last executing test programs: 12.737728198s ago: executing program 0 (id=380): socket$inet6_tcp(0xa, 0x1, 0x0) syz_io_uring_setup(0x60db, &(0x7f0000000140)={0x0, 0x7cc, 0x40, 0x3, 0x2c0}, &(0x7f00000001c0), 0x0) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000040), 0x4) r0 = openat$qrtrtun(0xffffffffffffff9c, &(0x7f0000000080), 0x2) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) keyctl$set_reqkey_keyring(0xf, 0xfffffffb) socket$l2tp(0x2, 0x2, 0x73) r4 = socket(0x15, 0x5, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB], 0x48) socket(0x2c, 0x3, 0x0) getsockopt$inet_sctp6_SCTP_DISABLE_FRAGMENTS(r4, 0x84, 0x8, 0x0, &(0x7f0000000100)) close_range(r0, 0xffffffffffffffff, 0x0) 12.735782928s ago: executing program 4 (id=382): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000d40), r0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f00000001c0)={0x8, 0xf32}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f07ebbeea, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mmap$xdp(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x2, 0x42032, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) shmctl$IPC_STAT(0x0, 0x2, &(0x7f0000000700)=""/124) r4 = add_key(0x0, 0x0, &(0x7f00000002c0)="1d", 0x1, 0xfffffffffffffffe) keyctl$update(0x2, r4, 0x0, 0x0) sendmsg$IEEE802154_LIST_IFACE(r0, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000140)={&(0x7f00000000c0)={0x14, r1, 0x1, 0x70bd2c, 0x25dfdbfd}, 0x14}, 0x1, 0x0, 0x0, 0x44040}, 0x4000) 11.436164436s ago: executing program 0 (id=385): r0 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000080)={0x8, 0x9}, 0x0) socket$netlink(0x10, 0x3, 0x0) syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_WOL_GET(0xffffffffffffffff, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000180)=@abs={0x0, 0x0, 0x4e20}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) madvise(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x15) ioctl$DRM_IOCTL_MODE_GETRESOURCES(0xffffffffffffffff, 0xc04064a0, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000000)={'bridge0\x00', 0x0}) sendmsg$nl_route(r4, &(0x7f0000000100)={0x0, 0xf0, &(0x7f00000000c0)={&(0x7f0000000080)=@bridge_newvlan={0x28, 0x70, 0x1, 0x0, 0x0, {0x7, 0x0, 0x0, r6}, [@BRIDGE_VLANDB_ENTRY={0x10, 0x1, 0x0, 0x1, @BRIDGE_VLANDB_ENTRY_TUNNEL_INFO={0x4, 0x4, 0x0, 0x1, @BRIDGE_VLANDB_TINFO_ID={0x8, 0x1, 0x34000}}}]}, 0x28}}, 0x0) write$UHID_CREATE2(r0, 0x0, 0x119) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) r7 = syz_open_dev$hidraw(&(0x7f0000000000), 0x0, 0x81) ioctl$HIDIOCSFEATURE(r7, 0x4004480d, 0x0) 9.062423952s ago: executing program 1 (id=393): r0 = syz_create_resource$binfmt(&(0x7f0000001400)='./file0\x00') openat$binfmt(0xffffffffffffff9c, r0, 0x42, 0x1ff) openat$fuse(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) socket$unix(0x1, 0x1, 0x0) socket$netlink(0x10, 0x3, 0x0) socket$netlink(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)) openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000240), 0x20000, 0x0) socket$netlink(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000d40)) socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)) r1 = socket$packet(0x11, 0x3, 0x300) openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000000), 0x41, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)) socket(0x400000000010, 0x3, 0x0) socket$inet_udp(0x2, 0x2, 0x0) setsockopt$packet_int(r1, 0x107, 0x14, &(0x7f0000000080)=0xfff, 0x4) socketpair(0x1, 0x100000005, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) getpeername$packet(r2, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000040)=0x14) sendmmsg(r1, &(0x7f0000000440)=[{{&(0x7f0000000700)=@xdp={0x2c, 0x0, r3, 0x2f000000}, 0x80, &(0x7f00000004c0)=[{&(0x7f0000000180)='O', 0x36}], 0x1}}], 0x1, 0x0) 7.807756609s ago: executing program 1 (id=396): socket$inet6_tcp(0xa, 0x1, 0x0) syz_io_uring_setup(0x60db, &(0x7f0000000140)={0x0, 0x7cc, 0x40, 0x3, 0x2c0}, &(0x7f00000001c0), 0x0) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000040), 0x4) r0 = openat$qrtrtun(0xffffffffffffff9c, &(0x7f0000000080), 0x2) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) keyctl$set_reqkey_keyring(0xf, 0xfffffffb) socket$l2tp(0x2, 0x2, 0x73) r4 = socket(0x15, 0x5, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB], 0x48) socket(0x2c, 0x3, 0x0) getsockopt$inet_sctp6_SCTP_DISABLE_FRAGMENTS(r4, 0x84, 0x8, 0x0, &(0x7f0000000100)) close_range(r0, 0xffffffffffffffff, 0x0) 7.057626572s ago: executing program 3 (id=399): r0 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000080)='/dev/comedi3\x00', 0x400, 0x0) r1 = socket(0x11, 0x3, 0x0) setsockopt$SO_TIMESTAMPING(r1, 0x1, 0x41, &(0x7f00000000c0)=0x3be2, 0x4) sendmmsg(r1, &(0x7f00000002c0)=[{{&(0x7f0000000400)=@qipcrtr={0x2a, 0x1, 0x4001}, 0x80, &(0x7f0000000140)=[{&(0x7f0000000100)="d479183d7d98d181a4b5f3e38100", 0xe}], 0x1}}], 0x1, 0x24044015) recvmmsg(r1, 0x0, 0x0, 0x2002, 0x0) ioctl$COMEDI_DEVCONFIG(r0, 0x40946400, &(0x7f00000000c0)={'comedi_parport\x00', [0x4f23, 0x5, 0x2, 0x4000401, 0x1, 0x40000cc7, 0xfff, 0x5c952399, 0x5, 0x3ff, 0x802, 0x8, 0x10001, 0x1, 0x9, 0xe1cb, 0x6, 0x401, 0x3, 0x395, 0x80000089, 0xfffffffd, 0x32, 0xfffffff5, 0xffffeadb, 0x7, 0x3c, 0x8, 0x3, 0x8000000, 0x2ec0]}) ioctl$BTRFS_IOC_QGROUP_CREATE(r0, 0x6406, &(0x7f0000000180)={0x1, 0xc870}) syz_mount_image$vfat(&(0x7f00000000c0), &(0x7f0000000040)='./file1\x00', 0x10, &(0x7f00000001c0)={[{@shortname_mixed}, {@utf8}, {@shortname_mixed}, {@numtail}, {@fat=@nfs_nostale_ro}, {@utf8}, {@fat=@check_normal}, {@uni_xlateno}, {@shortname_winnt}, {@numtail}, {@rodir}, {@fat=@debug}, {@rodir}]}, 0x25, 0x35b, &(0x7f0000000640)="$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") r2 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f00000003c0), r2) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0xa) sendmsg$nl_route(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=ANY=[@ANYBLOB="4800000010000507000000000000000000000002", @ANYRES32=r3, @ANYBLOB="0000400000000002280012000c00010076657468"], 0x48}}, 0x44010) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000440)=ANY=[@ANYBLOB="2800000014002101000000000000000002200000", @ANYRES32=r3, @ANYBLOB="08000400ffffffff08000200e0"], 0x28}}, 0x0) r4 = socket$netlink(0x10, 0x3, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000440)=ANY=[@ANYBLOB="280000001400212100000000000000000200"], 0x28}}, 0x0) sendmsg$nl_route(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000240)=@ipv4_deladdr={0x20, 0x15, 0x1, 0xfffffffe, 0x0, {0x2, 0x0, 0x0, 0x0, r6}, [@IFA_ADDRESS={0x8, 0x1, @empty}]}, 0x20}}, 0x0) 6.824161662s ago: executing program 1 (id=400): r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) r1 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r1}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) r2 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) connect$llc(r2, &(0x7f0000000180)={0x1a, 0x0, 0xf9, 0x8, 0x0, 0x0, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x3e}}, 0x10) readv(r2, &(0x7f0000000240)=[{&(0x7f0000002240)=""/4090, 0xffa}], 0x1) listen(r0, 0x116e) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000000)=0x6) syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8) fanotify_mark(0xffffffffffffffff, 0x105, 0x40001032, 0xffffffffffffffff, 0x0) read$FUSE(0xffffffffffffffff, &(0x7f0000002300)={0x2020}, 0x2020) r5 = openat$sndseq(0xffffff9c, &(0x7f0000000200), 0x80080) bpf$OBJ_GET_MAP(0x7, &(0x7f0000000280)=@generic={&(0x7f0000000240)='./file0\x00', 0x0, 0x8}, 0x18) ioctl$SNDRV_SEQ_IOCTL_PVERSION(r5, 0x80045300, &(0x7f0000002000)) r6 = syz_open_dev$vbi(&(0x7f0000000000), 0x0, 0x2) ioctl$VIDIOC_PREPARE_BUF(r6, 0xc058565d, 0x0) ioctl$VIDIOC_S_INPUT(r6, 0xc0045627, &(0x7f00000001c0)=0x2) 6.823739202s ago: executing program 2 (id=401): r0 = syz_init_net_socket$ax25(0x3, 0x3, 0x8) ioctl$SIOCAX25ADDFWD(r0, 0x89ea, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$ETHTOOL_MSG_COALESCE_SET(r1, 0x0, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f00000006c0), 0xffffffffffffffff) r2 = socket(0x40000000015, 0x5, 0x0) connect$inet(r2, &(0x7f0000000240)={0x2, 0x4e20, @loopback}, 0x10) bind$inet(r2, &(0x7f0000000340)={0x2, 0x4e20, @loopback}, 0x57) ioctl$sock_ifreq(0xffffffffffffffff, 0x8910, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) read(r3, &(0x7f0000000380)=""/46, 0xfffffeb4) sendmsg$IPSET_CMD_SAVE(r3, &(0x7f0000000200)={0x0, 0x27, &(0x7f0000000140)={&(0x7f0000000180)=ANY=[@ANYBLOB="1c000000080601080000000000000004000000040500010006"], 0x1c}, 0x1, 0x0, 0x0, 0x4}, 0x10) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x3, &(0x7f0000004240)=0x40000006, 0x4) socket$inet_udp(0x2, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x4, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000000), 0x10}, 0x94) sendmsg$inet(0xffffffffffffffff, 0x0, 0x40) sendmsg$xdp(r2, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4090}, 0x0) sendmsg$alg(r2, &(0x7f0000000480)={0x0, 0x0, 0x0}, 0x0) sendmsg$nl_route_sched(r2, 0x0, 0x0) getsockopt(0xffffffffffffffff, 0x200000000114, 0x271e, 0x0, &(0x7f0000000040)) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_SET_TID_CONFIG(r4, &(0x7f0000000c00)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x40d0}, 0x0) 6.704516262s ago: executing program 2 (id=402): r0 = socket$inet_tcp(0x2, 0x1, 0x0) mkdirat(0xffffffffffffff9c, 0x0, 0x1c0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) syz_init_net_socket$llc(0x1a, 0x802, 0x0) readlinkat(0xffffffffffffff9c, &(0x7f0000000300)='./cgroup\x00', 0xfffffffffffffffe, 0xfe9c) r4 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r4, 0x84, 0x64, &(0x7f0000000280)=[@in={0x2, 0x4e21, @loopback}], 0x10) sendmsg$inet_sctp(r4, &(0x7f0000000540)={&(0x7f0000000340)=@in={0x2, 0x4e21, @loopback}, 0x10, &(0x7f0000000080)=[{&(0x7f0000000000)="fd", 0x1}], 0x1, 0x0, 0x0, 0x804c044}, 0x40) r5 = dup(r4) write$RDMA_USER_CM_CMD_CREATE_ID(r5, &(0x7f00000001c0)={0x0, 0x18, 0xfa00, {0x0, 0x0, 0x106, 0x2}}, 0x20) write$RDMA_USER_CM_CMD_CREATE_ID(r5, &(0x7f0000000440)={0x0, 0x18, 0xfa00, {0x4, 0x0, 0x106}}, 0x20) setsockopt$inet_sctp_SCTP_DEFAULT_PRINFO(r5, 0x84, 0x72, &(0x7f0000000100)={0x0, 0x0, 0x20}, 0xc) write$RDMA_USER_CM_CMD_RESOLVE_ROUTE(r5, 0x0, 0x0) write$RDMA_USER_CM_CMD_RESOLVE_ROUTE(r5, &(0x7f00000000c0)={0x4, 0x8, 0xfa00, {0xffffffffffffffff, 0x5}}, 0xfffd) close_range(r0, 0xffffffffffffffff, 0x0) 6.677005307s ago: executing program 3 (id=403): prlimit64(0x0, 0xe, &(0x7f0000000140)={0xc, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1c, 0x4, &(0x7f0000000100)=ANY=[@ANYBLOB="b400000000000000791048000000000071004f00000000009500000000000000db74589d4b38cc306ac390649f72dea0e50e2317db042855d6c74ff3493c7e31e3f6c643155a8e2e01d50bc3347475750472719cc516"], &(0x7f0000000040)='syzkaller\x00', 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x3e}, 0x94) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$packet_fanout(r2, 0x107, 0x12, 0x0, 0x0) splice(r1, 0x0, r2, 0x0, 0x7, 0x0) syz_mount_image$tmpfs(&(0x7f0000000140), &(0x7f00000000c0)='./file0\x00', 0x21408, 0x0, 0x1, 0x0, &(0x7f0000006380)) openat$dir(0xffffffffffffff9c, 0x0, 0x0, 0x0) r3 = openat2$dir(0xffffffffffffff9c, 0x0, 0x0, 0x0) utimensat(r3, 0x0, 0x0, 0x0) r4 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000600)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) r5 = shmget$private(0x0, 0x4000, 0x0, &(0x7f0000002000/0x4000)=nil) socket$nl_audit(0x10, 0x3, 0x9) shmctl$SHM_UNLOCK(r5, 0xc) ioctl$sock_inet_tcp_SIOCATMARK(r4, 0x8905, 0x0) 5.676825206s ago: executing program 2 (id=404): bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="180000000200000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x6f}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee2, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) getsockopt$bt_BT_FLUSHABLE(0xffffffffffffffff, 0x112, 0x8, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000280)={0x0, &(0x7f0000000100)=""/223, 0x0, 0xdf, 0x1}, 0x28) bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x0) r3 = syz_open_dev$sg(&(0x7f0000000040), 0x0, 0x800) ioctl$SG_GET_VERSION_NUM(r3, 0x2284, &(0x7f0000000080)) r4 = socket$inet6_sctp(0xa, 0x801, 0x84) connect$inet6(r4, &(0x7f0000000100)={0xa, 0x4e20, 0x0, @private1={0xfc, 0x1, '\x00', 0x1}, 0xfff}, 0x1c) sendto$inet6(r4, &(0x7f00000001c0)='N', 0x1, 0x80, &(0x7f0000000280)={0xa, 0x4e24, 0x0, @private2}, 0x1c) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000300)=@bpf_lsm={0xd, 0x5, &(0x7f0000000040)=@framed={{0xd6, 0xa, 0x0, 0x0, 0x0, 0x61, 0x11, 0xa0}, [@initr0]}, &(0x7f0000000000)='GPL\x00'}, 0x80) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TIPC_NL_MON_PEER_GET(r5, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000400)={0x58, 0x0, 0x400, 0x70bd27, 0x25dfdbfb, {}, [@TIPC_NLA_BEARER={0x44, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x14, 0x1, @in={0x2, 0x4e20, @multicast1}}, {0x20, 0x2, @in6={0xa, 0x8d8c, 0x80, @private1={0xfc, 0x1, '\x00', 0x1}, 0x4}}}}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x16d}]}]}, 0x58}, 0x1, 0x0, 0x0, 0x8804}, 0x20000000) shutdown(r4, 0x1) 5.622969977s ago: executing program 1 (id=405): socket$nl_route(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = getpid() r1 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r1, 0x107, 0x12, 0x0, 0x0) setsockopt$packet_fanout(r1, 0x107, 0x12, 0x0, 0x0) sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r4 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000040)='/sys/power/wakeup_count', 0x301880, 0x20d) write$tun(r4, &(0x7f0000000000)={@val={0x0, 0x886c}, @void, @eth={@random="000000f400", @dev={'\xaa\xaa\xaa\xaa\xaa', 0x18}, @val={@void, {0x8100, 0x0, 0x1, 0x2}}, {@llc_tr={0x11, {@llc={0xaa, 0xe, "d8"}}}}}}, 0x19) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000240)={'veth1_to_bridge\x00'}) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000300)=ANY=[@ANYBLOB="5c0000002000010000000000000000000220000400000000000000000500150002000000080009000000000008000b0005000000080017004e214e22080001"], 0x5c}}, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000340)={&(0x7f0000000e40)=ANY=[], 0x0, 0x52, 0x0, 0x1}, 0x28) gettid() sendmsg$ETHTOOL_MSG_DEBUG_SET(0xffffffffffffffff, &(0x7f0000001900)={0x0, 0x0, 0x0}, 0x10004000) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), r6) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r6, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000000c0)={0x1c, r7, 0x9c3fa077fa966179, 0x0, 0x0, {{0x7e}, {@val={0x8}, @void}}}, 0x1c}}, 0x4000054) 5.496371016s ago: executing program 4 (id=406): syz_open_dev$tty20(0xc, 0x4, 0x1) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={0x0, 0x5c}}, 0x20044000) r3 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r3, 0x0, 0x40, &(0x7f00000005c0)=@filter={'filter\x00', 0x42, 0x4, 0x478, 0xffffffff, 0x1b8, 0x1b8, 0xf8, 0xffffffff, 0xffffffff, 0x3e0, 0x3e0, 0x3e0, 0xffffffff, 0x4, 0x0, {[{{@ip={@empty, @loopback, 0x0, 0x0, 'veth0_to_batadv\x00', 'wlan0\x00', {}, {}, 0x11}, 0x0, 0xd0, 0xf8, 0x0, {0x100000000000000}, [@common=@inet=@l2tp={{0x30}, {0x0, 0x0, 0x2, 0x0, 0xf}}, @common=@unspec=@connmark={{0x30}}]}, @REJECT={0x28}}, {{@uncond, 0x0, 0x98, 0xc0, 0x0, {}, [@common=@unspec=@state={{0x28}, {0x7}}]}, @REJECT={0x28, 