last executing test programs: 8m38.979430473s ago: executing program 3 (id=110): openat$uhid(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000002a82, 0x0) r1 = dup(r0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) bpf$PROG_LOAD(0x5, 0x0, 0x0) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x6) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e24}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) madvise(&(0x7f000042f000/0x800000)=nil, 0x800000, 0x15) msync(&(0x7f0000c0e000/0x3000)=nil, 0x3000, 0x6) socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$inet_buf(0xffffffffffffffff, 0x0, 0x8008000000010, 0x0, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) r5 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r5, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000080)={0x2, 0x13, 0x0, 0x0, 0x2}, 0x10}}, 0x0) setsockopt$sock_int(r5, 0x1, 0x8, &(0x7f00000001c0), 0x4) sendmsg$key(r5, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000000)={0x2, 0x12, 0x0, 0x0, 0x2}, 0x10}}, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000006, 0x28011, r1, 0x2f126000) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r6 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000500)={0x18, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xe}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={0x0, r6, 0x0, 0xd}, 0x18) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x8) 8m35.491072695s ago: executing program 3 (id=112): syz_emit_ethernet(0x74, &(0x7f0000000000)={@link_local, @empty, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x24, 0x0, 0x0, 0x0, 0x73, 0x0, @private=0x300, @multicast1}, {0x0, 0x0, 0xfffffe9a, 0x0, @gue={{0x2}}}}}}}, 0x0) r0 = socket$nl_generic(0x11, 0x3, 0x10) syz_emit_ethernet(0x2a, &(0x7f0000000000)={@local, @local, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x2b, 0x0, 0x0, 0x0, 0x2, 0x0, @rand_addr, @multicast1}, @address_request}}}}, 0x0) read$FUSE(0xffffffffffffffff, &(0x7f0000003640)={0x2020}, 0x2020) openat$dlm_monitor(0xffffff9c, &(0x7f00000001c0), 0x2, 0x0) ioctl$sock_SIOCGPGRP(r0, 0x8904, &(0x7f0000000300)) socket$unix(0x1, 0x5, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000380)='./cgroup.cpu/cgroup.procs\x00', 0x0, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000040), 0x80100, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) madvise(&(0x7f0000000000/0x3000)=nil, 0x7fffffffffffffff, 0x15) openat$sysctl(0xffffffffffffff9c, &(0x7f0000000100)='/proc/sys/vm/drop_caches\x00', 0x1, 0x0) r2 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r2, 0x10e, 0xc, &(0x7f0000000000)={0x9}, 0x10) write(r2, &(0x7f0000000040)="240000001e005f0214ffff0600fffff8070000000000000000000100080003000b000000", 0x24) r3 = syz_open_dev$dri(0x0, 0x0, 0x0) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) mremap(&(0x7f00005ab000/0x1000)=nil, 0x1000, 0x1000, 0x7, &(0x7f0000ffe000/0x1000)=nil) mremap(&(0x7f00003ab000/0x2000)=nil, 0x2000, 0x1000, 0x3, &(0x7f000024a000/0x1000)=nil) r4 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x88000) ioctl$SNDRV_SEQ_IOCTL_GET_SUBSCRIPTION(r4, 0xc0505350, &(0x7f0000000940)) syz_open_dev$dri(&(0x7f00000008c0), 0xd21, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r3, 0xc02064b2, &(0x7f0000000180)={0x3ff, 0x2, 0x806}) 8m29.458657727s ago: executing program 3 (id=116): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000003c0)={0x11, 0x4, &(0x7f0000000280)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='syzkaller\x00', 0x4, 0x0, 0x0, 0x41100, 0x43, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x7fff}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = socket(0x10, 0x803, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000a40)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd28, 0xffffffff, {0x0, 0x0, 0x0, r5, {0x0, 0x9}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_fq_codel={{0xd}, {0x4}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000a80)=@newtfilter={0x68, 0x2c, 0xd27, 0x70bd25, 0x25dfdbfd, {0x0, 0x0, 0x0, r5, {0xc, 0x4}, {}, {0xb, 0x9}}, [@filter_kind_options=@f_u32={{0x8}, {0x3c, 0x2, [@TCA_U32_SEL={0x24, 0x5, {0x3, 0xa, 0x1, 0xed8, 0x7, 0x8c, 0x40, 0x925e, [{0x101, 0x6, 0x200, 0x3}]}}, @TCA_U32_INDEV={0x14, 0x8, 'nr0\x00'}]}}]}, 0x68}}, 0x20040054) getsockopt$inet_sctp_SCTP_DEFAULT_SNDINFO(r4, 0x84, 0x22, &(0x7f0000001a00)={0x5, 0x1, 0x7ff, 0x5}, &(0x7f0000001a40)=0x10) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r6 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_INITMSG(r6, 0x84, 0x2, 0x0, 0x0) mkdirat(0xffffffffffffff9c, 0x0, 0x0) r7 = syz_open_dev$dri(&(0x7f0000000100), 0x1f, 0x0) sendmsg$rds(0xffffffffffffffff, &(0x7f00000019c0)={&(0x7f00000000c0)={0x2, 0x4e24, @rand_addr=0x64010102}, 0x10, &(0x7f0000000380)=[{&(0x7f00000002c0)=""/161, 0xa1}, {0x0}], 0x2, &(0x7f0000001940)=[@zcopy_cookie={0x18, 0x114, 0xc, 0x4}, @rdma_args={0x48, 0x114, 0x1, {{0xe90, 0x8}, {&(0x7f0000000480)=""/187, 0xbb}, &(0x7f0000000840)=[{&(0x7f0000000540)=""/46, 0x2e}, {&(0x7f0000000940)=""/4096, 0x1000}, {&(0x7f0000000580)=""/235, 0xeb}, {&(0x7f0000000680)=""/214, 0xd6}, {&(0x7f0000000780)=""/136, 0x88}], 0x5, 0xb, 0x6}}], 0x60, 0xc040}, 0x8000) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r7, 0xc04064a0, &(0x7f00000001c0)={0x0, &(0x7f0000000040)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_GETCRTC(r7, 0xc06864a1, &(0x7f0000000200)={0x0, 0x0, r8, 0x0}) r10 = socket(0x40000000015, 0x5, 0x0) bind$inet6(r10, &(0x7f0000000080)={0xa, 0x0, 0x0, @loopback}, 0x1c) sendto$inet6(r10, 0x0, 0x0, 0x0, &(0x7f0000000040)={0xa, 0x1, 0xfffffffc, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0xe79}, 0x1c) ioctl$DRM_IOCTL_MODE_SETCRTC(r7, 0xc06864a2, &(0x7f00000008c0)={0x0, 0x0, r8, r9, 0x0, 0x7, 0x0, 0x7, {0x1fffe, 0x9, 0x0, 0x0, 0x8, 0x0, 0x3, 0x0, 0x0, 0x0, 0x5, 0xff, 0x8, 0x0, "d20bddda92e75aec79ff0300d28001000b0000000000001000000900"}}) 8m27.682122962s ago: executing program 3 (id=119): add_key$keyring(0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x5) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0xf, &(0x7f0000000600)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000084000000b70000000000000095"], &(0x7f0000001dc0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r4}, 0x2d) r5 = fsopen(&(0x7f0000000280)='ceph\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r5, 0x1, &(0x7f0000000000)='source', &(0x7f0000000040)='c:::\x00\xfdM\xab\x89\xff\xda\xc7dw2\xa1\xb2\xabuQQ\x14\x97\xc9\xfae\xc7\xa1U\xe2\xbe\"\xb9t\xa0\x0e\xfa\xdb\xf1\xa5.\xd87\xc3p\xa5l\xf8vC\xe2\xe8 \xd5-<#\x186\xe1\xbd\xc0\xc3\xb5N(vj\xa7+<:\xc4\xe00\x01\xdd \x82\x83\xed\x0e\xc4\x1d\xac\xef7\b\xd3Z5\\A\'\x18\xa2\xc3\xab\xc7`\xc3\v\xf3L\x9d[Q\x9e\x11@=\xa1\x9b\xdc\xb1\xef\xc3k<\x97L\xa0\xab\xa6\x1ce\xcd\x99\xb3m\xef\x87\xc5i^N\xbd@\x01\xc0\xb2\x88\xc3\xe2\x96T\xa3\xa5\xeb\x0f\xf2f\xb9$\xd2\x140xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r2, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, &(0x7f0000000600)) r5 = socket$packet(0x11, 0x2, 0x300) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)=ANY=[@ANYBLOB="30000000100001000000ce6bb9092919507f3400", @ANYRES32=0x0, @ANYRES32=r1, @ANYRES32=0x0, @ANYBLOB="08001b"], 0x30}}, 0x0) recvmmsg(r5, &(0x7f0000000480), 0x0, 0x0, 0x0) getsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, &(0x7f0000000100)={@dev={0xfe, 0x80, '\x00', 0x39}, 0x0, 0x1, 0x0, 0x4}, 0x0) r6 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x3) ioctl$FS_IOC_GETFSLABEL(r6, 0x400452c8, &(0x7f0000000100)) socket$inet_icmp_raw(0x2, 0x3, 0x1) r7 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r7, 0x10f, 0x87, &(0x7f0000000140)=@req3={0x7fffffff, 0x400, 0x1, 0xd, 0x1, 0x6, 0x6}, 0x1c) recvmmsg$unix(r7, &(0x7f0000003100)=[{{&(0x7f0000000000), 0x6e, &(0x7f0000000080)=[{&(0x7f0000000480)=""/4096, 0x1000}], 0x1, 0x0, 0x28}}], 0x1, 0x0, 0x0) sendmmsg(r7, &(0x7f00000030c0)=[{{0x0, 0xa9cc7003, &(0x7f0000000400)=[{&(0x7f00000000c0)="ee", 0x101d0}], 0x1}}], 0x400000000000181, 0x9200000000000000) 8m6.848501257s ago: executing program 32 (id=132): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) bind$inet6(r0, &(0x7f0000000280)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0xa4, 0x30, 0x2, 0x0, 0x0, {}, [{0x90, 0x1, [@m_ct={0x44, 0x800, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x9d, 0x11e41e7a, 0x20000000, 0x0, 0xf}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}, @m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c, 0x1, {{0x0, 0x0, 0x0, 0x0, 0xffffffff}}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x804}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r2, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, &(0x7f0000000600)) r5 = socket$packet(0x11, 0x2, 0x300) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)=ANY=[@ANYBLOB="30000000100001000000ce6bb9092919507f3400", @ANYRES32=0x0, @ANYRES32=r1, @ANYRES32=0x0, @ANYBLOB="08001b"], 0x30}}, 0x0) recvmmsg(r5, &(0x7f0000000480), 0x0, 0x0, 0x0) getsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, &(0x7f0000000100)={@dev={0xfe, 0x80, '\x00', 0x39}, 0x0, 0x1, 0x0, 0x4}, 0x0) r6 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x3) ioctl$FS_IOC_GETFSLABEL(r6, 0x400452c8, &(0x7f0000000100)) socket$inet_icmp_raw(0x2, 0x3, 0x1) r7 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r7, 0x10f, 0x87, &(0x7f0000000140)=@req3={0x7fffffff, 0x400, 0x1, 0xd, 0x1, 0x6, 0x6}, 0x1c) recvmmsg$unix(r7, &(0x7f0000003100)=[{{&(0x7f0000000000), 0x6e, &(0x7f0000000080)=[{&(0x7f0000000480)=""/4096, 0x1000}], 0x1, 0x0, 0x28}}], 0x1, 0x0, 0x0) sendmmsg(r7, &(0x7f00000030c0)=[{{0x0, 0xa9cc7003, &(0x7f0000000400)=[{&(0x7f00000000c0)="ee", 0x101d0}], 0x1}}], 0x400000000000181, 0x9200000000000000) 3m14.539396967s ago: executing program 1 (id=500): bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000001d40)={&(0x7f0000000180)='fsi_master_gpio_cmd_rel_addr\x00'}, 0x18) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x651, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x50) rt_sigaction(0x40, 0x0, 0x0, 0x8, &(0x7f0000001540)) r1 = open(&(0x7f0000000140)='./file0\x00', 0x800, 0x70) mknodat$loop(r1, 0x0, 0x400, 0x0) bind$pptp(r1, &(0x7f0000000040)={0x18, 0x2, {0x1, @multicast2}}, 0x1e) syz_open_dev$tty20(0xc, 0x4, 0x0) r2 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000000), 0x80082, 0x0) ppoll(&(0x7f0000000200)=[{r2, 0x1002}], 0x1, 0x0, 0x0, 0x0) write$vga_arbiter(r2, &(0x7f00000000c0)=@unlock_all, 0xb) r3 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r3, 0x29, 0x40, &(0x7f00000005c0)=@raw={'raw\x00', 0x3c1, 0x3, 0x4e0, 0x0, 0x18c, 0x203, 0x320, 0x19030000, 0x410, 0x2e0, 0x2e0, 0x410, 0x2e0, 0x3, 0x0, {[{{@uncond, 0x300, 0x2d8, 0x320, 0x0, {}, [@common=@unspec=@bpf0={{0x230}, {0x13, [{0x20, 0x0, 0x8}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x0, 0x8}, {}, {0x0, 0x0, 0x0, 0xe}, {0x0, 0x0, 0x0, 0x3}, {0x0, 0x0, 0x3}, {0x2, 0x0, 0x4}, {}, {0x0, 0x0, 0x0, 0x1}, {0x0, 0x0, 0x8}, {}, {0x16}, {0x0, 0xff}, {}, {0x7}, {0x0, 0x0, 0x0, 0x4}, {0x0, 0x4, 0x0, 0x101}, {}, {0x0, 0x0, 0x5}, {}, {0x0, 0x0, 0x0, 0x9}, {0xfffc, 0x0, 0x0, 0x6}, {}, {0xfffe}, {}, {}, {}, {0xfffe, 0xfb}, {}, {0x7a04}, {}, {}, {0x20, 0x6}, {}, {}, {}, {0x0, 0x0, 0x0, 0x800}, {}, {0xb8c, 0x0, 0x0, 0xf00}, {0x0, 0x1, 0x0, 0x3}, {0x3}, {}, {}, {}, {}, {0x4}, {}, {}, {}, {}, {0x0, 0xfd}, {}, {}, {0x0, 0x0, 0x0, 0xfffffffd}, {}, {0x0, 0xb}, {0x4, 0x2}]}}]}, @common=@unspec=@IDLETIMER={0x48, 'IDLETIMER\x00', 0x0, {0x2, 'syz0\x00', {0x8001}}}}, {{@uncond, 0x0, 0xa8, 0xf0}, @common=@unspec=@IDLETIMER={0x48, 'IDLETIMER\x00', 0x0, {0xb, 'syz0\x00', {0x6c8}}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x540) socket$nl_route(0x10, 0x3, 0x0) socket$pppoe(0x18, 0x1, 0x0) syz_emit_vhci(&(0x7f0000001080)=ANY=[@ANYBLOB="04040a00e0ffffff0f77042482"], 0xd) r4 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file1\x00', 0x281c2, 0x0) fcntl$setlease(r4, 0x400, 0x1) fsetxattr$system_posix_acl(r4, &(0x7f0000000000)='system.posix_acl_access\x00', 0x0, 0x0, 0x3) 3m13.292563429s ago: executing program 1 (id=504): setxattr$trusted_overlay_opaque(&(0x7f0000000480)='./cgroup\x00', &(0x7f00000004c0), 0x0, 0x0, 0x2) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) setsockopt$inet6_opts(0xffffffffffffffff, 0x29, 0x40, &(0x7f00000001c0)=ANY=[@ANYBLOB="000a000000000fd60730000000000a0000000000000000000000000000000000000000000000000000000d00000000000000000000ef60fc4bd8ecc4e32000"], 0xd0060) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0xb, &(0x7f0000000380)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020000000000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000300)='rcu_utilization\x00', r3}, 0x10) syz_fuse_handle_req(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000d00)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r4 = socket(0x2, 0x80805, 0x0) getsockopt$inet_sctp_SCTP_GET_ASSOC_STATS(r4, 0x84, 0x70, &(0x7f0000000400)={0x0, @in6={{0xa, 0x4e23, 0x295, @private0, 0x7}}, [0xffffffffffffffff, 0xfffffffffffffffc, 0x400, 0xb2, 0x6, 0x3, 0xfffffffffffffcd1, 0x4, 0x800, 0xfffffffffffffff9, 0x3, 0x200000004, 0x7, 0xfffffffffffffff6]}, &(0x7f0000000000)=0x100) r5 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r5, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r4, 0x84, 0x6, &(0x7f0000000200)={r6, @in={{0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x3a}}}}, &(0x7f0000000300)=0x84) r7 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x60081, 0x0) ioctl$TIOCSETD(r7, 0x5423, &(0x7f0000000000)=0x15) setsockopt$inet_sctp6_SCTP_PR_SUPPORTED(0xffffffffffffffff, 0x84, 0x71, &(0x7f0000000580)={r6, 0x3de7}, 0x8) r8 = socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r8, 0x8933, &(0x7f0000000700)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_TRIGGER_SCAN(r8, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)={0x20, r9, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r10}, @void}}, [@NL80211_ATTR_SCAN_SSIDS={0x4}]}, 0x20}}, 0x0) mount$fuse(0x0, &(0x7f00000002c0)='./cgroup\x00', &(0x7f0000000340), 0x888000, &(0x7f0000000400)={{}, 0x2c, {'rootmode', 0x3d, 0x2000}}) shmctl$IPC_RMID(0x0, 0x0) mount(&(0x7f00000000c0)=@nullb, &(0x7f0000000040)='./cgroup\x00', &(0x7f0000000000)='iso9660\x00', 0x208000, 0x0) 3m11.698758076s ago: executing program 1 (id=507): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f00000009c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x46, '\x00', 0x0, 0x2}, 0x94) r1 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0}, 0x18) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee2, 0x8031, r1, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) openat$sndseq(0xffffffffffffff9c, 0x0, 0x446102) dup(0xffffffffffffffff) bpf$MAP_CREATE(0x0, &(0x7f0000000ac0)=@base={0xa, 0x7, 0x2, 0x4}, 0x50) r5 = openat$tcp_congestion(0xffffffffffffff9c, &(0x7f00000000c0), 0x1, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$batadv(&(0x7f0000000240), r6) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r6, 0x8933, &(0x7f00000003c0)={'batadv_slave_1\x00'}) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r6, 0x8933, &(0x7f0000000400)) sendmsg$BATADV_CMD_SET_HARDIF(r6, &(0x7f0000000640)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f00000006c0)={0x14, r7, 0x1, 0xf0bd25, 0x25dfdbfc}, 0x14}, 0x1, 0x0, 0x0, 0x4800}, 0x20004804) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) fcntl$setlease(r8, 0x400, 0x0) write$tcp_congestion(r5, 0x0, 0x0) bpf$BPF_PROG_ATTACH(0x8, &(0x7f00000002c0)={@cgroup, 0xffffffffffffffff, 0x12, 0x25, 0x0}, 0x20) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000340)={@cgroup, 0xffffffffffffffff, 0x12, 0x0, 0x0, @void, @value=0x0}, 0x20) r9 = socket(0x2, 0x80805, 0x0) sendmmsg$inet_sctp(r9, &(0x7f00000032c0)=[{&(0x7f00000001c0)=@in={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, &(0x7f0000000040)=[{&(0x7f0000000100)}], 0x1}], 0x1, 0x0) sendmmsg$inet_sctp(r9, &(0x7f00000032c0)=[{&(0x7f0000000000)=@in={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, &(0x7f00000004c0)=[{0x0}], 0x1, &(0x7f0000000500)=ANY=[@ANYBLOB="300000000000000084"], 0x30}], 0x1, 0x0) socket$netlink(0x10, 0x3, 0x0) 3m10.600518893s ago: executing program 1 (id=508): epoll_create1(0x0) r0 = syz_io_uring_setup(0x110, &(0x7f0000000140)={0x0, 0xfec9, 0x8, 0x2, 0x11f}, &(0x7f0000000040)=0x0, &(0x7f0000000280)=0x0) r3 = openat$misdntimer(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r4 = syz_io_uring_setup(0x49a, &(0x7f00000000c0)={0x0, 0x79af, 0x3180, 0x2, 0x40024e}, &(0x7f0000000340)=0x0, &(0x7f0000000040)) syz_memcpy_off$IO_URING_METADATA_GENERIC(r5, 0x108, &(0x7f00000003c0)=0xffb, 0x0, 0x4) syz_init_net_socket$bt_bnep(0x1f, 0x3, 0x4) r6 = io_uring_register$IORING_REGISTER_PERSONALITY(r4, 0x9, 0x0, 0x0) syz_io_uring_submit(0x0, r2, &(0x7f00000001c0)=@IORING_OP_READ=@use_registered_buffer={0x16, 0x8, 0x4004, @fd=r3, 0x10, 0x0, 0x0, 0x18, 0x1, {0x2, r6}}) r7 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000080)='/dev/comedi3\x00', 0x400, 0x0) ioctl$COMEDI_DEVCONFIG(r7, 0x40946400, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x8) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80202, 0x0) r8 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r8, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) socket$inet_mptcp(0x2, 0x1, 0x106) ioctl$COMEDI_DEVCONFIG(r7, 0x40946400, &(0x7f00000000c0)={'pcl818\x00', [0x4f27, 0x5, 0x2, 0x401, 0x1, 0xcc7, 0xfff, 0x5c952399, 0x5, 0x3ff, 0x2, 0x1, 0x1, 0x1, 0x9, 0xe1cb, 0x0, 0x1a449, 0x3, 0x40000003, 0x89, 0xfffffffd, 0x0, 0x20001e56, 0xb, 0xe69, 0x3c, 0x8, 0x106, 0x8000000, 0xdffffff8]}) io_uring_enter(r4, 0x627, 0x4c1, 0x43, 0x0, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r3, 0x80044940, &(0x7f0000001b00)) ioctl$UFFDIO_REGISTER(0xffffffffffffffff, 0xc020aa00, &(0x7f0000000240)={{&(0x7f0000400000/0x1000)=nil, 0x20400000}, 0x1}) r9 = syz_open_dev$vbi(&(0x7f0000000180), 0x1, 0x2) r10 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r10, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000005d00)=ANY=[@ANYBLOB="140100002e00010000000000fbdbdf250401f2800c00180008ac0f00000000001400010000000000000000000000ffffac14141650bb2d6f67d29d6fabadb107d0def49c88ea04abde1d5e8d3fb22a1b5046778bdafefc46b0449ade68bf84b36ec72dd71265fc2e88234ac26c2126237dd5b37f5ae655b1086cda40e00aec58754734be31d750351dc076eb43d9621dc08c029d1608a46cf26fbe816b89f7cb81bff81a"], 0x114}], 0x1, 0x0, 0x0, 0x1}, 0x0) ioctl$VIDIOC_CREATE_BUFS(r9, 0xc100565c, &(0x7f00000013c0)={0x0, 0x2, 0x2, {0x5, @vbi={0x0, 0x0, 0x4, 0x0, [], [0x8200], 0x1}}}) ioctl$VIDIOC_QBUF(r9, 0xc058565d, &(0x7f0000000200)=@fd={0x0, 0x5, 0x4e, 0x0, 0x0, {}, {0x1, 0x0, 0x0, 0x0, 0x0, 0xfe, "8000"}, 0x0, 0x2, {}, 0x20800}) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r1, r2, &(0x7f00000002c0)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3}) io_uring_enter(r0, 0xdb4, 0x0, 0x0, 0x0, 0x0) exit(0x7) 3m8.864477354s ago: executing program 1 (id=513): bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000140)={0xffffffffffffffff, 0x5, 0x8c, 0x0, &(0x7f0000000080)="ff29740bc63cc5775c2805a804ffd00853b08106edb10aea75dbcc8ebc6b2aba13090763f19ee04328291bfc19fe2538a142eef52a746634d6332f4cc4696ad105b1c112e72b64282b8ddc0740acb21c0fb6b893b7f92f41d9580a69868e6d4ebf83053c374b98f5a896b26f9190e75008b1784003fc5a7dc2008f74f799a52e797a35f730441fcd7e2fcd96", 0x0, 0x63, 0x2a0, 0x4b, 0x0, 0x0, 0x0, 0x2, 0x0, 0x3f}, 0x50) r0 = socket(0xa, 0x1, 0x0) r1 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000180), 0x40e02, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) openat$ttyS3(0xffffffffffffff9c, 0x0, 0x40, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) syz_clone(0x600, 0x0, 0x33, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x4400000bce) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000032680)=""/102400, 0x19000) r4 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r4}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x1, 0x0, 0x0) futex_waitv(&(0x7f0000001080)=[{0x3, &(0x7f0000001040)=0x3, 0x82}], 0x1, 0x0, &(0x7f0000001100)={0x77359400}, 0x1) socket$nl_netfilter(0x10, 0x3, 0xc) write$rfkill(r1, &(0x7f0000000300)={0x0, 0x2, 0x3, 0x1, 0x1}, 0x8) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f00000003c0)=@raw={'raw\x00', 0x3c1, 0x3, 0x398, 0x1c0, 0x178, 0xc, 0x0, 0x178, 0x2c8, 0x258, 0x258, 0x2c8, 0x258, 0x3, 0x0, {[{{@ipv6={@loopback={0x1f0}, @mcast2, [], [0x0, 0x0, 0xffffffff], 'team_slave_0\x00', 'netpci0\x00'}, 0x0, 0x190, 0x1c0, 0x0, {}, [@common=@unspec=@string={{0xc0}, {0x0, 0x0, 'kmp\x00', "fc6b061134c5d5c8465af5f5caa5bd6c0dde77ff83daa984c0d76167e0608dcaa2caff7bd9c5923cccd5b483df8124249f91b8c3c2cea9bed64dc935a975401a68e34a04c1f15e50050729ba985e8c1576994e350d93a782668d4d51a1bc76bba1fde09794922ae65a804c56f092e430ebb8fa892d671c8c8035cae06810f8c6", 0x20}}, @common=@unspec=@addrtype1={{0x28}, {0x0, 0x0, 0x8}}]}, @common=@inet=@SET2={0x30}}, {{@ipv6={@private1, @mcast1, [], [], 'wg2\x00', 'hsr0\x00'}, 0x0, 0xd0, 0x108, 0x0, {}, [@common=@icmp6={{0x28}, {0x0, "08db"}}]}, @common=@inet=@SET3={0x38}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x3f8) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)={0xffffffffffffffff, 0xffffffffffffffff}) close(r6) recvmsg$unix(r5, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) ioctl$TUNGETFEATURES(r7, 0x5452, &(0x7f00000013c0)) openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x188021) syz_open_dev$usbmon(&(0x7f00000000c0), 0x6, 0x2) r8 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x3, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="18020000000000000000000000aabc00850000008700"], &(0x7f0000000080)='syzkaller\x00'}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={r8, 