.327080][T19595] netlink: 104 bytes leftover after parsing attributes in process `syz.6.3594'. [ 1336.673668][ T27] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 1336.733281][T19600] netlink: 20 bytes leftover after parsing attributes in process `syz.9.3595'. [ 1336.779892][ T27] usb 3-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 1336.939740][ T27] usb 3-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40 [ 1336.988016][ T27] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1337.189616][ T27] usb 3-1: config 0 descriptor?? [ 1337.198762][ T27] usb 3-1: can't set config #0, error -71 [ 1337.418797][T19616] loop2: detected capacity change from 0 to 512 [ 1338.765746][T19612] netlink: 41 bytes leftover after parsing attributes in process `syz.6.3598'. [ 1338.939392][ T27] usb 3-1: USB disconnect, device number 2 [ 1338.977100][T19616] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a806e02c, mo2=0002] [ 1338.985189][T19616] System zones: 1-12 [ 1339.059480][T19616] EXT4-fs error (device loop2): dx_probe:823: inode #2: comm syz.2.3596: Directory hole found for htree index block 0 [ 1339.073049][T19616] EXT4-fs (loop2): Remounting filesystem read-only [ 1339.079814][T19616] EXT4-fs (loop2): Cannot turn on journaled quota: type 0: error -117 [ 1339.088152][T19616] EXT4-fs error (device loop2): dx_probe:823: inode #2: comm syz.2.3596: Directory hole found for htree index block 0 [ 1339.101645][T19616] EXT4-fs (loop2): Remounting filesystem read-only [ 1339.108302][T19616] EXT4-fs (loop2): Cannot turn on journaled quota: type 1: error -117 [ 1339.116589][T19616] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 1339.137693][T19615] EXT4-fs (loop2): shut down requested (2) [ 1339.413039][T17666] EXT4-fs (loop2): unmounting filesystem. [ 1339.841042][T19643] netlink: 104 bytes leftover after parsing attributes in process `syz.2.3608'. [ 1341.344645][T19663] mmap: syz.9.3612 (19663) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 1341.360226][T19664] netlink: 4 bytes leftover after parsing attributes in process `syz.6.3611'. [ 1347.444587][T19713] netlink: 4 bytes leftover after parsing attributes in process `syz.5.3627'. [ 1348.667190][ T1277] ieee802154 phy0 wpan0: encryption failed: -22 [ 1348.673549][ T1277] ieee802154 phy1 wpan1: encryption failed: -22 [ 1350.382460][T19790] netlink: 72 bytes leftover after parsing attributes in process `syz.3.3649'. [ 1350.822972][ C0] vcan0: j1939_tp_rxtimer: 0xffff888056d59c00: rx timeout, send abort [ 1351.316057][ C0] vcan0: j1939_tp_rxtimer: 0xffff888079007000: rx timeout, send abort [ 1352.980300][T19797] netlink: 14 bytes leftover after parsing attributes in process `syz.5.3652'. [ 1354.016306][ C0] vcan0: j1939_tp_rxtimer: 0xffff888079007000: abort rx timeout. Force session deactivation [ 1355.074099][T19849] netlink: 56 bytes leftover after parsing attributes in process `syz.2.3665'. [ 1356.264583][T19861] fuse: Unknown parameter 'user_i00000000000000000000' [ 1358.186260][T19892] netlink: 56 bytes leftover after parsing attributes in process `syz.2.3678'. [ 1360.598207][T19916] fuse: Unknown parameter 'user_i00000000000000000000' [ 1361.585325][T19935] fuse: Bad value for 'fd' [ 1361.954228][T19946] netlink: 56 bytes leftover after parsing attributes in process `syz.3.3692'. [ 1364.212390][T19968] fuse: Bad value for 'fd' [ 1365.546891][T19989] fuse: Bad value for 'fd' [ 1366.314628][T20009] loop2: detected capacity change from 0 to 512 [ 1367.029084][T20009] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a806e02c, mo2=0002] [ 1367.037348][T20009] System zones: 1-12 [ 1367.089601][T20009] EXT4-fs error (device loop2): dx_probe:823: inode #2: comm syz.2.3709: Directory hole found for htree index block 0 [ 1367.122465][T20009] EXT4-fs (loop2): Remounting filesystem read-only [ 1367.129437][T20009] EXT4-fs (loop2): Cannot turn on journaled quota: type 0: error -117 [ 1367.137805][T20009] EXT4-fs error (device loop2): dx_probe:823: inode #2: comm syz.2.3709: Directory hole found for htree index block 0 [ 1367.163303][T20009] EXT4-fs (loop2): Remounting filesystem read-only [ 1367.170015][T20009] EXT4-fs (loop2): Cannot turn on journaled quota: type 1: error -117 [ 1367.178285][T20009] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 1367.197388][T20005] EXT4-fs (loop2): shut down requested (2) [ 1367.466715][T17666] EXT4-fs (loop2): unmounting filesystem. [ 1368.143792][T20021] fuse: Unknown parameter 'user_id00000000000000000000' [ 1368.387139][T20024] device bridge1 entered promiscuous mode [ 1368.827241][T20024] team0: Port device bridge1 added [ 1368.866190][T20030] device bridge2 entered promiscuous mode [ 1368.908128][T20030] team0: Port device bridge2 added [ 1368.940614][T20024] bridge0: port 3(team0) entered blocking state [ 1369.095510][T20024] bridge0: port 3(team0) entered disabled state [ 1369.103415][T20024] device team0 entered promiscuous mode [ 1369.182704][T20024] device team_slave_0 entered promiscuous mode [ 1369.189067][T20024] device team_slave_1 entered promiscuous mode [ 1369.245346][T20024] bridge0: port 3(team0) entered blocking state [ 1369.251861][T20024] bridge0: port 3(team0) entered forwarding state [ 1369.519962][ T5846] netdevsim netdevsim5 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1369.736044][ T4274] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 1369.746139][ T4274] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 1369.757708][ T4274] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 1369.785386][ T4274] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 1369.794013][ T5846] netdevsim netdevsim5 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1369.807695][ T4274] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 1369.815978][ T4274] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 1369.880629][ T5846] netdevsim netdevsim5 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1370.203303][ T5846] netdevsim netdevsim5 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1370.274396][T20067] syz.9.3720 calls setitimer() with new_value NULL pointer. Misfeature support will be removed [ 1371.242255][T20078] loop2: detected capacity change from 0 to 512 [ 1371.455332][T20078] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a806e02c, mo2=0002] [ 1371.463957][T20078] System zones: 1-12 [ 1371.535561][T20078] EXT4-fs error (device loop2): dx_probe:823: inode #2: comm syz.2.3723: Directory hole found for htree index block 0 [ 1371.550179][T20078] EXT4-fs (loop2): Remounting filesystem read-only [ 1371.557023][T20078] EXT4-fs (loop2): Cannot turn on journaled quota: type 0: error -117 [ 1371.565858][T20078] EXT4-fs error (device loop2): dx_probe:823: inode #2: comm syz.2.3723: Directory hole found for htree index block 0 [ 1371.581112][T20078] EXT4-fs (loop2): Remounting filesystem read-only [ 1371.587806][T20078] EXT4-fs (loop2): Cannot turn on journaled quota: type 1: error -117 [ 1371.596221][T20078] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 1371.623301][T20078] EXT4-fs (loop2): shut down requested (2) [ 1371.930734][ T4280] Bluetooth: hci2: command 0x0409 tx timeout [ 1371.983549][T17666] EXT4-fs (loop2): unmounting filesystem. [ 1372.130315][T20055] chnl_net:caif_netlink_parms(): no params data found [ 1372.310287][T20089] fuse: Bad value for 'fd' [ 1372.360956][T20090] netlink: 64 bytes leftover after parsing attributes in process `syz.6.3728'. [ 1373.374267][T20105] 9pnet_fd: Insufficient options for proto=fd [ 1374.002868][ T4280] Bluetooth: hci2: command 0x041b tx timeout [ 1375.649218][T20055] bridge0: port 1(bridge_slave_0) entered blocking state [ 1375.656599][T20055] bridge0: port 1(bridge_slave_0) entered disabled state [ 1375.714066][T20055] device bridge_slave_0 entered promiscuous mode [ 1375.782031][T20055] bridge0: port 2(bridge_slave_1) entered blocking state [ 1375.789460][T20055] bridge0: port 2(bridge_slave_1) entered disabled state [ 1375.809866][T20055] device bridge_slave_1 entered promiscuous mode [ 1375.921646][T20055] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1376.009720][ T48] Bluetooth: hci2: command 0x040f tx timeout [ 1376.122004][T20055] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1376.217667][T20055] team0: Port device team_slave_0 added [ 1376.246198][T20055] team0: Port device team_slave_1 added [ 1376.357971][T20055] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1376.399729][T20055] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1376.539678][T20055] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1376.667191][T20055] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1376.685022][T20055] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1376.815132][T20055] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1377.012942][T20055] device