'REJECT\x00', 0x0, {0x8}}}, {{@ip={@multicast2, @private=0xa010102, 0x0, 0x0, 'veth1_virt_wifi\x00', '\x00', {}, {}, 0x0, 0x1}, 0x0, 0x1e8, 0x228, 0x0, {}, [@common=@inet=@policy={{0x158}, {[{@ipv4=@loopback, [0xffffff00, 0xff000000, 0xff000000, 0xffffff00], @ipv4=@dev={0xac, 0x14, 0x14, 0x28}, [0xff000000, 0x0, 0x0, 0xffffffff], 0x4d6, 0x0, 0x73, 0x1, 0x0, 0x7}, {@ipv6=@private0={0xfc, 0x0, '\x00', 0x1}, [0xffffffff, 0xffffff00, 0xff, 0xff000000], @ipv4=@empty, [0xff, 0xff000000, 0xffffff00], 0x4d3, 0x3506, 0x6, 0x0, 0x10, 0x3}, {@ipv6=@private0={0xfc, 0x0, '\x00', 0x1}, [0xffffffff, 0xff000000, 0xff, 0xff], @ipv6=@private1={0xfc, 0x1, '\x00', 0x1}, [0xff, 0xff, 0xff000000, 0xff000000], 0x4d5, 0x3507, 0x0, 0x1, 0x16, 0x1}, {@ipv4=@local, [0xff, 0xffffff00, 0xffffff00, 0xff], @ipv6=@ipv4={'\x00', '\xff\xff', @rand_addr=0x64010100}, [0xff, 0xff000000, 0xffffffff, 0xffffff00], 0x4d5, 0x0, 0x33, 0x1, 0x4, 0x4}], 0x2, 0x1}}, @common=@socket0={{0x20}}]}, @common=@unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz1\x00'}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x4d8) r4 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCSTI(r4, 0x5412, &(0x7f0000000140)=0x8) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000500)=ANY=[@ANYBLOB="020000000400000005000000aa"], 0x50) bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000000), &(0x7f0000000200), 0xa7c, r5}, 0x38) sendmsg$kcm(0xffffffffffffffff, &(0x7f00000003c0)={&(0x7f0000000000)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @local}, 0x9, 0x14}}, 0x80, 0x0}, 0x0) socket$kcm(0x10, 0x2, 0x0) socket$inet6(0xa, 0x5, 0x0) 4.334755778s ago: executing program 2 (id=407): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) syz_mount_image$ext4(&(0x7f0000001140)='ext4\x00', &(0x7f00000007c0)='./file1\x00', 0x400c84, &(0x7f0000000340), 0x1, 0x792, &(0x7f0000020c00)="$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") renameat2(0xffffffffffffff9c, &(0x7f00000001c0)='./file0/file0\x00', 0xffffffffffffff9c, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$inet6(0xa, 0x3, 0x7) syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(0x0, 0x0, 0x0) io_uring_enter(0xffffffffffffffff, 0x47f9, 0x0, 0x0, 0x0, 0x0) writev(0xffffffffffffffff, 0x0, 0x0) r3 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x4, @tid=r3}, &(0x7f0000000340)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) r4 = mq_open(&(0x7f0000000200)='!se\xf7ih,\x17i\xeb-\xed\xacP\xe6lNn\x00xseqinux\x10', 0x6e93ebbbcc0884f2, 0x2, &(0x7f0000000300)={0x0, 0x1, 0x6}) mq_timedsend(r4, 0x0, 0x0, 0x0, 0x0) 4.331539138s ago: executing program 4 (id=408): r0 = syz_create_resource$binfmt(&(0x7f0000001400)='./file0\x00') openat$binfmt(0xffffffffffffff9c, r0, 0x42, 0x1ff) openat$fuse(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) socket$unix(0x1, 0x1, 0x0) socket$netlink(0x10, 0x3, 0x0) socket$netlink(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)) openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000240), 0x20000, 0x0) socket$netlink(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000d40)) socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)) r1 = socket$packet(0x11, 0x3, 0x300) openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000000), 0x41, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)) socket(0x400000000010, 0x3, 0x0) socket$inet_udp(0x2, 0x2, 0x0) setsockopt$packet_int(r1, 0x107, 0x14, &(0x7f0000000080)=0xfff, 0x4) socketpair(0x1, 0x100000005, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) getpeername$packet(r2, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000040)=0x14) sendmmsg(r1, &(0x7f0000000440)=[{{&(0x7f0000000700)=@xdp={0x2c, 0x0, r3, 0x2f000000}, 0x80, &(0x7f00000004c0)=[{&(0x7f0000000180)='O', 0x36}], 0x1}}], 0x1, 0x0) 4.330847797s ago: executing program 0 (id=409): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100}, 0x0) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000080)={0x50, 0x2, 0x6, 0x5, 0x0, 0x0, {0x7}, [@IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_TIMEOUT={0x8, 0x11}]}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_TYPENAME={0x12, 0x3, 'hash:net,port\x00'}]}, 0x50}}, 0x20004000) r1 = getpid() sched_setscheduler(r1, 0x1, &(0x7f0000000200)=0x7) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) mkdirat(0xffffffffffffff9c, 0x0, 0x0) syz_open_dev$vbi(0x0, 0x0, 0x2) r4 = syz_open_procfs(0x0, &(0x7f0000000100)='net/sockstat\x00') read$FUSE(r4, &(0x7f0000002780)={0x2020}, 0x5ecfb203) openat$dir(0xffffffffffffff9c, 0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8}, 0x94) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, 0x0}, 0x0) r5 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000), 0x28241, 0x0) ioctl$SNDCTL_DSP_RESET(r5, 0x5000, 0x0) r6 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r6, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000000c0)=@gettaction={0x28, 0x32, 0x6dd711a25f4cb68b, 0x0, 0x0, {}, [@action_gd=@TCA_ACT_TAB={0x14, 0x1, [{0x10, 0x1, 0x0, 0x0, @TCA_ACT_KIND={0xa, 0x1, 'pedit\x00'}}]}]}, 0x28}}, 0x0) 4.120632602s ago: executing program 4 (id=410): r0 = syz_init_net_socket$ax25(0x3, 0x3, 0x8) ioctl$SIOCAX25ADDFWD(r0, 0x89ea, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$ETHTOOL_MSG_COALESCE_SET(r1, 0x0, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f00000006c0), 0xffffffffffffffff) r2 = socket(0x40000000015, 0x5, 0x0) connect$inet(r2, &(0x7f0000000240)={0x2, 0x4e20, @loopback}, 0x10) bind$inet(r2, &(0x7f0000000340)={0x2, 0x4e20, @loopback}, 0x57) ioctl$sock_ifreq(0xffffffffffffffff, 0x8910, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) read(r3, &(0x7f0000000380)=""/46, 0xfffffeb4) sendmsg$IPSET_CMD_SAVE(r3, &(0x7f0000000200)={0x0, 0x27, &(0x7f0000000140)={&(0x7f0000000180)=ANY=[@ANYBLOB="1c000000080601080000000000000004000000040500010006"], 0x1c}, 0x1, 0x0, 0x0, 0x4}, 0x10) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x3, &(0x7f0000004240)=0x40000006, 0x4) socket$inet_udp(0x2, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x4, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000000), 0x10}, 0x94) sendmsg$inet(0xffffffffffffffff, 0x0, 0x40) sendmsg$xdp(r2, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4090}, 0x0) sendmsg$alg(r2, &(0x7f0000000480)={0x0, 0x0, 0x0}, 0x0) sendmsg$nl_route_sched(r2, 0x0, 0x0) getsockopt(0xffffffffffffffff, 0x200000000114, 0x271e, 0x0, &(0x7f0000000040)) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_SET_TID_CONFIG(r4, &(0x7f0000000c00)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x40d0}, 0x0) 3.552308305s ago: executing program 3 (id=411): socket$inet6_tcp(0xa, 0x1, 0x0) syz_io_uring_setup(0x60db, &(0x7f0000000140)={0x0, 0x7cc, 0x40, 0x3, 0x2c0}, &(0x7f00000001c0), 0x0) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000040), 0x4) r0 = openat$qrtrtun(0xffffffffffffff9c, &(0x7f0000000080), 0x2) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) keyctl$set_reqkey_keyring(0xf, 0xfffffffb) socket$l2tp(0x2, 0x2, 0x73) r4 = socket(0x15, 0x5, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB], 0x48) bpf$MAP_UPDATE_ELEM(0x2, 0x0, 0x0) getsockopt$inet_sctp6_SCTP_DISABLE_FRAGMENTS(r4, 0x84, 0x8, 0x0, &(0x7f0000000100)) close_range(r0, 0xffffffffffffffff, 0x0) 2.449187027s ago: executing program 0 (id=412): syz_open_dev$dri(&(0x7f0000000280), 0x1, 0x0) bpf$ENABLE_STATS(0x20, 0x0, 0x0) r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000980)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x50) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000200)={r0, 0xffffffffffffffff}, 0x4) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0xa, 0x10, &(0x7f0000000740)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000020000007b8a00fe0000000087080000000000007b8af0ff00000000bda100000000000027000000f8ffffffbfa400000000000007040000f0ffffffb70200000000000018230000", @ANYRES32=r1, @ANYBLOB="0000000000000000b704000008000000850000004900000095"], &(0x7f0000000440)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) openat$kvm(0xffffffffffffff9c, &(0x7f0000001280), 0xc02, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) socket(0xa, 0x5, 0x0) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/power/pm_test', 0x42, 0x18) ioctl$sock_inet_SIOCADDRT(0xffffffffffffffff, 0x890b, &(0x7f0000000000)={0x4000000, {0x2, 0x4e22, @private=0xa010101}, {0x2, 0x0, @local}, {0x2, 0x4e24, @rand_addr=0x6}, 0x1d7, 0x0, 0x0, 0x0, 0xfff8, 0x0, 0x4, 0x8}) sendmsg$NL80211_CMD_CONNECT(0xffffffffffffffff, 0x0, 0x48885) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1400000007"], 0x50) pwrite64(0xffffffffffffffff, &(0x7f0000000000)='L', 0x1, 0x7ffffffe) r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r2, &(0x7f0000000040)={0x1f, 0xffff, 0x3}, 0x6) write$binfmt_misc(r2, &(0x7f0000000000), 0xd) 2.426024153s ago: executing program 2 (id=413): r0 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000080)='/dev/comedi3\x00', 0x400, 0x0) r1 = socket(0x11, 0x3, 0x0) setsockopt$SO_TIMESTAMPING(r1, 0x1, 0x41, &(0x7f00000000c0)=0x3be2, 0x4) sendmmsg(r1, &(0x7f00000002c0)=[{{&(0x7f0000000400)=@qipcrtr={0x2a, 0x1, 0x4001}, 0x80, &(0x7f0000000140)=[{&(0x7f0000000100)="d479183d7d98d181a4b5f3e38100", 0xe}], 0x1}}], 0x1, 0x24044015) recvmmsg(r1, &(0x7f0000000ac0)=[{{0x0, 0x0, 0x0}, 0xfffffffe}], 0x1, 0x2002, 0x0) ioctl$COMEDI_DEVCONFIG(r0, 0x40946400, &(0x7f00000000c0)={'comedi_parport\x00', [0x4f23, 0x5, 0x2, 0x4000401, 0x1, 0x40000cc7, 0xfff, 0x5c952399, 0x5, 0x3ff, 0x802, 0x8, 0x10001, 0x1, 0x9, 0xe1cb, 0x6, 0x401, 0x3, 0x395, 0x80000089, 0xfffffffd, 0x32, 0xfffffff5, 0xffffeadb, 0x7, 0x3c, 0x8, 0x3, 0x8000000, 0x2ec0]}) ioctl$BTRFS_IOC_QGROUP_CREATE(r0, 0x6406, &(0x7f0000000180)={0x1, 0xc870}) syz_mount_image$vfat(&(0x7f00000000c0), &(0x7f0000000040)='./file1\x00', 0x10, &(0x7f00000001c0)={[{@shortname_mixed}, {@utf8}, {@shortname_mixed}, {@numtail}, {@fat=@nfs_nostale_ro}, {@utf8}, {@fat=@check_normal}, {@uni_xlateno}, {@shortname_winnt}, {@numtail}, {@rodir}, {@fat=@debug}, {@rodir}]}, 0x25, 0x35b, &(0x7f0000000640)="$eJzs3T1sW9UXAPDjPMd2K/WfDH+pgsmwIaGqKWKAhURVkSoyQJHF14KlpnzEBikWltIhbhYQI4gFCSa2DjB2RgwIsTGwUiRUQCx0olIrHnofsR3baVNEQoHfb4hOzj3n3ftenuLkKbl+eTnWz8/HhevXr0WjUYnq8unluFGJxZiLJAqXAgD4N7mRpvFrWsgTT9yu+v2jMV9EtUNZHQBwEPLX/1eOjRL1fTbutw4AuOdM/f4/29Mzs28e2LIAgAM09vpfyRMP7hqeeMxfHf5NAADwz/XsCy8+tbIaca7ZbER03+m3+q14fDS+ciFei06sxclYiFsRxYOC4mlB9vHJs6tnTjYzPy5GK+votyK6g36r+ElhJcn767EUC7FY9qfD/iTrX8r7mxFxaZDPH91KvzUfR8v5vzsaa3EqFuL/U/0RZ1fP/JamaX6AVnenfxCxHY2dk8jWfyIW4pu5/JPzkfUWx8oyW0vN5ul0dVd//3I9rwMAAAAAAAAAAAAAAAAAAAAAgINw4kitWVoc7n+Tdgf9t8+VBc3p8Xx/n2K43B9ou9gfKK3v7M7zbjK5P9Du/Xn6rWrM/a1nDgAAAAAAAAAAAAAAAAAAAPeO3mYt2p3O2kZv8+L6KKh1BkUwl2Xe+OrTL47EZM3rySgT1eJwu2rKXGxeXE8iIhtKYtieDtvTJK+ZWEbWUmQq0b58Zbji8Zr68Cym2rOgPjVUKdfU7nSOPfDDR7O6fh9lkhgONWZOUSnnHxvq/q9IzVrP7YNKb/PUHWqupmm6V/vWh9Nd0YioTn3h/orgy2uv3vdI7/ijvUp1vf15uenDQw8vPHf1g09+Xm93orw0nU5to3cr/dNzJTG6Nyrlda7MuBNmB9ujzPZGb7OdfPvL8/e/9/VEcTL7/knHM2/tPddnk5laEWTLrO3jTOdn3Pyzg5duDu/eu7+Yxz9ebl/Z+v6nnYt5p66xbxI26gAAAAAAAAAAAAAAAAAAgEMx9r/id+GxZw5uRQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABw+Ebv/z8WbE9l9hPcHMT0UH1to7fn5EcO9VQBAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAPgP+yMAAP//1k5zjQ==") r2 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f00000003c0), r2) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0xa) sendmsg$nl_route(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=ANY=[@ANYBLOB="4800000010000507000000000000000000000002", @ANYRES32=r3, @ANYBLOB="0000400000000002280012000c00010076657468"], 0x48}}, 0x44010) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000440)=ANY=[@ANYBLOB="2800000014002101000000000000000002200000", @ANYRES32=r3, @ANYBLOB="08000400ffffffff08000200e0"], 0x28}}, 0x0) r4 = socket$netlink(0x10, 0x3, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000440)=ANY=[@ANYBLOB="280000001400212100000000000000000200"], 0x28}}, 0x0) sendmsg$nl_route(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000240)=@ipv4_deladdr={0x20, 0x15, 0x1, 0xfffffffe, 0x0, {0x2, 0x0, 0x0, 0x0, r6}, [@IFA_ADDRESS={0x8, 0x1, @empty}]}, 0x20}}, 0x0) 2.277179748s ago: executing program 0 (id=414): r0 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000080)='/dev/comedi3\x00', 0x400, 0x0) r1 = socket(0x11, 0x3, 0x0) setsockopt$SO_TIMESTAMPING(r1, 0x1, 0x41, &(0x7f00000000c0)=0x3be2, 0x4) sendmmsg(r1, &(0x7f00000002c0)=[{{&(0x7f0000000400)=@qipcrtr={0x2a, 0x1, 0x4001}, 0x80, &(0x7f0000000140)}}], 0x1, 0x24044015) recvmmsg(r1, &(0x7f0000000ac0)=[{{0x0, 0x0, 0x0}, 0xfffffffe}, {{0x0, 0x0, 0x0}, 0x5}], 0x2, 0x2002, 0x0) ioctl$COMEDI_DEVCONFIG(r0, 0x40946400, &(0x7f00000000c0)={'comedi_parport\x00', [0x4f23, 0x5, 0x2, 0x4000401, 0x1, 0x40000cc7, 0xfff, 0x5c952399, 0x5, 0x3ff, 0x802, 0x8, 0x10001, 0x1, 0x9, 0xe1cb, 0x6, 0x401, 0x3, 0x395, 0x80000089, 0xfffffffd, 0x32, 0xfffffff5, 0xffffeadb, 0x7, 0x3c, 0x8, 0x3, 0x8000000, 0x2ec0]}) ioctl$BTRFS_IOC_QGROUP_CREATE(r0, 0x6406, &(0x7f0000000180)={0x1, 0xc870}) syz_mount_image$vfat(&(0x7f00000000c0), &(0x7f0000000040)='./file1\x00', 0x10, &(0x7f00000001c0)={[{@shortname_mixed}, {@utf8}, {@shortname_mixed}, {@numtail}, {@fat=@nfs_nostale_ro}, {@utf8}, {@fat=@check_normal}, {@uni_xlateno}, {@shortname_winnt}, {@numtail}, {@rodir}, {@fat=@debug}, {@rodir}]}, 0x25, 0x35b, &(0x7f0000000640)="$eJzs3T1sW9UXAPDjPMd2K/WfDH+pgsmwIaGqKWKAhURVkSoyQJHF14KlpnzEBikWltIhbhYQI4gFCSa2DjB2RgwIsTGwUiRUQCx0olIrHnofsR3baVNEQoHfb4hOzj3n3ftenuLkKbl+eTnWz8/HhevXr0WjUYnq8unluFGJxZiLJAqXAgD4N7mRpvFrWsgTT9yu+v2jMV9EtUNZHQBwEPLX/1eOjRL1fTbutw4AuOdM/f4/29Mzs28e2LIAgAM09vpfyRMP7hqeeMxfHf5NAADwz/XsCy8+tbIaca7ZbER03+m3+q14fDS+ciFei06sxclYiFsRxYOC4mlB9vHJs6tnTjYzPy5GK+votyK6g36r+ElhJcn767EUC7FY9qfD/iTrX8r7mxFxaZDPH91KvzUfR8v5vzsaa3EqFuL/U/0RZ1fP/JamaX6AVnenfxCxHY2dk8jWfyIW4pu5/JPzkfUWx8oyW0vN5ul0dVd//3I9rwMAAAAAAAAAAAAAAAAAAAAAgINw4kitWVoc7n+Tdgf9t8+VBc3p8Xx/n2K43B9ou9gfKK3v7M7zbjK5P9Du/Xn6rWrM/a1nDgAAAAAAAAAAAAAAAAAAAPeO3mYt2p3O2kZv8+L6KKh1BkUwl2Xe+OrTL47EZM3rySgT1eJwu2rKXGxeXE8iIhtKYtieDtvTJK+ZWEbWUmQq0b58Zbji8Zr68Cym2rOgPjVUKdfU7nSOPfDDR7O6fh9lkhgONWZOUSnnHxvq/q9IzVrP7YNKb/PUHWqupmm6V/vWh9Nd0YioTn3h/orgy2uv3vdI7/ijvUp1vf15uenDQw8vPHf1g09+Xm93orw0nU5to3cr/dNzJTG6Nyrlda7MuBNmB9ujzPZGb7OdfPvL8/e/9/VEcTL7/knHM2/tPddnk5laEWTLrO3jTOdn3Pyzg5duDu/eu7+Yxz9ebl/Z+v6nnYt5p66xbxI26gAAAAAAAAAAAAAAAAAAgEMx9r/id+GxZw5uRQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABw+Ebv/z8WbE9l9hPcHMT0UH1to7fn5EcO9VQBAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAPgP+yMAAP//1k5zjQ==") ioctl$KVM_GET_VCPU_EVENTS(0xffffffffffffffff, 0x8040ae9f, 0x0) r2 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f00000003c0), r2) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0xa) sendmsg$nl_route(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=ANY=[@ANYBLOB="4800000010000507000000000000000000000002", @ANYRES32=r3, @ANYBLOB="0000400000000002280012000c00010076657468"], 0x48}}, 0x44010) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000440)=ANY=[@ANYBLOB="2800000014002101000000000000000002200000", @ANYRES32=r3, @ANYBLOB="08000400ffffffff08000200e0"], 0x28}}, 0x0) r4 = socket$netlink(0x10, 0x3, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000440)=ANY=[@ANYBLOB="280000001400212100000000000000000200"], 0x28}}, 