0x2000000, 0xe, 0x0, &(0x7f00000002c0)="bf4b3e9e3a9e9a758f8ea2a244a7", 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 3m6.896935407s ago: executing program 1 (id=514): r0 = syz_genetlink_get_family_id$nl80211(&(0x7f00000006c0), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000001240)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_TID_CONFIG(r1, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000bc0)={&(0x7f0000000040)={0x34, r0, 0x1, 0x71bd25, 0x3, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_TID_CONFIG={0x18, 0x11d, 0x0, 0x1, [{0x14, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0xc0}, @NL80211_TID_CONFIG_ATTR_AMPDU_CTRL={0x5, 0x9, 0x1}]}]}]}, 0x34}}, 0x4) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x1f) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r3}, 0x10) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r4 = getpid() sched_setscheduler(r4, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r6, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) socket(0x10, 0x803, 0x0) r7 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000340)={&(0x7f00000001c0)=ANY=[@ANYBLOB="9feb010018000000000000003400000034000000020000000000000002000004000000000000000002000000000000000000000002000000000000000100000000000001"], 0x0, 0x4e}, 0x20) r8 = syz_open_procfs(0x0, &(0x7f00000000c0)='net/ptype\x00') preadv(r8, &(0x7f00000002c0)=[{&(0x7f0000000340)=""/4096, 0x1000}], 0x1, 0x35, 0x88) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="1b00000000000000000000000010000000000000", @ANYRES32=0x1, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\x00 \x00'/20, @ANYRES32=0x0, @ANYRES32=r7, @ANYBLOB="010000000100"/28], 0x50) r9 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) r10 = syz_init_net_socket$nfc_llcp(0x27, 0x1, 0x1) ftruncate(0xffffffffffffffff, 0x2007ffc) ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(r9, 0xc0189378, &(0x7f00000001c0)={{0x1, 0x1, 0x18, r10}, './file1\x00'}) 2m50.436772852s ago: executing program 33 (id=514): r0 = syz_genetlink_get_family_id$nl80211(&(0x7f00000006c0), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000001240)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_TID_CONFIG(r1, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000bc0)={&(0x7f0000000040)={0x34, r0, 0x1, 0x71bd25, 0x3, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_TID_CONFIG={0x18, 0x11d, 0x0, 0x1, [{0x14, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0xc0}, @NL80211_TID_CONFIG_ATTR_AMPDU_CTRL={0x5, 0x9, 0x1}]}]}]}, 0x34}}, 0x4) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x1f) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r3}, 0x10) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r4 = getpid() sched_setscheduler(r4, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r6, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) socket(0x10, 0x803, 0x0) r7 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000340)={&(0x7f00000001c0)=ANY=[@ANYBLOB="9feb010018000000000000003400000034000000020000000000000002000004000000000000000002000000000000000000000002000000000000000100000000000001"], 0x0, 0x4e}, 0x20) r8 = syz_open_procfs(0x0, &(0x7f00000000c0)='net/ptype\x00') preadv(r8, &(0x7f00000002c0)=[{&(0x7f0000000340)=""/4096, 0x1000}], 0x1, 0x35, 0x88) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="1b00000000000000000000000010000000000000", @ANYRES32=0x1, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\x00 \x00'/20, @ANYRES32=0x0, @ANYRES32=r7, @ANYBLOB="010000000100"/28], 0x50) r9 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) r10 = syz_init_net_socket$nfc_llcp(0x27, 0x1, 0x1) ftruncate(0xffffffffffffffff, 0x2007ffc) ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(r9, 0xc0189378, &(0x7f00000001c0)={{0x1, 0x1, 0x18, r10}, './file1\x00'}) 24.56952999s ago: executing program 0 (id=706): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x50) rt_sigaction(0x40, 0x0, 0x0, 0x8, &(0x7f0000001540)) r3 = open(&(0x7f0000000140)='./file0\x00', 0x800, 0x70) mknodat$loop(r3, 0x0, 0x400, 0x0) bind$pptp(r3, &(0x7f0000000040)={0x18, 0x2, {0x1, @multicast2}}, 0x1e) syz_open_dev$tty20(0xc, 0x4, 0x0) r4 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000000), 0x80082, 0x0) ppoll(&(0x7f0000000200)=[{r4, 0x1002}], 0x1, 0x0, 0x0, 0x0) write$vga_arbiter(r4, &(0x7f00000000c0)=@unlock_all, 0xb) r5 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r5, 0x29, 0x40, &(0x7f00000005c0)=@raw={'raw\x00', 0x3c1, 0x3, 0x4e0, 0x0, 0x18c, 0x203, 0x320, 0x19030000, 0x410, 0x2e0, 0x2e0, 0x410, 0x2e0, 0x3, 0x0, {[{{@uncond, 0x300, 0x2d8, 0x320, 0x0, {}, [@common=@unspec=@bpf0={{0x230}, {0x13, [{0x20, 0x0, 0x8}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x0, 0x8}, {}, {0x0, 0x0, 0x0, 0xe}, {0x0, 0x0, 0x0, 0x3}, {0x0, 0x0, 0x3}, {0x2, 0x0, 0x4}, {}, {0x0, 0x0, 0x0, 0x1}, {0x0, 0x0, 0x8}, {}, {0x16}, {0x0, 0xff}, {}, {0x7}, {0x0, 0x0, 0x0, 0x4}, {0x0, 0x4, 0x0, 0x101}, {}, {0x0, 0x0, 0x5}, {}, {0x0, 0x0, 0x0, 0x9}, {0xfffc, 0x0, 0x0, 0x6}, {}, {0xfffe}, {}, {}, {}, {0xfffe, 0xfb}, {}, {0x7a04}, {}, {}, {0x20, 0x6}, {}, {}, {}, {0x0, 0x0, 0x0, 0x800}, {}, {0xb8c, 0x0, 0x0, 0xf00}, {0x0, 0x1, 0x0, 0x3}, {0x3}, {}, {}, {}, {}, {0x4}, {}, {}, {}, {}, {0x0, 0xfd}, {}, {}, {0x0, 0x0, 0x0, 0xfffffffd}, {}, {0x0, 0xb}, {0x4, 0x2}]}}]}, @common=@unspec=@IDLETIMER={0x48, 'IDLETIMER\x00', 0x0, {0x2, 'syz0\x00', {0x8001}}}}, {{@uncond, 0x0, 0xa8, 0xf0}, @common=@unspec=@IDLETIMER={0x48, 'IDLETIMER\x00', 0x0, {0xb, 'syz0\x00', {0x6c8}}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x540) socket$nl_route(0x10, 0x3, 0x0) socket$pppoe(0x18, 0x1, 0x0) syz_emit_vhci(&(0x7f0000001080)=ANY=[@ANYBLOB="04040a00e0ffffff0f77042482"], 0xd) r6 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file1\x00', 0x281c2, 0x0) fcntl$setlease(r6, 0x400, 0x1) fsetxattr$system_posix_acl(r6, &(0x7f0000000000)='system.posix_acl_access\x00', 0x0, 0x0, 0x3) 22.538854039s ago: executing program 0 (id=710): socket$nl_generic(0x10, 0x3, 0x10) fsopen(&(0x7f0000000280)='ceph\x00', 0x0) io_setup(0x6, &(0x7f00000003c0)=0x0) r1 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x62081, 0x0) io_submit(r0, 0x1, &(0x7f00000000c0)=[&(0x7f0000000000)={0x0, 0x0, 0x0, 0x5, 0x0, r1, 0x0}]) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x3, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r5}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, 0x0) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) r6 = getpid() sched_setscheduler(r6, 0x2, &(0x7f0000000200)=0x7) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r7, &(0x7f000057eff8)=@file={0x0, './cgroup\x00'}, 0x6e) sendmmsg$unix(r8, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r7, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) add_key(&(0x7f0000000000)='big_key\x00', &(0x7f0000000280)={'syz', 0x1}, &(0x7f00000002c0)="1d", 0xfe3a, 0xfffffffffffffffe) add_key(&(0x7f0000000040)='big_key\x00', &(0x7f0000000280)={'syz', 0x1}, &(0x7f00000002c0)="1d", 0x1, 0xfffffffffffffffe) sendmsg$NL80211_CMD_SET_INTERFACE(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x24, r3, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r4}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x3}]}, 0x24}}, 0x0) sendmsg$NL80211_CMD_START_AP(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000006c0)={0x7c, r3, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r4}, @void}}, [@beacon=[@NL80211_ATTR_BEACON_HEAD={0x3d, 0xe, {{{}, {}, @broadcast, @device_a, @from_mac=@broadcast}, 0x0, @random=0x7, 0x1, @void, @void, @void, @val={0x4, 0x6, {0xf0, 0x2, 0x7f, 0xa706}}, @void, @void, @val={0x25, 0x3, {0x1, 0x8c, 0x8}}, @void, @void, @void, @val={0x72, 0x6}, @void, @void}}, @NL80211_ATTR_FTM_RESPONDER={0x10, 0x10e, 0x0, 0x1, [@NL80211_FTM_RESP_ATTR_ENABLED={0x4}, @NL80211_FTM_RESP_ATTR_LCI={0x7, 0x2, "fd918f"}]}], @NL80211_ATTR_BEACON_INTERVAL={0x8}, @NL80211_ATTR_DTIM_PERIOD={0x8}]}, 0x7c}, 0x1, 0x0, 0x0, 0x20004090}, 0x0) r9 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) sync_file_range(r9, 0x9d0, 0x4000000006, 0x2) write$RDMA_USER_CM_CMD_CREATE_ID(r9, &(0x7f0000000600)={0x0, 0x18, 0xfa00, {0x4, &(0x7f00000005c0), 0x2, 0xa}}, 0x20) 22.393577463s ago: executing program 4 (id=711): r0 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x60000, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000040)=0x19) readv(r1, &(0x7f00000004c0)=[{&(0x7f0000000200)=""/66, 0x42}], 0x1) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x8) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80202, 0x0) r2 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r3 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000040), 0xa0201, 0x0) ioctl$SNDCTL_DSP_SETFRAGMENT(r3, 0xc004500a, &(0x7f00000001c0)) ioctl$SNDCTL_DSP_CHANNELS(r3, 0xc0045006, &(0x7f0000000180)=0x6f) write$dsp(r3, &(0x7f00000012c0)="a52876830a602214f6b4e928d758f38a5a7cb4b31c4c09289e9ebb628678", 0x1e) syz_usb_connect$uac1(0x0, 0x0, 0x0, 0x0) ioctl$sock_netrom_SIOCDELRT(r0, 0x890c, 0x0) r4 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r4, 0x0, 0x0) syz_emit_ethernet(0x102b, &(0x7f0000001c00)=ANY=[@ANYBLOB="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"], 0x0) readv(r4, &(0x7f0000000200)=[{&(0x7f0000000740)=""/4096, 0x1000}, {&(0x7f0000003c40)=""/4102, 0x1006}], 0x2) r5 = socket$l2tp6(0xa, 0x2, 0x73) bind$l2tp6(r5, &(0x7f0000000000)={0xa, 0x0, 0x0, @empty}, 0x20) connect$l2tp6(r5, &(0x7f00000000c0)={0xa, 0x0, 0x9, @loopback, 0x7, 0x2}, 0x20) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) getsockopt$sock_buf(r5, 0x1, 0x1c, 0x0, &(0x7f00000006c0)=0x2000) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000100)='./bus\x00', 0x21081e, &(0x7f00000009c0), 0x1, 0x515, &(0x7f00000010c0)="$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") syz_mount_image$vfat(&(0x7f0000000140), &(0x7f0000000040)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x802053, 0x0, 0x0, 0x0, &(0x7f00000000c0)) socket$nl_generic(0x10, 0x3, 0x10) unshare(0xa000400) shmget(0x1, 0xffffffffff000, 0x200, &(0x7f0000ffb000/0x3000)=nil) 18.584758597s ago: executing program 5 (id=713): bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000001d40)={&(0x7f0000000180)='fsi_master_gpio_cmd_rel_addr\x00'}, 0x18) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x50) rt_sigaction(0x40, 0x0, 0x0, 0x8, &(0x7f0000001540)) r3 = open(&(0x7f0000000140)='./file0\x00', 0x800, 0x70) mknodat$loop(r3, 0x0, 0x400, 0x0) bind$pptp(r3, &(0x7f0000000040)={0x18, 0x2, {0x1, @multicast2}}, 0x1e) syz_open_dev$tty20(0xc, 0x4, 0x0) r4 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000000), 0x80082, 0x0) ppoll(&(0x7f0000000200)=[{r4, 0x1002}], 0x1, 0x0, 0x0, 0x0) write$vga_arbiter(r4, &(0x7f00000000c0)=@unlock_all, 0xb) socket$inet6_udp(0xa, 0x2, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$pppoe(0x18, 0x1, 0x0) syz_emit_vhci(&(0x7f0000001080)=ANY=[@ANYBLOB="04040a00e0ffffff0f77042482"], 0xd) r5 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file1\x00', 0x281c2, 0x0) fcntl$setlease(r5, 0x400, 0x1) fsetxattr$system_posix_acl(r5, &(0x7f0000000000)='system.posix_acl_access\x00', 0x0, 0x0, 0x3) 16.635752178s ago: executing program 4 (id=715): openat(0xffffffffffffff9c, &(0x7f00000001c0)='./file0\x00', 0x40, 0x1) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f00000000c0), 0x42, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cpuset.effective_cpus\x00', 0x275a, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000040)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs={0x0, 0x0, 0xfffffffc}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0x6, &(0x7f00000005c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6}, 0x70) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000580)={&(0x7f0000000080)='sched_switch\x00', r5}, 0x10) recvmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x400122a0, 0x0) fcntl$lock(r1, 0x24, &(0x7f0000000080)={0x300, 0x2, 0x87f9, 0xfffffffffffffff6}) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000040)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r6, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r8, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_prio={{0x9}, {0x18, 0x2, {0xf, "000000000000000f000100000e00"}}}]}, 0x48}}, 0x0) sendmsg$BATADV_CMD_GET_MCAST_FLAGS(r1, &(0x7f0000000500)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000400)={&(0x7f00000003c0)={0x24, 0x0, 0x2, 0x70bd29, 0x25dfdbfe, {}, [@BATADV_ATTR_AP_ISOLATION_ENABLED={0x5}, @BATADV_ATTR_HARD_IFINDEX={0x8, 0x6, r8}]}, 0x24}, 0x1, 0x0, 0x0, 0x24044050}, 0x50) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000000100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r0, &(0x7f00000021c0)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r0, &(0x7f0000000040)={0x50, 0x0, r9, {0x7, 0x1f, 0x0, 0x10400}}, 0x50) syz_fuse_handle_req(r0, &(0x7f0000008380)="000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000080000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000dc4e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ba045abcd5dfc67d000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000230000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000050000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000209bfd66eea210560000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000040000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001354c4b600", 0x2000, &(0x7f00000062c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000480)={0x20, 0x0, 0x88}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_fuse_handle_req(r0, &(0x7f0000004200)="a28096c80abf3543ecde7564abff5085d2227ebcb0f164ae92706ad0b083a3f469a3efd15b4921e9c3063b98b3082068e7c31950dde842eac55df0f991453cad62a6956b0b6f7b8cf49b506a3060fe1127eca99663ade8efa89ee189acb5f3b92f6bc4c46621c803eed0d0bb5f32384870ed08f89d4f74445762fb99715e083c4c92a8878be19ffacc30d0f2da64f971cd40563163adc15670ecf25cd3ad96138967c4b53ad9d04b5193ab5fb674aa0030a9d703d1baf810ce897f969121f142161919e583c275671b999e7f363891dfdfdf3556d01b86ee29eca8fccbfeaf1771395148706cc6e6be7ce29fc9ffef061b5420950c1a525bf75ad06edec51538d1c5bbc77da72dc90fd9998936fffdda2427e5a68966c7e2208f76304680182ec73007e482f034195712af922db2726195d997708734db9e7825a864be00b2a4f800881fc0363f5e618398454f35b148b4ccb88d418269fac868a8ba4a2d5b4f06a1ac01b5ad158b842e05adca22c7372585bf4ce95560b6c1e021a3ed2ff7bd3b6b3c7734c3b66d7e4c460096312082f89b16baa6e73814aa60925780cd92cd65087e260ec046fc363264366a9df2c849c0644911303946adad544521ceb469a3e193ecc9a7876403fac461a4a70d6193b2451189a5c5120b3535e9edf619108af7f517b58abd3fa7fb1ab832213430d2e6901076fba9c9e1acc6c6f48ff0e419bbc45589745a176f52a7407ad5e3dd49acb31b47862806f47077dda04905e45a80a12cbcd4d2dd9fe66c2d1f99394fed8ec60961cd2dc7115a96ece432fac86d51bebb08b95f447a83792fe80291fca7b298c9043ef2c26f0f7e42798d3f54c84b94c24c76c555d83ccc53b99bb22d71845e5cf21a5ba7fbeffeb6306e1730db14561b950a3f24bcfd78d4ab0d97de8054bb1a6077ae7cca6e45d846d3df82298d07212922742cb0facac3b77edfbab90e9ee2d4f7b0ee9b17bb11ec5e5721340d84cb6bd93428167e69b47759172557acda313c3decdfc6fe9336bfade459f43b39d0f2289f9142db280f4ee668e650e12858c577e12e2b9a57ee66c834be97979bcbe94747fa5d8d0b7d3a9f8f218df1bf960f828429a1efe838616b18faf6629236ddbded43a093efae163228e5c38fd7714743c2fcca47e3382bcfb1ab893fd7377527b4ec43f3fa60ebd338161d8de7cad65b15579e4af258f5fe3a63c2637a15703207029b0899b5427767647baef11e291358e6e54f6f13d3d2ca7a5e7969e04d2733b3b9ab822c69a3cfac097384de5071a9b74a656136d55eb190df08747b509fd610ff62b4950ef71c934fe21a48a4931d3d9458b415f112cee65c660f5490e982341da1c58634b3967ca6f3596d20cc90f508382156e36f16539093240ef5f2aa6a2c0dff2a67df30dcf50bf6e0b82a3d49f2d532a8dde1b3ceefcf0837190b74186090d1c18b59917d7efce1adfb238ef4a7b1d22c4cef09320221de883e97e6882466508de06fcdabad3b741bdca2cff879d57ddda52f42b3dcb8a78cfc05826af7e4ff155960ff8491194f4d321ef195990abaeeefdcb852d1e1e3703f317385a9458b6c2dd9db830f757ec29c9939fc7313e639fe485bc1e41ddaaef3fbf1f7cc527c8fad0d21b8082482caad7bee440e5097665f636c3dfec82f8c98afb6243bc3944939675a594277d278ba4361461f7da52e224e4ce5dee4a467bf6ae9f67b61ac6eb0a440406abac2016eec907e241c57f5f44be47290fd0fef785ff04df3810ccd637b4d97a84bae8486a36f75d872e645fe46625969fc2d1f032c56ed44bd98ea27bd9b6ddc8eb2dc2ec9f90f2f1ca1bd20e37ac58b03c84c872f4ba47310654986641460dfdd531ac62a76ad87b89c103ac5c9c2e7e70c66447b3412d4a1e5cbc30e16939505116c04de33ae054ed366de8d1f971c2de439957a194e22a488f58d7efd46439177f3f3c45a1475927eecd846d3d2e6a2ab5c7f8addd99062c2fc6b272d1f51bb8f22f1b6f8bb3faf8aa85e5eb9abf7df5cf8f26267323808b0833a987989cbe59205e7ad06556e2d1b8a4873ca1cbcbc8d43abc145fd4eb832e7a58ab2c793d003ce7b1850ce45eb7480417a1e9eb9d39a1028a2a04a2aa649c098c4f8eee514db5f6021173bb254b8e22b150b2ca01dc7ff235db46ed78d07f43d1adab13b8445d1b32069eb45f9d389fcf5a3f7d3ebe243c5b1fe17b1f5a3d571b65f21b9e471e818172554dc956749b99cb7a5f303ec480d7194a2ba86e204f06aa1becdddc8c49082c527e7064ac2ad77dc05639d3d2a7778f6943ed6105ebf6f0b9e94fddbe05c236ec000f4d1d4e496b10068211ab68ada4c7f7ac61f5f5ba5f1810d5bbe87ff4f8356af0d3f682baedb0ad8f8488b277421f0a03fc5e3095ee34bc4472d8f17e3f7013cf2f79f5ff3ea4b6bae56d1365a33b09bfa9a496323f7da923b7e29dce4beb81035f13130004c96e56d7ef6ca6c101d20c27a218e623227c33c9e488b17e7ae9ac20da8240501f7b614a1730f164553fe479ef149866e4ea47296814284a3d3eb7cbb294289ffb996e0eb053b9c16e54cf267832e3d360eb196ed51305630223309ea97215628f01ec9d3ea48096418d5e962cac5063460f0a18772ec7ce66d14a1cce14b52c40bbbfafccbf1e76f09e57ff0718048e5b993157a6cf4718826b1e09430413a3596a15c4a620fa8c8e1d1663e5739f9f790ddbb3be0e00187d43717d659242467d8681ac10303346157f894d9037641417010e9654c6a5b22263e73a5a37128f50078a980c30930321aa5c5e7851d5d392ddce3a14a96916fa8421ae6728f37f5de7c3e98feb4babd4e1bd2315d595e209d52748f70adc2284fcdaa6ad880470d2a071f3490aaf3491fb64b4547419e8eccdc491a8921156cb4811ad1e66514a32b0b31b641438881f28c1e6461b4f451938999af671e8c6a5cd0c072a9fe4cdbefe24ca616f3d0a15ac97cca835b1a440e04fa28340c6044176c8ecc8ee0d033d47db8a0aacfa0eabdfa1c9509fc2604008f01cbafeb5bd2b503b809ed672340b9a576593f1ef388391b54b605e7a15bef7b1345627a34fca57738b0f8f4f19eea93c903495274a4425a1a1cc6c4c6e335b631df5185c95b485e4257867b5347a40e4e14dcc560f061fd4fd265137dc68afd548adde778f1330f769acb1ccf5da14ff6992c24e210ea6e6179421881b803393bc6974e37106c5b5b3b5d0b3469f8969bffb7e4ceb2c98e928e74366492d27235ae4c74a2f48511aeeaa53a2beafa7a331b50e454c507af1b63350a5cef35668a5b9325014192277e509561008b3601088f79d42eaa8b1e4ae2000b31749e2b8094312ddb7f3c1cd625ef885c11fa22a66e374b52b3425e0b8016154e1fd8471339e32e7373d63ab646d893fbe09ae07b06074c01401ea76b3c382a9d32f24f93c789964e16bc4206ecd75c10917ab84ffd8d6cdf4cd28fd90375ff28518f8c1a3befc538e1b9e427fb671988d29f2fb2fcd039f4d341c84eb4d7cf600ddaba88bb094e4d87a1419180149f491368e648b69985b05ac39a4ecdd3c5135f3a5c8ad7792dacb6470144bb9e67805a211efb3ec9ccaf8e0901345fb19e4da579e1fbe86a1207f4f13c3436009c2c640b7cf3f8b77ca7bd994bf93308027359c6dd1b7db1e153fc0821968ef36c003b6c73fe890f4de24f5c6458dbaaf3819edeaa91783c3cfc7e773689236248195c7bbd60113f2476fa3687621d668d1728ee433d2f8f4db707345d30f1e52ab87a2a0afd547c6b3f0000f59f17facde48f693490e22494b75d11df1a143b85068d143ef6a9bb5937a9df380c8948f1a01e9675e18409edb0f6b9605b68e34632fcce472dc50b90b0f6dcd57931f78e1e8861a0fb62e72b0baad6f9d23c1cfb0f19b25013c8d9fcd786a2f6f79768b5fb398f7b2baa31ce8156d1fc4a46c1c463fdf30360d42aeed2ef11611d0b7f654bb51052fd4dc39328f8ec4c58bbda05e6f1b3c8f6d8adca0268f2410e9a4a7d63b6616006d0e02f6edacc10e5c54fd85f15a8bd7648a293f23d6a699bd9a675250475a73a96d7475e4fabb89fb5e7de5d7a3479aa485c0befc60d0ac4fd5ac6dbecceb06cad86e219fc0ce4720758917811a3215f8d13e413bfb64fc065fc421aede0b56691797dac428c7e463479fa591b9072c309b7533e427c5cc11a1f6cf9a5b995d328d796d874c5b55dfc12a5039b413ce319cf5ba1f355c4e0717d32650b43e18010f37f048731931c52c4f36eb969dda702afe96c2a5241350a67ba2d026946189c5e281293c9a8e2cff3784753f1de78b917101b54e5ab00c045ea15f28a0e3f509962cf8bd3385d85250737eae5c34ece86b86669c13b00308a3b13c0ac3c83ff26fb52a4aa83c1233a9490cb9ca917a056908931751bddb88a62379a713395f0764e4a393faf253a4026d0472270e6036287d56850df1751543484d65b3062155b6300e0024241c59a862ae769c1a9232a2d9fb24705177a09cceb3eefbf9f106f67e01be14cdeb4d2fc7d8661df3e75de5ccd09a7e559f028fb9837c621ea0045b4d1b679067f246339c974631aa7134d4e910efb28d3c48929cef1df7e6c73668762d55086b6c59c36ac90154135fd7ca4e4047dd0aa161fa982d8edf9c0cb9666477e096c55718f6e4742415fefd4f696d1f1ccd6322bc19496ddebd36282a7c707d5b44113e30678e6e33ab7d34be04a59ac614d6a54134490998be02636fa91633d6294781c2b9a54c611c0045cfcfe81f49aa21b29d835cd2047c854486fd8e65a2ebf629f7ced602b9dd107bfde483e5c9b5cbba4a08cdce09920bda9978b7fc2b4a89bf1573a26389e52090fdf5dccf22111dc8c42fd3c8c477092895398086cc22cca665269e193fc650742a361a44b857d258429f701f22e9b7615bc3dab78c1479a41cf8575cdb17169470b347adfc03e03daea3e269725cfc72df5664b9df36d2f2b55013b71133e0b80577a47182511ebb308b6248d457bd2af7b28e77182c305241178c4124ab102771fd5a8c3dacb8775de881301d71587c76bcf0a97a72ad244d0c42fd71aceec32dd48bb5c9a95b391166c832ac5bac8c7cae4d18b3f7d9f2e4782fdf97732e3d51f67bbb57f989ee0d7589dbd0c2a5c63840e914b9d7d720fa120acbffebf816b588b2ccc052e7fa78992e0ea39dd21a122add41195f8e2e1acd777c1a4e8ef4362fef441feb4d9252c6bfbd2742152300a32027776e3341620d3c8d9365e10e81adcca7d87a0e555c98a0353c692557d90ee9be3fbaab766abf93e2462149fd99c92a5fc58d899ee75535cd1fe1386c5ab0b157c2102039d6015258f59cef3f15b951893a30ae839f740402a30b34e7be73796286403c5beb0853d856d83f1b00b48328f56dcb32e1faab08a3435b1482bf18b21c95aefeaafa7fd761c7f28d416fcde06bf7aee5c6e9eb50e55874253ba3f1d0ce2505b4fc7c3fc996bfbb8446bafe84f5bea94bfd7ca5aeaf237fe793b66e5c521d4092e4e1f9bde1dfcfe53fa55005d21cfa833a338fd9792614129336060e10d1911862070761aa20c2902eb7c5a355eff4cf6253d7102a2ca1fead4c53b57d576d104c081310d92797e4e2e8c269d19910d0d4cedf30fa28ba680c00137f83de940624229b6a125ce5233c6cf4a3