hsr_slave_0 entered promiscuous mode [ 1377.050201][T20055] device hsr_slave_1 entered promiscuous mode [ 1377.082335][T20055] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1377.089969][T20055] Cannot create hsr debugfs directory [ 1378.029679][ T48] Bluetooth: hci2: command 0x0419 tx timeout [ 1378.203851][T20154] fuse: Unknown parameter 'user_id00000000000000000000' [ 1378.434720][ T5846] device hsr_slave_0 left promiscuous mode [ 1379.109064][ T5846] device hsr_slave_1 left promiscuous mode [ 1379.122754][ T5846] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1379.150303][ T5846] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1379.185755][ T5846] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1379.208844][T20163] netlink: 64 bytes leftover after parsing attributes in process `syz.3.3741'. [ 1379.229497][ T5846] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1379.237618][ T5846] device team0 left promiscuous mode [ 1379.247701][ T5846] device team_slave_0 left promiscuous mode [ 1379.256643][ T5846] device team_slave_1 left promiscuous mode [ 1379.271359][ T5846] bridge0: port 4(team0) entered disabled state [ 1379.288325][ T5846] device bridge_slave_1 left promiscuous mode [ 1379.302557][ T5846] bridge0: port 2(bridge_slave_1) entered disabled state [ 1379.320518][ T5846] device bridge_slave_0 left promiscuous mode [ 1379.328271][T20168] 9pnet_fd: Insufficient options for proto=fd [ 1379.341482][ T5846] bridge0: port 1(bridge_slave_0) entered disabled state [ 1379.481536][ T5846] device veth1_macvtap left promiscuous mode [ 1379.491012][ T5846] device veth0_macvtap left promiscuous mode [ 1379.505060][ T5846] device veth1_vlan left promiscuous mode [ 1379.529539][ T5846] device veth0_vlan left promiscuous mode [ 1382.032987][ T5846] team0 (unregistering): Port device bridge5 removed [ 1382.383167][ T5846] team0 (unregistering): Port device bridge4 removed [ 1382.675363][ T5846] team0 (unregistering): Port device bridge3 removed [ 1382.863329][ T5846] team0 (unregistering): Port device bridge2 removed [ 1383.261750][ T5846] team0 (unregistering): Port device bridge1 removed [ 1383.309143][T20204] fuse: Bad value for 'fd' [ 1386.738004][T20233] loop2: detected capacity change from 0 to 512 [ 1386.745473][T20233] ext4: Unknown parameter 'nouser_xattr' [ 1387.185223][ T5846] team0 (unregistering): Port device team_slave_1 removed [ 1387.382125][ T5846] team0 (unregistering): Port device team_slave_0 removed [ 1387.457870][T20239] loop2: detected capacity change from 0 to 8192 [ 1387.509463][T20239] loop2: p1 p2 p3 p4 < > [ 1387.514108][T20239] loop2: p1 size 262144 extends beyond EOD, truncated [ 1387.527457][T20239] loop2: p2 size 117441280 extends beyond EOD, truncated [ 1387.535806][T20239] loop2: p3 start 67108864 is beyond EOD, truncated [ 1388.044480][ T5846] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1388.686845][T20251] fuse: Bad value for 'fd' [ 1388.874581][ T5846] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1389.736047][T20261] udevd[20261]: inotify_add_watch(7, /dev/loop2p2, 10) failed: No such file or directory [ 1389.736060][T20198] udevd[20198]: inotify_add_watch(7, /dev/loop2p1, 10) failed: No such file or directory [ 1389.773435][T20264] udevd[20264]: inotify_add_watch(7, /dev/loop2p4, 10) failed: No such file or directory [ 1389.987959][ T5846] bond0 (unregistering): Released all slaves [ 1390.091833][T20244] device bridge14 entered promiscuous mode [ 1390.194005][T20249] device bridge14 entered promiscuous mode [ 1390.210351][T20249] team0: Port device bridge14 added [ 1392.689834][T20302] fuse: Bad value for 'fd' [ 1395.485701][T20055] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 1395.564297][T20055] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 1395.623566][T20055] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 1395.689632][T20055] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 1396.148130][T20055] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1396.260257][T20322] device bridge1 entered promiscuous mode [ 1396.281601][T20322] team0: Port device bridge1 added [ 1396.297352][T20055] 8021q: adding VLAN 0 to HW filter on device team0 [ 1396.359051][ T5846] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 