0x0) sendmsg$nl_route(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000240)=@ipv4_deladdr={0x20, 0x15, 0x1, 0xfffffffe, 0x0, {0x2, 0x0, 0x0, 0x0, r6}, [@IFA_ADDRESS={0x8, 0x1, @empty}]}, 0x20}}, 0x0) 2.261595035s ago: executing program 4 (id=415): syz_mount_image$exfat(&(0x7f0000000100), &(0x7f0000000140)='./bus\x00', 0x0, &(0x7f00000003c0)=ANY=[], 0x22, 0x1517, &(0x7f0000002780)="$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") creat(&(0x7f0000000580)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0) creat(&(0x7f0000000e00)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x103}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f00000000c0)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) creat(&(0x7f0000000580)='./bus\x00', 0x0) fanotify_init(0xf00, 0x2) io_uring_register$IORING_REGISTER_BUFFERS2(0xffffffffffffffff, 0xf, 0x0, 0x0) rename(&(0x7f0000000100)='./bus\x00', &(0x7f0000000140)='./file1\x00') mknod$loop(&(0x7f0000000000)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x8, 0x1) rename(&(0x7f0000000600)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f0000000f40)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') syz_mount_image$fuse(0x0, &(0x7f0000000280)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x800002, 0x0, 0x0, 0x0, 0x0) mknod$loop(&(0x7f0000000000)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x100, 0x1) openat(0xffffffffffffff9c, &(0x7f0000000380)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x143041, 0x0) setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x40, 0x0, 0x0) ioctl$FBIOPUTCMAP(0xffffffffffffffff, 0x4605, 0x0) socket$nl_route(0x10, 0x3, 0x0) 2.201938665s ago: executing program 1 (id=416): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000d40), r0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f00000001c0)={0x8, 0xf32}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f07ebbeea, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mmap$xdp(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x2, 0x42032, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) shmctl$IPC_STAT(0x0, 0x2, &(0x7f0000000700)=""/124) r4 = add_key(0x0, 0x0, &(0x7f00000002c0)="1d", 0x1, 0xfffffffffffffffe) keyctl$update(0x2, r4, 0x0, 0x0) sendmsg$IEEE802154_LIST_IFACE(r0, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000140)={&(0x7f00000000c0)={0x14, r1, 0x1, 0x70bd2c, 0x25dfdbfd}, 0x14}, 0x1, 0x0, 0x0, 0x44040}, 0x4000) 1.423848713s ago: executing program 3 (id=417): socket(0x11, 0x3, 0x0) r0 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f00000003c0), r0) getsockname$packet(r0, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0xa) sendmsg$nl_route(r0, 0x0, 0x44010) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000440)=ANY=[@ANYBLOB="280000001400210100000000000000", @ANYRES32=r1, @ANYBLOB="08000400ffffffff08000200e0"], 0x28}}, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) getsockname$packet(r0, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000440)=ANY=[@ANYBLOB="280000001400212100000000000000000200"], 0x28}}, 0x0) sendmsg$nl_route(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000240)=@ipv4_deladdr={0x20, 0x15, 0x1, 0xfffffffe, 0x0, {0x2, 0x0, 0x0, 0x0, r4}, [@IFA_ADDRESS={0x8, 0x1, @empty}]}, 0x20}}, 0x0) 1.372521534s ago: executing program 3 (id=427): sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000000740)=[{{0x0, 0x0, &(0x7f0000000300), 0x0, &(0x7f0000000b40)=ANY=[@ANYBLOB="14000000000000002900000000000014000000000000002900000034000000fdffffff00000000180000000000000029000000040000000400000000000000d80000000000000029000000360000005e170000000000000001"], 0x188}}], 0x1, 0x810) ioctl$AUTOFS_DEV_IOCTL_READY(0xffffffffffffffff, 0xc0189376, &(0x7f0000000300)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x4}}, './file0\x00'}) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f00000004c0)="2c385a7af3", 0x5) r3 = accept4(r2, 0x0, 0x0, 0x800) pwritev(0xffffffffffffffff, &(0x7f0000000d80)=[{&(0x7f0000000780)="42ebe7f5d8dde5f3e9c5c7e7bc09d8d80f373ae4dc85e6cb597bd322663b986ff272399bec41d811a763bcd2cdc221d2ac6cdeeca815ce250ce959444e7f296cb11433530cfccd0c6f450147b46eb5bbe281810c76577aaf554801815d1ee516cc0752832233d7610ce165a593e43cbaa4f52db28e5aead94767ad0d0ccf1cd422fcfd87e848c94a", 0x88}, {0x0}, {&(0x7f0000000540)="b4e007f06d056aa0367c7356f83c", 0xe}, {&(0x7f0000000580)="1ab9a1fec95331b4b1bb5f840b0a198cb5add980a1e5cd402aaabeb7a27d1418376394238ae0a1ca9cc4187957fdca8dfa1151a311e577e1461a24", 0x3b}, {&(0x7f0000000700)="741f5b18fef5626f948b1919860417488e3e5141e17a3031271340b8ac67e4f5f7a2", 0x22}, {&(0x7f0000000d00)="7cedc13b1cbf2308b2000d", 0xb}], 0x6, 0x4d9e, 0x8) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000f80)=ANY=[@ANYBLOB="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"], 0xd4}}, 0x0) sendmmsg$alg(r3, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0xff31}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r3, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x3000, 0x2000, &(0x7f0000003000/0x2000)=nil}) r4 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@text32={0x20, &(0x7f00000000c0)="650f340f3566b842000f00d8b805000000b9a00000000f01c13e0f070fde460b0f0130670f01c2f2360f217a0f07", 0x2e}], 0x1, 0x11, 0x0, 0x0) pwritev(0xffffffffffffffff, &(0x7f0000000b00)=[{&(0x7f0000001880)="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", 0xf91}], 0x1, 0x1, 0x2) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000180)=[@text64={0x40, 0x0}], 0x1, 0x18, 0x0, 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) 16.560343ms ago: executing program 4 (id=418): bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="180000000200000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x6f}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee2, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) getsockopt$bt_BT_FLUSHABLE(0xffffffffffffffff, 0x112, 0x8, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000280)={0x0, &(0x7f0000000100)=""/223, 0x0, 0xdf, 0x1}, 0x28) bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x0) r3 = syz_open_dev$sg(&(0x7f0000000040), 0x0, 0x800) ioctl$SG_GET_VERSION_NUM(r3, 0x2284, &(0x7f0000000080)) r4 = socket$inet6_sctp(0xa, 0x801, 0x84) connect$inet6(r4, &(0x7f0000000100)={0xa, 0x4e20, 0x0, @private1={0xfc, 0x1, '\x00', 0x1}, 0xfff}, 0x1c) sendto$inet6(r4, &(0x7f00000001c0)='N', 0x1, 0x80, &(0x7f0000000280)={0xa, 0x4e24, 0x0, @private2}, 0x1c) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000300)=@bpf_lsm={0xd, 0x5, &(0x7f0000000040)=@framed={{0xd6, 0xa, 0x0, 0x0, 0x0, 0x61, 0x11, 0xa0}, [@initr0]}, &(0x7f0000000000)='GPL\x00'}, 0x80) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TIPC_NL_MON_PEER_GET(r5, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000400)={0x58, 0x0, 0x400, 0x70bd27, 0x25dfdbfb, {}, [@TIPC_NLA_BEARER={0x44, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x14, 0x1, @in={0x2, 0x4e20, @multicast1}}, {0x20, 0x2, @in6={0xa, 0x8d8c, 0x80, @private1={0xfc, 0x1, '\x00', 0x1}, 0x4}}}}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x16d}]}]}, 0x58}, 0x1, 0x0, 0x0, 0x8804}, 0x20000000) shutdown(r4, 0x1) 10.027512ms ago: executing program 0 (id=429): r0 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000080)='/dev/comedi3\x00', 0x400, 0x0) r1 = socket(0x11, 0x3, 0x0) setsockopt$SO_TIMESTAMPING(r1, 0x1, 0x41, &(0x7f00000000c0)=0x3be2, 0x4) sendmmsg(r1, &(0x7f00000002c0)=[{{&(0x7f0000000400)=@qipcrtr={0x2a, 0x1, 0x4001}, 0x80, &(0x7f0000000140)}}], 0x1, 0x24044015) recvmmsg(r1, &(0x7f0000000ac0)=[{{0x0, 0x0, 0x0}, 0xfffffffe}, {{0x0, 0x0, 0x0}, 0x5}], 0x2, 0x2002, 0x0) ioctl$COMEDI_DEVCONFIG(r0, 0x40946400, &(0x7f00000000c0)={'comedi_parport\x00', [0x4f23, 0x5, 0x2, 0x4000401, 0x1, 0x40000cc7, 0xfff, 0x5c952399, 0x5, 0x3ff, 0x802, 0x8, 0x10001, 0x1, 0x9, 0xe1cb, 0x6, 0x401, 0x3, 0x395, 0x80000089, 0xfffffffd, 0x32, 0xfffffff5, 0xffffeadb, 0x7, 0x3c, 0x8, 0x3, 0x8000000, 0x2ec0]}) ioctl$BTRFS_IOC_QGROUP_CREATE(r0, 0x6406, &(0x7f0000000180)={0x1, 0xc870}) syz_mount_image$vfat(&(0x7f00000000c0), &(0x7f0000000040)='./file1\x00', 0x10, &(0x7f00000001c0)={[{@shortname_mixed}, {@utf8}, {@shortname_mixed}, {@numtail}, {@fat=@nfs_nostale_ro}, {@utf8}, {@fat=@check_normal}, {@uni_xlateno}, {@shortname_winnt}, {@numtail}, {@rodir}, {@fat=@debug}, {@rodir}]}, 0x25, 0x35b, &(0x7f0000000640)="$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") ioctl$KVM_GET_VCPU_EVENTS(0xffffffffffffffff, 0x8040ae9f, 0x0) r2 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f00000003c0), r2) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0xa) sendmsg$nl_route(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=ANY=[@ANYBLOB="4800000010000507000000000000000000000002", @ANYRES32=r3, @ANYBLOB="0000400000000002280012000c00010076657468"], 0x48}}, 0x44010) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000440)=ANY=[@ANYBLOB="2800000014002101000000000000000002200000", @ANYRES32=r3, @ANYBLOB="08000400ffffffff08000200e0"], 0x28}}, 0x0) r4 = socket$netlink(0x10, 0x3, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000440)=ANY=[@ANYBLOB="280000001400212100000000000000000200"], 0x28}}, 0x0) sendmsg$nl_route(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000240)=@ipv4_deladdr={0x20, 0x15, 0x1, 0xfffffffe, 0x0, {0x2, 0x0, 0x0, 0x0, r6}, [@IFA_ADDRESS={0x8, 0x1, @empty}]}, 0x20}}, 0x0) 878µs ago: executing program 1 (id=419): mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x3000003, 0x200000006c832, 0xffffffffffffffff, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0xe, 0x4, 0x4, 0x22}, 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x11, 0xd, &(0x7f0000000280)=ANY=[@ANYBLOB="1800"/14, @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000600)={{r0}, &(0x7f0000000580), &(0x7f00000005c0)=r1}, 0x20) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000780)={{r0}, 0x0, &(0x7f0000000680)=r1}, 0x20) socket$nl_route(0x10, 0x3, 0x0) setsockopt$MRT_INIT(0xffffffffffffffff, 0x0, 0xc8, &(0x7f0000003d40), 0x4) syz_emit_ethernet(0x6a, &(0x7f0000000280)={@multicast, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}, @void, {@ipv4={0x800, @gre={{0x6, 0x4, 0x0, 0x0, 0x5c, 0x0, 0x0, 0x0, 0x2f, 0x0, @rand_addr=0x64010102, @multicast1=0xe000c800, {[@ra={0x94, 0x4}]}}, {{0x0, 0x0, 0x1, 0x0, 0xb, 0x0, 0x0, 0x4, 0x6558}, {0x0, 0x0, 0x0, 0x0, 0x11}, {}, {0x8, 0x88be, 0x0, {{0x0, 0x1, 0x40}, 0xfffff788}}}}}}}, 0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/custom1\x00', 0x2, 0x0) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r3 = socket$kcm(0x2, 0x3, 0x2) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000000040)={'syzkaller1\x00', @broadcast}) write$tun(r2, &(0x7f0000000840)=ANY=[@ANYBLOB="08008863"], 0xd8) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) sendto$inet6(0xffffffffffffffff, &(0x7f0000000180), 0x0, 0x0, 0x0, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r4 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r4, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) userfaultfd(0x80001) openat$dlm_plock(0xffffff9c, &(0x7f0000000400), 0x909000, 0x0) r5 = syz_init_net_socket$nfc_raw(0x27, 0x3, 0x0) close_range(r5, 0xffffffffffffffff, 0x0) 370.6µs ago: executing program 2 (id=420): syz_open_dev$tty20(0xc, 0x4, 0x1) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={0x0, 0x5c}}, 0x20044000) r3 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r3, 0x0, 0x40, &(0x7f00000005c0)=@filter={'filter\x00', 0x42, 0x4, 0x478, 0xffffffff, 0x1b8, 0x1b8, 0xf8, 0xffffffff, 0xffffffff, 0x3e0, 0x3e0, 0x3e0, 0xffffffff, 0x4, 0x0, {[{{@ip={@empty, @loopback, 0x0, 0x0, 'veth0_to_batadv\x00', 'wlan0\x00', {}, {}, 0x11}, 0x0, 0xd0, 0xf8, 0x0, {0x100000000000000}, [@common=@inet=@l2tp={{0x30}, {0x0, 0x0, 0x2, 0x0, 0xf}}, @common=@unspec=@connmark={{0x30}}]}, @REJECT={0x28}}, {{@uncond, 0x0, 0x98, 0xc0, 0x0, {}, [@common=@unspec=@state={{0x28}, {0x7}}]}, @REJECT={0x28, 'REJECT\x00', 0x0, {0x8}}}, {{@ip={@multicast2, @private=0xa010102, 0x0, 0x0, 'veth1_virt_wifi\x00', '\x00', {}, {}, 0x0, 0x1}, 0x0, 0x1e8, 0x228, 0x0, {}, [@common=@inet=@policy={{0x158}, {[{@ipv4=@loopback, [0xffffff00, 0xff000000, 0xff000000, 0xffffff00], @ipv4=@dev={0xac, 0x14, 0x14, 0x28}, [0xff000000, 0x0, 0x0, 0xffffffff], 0x4d6, 0x0, 0x73, 0x1, 0x0, 0x7}, {@ipv6=@private0={0xfc, 0x0, '\x00', 0x1}, [0xffffffff, 0xffffff00, 0xff, 0xff000000], @ipv4=@empty, [0xff, 0xff000000, 0xffffff00], 0x4d3, 0x3506, 0x6, 0x0, 0x10, 0x3}, {@ipv6=@private0={0xfc, 0x0, '\x00', 0x1}, [0xffffffff, 0xff000000, 0xff, 0xff], @ipv6=@private1={0xfc, 0x1, '\x00', 0x1}, [0xff, 0xff, 0xff000000, 0xff000000], 0x4d5, 0x3507, 0x0, 0x1, 0x16, 0x1}, {@ipv4=@local, [0xff, 0xffffff00, 0xffffff00, 0xff], @ipv6=@ipv4={'\x00', '\xff\xff', @rand_addr=0x64010100}, [0xff, 0xff000000, 0xffffffff, 0xffffff00], 0x4d5, 0x0, 0x33, 0x1, 0x4, 0x4}], 0x2, 0x1}}, @common=@socket0={{0x20}}]}, @common=@unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz1\x00'}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x4d8) r4 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCSTI(r4, 0x5412, &(0x7f0000000140)=0x8) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000500)=ANY=[@ANYBLOB="020000000400000005000000aa"], 0x50) bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000000), &(0x7f0000000200), 0xa7c, r5}, 0x38) sendmsg$kcm(0xffffffffffffffff, &(0x7f00000003c0)={&(0x7f0000000000)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @local}, 0x9, 0x14}}, 0x80, 0x0}, 0x0) socket$kcm(0x10, 0x2, 0x0) socket$inet6(0xa, 0x5, 0x0) 0s ago: executing program 3 (id=421): prlimit64(0x0, 0xe, &(0x7f0000000140)={0xc, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) getpid() timer_create(0x0, &(0x7f0000000680)={0x0, 0x21}, &(0x7f0000000100)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1c, 0x4, &(0x7f0000000100)=ANY=[@ANYBLOB="b400000000000000791048000000000071004f00000000009500000000000000db74589d4b38cc306ac390649f72dea0e50e2317db042855d6c74ff3493c7e31e3f6c643155a8e2e01d50bc3347475750472719cc516"], &(0x7f0000000040)='syzkaller\x00', 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x3e}, 0x94) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$packet_fanout(r1, 0x107, 0x12, 0x0, 0x0) splice(r0, 0x0, r1, 0x0, 0x7, 0x0) syz_mount_image$tmpfs(&(0x7f0000000140), &(0x7f00000000c0)='./file0\x00', 0x21408, 0x0, 0x1, 0x0, &(0x7f0000006380)) openat$dir(0xffffffffffffff9c, 0x0, 0x0, 0x0) r2 = openat2$dir(0xffffffffffffff9c, 0x0, 0x0, 0x0) utimensat(r2, 0x0, 0x0, 0x0) r3 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000600)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) r4 = shmget$private(0x0, 0x4000, 0x0, &(0x7f0000002000/0x4000)=nil) socket$nl_audit(0x10, 0x3, 0x9) shmctl$SHM_UNLOCK(r4, 0xc) ioctl$sock_inet_tcp_SIOCATMARK(r3, 0x8905, 0x0) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.0.20' (ED25519) to the list of known hosts. [ 48.713044][ T4172] cgroup: Unknown subsys name 'net' [ 48.857068][ T4172] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 50.099550][ T4172] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k FS [ 51.789325][ T4190] chnl_net:caif_netlink_parms(): no params data found [ 51.839250][ T4185] chnl_net:caif_netlink_parms(): no params data found [ 51.880158][ T4198] chnl_net:caif_netlink_parms(): no params data found [ 51.890661][ T4189] chnl_net:caif_netlink_parms(): no params data found [ 51.943704][ T4192] chnl_net:caif_netlink_parms(): no params data found [ 51.969583][ T4190] bridge0: port 1(bridge_slave_0) entered blocking state [ 51.977788][ T4190] bridge0: port 1(bridge_slave_0) entered disabled state [ 51.987262][ T4190] device bridge_slave_0 entered promiscuous mode [ 52.000138][ T4190] bridge0: port 2(bridge_slave_1) entered blocking state [ 52.007327][ T4190] bridge0: port 2(bridge_slave_1) entered disabled state [ 52.015386][ T4190] device bridge_slave_1 entered promiscuous mode [ 52.083229][ T4185] bridge0: port 1(bridge_slave_0) entered blocking state [ 52.090327][ T4185] bridge0: port 1(bridge_slave_0) entered disabled state [ 52.098145][ T4185] device bridge_slave_0 entered promiscuous mode [ 52.110676][ T4190] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 52.139290][ T4185] bridge0: port 2(bridge_slave_1) entered blocking state [ 52.147059][ T4185] bridge0: port 2(bridge_slave_1) entered disabled state [ 52.154958][ T4185] device bridge_slave_1 entered promiscuous mode [ 52.174959][ T4190] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 52.188072][ T4189] bridge0: port 1(bridge_slave_0) entered blocking state [ 52.195582][ T4189] bridge0: port 1(bridge_slave_0) entered disabled state [ 52.203787][ T4189] device bridge_slave_0 entered promiscuous mode [ 52.217245][ T4189] bridge0: port 2(bridge_slave_1) entered blocking state [ 52.224364][ T4189] bridge0: port 2(bridge_slave_1) entered disabled state [ 52.232256][ T4189] device bridge_slave_1 entered promiscuous mode [ 52.248843][ T4192] bridge0: port 1(bridge_slave_0) entered blocking state [ 52.256075][ T4192] bridge0: port 1(bridge_slave_0) entered disabled state [ 52.263908][ T4192] device bridge_slave_0 entered promiscuous mode [ 52.272936][ T4185] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 52.287874][ T4198] bridge0: port 1(bridge_slave_0) entered blocking state [ 52.295062][ T4198] bridge0: port 1(bridge_slave_0) entered disabled state [ 52.303180][ T4198] device bridge_slave_0 entered promiscuous mode [ 52.315296][ T4192] bridge0: port 2(bridge_slave_1) entered blocking state [ 52.322950][ T4192] bridge0: port 2(bridge_slave_1) entered disabled state [ 52.330581][ T4192] device bridge_slave_1 entered promiscuous mode [ 52.338974][ T4185] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 52.365735][ T4198] bridge0: port 2(bridge_slave_1) entered blocking state [ 52.374505][ T4198] bridge0: port 2(bridge_slave_1) entered disabled state [ 52.382218][ T4198] device bridge_slave_1 entered promiscuous mode [ 52.391246][ T4190] team0: Port device team_slave_0 added [ 52.404403][ T4190] team0: Port device team_slave_1 added [ 52.412320][ T4185] team0: Port device team_slave_0 added [ 52.419669][ T4189] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 52.452239][ T4185] team0: Port device team_slave_1 added [ 52.459619][ T4189] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 52.470451][ T4192] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 52.488091][ T4198] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 52.514937][ T4185] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 52.521902][ T4185] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 52.547836][ T4185] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 52.560737][ T4192] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 52.570512][ T4190] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 52.577716][ T4190] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 52.603913][ T4190] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 52.616805][ T4190] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 52.623809][ T4190] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 52.649896][ T4190] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 52.663108][ T4198] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 52.677225][ T4185] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 52.684224][ T4185] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 52.710139][ T4185] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 52.747212][ T4189] team0: Port device team_slave_0 added [ 52.755382][ T4189] team0: Port device team_slave_1 added [ 52.776527][ T4192] team0: Port device team_slave_0 added [ 52.800536][ T4189] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 52.807736][ T4189] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 52.834425][ T4189] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 52.852727][ T4198] team0: Port device team_slave_0 added [ 52.866428][ T4192] team0: Port device team_slave_1 added [ 52.877241][ T4189] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 52.884474][ T4189] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 52.910431][ T4189] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 52.929005][ T4198] team0: Port device team_slave_1 added [ 52.938508][ T4185] device hsr_slave_0 entered promiscuous mode [ 52.945868][ T4185] device hsr_slave_1 entered promiscuous mode [ 52.961998][ T4190] device hsr_slave_0 entered promiscuous mode [ 52.968922][ T4190] device hsr_slave_1 entered promiscuous mode [ 52.975955][ T4190] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 52.984060][ T4190] Cannot create hsr debugfs directory [ 53.011338][ T4198] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 53.018890][ T4198] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 53.044886][ T4198] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 53.056328][ T4192] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 53.063431][ T4192] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 53.089630][ T4192] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 53.120398][ T4198] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 53.127459][ T4198] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 53.153792][ T4198] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 53.169875][ T4192] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 53.177177][ T4192] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 53.203127][ T4192] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 53.217943][ T4189] device hsr_slave_0 entered promiscuous mode [ 53.225314][ T4189] device hsr_slave_1 entered promiscuous mode [ 53.231942][ T4189] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 53.240135][ T4189] Cannot create hsr debugfs directory [ 53.306882][ T4198] device hsr_slave_0 entered promiscuous mode [ 53.314075][ T4198] device hsr_slave_1 entered promiscuous mode [ 53.320493][ T4198] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 53.328525][ T4198] Cannot create hsr debugfs directory [ 53.346897][ T4192] device hsr_slave_0 entered promiscuous mode [ 53.353867][ T4192] device hsr_slave_1 entered promiscuous mode [ 53.360716][ T4192] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 53.368326][ T4192] Cannot create hsr debugfs directory [ 53.553082][ T1345] Bluetooth: hci4: command 0x0409 tx timeout [ 53.560439][ T1345] Bluetooth: hci0: command 0x0409 tx timeout [ 53.562510][ T4174] Bluetooth: hci2: command 0x0409 tx timeout [ 53.566967][ T1345] Bluetooth: hci3: command 0x0409 tx timeout [ 53.584169][ T4174] Bluetooth: hci1: command 0x0409 tx timeout [ 53.664217][ T4185] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 53.681011][ T4185] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 53.689889][ T4185] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 53.701838][ T4185] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 53.749231][ T4189] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 53.759656][ T4192] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 53.769190][ T4192] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 53.781397][ T4189] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 53.790419][ T4189] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 53.803994][ T4192] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 53.813056][ T4192] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 53.825579][ T4189] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 53.889809][ T4198] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 53.910821][ T4198] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 53.943699][ T4198] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 53.966164][ T4192] 8021q: adding VLAN 0 to HW filter on device bond0 [ 53.980613][ T4198] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 54.026748][ T4185] 8021q: adding VLAN 0 to HW filter on device bond0 [ 54.046442][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 54.056881][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 54.065637][ T4190] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 54.079134][ T4192] 8021q: adding VLAN 0 to HW filter on device team0 [ 54.091739][ T4190] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 54.101177][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 54.109654][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 54.124406][ T4185] 8021q: adding VLAN 0 to HW filter on device team0 [ 54.131192][ T4190] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 54.142828][ T4189] 8021q: adding VLAN 0 to HW filter on device bond0 [ 54.149828][ T4190] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 54.158943][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 54.168008][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 54.177247][ T9] bridge0: port 1(bridge_slave_0) entered blocking state [ 54.184538][ T9] bridge0: port 1(bridge_slave_0) entered forwarding state [ 54.194689][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 54.205766][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 54.216036][ T9] bridge0: port 2(bridge_slave_1) entered blocking state [ 54.223115][ T9] bridge0: port 2(bridge_slave_1) entered forwarding state [ 54.256957][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 54.265160][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 54.277546][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 54.286755][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 54.297282][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 54.306420][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 54.315283][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 54.324069][ T9] bridge0: port 1(bridge_slave_0) entered blocking state [ 54.331187][ T9] bridge0: port 1(bridge_slave_0) entered forwarding state [ 54.339197][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 54.348073][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 54.356593][ T9] bridge0: port 2(bridge_slave_1) entered blocking state [ 54.363856][ T9] bridge0: port 2(bridge_slave_1) entered forwarding state [ 54.371910][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 54.380878][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 54.389661][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 54.398378][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 54.406922][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 54.414936][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 54.438644][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 54.447666][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 54.456648][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 54.469797][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 54.478284][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 54.487311][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 54.495981][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 54.518799][ T4192] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 54.531403][ T4192] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 54.543794][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 54.553192][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 54.561362][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 54.569726][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 54.586347][ T4189] 8021q: adding VLAN 0 to HW filter on device team0 [ 54.598003][ T4198] 8021q: adding VLAN 0 to HW filter on device bond0 [ 54.608754][ T311] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 54.624225][ T311] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 54.636331][ T311] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 54.649046][ T311] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 54.660084][ T4185] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 54.675564][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 54.690556][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 54.700518][ T9] bridge0: port 1(bridge_slave_0) entered blocking state [ 54.707646][ T9] bridge0: port 1(bridge_slave_0) entered forwarding state [ 54.723891][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 54.745728][ T1526] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 54.757108][ T1526] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 54.772087][ T1526] bridge0: port 2(bridge_slave_1) entered blocking state [ 54.779178][ T1526] bridge0: port 2(bridge_slave_1) entered forwarding state [ 54.793340][ T1526] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 54.801951][ T1526] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 54.816258][ T4198] 8021q: adding VLAN 0 to HW filter on device team0 [ 54.833956][ T4237] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 54.842609][ T4237] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 54.889816][ T311] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 54.899783][ T311] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 54.917060][ T311] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 54.928265][ T311] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 54.936796][ T311] bridge0: port 1(bridge_slave_0) entered blocking state [ 54.943870][ T311] bridge0: port 1(bridge_slave_0) entered forwarding state [ 54.951750][ T311] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 54.961286][ T311] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 54.969760][ T311] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 54.978361][ T311] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 54.987128][ T311] bridge0: port 2(bridge_slave_1) entered blocking state [ 54.994388][ T311] bridge0: port 2(bridge_slave_1) entered forwarding state [ 55.009104][ T311] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 55.017422][ T311] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 55.026606][ T311] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 55.035584][ T311] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 55.044512][ T311] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 55.052876][ T311] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 55.060297][ T311] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 55.068107][ T311] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 55.076541][ T311] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 55.087168][ T4189] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 55.098147][ T4192] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 55.118486][ T1526] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 