640b74f58f288dad8451fbe37641c5559a5f3caf1299c8bfb230723652278fe378efd8e459b9da26cffeb58468a6301dbc06d713ba2d8d43d9038f5f2dc8b831ba58a88eeb5b1786b21e398aeeeb7c1f3d6f01d82b3947862fb9e7cbd7da5d04c5fcd34da28d53e2246e3ac1e3a619ad174efa6435eaa0fc94d610799ce0158421dce046306eb5042143daa336d52206b12610ea6389cdda49bf5af1d4ee42ac090a94ae7b7612073f3a5c36a2205eda887f41478f7d20f18667f941f71eebcfa76c1ab28f2a49a3bd56bd3f4e6bd079ab3fe2d94782236e83585a03e52907abaef7456a95d5d3f3d37efdc035dbfd7c41b8ba0af2df8adf1cf24f7ff0beccd3d26bc91caf42314ef7e466f74e19ae0df2e2298fc2f694a7ec134632035585d530e7e19f65c256f001d75382d9825ef741bc213af186377d9ca10d3722354e1897ca5c23ac6a52c9ad0e6b686e1776f7ec65df033e8f4d5db80c1bc354093b319cb70df93d610667675816328c99322f14e636b95f04e6497f139d508b453f53ddb5c289d849fd5407c9bdcefd1642abd46e28cb4e94371bdc606eeb67c9fe17747c68f2d50e82711da4d3edb0eda06f41b7f93fa8fb4d83cf21c79da67000bac2275508217ade1659fa8d24e5f8efb9f4bd21073ebef3d06368eb03fa3cf0d638448bd055ed20d292033ffdba538559c8ff9a2a5c8f83b5c393643d6585d1df994c3be43e72b8f3f53114d2a5f6bcedb573842b23b6a3eb7fca8495bf03bd03fde7b19bd39a16cec49e01f38e671af33cae082d9788e3202799bc466babec2080528d0609c0b731964719093735b4c1e73bd0705637c47516922197c552baeaf3516b5e3bbc2cd1afa3ef8215196ed580d9561092f620b897e98e786a0c7cbb0eedda8063292ba6482497f5f6bb62fb5ab4c97cb7658dc6579718eb97b547fcf47ced1426561af93a15fb4dc6d3d93b868644943c2c94b23b0570bbb81df2666c24f5abccfcdd71e209f3bb43c01d17f9bc8b9af2c26762fc6a741a150b7d1186e4f35175f3c315243e1c11e92c43a1fc492eef5a13c77a81fcf514ebfd0f8e645dae15a07e86b2f01fda065db4505a5eea83cb616f744f6bee731be191c65449c02603556d5a51422cf9c2f19f8d6843e0c1091e0708aa271e91f71c8602b9fa72189e036b7cb6af1569f21269283de94a6d7fe5849fd433d5b719c80419873db0587fc29786cc598d896fb16360bddd2ce12e54d05418f4f5e5f2d7aafe9fcd6268cbe2e9e6329ffb6c67fab8f3ce673028cc06aaa6b857556bba3b44d3fab5b6e875e70a2f3ad4b2ff76f31ead3462d3801ba373b3c2f545e94f57021575e2947f81f53283fc0a5137fd44fa3d074c92de54a0a3465c858f5a7ef08313faddbc3663e4e0167f3cba39612057a7518fbfb031f5ad0f9f75831973ebd733b82e554bf3fdec84e51f65dab6028c6c51366d9d4700fdf255e4c7bd70766e7f2281b3f2a5363f85ce49f9135904d14bcb117ad754c2594dcdca2d30e40ff265b5accfb116f64ed99aad570c4c5a91efdbb984ac651d8721405a0342cf77f448c17a152eabf29e88950558a86d0074e1cefab1eb7c366682f686ee1338737e675ea58eb8b4c86b9f28a6f6e96459f29e3b4dc59ff044c61a0dcc5c31d803e6e98420e446229ccdec3d0f705e92ffe016bb3696373eadab7f35ccf65ab4d9be09a085ce21bbd7c0555376e4d7fe68b5e7a64f48b5127825fb2be598d991f9c1a54bf52713417dcc599e812d85513a537e6eafa738edc972b67e065595d11678449bce6cd3d69800a649b560d0e057c502ca3e72e97820829ecfea801192c3f4e2c8763c095a43ee6fe45fe8730130937668df1d4ee577ada28238be03286481f2d2a004cc4d48856e71fbd64f1a0043a4520ecbbf1b3abdc96b87a27be8495a20542967aa4cd3a44a11502419a083d84e97abfde0901b66dde48388649a0ed6d93b9f20c530e990c7c52370a114d800d6ab3f6687d6bbc105b63738fe05fa6cac98ad6663936bb18cb923264e44312c24c2ce8e642bb73c921012b68a26a70977446b8f15f9d62467d8b356560c183a6bd6cd76ec868c3bd94a595cd7bf996755a508a814980c5e588b275200c45afd900c8c2de329ec2484b0e3ecd7b0960e5e3425881d1ff7f8bd8b20f5cc98ffc3acb77f5e88775a4bd3ab9f9eb027e27d3af55ebdf4eebab48ea911128d668d00fc3f5b5480aa0d9a4af563ba577384448e5425157133d59e1cef3c722f33700bd372825046b1fa5824e405154a3af1440bc2b75acfbd07cf92e8c162587e74b5ab66b1c6aeab3ad5fa3ee91da4900ef30ad04baea326df912517dd96e1696b4a91faa66675978a375e81f25464a1073dc6737af08d7e25956bb31d438548a7da38662d49db812a8cf1d6cc65f5c63879fd9ee7fd2a66ca3fc1a748cb239aab88c87206470b4c60592afeb6d69ed97a8f990155862ba4e22b64804142c131a23792937aa8a8696e165c24d7692a04bb4471b0f0d2507fe7c8618421428fc7a0acc984ca5cc6bacb772e8a717bbaa646f9643275910a6037afaf5a80678d18edda138a4e13d06d04a5d06431eab48738225cf1567e960e765728dc12e91b91c6f2b33dfb6e033aa68c1c2334d24335abc4a7a1df5636dec29091da54d5f5a1fff41e4a35a0c2f04f968f7d78e2f51c73577e2192bb20f289aaba5a175c2ed533855bd9ed9a842ad482136dd5e0cf45eb5e2d31ff62a3be1cf8a94a58316e74f4ab9fc54f3a0bb83beef0f355993bdea2c83e61cdc796bf2564ae51fae616799e8711998cd88d35cd9824452fdd65226174b46792cb87f4dd282e4e6f67eb66da413ad877ed6ce775f7e19bc93f48bb9e5ec04009de3c042aeacf7f4b25ad6b30e017303f64fe07ac79e8744aab6926d117f13513d0469cef335fe1d0d787c2d0b2c031a9521786ac10e9f8b768271680337f2c3262abdccb5d3107c632bf1f74c83ee91f49988222fb080cc8faa9b1a02526d8b6087e0b2354173d29016b3309587c16f057dd812aa63c3169150de81f3af97d082a8f8da4ce4f909ff649821d7f96d97613552e8cc4902e046ecfa329b1d980ff5ece69b8f1615fdff5244f41cec0af924624ae1641ecae5fa26c5fb9006e57100ee71377ced7c255ae17a0845e2ee0287c62c1852f93877f9f86157ca9675d383fff5cd6f2b001ec0136c07cf37f5ace1853122c2baa1092d418e2a490c4a5c8f56b828ce1bafeef4e77f095d6b4ed99d56f66812cb19be540ebe5d52e7eff2d69cbb8477e11514f7e3604bf9999f78c2f1ca6f60a2216b87fa0f25269c425b7d50709b200912b3b7899c95e12d6e9c4dacc19e327721860e0477a53e6793fbb7fb9704a848f395f48c24a6e79b9e1358cc3497251de88b8d3a7b22c6d8af1a7fab81530d9f0cc98f62debb222b54780d89794238532717b447d71b46a60ed481c21db85b590b31720009695ecffd4ef029964e5d5149622233ac013e960a005c924f73ea82c318455546c53d74aa3f7e2ff26aa074c40a55aba8b08027fc19b596eec6c4f89bae39e74b9aad88344f7cc5ad3eefa5095f2ab47222e9a357ecd71c6700ac576025201490d9e446603dfd4bda7617dd500981b2d2ab8c43882a5208494cb3f8ebc720bca8a7cf6c80bd7aaaf89507bb3412ea490a78973f12cc30413e9df1458917ea3d68b438d424c1314bc8d01939c5a5a842438281e62d0c800dee704b2a6cd3e1e4b885a6b26b894a98765fa3308c9e4b87f93625faecdb17c29a27cd243bf6030a67874ec9f2443cf8154261ac2a834c01cbe1f314ee7aa3ca552e1648cf8b42a63f249e3538026e09e44d69dc259adb0d1a0cbccb5a5dd5d0dccc90d023da79d5634188ff060f7e35a5f9d7ad99546824d63975d4452de876093f4e997dc46eedcd80a9eebf5e4f077fbb10c7d9e19a3419e7b845972a3b62613c5404a209b16fa88e0ff49d7b4f21fecc1f773c5b4be61021e0cab8602c6e8257649303aaeafcbb178e7a460ff07f219c46eb6fe5bf8113723e454003bd707767c107daf4255751daaf8decf35262640058924eb6587868b2c08230b317e97396ebc928ba8d274ca0eed0bfcb637676003c64e8c1e1a0420b6c96a44226061ced41b8448382abd2f3d0c472afcde231fbc9ee90c2f1132f8e2391246f95ad93354c7460e20de996ad0f61b13b27646887a637cede90b94b7d8c3130f0fe060e8d955c711a2700b302a75bdeb32a0a6802ea795cb114f5f82a1a381a86bbff88b299e47728b746dff964c94c52b661b9429376b1320b46081426b7c340206dc0da151bf84be2a49e78b6b5938753d2b1be8d9e67c43c5d70e72519f5f90d9f95e84ee38f82b191ac4d968b0a37901fd923cb289d585693ac3c3f8a94fca6df45e694e199a9cd0b1bc1fa7394bcc96aae670dca6605a998793b7e067ac410ba631057b8b76fcbe9524df820c02efef1608b743cd2aa6d60d3d8e476fa12d3acc329f8272b087d89471177ed531fec1f9c24a975ca2fcd8c246a33e291a3f00b7f234052067a0059c86762475256bb5e7dac6f121a0925506b18933c6e314915d4b3b2130aafc2483ef22ff8bb7b887565b1bd22fabca22037d8fc9437f675c5313526266f60bb7c7c47f30c7d567ed142ea5ec367c4298328d20e5344f01c0c90cf8a6302f4d84b6ba7495fba314a05ba29b63bb6d458fdb05a4411136958309f418fb178e19aa09ff9e62b29732fb2986c96e738f7a688cb2122dbb8f2ad9a5f28bc49ec0c462413552afee8e403259b55ad6dc334dde7f2d306929dd01f2aa6036cafd41874522689301b81c9e50e86828894140356db0a3317b081ed9d8148c41e77e6bda6287762532b86eb91f5480915680deb8a91fb8656b7f0109064865d2b846af0861f67d3f720d6e306540cd7b68f095ef3690b88ea93fb6a402ff5697597cda83171f159e85307d1a8c01611189bd4eb4f0453ab88d43ae181a562a76902a67c687514079d6f4304d9a7c0fa24b6e86074ea0a9fd8187c120312078f5ebfa674adc0303734bf8f6b5585943706594192ad24c9f7d9794fb83758924f862855ddd50bff58b522c43d73c03289baec628cd693cab93101b1e473b76532510e10f03e86812fea6f2d6f5467dcf29e6d7cf8524f383a0ded3f0951c3ffb171a6b8a6d97b5fa8899a19f1a3d0e934a1d4741076e4394ba225158f697bf7d5651717c6950229a0be22e8120d76a414edbcd03d505264b7ede8272ccbd6dbdcebaf11daf6a652f6f9eb74ba7a3ecc942892891388005ae5d971e4e79d696564906dffd44845b704a9abc2fa5ba1bb69a548423a08044ad6d0e365db7e6bea0f3844a452759716cb98dcf326001ec90c1c343174098cdf47ea2e13341058ca014d2a30e9ba3c526de72a6e387181bf76a278c9cbc518d8c374a3f1d9802a39464a100903dbec16f8f095f5d82d9d09507281e4f7fe0ce4fbeced193902a5f658af2a4c1d0952dabdc6ae5830b6b5a2c3f5b8d33a73665990822e5f4a7ce5366755a1615543bdf78299c71e890e0bedb6ec277b10a389d6a3ba9c037221421279e51ab50fb115de2076cc99444202e88ebd9d0fbe4e60234b7b761495ac6c9e615ddac8176164a88fb6d6cc2b52672c8949afe3efc1e87a598896bc93e421423844fcaafe65af898a015b3bcaf623ebeef9a57155af5278ceb52b995f7ca466d9e18b05e86380679e0257cff6d0c6750078462f2ee4701d6d8289ed848b877cf5918625b7937060d667c11119881c30809056892352c6c53c01e395af6866ea350e6f21fa3db772c1177c759999973b51e11ffc5908", 0x2000, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000540)={0x78, 0x0, 0x0, {0x0, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200000, 0x8000}}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r10 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x101001, 0x0) syz_fuse_handle_req(r0, &(0x7f0000006380)="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", 0x2000, &(0x7f0000000dc0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000340)={0x18, 0xfffffffffffffff5, 0xffffffff, {0x4}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) writev(r10, &(0x7f0000000000)=[{&(0x7f0000000cc0)="e1", 0x56000}], 0x1) syz_fuse_handle_req(r0, 0x0, 0x0, &(0x7f0000000bc0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000005c0)={0x18, 0x0, 0x3, {0x5}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 13.797805637s ago: executing program 4 (id=716): r0 = fsopen(&(0x7f0000000040)='cgroup2\x00', 0x1) fsconfig$FSCONFIG_SET_BINARY(r0, 0x6, 0x0, 0x0, 0x0) r1 = socket$inet6(0xa, 0x5, 0x0) setsockopt$sock_int(r1, 0x1, 0xf, &(0x7f0000fee000)=0x3fa, 0x4) bind$inet6(r1, &(0x7f0000000140)={0xa, 0x4e20, 0x0, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x2e}}}, 0x1c) r2 = syz_usb_connect(0x3, 0x253, &(0x7f0000000640)={{0x12, 0x1, 0x0, 0x87, 0x48, 0xde, 0x8, 0x5c8, 0x403, 0xd4d4, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x241, 0x1, 0x2, 0x0, 0x10, 0x3, [{{0x9, 0x4, 0xe2, 0x5b, 0x5, 0xe, 0x1, 0x0, 0x6, [], [{{0x9, 0x5, 0x2, 0x4, 0x40, 0x86, 0x1, 0x40, [@generic={0xdc, 0x24, "663fcc2b3aeb4d58204f370cc562514e490cc4bce2f633e8422c2b78182b8f7f60927a9c24a54bceb30afd3fcbd9c09168ee4d2de1dcd898b8911c50d2dae4273923d81c091cfb49c18a837617c449e4e308505dc09a96361756d3603650a670dd3340b3d47d0c2e8c0ca9a9b76b8ba929b93fc5e32c4ea858865e0d452c8d45d700d5d7829873eac3f7cd79fa301e6b92c6b38aa9de5d91968a02147f56fcb7390a47852e9bf9dfcdafd34cd16eda02556794f298494424192795791ae2929f10180b8c8fc11fef3b7ad432ccad01bddd4db3f2f3abe440566c"}]}}, {{0x9, 0x5, 0xd, 0x0, 0x200, 0x6, 0x7e, 0xf9, [@generic={0x66, 0x10, "e400f6b23eb5c8f99848c85240edaee82f6d6578f1935b0996cf14120df615ddddf9304445034e83092b746e2242ceebf82f423bc7faa42c0d2d977a38b712df08c39cb29aa683275c2236c615377c9a833b536faf641afd78c71dd5377d405699d7c9e4"}]}}, {{0x9, 0x5, 0xe, 0x30, 0x3ff, 0xd, 0x6, 0x9, [@uac_iso={0x7, 0x25, 0x1, 0x1, 0x1, 0x102}]}}, {{0x9, 0x5, 0xa, 0x10, 0x200, 0x0, 0x7f, 0x6, [@uac_iso={0x7, 0x25, 0x1, 0x0, 0x6, 0x3}]}}, {{0x9, 0x5, 0x4, 0x1, 0x10, 0xd, 0x37, 0x6b, [@generic={0x54, 0xa, "a57627dc45ddf223049ffb191abd414c8c2995596fcf9a0c67561f44cbad50c183e3129b82527b9af403cb621cf5ce2e9825023b021f57aea2e9576f0a728c3056c40cadb532bbf2133a7686f738d24d856e"}, @generic={0x5e, 0x3, "bb65825f75b14c93d7a4007223336a9e76542dcd9eec6d7063ef98eeb5e6cd29cc2767d218111a3a499799773c62a4464b9a00c366b6cc57f4cb4ecbf7bb08e3c55d0a0719b165452594a0036b638a1593883b06c58be5effd86dc5c"}]}}]}}]}}]}}, 0x0) syz_usb_control_io(r2, 0x0, 0x0) syz_usb_control_io(r2, 0x0, &(0x7f0000000b00)={0x44, &(0x7f0000000340)={0x40, 0xe, 0x2, '!['}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r3 = socket$inet6(0xa, 0x5, 0x0) bind$inet6(r1, &(0x7f0000000140)={0xa, 0x4e23, 0x0, @mcast2}, 0x1c) r4 = fsmount(r0, 0x0, 0x0) r5 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r3, 0x8933, 0x0) bind$can_j1939(r5, &(0x7f0000001200)={0x1d, 0x0, 0x1000000000}, 0x18) connect$can_j1939(r5, &(0x7f0000000080)={0x1d, 0x0, 0x4, {0x1, 0xff, 0x3}, 0xfe}, 0x18) writev(r5, &(0x7f0000000240)=[{&(0x7f0000000000)='h', 0xfdef}], 0x1) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), r6) r8 = socket$kcm(0x2, 0x5, 0x84) setsockopt$sock_attach_bpf(r8, 0x84, 0x7b, &(0x7f0000000000), 0x8) ioctl$sock_SIOCGIFINDEX_80211(r6, 0x8933, &(0x7f0000000440)={'wlan1\x00', 0x0}) r10 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000600), 0x0) r11 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r11, 0x1, r10, &(0x7f0000000040)={0xb0000009}) sendmsg$NL80211_CMD_START_AP(r6, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000140)={0x1c, r7, 0x20fe7683a8385145, 0x70bd26, 0x0, {{0x5}, {@val={0x8, 0x3, r9}, @void}}}, 0x1c}}, 0x40080c0) syz_emit_ethernet(0x9d, &(0x7f0000000180)={@random="18b6f5fb368a", @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}, @void, {@llc={0x4, {@llc={0x1, 0xd4, "1b", "4dd66bdca63e0e1265e0b369e305de2c23d648b7f401682549aa2b097e5b8b6b292ac5d2d4e66cf8ebb012fd7ac64ed886f9fd9279649e11492119097f584d237b06951d0b93b66cf9e014909d54faa7e2baa2bcab8eabd8e68913a22fe1356b69ff348542197d82c38e8631ac160585fc0c6eb33741f66fe9ce2cf97ccd9e49b7fba5985cdaf0a8e80c3519"}}}}}, &(0x7f0000000000)={0x0, 0x3, [0x344, 0x847, 0x877, 0x4f1]}) r12 = openat$cgroup_subtree(r4, &(0x7f0000000100), 0x2, 0x0) write$cgroup_subtree(r12, &(0x7f0000000300)=ANY=[@ANYBLOB='-cpu'], 0x5) write$cgroup_subtree(r12, &(0x7f0000000480)={[{0x2b, 'rdma'}]}, 0x6) socket$nl_xfrm(0x10, 0x3, 0x6) 13.739488152s ago: executing program 2 (id=717): openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80202, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000680)='sys_exit\x00', r0, 0x0, 0x5}, 0x18) get_robust_list(0x0, 0x0, &(0x7f0000000400)) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) openat$audio(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) r2 = userfaultfd(0x80001) ioctl$UFFDIO_API(r2, 0xc018aa3f, &(0x7f0000000140)) ioctl$UFFDIO_REGISTER(r2, 0xc020aa00, &(0x7f0000000080)={{&(0x7f0000ffd000/0x3000)=nil, 0x3000}, 0x1}) madvise(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x2) r3 = socket$xdp(0x2c, 0x3, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) eventfd(0x3) sendmsg$IPSET_CMD_DESTROY(r4, &(0x7f00000001c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000100)={&(0x7f0000000240)={0x58, 0x3, 0x6, 0x5, 0x0, 0x0, {0x7, 0x0, 0x1}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x58}, 0x1, 0x0, 0x0, 0x40000}, 0x40010) setsockopt$XDP_UMEM_REG(r3, 0x11b, 0x4, &(0x7f0000000340)={&(0x7f0000000000)=""/59, 0x304000, 0x800, 0x0, 0x3}, 0x20) r5 = socket$packet(0x11, 0x3, 0x300) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r7, &(0x7f0000000380)={0x0, 0x4076cbba9945d516, &(0x7f0000000340)={0x0, 0x14}}, 0x0) getsockname$packet(r7, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000a00)=ANY=[@ANYBLOB="400000001000390400"/20, @ANYRES32=r8, @ANYBLOB="0198001a000000002000128008000100677265001400028008000700ac14140008000100c6"], 0x40}}, 0x6044850) sendto$packet(r5, &(0x7f0000000000)='1', 0x44, 0x40, &(0x7f0000000200)={0x11, 0x8100, r8, 0x1, 0x0, 0x6, @local}, 0x14) syz_open_dev$sndmidi(&(0x7f00000003c0), 0x8001, 0x204000) 13.576031868s ago: executing program 5 (id=718): bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000001d40)={&(0x7f0000000180)='fsi_master_gpio_cmd_rel_addr\x00'}, 0x18) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x50) rt_sigaction(0x40, 0x0, 0x0, 0x8, &(0x7f0000001540)) r3 = open(&(0x7f0000000140)='./file0\x00', 0x800, 0x70) mknodat$loop(r3, 0x0, 0x400, 0x0) bind$pptp(r3, &(0x7f0000000040)={0x18, 0x2, {0x1, @multicast2}}, 0x1e) syz_open_dev$tty20(0xc, 0x4, 0x0) r4 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000000), 0x80082, 0x0) ppoll(0x0, 0x0, 0x0, 0x0, 0x0) write$vga_arbiter(r4, &(0x7f00000000c0)=@unlock_all, 0xb) r5 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r5, 0x29, 0x40, &(0x7f00000005c0)=@raw={'raw\x00', 0x3c1, 0x3, 0x4e0, 0x0, 0x18c, 0x203, 0x320, 0x19030000, 0x410, 0x2e0, 0x2e0, 0x410, 0x2e0, 0x3, 0x0, {[{{@uncond, 0x300, 0x2d8, 0x320, 0x0, {}, [@common=@unspec=@bpf0={{0x230}, {0x13, [{0x20, 0x0, 0x8}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x0, 0x8}, {}, {0x0, 0x0, 0x0, 0xe}, {0x0, 0x0, 0x0, 0x3}, {0x0, 0x0, 0x3}, {0x2, 0x0, 0x4}, {}, {0x0, 0x0, 0x0, 0x1}, {0x0, 0x0, 0x8}, {}, {0x16}, {0x0, 0xff}, {}, {0x7}, {0x0, 0x0, 0x0, 0x4}, {0x0, 0x4, 0x0, 0x101}, {}, {0x0, 0x0, 0x5}, {}, {0x0, 0x0, 0x0, 0x9}, {0xfffc, 0x0, 0x0, 0x6}, {}, {0xfffe}, {}, {}, {}, {0xfffe, 0xfb}, {}, {0x7a04}, {}, {}, {0x20, 0x6}, {}, {}, {}, {0x0, 0x0, 0x0, 0x800}, {}, {0xb8c, 0x0, 0x0, 0xf00}, {0x0, 0x1, 0x0, 0x3}, {0x3}, {}, {}, {}, {}, {0x4}, {}, {}, {}, {}, {0x0, 0xfd}, {}, {}, {0x0, 0x0, 0x0, 0xfffffffd}, {}, {0x0, 0xb}, {0x4, 0x2}]}}]}, @common=@unspec=@IDLETIMER={0x48, 'IDLETIMER\x00', 0x0, {0x2, 'syz0\x00', {0x8001}}}}, {{@uncond, 0x0, 0xa8, 0xf0}, @common=@unspec=@IDLETIMER={0x48, 'IDLETIMER\x00', 0x0, {0xb, 'syz0\x00', {0x6c8}}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x540) socket$nl_route(0x10, 0x3, 0x0) socket$pppoe(0x18, 0x1, 0x0) syz_emit_vhci(&(0x7f0000001080)=ANY=[@ANYBLOB="04040a00e0ffffff0f77042482"], 0xd) r6 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file1\x00', 0x281c2, 0x0) fcntl$setlease(r6, 0x400, 0x1) fsetxattr$system_posix_acl(r6, &(0x7f0000000000)='system.posix_acl_access\x00', 0x0, 0x0, 0x3) 11.877728475s ago: executing program 5 (id=719): r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000200)='bbr', 0x3) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000140)=0x2, 0x4) connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x20000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x7) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00'}, 0x10) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) ioctl$VIDIOC_SUBSCRIBE_EVENT(0xffffffffffffffff, 0x4020565a, 0x0) ioctl$VIDIOC_S_INPUT(0xffffffffffffffff, 0xc0045627, &(0x7f00000000c0)=0x3) syz_open_dev$vim2m(&(0x7f0000000000), 0x800, 0x2) r4 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$IP_VS_SO_SET_ADDDEST(r4, 0x0, 0x487, &(0x7f0000000000)={{0x84, @rand_addr=0x64010100, 0x4e24, 0x3, 'lc\x00', 0x8, 0x323b, 0x55}, {@remote, 0x4e23, 0x10000, 0x0, 0x12d5c, 0x12d5c}}, 0x44) sendmsg$sock(0xffffffffffffffff, &(0x7f0000000400)={&(0x7f0000000580)=@in6={0x2, 0x4e22, 0x0, @dev}, 0x80, 0x0, 0x0, &(0x7f0000000000)=[@mark={{0x14, 0x1, 0x24, 0x3}}], 0x18}, 0x0) sendto$inet(r0, &(0x7f0000000280)="1d", 0x1, 0x200400c5, 0x0, 0x0) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f00000001c0), 0x4) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000200)=@ipv6_newrule={0x4c, 0x20, 0x1, 0x0, 0x25dfdbfe, {0xa, 0x10, 0x14, 0x0, 0x0, 0x0, 0x0, 0x8, 0x1000e}, [@FRA_SRC={0x14, 0x2, @private2={0xfc, 0x2, '\x00', 0x1}}, @FIB_RULE_POLICY=@FRA_IP_PROTO={0x5, 0x16, 0x30}, @FRA_DST={0x14, 0x1, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}]}, 0x4c}}, 0x40000) sendmsg$nl_route(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000340)=@newlink={0x5c, 0x10, 0x439, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x3c, 0x12, 0x0, 0x1, @ipip6={{0xb}, {0x2c, 0x2, 0x0, 0x1, [@IFLA_IPTUN_REMOTE={0x14, 0x3, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}, @IFLA_IPTUN_LOCAL={0x14, 0x2, @private2}]}}}]}, 0x5c}}, 0x0) ioctl$sock_SIOCBRADDBR(r5, 0x89a0, &(0x7f0000000000)='veth1_virt_wifi\x00') 11.638437138s ago: executing program 2 (id=720): socket(0x1e, 0x4, 0x0) close(0x3) socket$inet6(0xa, 0x2, 0x0) r0 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x87}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xb3d68000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r4 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$SO_BINDTODEVICE(r4, 0x1, 0x19, &(0x7f00000001c0)='macvlan0\x00', 0x10) setsockopt$inet_tcp_TCP_REPAIR(r4, 0x6, 0x13, &(0x7f0000000040)=0x1, 0x4) r5 = socket$pppl2tp(0x18, 0x1, 0x1) r6 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r5, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, r6, {0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x4}}, 0x2}}, 0x2e) r7 = syz_genetlink_get_family_id$l2tp(&(0x7f00000008c0), 0xffffffffffffffff) r8 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_SESSION_DELETE(r8, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000180)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r7, @ANYBLOB="01002cbd7010f5ffffff040000000800090002"], 0x1c}, 0x1, 0x0, 0x0, 0x20008000}, 0x30) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r4, 0x6, 0x14, &(0x7f0000000180)=0x1, 0x4) connect$inet(r4, &(0x7f0000000000)={0x2, 0x2, @remote}, 0x10) r9 = socket$inet(0x2, 0x4000000000000001, 0x0) getsockopt$inet_tcp_int(r9, 0x6, 0x2, 0x0, &(0x7f0000000140)) io_uring_register$IORING_REGISTER_BUFFERS(0xffffffffffffffff, 0x0, 0x0, 0x0) 11.439947078s ago: executing program 0 (id=721): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f00000009c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x46, '\x00', 0x0, 0x2}, 0x94) r1 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0}, 0x18) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee2, 0x8031, r1, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) openat$sndseq(0xffffffffffffff9c, 0x0, 0x446102) dup(0xffffffffffffffff) bpf$MAP_CREATE(0x0, &(0x7f0000000ac0)=@base={0xa, 0x7, 0x2, 0x4}, 0x50) r5 = openat$tcp_congestion(0xffffffffffffff9c, &(0x7f00000000c0), 0x1, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$batadv(&(0x7f0000000240), r6) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r6, 0x8933, &(0x7f00000003c0)={'batadv_slave_1\x00', 0x0}) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r6, 0x8933, &(0x7f0000000400)={'batadv0\x00', 0x0}) sendmsg$BATADV_CMD_SET_HARDIF(r6, &(0x7f0000000640)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f00000006c0)={0x2c, r7, 0x1, 0xf0bd25, 0x25dfdbfc, {}, [@BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r9}, @BATADV_ATTR_HARD_IFINDEX={0x8, 0x6, r8}, @BATADV_ATTR_HOP_PENALTY={0x5, 0x35, 