1396.378865][ T5846] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 1396.441535][T20322] device bridge2 entered promiscuous mode [ 1396.497795][T20322] team0: Port device bridge2 added [ 1396.527134][T20326] bridge0: port 3(team0) entered blocking state [ 1396.533649][T20326] bridge0: port 3(team0) entered disabled state [ 1396.577674][T20326] device team0 entered promiscuous mode [ 1396.583285][T20326] device team_slave_0 entered promiscuous mode [ 1396.680626][T20326] device team_slave_1 entered promiscuous mode [ 1396.688645][T20326] bridge0: port 3(team0) entered blocking state [ 1396.695020][T20326] bridge0: port 3(team0) entered forwarding state [ 1396.708569][ T5387] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 1396.769317][ T5387] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 1397.055628][ T5387] bridge0: port 1(bridge_slave_0) entered blocking state [ 1397.062837][ T5387] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1397.430029][ T5387] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 1397.499422][ T5387] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 1397.544050][ T5387] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 1397.559601][T20342] netlink: 104 bytes leftover after parsing attributes in process `syz.6.3784'. [ 1397.578962][ T5387] bridge0: port 2(bridge_slave_1) entered blocking state [ 1397.586089][ T5387] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1397.624525][ T5387] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 1397.647698][ T5387] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 1397.705304][T20055] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 1397.788293][T20055] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 1399.556822][ T5387] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 1399.576051][ T5387] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 1400.109428][ T5387] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 1400.211764][ T5387] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 1400.253604][ T5387] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 1400.391740][ T5387] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 1400.435708][ T5387] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 1400.458783][ T5387] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 1400.469258][ T5387] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 1400.482747][ T5387] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 1403.257230][T20395] loop2: detected capacity change from 0 to 256 [ 1403.308334][T20398] netlink: 104 bytes leftover after parsing attributes in process `syz.6.3798'. [ 1403.317924][T20395] exFAT-fs (loop2): failed to load upcase table (idx : 0x00011bf5, chksum : 0xcea91b8a, utbl_chksum : 0xe619d30d) [ 1403.334477][T20400] 9pnet_fd: Insufficient options for proto=fd [ 1403.346593][T20395] exFAT-fs (loop2): bogus allocation bitmap size(need : 2, cur : 17179869186) [ 1403.523556][ T5700] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 1403.538747][ T5700] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 1403.560508][T20055] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1403.752560][T20414] fuse: Unknown parameter '0x0000000000000003' [ 1406.647341][T20441] netlink: 104 bytes leftover after parsing attributes in process `syz.3.3808'. [ 1407.062930][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 1407.084752][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 1407.139066][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 1407.183798][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 1407.220795][T20055] device veth0_vlan entered promiscuous mode [ 1407.242565][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 1407.284137][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 1407.419309][T20462] fuse: Unknown parameter '0xffffffffffffffff' [ 1407.539684][T20055] device veth1_vlan entered promiscuous mode [ 1407.855213][ T4328] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 1408.364718][ T4328] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 1408.424550][ T4328] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 1408.435282][ T4328] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 1408.447180][T20055] device veth0_macvtap entered promiscuous mode [ 1408.497759][T20480] netlink: 104 bytes leftover after parsing attributes