55.129496][ T1526] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 55.137352][ T1526] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 55.149228][ T311] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 55.160335][ T311] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 55.180606][ T4190] 8021q: adding VLAN 0 to HW filter on device bond0 [ 55.191410][ T311] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 55.211452][ T4190] 8021q: adding VLAN 0 to HW filter on device team0 [ 55.225912][ T4185] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 55.243197][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 55.255353][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 55.280924][ T1526] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 55.290389][ T1526] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 55.300076][ T1526] bridge0: port 1(bridge_slave_0) entered blocking state [ 55.307186][ T1526] bridge0: port 1(bridge_slave_0) entered forwarding state [ 55.317403][ T1526] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 55.326752][ T1526] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 55.339570][ T1526] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 55.348391][ T1526] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 55.357195][ T1526] bridge0: port 2(bridge_slave_1) entered blocking state [ 55.364296][ T1526] bridge0: port 2(bridge_slave_1) entered forwarding state [ 55.371920][ T1526] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 55.380922][ T1526] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 55.389207][ T1526] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 55.398362][ T1526] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 55.407750][ T1526] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 55.416458][ T1526] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 55.427397][ T1526] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 55.435511][ T1526] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 55.444327][ T1526] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 55.465905][ T4192] device veth0_vlan entered promiscuous mode [ 55.484334][ T4198] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 55.498288][ T311] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 55.506892][ T311] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 55.516131][ T311] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 55.525703][ T311] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 55.535527][ T1526] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 55.545348][ T1526] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 55.561152][ T4192] device veth1_vlan entered promiscuous mode [ 55.574330][ T1526] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 55.583664][ T1526] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 55.593928][ T1526] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 55.602942][ T1526] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 55.617732][ T4189] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 55.632621][ T4231] Bluetooth: hci1: command 0x041b tx timeout [ 55.638978][ T4231] Bluetooth: hci2: command 0x041b tx timeout [ 55.646604][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 55.660415][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 55.668902][ T4231] Bluetooth: hci3: command 0x041b tx timeout [ 55.676063][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 55.684126][ T4231] Bluetooth: hci0: command 0x041b tx timeout [ 55.690391][ T4231] Bluetooth: hci4: command 0x041b tx timeout [ 55.721198][ T4190] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 55.732921][ T4190] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 55.753705][ T4192] device veth0_macvtap entered promiscuous mode [ 55.764059][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 55.775994][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 55.784997][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 55.794099][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 55.805203][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 55.814621][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 55.823669][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 55.831918][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 55.845550][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 55.854107][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 55.861779][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 55.870457][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 55.888840][ T4192] device veth1_macvtap entered promiscuous mode [ 55.900739][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 55.908654][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 55.920019][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 55.929407][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 55.958019][ T4192] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 55.977455][ T4185] device veth0_vlan entered promiscuous mode [ 55.992417][ T1526] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 56.001725][ T1526] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 56.015653][ T1526] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 56.025306][ T1526] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 56.034946][ T1526] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 56.046846][ T1526] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 56.057997][ T4192] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 56.069561][ T4192] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 56.078835][ T4192] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 56.087821][ T4192] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 56.096785][ T4192] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 56.111396][ T4189] device veth0_vlan entered promiscuous mode [ 56.121791][ T1526] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 56.136854][ T1526] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 56.145858][ T1526] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 56.157967][ T1526] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 56.179448][ T4198] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 56.195574][ T4185] device veth1_vlan entered promiscuous mode [ 56.212390][ T4189] device veth1_vlan entered promiscuous mode [ 56.227364][ T4237] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 56.241935][ T4237] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 56.250411][ T4237] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 56.288476][ T4190] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 56.331152][ T1526] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 56.339732][ T1526] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 56.349310][ T1526] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 56.402676][ T1526] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 56.411920][ T1526] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 56.421010][ T1526] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 56.431182][ T1526] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 56.443084][ T4185] device veth0_macvtap entered promiscuous mode [ 56.454142][ T4185] device veth1_macvtap entered promiscuous mode [ 56.468222][ T4189] device veth0_macvtap entered promiscuous mode [ 56.481414][ T4190] device veth0_vlan entered promiscuous mode [ 56.505036][ T311] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 56.518322][ T311] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 56.527292][ T311] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 56.536287][ T311] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 56.544977][ T311] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 56.553888][ T311] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 56.561804][ T311] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 56.581335][ T4189] device veth1_macvtap entered promiscuous mode [ 56.590340][ T311] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 56.598903][ T311] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 56.624698][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 56.634200][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 56.646432][ T1526] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 56.655452][ T1526] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 56.671001][ T4189] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 56.683124][ T4189] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 56.694412][ T4189] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 56.713247][ T4185] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 56.724334][ T4185] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 56.734328][ T4185] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 56.746904][ T4185] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 56.759067][ T4185] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 56.774327][ T311] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 56.783123][ T311] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 56.791697][ T311] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 56.802985][ T311] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 56.824891][ T4189] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 56.835986][ T4189] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 56.848133][ T4189] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 56.857285][ T4190] device veth1_vlan entered promiscuous mode [ 56.872700][ T311] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 56.881029][ T311] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 56.889273][ T311] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 56.898516][ T311] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 56.907560][ T311] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 56.916118][ T311] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 56.927387][ T311] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 56.935584][ T311] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 56.944649][ T4185] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 56.955220][ T4185] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 56.965176][ T4185] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 56.976144][ T4185] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 56.987373][ T4185] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 56.996659][ T144] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 57.020987][ T144] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 57.022996][ T4189] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 57.039467][ T4189] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 57.048807][ T4189] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 57.057779][ T4189] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 57.068951][ T4198] device veth0_vlan entered promiscuous mode [ 57.076822][ T311] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 57.094171][ T311] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 57.104227][ T311] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 57.113811][ T4185] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 57.122945][ T4185] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 57.131641][ T4185] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 57.140688][ T4185] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 57.167985][ T4198] device veth1_vlan entered promiscuous mode [ 57.179209][ T311] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 57.190904][ T311] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 57.207413][ T4190] device veth0_macvtap entered promiscuous mode [ 57.247727][ T4190] device veth1_macvtap entered promiscuous mode [ 57.276679][ T4198] device veth0_macvtap entered promiscuous mode [ 57.293300][ T311] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 57.305452][ T311] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 57.326076][ T311] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 57.335942][ T311] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 57.355966][ T311] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 57.371706][ T4190] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 57.386201][ T4190] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 57.398478][ T4190] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 57.409522][ T4190] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 57.419803][ T4190] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 57.432135][ T4190] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 57.468071][ T4190] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 57.490072][ T4198] device veth1_macvtap entered promiscuous mode [ 57.514322][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 57.531200][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 57.557403][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 57.585306][ T4190] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 57.599518][ T4190] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 57.609983][ T4190] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 57.624671][ T4190] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 57.642366][ T4190] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 57.653966][ T4190] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 57.681280][ T4190] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 57.708475][ T311] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 57.722778][ T4227] Bluetooth: hci0: command 0x040f tx timeout [ 57.723458][ T4267] Bluetooth: hci4: command 0x040f tx timeout [ 57.728819][ T4227] Bluetooth: hci3: command 0x040f tx timeout [ 57.748016][ T4227] Bluetooth: hci2: command 0x040f tx timeout [ 57.755750][ T311] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 57.756087][ T4227] Bluetooth: hci1: command 0x040f tx timeout [ 57.803997][ T4190] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 57.814884][ T4237] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 57.823551][ T4237] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 57.831062][ T4190] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 57.848451][ T4190] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 57.867222][ T4190] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 57.922901][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 57.964916][ T4198] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 57.989252][ T4198] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 58.002864][ T4198] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 58.013646][ T4198] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 58.023600][ T4198] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 58.035456][ T4198] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 58.045359][ T4198] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 58.056046][ T4198] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 58.086321][ T4198] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 58.154115][ T4237] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 58.167902][ T144] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 