0x7}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4800}, 0x20004804) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) fcntl$setlease(r10, 0x400, 0x0) write$tcp_congestion(r5, 0x0, 0x0) bpf$BPF_PROG_ATTACH(0x8, &(0x7f00000002c0)={@cgroup, 0xffffffffffffffff, 0x12, 0x25, 0x0}, 0x20) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000340)={@cgroup, 0xffffffffffffffff, 0x12, 0x0, 0x0, @void, @value=0x0}, 0x20) r11 = socket(0x2, 0x80805, 0x0) sendmmsg$inet_sctp(r11, &(0x7f00000032c0)=[{&(0x7f00000001c0)=@in={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, &(0x7f0000000040)=[{&(0x7f0000000100)="03", 0x1}], 0x1}], 0x1, 0x0) sendmmsg$inet_sctp(r11, &(0x7f00000032c0)=[{&(0x7f0000000000)=@in={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, &(0x7f00000004c0)=[{0x0}], 0x1, &(0x7f0000000500)=ANY=[@ANYBLOB="300000000000000084"], 0x30}], 0x1, 0x0) socket$netlink(0x10, 0x3, 0x0) 10.591263331s ago: executing program 5 (id=722): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$nl_route(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x20000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x7) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000480)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x23}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r2}, 0x10) r3 = getpid() bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x2, 0x4, 0x0, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x100, 0x70, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r6 = syz_open_dev$vbi(&(0x7f0000000000), 0x0, 0x2) ioctl$VIDIOC_SUBSCRIBE_EVENT(r6, 0x4020565a, &(0x7f0000000080)={0x0, 0x2}) ioctl$VIDIOC_S_INPUT(r6, 0xc0045627, &(0x7f00000000c0)=0x3) r7 = socket$inet_sctp(0x2, 0x1, 0x84) r8 = socket$kcm(0xa, 0x2, 0x0) setsockopt$IP_VS_SO_SET_ADDDEST(r7, 0x0, 0x487, &(0x7f0000000000)={{0x84, @private=0xa010101, 0x4e21, 0x3, 'wrr\x00', 0x23, 0x81, 0x5}, {@dev={0xac, 0x14, 0x14, 0x3c}, 0x4e23, 0x10000, 0x1cb, 0x12d61, 0x12d58}}, 0x44) setsockopt$IP_VS_SO_SET_ADDDEST(r7, 0x0, 0x487, &(0x7f0000000000)={{0x84, @rand_addr=0x64010100, 0x4e24, 0x3, 'lc\x00', 0x8, 0x323b, 0x55}, {@remote, 0x4e23, 0x10000, 0x0, 0x12d5c, 0x12d5c}}, 0x44) sendmsg$sock(r8, &(0x7f0000000400)={&(0x7f0000000580)=@in6={0x2, 0x4e22, 0x0, @dev}, 0x80, 0x0}, 0x0) bind$alg(0xffffffffffffffff, &(0x7f0000000540)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-serpent-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, 0x0, 0x0) r9 = accept4(0xffffffffffffffff, 0x0, 0x0, 0x800) sendmmsg$alg(r9, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1", 0x22}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b", 0x7c}], 0x2}], 0x1, 0x40800) recvmsg(r9, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f00000000c0)=""/81, 0x51}, {&(0x7f0000000200)=""/83, 0x53}], 0x2}, 0x2000) sendmsg$nl_route_sched(r1, &(0x7f00000037c0)={0x0, 0x0, &(0x7f0000003780)={&(0x7f0000000340)=@newtaction={0x88c, 0x30, 0x12f, 0x0, 0x0, {}, [{0x878, 0x1, [@m_police={0x874, 0x1, 0x0, 0x0, {{0xb}, {0x848, 0x2, 0x0, 0x1, [[@TCA_POLICE_PEAKRATE={0x404}], [@TCA_POLICE_RATE={0x404}, @TCA_POLICE_TBF={0x3c, 0x1, {0x0, 0x0, 0x0, 0x0, 0x2000, {0x7, 0x0, 0x0, 0x0, 0x0, 0x7}, {0x7, 0x0, 0x0, 0x0, 0x0, 0x7}}}]]}, {0x4}, {0xc, 0xb}, {0xc, 0xa}}}]}]}, 0x88c}}, 0x0) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=ANY=[@ANYBLOB="7000000002060500000000000000000000000000120003006269746d61703a69702c6d6163000000050004000000000009000200f3797a3000000000240007800c0002800800014000008e020c0001800800014000000000080008400000001005000500020000000500010006"], 0x70}}, 0x0) 9.935152655s ago: executing program 2 (id=723): r0 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000300)='sched_switch\x00', r0}, 0x10) syz_mount_image$exfat(&(0x7f0000000000), &(0x7f0000000240)='./file0\x00', 0x2000084c, &(0x7f0000000500)=ANY=[@ANYRES8=0x0, @ANYRESHEX=0x0, @ANYRES64=0x0], 0x81, 0x14f5, &(0x7f0000002a80)="$eJzs3AuYjlXXOPC99t43Y5r0NMlh2GuvmycNtkmSHBJySJIkSXJKSJokSUgMOSUNSchxkhyGkBymMWmcz4eckyavNEkSklPY/0vv+33e9+v9vr7v//b/u65v1u+69jV7zf2s9ax71lzz3PdzXfP80HNUvRb1azcjIvEvgb9+SRFCxAghhgkhbhBCBEKISvGV4q8cL6Ag5V97EvbnejT9WnfAriWef97G88/beP55G88/b+P55208/7yN55+38fwZy8u2zyl2I6+8u/j9/7yMX///F8ktP/mbjeVv7vU/SOH55208/7yN55+38fzzNp5/3sbz/9+v1n9xjOeft/H8GcvLrvX7z7yu7brWv3+MMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxvKGc/4qLYT4t/217osxxhhjjDHGGGN/Hp//WnfAGGOMMcYYY4yx//dASKGEFoHIJ/KLGFFAxIrrRJy4XhQUN4iIuFHEi5tEIXGzKCyKiKKimEgQxUUJYQQKK0iEoqQoJaLiFlFa3CoSRRlRVpQTTpQXSeI2UUHcLiqKO0QlcaeoLO4SVURVUU1UF3eLGuIeUVPUErXFvaKOqCvqifriPtFA3C8aigdEI/GgaCweEk3Ew6KpeEQ0E4+K5uIx0UI8LlqKJ0Qr0Vq0EW1Fu/+r/FdEX/Gq6Cf6ixQxQAwUr4lBYrAYIoaKYeJ1MVy8IUaIN0WqGClGibfEaPG2GCPeEWPFODFevCsmiIlikpgspoipIk28J6aJ98V08YGYIWaKWWK2SBdzxFzxoZgn5osF4iOxUHwsFonFYolYKjLEJyJTLBNZ4lOxXHwmssUKsVKsEqvFGrFWrBPrxQaxUWwSm8UWsVVsE9vF52KH2Cl2id1ij9gr9okvxH7xpTggvhI54uv/Yf7Z/5DfCwQIkCBBg4Z8kA9iIAZiIRbiIA4KQkGIQATiIR4KQSEoDIWhKBSFBEiAElACEBAICEpCSYhCFEpDaUiERCgLZcGBgyRIggpwO1SEilAJKkFlqAxVoCpUhepQHWpADagJNaE21IY6UAfqQT24D+6D+6EhNIRG0AgaQ2NoAk2gKTSFZtAMmkNzaAEtoCW0hFbQCtpAG2gH7aA9tIcO0AE6QSfoDJ2hC3SBZEiGrtAVukE36A7doQf0gJ7QE3pBb+gNr8Ar8Cq8Cv2hjhwAA2EgDIJBMASGwlB4HYbDG/AGvAmpMBJGwVvwFrwNY+AMjIVxMB7GQw05ESbBZCA5FdIgDabBNJgO02EGzISZMBvSYQ7MhbkwD+bDfPgIFsLH8DEshsWwFDIgAzJhGWRBFiyHs5ANK2AlrILVsAZWwzpYD+tgI2yCjbAFtsA22Aafw+ewE3bCbtgNe2EvfAFfwJfwJaRCDuTAQTgIh+AQHIbDkAu5cASOwFE4CsfgGByH43ACTsIpOAmn4TScgbNwDs7BBbgAF+GlhO+a7y2zIVXIK7TUMp/MJ2NkjIyVsTJOxsmCsqCMyIiMl/GykCwkC8vCsqgsKhNkgiwhS0iUKEmGsqQsKaMyKkvL0jJRJsqysqx00skkmSQryAqyoqwoK8k7ZWV5l6wiq8qOrrqsLmvITq6mrCVry9qyjqwr68n6sr5sIBvIhrKhbCQbycaysWwiH5ZN5QAYAo/KK5NpIUdCSzkKWsnWso1sK9+GJ2V7OQY6yI6yk3xajoOx0EW2d8nyOdlVToJu8gU5GV6UPeRU6Clflr1kb9lHviL7yg6un+wvZ8AAOVDOhkFysBwih8p5UFdemVg9+aZMlSPlKPmWXApvyzHyHTlWjpPj5btygpwoJ8nJcoqcKtPke3KafF9Olx/IGXKmnCVny3Q5R86VH8p5cr5cID+SC+XHcpFcLJfIpTJDfiIz5TKZJT+Vy+VnMluukCvlKrlarpFr5Tq5Xm6QG+UmuVlukVvlNrldfi53yJ1yl9wt98i9cp/8Qu6XX8oD8iuZI7+WB+Vf5CH5jTwsv5W58jt5RH4vj8of5DH5ozwuf5In5El5Sv4sT8tf5Bl5Vp6T5+UF+au8KC/Jy9JLoUBJpZRWgcqn8qsYVUDFqutUnLpeFVQ3qIi6UcWrm1QhdbMqrIqooqqYSlDFVQllFCqrSIWqpCqlouoWVVrdqhJVGVVWlVNOlVdJ6jZVQd2uKqo7VCV1p6qs7lJVVFVVTVVXd6sa6h5VU9VStdW9qo6qq+qp+uo+1UDdrxqqB1Qj9aBqrB5STdTDqql6RDVTj6rm6jHVQj2uWqonVCvVWrVRbVU79aRqr55SHVRH1Uk9rTqrZ1QX9axKVs+prup51U29oLqrF1UP9ZLqqV5WvVRv1UddUpeVV/1Uf5WiBqiB6jU1SA1WQ9RQNUy9roarN9QI9aZKVSPVKPWWGq3eVmPUO2qsGqfGq3fVBDVRTVKT1RQ1VaWp99Q09b6arj5QM9RMNUvNVulqjhryt0oL/hv57/+T/BG/Pfs2tV19rnaonWqX2q32qL1qn9qn9qv96oA6oHJUjjqoDqpD6pA6rA6rXJWrjqgj6qg6qo6pY+q4Oq5OqJPqvPpZnVa/qDPqrDqrzqsL6oK6+LefgdCgpVZa60Dn0/l1jC6gY/V1Ok5frwvqG3RE36jj9U26kL5ZF9ZFdFFdTCfo4rqENhq11aRDXVKX0lF9iy6tb9WJuowuq8tpp8vrJH3bv5z/R/210+10e91ed9AddCfdSXfWnXUX3UUn62TdVXfV3XQ33V131z10D91T99S9dC/dR/fRfXVf3U/30yk6RQ/Ur+lBerAeoofqYfp1PVwP1yP0CJ2qU/UoPUqP1qP1GD1Gj9Vj9Xg9Xk/QE/QkPUlP0VN0mk7T0/Q0PV1P1zP0DD1Lz9LpOl3P1XP1PD1PL9AL9EK9UC/Si/QSvURn6AydqTN1ls7Sy/Vyna1X6BV6lV6l1+g1ep1epzfoDXqT3qS36C06W2/X2/UOvUPv0rv0Hr1H79P79H69Xx/QB3SOztEH9UF9SB/Sh/Vhnatz9RF9RB/VR/UxfUwf18f1CX1Cn9Kn9Gl9Wp/RZ/Q5fU5f0Bf0RX1RX9aXr1z2BTKQgQ50kC/IF8QEMUFsEBvEBXFBwaBgEAkiQXwQHxQKbg4KB0WCokGxICEoHpQITICBDSgIg5JBqSAa3BKUDm4NEoMyQdmgXOCC8kFScFtQIbg9qBjcEVQK7gwqB3cFVYKqQbWgenB3UCO4J6gZ1ApqB/cGdYK6Qb2gfnBf0CC4P2gYPBA0Ch4MGgcPBU2Ch4OmwSNBs+DRoHnwWNAieDxoGTwRtApaB22CtkG7P7W+92eKPOX6mf4mxQwwA81rZpAZbIaYoWaYed0MN2+YEeZNk2pGmlHmLTPavG3GmHfMWDPOjDfvmglmoplkJpspZqpJM++ZaeZ9M918YGaYmWaWmW3SzRwz13xo5pn5ZoH5yCw0H5tFZrFZYpaaDPOJyTTLTJb51Cw3n5lss8KsNKvMarPGrDXrzHqzwWw0m8xms8VsNdvMdvO52WF2ml1mt9lj9pp95guz33xpDpivTI752hw0fzGHzDfmsPnW5JrvzBHzvTlqfjDHzI/muPnJnDAnzSnzszltfjFnzFlzzpw3F8yv5qK5ZC4bf+Xi/srLO2rUmA/zYQzGYCzGYhzGYUEsiBGMYDzGYyEshIWxMBbFopiACVgCS+AVhIQlsSRGMYqlsTQmYiKWxbLo0GESJmEFrIAVsSJWwkpYGStjFayC1bAa3o134z14D9bCWngv3ot1sS7Wx/rYABtgQ2yIjbARNsbG2ASbYFNsis2wGTbH5tgCW2BLbImtsBW2wTbYDtthe2yPHbADdsJO2Bk7YxfsgsmYjF2xK3bDbtgdu2MP7IE9sSf2wl7YB/tgX+yL/bAfpmAKDsSBOAgH4RAcgsNwGA7H4TgCR2AqpuIoHIWjcTSOwTE4FsfheHwXJ+BEnISTcQpOxTRMw2k4DafjdJyBM3AWzsJ0TMe5OBfn4TxcgAtwIS7ERbgIl+ASzMAMzMRMzMIsXI7LMRuzcSWuxNW4GtfiWlyP63EjbsTNuBm34lbcjttxB+7AXbgL9+Ae3If7cD/uxwN4AHMwBw/iQTyEh/AwHsZczMUjeASP4lE8hsfwOB7HE3gCT+EpPI2n8QyewXN4Di/gr3gRL+Fl9BhjpYi119k4e70taG+wMbaA/fu4qC1mE2xxW8IaW9gW+YcYrbWJtowta8tZZ8vbJHvb7+IqtqqtZqvbu20Ne4+t+bu4gb3fNrQP2Eb2QVvf3vcPcWP7kG1iH7dN7RO2mW1tm9u2toV93La0T9hWtrVtY9vazvYZ28U+a5Ptc7arff53caZdZtfbDXaj3WT32y/tOXveHrU/2Av2V9vP9rfD7Ot2uH3DjrBv2lQ78nfxePuunWAn2kl2sp1ip/4unmVn23Q7x861H9p5dv7v4gz7iV1os+wiu9gusUt/i6/0lGU/tcvtZzbbrrAr7Sq72q6xa+26f+91ld1it9ptdp/9wu6wO+0uu9vusXt/i6+cxwH7lc2xX9sj9nt7yH5jD9tjNtd+91t85fyO2R/tcfuTPWFP2lP2Z3va/mLP2LO/nf+Vc//ZXrKXrbeCgCQp0hRQPspPMVSAYuk6iqPrqSDdQBG6keLpJipEN1NhKkJFqRglUHEqQYaQLBGFVJJKUZRuodJ0KyVSGSpL5chReUqi26gC3U4V6Q6qRHdSZbqLqlBVqkbV6W6qQfdQTapFteleqkN1qR7Vp/uoAd1PDekBakQPUmN6iJrQw9SUHqFm9Cg1p8eoBT1OLekJakWtqQ21pXb0JLWnp6gDdaRO9DR1pmeoCz1LyfQcdaXnqRu9QN3pRepBL1FPepl6UW/qQ69QX3qV+lF/SqEBNJBeo0E0mIbQUBpGr9NweoNG0JuUSiNpFL1Fo+ltGkPv0FgaR+PpXZpAE2kSTaYpNJXS6D2aRu/TdPqAZtBMmkWzKZ3m0Fz6kObRfFpAH9FC+pgW0WJaQkspgz6hTFpGWfQpLafPKJtW0EpaRatpDa2ldbSeNtBG2kSbaQttpW20nT6nHbSTdtFu2kN7aR99QfvpSzpAX1EOfU0H6S90iL6hw/Qt5dJ3dIS+p6P0Ax2jH+k4/UQn6CSdop/pNP1CZ+gsnaPzdIF+pYt0iS6TJxFCKEMV6jAI84X5w5iwQBgbXhfGhdeHBcMbwkh4Yxgf3hQWCm8OC4dFwqJhsTAhLB6WCE2IoQ0pDMOSYakwGt4Slg5vDRPDMmHZsFzowvJhUnhbWCG8PawY3hFWCu8MK4d3hVXCquHjD1YP7w5rhPeENcNaYe3w3rBOWDesF9YP7wsbhPeHDcMHwkbhg2HF8KGwSfhw2DR8JGwWPho2Dx8LW4SPhy3DJ8JWYeuwTdg2bBc+GbYPnwo7hB3DTuHTYefwmbBL+GyYHD4Xdg2f/8PjKeGAcGD4Wvha6P0Dakl0aTQj+kk0M7osmhX9NLo8+lk0O7oiujK6Kro6uia6Nrouuj66Iboxuim6ObolujW6Lep9/fzCgZNOOe0Cl8/ldzGugIt117k4d70r6G5wEXeji3c3uULuZlfYFXFFXTGX4Iq7Es44dNaRC11JV8pF3S2utLvVJboyrqwr55wr75JcW9fOtXPt3VOug+voOrmn3dPuGfeMe9Y9655zXd3zrpt7wXV3L7oe7iX3knvZ9XK9XR/3iuvrXnX9XH+X4lLcQDfQDXKD3BA3xA1zw9xwN9yNcCNcqkt1o9woN9qNdmPcGDfWjXXj3Xg3wU1wk9wkN8VNcWkuzU1z09x0N93NcDPcLDfLpbt0N9fNdfPcPLfALXALExe6RW6RW+KWuAyX4TJdpstyWW65W+6yXbZb6Va61W61W+vWuvVuvdvoNrrNbrPb6ra67W672+F2uF1ul9vj9rh9bp/b7/a7A+6Ay3E57qA76A65Q+6w+9bluu/cEfe9O+p+cMfcj+64+8mdcCfdKfezO+1+cWfcWXfOnXcX3K/uorvkLjvv0iLvRaZF3o9Mj3wQmRGZGZkVmR1Jj8yJzI18GJkXmR9ZEPkosjDycWRRZHFkSWRpJCPySSQzsiySFfk0sjzyWSQ7siKyMrIqsjqyJuJ98R2hL+lL+ai/xZf2t/pEX8aX9eW88+V9kr/NV/C3+4r+Dl/J3+kr+7t8FV/VV/NP+Fa+tW/j2/p2/knf3j/lO/iOvpN/2nf2z/gu/lmf7J/zXf3zvpt/wXf3L/oe/iXf07/se/nevo9/xff1r/p+vr9P8QP8QP+aH+QH+yF+qB/mX/fD/Rt+hH/Tp/qRfpR/y4/2b/sx/h0/1o/z4/27foKf6Cf5yX6Kn+rT/Ht+mn/fT/cf+Bl+pp/lZ/t0P8fP9R/6eX6+X+A/8gv9x36RX+yX+KU+w3/iM/0yn+U/9cv9Zz7br/Ar/Sq/2q/xa/06v95v8Bv9Jr/Zb/Fb/Ta/3X/ud/idfpff7ff4vX6f/8Lv91/6A/4rn+O/9gf9X/wh/40/7L/1uf47f8R/74/6H/wx/6M/7n/yJ/xJf8r/7E/7X/wZf9af8+f9Bf+rv+gv+cv8P2uMMcYYY/8t6g+OD/gn35N/W1cMFEJcv7NY7n+subnwX/eDZULniBDiuf49H/23VadOSkrK3x6brURQarEQInI1P5+4Gq8QncQzIll0FBX+aX+DZe8L9Af1o3cKEft3OTHiany1/u3/Sf0nnx6fWTk8F/9f1F8sRGKpqzkFxNX4av2K/0n9Iu3/oP8C36QJ0eHvcuLE1fhq/STxlHheJP/DIxljjDHGGGOMsb8aLKt1/6P75yv35wn6ak5+cTX+o/tzxhhjjDHGGGOMXXsv9u7z7JPJyR2784Y3vOHNv2+u9V8mxhhjjDHG2J/t6kX/te6EMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhjLu/5/fJzYtT5HxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhj7Fr7PwEAAP//SOc8Mw==") socket$nl_route(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(0xffffffffffffffff, 0x10e, 0xc, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18060000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000003000000b703000000000000850000007300000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) ppoll(&(0x7f0000000000), 0x0, &(0x7f0000000040)={0x0, 0x989680}, &(0x7f0000000180)={[0xffffffffffffff68]}, 0x8) socket$nl_generic(0x10, 0x3, 0x10) prctl$PR_SET_VMA(0x53564d41, 0x0, &(0x7f0000ffc000/0x4000)=nil, 0x5bbf91a1e7f99074, &(0x7f0000000000)) ioctl$TCSETS2(0xffffffffffffffff, 0x402c542b, &(0x7f0000000300)={0x3, 0x19, 0xff7d, 0x4, 0x2, "501fe88fc2aa9677d426a819a92aaefe7d41cc", 0xb, 0x1}) r4 = socket$inet(0x2, 0x3, 0x8d) setsockopt$inet_msfilter(r4, 0x0, 0x8, &(0x7f00000000c0)=ANY=[@ANYRESDEC], 0x1) getsockopt$inet_pktinfo(r4, 0x0, 0x8, &(0x7f0000000280)={0x0, @local, @local}, &(0x7f0000000500)=0x50) r6 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_inet6_SIOCSIFADDR(r6, 0x8916, &(0x7f0000000000)={@remote, 0x2, r5}) r7 = socket(0xa, 0x1, 0x0) ioctl(r6, 0x8916, &(0x7f0000000000)) ioctl(r7, 0x8936, &(0x7f0000000000)) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) syz_mount_image$ext4(0x0, &(0x7f0000000140)='./file0\x00', 0x2000000, 0x0, 0x0, 0x0, &(0x7f0000000000)) 9.502368318s ago: executing program 0 (id=724): mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x200) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x18, 0x10, 0x0, &(0x7f0000000180)='syzkaller\x00', 0x8, 0x0, 0x0, 0x41100, 0x3, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x6}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0xe1}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x6) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000040)=0x4) socket$nl_xfrm(0x10, 0x3, 0x6) r1 = socket$packet(0x11, 0x2, 0x300) getsockopt$packet_int(r1, 0x107, 0xf, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x2000000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) r4 = socket(0x10, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r4, 0x89f1, &(0x7f0000000000)={'ip6_vti0\x00', 0x0}) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000080)=0x6) r5 = syz_open_dev$vim2m(&(0x7f0000000000), 0xfffffffffffffffe, 0x2) ioctl$vim2m_VIDIOC_S_FMT(r5, 0xc0d05605, &(0x7f0000000240)={0x1, @raw_data="a425e2f1a54b24f15655595860608d70ff6e425a6c36af37b33facd22dc8a9c7044410d324b03e654156762092a62fea8f13441431ce248bfc73a6726ee61b5191d15d8f392ff66fe0b17f0e11f5d2367d5593205ab1efa97d40619a553e7da2518125b850a186ef691daa55c9e50ffaf6ddc25220ded32aeba4524cec1afbd17abba1d100a05e97ed3dcad452db6e08a991e2c78b057f55deebde6f0b11ce65700c0a1ad7946ff7c355db87566e3e5abb7a37b52876fd9fa194c09273031900"}) unshare(0x4000280) socket$kcm(0x10, 0x5, 0x0) r6 = socket$inet_mptcp(0x2, 0x1, 0x106) setsockopt$inet_tcp_int(r6, 0x6, 0x3, &(0x7f0000000040)=0x24, 0x4) setsockopt$inet_int(r6, 0x0, 0xf, &(0x7f0000000000)=0x1001, 0x4) r7 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFVLAN_ADD_VLAN_CMD(r7, 0x8982, &(0x7f0000000400)={0x0, 'batadv0\x00', {0x8}}) sendmsg$kcm(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)=[{}], 0x1}, 0x0) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) migrate_pages(0x0, 0x0, &(0x7f0000000040)=0x7f, &(0x7f0000000300)=0xa) 7.086737225s ago: executing program 2 (id=725): openat(0xffffffffffffff9c, &(0x7f00000001c0)='./file0\x00', 0x40, 0x1) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f00000000c0), 0x42, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cpuset.effective_cpus\x00', 0x275a, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000040)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs={0x0, 0x0, 0xfffffffc}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0x6, &(0x7f00000005c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6}, 0x70) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000580)={&(0x7f0000000080)='sched_switch\x00', r5}, 0x10) recvmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x400122a0, 0x0) fcntl$lock(r1, 0x24, &(0x7f0000000080)={0x300, 0x2, 0x87f9, 0xfffffffffffffff6}) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000040)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r6, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r8, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_prio={{0x9}, {0x18, 0x2, {0xf, "000000000000000f000100000e00"}}}]}, 0x48}}, 0x0) sendmsg$BATADV_CMD_GET_MCAST_FLAGS(r1, &(0x7f0000000500)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000400)={&(0x7f00000003c0)={0x24, 0x0, 0x2, 0x70bd29, 0x25dfdbfe, {}, [@BATADV_ATTR_AP_ISOLATION_ENABLED={0x5}, @BATADV_ATTR_HARD_IFINDEX={0x8, 0x6, r8}]}, 0x24}, 0x1, 0x0, 0x0, 0x24044050}, 0x50) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000000100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r0, &(0x7f00000021c0)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r0, &(0x7f0000000040)={0x50, 0x0, r9, {0x7, 0x1f, 0x0, 0x10400}}, 0x50) syz_fuse_handle_req(r0, &(0x7f0000008380)="000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000080000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000dc4e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ba045abcd5dfc67d000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000230000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000050000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000209bfd66eea210560000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000040000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001354c4b600", 0x2000, &(0x7f00000062c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000480)={0x20, 0x0, 0x88}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_fuse_handle_req(r0, &(0x7f0000004200)="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", 0x2000, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000540)={0x78, 0x0, 0x0, {0x0, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200000, 0x8000}}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r10 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x101001, 0x0) syz_fuse_handle_req(r0, &(0x7f0000006380)="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", 0x2000, &(0x7f0000000dc0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000340)={0x18, 0xfffffffffffffff5, 0xffffffff, {0x4}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) writev(r10, &(0x7f0000000000)=[{&(0x7f0000000cc0)="e1", 0x56000}], 0x1) syz_fuse_handle_req(r0, 0x0, 0x0, &(0x7f0000000bc0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000005c0)={0x18, 0x0, 0x3, {0x5}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 7.084899355s ago: executing program 5 (id=726): bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000001d40)={&(0x7f0000000180)='fsi_master_gpio_cmd_rel_addr\x00'}, 0x18) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x50) rt_sigaction(0x40, 0x0, 0x0, 0x8, &(0x7f0000001540)) r3 = open(&(0x7f0000000140)='./file0\x00', 0x800, 0x70) mknodat$loop(r3, 0x0, 0x400, 0x0) bind$pptp(r3, &(0x7f0000000040)={0x18, 0x2, {0x1, @multicast2}}, 0x1e) syz_open_dev$tty20(0xc, 0x4, 0x0) r4 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000000), 0x80082, 0x0) ppoll(&(0x7f0000000200)=[{r4, 0x1002}], 0x1, 0x0, 0x0, 0x0) write$vga_arbiter(r4, &(0x7f00000000c0)=@unlock_all, 0xb) socket$inet6_udp(0xa, 0x2, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$pppoe(0x18, 0x1, 0x0) syz_emit_vhci(&(0x7f0000001080)=ANY=[@ANYBLOB="04040a00e0ffffff0f77042482"], 0xd) r5 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file1\x00', 0x281c2, 0x0) fcntl$setlease(r5, 0x400, 0x1) fsetxattr$system_posix_acl(r5, &(0x7f0000000000)='system.posix_acl_access\x00', 0x0, 0x0, 0x3) 7.084322205s ago: executing program 4 (id=727): bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000001d40)={&(0x7f0000000180)='fsi_master_gpio_cmd_rel_addr\x00'}, 0x18) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x50) rt_sigaction(0x40, 0x0, 0x0, 0x8, &(0x7f0000001540)) r3 = open(&(0x7f0000000140)='./file0\x00', 0x800, 0x70) mknodat$loop(r3, 0x0, 0x400, 0x0) bind$pptp(r3, &(0x7f0000000040)={0x18, 0x2, {0x1, @multicast2}}, 0x1e) syz_open_dev$tty20(0xc, 0x4, 0x0) r4 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000000), 0x80082, 0x0) ppoll(&(0x7f0000000200), 0x0, 0x0, 0x0, 0x0) write$vga_arbiter(r4, &(0x7f00000000c0)=@unlock_all, 0xb) r5 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r5, 0x29, 0x40, &(0x7f00000005c0)=@raw={'raw\x00', 0x3c1, 0x3, 0x4e0, 0x0, 0x18c, 0x203, 0x320, 0x19030000, 0x410, 0x2e0, 0x2e0, 0x410, 0x2e0, 0x3, 0x0, {[{{@uncond, 0x300, 0x2d8, 0x320, 0x0, {}, [@common=@unspec=@bpf0={{0x230}, {0x13, [{0x20, 0x0, 0x8}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x0, 0x8}, {}, {0x0, 0x0, 0x0, 0xe}, {0x0, 0x0, 0x0, 0x3}, {0x0, 0x0, 0x3}, {0x2, 0x0, 0x4}, {}, {0x0, 0x0, 0x0, 0x1}, {0x0, 0x0, 0x8}, {}, {0x16}, {0x0, 0xff}, {}, {0x7}, {0x0, 0x0, 0x0, 0x4}, {0x0, 0x4, 0x0, 0x101}, {}, {0x0, 0x0, 0x5}, {}, {0x0, 0x0, 0x0, 0x9}, {0xfffc, 0x0, 0x0, 0x6}, {}, {0xfffe}, {}, {}, {}, {0xfffe, 0xfb}, {}, {0x7a04}, {}, {}, {0x20, 0x6}, {}, {}, {}, {0x0, 0x0, 0x0, 0x800}, {}, {0xb8c, 0x0, 0x0, 0xf00}, {0x0, 0x1, 0x0, 0x3}, {0x3}, {}, {}, {}, {}, {0x4}, {}, {}, {}, {}, {0x0, 0xfd}, {}, {}, {0x0, 0x0, 0x0, 0xfffffffd}, {}, {0x0, 0xb}, {0x4, 0x2}]}}]}, @common=@unspec=@IDLETIMER={0x48, 'IDLETIMER\x00', 0x0, {0x2, 'syz0\x00', {0x8001}}}}, {{@uncond, 0x0, 0xa8, 0xf0}, @common=@unspec=@IDLETIMER={0x48, 'IDLETIMER\x00', 0x0, {0xb, 'syz0\x00', {0x6c8}}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x540) socket$nl_route(0x10, 0x3, 0x0) socket$pppoe(0x18, 0x1, 0x0) syz_emit_vhci(&(0x7f0000001080)=ANY=[@ANYBLOB="04040a00e0ffffff0f77042482"], 0xd) r6 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file1\x00', 0x281c2, 0x0) fcntl$setlease(r6, 0x400, 0x1) fsetxattr$system_posix_acl(r6, &(0x7f0000000000)='system.posix_acl_access\x00', 0x0, 0x0, 0x3) 5.308095099s ago: executing program 4 (id=728): bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000780)=@base={0xa, 0x16, 0x800, 0x7f}, 0x50) r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000580), 0xffffffffffffffff) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000780)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020786c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f0000000700)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000240)={&(0x7f0000000200)='sched_switch\x00', r1}, 0x10) openat$sysctl(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/vm/drop_caches\x00', 0x1, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r2 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) socket$inet_mptcp(0x2, 0x1, 0x106) pselect6(0x40, &(0x7f0000000240)={0x0, 0x0, 0x3, 0x8, 0x2, 0xb}, 