in process `syz.9.3819'. [ 1408.551737][T20055] device veth1_macvtap entered promiscuous mode [ 1409.834353][ T1277] ieee802154 phy0 wpan0: encryption failed: -22 [ 1409.847318][ T1277] ieee802154 phy1 wpan1: encryption failed: -22 [ 1410.034595][T20055] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1410.136478][T20055] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1410.226614][T20055] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1410.314432][T20055] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1410.324478][T20055] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: ipvlan2 [ 1410.334444][T20055] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1410.344324][T20055] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1410.354872][T20055] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1410.364769][T20055] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1410.375299][T20055] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1410.389051][T20055] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1410.425063][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 1410.490379][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 1410.534886][T20055] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1410.546035][T20055] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1410.565992][T20055] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1410.581580][T20055] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1410.591687][T20055] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1410.626081][T20055] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1410.653485][T20055] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1410.682378][T20055] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1410.716910][T20055] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1410.931405][ T4328] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 1410.943963][ T4328] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 1410.962438][T20055] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1410.973834][T20055] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1410.973852][T20517] fuse: Unknown parameter '0xffffffffffffffff' [ 1411.161689][T20055] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1411.171817][T20055] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1411.307814][T20523] netlink: 104 bytes leftover after parsing attributes in process `syz.9.3830'. [ 1412.145432][ T11] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1412.190619][ T11] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1412.589744][T19452] usb 3-1: new high-speed USB device number 3 using dummy_hcd [ 1414.295465][T19452] usb 3-1: Using ep0 maxpacket: 32 [ 1414.335783][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 1414.343279][T19452] usb 3-1: unable to get BOS descriptor or descriptor too short [ 1414.373029][ T46] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1414.382140][ T46] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1414.412015][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 1414.502303][T19452] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1414.515353][T19452] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 1414.525643][T19452] usb 3-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 1414.554489][T19452] usb 3-1: New USB device found, idVendor=0499, idProduct=1005, bcdDevice= 0.40 [ 1414.583696][T19452] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1414.635576][T19452] usb 3-1: Product: syz [ 1414.647166][T19452] usb 3-1: Manufacturer: syz [ 1414.667814][T19452] usb 3-1: SerialNumber: syz [ 1415.724077][T19452] snd-usb-audio: probe of 3-1:1.0 failed with error -2 [ 1415.920843][T20574] netlink: 104 bytes leftover after parsing attributes in process `syz.5.3842'. [ 1416.077189][T19452] usb 3-1: USB disconnect, device number 3 [ 1416.118581][T20567] udevd[20567]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1416.362005][T20582] netlink: 4 bytes leftover after parsing attributes in process `syz.5.3844'. [ 1416.391308][T20582] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1416.591018][T20582] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1419.481762][T20621] device batadv_slave_1 entered promiscuous mode [ 1419.958720][T20612] device batadv_slave_1 left promiscuous mode [ 1420.778365][T20626] overlayfs: upper fs is r/o, try multi-lower layers mount [ 1422.090145][T20643] loop5: detected capacity change from 0 to 512 [ 1423.209513][T20643] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a806e02c, mo2=0002] [ 1423.217794][T20643] System zones: 1-12 [ 1423.238941][T20643] EXT4-fs error (device loop5): dx_probe:823: inode #2: comm syz.5.3857: Directory hole found for htree index block 0 [ 1423.251840][T20643] EXT4-fs (loop5): Remounting filesystem read-only [ 1423.258478][T20643] EXT4-fs (loop5): Cannot turn on journaled quota: type 0: error -117 [ 1423.266838][T20643] EXT4-fs error (device loop5): dx_probe:823: inode #2: comm syz.5.3857: Directory hole found for htree index block 0 [ 1423.283334][T20643] EXT4-fs (loop5): Remounting filesystem read-only [ 1423.290110][T20643] EXT4-fs (loop5): Cannot turn on journaled quota: type 1: error -117 [ 1423.298470][T20643] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: writeback. [ 1423.316193][T20639] EXT4-fs (loop5): shut down requested (2) [ 1423.550287][T20055] EXT4-fs (loop5): unmounting filesystem. [ 1424.577142][ T7950] usb 3-1: new high-speed USB device number 4 using dummy_hcd [ 1424.797914][ T7950] usb 3-1: Using ep0 maxpacket: 8 [ 1424.805786][ T7950] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1424.845419][ T7950] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 7 [ 1424.888406][ T7950] usb 3-1: New USB device found, idVendor=17ef, idProduct=6085, bcdDevice= 0.00 [ 1424.922137][ T7950] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1424.965243][ T7950] usb 3-1: config 0 descriptor?? [ 1425.013621][ T7950] usbhid 3-1:0.0: fixing wrong optional hid class descriptors count [ 1425.036631][ T7950] usbhid 3-1:0.0: can't add hid device: -22 [ 1425.052891][ T7950] usbhid: probe of 3-1:0.0 failed with error -22 [ 1425.200454][ T7950] usb 3-1: USB disconnect, device number 4 [ 1435.125544][T20715] loop5: detected capacity change from 0 to 256 [ 1435.222248][T20715] exFAT-fs (loop5): failed to load upcase table (idx : 0x0001053e, chksum : 0x9ba9f90d, utbl_chksum : 0xe619d30d) [ 1438.271372][T20751] loop5: detected capacity change from 0 to 1024 [ 1438.281745][T20751] EXT4-fs: Ignoring removed bh option [ 1439.500826][T20751] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: none. [ 1440.045373][T20055] EXT4-fs (loop5): unmounting filesystem. [ 1440.943060][T20779] ------------[ cut here ]------------ [ 1440.948697][T20779] memcpy: detected field-spanning write (size 32) of single field "&new->sel" at net/sched/cls_u32.c:853 (size 16) [ 1440.979132][T20779] WARNING: CPU: 0 PID: 20779 at net/sched/cls_u32.c:853 u32_change+0x1dfc/0x27e0 [ 1440.988676][T20779] Modules linked in: [ 1440.992695][T20779] CPU: 0 PID: 20779 Comm: syz.5.3895 Not tainted syzkaller #0 [ 1441.000411][T20779] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 1441.010583][T20779] RIP: 0010:u32_change+0x1dfc/0x27e0 [ 1441.016555][T20779] Code: f9 eb 59 e8 b6 88 1e f9 c6 05 31 97 a7 05 01 b9 10 00 00 00 48 c7 c7 a0 ac 8e 8b 4c 89 fe 48 c7 c2 20 ad 8e 8b e8 14 f7 e9 f8 <0f> 0b e9 ff ee ff ff e8 88 88 1e f9 eb 24 e8 81 88 1e f9 c6 05 a3 [ 1441.036538][T20779] RSP: 0018:ffffc9000c28ee40 EFLAGS: 00010246 [ 1441.042761][T20779] RAX: 28294baff99bbe00 RBX: ffff888078d5a8e0 RCX: 0000000000080000 [ 1441.050772][T20779] RDX: ffffc9000ffbf000 RSI: 0000000000003dec RDI: 0000000000003ded [ 1441.058841][T20779] RBP: ffffc9000c28eff8 R08: ffffc9000c28eac7 R09: 1ffff92001851d58 [ 1441.066892][T20779] R10: dffffc0000000000 R11: fffff52001851d59 R12: 0000000000000000 [ 1441.074950][T20779] R13: dffffc0000000000 R14: ffff888078134c00 R15: 0000000000000020 [ 1441.082985][T20779] FS: 00007f5155c3e6c0(0000) GS:ffff8880b8e00000(0000) knlGS:0000000000000000 [ 1441.091995][T20779] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 1441.098618][T20779] CR2: 000055e3c4350ee0 CR3: 0000000057035000 CR4: 00000000003506f0 [ 1441.106678][T20779] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 1441.114719][T20779] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 1441.122762][T20779] Call Trace: [ 1441.126162][T20779] [ 1441.129288][T20779] ? u32_get+0x370/0x370 [ 1441.133665][T20779] ? u32_get+0x370/0x370 [ 1441.137960][T20779] tc_new_tfilter+0x1160/0x1900 [ 1441.142961][T20779] ? kmem_cache_free+0xf7/0x290 [ 1441.147906][T20779] ? nlmon_xmit+0xac/0xf0 [ 