58.177063][ T4237] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 58.185494][ T144] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 58.288040][ T1526] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 58.298159][ T4237] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 58.306405][ T4237] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 58.315419][ T1526] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 58.324280][ T1526] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 58.333938][ T1526] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 58.342013][ T1526] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 58.450501][ T311] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 58.480172][ T311] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 58.560248][ T4237] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 59.029690][ T1526] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 59.039702][ T1526] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 59.050367][ T4198] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 59.068962][ T4198] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 59.078954][ T4198] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 59.091069][ T4198] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 59.101495][ T4198] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 59.112723][ T4198] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 59.122849][ T4198] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 59.133330][ T4198] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 59.148936][ T4198] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 59.332289][ T1526] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 59.340174][ T1526] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 60.973746][ T1526] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 61.010485][ T4198] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 61.031091][ T4229] Bluetooth: hci1: command 0x0419 tx timeout [ 61.037248][ T4229] Bluetooth: hci2: command 0x0419 tx timeout [ 61.045626][ T4229] Bluetooth: hci3: command 0x0419 tx timeout [ 61.051897][ T4229] Bluetooth: hci4: command 0x0419 tx timeout [ 61.066875][ T4229] Bluetooth: hci0: command 0x0419 tx timeout [ 61.071378][ T4198] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 61.083342][ T4198] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 61.093037][ T4198] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 61.182107][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #202!!! [ 61.192136][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #202!!! [ 61.202090][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #202!!! [ 61.212087][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #282!!! [ 61.221152][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #282!!! [ 61.230124][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #282!!! [ 61.239098][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #382!!! [ 61.248070][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #382!!! [ 61.257042][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #382!!! [ 61.266009][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #382!!! [ 62.243593][ T4294] ODEBUG: Out of memory. ODEBUG disabled [ 62.652746][ T4294] syz.2.9 (4294): drop_caches: 2 [ 63.656929][ T4306] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2'. [ 64.022894][ T4307] Zero length message leads to an empty skb [ 64.374068][ T4305] device wireguard0 entered promiscuous mode [ 64.424458][ T4275] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 64.564289][ T4275] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 64.663666][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 65.032525][ T311] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 65.040676][ T311] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 65.048536][ T311] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 65.296129][ T4315] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 65.450973][ T4315] syz.1.11 (4315) used greatest stack depth: 21048 bytes left [ 67.230672][ T4342] L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 67.993519][ T4342] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 69.939528][ T23] cfg80211: failed to load regulatory.db [ 70.728133][ T4370] loop4: detected capacity change from 0 to 764 [ 70.786416][ T4360] delete_channel: no stack [ 70.807301][ T4360] delete_channel: no stack [ 70.869958][ T4373] loop0: detected capacity change from 0 to 512 [ 71.084010][ T4373] EXT4-fs (loop0): Ignoring removed oldalloc option [ 71.319101][ T1417] ieee802154 phy0 wpan0: encryption failed: -22 [ 71.326918][ T1417] ieee802154 phy1 wpan1: encryption failed: -22 [ 71.660341][ T4373] EXT4-fs error (device loop0): ext4_iget_extra_inode:4566: inode #15: comm syz.0.24: corrupted in-inode xattr [ 71.925311][ T4373] EXT4-fs error (device loop0): ext4_orphan_get:1405: comm syz.0.24: couldn't read orphan inode 15 (err -117) [ 72.180317][ T4373] EXT4-fs (loop0): mounted filesystem without journal. Opts: nombcache,abort,noinit_itable,noload,init_itable,max_batch_time=0x0000000000000001,oldalloc,inode_readahead_blks=0x0000000000000200,usrjquota=,nobarrier,,errors=continue. Quota mode: none. [ 72.325971][ T4387] loop2: detected capacity change from 0 to 512 [ 72.483019][ T4387] ======================================================= [ 72.483019][ T4387] WARNING: The mand mount option has been deprecated and [ 72.483019][ T4387] and is ignored by this kernel. Remove the mand [ 72.483019][ T4387] option from the mount to silence this warning. [ 72.483019][ T4387] ======================================================= [ 73.131041][ T4387] EXT4-fs (loop2): Ignoring removed oldalloc option [ 73.292232][ T4387] EXT4-fs (loop2): journaled quota format not specified [ 74.477895][ T4408] netlink: 4 bytes leftover after parsing attributes in process `syz.3.35'. [ 74.578432][ T4411] xt_policy: output policy not valid in PREROUTING and INPUT [ 75.235100][ T4417] loop1: detected capacity change from 0 to 128 [ 75.949093][ T4428] xt_CT: You must specify a L4 protocol and not use inversions on it [ 76.275748][ T4423] vivid-001: disconnect [ 76.310171][ T4417] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 76.479675][ T4417] ext4 filesystem being mounted at /3/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 77.412920][ T4414] vivid-001: reconnect [ 77.717131][ T4443] loop0: detected capacity change from 0 to 1024 [ 78.959678][ T144] hfsplus: b-tree write err: -5, ino 4 [ 80.490326][ T4460] netlink: 24 bytes leftover after parsing attributes in process `syz.0.53'. [ 81.715507][ T4460] syz.0.53 (4460) used greatest stack depth: 17776 bytes left [ 81.954838][ T4466] loop4: detected capacity change from 0 to 256 [ 82.760804][ T4472] loop2: detected capacity change from 0 to 1024 [ 83.374051][ T4472] EXT4-fs error (device loop2): ext4_map_blocks:629: inode #3: block 2: comm syz.2.45: lblock 2 mapped to illegal pblock 2 (length 1) [ 83.388832][ T4472] Quota error (device loop2): qtree_write_dquot: dquota write failed [ 83.397108][ T4472] EXT4-fs error (device loop2): ext4_map_blocks:629: inode #3: block 48: comm syz.2.45: lblock 0 mapped to illegal pblock 48 (length 1) [ 83.411760][ T4472] Quota error (device loop2): v2_write_file_info: Can't write info structure [ 83.421950][ T4472] EXT4-fs error (device loop2): ext4_acquire_dquot:6234: comm syz.2.45: Failed to acquire dquot type 0 [ 83.434338][ T4472] EXT4-fs error (device loop2) in ext4_reserve_inode_write:5854: Corrupt filesystem [ 83.445433][ T4472] EXT4-fs error (device loop2): ext4_evict_inode:282: inode #11: comm syz.2.45: mark_inode_dirty error [ 83.458135][ T4472] EXT4-fs warning (device loop2): ext4_evict_inode:285: couldn't mark inode dirty (err -117) [ 83.468657][ T4472] EXT4-fs (loop2): 1 orphan inode deleted [ 83.478036][ T4472] EXT4-fs (loop2): mounted filesystem without journal. Opts: nodioread_nolock,noblock_validity,data_err=ignore,max_batch_time=0x0000000000000007,nodiscard,stripe=0x0000000000000004,noauto_da_alloc,,errors=continue. Quota mode: none. [ 83.578983][ T4466] FAT-fs (loop4): Directory bread(block 64) failed [ 83.643225][ T4466] FAT-fs (loop4): Directory bread(block 65) failed [ 84.299487][ T4345] EXT4-fs error (device loop2): ext4_map_blocks:629: inode #3: block 1: comm kworker/u4:9: lblock 1 mapped to illegal pblock 1 (length 1) [ 84.329867][ T4466] FAT-fs (loop4): Directory bread(block 66) failed [ 84.346731][ T4466] FAT-fs (loop4): Directory bread(block 67) failed [ 84.354777][ T4345] Quota error (device loop2): remove_tree: Can't read quota data block 1 [ 84.371371][ T4345] EXT4-fs error (device loop2): ext4_release_dquot:6270: comm kworker/u4:9: Failed to release dquot type 0 [ 84.406067][ T4466] FAT-fs (loop4): Directory bread(block 68) failed [ 84.416156][ T4466] FAT-fs (loop4): Directory bread(block 69) failed [ 84.423872][ T4189] EXT4-fs error (device loop2): __ext4_get_inode_loc:4327: comm syz-executor: Invalid inode table block 1 in block_group 0 [ 84.449390][ T4466] FAT-fs (loop4): Directory bread(block 70) failed [ 84.463985][ T4189] EXT4-fs error (device loop2) in ext4_reserve_inode_write:5854: Corrupt filesystem [ 84.530767][ T4482] xt_policy: output policy not valid in PREROUTING and INPUT [ 84.590612][ T4466] FAT-fs (loop4): Directory bread(block 71) failed [ 84.614766][ T4189] EXT4-fs error (device loop2): ext4_quota_off:6540: inode #3: comm syz-executor: mark_inode_dirty error [ 84.752694][ T4466] FAT-fs (loop4): Directory bread(block 72) failed [ 84.865178][ T4466] FAT-fs (loop4): Directory bread(block 73) failed [ 85.349286][ T4488] loop1: detected capacity change from 0 to 512 [ 85.359540][ T4484] (unnamed net_device) (uninitialized): Unable to set down delay as MII monitoring is disabled [ 85.380825][ T4491] loop4: detected capacity change from 0 to 1024 [ 85.539259][ T4488] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support! [ 86.187959][ T4488] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 86.406313][ T4491] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 86.463912][ T4488] EXT4-fs error (device loop1): ext4_mb_generate_buddy:1163: group 0, block bitmap and bg descriptor inconsistent: 191 vs 220 free clusters [ 86.484447][ T4504] netlink: 12 bytes leftover after parsing attributes in process `syz.2.55'. [ 86.508297][ T4504] loop2: detected capacity change from 0 to 2048 [ 86.557376][ T4488] EXT4-fs warning (device loop1): ext4_expand_extra_isize_ea:2807: Unable to expand inode 15. Delete some EAs or run e2fsck. [ 86.585426][ T4488] EXT4-fs (loop1): 1 truncate cleaned up [ 86.591753][ T4488] EXT4-fs (loop1): mounted filesystem without journal. Opts: min_batch_time=0x0000000000000002,resuid=0x000000000000ee01,debug_want_extra_isize=0x000000000000002e,nombcache,quota,quota,,errors=continue. Quota mode: writeback. [ 86.604943][ T4504] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 87.533997][ T4488] netlink: 4 bytes leftover after parsing attributes in process `syz.1.50'. [ 88.125690][ T26] audit: type=1800 audit(1772560947.865:2): pid=4488 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.50" name="bus" dev="loop1" ino=18 res=0 errno=0 [ 88.147447][ T4488] EXT4-fs error (device loop1): ext4_inlinedir_to_tree:1457: inode #12: block 7: comm syz.1.50: path /4/bus/file0: bad entry in directory: rec_len is smaller than minimal - offset=20, inode=2147483648, rec_len=0, size=60 fake=0 [ 89.072265][ T4289] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 89.220470][ T4530] loop4: detected capacity change from 0 to 256 [ 89.322376][ T4289] usb 1-1: Using ep0 maxpacket: 32 [ 89.444132][ T4289] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 1024 [ 89.472989][ T4530] exfat: Deprecated parameter 'utf8' [ 89.686772][ T4530] exfat: Unknown parameter 'zero_size_dir' [ 90.042259][ T4289] usb 1-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79 [ 90.101907][ T4289] usb 1-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2 [ 91.102056][ C0] sched: RT throttling activated [ 91.193279][ T4289] usb 1-1: Product: syz [ 91.197472][ T4289] usb 1-1: Manufacturer: syz [ 91.263888][ T4289] usb 1-1: SerialNumber: syz [ 91.317804][ T4289] usb 1-1: config 0 descriptor?? [ 91.573997][ T4289] usb 1-1: can't set config #0, error -71 [ 91.870120][ T4289] usb 1-1: USB disconnect, device number 2 [ 94.861833][ T4577] loop0: detected capacity change from 0 to 8 [ 98.282296][ T4583] kAFS: unable to lookup cell '(,c¾Ì' [ 98.624758][ T4587] ubi0: attaching mtd0 [ 98.636639][ T4587] ubi0: scanning is finished [ 98.641364][ T4587] ubi0: empty MTD device detected [ 99.218322][ T4575] SQUASHFS error: Corrupted symlink [ 99.231936][ T4587] ubi0 error: ubi_attach_mtd_dev: cannot spawn "ubi_bgt0d", error -4 [ 99.597821][ T4597] netlink: 4 bytes leftover after parsing attributes in process `syz.3.77'. [ 102.542148][ T4630] netlink: 64 bytes leftover after parsing attributes in process `syz.2.83'. [ 102.554999][ T4200] Bluetooth: Wrong link type (-22) [ 104.363166][ T4633] 9pnet: Could not find request transport: tcp*por00 [ 104.483424][ T4632] orangefs_mount: mount request failed with -4 [ 109.492540][ T4686] Cannot find add_set index 0 as target [ 112.296475][ T4697] loop4: detected capacity change from 0 to 1024 [ 112.488454][ T4707] loop0: detected capacity change from 0 to 128 [ 115.570648][ T4723] loop1: detected capacity change from 0 to 256 [ 116.191961][ T4354] hfsplus: b-tree write err: -5, ino 4 [ 116.220315][ T4723] FAT-fs (loop1): Directory bread(block 64) failed [ 116.227236][ T4723] FAT-fs (loop1): Directory bread(block 65) failed [ 116.233904][ T4723] FAT-fs (loop1): Directory bread(block 66) failed [ 116.240429][ T4723] FAT-fs (loop1): Directory bread(block 67) failed [ 116.247051][ T4723] FAT-fs (loop1): Directory bread(block 68) failed [ 116.253640][ T4723] FAT-fs (loop1): Directory bread(block 69) failed [ 116.260212][ T4723] FAT-fs (loop1): Directory bread(block 70) failed [ 116.266761][ T4723] FAT-fs (loop1): Directory bread(block 71) failed [ 116.273377][ T4723] FAT-fs (loop1): Directory bread(block 72) failed [ 116.279905][ T4723] FAT-fs (loop1): Directory bread(block 73) failed [ 116.319649][ T4723] attempt to access beyond end of device [ 116.319649][ T4723] loop1: rw=2051, want=1256, limit=256 [ 119.484833][ T4757] trusted_key: encrypted_key: insufficient parameters specified [ 122.473339][ T4788] loop4: detected capacity change from 0 to 512 [ 122.599220][ T4794] loop1: detected capacity change from 0 to 1024 [ 124.289230][ T4800] bridge0: port 1(bridge_slave_0) entered disabled state [ 124.303187][ T4800] bridge0: port 2(bridge_slave_1) entered disabled state [ 124.757272][ T4788] EXT4-fs (loop4): Ignoring removed oldalloc option [ 124.811952][ T4788] EXT4-fs: error -4 creating inode table initialization thread [ 124.820238][ T4788] EXT4-fs (loop4): mount failed [ 126.838886][ T4819] netlink: 24 bytes leftover after parsing attributes in process `syz.3.125'. [ 126.891202][ T4816] loop4: detected capacity change from 0 to 256 [ 127.006028][ T4816] FAT-fs (loop4): Directory bread(block 64) failed [ 127.026523][ T4816] FAT-fs (loop4): Directory bread(block 65) failed [ 