0x0, &(0x7f0000000280)={0x3ff, 0x0, 0x0, 0x400d, 0x0, 0x9, 0x466}, 0x0, 0x0) sendmsg$MPTCP_PM_CMD_ADD_ADDR(0xffffffffffffffff, 0x0, 0x0) ioctl$RNDADDENTROPY(0xffffffffffffffff, 0x40085203, 0x0) mount$fuse(0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0)={{}, 0x2c, {'rootmode', 0x3d, 0x4000}}) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000400)=@bpf_ext={0x1c, 0x0, 0x0, 0x0, 0xc, 0x0, 0x0, 0x41000, 0x20, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x1f075, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x10000}, 0x94) r3 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r3) ptrace$setregs(0xd, r3, 0x0, &(0x7f00000003c0)) ptrace$getregset(0x4205, r3, 0x1, &(0x7f0000000080)={&(0x7f00000000c0)=""/120, 0x78}) r4 = socket$nl_generic(0x10, 0x3, 0x10) getsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x1c, &(0x7f0000000000)={@ipv4={""/10, ""/2, @loopback}, 0x0}, &(0x7f0000000100)=0x14) r6 = creat(0x0, 0xa8) ioctl$FS_IOC_SETFLAGS(r6, 0x40086602, &(0x7f0000000080)=0x20) mmap$IORING_OFF_SQES(&(0x7f0000534000/0x1000)=nil, 0x1000, 0x0, 0x11, r6, 0x10000000) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41100, 0x40, '\x00', r5, @fallback=0x24, r6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x9}, 0x94) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000300)={'wlan0\x00'}) sendmsg$NL80211_CMD_JOIN_MESH(r4, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000080)=ANY=[@ANYBLOB='L\x00\x00\x00', @ANYRES16=r0, @ANYBLOB="010000000000000000004400000008000300", @ANYBLOB], 0x4c}}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) 4.936934376s ago: executing program 0 (id=729): chdir(&(0x7f0000000280)='./file0\x00') socket$nl_generic(0x10, 0x3, 0x10) r0 = mq_open(&(0x7f00000000c0)='&\x00', 0x40, 0x104, 0x0) mq_notify(r0, &(0x7f0000000000)={0x110c230000, 0x3, 0x2, @thr={&(0x7f0000000180)="7f478cb9e218d705680900db098d3bfb1ecd3ee116d586ce35d2dc707da1575865dc839d160c36293b3ccbeb55bbe779b5f35ace93cee64d29d5dde73ee5c220910e1dbf02a5a7591fe6a5ec39f3135eb9f1df4d0509ea9424c564aa8ae88cc7d54ff29df2259ef7f2f4be975e0b306a87835da1257af0711b845c4d7090eb26d67c2bb2742054bad74276ea1a8a9df4c678cdf66697adf88b6abcb0ad047fd0a1363a2298a4281b469976d3a1d8fcaf46ca8e14678f40fbcc942a9549b7b4c7ed272caeba2fdd65120004eb2ae0cf0d918e38", &(0x7f0000000100)="26216ffef5180211e6f8d89db5efb27664e164ac4c0d3b616dedb050f24ac0f8ba6deb59ebbabc7a45eaccde8445935798088ce4b198bd5531844ee80c68f7ad798479e03aa1d5d160cc023aa7d494409c3cf7d3f47cc75a69cc3b4310c2"}}) close(0x3) r1 = eventfd(0x0) read$eventfd(r1, &(0x7f0000000000), 0x8) r2 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/cpuinfo\x00', 0x0, 0x0) r3 = socket$inet6_sctp(0xa, 0x1, 0x84) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r4 = getpid() sched_setscheduler(r4, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r6, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x6) setsockopt$MRT6_ADD_MFC_PROXY(0xffffffffffffffff, 0x29, 0xd2, &(0x7f0000001f80)={{0xa, 0x4e23, 0x21, @mcast1}, {0xa, 0x4e21, 0x7, @empty, 0x200003}, 0xffffffffffffffff, {[0x0, 0x0, 0x0, 0x7fff, 0x1, 0x4]}}, 0x5c) add_key(&(0x7f0000000000)='dns_resolver\x00', &(0x7f0000000040)={'syz', 0x0}, &(0x7f0000000100)='[', 0xfeed, 0xffffffffffffffff) r7 = dup(r3) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r7, 0x84, 0x64, &(0x7f0000000040), 0x0) sendmsg$inet6(r3, &(0x7f0000000800)={&(0x7f0000000080)={0xa, 0x4e24, 0x8, @loopback, 0x4}, 0x1c, &(0x7f0000000380)=[{&(0x7f00000000c0)="88", 0x1}], 0x1}, 0x4048043) read$FUSE(r7, &(0x7f0000000bc0)={0x2020}, 0x2020) r8 = dup(r3) setsockopt$SO_BINDTODEVICE(r8, 0x1, 0x19, &(0x7f0000000000)='ip6gretap0\x00', 0x10) shutdown(r3, 0x1) close_range(r2, 0xffffffffffffffff, 0x0) mknodat$null(0xffffffffffffff9c, 0x0, 0x0, 0x103) 3.076024608s ago: executing program 0 (id=730): bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000001d40)={&(0x7f0000000180)='fsi_master_gpio_cmd_rel_addr\x00'}, 0x18) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x50) rt_sigaction(0x40, 0x0, 0x0, 0x8, &(0x7f0000001540)) r3 = open(&(0x7f0000000140)='./file0\x00', 0x800, 0x70) mknodat$loop(r3, 0x0, 0x400, 0x0) bind$pptp(r3, &(0x7f0000000040)={0x18, 0x2, {0x1, @multicast2}}, 0x1e) syz_open_dev$tty20(0xc, 0x4, 0x0) r4 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000000), 0x80082, 0x0) ppoll(&(0x7f0000000200)=[{r4, 0x1002}], 0x1, 0x0, 0x0, 0x0) write$vga_arbiter(r4, &(0x7f00000000c0)=@unlock_all, 0xb) r5 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r5, 0x29, 0x40, &(0x7f00000005c0)=@raw={'raw\x00', 0x3c1, 0x3, 0x4e0, 0x0, 0x18c, 0x203, 0x320, 0x19030000, 0x410, 0x2e0, 0x2e0, 0x410, 0x2e0, 0x3, 0x0, {[{{@uncond, 0x300, 0x2d8, 0x320, 0x0, {}, [@common=@unspec=@bpf0={{0x230}, {0x13, [{0x20, 0x0, 0x8}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x0, 0x8}, {}, {0x0, 0x0, 0x0, 0xe}, {0x0, 0x0, 0x0, 0x3}, {0x0, 0x0, 0x3}, {0x2, 0x0, 0x4}, {}, {0x0, 0x0, 0x0, 0x1}, {0x0, 0x0, 0x8}, {}, {0x16}, {0x0, 0xff}, {}, {0x7}, {0x0, 0x0, 0x0, 0x4}, {0x0, 0x4, 0x0, 0x101}, {}, {0x0, 0x0, 0x5}, {}, {0x0, 0x0, 0x0, 0x9}, {0xfffc, 0x0, 0x0, 0x6}, {}, {0xfffe}, {}, {}, {}, {0xfffe, 0xfb}, {}, {0x7a04}, {}, {}, {0x20, 0x6}, {}, {}, {}, {0x0, 0x0, 0x0, 0x800}, {}, {0xb8c, 0x0, 0x0, 0xf00}, {0x0, 0x1, 0x0, 0x3}, {0x3}, {}, {}, {}, {}, {0x4}, {}, {}, {}, {}, {0x0, 0xfd}, {}, {}, {0x0, 0x0, 0x0, 0xfffffffd}, {}, {0x0, 0xb}, {0x4, 0x2}]}}]}, @common=@unspec=@IDLETIMER={0x48, 'IDLETIMER\x00', 0x0, {0x2, 'syz0\x00', {0x8001}}}}, {{@uncond, 0x0, 0xa8, 0xf0}, @common=@unspec=@IDLETIMER={0x48, 'IDLETIMER\x00', 0x0, {0xb, 'syz0\x00', {0x6c8}}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x540) socket$nl_route(0x10, 0x3, 0x0) socket$pppoe(0x18, 0x1, 0x0) syz_emit_vhci(&(0x7f0000001080)=ANY=[@ANYBLOB="04040a00e0ffffff0f77042482"], 0xd) r6 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file1\x00', 0x281c2, 0x0) fcntl$setlease(r6, 0x400, 0x1) fsetxattr$system_posix_acl(r6, &(0x7f0000000000)='system.posix_acl_access\x00', 0x0, 0x0, 0x3) 2.821795913s ago: executing program 2 (id=731): socket(0x1e, 0x4, 0x0) close(0x3) socket$inet6(0xa, 0x2, 0x0) r0 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x87}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xb3d68000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r4 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$SO_BINDTODEVICE(r4, 0x1, 0x19, &(0x7f00000001c0)='macvlan0\x00', 0x10) setsockopt$inet_tcp_TCP_REPAIR(r4, 0x6, 0x13, &(0x7f0000000040)=0x1, 0x4) r5 = socket$pppl2tp(0x18, 0x1, 0x1) r6 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r5, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, r6, {0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x4}}, 0x2}}, 0x2e) r7 = syz_genetlink_get_family_id$l2tp(&(0x7f00000008c0), 0xffffffffffffffff) r8 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_SESSION_DELETE(r8, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000180)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r7, @ANYBLOB="01002cbd7010f5ffffff040000000800090002"], 0x1c}, 0x1, 0x0, 0x0, 0x20008000}, 0x30) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r4, 0x6, 0x14, &(0x7f0000000180)=0x1, 0x4) connect$inet(r4, &(0x7f0000000000)={0x2, 0x2, @remote}, 0x10) r9 = socket$inet(0x2, 0x4000000000000001, 0x0) getsockopt$inet_tcp_int(r9, 0x6, 0x2, 0x0, &(0x7f0000000140)) io_uring_register$IORING_REGISTER_BUFFERS(0xffffffffffffffff, 0x0, 0x0, 0x0) 856.850206ms ago: executing program 4 (id=732): openat$adsp1(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0x14, 0x30, 0x1, 0x70bd29}, 0x14}, 0x1, 0x0, 0x0, 0x804}, 0x4040001) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) ioctl$SG_IO(0xffffffffffffffff, 0x2285, 0x0) writev(0xffffffffffffffff, &(0x7f0000000400)=[{&(0x7f0000000080)="aefdda9d240300005a90f57f07703aeff0f64ebbee07962c22772e11b44e65d76641cb01", 0x24}, {&(0x7f0000000040)="aa1d484ea0a00000f7fc08fcd111fbdf23ea32db0e8f21d5bc27bd49eb067a0689fff2a41cfb", 0x26}], 0x2) r0 = openat$vnet(0xffffffffffffff9c, 0x0, 0x2, 0x0) ioctl$int_in(r0, 0x40000000af01, 0x0) ioctl$VHOST_NET_SET_BACKEND(r0, 0x4008af30, &(0x7f0000000000)={0x1}) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000840), 0x2, 0x0) ioctl$UI_DEV_SETUP(r4, 0x405c5503, &(0x7f0000000280)={{0x5}, 'syz1\x00', 0x10}) r5 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000080)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)=@gettclass={0x24, 0x2a, 0x129, 0x70bd2c, 0x0, {0x0, 0x0, 0x0, r6, {0x9, 0x3}, {}, {0x5, 0x1}}}, 0x24}}, 0x40004) r7 = socket$netlink(0x10, 0x3, 0x4) sendmsg$nl_route(r7, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)=ANY=[@ANYBLOB="3c00000010001fff00"/20, @ANYRES32=0x0, @ANYBLOB="00f7ffffff1e00ff130012800b000100626174616476", @ANYRES32], 0x3c}}, 0x0) ioctl$UI_DEV_CREATE(r4, 0x5501) ioctl$UI_DEV_DESTROY(r4, 0x5502) r8 = syz_open_dev$usbfs(0x0, 0x1, 0x351000) ioctl$USBDEVFS_GET_SPEED(r8, 0x551f) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f000000c2c0)={0x0, 0x0, 0x0}, 0x0) 850.915706ms ago: executing program 5 (id=740): r0 = socket(0x10, 0x803, 0x6) sendmsg$IPVS_CMD_SET_INFO(r0, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) getsockname$packet(r0, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) r1 = open(&(0x7f00000001c0)='./file0\x00', 0x80ff, 0x88) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0x88, 0x30, 0x1, 0x0, 0x0, {}, [{0x74, 0x1, [@m_ct={0x44, 0x2, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x8, 0x395, 0x5, 0x0, 0xf}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}, @m_ife={0x2c, 0x2, 0x0, 0x0, {{0x8}, {0x4}, {0x4}, {0xc}, {0xc}}}]}]}, 0x88}, 0x1, 0x0, 0x0, 0x804}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r1, 0xc0502100, &(0x7f0000000300)={0x0, 0x0}) sched_setscheduler(r2, 0x1, &(0x7f0000000280)=0x3) r3 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socket$igmp6(0xa, 0x3, 0x2) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r3, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r6 = io_uring_setup(0x612c, &(0x7f0000000080)={0x0, 0x21e, 0x800, 0x10000}) io_uring_register$IORING_REGISTER_BUFFERS(r6, 0x0, &(0x7f00000002c0)=[{&(0x7f0000001700)=""/4095, 0x440000}], 0x100000000000011a) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) openat$snapshot(0xffffffffffffff9c, 0x0, 0x28c81, 0x0) open(&(0x7f0000000000)='\x00', 0x40440, 0x2) ioctl$SIOCSIFHWADDR(r7, 0x8b04, &(0x7f0000000100)={'wlan1\x00', @random='\n\x00'}) r8 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_ifreq(r1, 0x8994, 0x0) ioctl$sock_SIOCADDRT(r8, 0x890b, &(0x7f0000000040)={0x0, @l2tp={0x2, 0x0, @empty}, @can, @nl=@unspec, 0xa00, 0x0, 0x0, 0x0, 0x4, 0x0, 0x2}) ioctl$sock_rose_SIOCDELRT(r0, 0x890c, &(0x7f0000000280)={@dev={0xbb, 0xbb, 0xbb, 0x1, 0x0}, 0xa7, @null, @rose={'rose', 0x0}, 0x1, [@null, @default, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @bcast, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @null, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}]}) syz_open_dev$admmidi(0x0, 0x20, 0x0) unshare(0x400) 0s ago: executing program 2 (id=733): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x10000, &(0x7f0000000080)={[{@nobh}, {@auto_da_alloc}, {@data_err_ignore}]}, 0xb, 0x4cd, &(0x7f0000000c80)="$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") prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) ioctl$sock_SIOCOUTQNSD(0xffffffffffffffff, 0x894b, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000100)=0x6) shmat(0x0, &(0x7f0000ffc000/0x2000)=nil, 0x4000) getdents64(0xffffffffffffffff, 0x0, 0x0) r3 = socket(0xa, 0x3, 0x3a) getsockopt$TIPC_DEST_DROPPABLE(r3, 0x10f, 0x81, &(0x7f0000000300), &(0x7f0000000380)=0x4) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_EXP_NEW(r4, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000940)=ANY=[@ANYBLOB="c80000000002010400000000000000000a0055a63ab96b8901083c0001800c00028005000100000000002c00018014000300fe8800000000000000000000000001011400040000000000000000000000ffff0a0101023c0003800c00028005000100000000002c00018014000300fc00000000000000000000000000000014000400fe8000000000000000000000000000bb3c0002800c00028005000100000000002c000180140003000000000000000000000000000000000114000400fe8000000000000000000000000000aa845509f5b2dbeb9d6e27"], 0xc8}}, 0x0) syz_open_dev$MSR(&(0x7f00000000c0), 0x2, 0x0) setsockopt$MRT6_ADD_MFC(r3, 0x29, 0xcc, &(0x7f0000000280)={{0xa, 0x0, 0x0, @loopback}, {0xa, 0x4, 0x0, @mcast2}, 0x0, {[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2]}}, 0x5c) bpf$MAP_CREATE(0x0, &(0x7f0000003940)=ANY=[@ANYBLOB="210000000000000000000000000010000004"], 0x48) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000400), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r5, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000180)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="050000000000060000000600000008000300", @ANYRES32=r7, @ANYBLOB="0800050009000000"], 0x24}}, 0x0) setsockopt$IPT_SO_SET_REPLACE(r3, 0x0, 0x40, &(0x7f0000000640)=@raw={'raw\x00', 0x9, 0x3, 0x270, 0xd8, 0xffffffff, 0xffffffff, 0xd8, 0xffffffff, 0x1d8, 0xffffffff, 0xffffffff, 0x1d8, 0xffffffff, 0x3, &(0x7f00000003c0), {[{{@ip={@private=0xa010102, @multicast1, 0xffffffff, 0xff000000, 'gretap0\x00', 'pimreg1\x00', {0xff}, {0xff}, 0x6c, 0x3, 0x10}, 0x0, 0xb0, 0xd8, 0x0, {}, [@common=@set={{0x40}, {{0xffffffffffffffff, [0x0, 0x5, 0x1, 0x6, 0x1, 0x4], 0x0, 0x2}}}]}, @common=@inet=@SYNPROXY={0x28, 'SYNPROXY\x00', 0x0, {0x11, 0x4, 0x9}}}, {{@uncond, 0x0, 0xc0, 0x100, 0x0, {}, [@inet=@rpfilter={{0x28}, {0x1}}, @inet=@rpfilter={{0x28}, {0x1}}]}, @common=@inet=@TCPOPTSTRIP={0x40, 'TCPOPTSTRIP\x00', 0x0, {[0x80000000, 0x6, 0x4, 0x7, 0xd, 0x8, 0x1, 0x8]}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x2d0) r8 = socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r8, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_CONNECT(r8, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r9, @ANYBLOB="0500007fd69efa191f73bd0000000800f600", @ANYRES32=r10, @ANYBLOB="0a0034000202020202020000050019010f000000050018012e000000"], 0x38}, 0x1, 0x0, 0x0, 0x4000804}, 0x0) kernel console output (not intermixed with test programs): no interfaces have a carrier [ 58.675746][ T5452] 8021q: adding VLAN 0 to HW filter on device bond0 [ 58.692330][ T5452] eql: remember to turn off Van-Jacobson compression on your slave devices Starting crond: OK Starting sshd: OK syzkaller Warning: Permanently added '10.128.1.190' (ED25519) to the list of known hosts. syzkaller login: [ 84.933116][ T5774] cgroup: Unknown subsys name 'net' [ 85.067320][ T5774] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 86.788335][ T5774] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 88.517293][ T5790] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 88.527968][ T5790] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 88.543382][ T5796] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 88.551649][ T5796] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 88.552798][ T5790] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 88.563458][ T5796] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 88.567550][ T5790] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 88.573903][ T5796] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 88.588983][ T5790] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 88.589215][ T5796] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 88.604816][ T5790] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 88.605641][ T5796] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 88.627506][ T5796] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 88.638620][ T5790] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 88.638771][ T5796] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 88.646621][ T5790] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 88.655058][ T5796] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 88.660598][ T5790] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 88.670131][ T5796] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 88.682099][ T5796] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 88.690128][ T5796] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 88.699866][ T5796] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 88.711898][ T50] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 88.719938][ T50] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 89.280643][ T5785] chnl_net:caif_netlink_parms(): no params data found [ 89.318694][ T5792] chnl_net:caif_netlink_parms(): no params data found [ 89.377600][ T5786] chnl_net:caif_netlink_parms(): no params data found [ 89.493510][ T5788] chnl_net:caif_netlink_parms(): no params data found [ 89.511289][ T5785] bridge0: port 1(bridge_slave_0) entered blocking state [ 89.519476][ T5785] bridge0: port 1(bridge_slave_0) entered disabled state [ 89.526867][ T5785] bridge_slave_0: entered allmulticast mode [ 89.534379][ T5785] bridge_slave_0: entered promiscuous mode [ 89.585965][ T5785] bridge0: port 2(bridge_slave_1) entered blocking state [ 89.593497][ T5785] bridge0: port 2(bridge_slave_1) entered disabled state [ 89.600820][ T5785] bridge_slave_1: entered allmulticast mode [ 89.608074][ T5785] bridge_slave_1: entered promiscuous mode [ 89.673527][ T5792] bridge0: port 1(bridge_slave_0) entered blocking state [ 89.681005][ T5792] bridge0: port 1(bridge_slave_0) entered disabled state [ 89.688455][ T5792] bridge_slave_0: entered allmulticast mode [ 89.695575][ T5792] bridge_slave_0: entered promiscuous mode [ 89.720326][ T5785] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 89.733363][ T5785] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 89.742994][ T5786] bridge0: port 1(bridge_slave_0) entered blocking state [ 89.751134][ T5786] bridge0: port 1(bridge_slave_0) entered disabled state [ 89.758833][ T5786] bridge_slave_0: entered allmulticast mode [ 89.765947][ T5786] bridge_slave_0: entered promiscuous mode [ 89.773914][ T5792] bridge0: port 2(bridge_slave_1) entered blocking state [ 89.781489][ T5792] bridge0: port 2(bridge_slave_1) entered disabled state [ 89.788833][ T5792] bridge_slave_1: entered allmulticast mode [ 89.795989][ T5792] bridge_slave_1: entered promiscuous mode [ 89.819347][ T5786] bridge0: port 2(bridge_slave_1) entered blocking state [ 89.826689][ T5786] bridge0: port 2(bridge_slave_1) entered disabled state [ 89.834505][ T5786] bridge_slave_1: entered allmulticast mode [ 89.841951][ T5786] bridge_slave_1: entered promiscuous mode [ 89.896759][ T5785] team0: Port device team_slave_0 added [ 89.936145][ T5785] team0: Port device team_slave_1 added [ 89.944603][ T5786] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 89.958521][ T5786] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 89.970861][ T5792] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 90.021530][ T5792] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 90.074065][ T5785] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 90.081788][ T5785] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 90.108361][ T5785] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 90.145840][ T5788] bridge0: port 1(bridge_slave_0) entered blocking state [ 90.153462][ T5788] bridge0: port 1(bridge_slave_0) entered disabled state [ 90.160975][ T5788] bridge_slave_0: entered allmulticast mode [ 90.168206][ T5788] bridge_slave_0: entered promiscuous mode [ 90.184026][ T5785] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 90.191364][ T5785] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 90.217527][ T5785] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 90.232127][ T5786] team0: Port device team_slave_0 added [ 90.241783][ T5786] team0: Port device team_slave_1 added [ 90.250915][ T5792] team0: Port device team_slave_0 added [ 90.257337][ T5788] bridge0: port 2(bridge_slave_1) entered blocking state [ 90.264666][ T5788] bridge0: port 2(bridge_slave_1) entered disabled state [ 90.272076][ T5788] bridge_slave_1: entered allmulticast mode [ 90.279665][ T5788] bridge_slave_1: entered promiscuous mode [ 90.329289][ T5792] team0: Port device team_slave_1 added [ 90.350511][ T5786] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 90.357521][ T5786] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 90.399300][ T5786] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 90.415374][ T5786] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 90.422555][ T5786] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 90.455835][ T5786] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 90.470825][ T5788] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 90.526926][ T5785] hsr_slave_0: entered promiscuous mode [ 90.534017][ T5785] hsr_slave_1: entered promiscuous mode [ 90.548865][ T5788] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 90.590660][ T5792] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 90.597662][ T5792] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 90.624207][ T5792] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 90.638775][ T5792] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 90.645795][ T5792] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 90.673255][ T5792] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 90.684532][ T5793] Bluetooth: hci1: command tx timeout [ 90.729295][ T5788] team0: Port device team_slave_0 added [ 90.758660][ T5793] Bluetooth: hci2: command tx timeout [ 90.758680][ T50] Bluetooth: hci3: command tx timeout [ 90.758852][ T50] Bluetooth: hci0: command tx timeout [ 90.784625][ T5792] hsr_slave_0: entered promiscuous mode [ 90.791562][ T5792] hsr_slave_1: entered promiscuous mode [ 90.798045][ T5792] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 