1441.152433][T20779] ? tcf_proto_signal_destroying+0x240/0x240 [ 1441.158473][T20779] ? rcu_read_unlock+0x8c/0xa0 [ 1441.163378][T20779] ? tcf_proto_signal_destroying+0x240/0x240 [ 1441.169407][T20779] ? rtnetlink_rcv_msg+0x226/0xfc0 [ 1441.174670][T20779] ? tcf_proto_signal_destroying+0x240/0x240 [ 1441.180791][T20779] rtnetlink_rcv_msg+0x8cc/0xfc0 [ 1441.185798][T20779] ? rtnetlink_bind+0x80/0x80 [ 1441.190584][T20779] ? __local_bh_enable_ip+0x136/0x1c0 [ 1441.196073][T20779] ? lockdep_hardirqs_on+0x94/0x140 [ 1441.201429][T20779] ? __local_bh_enable_ip+0x136/0x1c0 [ 1441.206848][T20779] ? _local_bh_enable+0xa0/0xa0 [ 1441.211808][T20779] ? __dev_queue_xmit+0x26b/0x37c0 [ 1441.217074][T20779] ? __dev_queue_xmit+0x26b/0x37c0 [ 1441.222279][T20779] ? __dev_queue_xmit+0x1cd2/0x37c0 [ 1441.227530][T20779] ? __dev_queue_xmit+0x26b/0x37c0 [ 1441.232733][T20779] ? ref_tracker_free+0x68c/0x840 [ 1441.237865][T20779] ? __copy_skb_header+0x3ba/0x4f0 [ 1441.243112][T20779] ? refcount_inc+0x70/0x70 [ 1441.247666][T20779] ? memcpy+0x3c/0x60 [ 1441.251801][T20779] ? __copy_skb_header+0x3ba/0x4f0 [ 1441.256979][T20779] ? __skb_clone+0x480/0x790 [ 1441.261650][T20779] netlink_rcv_skb+0x1fb/0x450 [ 1441.266477][T20779] ? rtnetlink_bind+0x80/0x80 [ 1441.271240][T20779] ? netlink_ack+0x1170/0x1170 [ 1441.276066][T20779] ? netlink_deliver_tap+0x2e/0x1b0 [ 1441.281435][T20779] netlink_unicast+0x74d/0x8d0 [ 1441.286264][T20779] netlink_sendmsg+0x8ad/0xbd0 [ 1441.291125][T20779] ? netlink_getsockopt+0x550/0x550 [ 1441.296403][T20779] ? aa_sock_msg_perm+0x94/0x150 [ 1441.301491][T20779] ? bpf_lsm_socket_sendmsg+0x5/0x10 [ 1441.306870][T20779] ? security_socket_sendmsg+0x7c/0xa0 [ 1441.312465][T20779] ? netlink_getsockopt+0x550/0x550 [ 1441.317726][T20779] ____sys_sendmsg+0x5be/0x970 [ 1441.322624][T20779] ? __sys_sendmsg_sock+0x30/0x30 [ 1441.327699][T20779] ? __import_iovec+0x315/0x500 [ 1441.332668][T20779] ? import_iovec+0x6f/0xa0 [ 1441.337211][T20779] ___sys_sendmsg+0x2a2/0x360 [ 1441.341971][T20779] ? __sched_text_start+0x8/0x8 [ 1441.346950][T20779] ? __sys_sendmsg+0x290/0x290 [ 1441.351839][T20779] __sys_sendmmsg+0x2c3/0x510 [ 1441.356586][T20779] ? __ia32_sys_sendmsg+0x80/0x80 [ 1441.361707][T20779] ? __ia32_sys_get_robust_list+0x100/0x100 [ 1441.367694][T20779] ? lockdep_hardirqs_on_prepare+0x409/0x770 [ 1441.373768][T20779] ? lock_chain_count+0x20/0x20 [ 1441.378704][T20779] __x64_sys_sendmmsg+0x9c/0xb0 [ 1441.383613][T20779] do_syscall_64+0x4c/0xa0 [ 1441.388134][T20779] ? clear_bhb_loop+0x60/0xb0 [ 1441.392855][T20779] ? clear_bhb_loop+0x60/0xb0 [ 1441.397578][T20779] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1441.403548][T20779] RIP: 0033:0x7f5154d9ce59 [ 1441.408037][T20779] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1441.427715][T20779] RSP: 002b:00007f5155c3e028 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 1441.436170][T20779] RAX: ffffffffffffffda RBX: 00007f5155015fa0 RCX: 00007f5154d9ce59 [ 1441.444205][T20779] RDX: 04000000000001f2 RSI: 0000200000000000 RDI: 0000000000000004 [ 1441.452242][T20779] RBP: 00007f5154e32d6f R08: 0000000000000000 R09: 0000000000000000 [ 1441.460297][T20779] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1441.468333][T20779] R13: 00007f5155016038 R14: 00007f5155015fa0 R15: 00007ffefc245458 [ 1441.476378][T20779] [ 1441.479459][T20779] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 1441.486759][T20779] CPU: 0 PID: 20779 Comm: syz.5.3895 Not tainted syzkaller #0 [ 1441.494229][T20779] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 1441.504297][T20779] Call Trace: [ 1441.507593][T20779] [ 1441.510534][T20779] dump_stack_lvl+0x188/0x24e [ 1441.515241][T20779] ? memcpy+0x3c/0x60 [ 1441.519250][T20779] ? show_regs_print_info+0x12/0x12 [ 1441.524472][T20779] ? load_image+0x400/0x400 [ 1441.529043][T20779] panic+0x2e5/0x730 [ 1441.532960][T20779] ? bpf_jit_dump+0xd0/0xd0 [ 1441.537495][T20779] __warn+0x2f8/0x4f0 [ 1441.541492][T20779] ? u32_change+0x1dfc/0x27e0 [ 1441.546193][T20779] ? u32_change+0x1dfc/0x27e0 [ 1441.550892][T20779] report_bug+0x2ba/0x4f0 [ 1441.555309][T20779] ? u32_change+0x1dfc/0x27e0 [ 1441.560006][T20779] handle_bug+0x3a/0x70 [ 1441.564204][T20779] exc_invalid_op+0x16/0x40 [ 1441.568732][T20779] asm_exc_invalid_op+0x16/0x20 [ 1441.573619][T20779] RIP: 0010:u32_change+0x1dfc/0x27e0 [ 1441.578927][T20779] Code: f9 eb 