127.060784][ T4816] FAT-fs (loop4): Directory bread(block 66) failed [ 127.078176][ T4816] FAT-fs (loop4): Directory bread(block 67) failed [ 127.083705][ T4827] loop1: detected capacity change from 0 to 512 [ 127.101856][ T4816] FAT-fs (loop4): Directory bread(block 68) failed [ 127.125263][ T4816] FAT-fs (loop4): Directory bread(block 69) failed [ 127.131888][ T4816] FAT-fs (loop4): Directory bread(block 70) failed [ 127.148977][ T4816] FAT-fs (loop4): Directory bread(block 71) failed [ 127.202208][ T4816] FAT-fs (loop4): Directory bread(block 72) failed [ 127.219082][ T4816] FAT-fs (loop4): Directory bread(block 73) failed [ 127.587106][ T4816] netlink: 24 bytes leftover after parsing attributes in process `syz.4.126'. [ 128.004445][ T4827] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 128.062446][ T4827] ext4 filesystem being mounted at /22/file2 supports timestamps until 2038-01-19 (0x7fffffff) [ 128.897128][ T4841] device syzkaller0 entered promiscuous mode [ 130.165148][ T4860] kAFS: unable to lookup cell '' [ 131.528085][ T26] audit: type=1326 audit(1772560991.265:3): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4857 comm="syz.1.132" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f7616b90799 code=0x0 [ 131.668023][ T4871] loop4: detected capacity change from 0 to 256 [ 132.756228][ T1417] ieee802154 phy0 wpan0: encryption failed: -22 [ 132.762653][ T1417] ieee802154 phy1 wpan1: encryption failed: -22 [ 132.787149][ T4871] FAT-fs (loop4): Directory bread(block 64) failed [ 132.824550][ T4871] FAT-fs (loop4): Directory bread(block 65) failed [ 132.851548][ T4871] FAT-fs (loop4): Directory bread(block 66) failed [ 132.867291][ T4886] device syzkaller0 entered promiscuous mode [ 132.875999][ T4885] loop1: detected capacity change from 0 to 256 [ 132.889147][ T4871] FAT-fs (loop4): Directory bread(block 67) failed [ 132.910535][ T4871] FAT-fs (loop4): Directory bread(block 68) failed [ 132.926225][ T4871] FAT-fs (loop4): Directory bread(block 69) failed [ 132.970781][ T4885] FAT-fs (loop1): Directory bread(block 64) failed [ 133.000992][ T4871] FAT-fs (loop4): Directory bread(block 70) failed [ 133.007980][ T4885] FAT-fs (loop1): Directory bread(block 65) failed [ 133.022249][ T4871] FAT-fs (loop4): Directory bread(block 71) failed [ 133.028963][ T4871] FAT-fs (loop4): Directory bread(block 72) failed [ 133.036271][ T4885] FAT-fs (loop1): Directory bread(block 66) failed [ 133.072386][ T4885] FAT-fs (loop1): Directory bread(block 67) failed [ 133.084328][ T4885] FAT-fs (loop1): Directory bread(block 68) failed [ 133.376408][ T4871] FAT-fs (loop4): Directory bread(block 73) failed [ 133.376455][ T4885] FAT-fs (loop1): Directory bread(block 69) failed [ 133.393100][ T4885] FAT-fs (loop1): Directory bread(block 70) failed [ 133.401086][ T4885] FAT-fs (loop1): Directory bread(block 71) failed [ 133.468366][ T4885] FAT-fs (loop1): Directory bread(block 72) failed [ 133.655674][ T4885] FAT-fs (loop1): Directory bread(block 73) failed [ 133.757436][ T4871] netlink: 24 bytes leftover after parsing attributes in process `syz.4.138'. [ 133.913863][ T4902] netlink: 24 bytes leftover after parsing attributes in process `syz.1.142'. [ 134.008132][ T4904] loop2: detected capacity change from 0 to 512 [ 134.162442][ T4904] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 134.483406][ T4904] ext4 filesystem being mounted at /21/file2 supports timestamps until 2038-01-19 (0x7fffffff) [ 135.057392][ T4917] loop1: detected capacity change from 0 to 512 [ 135.106968][ T4916] device syzkaller0 entered promiscuous mode [ 135.434101][ T4917] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 136.159254][ T4918] netlink: 4 bytes leftover after parsing attributes in process `syz.0.150'. [ 136.180168][ T4917] EXT4-fs error (device loop1): ext4_mb_generate_buddy:1163: group 0, block bitmap and bg descriptor inconsistent: 191 vs 220 free clusters [ 136.202514][ T4917] EXT4-fs (loop1): 1 truncate cleaned up [ 136.208218][ T4917] EXT4-fs (loop1): mounted filesystem without journal. Opts: min_batch_time=0x0000000000000002,resuid=0x000000000000ee01,debug_want_extra_isize=0x000000000000002e,nombcache,quota,quota,,errors=continue. Quota mode: writeback. [ 136.257993][ T26] audit: type=1800 audit(1772560995.995:4): pid=4917 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.149" name="bus" dev="loop1" ino=18 res=0 errno=0 [ 136.258444][ T4917] EXT4-fs error (device loop1): ext4_inlinedir_to_tree:1457: inode #12: block 7: comm syz.1.149: path /25/bus/file0: bad entry in directory: rec_len is smaller than minimal - offset=20, inode=2147483648, rec_len=0, size=60 fake=0 [ 137.301787][ T26] audit: type=1326 audit(1772560997.015:5): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4927 comm="syz.3.154" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f46d244e799 code=0x0 [ 137.385845][ T4935] device syzkaller0 entered promiscuous mode [ 137.475746][ T4940] loop0: detected capacity change from 0 to 256 [ 137.574261][ T4940] FAT-fs (loop0): Directory bread(block 64) failed [ 137.611671][ T4940] FAT-fs (loop0): Directory bread(block 65) failed [ 137.629403][ T4947] (unnamed net_device) (uninitialized): Unable to set down delay as MII monitoring is disabled [ 137.656360][ T4940] FAT-fs (loop0): Directory bread(block 66) failed [ 138.282999][ T4955] xt_policy: output policy not valid in PREROUTING and INPUT [ 138.902488][ T4940] FAT-fs (loop0): Directory bread(block 67) failed [ 138.909491][ T4940] FAT-fs (loop0): Directory bread(block 68) failed [ 138.947644][ T4940] FAT-fs (loop0): Directory bread(block 69) failed [ 138.959739][ T4940] FAT-fs (loop0): Directory bread(block 70) failed [ 138.998304][ T4940] FAT-fs (loop0): Directory bread(block 71) failed [ 139.032323][ T4940] FAT-fs (loop0): Directory bread(block 72) failed [ 139.070275][ T4940] FAT-fs (loop0): Directory bread(block 73) failed [ 139.219782][ T4962] device syzkaller0 entered promiscuous mode [ 140.210706][ T4967] loop1: detected capacity change from 0 to 2048 [ 140.212800][ T4971] netlink: 24 bytes leftover after parsing attributes in process `syz.0.158'. [ 140.335771][ T4967] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 140.373609][ T4967] fscrypt (loop1, inode 12): Error -61 getting encryption context [ 140.938150][ T4983] loop0: detected capacity change from 0 to 256 [ 141.912850][ T4983] FAT-fs (loop0): Directory bread(block 64) failed [ 141.919542][ T4983] FAT-fs (loop0): Directory bread(block 65) failed [ 141.942508][ T4983] FAT-fs (loop0): Directory bread(block 66) failed [ 141.949105][ T4983] FAT-fs (loop0): Directory bread(block 67) failed [ 141.949533][ T4990] device syzkaller0 entered promiscuous mode [ 142.002534][ T4983] FAT-fs (loop0): Directory bread(block 68) failed [ 142.009254][ T4983] FAT-fs (loop0): Directory bread(block 69) failed [ 142.052688][ T4983] FAT-fs (loop0): Directory bread(block 70) failed [ 142.059263][ T4983] FAT-fs (loop0): Directory bread(block 71) failed [ 142.118238][ T4983] FAT-fs (loop0): Directory bread(block 72) failed [ 142.138062][ T4983] FAT-fs (loop0): Directory bread(block 73) failed [ 142.248656][ T4983] netlink: 24 bytes leftover after parsing attributes in process `syz.0.181'. [ 142.379524][ T5005] (unnamed net_device) (uninitialized): Unable to set down delay as MII monitoring is disabled [ 142.706493][ T5008] xt_policy: output policy not valid in PREROUTING and INPUT [ 142.804073][ T5016] loop0: detected capacity change from 0 to 512 [ 142.856812][ T5016] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 142.898553][ T5013] loop4: detected capacity change from 0 to 512 [ 143.856662][ T5016] EXT4-fs error (device loop0): ext4_mb_generate_buddy:1163: group 0, block bitmap and bg descriptor inconsistent: 191 vs 220 free clusters [ 143.902722][ T5016] EXT4-fs (loop0): 1 truncate cleaned up [ 143.918755][ T5016] EXT4-fs (loop0): mounted filesystem without journal. Opts: min_batch_time=0x0000000000000002,resuid=0x000000000000ee01,debug_want_extra_isize=0x000000000000002e,nombcache,quota,quota,,errors=continue. Quota mode: writeback. [ 143.968765][ T5013] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 143.992396][ T5013] ext4 filesystem being mounted at /36/file2 supports timestamps until 2038-01-19 (0x7fffffff) [ 144.079812][ T26] audit: type=1800 audit(1772561003.815:6): pid=5016 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.180" name="bus" dev="loop0" ino=18 res=0 errno=0 [ 144.123926][ T5016] EXT4-fs error (device loop0): ext4_inlinedir_to_tree:1457: inode #12: block 7: comm syz.0.180: path /39/bus/file0: bad entry in directory: rec_len is smaller than minimal - offset=20, inode=2147483648, rec_len=0, size=60 fake=0 [ 145.243005][ T5049] device syzkaller0 entered promiscuous mode [ 146.815661][ T5070] device wireguard0 entered promiscuous mode [ 147.641192][ T5087] loop1: detected capacity change from 0 to 512 [ 148.098556][ T5096] xt_policy: output policy not valid in PREROUTING and INPUT [ 148.589353][ T5099] device syzkaller0 entered promiscuous mode [ 148.608846][ T5087] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 148.690681][ T5087] EXT4-fs error (device loop1): ext4_mb_generate_buddy:1163: group 0, block bitmap and bg descriptor inconsistent: 191 vs 220 free clusters [ 148.716311][ T5087] EXT4-fs (loop1): 1 truncate cleaned up [ 148.721996][ T5087] EXT4-fs (loop1): mounted filesystem without journal. Opts: min_batch_time=0x0000000000000002,resuid=0x000000000000ee01,debug_want_extra_isize=0x000000000000002e,nombcache,quota,quota,,errors=continue. Quota mode: writeback. [ 148.836725][ T5087] EXT4-fs error (device loop1): ext4_inlinedir_to_tree:1457: inode #12: block 7: comm syz.1.200: path /33/bus/file0: bad entry in directory: rec_len is smaller than minimal - offset=20, inode=2147483648, rec_len=0, size=60 fake=0 [ 148.892587][ T26] audit: type=1800 audit(1772561008.575:7): pid=5087 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.200" name="bus" dev="loop1" ino=18 res=0 errno=0 [ 150.801270][ T5138] device syzkaller0 entered promiscuous mode [ 154.637442][ T5166] device syzkaller0 entered promiscuous mode [ 156.209080][ T5208] xt_policy: output policy not valid in PREROUTING and INPUT [ 157.276987][ T5213] loop1: detected capacity change from 0 to 512 [ 157.385158][ T5213] EXT4-fs (loop1): Ignoring removed oldalloc option [ 158.235058][ T5213] EXT4-fs (loop1): 1 truncate cleaned up [ 158.275612][ T5213] EXT4-fs (loop1): mounted filesystem without journal. Opts: quota,bsdgroups,lazytime,errors=remount-ro,jqfmt=vfsv1,oldalloc,stripe=0x0000000000000001,. Quota mode: writeback. [ 158.454610][ T5234] device syzkaller0 entered promiscuous mode [ 159.931664][ T5246] syz.2.246 sent an empty control message without MSG_MORE. [ 160.650377][ T5253] xt_policy: output policy not valid in PREROUTING and INPUT [ 160.755853][ T5254] netlink: 64 bytes leftover after parsing attributes in process `syz.3.248'. [ 161.414902][ T4200] Bluetooth: Wrong link type (-22) [ 161.441169][ T5257] netlink: 20 bytes leftover after parsing attributes in process `syz.1.247'. [ 162.415657][ T5281] (unnamed net_device) (uninitialized): Unable to set down delay as MII monitoring is disabled [ 163.064682][ T5285] loop1: detected capacity change from 0 to 4096 [ 163.200053][ T4177] udevd[4177]: inotify_add_watch(7, /dev/nbd64, 10) failed: No such file or directory [ 163.214096][ T5285] ntfs3: Unknown parameter 'windows_names' [ 163.262665][ T4179] udevd[4179]: inotify_add_watch(7, /dev/nbd64, 10) failed: No such file or directory [ 164.021118][ T5301] netlink: 12 bytes leftover after parsing attributes in process `syz.2.261'. [ 165.375376][ T5317] loop2: detected capacity change from 0 to 2048 [ 165.439606][ T5319] loop0: detected capacity change from 0 to 2048 [ 165.461352][ T5317] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 165.477639][ T5317] fscrypt (loop2, inode 12): Error -61 getting encryption context [ 165.615169][ T5324] loop1: detected capacity change from 0 to 2048 [ 165.633572][ T5319] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 165.647197][ T5319] fscrypt (loop0, inode 12): Error -61 getting encryption context [ 166.401260][ T5324] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 170.230411][ T5384] loop1: detected capacity change from 0 to 2048 [ 170.673154][ T5384] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 170.682514][ T5392] loop2: detected capacity change from 0 to 512 [ 170.922343][ T5392] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 170.964601][ T5403] loop1: detected capacity change from 0 to 2048 [ 173.476024][ T5407] block device autoloading is deprecated and will be removed. [ 173.611550][ T5392] EXT4-fs: error -4 creating inode table initialization thread [ 173.642378][ T5392] EXT4-fs (loop2): mount failed [ 173.704812][ T5411] capability: warning: `syz.3.291' uses deprecated v2 capabilities in a way that may be insecure [ 173.778158][ T5416] netlink: 16 bytes leftover after parsing attributes in process `syz.4.292'. [ 173.844126][ T5403] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 173.857189][ T5403] fscrypt (loop1, inode 12): Error -61 getting encryption context [ 175.241048][ T5421] Bluetooth: hci0: unsupported parameter 255 [ 175.536300][ T5421] Bluetooth: hci0: unsupported parameter 255 [ 175.774753][ T5430] xt_policy: output policy not valid in PREROUTING and INPUT [ 175.807540][ T21] Bluetooth: hci1: command 0x0406 tx timeout [ 176.004380][ T21] Bluetooth: hci2: command 0x0406 tx timeout [ 176.103510][ T21] Bluetooth: hci3: command 0x0406 tx timeout [ 176.190900][ T21] Bluetooth: hci0: command 0x0406 tx timeout [ 176.245382][ T21] Bluetooth: hci4: command 0x0406 tx timeout [ 176.398430][ T5427] (unnamed net_device) (uninitialized): Unable to set down delay as MII monitoring is disabled [ 176.619255][ T5438] loop1: detected capacity change from 0 to 2048 [ 177.440013][ T5455] loop2: detected capacity change from 0 to 512 [ 177.452974][ T5438] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 177.466488][ T5438] fscrypt (loop1, inode 12): Error -61 getting encryption context [ 178.609825][ T5459] netlink: 16 bytes leftover after parsing attributes in process `syz.4.304'. [ 178.637977][ T5455] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 179.278176][ T5455] EXT4-fs error (device loop2): ext4_mb_generate_buddy:1163: group 0, block bitmap and bg descriptor inconsistent: 191 vs 220 free clusters [ 179.335052][ T5455] EXT4-fs (loop2): 1 truncate cleaned up [ 179.376637][ T5455] EXT4-fs (loop2): mounted filesystem without journal. Opts: min_batch_time=0x0000000000000002,resuid=0x000000000000ee01,debug_want_extra_isize=0x000000000000002e,nombcache,quota,quota,,errors=continue. Quota mode: writeback. [ 179.406766][ T5452] (unnamed net_device) (uninitialized): Unable to set down delay as MII monitoring is disabled [ 179.492706][ T5455] netlink: 4 bytes leftover after parsing attributes in process `syz.2.303'. [ 181.369627][ T5496] netlink: 16 bytes leftover after parsing attributes in process `syz.4.318'. [ 183.902917][ T5523] (unnamed net_device) (uninitialized): Unable to set down delay as MII monitoring is disabled [ 184.243863][ T5525] loop0: detected capacity change from 0 to 512 [ 184.260910][ T5526] loop1: detected capacity change from 0 to 512 [ 184.305844][ T5526] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 184.317090][ T5525] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 184.462471][ T5526] EXT4-fs error (device loop1): ext4_mb_generate_buddy:1163: group 0, block bitmap and bg descriptor inconsistent: 191 vs 220 free clusters [ 184.483911][ T5525] EXT4-fs error (device loop0): ext4_mb_generate_buddy:1163: group 0, block bitmap and bg descriptor inconsistent: 191 vs 220 free clusters [ 184.662320][ T5525] EXT4-fs (loop0): 1 truncate cleaned up [ 184.670749][ T5525] EXT4-fs (loop0): mounted filesystem without journal. Opts: min_batch_time=0x0000000000000002,resuid=0x000000000000ee01,debug_want_extra_isize=0x000000000000002e,nombcache,quota,quota,,errors=continue. Quota mode: writeback. [ 184.673808][ T5526] EXT4-fs (loop1): 1 truncate cleaned up [ 184.754384][ T5545] netlink: 4 bytes leftover after parsing attributes in process `syz.2.331'. [ 185.286553][ T5542] netlink: 16 bytes leftover after parsing attributes in process `syz.3.333'. [ 185.316151][ T5526] EXT4-fs (loop1): mounted filesystem without journal. Opts: min_batch_time=0x0000000000000002,resuid=0x000000000000ee01,debug_want_extra_isize=0x000000000000002e,nombcache,quota,quota,,errors=continue. Quota mode: writeback. [ 185.340628][ T26] audit: type=1800 audit(1772561045.085:8): pid=5525 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.326" name="bus" dev="loop0" ino=18 res=0 errno=0 [ 185.864209][ T5526] netlink: 4 bytes leftover after parsing attributes in process `syz.1.327'. [ 185.935704][ T26] audit: type=1800 audit(1772561045.675:9): pid=5526 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.327" name="bus" dev="loop1" ino=18 res=0 errno=0 [ 188.148298][ T5526] EXT4-fs error (device loop1): ext4_inlinedir_to_tree:1457: inode #12: block 7: comm syz.1.327: path /58/bus/file0: bad entry in directory: rec_len is smaller than minimal - offset=20, inode=2147483648, rec_len=0, size=60 fake=0 [ 188.185326][ T5557] netlink: 16 bytes leftover after parsing attributes in process `syz.0.344'. [ 188.388841][ T5575] (unnamed net_device) (uninitialized): Unable to set down delay as MII monitoring is disabled [ 189.220538][ T5577] loop2: detected capacity change from 0 to 512 [ 189.308228][ T5577] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 189.376152][ T5577] EXT4-fs error (device loop2): ext4_mb_generate_buddy:1163: group 0, block bitmap and bg descriptor inconsistent: 191 vs 220 free clusters [ 189.463021][ T5577] EXT4-fs (loop2): 1 truncate cleaned up [ 189.468712][ T5577] EXT4-fs (loop2): mounted filesystem without journal. Opts: min_batch_time=0x0000000000000002,resuid=0x000000000000ee01,debug_want_extra_isize=0x000000000000002e,nombcache,quota,quota,,errors=continue. Quota mode: writeback. [ 189.490650][ C1] vkms_vblank_simulate: vblank timer overrun [ 190.449407][ T5577] EXT4-fs error (device loop2): ext4_inlinedir_to_tree:1457: inode #12: block 7: comm syz.2.345: path /63/bus/file0: bad entry in directory: rec_len is smaller than minimal - offset=20, inode=2147483648, rec_len=0, size=60 fake=0 [ 190.612809][ T5603] netlink: 16 bytes leftover after parsing attributes in process `syz.3.353'. [ 191.072857][ T5612] loop1: detected capacity change from 0 to 128 [ 193.721089][ T5632] (unnamed net_device) (uninitialized): Unable to set down delay as MII monitoring is disabled [ 194.196260][ T1417] ieee802154 phy0 wpan0: encryption failed: -22 [ 194.202613][ T1417] ieee802154 phy1 wpan1: encryption failed: -22 [ 194.526090][ T5644] netlink: 16 bytes leftover after parsing attributes in process `syz.2.365'. [ 198.721373][ T5692] loop4: detected capacity change from 0 to 128 [ 201.553039][ T5712] kAFS: unable to lookup cell '(,c¾Ì' [ 201.956081][ T5717] ubi0: attaching mtd0 [ 201.974762][ T5717] ubi0: scanning is finished [ 202.714478][ T5717] ubi0 error: ubi_attach_mtd_dev: cannot spawn "ubi_bgt0d", error -4 [ 205.092593][ T5756] xt_policy: output policy not valid in PREROUTING and INPUT [ 207.110826][ T5774] netlink: 24 bytes leftover after parsing attributes in process `syz.3.399'. [ 208.727643][ T5800] xt_policy: output policy not valid in PREROUTING and INPUT [ 209.655809][ T5802] loop2: detected capacity change from 0 to 2048 [ 210.062827][ T5802] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 210.082702][ T5802] fscrypt (loop2, inode 12): Error -61 getting encryption context [ 211.420440][ T5819] netlink: 24 bytes leftover after parsing attributes in process `syz.1.405'. [ 211.765511][ T5830] loop4: detected capacity change from 0 to 256 [ 211.847003][ T5827] loop2: detected capacity change from 0 to 256 [ 212.486528][ T5832] loop0: detected capacity change from 0 to 256 [ 212.508170][ T5839] netlink: 16 bytes leftover after parsing attributes in process `syz.3.417'. [ 212.560663][ T5827] FAT-fs (loop2): Directory bread(block 64) failed [ 212.649983][ T5827] FAT-fs (loop2): Directory bread(block 65) failed [ 212.779442][ T5827] FAT-fs (loop2): Directory bread(block 66) failed [ 212.974884][ T5827] FAT-fs (loop2): Directory bread(block 67) failed [ 212.990166][ T5827] FAT-fs (loop2): Directory bread(block 68) failed [ 213.078067][ T5832] FAT-fs (loop0): Directory bread(block 64) failed [ 213.184305][ T5827] FAT-fs (loop2): Directory bread(block 69) failed [ 213.191276][ T5827] FAT-fs (loop2): Directory bread(block 70) failed [ 213.198754][ T5832] FAT-fs (loop0): Directory bread(block 65) failed [ 213.205503][ T5832] FAT-fs (loop0): Directory bread(block 66) failed [ 213.215615][ T5827] FAT-fs (loop2): Directory bread(block 71) failed [ 213.220675][ T5832] FAT-fs (loop0): Directory bread(block 67) failed [ 213.234786][ T5827] FAT-fs (loop2): Directory bread(block 72) failed [ 213.241369][ T5827] FAT-fs (loop2): Directory bread(block 73) failed [ 213.248654][ T5832] FAT-fs (loop0): Directory bread(block 68) failed [ 213.271107][ T5832] FAT-fs (loop0): Directory bread(block 69) failed [ 213.369296][ T5832] FAT-fs (loop0): Directory bread(block 70) failed [ 213.386932][ T5832] FAT-fs (loop0): Directory bread(block 71) failed [ 213.405779][ T5827] netlink: 24 bytes leftover after parsing attributes in process `syz.2.413'. [ 213.413816][ T5832] FAT-fs (loop0): Directory bread(block 72) failed [ 213.428013][ T5832] FAT-fs (loop0): Directory bread(block 73) failed [ 213.958271][ T5851] device syzkaller1 entered promiscuous mode [ 215.206193][ T5854] loop0: detected capacity change from 0 to 256 [ 320.262079][ C1] rcu: INFO: rcu_preempt detected stalls on CPUs/tasks: [ 320.269064][ C1] rcu: Tasks blocked on level-0 rcu_node (CPUs 0-1): P4412/1:b..l [ 320.277465][ C1] (detected by 1, t=10502 jiffies, g=11393, q=136) [ 320.284034][ C1] task:kworker/u4:11 state:R running task stack:22456 pid: 4412 ppid: 2 flags:0x00004000 [ 320.296099][ C1] Workqueue: bat_events batadv_iv_send_outstanding_bat_ogm_packet [ 320.303934][ C1] Call Trace: [ 320.307199][ C1] [ 320.310128][ C1] __schedule+0x11ef/0x43c0 [ 320.314632][ C1] ? release_firmware_map_entry+0x190/0x190 [ 320.320513][ C1] ? preempt_schedule_irq+0xb0/0x160 [ 320.325782][ C1] preempt_schedule_irq+0xbb/0x160 [ 320.330877][ C1] ? __cond_resched+0xd0/0xd0 [ 320.335535][ C1] ? rcu_is_watching+0x11/0xa0 [ 320.340283][ C1] ? rcu_irq_exit_check_preempt+0xdb/0x200 [ 320.346180][ C1] irqentry_exit+0x63/0x70 [ 320.350945][ C1] asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 320.356918][ C1] RIP: 0010:lock_acquire+0x208/0x400 [ 320.362188][ C1] Code: f7 84 24 80 00 00 00 00 02 00 00 43 c6 44 3d 04 f8 0f 85 f1 00 00 00 41 f7 c6 00 02 00 00 74 01 fb 48 c7 44 24 60 0e 36 e0 45 <4b> c7 44 3d 00 00 00 00 00 43 c7 44 3d 08 00 00 00 00 65 48 8b 04 [ 320.381794][ C1] RSP: 0000:ffffc900041cf900 EFLAGS: 00000206 [ 320.387848][ C1] RAX: 0000000000000001 RBX: 0000000000000000 RCX: a5b8b5a838fd5100 [ 320.395826][ C1] RDX: 0000000000000000 RSI: ffffffff8a2b3a20 RDI: ffffffff8a79f800 [ 320.403781][ C1] RBP: ffffc900041cfa20 R08: dffffc0000000000 R09: 1ffffffff203a618 [ 320.411750][ C1] R10: dffffc0000000000 R11: fffffbfff203a619 R12: ffffffff8c31eaa0 [ 320.419703][ C1] R13: 1ffff92000839f2c R14: 0000000000000246 R15: dffffc0000000000 [ 320.427689][ C1] ? rcu_lock_release+0x5/0x20 [ 320.432441][ C1] ? read_lock_is_recursive+0x10/0x10 [ 320.437800][ C1] ? __lock_acquire+0x7d10/0x7d10 [ 320.442808][ C1] ? batadv_iv_ogm_queue_add+0xcf0/0xcf0 [ 320.448426][ C1] rcu_lock_acquire+0x2a/0x30 [ 320.453086][ C1] ? rcu_lock_acquire+0x5/0x30 [ 320.458011][ C1] batadv_iv_ogm_schedule+0x432/0xec0 [ 320.463385][ C1] ? batadv_iv_send_outstanding_bat_ogm_packet+0x840/0x840 [ 320.470577][ C1] ? batadv_send_skb_packet+0x392/0x5f0 [ 320.476112][ C1] batadv_iv_send_outstanding_bat_ogm_packet+0x72f/0x840 [ 320.483134][ C1] process_one_work+0x85f/0x1010 [ 320.488158][ C1] ? worker_detach_from_pool+0x240/0x240 [ 320.493770][ C1] ? lockdep_hardirqs_off+0x70/0x100 [ 320.499040][ C1] ? _raw_spin_lock_irq+0xb7/0xf0 [ 320.504043][ C1] ? _raw_spin_lock_irqsave+0x100/0x100 [ 320.509569][ C1] ? wq_worker_running+0x97/0x170 [ 320.514579][ C1] worker_thread+0xaa6/0x1290 [ 320.519248][ C1] ? _raw_spin_unlock_irqrestore+0xc1/0x120 [ 320.525132][ C1] kthread+0x436/0x520 [ 320.529278][ C1] ? rcu_lock_release+0x20/0x20 [ 320.534108][ C1] ? kthread_blkcg+0xd0/0xd0 [ 320.538690][ C1] ret_from_fork+0x1f/0x30 [ 320.543097][ C1] [ 320.546109][ C1] rcu: rcu_preempt kthread starved for 10519 jiffies! g11393 f0x0 RCU_GP_WAIT_FQS(5) ->state=0x0 ->cpu=1 [ 320.557297][ C1] rcu: Unless rcu_preempt kthread gets sufficient CPU time, OOM is now expected behavior. [ 320.567282][ C1] rcu: RCU grace-period kthread stack dump: [ 320.573156][ C1] task:rcu_preempt state:R running task stack:27536 pid: 15 ppid: 2 flags:0x00004000 [ 320.584413][ C1] Call Trace: [ 320.587680][ C1] [ 320.590705][ C1] __schedule+0x11ef/0x43c0 [ 320.595239][ C1] ? _raw_spin_lock_irqsave+0x8b/0x100 [ 320.600779][ C1] ? lockdep_hardirqs_on+0x94/0x140 [ 320.605974][ C1] ? _raw_spin_unlock_irqrestore+0xc1/0x120 [ 320.611937][ C1] ? _raw_spin_unlock+0x40/0x40 [ 320.616883][ C1] ? release_firmware_map_entry+0x190/0x190 [ 320.622760][ C1] ? __mod_timer+0x91e/0xd00 [ 320.627335][ C1] schedule+0x11b/0x1e0 [ 320.631559][ C1] schedule_timeout+0x184/0x2d0 [ 320.636396][ C1] ? console_conditional_schedule+0x40/0x40 [ 320.642287][ C1] ? _raw_spin_unlock_irqrestore+0x82/0x120 [ 320.648263][ C1] ? update_process_times+0x200/0x200 [ 320.653736][ C1] ? prepare_to_swait_event+0x331/0x350 [ 320.659271][ C1] rcu_gp_fqs_loop+0x2be/0x11d0 [ 320.664115][ C1] ? lockdep_hardirqs_on+0x94/0x140 [ 320.669305][ C1] ? dyntick_save_progress_counter+0x230/0x230 [ 320.675453][ C1] ? rcu_gp_init+0x10f0/0x10f0 [ 320.680208][ C1] ? _raw_spin_unlock_irq+0x1f/0x40 [ 320.685398][ C1] ? lockdep_hardirqs_on+0x94/0x140 [ 320.690577][ C1] rcu_gp_kthread+0x9b/0x370 [ 320.695260][ C1] ? _raw_spin_unlock_irqrestore+0xc1/0x120 [ 320.701145][ C1] ? rcu_report_qs_rsp+0x1a0/0x1a0 [ 320.706326][ C1] ? _raw_spin_unlock_irqrestore+0xc1/0x120 [ 320.712460][ C1] ? __kthread_parkme+0x157/0x1b0 [ 320.717467][ C1] kthread+0x436/0x520 [ 320.721521][ C1] ? rcu_report_qs_rsp+0x1a0/0x1a0 [ 320.726609][ C1] ? kthread_blkcg+0xd0/0xd0 [ 320.731180][ C1] ret_from_fork+0x1f/0x30 [ 320.735587][ C1] [ 320.738589][ C1] rcu: Stack dump where RCU GP kthread last ran: [ 320.744897][ C1] NMI backtrace for cpu 1 [ 320.749218][ C1] CPU: 1 PID: 5852 Comm: syz.3.421 Not tainted syzkaller #0 [ 320.756492][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 320.766629][ C1] Call Trace: [ 320.769893][ C1] [ 320.772721][ C1] dump_stack_lvl+0x188/0x250 [ 320.777382][ C1] ? show_regs_print_info+0x20/0x20 [ 320.782647][ C1] ? load_image+0x400/0x400 [ 320.787160][ C1] nmi_cpu_backtrace+0x3a2/0x3d0 [ 320.792093][ C1] ? nmi_trigger_cpumask_backtrace+0x280/0x280 [ 320.798236][ C1] ? _printk+0xda/0x130 [ 320.802388][ C1] ? cpu_online+0x1d/0x30 [ 320.806713][ C1] ? load_image+0x400/0x400 [ 320.811213][ C1] ? arch_trigger_cpumask_backtrace+0x10/0x10 [ 320.817475][ C1] nmi_trigger_cpumask_backtrace+0x163/0x280 [ 320.823453][ C1] rcu_check_gp_kthread_starvation+0x1cd/0x250 [ 320.829684][ C1] print_other_cpu_stall+0x1110/0x1270 [ 320.835224][ C1] ? print_cpu_stall+0x5f0/0x5f0 [ 320.840153][ C1] rcu_sched_clock_irq+0x843/0x1120 [ 320.845341][ C1] ? rcutree_dead_cpu+0x20/0x20 [ 320.850175][ C1] ? account_process_tick+0x22a/0x3a0 [ 320.855537][ C1] update_process_times+0x193/0x200 [ 320.860716][ C1] tick_sched_timer+0x37d/0x560 [ 320.865560][ C1] ? tick_setup_sched_timer+0x2c0/0x2c0 [ 320.871094][ C1] __hrtimer_run_queues+0x4ad/0xb70 [ 320.876281][ C1] ? hrtimer_interrupt+0x8d0/0x8d0 [ 320.881381][ C1] ? ktime_get_update_offsets_now+0x3ce/0x3e0 [ 320.887444][ C1] hrtimer_interrupt+0x3bb/0x8d0 [ 320.892385][ C1] __sysvec_apic_timer_interrupt+0x137/0x4a0 [ 320.898351][ C1] sysvec_apic_timer_interrupt+0x9b/0xc0 [ 320.903970][ C1] [ 320.906880][ C1] [ 320.909802][ C1] asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 320.915874][ C1] RIP: 0010:__sanitizer_cov_trace_const_cmp4+0x13/0x80 [ 320.922711][ C1] Code: 4a 89 7c 02 10 4a 89 74 02 18 4a 89 44 02 20 48 ff c1 48 89 0a c3 90 48 8b 04 24 65 48 8b 0d 14 4a 89 7e 65 8b 15 15 4a 89 7e <81> e2 00 01 ff 00 74 11 81 fa 00 01 00 00 75 5b 83 b9 34 16 00 00 [ 320.942307][ C1] RSP: 0018:ffffc900031cfb38 EFLAGS: 00000246 [ 320.948365][ C1] RAX: ffffffff812c577d RBX: 0000000000000000 RCX: ffff88802bb79dc0 [ 320.956320][ C1] RDX: 0000000080000000 RSI: 0000000046505845 RDI: 0000000046505845 [ 320.964277][ C1] RBP: ffffc900031cfcf0 R08: 0000000000000000 R09: 1ffff92000639f8f [ 320.972236][ C1] R10: dffffc0000000000 R11: fffff52000639f90 R12: 00000000ffffffff [ 320.980193][ C1] R13: 0000000000000000 R14: 0000000046505845 R15: 1ffff92000639f74 [ 320.988178][ C1] ? fpu__restore_sig+0x8dd/0x1060 [ 320.993290][ C1] fpu__restore_sig+0x8dd/0x1060 [ 320.998227][ C1] ? copy_fpstate_to_sigframe+0xbf0/0xbf0 [ 321.003957][ C1] ? __might_fault+0xb3/0x110 [ 321.008619][ C1] ? _copy_from_user+0x111/0x170 [ 321.013657][ C1] __ia32_sys_rt_sigreturn+0x5e4/0x760 [ 321.019105][ C1] ? load_gs_index+0x130/0x130 [ 321.023866][ C1] ? lock_chain_count+0x20/0x20 [ 321.028704][ C1] ? vtime_user_exit+0x2c8/0x3e0 [ 321.033639][ C1] ? lockdep_hardirqs_on+0x94/0x140 [ 321.038962][ C1] do_syscall_64+0x4c/0xa0 [ 321.043376][ C1] ? clear_bhb_loop+0x30/0x80 [ 321.048036][ C1] ? clear_bhb_loop+0x30/0x80 [ 321.052691][ C1] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 321.058707][ C1] RIP: 0033:0x7f46d244e797 [ 321.063138][ C1] Code: 83 c8 ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 <0f> 05 48 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 [ 321.082736][ C1] RSP: 002b:00007f46d06a8028 EFLAGS: 00000246 [ 321.088792][ C1] RAX: 0000000000000113 RBX: 00007f46d26c7fa0 RCX: 00007f46d244e799 [ 321.096745][ C1] RDX: 0000000000000006 RSI: 0000000000000000 RDI: 0000000000000004 [ 321.104695][ C1] RBP: 00007f46d24e4bd9 R08: 0000000000000007 R09: 0000000000000000 [ 321.112652][ C1] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 321.120604][ C1] R13: 00007f46d26c8038 R14: 00007f46d26c7fa0 R15: 00007ffe7ef9b2c8 [ 321.128564][ C1] [ 321.131639][ C1] vkms_vblank_simulate: vblank timer overrun