90.806056][ T5792] Cannot create hsr debugfs directory [ 90.814742][ T5788] team0: Port device team_slave_1 added [ 90.884454][ T5786] hsr_slave_0: entered promiscuous mode [ 90.891872][ T5786] hsr_slave_1: entered promiscuous mode [ 90.898861][ T5786] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 90.906462][ T5786] Cannot create hsr debugfs directory [ 90.971859][ T5788] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 90.979801][ T5788] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 91.005951][ T5788] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 91.020530][ T5788] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 91.027547][ T5788] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 91.053810][ T5788] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 91.206676][ T5788] hsr_slave_0: entered promiscuous mode [ 91.214086][ T5788] hsr_slave_1: entered promiscuous mode [ 91.220723][ T5788] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 91.229119][ T5788] Cannot create hsr debugfs directory [ 91.496275][ T5785] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 91.511239][ T5785] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 91.530183][ T5785] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 91.541602][ T5785] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 91.630237][ T5792] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 91.645297][ T5792] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 91.656333][ T5792] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 91.672554][ T5792] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 91.772742][ T5786] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 91.783723][ T5786] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 91.796661][ T5786] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 91.819533][ T5786] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 91.903048][ T5788] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 91.916621][ T5788] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 91.939010][ T5788] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 91.950681][ T5788] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 92.085380][ T5792] 8021q: adding VLAN 0 to HW filter on device bond0 [ 92.112007][ T5792] 8021q: adding VLAN 0 to HW filter on device team0 [ 92.144633][ T5785] 8021q: adding VLAN 0 to HW filter on device bond0 [ 92.181548][ T1148] bridge0: port 1(bridge_slave_0) entered blocking state [ 92.189066][ T1148] bridge0: port 1(bridge_slave_0) entered forwarding state [ 92.209684][ T5785] 8021q: adding VLAN 0 to HW filter on device team0 [ 92.243388][ T34] bridge0: port 1(bridge_slave_0) entered blocking state [ 92.250692][ T34] bridge0: port 1(bridge_slave_0) entered forwarding state [ 92.262706][ T34] bridge0: port 2(bridge_slave_1) entered blocking state [ 92.269945][ T34] bridge0: port 2(bridge_slave_1) entered forwarding state [ 92.285826][ T1148] bridge0: port 2(bridge_slave_1) entered blocking state [ 92.293384][ T1148] bridge0: port 2(bridge_slave_1) entered forwarding state [ 92.307611][ T27] cfg80211: failed to load regulatory.db [ 92.374179][ T5786] 8021q: adding VLAN 0 to HW filter on device bond0 [ 92.420911][ T5786] 8021q: adding VLAN 0 to HW filter on device team0 [ 92.462999][ T3489] bridge0: port 1(bridge_slave_0) entered blocking state [ 92.470193][ T3489] bridge0: port 1(bridge_slave_0) entered forwarding state [ 92.512407][ T34] bridge0: port 2(bridge_slave_1) entered blocking state [ 92.519663][ T34] bridge0: port 2(bridge_slave_1) entered forwarding state [ 92.562584][ T5788] 8021q: adding VLAN 0 to HW filter on device bond0 [ 92.626883][ T5788] 8021q: adding VLAN 0 to HW filter on device team0 [ 92.688999][ T1148] bridge0: port 1(bridge_slave_0) entered blocking state [ 92.696204][ T1148] bridge0: port 1(bridge_slave_0) entered forwarding state [ 92.758759][ T50] Bluetooth: hci1: command tx timeout [ 92.780592][ T34] bridge0: port 2(bridge_slave_1) entered blocking state [ 92.788479][ T34] bridge0: port 2(bridge_slave_1) entered forwarding state [ 92.839617][ T50] Bluetooth: hci0: command tx timeout [ 92.845207][ T50] Bluetooth: hci2: command tx timeout [ 92.851737][ T5797] Bluetooth: hci3: command tx timeout [ 92.941215][ T5788] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 93.013813][ T5792] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 93.162248][ T5792] veth0_vlan: entered promiscuous mode [ 93.223641][ T5792] veth1_vlan: entered promiscuous mode [ 93.264956][ T5785] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 93.287701][ T5786] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 93.411065][ T5785] veth0_vlan: entered promiscuous mode [ 93.430923][ T5792] veth0_macvtap: entered promiscuous mode [ 93.456369][ T5792] veth1_macvtap: entered promiscuous mode [ 93.490980][ T5786] veth0_vlan: entered promiscuous mode [ 93.510367][ T5788] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 93.526459][ T5786] veth1_vlan: entered promiscuous mode [ 93.537047][ T5785] veth1_vlan: entered promiscuous mode [ 93.553459][ T5792] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 93.575009][ T5792] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 93.615358][ T5792] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 93.624605][ T5792] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 93.635972][ T5792] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 93.645451][ T5792] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 93.728520][ T5785] veth0_macvtap: entered promiscuous mode [ 93.753420][ T5786] veth0_macvtap: entered promiscuous mode [ 93.765452][ T5785] veth1_macvtap: entered promiscuous mode [ 93.790255][ T5786] veth1_macvtap: entered promiscuous mode [ 93.884203][ T5788] veth0_vlan: entered promiscuous mode [ 93.890375][ T1092] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 93.906657][ T5785] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 93.908457][ T1092] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 93.932397][ T5785] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 93.945268][ T5785] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 93.956459][ T5788] veth1_vlan: entered promiscuous mode [ 93.964640][ T5786] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 93.976086][ T5786] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 93.986304][ T5786] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 93.998071][ T5786] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 94.009870][ T5786] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 94.034070][ T5785] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 94.047013][ T5785] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 94.060944][ T5785] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 94.074134][ T5786] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 94.089213][ T5786] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 94.099541][ T5786] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 94.110683][ T5786] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 94.122796][ T5786] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 94.164552][ T5785] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 94.173961][ T5785] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 94.184215][ T5785] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 94.194062][ T5785] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 94.212194][ T5786] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 94.221326][ T5786] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 94.230588][ T5786] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 94.239884][ T5786] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 94.253617][ T11] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 94.268566][ T11] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 94.430310][ T5788] veth0_macvtap: entered promiscuous mode [ 94.453927][ T5788] veth1_macvtap: entered promiscuous mode [ 94.483613][ T34] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 94.517848][ T34] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 94.552180][ T5788] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 94.605795][ T5788] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 94.624712][ T5788] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 94.636780][ T5788] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 94.647437][ T5788] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 94.658824][ T5788] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 94.675095][ T5788] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 94.707445][ T1092] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 94.732476][ T5788] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 94.767095][ T5788] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 94.790981][ T1092] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 94.806748][ T5788] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 94.818723][ T5788] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 94.829312][ T5788] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 94.838515][ T50] Bluetooth: hci1: command tx timeout [ 94.843773][ T5788] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 94.881229][ T5788] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 94.904390][ T5788] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 94.915162][ T5788] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 94.925646][ T5797] Bluetooth: hci3: command tx timeout [ 94.932049][ T5797] Bluetooth: hci0: command tx timeout [ 94.949683][ T50] Bluetooth: hci2: command tx timeout [ 94.988758][ T5788] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 95.011622][ T5788] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 95.182808][ T3474] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 95.226907][ T3474] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 95.263028][ T11] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 95.300371][ T11] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 95.958081][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 96.458391][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 96.468244][ T5887] bridge0: port 3(team0) entered blocking state [ 96.474896][ T5887] bridge0: port 3(team0) entered disabled state [ 96.481555][ T5887] team0: entered allmulticast mode [ 96.486682][ T5887] team_slave_0: entered allmulticast mode [ 96.493013][ T5887] team_slave_1: entered allmulticast mode [ 96.500344][ T5887] team0: entered promiscuous mode [ 96.505428][ T5887] team_slave_0: entered promiscuous mode [ 96.511488][ T5887] team_slave_1: entered promiscuous mode [ 96.518441][ T5887] bridge0: port 3(team0) entered blocking state [ 96.525155][ T5887] bridge0: port 3(team0) entered forwarding state [ 96.639737][ T1148] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 96.668471][ T1148] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 96.685527][ T1148] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 96.704912][ T1148] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 96.799414][ T5892] syz.1.6[5892]: memfd_create() called without MFD_EXEC or MFD_NOEXEC_SEAL set [ 96.939109][ T5793] Bluetooth: hci1: command tx timeout [ 96.999293][ T5793] Bluetooth: hci2: command tx timeout [ 97.004797][ T5793] Bluetooth: hci0: command tx timeout [ 97.013833][ T5793] Bluetooth: hci3: command tx timeout [ 97.147445][ T5892] loop1: detected capacity change from 0 to 32768 [ 97.288841][ T0] NOHZ tick-stop error: local softirq work is pending, handler #300!!! [ 97.297225][ T0] NOHZ tick-stop error: local softirq work is pending, handler #300!!! [ 98.481097][ T5903] autofs4:pid:5903:autofs_fill_super: called with bogus options [ 98.570062][ T5903] kvm_intel: L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 99.182291][ T5892] XFS (loop1): Mounting V5 Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 99.541695][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 99.849176][ T5892] workqueue: Failed to create a rescuer kthread for wq "xfs-log/loop1": -EINTR [ 99.878497][ T5892] XFS (loop1): log mount failed [ 100.302905][ T5911] vivid-002: kernel_thread() failed [ 101.010374][ T0] NOHZ tick-stop error: local softirq work is pending, handler #10!!! [ 101.077638][ T0] NOHZ tick-stop error: local softirq work is pending, handler #140!!! [ 101.086617][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 101.386920][ T5915] Zero length message leads to an empty skb [ 101.449527][ T5919] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 101.847790][ T0] NOHZ tick-stop error: local softirq work is pending, handler #02!!! [ 102.613932][ T0] NOHZ tick-stop error: local softirq work is pending, handler #140!!! [ 105.103674][ T5935] block device autoloading is deprecated and will be removed. [ 106.121413][ T5943] mmap: syz.0.12 (5943) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 109.632139][ T5950] input: syz1 as /devices/virtual/input/input5 [ 109.702495][ T5793] Bluetooth: hci3: command tx timeout [ 110.160844][ T5946] workqueue: Failed to create a rescuer kthread for wq "ceph-watch-notify": -EINTR [ 110.669455][ T5957] loop3: detected capacity change from 0 to 128 [ 110.694959][ T5957] EXT4-fs: Ignoring removed nomblk_io_submit option [ 110.712714][ T5957] EXT4-fs (loop3): Test dummy encryption mode enabled [ 110.896421][ T5957] EXT4-fs (loop3): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 112.168377][ T5957] ext4 filesystem being mounted at /3/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 112.208701][ T50] Bluetooth: hci3: command tx timeout [ 112.856921][ T5968] netlink: 'syz.0.15': attribute type 10 has an invalid length. [ 113.910972][ T5788] EXT4-fs (loop3): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 114.103470][ T5988] loop2: detected capacity change from 0 to 512 [ 114.114850][ T5968] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 114.169705][ T5988] EXT4-fs: mb_optimize_scan should be set to 0 or 1. [ 114.367156][ T5968] bond0: (slave batadv0): Enslaving as an active interface with an up link [ 119.678690][ T6006] ceph: No mds server is up or the cluster is laggy [ 119.692359][ T27] libceph: connect (1)[c::]:6789 error -101 [ 119.700937][ T27] libceph: mon0 (1)[c::]:6789 connect error [ 119.966720][ T6019] netlink: 16 bytes leftover after parsing attributes in process `syz.1.23'. [ 120.751078][ T6020] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 121.227571][ T6031] Error parsing options; rc = [-22] [ 121.646336][ T6032] loop0: detected capacity change from 0 to 64 [ 121.732877][ T6034] loop3: detected capacity change from 0 to 512 [ 121.818002][ T6034] EXT4-fs (loop3): couldn't mount as ext2 due to feature incompatibilities [ 121.983775][ T5802] I/O error, dev loop3, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 122.403873][ T5876] IPVS: starting estimator thread 0... [ 122.799497][ T6043] IPVS: using max 18 ests per chain, 43200 per kthread [ 125.082440][ T6059] loop0: detected capacity change from 0 to 256 [ 125.334414][ T6063] netlink: 8 bytes leftover after parsing attributes in process `syz.1.33'. [ 128.634873][ T6065] sched: RT throttling activated [ 128.677463][ T6072] loop2: detected capacity change from 0 to 1024 [ 128.690183][ T6072] ======================================================= [ 128.690183][ T6072] WARNING: The mand mount option has been deprecated and [ 128.690183][ T6072] and is ignored by this kernel. Remove the mand [ 128.690183][ T6072] option from the mount to silence this warning. [ 128.690183][ T6072] ======================================================= [ 129.386516][ T6072] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 129.403847][ T6072] ext4 filesystem being mounted at /6/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 130.552240][ T5785] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 130.817876][ T6090] qrtr: Invalid version 0 [ 130.928374][ T6090] warning: `syz.0.36' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 131.233180][ T6088] comedi comedi3: 8255: I/O port conflict (0x5,4) [ 131.240368][ T6088] comedi comedi3: 8255: I/O port conflict (0x2,4) [ 131.248036][ T6088] comedi comedi3: 8255: I/O port conflict (0x1,4) [ 131.255076][ T6088] comedi comedi3: 8255: I/O port conflict (0x5c952399,4) [ 131.262413][ T6088] comedi comedi3: 8255: I/O port conflict (0x5,4) [ 131.269227][ T6088] comedi comedi3: 8255: I/O port conflict (0x3ff,4) [ 131.276319][ T6088] comedi comedi3: 8255: I/O port conflict (0x1,4) [ 131.283058][ T6088] comedi comedi3: 8255: I/O port conflict (0x1,4) [ 131.290461][ T6088] comedi comedi3: 8255: I/O port conflict (0x9,4) [ 131.297174][ T6088] comedi comedi3: 8255: I/O port conflict (0x6,4) [ 131.304128][ T6088] comedi comedi3: 8255: I/O port conflict (0x4,4) [ 131.310867][ T6088] comedi comedi3: 8255: I/O port conflict (0x3,4) [ 131.317653][ T6088] comedi comedi3: 8255: I/O port conflict (0xffffffff80000089,4) [ 131.327271][ T6088] comedi comedi3: 8255: I/O port conflict (0xfffffffffffffffd,4) [ 131.368483][ T6088] misc userio: Invalid payload size [ 131.375102][ T6088] misc userio: Invalid payload size [ 131.382692][ T6088] misc userio: The device must be registered before sending interrupts [ 132.034756][ T6097] tipc: Enabling of bearer rejected, failed to enable media [ 133.528924][ T1286] ieee802154 phy0 wpan0: encryption failed: -22 [ 133.611453][ T1286] ieee802154 phy1 wpan1: encryption failed: -22 [ 134.914381][ T6124] trusted_key: encrypted_key: insufficient parameters specified [ 140.894240][ T6130] syz.2.47 uses obsolete (PF_INET,SOCK_PACKET) [ 144.622786][ T6136] netlink: 128 bytes leftover after parsing attributes in process `syz.1.48'. [ 144.631937][ T6136] A link change request failed with some changes committed already. Interface team0 may have been left with an inconsistent configuration, please check. [ 144.729561][ T6143] MTD: Attempt to mount non-MTD device "/dev/nullb0" [ 144.751438][ T6143] cramfs: wrong magic [ 145.320743][ T28] audit: type=1326 audit(1761178009.039:2): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6131 comm="syz.1.48" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f6ed818efc9 code=0x0 [ 145.360400][ T11] bridge0: port 3(team0) entered disabled state [ 146.909868][ T6152] loop3: detected capacity change from 0 to 32768 [ 146.924970][ T6152] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop3 scanned by syz.3.50 (6152) [ 146.963416][ T6152] BTRFS info (device loop3): first mount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 146.976219][ T6152] BTRFS info (device loop3): using sha256 (sha256-avx2) checksum algorithm [ 146.985401][ T6152] BTRFS info (device loop3): setting nodatacow, compression disabled [ 146.993988][ T6152] BTRFS info (device loop3): enabling ssd optimizations [ 147.001423][ T6152] BTRFS info (device loop3): setting datacow [ 147.007521][ T6152] BTRFS info (device loop3): doing ref verification [ 147.014482][ T6152] BTRFS info (device loop3): force clearing of disk cache [ 147.021924][ T6152] BTRFS info (device loop3): turning off barriers [ 147.028853][ T6152] BTRFS info (device loop3): using spread ssd allocation scheme [ 147.036843][ T6152] BTRFS info (device loop3): using free space tree [ 147.111283][ T6157] Bluetooth: MGMT ver 1.22 [ 148.476522][ T6152] BTRFS info (device loop3): auto enabling async discard [ 148.493481][ T6152] BTRFS info (device loop3): rebuilding free space tree [ 149.155435][ T6182] loop2: detected capacity change from 0 to 256 [ 150.171044][ T5788] BTRFS info (device loop3): last unmount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 150.549922][ T6191] process 'syz.2.56' launched './file0' with NULL argv: empty string added [ 152.494719][ T6207] fuse: Unknown parameter '0x0000000000000008' [ 152.511027][ T6207] 9pnet_fd: Insufficient options for proto=fd [ 155.139130][ T5793] Bluetooth: hci3: command tx timeout [ 156.201002][ T6210] ceph: No mds server is up or the cluster is laggy [ 156.242771][ T5845] libceph: connect (1)[c::]:6789 error -13 [ 156.268342][ T5845] libceph: mon0 (1)[c::]:6789 connect error [ 156.391830][ T6205] hub 9-0:1.0: USB hub found [ 156.399238][ T6205] hub 9-0:1.0: 1 port detected [ 156.460313][ T6221] (unnamed net_device) (uninitialized): invalid ARP target 0.0.0.0 specified for addition [ 156.725026][ T5845] libceph: connect (1)[c::]:6789 error -13 [ 156.751177][ T6221] (unnamed net_device) (uninitialized): option arp_ip_target: invalid value (0) [ 156.816879][ T5845] libceph: mon0 (1)[c::]:6789 connect error [ 157.039196][ T6216] loop1: detected capacity change from 0 to 2048 [ 157.977288][ T6216] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 159.855196][ T6231] netlink: 8 bytes leftover after parsing attributes in process `syz.0.62'. [ 159.864592][ T6231] netlink: 4 bytes leftover after parsing attributes in process `syz.0.62'. [ 160.010260][ T6233] loop2: detected capacity change from 0 to 64 [ 160.908386][ T786] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 160.930311][ T6239] loop1: detected capacity change from 0 to 64 [ 161.207065][ T786] usb 3-1: New USB device found, idVendor=1de1, idProduct=c102, bcdDevice=7d.08 [ 161.227102][ T786] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 161.242947][ T786] usb 3-1: Product: syz [ 161.905478][ T786] usb 3-1: Manufacturer: syz [ 161.916508][ T786] usb 3-1: SerialNumber: syz [ 161.934226][ T786] usb 3-1: config 0 descriptor?? [ 162.562247][ T786] gm12u320 3-1:0.0: [drm:gm12u320_set_ecomode] *ERROR* Misc. req. error -22 [ 162.578110][ T786] gm12u320: probe of 3-1:0.0 failed with error -5 [ 162.606481][ T786] usb-storage 3-1:0.0: USB Mass Storage device detected [ 162.639865][ T786] usb-storage 3-1:0.0: device ignored [ 162.689586][ T6248] syz.3.66 (6248) used greatest stack depth: 18600 bytes left [ 162.875660][ T6258] IPVS: sync thread started: state = BACKUP, mcast_ifn = bond0, syncid = 8, id = 0 [ 162.977414][ T6260] IPVS: stopping backup sync thread 6258 ... [ 163.827391][ T787] usb 3-1: USB disconnect, device number 2 [ 164.823126][ T6273] autofs4:pid:6273:autofs_fill_super: called with bogus options [ 166.556815][ T6278] vcan0: tx drop: invalid da for name 0x00000000000000f5 [ 167.946313][ T6285] loop3: detected capacity change from 0 to 512 [ 169.123045][ T6287] netlink: 'syz.0.74': attribute type 4 has an invalid length. [ 169.222729][ T6285] EXT4-fs (loop3): Test dummy encryption mode enabled [ 169.236349][ T6285] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support! [ 169.373807][ T6285] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 169.417925][ T6285] EXT4-fs error (device loop3): ext4_orphan_get:1425: comm syz.3.73: bad orphan inode 131083 [ 169.444806][ T6285] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 171.707898][ T6313] 9pnet_fd: Insufficient options for proto=fd [ 172.884450][ T6312] fscrypt (loop3): Missing crypto API support for AES-256-CTS-CBC (API name: "cts(cbc(aes))") [ 172.974609][ T6313] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(11) [ 172.981718][ T6313] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 172.990500][ T6313] vhci_hcd vhci_hcd.0: Device attached [ 173.143514][ T6310] loop2: detected capacity change from 0 to 1024 [ 173.156086][ T6320] vhci_hcd: connection closed [ 173.159203][ T1148] vhci_hcd: stop threads [ 173.189466][ T1148] vhci_hcd: release socket [ 173.194003][ T1148] vhci_hcd: disconnect device [ 173.200441][ T5788] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 173.339018][ T6310] hfsplus: bad catalog file entry [ 173.344651][ T6310] hfsplus: failed to load root directory [ 175.239598][ T6331] capability: warning: `syz.1.80' uses 32-bit capabilities (legacy support in use) [ 175.786744][ T6328] overlayfs: failed to create directory ./bus/work (errno: 13); mounting read-only [ 175.830373][ T6328] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 175.847402][ T6328] overlayfs: conflicting lowerdir path [ 177.721605][ T6350] loop1: detected capacity change from 0 to 2048 [ 177.818343][ T6350] UDF-fs: bad mount option "obj_role=îág²_•ÿöyªkýË¿D-ï·Œøz“RåÙap™ù´Qãc ^f`ḭ́ϯ›ˆI³T'+’­7P¬X:Écˆ”ü€¼qÒ.