59 e8 b6 88 1e f9 c6 05 31 97 a7 05 01 b9 10 00 00 00 48 c7 c7 a0 ac 8e 8b 4c 89 fe 48 c7 c2 20 ad 8e 8b e8 14 f7 e9 f8 <0f> 0b e9 ff ee ff ff e8 88 88 1e f9 eb 24 e8 81 88 1e f9 c6 05 a3 [ 1441.598550][T20779] RSP: 0018:ffffc9000c28ee40 EFLAGS: 00010246 [ 1441.604638][T20779] RAX: 28294baff99bbe00 RBX: ffff888078d5a8e0 RCX: 0000000000080000 [ 1441.612625][T20779] RDX: ffffc9000ffbf000 RSI: 0000000000003dec RDI: 0000000000003ded [ 1441.620607][T20779] RBP: ffffc9000c28eff8 R08: ffffc9000c28eac7 R09: 1ffff92001851d58 [ 1441.628595][T20779] R10: dffffc0000000000 R11: fffff52001851d59 R12: 0000000000000000 [ 1441.636585][T20779] R13: dffffc0000000000 R14: ffff888078134c00 R15: 0000000000000020 [ 1441.644593][T20779] ? u32_get+0x370/0x370 [ 1441.648887][T20779] ? u32_get+0x370/0x370 [ 1441.653152][T20779] tc_new_tfilter+0x1160/0x1900 [ 1441.658035][T20779] ? kmem_cache_free+0xf7/0x290 [ 1441.662904][T20779] ? nlmon_xmit+0xac/0xf0 [ 1441.667270][T20779] ? tcf_proto_signal_destroying+0x240/0x240 [ 1441.673282][T20779] ? rcu_read_unlock+0x8c/0xa0 [ 1441.678074][T20779] ? tcf_proto_signal_destroying+0x240/0x240 [ 1441.684070][T20779] ? rtnetlink_rcv_msg+0x226/0xfc0 [ 1441.689209][T20779] ? tcf_proto_signal_destroying+0x240/0x240 [ 1441.695204][T20779] rtnetlink_rcv_msg+0x8cc/0xfc0 [ 1441.700189][T20779] ? rtnetlink_bind+0x80/0x80 [ 1441.704895][T20779] ? __local_bh_enable_ip+0x136/0x1c0 [ 1441.710282][T20779] ? lockdep_hardirqs_on+0x94/0x140 [ 1441.715500][T20779] ? __local_bh_enable_ip+0x136/0x1c0 [ 1441.720887][T20779] ? _local_bh_enable+0xa0/0xa0 [ 1441.725756][T20779] ? __dev_queue_xmit+0x26b/0x37c0 [ 1441.730890][T20779] ? __dev_queue_xmit+0x26b/0x37c0 [ 1441.736018][T20779] ? __dev_queue_xmit+0x1cd2/0x37c0 [ 1441.741242][T20779] ? __dev_queue_xmit+0x26b/0x37c0 [ 1441.746380][T20779] ? ref_tracker_free+0x68c/0x840 [ 1441.751430][T20779] ? __copy_skb_header+0x3ba/0x4f0 [ 1441.756568][T20779] ? refcount_inc+0x70/0x70 [ 1441.761099][T20779] ? memcpy+0x3c/0x60 [ 1441.765091][T20779] ? __copy_skb_header+0x3ba/0x4f0 [ 1441.770231][T20779] ? __skb_clone+0x480/0x790 [ 1441.774848][T20779] netlink_rcv_skb+0x1fb/0x450 [ 1441.779631][T20779] ? rtnetlink_bind+0x80/0x80 [ 1441.784324][T20779] ? netlink_ack+0x1170/0x1170 [ 1441.789120][T20779] ? netlink_deliver_tap+0x2e/0x1b0 [ 1441.794345][T20779] netlink_unicast+0x74d/0x8d0 [ 1441.799153][T20779] netlink_sendmsg+0x8ad/0xbd0 [ 1441.803946][T20779] ? netlink_getsockopt+0x550/0x550 [ 1441.809165][T20779] ? aa_sock_msg_perm+0x94/0x150 [ 1441.814119][T20779] ? bpf_lsm_socket_sendmsg+0x5/0x10 [ 1441.819415][T20779] ? security_socket_sendmsg+0x7c/0xa0 [ 1441.824899][T20779] ? netlink_getsockopt+0x550/0x550 [ 1441.830135][T20779] ____sys_sendmsg+0x5be/0x970 [ 1441.834947][T20779] ? __sys_sendmsg_sock+0x30/0x30 [ 1441.840018][T20779] ? __import_iovec+0x315/0x500 [ 1441.844897][T20779] ? import_iovec+0x6f/0xa0 [ 1441.849424][T20779] ___sys_sendmsg+0x2a2/0x360 [ 1441.854128][T20779] ? __sched_text_start+0x8/0x8 [ 1441.859012][T20779] ? __sys_sendmsg+0x290/0x290 [ 1441.863842][T20779] __sys_sendmmsg+0x2c3/0x510 [ 1441.868559][T20779] ? __ia32_sys_sendmsg+0x80/0x80 [ 1441.873639][T20779] ? __ia32_sys_get_robust_list+0x100/0x100 [ 1441.879558][T20779] ? lockdep_hardirqs_on_prepare+0x409/0x770 [ 1441.885593][T20779] ? lock_chain_count+0x20/0x20 [ 1441.890483][T20779] __x64_sys_sendmmsg+0x9c/0xb0 [ 1441.895361][T20779] do_syscall_64+0x4c/0xa0 [ 1441.899810][T20779] ? clear_bhb_loop+0x60/0xb0 [ 1441.904509][T20779] ? clear_bhb_loop+0x60/0xb0 [ 1441.909208][T20779] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1441.915120][T20779] RIP: 0033:0x7f5154d9ce59 [ 1441.919549][T20779] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1441.939176][T20779] RSP: 002b:00007f5155c3e028 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 1441.947612][T20779] RAX: ffffffffffffffda RBX: 00007f5155015fa0 RCX: 00007f5154d9ce59 [ 1441.955601][T20779] RDX: 04000000000001f2 RSI: 0000200000000000 RDI: 0000000000000004 [ 1441.963591][T20779] RBP: 00007f5154e32d6f R08: 0000000000000000 R09: 0000000000000000 [ 1441.971575][T20779] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1441.979571][T20779] R13: 00007f5155016038 R14: 00007f5155015fa0 R15: 00007ffefc245458 [ 1441.987564][T20779] [ 1441.991175][T20779] Kernel Offset: disabled [ 1441.995507][T20779] Rebooting in 86400 seconds..