“ºí¸Š" or missing value [ 178.050684][ T6356] loop2: detected capacity change from 0 to 512 [ 178.167286][ T6360] netlink: 12 bytes leftover after parsing attributes in process `syz.0.88'. [ 178.217550][ T5802] I/O error, dev loop2, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 178.229819][ T5787] I/O error, dev loop1, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 179.788155][ T6371] tipc: Failed to remove unknown binding: 66,1,1/0:4192611604/4192611606 [ 179.797005][ T6371] tipc: Failed to remove unknown binding: 66,1,1/0:4192611604/4192611606 [ 179.893722][ T6371] sp0: Synchronizing with TNC [ 180.049304][ T6350] loop1: detected capacity change from 0 to 2048 [ 180.575545][ T6350] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 181.821378][ T6383] netlink: 8 bytes leftover after parsing attributes in process `syz.3.92'. [ 182.517451][ T6387] netlink: 'syz.0.91': attribute type 1 has an invalid length. [ 182.525581][ T6387] netlink: 224 bytes leftover after parsing attributes in process `syz.0.91'. [ 182.997886][ T6386] workqueue: Failed to create a rescuer kthread for wq "ceph-watch-notify": -EINTR [ 185.227580][ T6377] EXT4-fs error (device loop1): ext4_validate_block_bitmap:439: comm ext4lazyinit: bg 0: block 408: padding at end of block bitmap is not set [ 185.329562][ T6377] EXT4-fs (loop1): Remounting filesystem read-only [ 186.996903][ T5792] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 188.385271][ T6421] netlink: 1296 bytes leftover after parsing attributes in process `syz.1.96'. [ 188.837793][ T5845] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 189.042911][ T5845] usb 1-1: Using ep0 maxpacket: 32 [ 189.066459][ T5845] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 189.128039][ T5845] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 189.157875][ T5845] usb 1-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 189.166995][ T5845] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 189.452727][ T5845] usb 1-1: config 0 descriptor?? [ 190.385604][ T6438] loop1: detected capacity change from 0 to 32768 [ 190.512050][ T6442] loop3: detected capacity change from 0 to 2048 [ 190.606848][ T6438] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop1 scanned by syz.1.100 (6438) [ 190.726196][ T6442] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 190.922742][ T6442] netlink: 16 bytes leftover after parsing attributes in process `syz.3.99'. [ 191.511499][ T6438] BTRFS info (device loop1): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 191.521835][ T6438] BTRFS info (device loop1): using sha256 (sha256-avx2) checksum algorithm [ 191.530612][ T6438] BTRFS info (device loop1): using free space tree [ 191.650539][ T6438] BTRFS info (device loop1): enabling ssd optimizations [ 191.657599][ T6438] BTRFS info (device loop1): auto enabling async discard [ 194.757886][ T1286] ieee802154 phy0 wpan0: encryption failed: -22 [ 194.764296][ T1286] ieee802154 phy1 wpan1: encryption failed: -22 [ 194.991624][ T5792] BTRFS info (device loop1): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 195.643132][ T5845] usb 1-1: can't set config #0, error -110 [ 198.588022][ T5858] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 198.731321][ T5838] usb 1-1: USB disconnect, device number 2 [ 198.835847][ T5858] usb 2-1: Using ep0 maxpacket: 8 [ 198.869119][ T5858] usb 2-1: config 179 has an invalid descriptor of length 52, skipping remainder of the config [ 198.924770][ T5858] usb 2-1: config 179 has 0 interfaces, different from the descriptor's value: 1 [ 198.964483][ T5858] usb 2-1: New USB device found, idVendor=12ab, idProduct=0004, bcdDevice= 0.00 [ 198.994511][ T5858] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 202.656068][ T27] usb 2-1: USB disconnect, device number 2 [ 203.626060][ T6505] netlink: 4 bytes leftover after parsing attributes in process `syz.0.109'. [ 211.294201][ T6559] comedi comedi3: 8255: I/O port conflict (0x5,4) [ 211.300850][ T6559] comedi comedi3: 8255: I/O port conflict (0x2,4) [ 211.307613][ T6559] comedi comedi3: 8255: I/O port conflict (0x1,4) [ 211.314456][ T6559] comedi comedi3: 8255: I/O port conflict (0x5c952399,4) [ 211.322022][ T6559] comedi comedi3: 8255: I/O port conflict (0x5,4) [ 211.328719][ T6559] comedi comedi3: 8255: I/O port conflict (0x3ff,4) [ 211.335777][ T6559] comedi comedi3: 8255: I/O port conflict (0x1,4) [ 211.342489][ T6559] comedi comedi3: 8255: I/O port conflict (0x1,4) [ 211.349134][ T6559] comedi comedi3: 8255: I/O port conflict (0x9,4) [ 211.355805][ T6559] comedi comedi3: 8255: I/O port conflict (0x6,4) [ 211.362575][ T6559] comedi comedi3: 8255: I/O port conflict (0x4,4) [ 211.369263][ T6559] comedi comedi3: 8255: I/O port conflict (0x3,4) [ 211.375939][ T6559] comedi comedi3: 8255: I/O port conflict (0xffffffff80000089,4) [ 211.383991][ T6559] comedi comedi3: 8255: I/O port conflict (0xfffffffffffffffd,4) [ 211.414847][ T6559] misc userio: Invalid payload size [ 211.421259][ T6559] misc userio: Invalid payload size [ 211.428007][ T6559] misc userio: The device must be registered before sending interrupts [ 212.131007][ T5102] Bluetooth: hci3: command 0x0406 tx timeout [ 212.137269][ T5102] Bluetooth: hci1: command 0x0406 tx timeout [ 212.143537][ T5102] Bluetooth: hci0: command 0x0406 tx timeout [ 212.149804][ T5102] Bluetooth: hci2: command 0x0406 tx timeout [ 213.178723][ T6572] netlink: 'syz.3.119': attribute type 1 has an invalid length. [ 213.186431][ T6572] netlink: 224 bytes leftover after parsing attributes in process `syz.3.119'. [ 213.626712][ T6571] workqueue: Failed to create a rescuer kthread for wq "ceph-watch-notify": -EINTR [ 213.989017][ T6557] overlayfs: failed to create directory ./bus/work (errno: 13); mounting read-only [ 214.007894][ T6557] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 214.018983][ T6557] overlayfs: conflicting lowerdir path [ 214.517720][ C0] vkms_vblank_simulate: vblank timer overrun [ 219.900441][ T6607] netlink: 16 bytes leftover after parsing attributes in process `syz.0.126'. [ 220.655650][ T6610] loop1: detected capacity change from 0 to 32768 [ 220.667385][ T6610] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop1 scanned by syz.1.115 (6610) [ 220.712142][ T6610] BTRFS info (device loop1): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 220.722432][ T6610] BTRFS info (device loop1): using sha256 (sha256-avx2) checksum algorithm [ 220.731278][ T6610] BTRFS info (device loop1): using free space tree [ 220.822415][ T6610] BTRFS info (device loop1): enabling ssd optimizations [ 220.829526][ T6610] BTRFS info (device loop1): auto enabling async discard [ 221.444851][ T28] audit: type=1800 audit(1761178085.749:3): pid=6610 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.115" name="file2" dev="loop1" ino=261 res=0 errno=0 [ 221.965854][ T5845] usb 3-1: new high-speed USB device number 3 using dummy_hcd [ 222.547788][ T5845] usb 3-1: Using ep0 maxpacket: 32 [ 222.558026][ T5792] BTRFS info (device loop1): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 223.173134][ T5845] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 224.535482][ T5845] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 224.661226][ T5845] usb 3-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 224.731379][ T5845] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 225.231330][ T5845] usb 3-1: config 0 descriptor?? [ 225.238306][ T5845] usb 3-1: can't set config #0, error -71 [ 225.258069][ T5845] usb 3-1: USB disconnect, device number 3 [ 228.337712][ C0] vkms_vblank_simulate: vblank timer overrun [ 232.018365][ T6695] binder: 6686:6695 unknown command 1074553619 [ 232.027929][ T6695] binder: 6686:6695 ioctl c0306201 200000000040 returned -22 [ 232.227929][ T23] usb 2-1: new high-speed USB device number 3 using dummy_hcd [ 232.357325][ T6689] 8021q: adding VLAN 0 to HW filter on device bond0 [ 232.465389][ T6689] bond0: (slave rose0): Enslaving as an active interface with an up link [ 232.476445][ T23] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 232.496928][ T23] usb 2-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 232.517215][ T23] usb 2-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 232.531269][ T6695] netlink: 'syz.2.137': attribute type 10 has an invalid length. [ 232.555185][ T23] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.41 [ 232.564621][ T23] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=11 [ 232.587944][ T23] usb 2-1: Product: syz [ 232.592181][ T23] usb 2-1: Manufacturer: syz [ 232.603836][ T23] usb 2-1: SerialNumber: syz [ 232.643714][ T6695] team0: Device hsr_slave_0 failed to register rx_handler [ 232.872374][ T23] usblp 2-1:1.0: usblp0: USB Unidirectional printer dev 3 if 0 alt 0 proto 1 vid 0x0525 pid 0xA4A8 [ 233.036542][ T5790] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 233.065154][ T5790] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 233.074690][ T5790] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 233.083633][ T5790] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 233.230690][ T5790] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 233.238188][ T5790] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 235.337810][ T5790] Bluetooth: hci4: command tx timeout [ 235.419999][ T5858] usb 2-1: USB disconnect, device number 3 [ 235.499786][ T5858] usblp0: removed [ 235.773147][ T6701] chnl_net:caif_netlink_parms(): no params data found [ 236.255133][ T6734] loop2: detected capacity change from 0 to 32768 [ 236.859480][ T6734] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop2 scanned by syz.2.143 (6734) [ 237.270604][ T6734] BTRFS info (device loop2): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 237.280898][ T6734] BTRFS info (device loop2): using sha256 (sha256-avx2) checksum algorithm [ 237.289655][ T6734] BTRFS info (device loop2): using free space tree [ 237.397880][ T5790] Bluetooth: hci4: command tx timeout [ 238.185288][ T6701] bridge0: port 1(bridge_slave_0) entered blocking state [ 238.203810][ T6734] BTRFS info (device loop2): enabling ssd optimizations [ 238.211014][ T6734] BTRFS info (device loop2): auto enabling async discard [ 238.257480][ T6701] bridge0: port 1(bridge_slave_0) entered disabled state [ 238.303079][ T6701] bridge_slave_0: entered allmulticast mode [ 238.355548][ T6701] bridge_slave_0: entered promiscuous mode [ 238.436990][ T6701] bridge0: port 2(bridge_slave_1) entered blocking state [ 238.455333][ T6701] bridge0: port 2(bridge_slave_1) entered disabled state [ 238.613652][ T6701] bridge_slave_1: entered allmulticast mode [ 238.621409][ T6701] bridge_slave_1: entered promiscuous mode [ 239.577946][ T5796] Bluetooth: hci4: command tx timeout [ 239.784585][ T6701] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 239.801002][ T6701] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 239.897401][ T5796] Bluetooth: hci3: command 0x0406 tx timeout [ 239.897410][ T5790] Bluetooth: hci1: command 0x0406 tx timeout [ 239.935161][ T5785] BTRFS info (device loop2): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 240.789724][ T6784] netlink: 4 bytes leftover after parsing attributes in process `syz.1.146'. [ 240.835164][ T6701] team0: Port device team_slave_0 added [ 240.862623][ T6701] team0: Port device team_slave_1 added [ 241.643193][ T5796] Bluetooth: hci4: command tx timeout [ 241.672963][ T6701] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 241.719937][ T6701] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 241.935582][ T6701] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 241.949381][ T6701] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 241.956385][ T6701] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 241.985369][ T6701] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 243.014829][ T6701] hsr_slave_0: entered promiscuous mode [ 243.086175][ T6701] hsr_slave_1: entered promiscuous mode [ 243.122502][ T6701] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 243.135634][ T6701] Cannot create hsr debugfs directory [ 243.684288][ T6826] netlink: 12 bytes leftover after parsing attributes in process `syz.1.158'. [ 243.697312][ T6826] netlink: 12 bytes leftover after parsing attributes in process `syz.1.158'. [ 244.033125][ T6822] loop2: detected capacity change from 0 to 2048 [ 244.170163][ T6822] UDF-fs: bad mount option "obj_role=îág²_•ÿöyªkýË¿D-ï·Œøz“RåÙap™ù´Qãc ^f`ḭ́ϯ›ˆI³T'+’­7P¬X:Écˆ”ü€¼qÒ.“ºí¸Š" or missing value [ 244.637795][ T6701] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 244.673876][ T6701] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 244.722929][ T6701] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 244.742468][ T6701] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 244.782265][ T6822] loop2: detected capacity change from 0 to 2048 [ 244.864791][ T6822] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 245.298152][ T27] usb 2-1: new high-speed USB device number 4 using dummy_hcd [ 245.408565][ T5796] Bluetooth: hci1: command 0x0406 tx timeout [ 245.488067][ T27] usb 2-1: Using ep0 maxpacket: 32 [ 245.505089][ T27] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 245.518368][ T27] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 245.532583][ T27] usb 2-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 245.543935][ T27] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 245.618492][ T27] usb 2-1: config 0 descriptor?? [ 245.650864][ T27] hub 2-1:0.0: USB hub found [ 245.731249][ T6701] 8021q: adding VLAN 0 to HW filter on device bond0 [ 245.797270][ T6701] 8021q: adding VLAN 0 to HW filter on device team0 [ 245.859142][ T27] hub 2-1:0.0: 1 port detected [ 245.862208][ T3489] bridge0: port 1(bridge_slave_0) entered blocking state [ 245.871123][ T3489] bridge0: port 1(bridge_slave_0) entered forwarding state [ 245.911749][ T3489] bridge0: port 2(bridge_slave_1) entered blocking state [ 245.918978][ T3489] bridge0: port 2(bridge_slave_1) entered forwarding state [ 246.069242][ T27] hub 2-1:0.0: hub_hub_status failed (err = -71) [ 246.076136][ T27] hub 2-1:0.0: config failed, can't get hub status (err -71) [ 246.115995][ T6701] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 246.132677][ T27] usbhid 2-1:0.0: can't add hid device: -71 [ 246.153351][ T27] usbhid: probe of 2-1:0.0 failed with error -71 [ 246.234702][ T27] usb 2-1: USB disconnect, device number 4 [ 246.586662][ T6832] EXT4-fs error (device loop2): ext4_validate_block_bitmap:439: comm syz.2.150: bg 0: block 408: padding at end of block bitmap is not set [ 246.643767][ T6832] EXT4-fs (loop2): Remounting filesystem read-only [ 246.796156][ T6701] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 247.374598][ T5785] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 248.407626][ T6880] loop2: detected capacity change from 0 to 32768 [ 248.474617][ T6880] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop2 scanned by syz.2.153 (6880) [ 248.527116][ T6880] BTRFS info (device loop2): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 248.537872][ T6880] BTRFS info (device loop2): using sha256 (sha256-avx2) checksum algorithm [ 248.546549][ T6880] BTRFS info (device loop2): using free space tree [ 248.650615][ T6880] BTRFS info (device loop2): enabling ssd optimizations [ 248.657864][ T6880] BTRFS info (device loop2): auto enabling async discard [ 249.025797][ T6701] veth0_vlan: entered promiscuous mode [ 249.056242][ T6701] veth1_vlan: entered promiscuous mode [ 249.295529][ T28] audit: type=1800 audit(1761178113.609:4): pid=6907 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.153" name="file2" dev="loop2" ino=261 res=0 errno=0 [ 249.982030][ T6701] veth0_macvtap: entered promiscuous mode [ 250.035450][ T6701] veth1_macvtap: entered promiscuous mode [ 250.121519][ T6701] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 250.142609][ T5785] BTRFS info (device loop2): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 250.147723][ T6701] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 250.182004][ T6701] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 250.217853][ T6701] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 250.245695][ T6701] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 250.287714][ T5796] Bluetooth: hci3: command 0x0406 tx timeout [ 250.304950][ T6701] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 250.343369][ T6701] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 250.387851][ T6701] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 250.416711][ T5794] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 10 /dev/loop2 scanned by udevd (5794) [ 250.437033][ T6701] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 250.481651][ T6701] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 250.507711][ T6701] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 250.547732][ T6701] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 250.577716][ T6701] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 250.607875][ T6701] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 250.652755][ T6701] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 250.693299][ T6701] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 250.737559][ T6701] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 250.785542][ T6701] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 250.801885][ T6701] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 250.894678][ T6701] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 250.903950][ T6701] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 250.973362][ T6701] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 251.173483][ T5796] Bluetooth: hci1: command 0x0406 tx timeout [ 251.869081][ T1092] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 251.876965][ T1092] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 251.983434][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 252.004456][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 253.633541][ T6943] netlink: 12 bytes leftover after parsing attributes in process `syz.1.160'. [ 253.643972][ T6943] netlink: 12 bytes leftover after parsing attributes in process `syz.1.160'. [ 254.842536][ T6947] loop4: detected capacity change from 0 to 2048 [ 254.869139][ T6947] UDF-fs: bad mount option "obj_role=îág²_•ÿöyªkýË¿D-ï·Œøz“RåÙap™ù´Qãc ^f`ḭ́ϯ›ˆI³T'+’­7P¬X:Écˆ”ü€¼qÒ.“ºí¸Š" or missing value [ 255.437756][ T5796] Bluetooth: hci1: command 0x0406 tx timeout [ 256.149079][ T1286] ieee802154 phy0 wpan0: encryption failed: -22 [ 256.155531][ T1286] ieee802154 phy1 wpan1: encryption failed: -22 [ 258.452882][ T6966] xt_hashlimit: max too large, truncated to 1048576 [ 259.238051][ T5845] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 259.417935][ T5845] usb 5-1: Using ep0 maxpacket: 32 [ 259.427201][ T5845] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 259.438451][ T5845] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 259.448473][ T5845] usb 5-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 259.457548][ T5845] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 259.472347][ T5845] usb 5-1: config 0 descriptor?? [ 259.483474][ T5845] hub 5-1:0.0: USB hub found [ 259.684460][ T5845] hub 5-1:0.0: 1 port detected [ 259.889840][ T5845] hub 5-1:0.0: hub_hub_status failed (err = -71) [ 259.898799][ T5845] hub 5-1:0.0: config failed, can't get hub status (err -71) [ 259.911514][ T5845] usbhid 5-1:0.0: can't add hid device: -71 [ 259.917512][ T5845] usbhid: probe of 5-1:0.0 failed with error -71 [ 259.949282][ T5845] usb 5-1: USB disconnect, device number 2 [ 261.413421][ T6996] loop1: detected capacity change from 0 to 8 [ 261.426477][ T6996] squashfs: Unknown parameter '/dev/uinput' [ 261.987580][ T6996] xt_hashlimit: max too large, truncated to 1048576 [ 262.719973][ T787] usb 3-1: new high-speed USB device number 4 using dummy_hcd [ 262.990420][ T7004] 9pnet_fd: Insufficient options for proto=fd [ 263.006456][ T7004] lo speed is unknown, defaulting to 1000 [ 263.012931][ T7004] lo speed is unknown, defaulting to 1000 [ 263.022018][ T7004] lo speed is unknown, defaulting to 1000 [ 263.035535][ T7004] iwpm_register_pid: Unable to send a nlmsg (client = 2) [ 263.070449][ T7006] loop4: detected capacity change from 0 to 512 [ 263.078934][ T7004] infiniband syz0: RDMA CMA: cma_listen_on_dev, error -98 [ 263.125935][ T7004] lo speed is unknown, defaulting to 1000 [ 263.134678][ T7004] lo speed is unknown, defaulting to 1000 [ 263.142101][ T7004] lo speed is unknown, defaulting to 1000 [ 263.149435][ T7004] lo speed is unknown, defaulting to 1000 [ 263.156723][ T7004] lo speed is unknown, defaulting to 1000 [ 263.361545][ T7006] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 263.375943][ T7006] ext4 filesystem being mounted at /5/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 263.458148][ T787] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 263.468169][ T787] usb 3-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 263.478487][ T787] usb 3-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 263.508488][ T787] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.41 [ 263.524164][ T787] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=11 [ 263.566763][ T787] usb 3-1: Product: syz [ 263.591102][ T787] usb 3-1: Manufacturer: syz [ 263.648081][ T787] usb 3-1: SerialNumber: syz [ 263.687080][ T787] usb 3-1: can't set config #1, error -71 [ 263.801957][ T787] usb 3-1: USB disconnect, device number 4 [ 264.344690][ T6701] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 266.338109][ T27] usb 2-1: new high-speed USB device number 5 using dummy_hcd [ 266.588022][ T27] usb 2-1: Using ep0 maxpacket: 32 [ 266.624834][ T27] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 266.664324][ T27] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 266.714609][ T27] usb 2-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 266.757946][ T27] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 266.942833][ T27] usb 2-1: config 0 descriptor?? [ 267.028015][ T27] hub 2-1:0.0: USB hub found [ 267.302075][ T27] hub 2-1:0.0: 1 port detected [ 268.509792][ T27] hub 2-1:0.0: hub_hub_status failed (err = -32) [ 268.516203][ T27] hub 2-1:0.0: config failed, can't get hub status (err -32) [ 268.543284][ T27] usbhid 2-1:0.0: can't add hid device: -71 [ 268.550838][ T27] usbhid: probe of 2-1:0.0 failed with error -71 [ 268.598234][ T27] usb 2-1: USB disconnect, device number 5 [ 268.886169][ T7046] loop4: detected capacity change from 0 to 8 [ 268.895878][ T7046] squashfs: Unknown parameter '/dev/uinput' [ 269.297901][ T7045] xt_hashlimit: max too large, truncated to 1048576 [ 269.660908][ T5796] Bluetooth: hci4: command 0x0405 tx timeout [ 269.978188][ T7051] lo speed is unknown, defaulting to 1000 [ 269.984349][ T7051] lo speed is unknown, defaulting to 1000 [ 269.994275][ T7051] lo speed is unknown, defaulting to 1000 [ 270.066757][ T7051] infiniband syz2: RDMA CMA: cma_listen_on_dev, error -98 [ 270.343628][ T7051] lo speed is unknown, defaulting to 1000 [ 270.351317][ T7051] lo speed is unknown, defaulting to 1000 [ 270.358726][ T7051] lo speed is unknown, defaulting to 1000 [ 270.366192][ T7051] lo speed is unknown, defaulting to 1000 [ 270.375968][ T7051] lo speed is unknown, defaulting to 1000 [ 270.961024][ T7063] loop4: detected capacity change from 0 to 512 [ 271.041971][ T7063] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 271.195963][ T7063] ext4 filesystem being mounted at /10/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 273.473368][ T7077] EXT4-fs error (device loop4): ext4_mb_generate_buddy:1215: group 0, block bitmap and bg descriptor inconsistent: 96 vs 65376 free clusters [ 273.489724][ T7077] Quota error (device loop4): write_blk: dquota write failed [ 273.497705][ T7077] Quota error (device loop4): qtree_write_dquot: Error -28 occurred while creating quota [ 273.507624][ T7077] EXT4-fs error (device loop4): ext4_acquire_dquot:6940: comm syz.4.188: Failed to acquire dquot type 0 [ 274.082856][ T6701] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 276.616344][ T7093] capability: warning: `syz.1.192' uses deprecated v2 capabilities in a way that may be insecure [ 278.586624][ T28] audit: type=1326 audit(1761178142.959:5): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7103 comm="syz.4.196" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f45d4b8efc9 code=0x7ffc0000 [ 278.673671][ T28] audit: type=1326 audit(1761178142.959:6): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7103 comm="syz.4.196" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f45d4b8efc9 code=0x7ffc0000 [ 278.716940][ T7105] netlink: 136 bytes leftover after parsing attributes in process `syz.4.196'. [ 278.768526][ T28] audit: type=1326 audit(1761178142.989:7): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7103 comm="syz.4.196" exe="/root/syz-executor" sig=0 arch=c000003e syscall=272 compat=0 ip=0x7f45d4b8efc9 code=0x7ffc0000 [ 278.792948][ T28] audit: type=1326 audit(1761178143.009:8): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7103 comm="syz.4.196" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f45d4b8efc9 code=0x7ffc0000 [ 278.823349][ T28] audit: type=1326 audit(1761178143.019:9): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7103 comm="syz.4.196" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f45d4b8efc9 code=0x7ffc0000 [ 278.850540][ T28] audit: type=1326 audit(1761178143.019:10): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7103 comm="syz.4.196" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f45d4b8efc9 code=0x7ffc0000 [ 278.896133][ T28] audit: type=1326 audit(1761178143.019:11): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7103 comm="syz.4.196" exe="/root/syz-executor" sig=0 arch=c000003e syscall=46 compat=0 ip=0x7f45d4b8efc9 code=0x7ffc0000 [ 278.923284][ T28] audit: type=1326 audit(1761178143.019:12): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7103 comm="syz.4.196" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f45d4b8efc9 code=0x7ffc0000 [ 278.947035][ T28] audit: type=1326 audit(1761178143.019:13): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7103 comm="syz.4.196" exe="/root/syz-executor" sig=0 arch=c000003e syscall=334 compat=0 ip=0x7f45d4b8efc9 code=0x7ffc0000 [ 279.034751][ T28] audit: type=1326 audit(1761178143.029:14): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7103 comm="syz.4.196" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f45d4b8efc9 code=0x7ffc0000 [ 279.157921][ T786] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 279.357885][ T786] usb 1-1: Using ep0 maxpacket: 32 [ 279.372679][ T786] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 279.384431][ T786] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 279.395360][ T786] usb 1-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 279.404601][ T786] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 279.956505][ T786] usb 1-1: config 0 descriptor?? [ 280.039386][ T786] hub 1-1:0.0: USB hub found [ 280.101201][ T7116] binder: 7110:7116 unknown command 1074553619 [ 280.108284][ T7116] binder: 7110:7116 ioctl c0306201 200000000040 returned -22 [ 280.163046][ T7116] bond0: (slave rose0): Error: Device is in use and cannot be enslaved [ 280.248699][ T786] hub 1-1:0.0: 1 port detected [ 280.433851][ T7116] netlink: 'syz.4.200': attribute type 10 has an invalid length. [ 281.058753][ T786] hub 1-1:0.0: hub_hub_status failed (err = -71) [ 281.099178][ T786] hub 1-1:0.0: config failed, can't get hub status (err -71) [ 281.125491][ T7126] netlink: 12 bytes leftover after parsing attributes in process `syz.2.201'. [ 281.137406][ T7126] netlink: 12 bytes leftover after parsing attributes in process `syz.2.201'. [ 281.442134][ T7116] team0: Device hsr_slave_0 failed to register rx_handler [ 281.466047][ T786] usbhid 1-1:0.0: can't add hid device: -71 [ 281.487798][ T786] usbhid: probe of 1-1:0.0 failed with error -71 [ 281.521711][ T786] usb 1-1: USB disconnect, device number 3 [ 281.974813][ T7135] loop4: detected capacity change from 0 to 16 [ 282.011948][ T7135] erofs: (device loop4): mounted with root inode @ nid 36. [ 283.443588][ T7143] loop2: detected capacity change from 0 to 32768 [ 283.475068][ T7143] BTRFS info (device loop2): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 283.485356][ T7143] BTRFS info (device loop2): using sha256 (sha256-avx2) checksum algorithm [ 283.494094][ T7143] BTRFS info (device loop2): using free space tree [ 284.851238][ T7153] erofs: (device loop4): z_erofs_extent_lookback: bogus lookback distance 1586 @ lcn 46 of nid 36 [ 284.862651][ T7153] erofs: (device loop4): z_erofs_readahead: readahead error at folio 47 @ nid 36 [ 284.871973][ T7153] erofs: (device loop4): z_erofs_extent_lookback: bogus lookback distance 1586 @ lcn 46 of nid 36 [ 284.882750][ T7153] erofs: (device loop4): z_erofs_readahead: readahead error at folio 46 @ nid 36 [ 284.892110][ T7153] erofs: (device loop4): z_erofs_readahead: readahead error at folio 45 @ nid 36 [ 284.901956][ T7153] erofs: (device loop4): z_erofs_extent_lookback: bogus lookback distance 1388 @ lcn 42 of nid 36 [ 284.912851][ T7153] erofs: (device loop4): z_erofs_readahead: readahead error at folio 43 @ nid 36 [ 284.922275][ T7153] erofs: (device loop4): z_erofs_extent_lookback: bogus lookback distance 1388 @ lcn 42 of nid 36 [ 284.933154][ T7153] erofs: (device loop4): z_erofs_readahead: readahead error at folio 42 @ nid 36 [ 284.943709][ T7153] erofs: (device loop4): z_erofs_extent_lookback: bogus lookback distance 774 @ lcn 40 of nid 36 [ 285.003730][ T7153] erofs: (device loop4): z_erofs_readahead: readahead error at folio 41 @ nid 36 [ 285.187175][ T7153] erofs: (device loop4): z_erofs_extent_lookback: bogus lookback distance 774 @ lcn 40 of nid 36 [ 285.250478][ T7153] erofs: (device loop4): z_erofs_readahead: readahead error at folio 40 @ nid 36 [ 285.260982][ T7153] erofs: (device loop4): z_erofs_readahead: readahead error at folio 39 @ nid 36 [ 285.270282][ T7153] erofs: (device loop4): z_erofs_readahead: readahead error at folio 38 @ nid 36 [ 285.281161][ T7153] erofs: (device loop4): z_erofs_readahead: readahead error at folio 36 @ nid 36 [ 285.291391][ T7153] erofs: (device loop4): z_erofs_extent_lookback: bogus lookback distance 1468 @ lcn 31 of nid 36 [ 285.302259][ T7153] erofs: (device loop4): z_erofs_readahead: readahead error at folio 31 @ nid 36 [ 285.314622][ T7153] erofs: (device loop4): z_erofs_readahead: readahead error at folio 25 @ nid 36 [ 285.324386][ T7153] erofs: (device loop4): z_erofs_readahead: readahead error at folio 24 @ nid 36 [ 285.334402][ T7153] erofs: (device loop4): z_erofs_readahead: readahead error at folio 19 @ nid 36 [ 285.345908][ T7153] syz.4.204: attempt to access beyond end of device [ 285.345908][ T7153] loop4: rw=524288, sector=784, nr_sectors = 64 limit=16 [ 285.360412][ T7153] syz.4.204: attempt to access beyond end of device [ 285.360412][ T7153] loop4: rw=524288, sector=13478624080, nr_sectors = 24 limit=16 [ 285.376847][ T7153] syz.4.204: attempt to access beyond end of device [ 285.376847][ T7153] loop4: rw=524288, sector=13478624032, nr_sectors = 48 limit=16 [ 285.391675][ T7153] syz.4.204: attempt to access beyond end of device [ 285.391675][ T7153] loop4: rw=524288, sector=16, nr_sectors = 16 limit=16 [ 285.520421][ T7155] erofs: (device loop4): z_erofs_extent_lookback: bogus lookback distance 1388 @ lcn 42 of nid 36 [ 285.532114][ T7155] erofs: (device loop4): z_erofs_lz4_decompress_mem: failed to decompress -29 in[58, 4038] out[1851] [ 285.543580][ T7155] erofs: (device loop4): z_erofs_read_folio: read error -117 @ 43 of nid 36 [ 286.154246][ T7143] BTRFS error (device loop2): open_ctree failed: -4 [ 287.165375][ T5794] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop2 scanned by udevd (5794) [ 287.257876][ T23] usb 5-1: new high-speed USB device number 3 using dummy_hcd [ 287.730385][ T23] usb 5-1: Using ep0 maxpacket: 32 [ 287.742041][ T23] usb 5-1: too many configurations: 15, using maximum allowed: 8 [ 287.767742][ T23] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 287.871268][ T28] kauditd_printk_skb: 52 callbacks suppressed [ 287.871304][ T28] audit: type=1326 audit(1761178152.219:67): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7171 comm="syz.2.209" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7db738efc9 code=0x7ffc0000 [ 288.226649][ T7180] workqueue: Failed to create a rescuer kthread for wq "ceph-watch-notify": -EINTR [ 288.397975][ T23] usb 5-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 288.437130][ T23] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 288.468592][ T23] usb 5-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 288.485889][ T28] audit: type=1326 audit(1761178152.219:68): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7171 comm="syz.2.209" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7db738efc9 code=0x7ffc0000 [ 288.500567][ T23] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 288.560187][ T23] usb 5-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 288.579701][ T28] audit: type=1326 audit(1761178152.219:69): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7171 comm="syz.2.209" exe="/root/syz-executor" sig=0 arch=c000003e syscall=280 compat=0 ip=0x7f7db738efc9 code=0x7ffc0000 [ 288.621266][ T23] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 288.783913][ T23] usb 5-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 288.826661][ T23] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 288.836837][ T23] usb 5-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 288.846311][ T28] audit: type=1326 audit(1761178152.219:70): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7171 comm="syz.2.209" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7db738efc9 code=0x7ffc0000 [ 289.176978][ T28] audit: type=1326 audit(1761178152.219:71): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7171 comm="syz.2.209" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7db738efc9 code=0x7ffc0000 [ 289.412415][ T28] audit: type=1326 audit(1761178152.219:72): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7171 comm="syz.2.209" exe="/root/syz-executor" sig=0 arch=c000003e syscall=144 compat=0 ip=0x7f7db738efc9 code=0x7ffc0000 [ 289.442778][ T23] usb 5-1: unable to read config index 5 descriptor/all [ 289.449906][ T23] usb 5-1: can't read configurations, error -71 [ 289.569972][ T28] audit: type=1326 audit(1761178152.219:73): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7171 comm="syz.2.209" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7db738efc9 code=0x7ffc0000 [ 289.592604][ T28] audit: type=1326 audit(1761178152.229:74): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7171 comm="syz.2.209" exe="/root/syz-executor" sig=0 arch=c000003e syscall=430 compat=0 ip=0x7f7db738efc9 code=0x7ffc0000 [ 289.637323][ T28] audit: type=1326 audit(1761178152.229:75): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7171 comm="syz.2.209" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7db738efc9 code=0x7ffc0000 [ 289.661898][ T28] audit: type=1326 audit(1761178152.229:76): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7171 comm="syz.2.209" exe="/root/syz-executor" sig=0 arch=c000003e syscall=431 compat=0 ip=0x7f7db738efc9 code=0x7ffc0000 [ 290.004619][ T7192] netlink: 12 bytes leftover after parsing attributes in process `syz.4.213'. [ 290.014970][ T7192] netlink: 12 bytes leftover after parsing attributes in process `syz.4.213'. [ 291.979658][ T7204] loop2: detected capacity change from 0 to 8 [ 291.988665][ T7204] squashfs: Unknown parameter '/dev/uinput' [ 293.207499][ T7209] binder: 7202:7209 unknown command 1074553619 [ 293.214098][ T7209] binder: 7202:7209 ioctl c0306201 200000000040 returned -22 [ 293.347086][ T7209] bond0: (slave rose0): Error: Device is in use and cannot be enslaved [ 293.379008][ T7213] loop4: detected capacity change from 0 to 16 [ 293.563817][ T7213] erofs: (device loop4): mounted with root inode @ nid 36. [ 294.861019][ T7209] netlink: 'syz.0.214': attribute type 10 has an invalid length. [ 294.870877][ T7226] erofs: (device loop4): z_erofs_extent_lookback: bogus lookback distance 1586 @ lcn 46 of nid 36 [ 294.881758][ T7226] erofs: (device loop4): z_erofs_readahead: readahead error at folio 47 @ nid 36 [ 295.193017][ T7226] erofs: (device loop4): z_erofs_extent_lookback: bogus lookback distance 1586 @ lcn 46 of nid 36 [ 295.273689][ T7226] erofs: (device loop4): z_erofs_readahead: readahead error at folio 46 @ nid 36 [ 295.283622][ T7226] erofs: (device loop4): z_erofs_readahead: readahead error at folio 45 @ nid 36 [ 295.293251][ T7226] erofs: (device loop4): z_erofs_extent_lookback: bogus lookback distance 1388 @ lcn 42 of nid 36 [ 295.304005][ T7226] erofs: (device loop4): z_erofs_readahead: readahead error at folio 43 @ nid 36 [ 295.313242][ T7226] erofs: (device loop4): z_erofs_extent_lookback: bogus lookback distance 1388 @ lcn 42 of nid 36 [ 295.404726][ T7226] erofs: (device loop4): z_erofs_readahead: readahead error at folio 42 @ nid 36 [ 295.453253][ T7226] erofs: (device loop4): z_erofs_extent_lookback: bogus lookback distance 774 @ lcn 40 of nid 36 [ 295.463957][ T7226] erofs: (device loop4): z_erofs_readahead: readahead error at folio 41 @ nid 36 [ 295.473254][ T7226] erofs: (device loop4): z_erofs_extent_lookback: bogus lookback distance 774 @ lcn 40 of nid 36 [ 295.483946][ T7226] erofs: (device loop4): z_erofs_readahead: readahead error at folio 40 @ nid 36 [ 295.493325][ T7226] erofs: (device loop4): z_erofs_readahead: readahead error at folio 39 @ nid 36 [ 295.502569][ T7226] erofs: (device loop4): z_erofs_readahead: readahead error at folio 38 @ nid 36 [ 295.512521][ T7226] erofs: (device loop4): z_erofs_readahead: readahead error at folio 36 @ nid 36 [ 295.522618][ T7226] erofs: (device loop4): z_erofs_extent_lookback: bogus lookback distance 1468 @ lcn 31 of nid 36 [ 295.533435][ T7226] erofs: (device loop4): z_erofs_readahead: readahead error at folio 31 @ nid 36 [ 295.543525][ T7226] erofs: (device loop4): z_erofs_readahead: readahead error at folio 25 @ nid 36 [ 295.553062][ T7226] erofs: (device loop4): z_erofs_readahead: readahead error at folio 24 @ nid 36 [ 295.562938][ T7226] erofs: (device loop4): z_erofs_readahead: readahead error at folio 19 @ nid 36 [ 295.573710][ T7226] syz.4.216: attempt to access beyond end of device [ 295.573710][ T7226] loop4: rw=524288, sector=784, nr_sectors = 64 limit=16 [ 295.588217][ T7226] syz.4.216: attempt to access beyond end of device [ 295.588217][ T7226] loop4: rw=524288, sector=13478624080, nr_sectors = 24 limit=16 [ 295.603459][ T7226] syz.4.216: attempt to access beyond end of device [ 295.603459][ T7226] loop4: rw=524288, sector=13478624032, nr_sectors = 48 limit=16 [ 295.656508][ T7226] syz.4.216: attempt to access beyond end of device [ 295.656508][ T7226] loop4: rw=524288, sector=16, nr_sectors = 16 limit=16 [ 297.361287][ T7232] loop1: detected capacity change from 0 to 128 [ 297.456765][ T7232] EXT4-fs (loop1): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 297.555837][ T7232] ext4 filesystem being mounted at /53/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 297.564319][ T7229] erofs: (device loop4): z_erofs_extent_lookback: bogus lookback distance 1388 @ lcn 42 of nid 36 [ 297.605197][ T7209] team0: Device hsr_slave_0 failed to register rx_handler [ 297.622743][ T7229] erofs: (device loop4): z_erofs_lz4_decompress_mem: failed to decompress -29 in[58, 4038] out[1851] [ 297.681418][ T7229] erofs: (device loop4): z_erofs_read_folio: read error -117 @ 43 of nid 36 [ 298.716875][ T5792] EXT4-fs (loop1): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 298.723076][ T7244] vcan0: tx drop: invalid da for name 0x00000000000000f5 [ 300.399814][ T7253] netlink: 12 bytes leftover after parsing attributes in process `syz.4.224'. [ 300.410057][ T7253] netlink: 12 bytes leftover after parsing attributes in process `syz.4.224'. [ 301.254375][ T5796] Bluetooth: hci0: command 0x0406 tx timeout [ 303.065903][ T7261] bridge0: entered promiscuous mode [ 303.072335][ T7261] macvlan2: entered promiscuous mode [ 304.375937][ T7265] loop4: detected capacity change from 0 to 8 [ 304.385790][ T7265] squashfs: Unknown parameter '/dev/uinput' [ 306.288788][ T5794] I/O error, dev loop4, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 307.249123][ T7263] xt_hashlimit: max too large, truncated to 1048576 [ 307.717025][ T7279] (null): rxe_set_mtu: Set mtu to 1024 [ 307.895630][ T7279] infiniband syz1: set active [ 307.900824][ T7279] infiniband syz1: added syz_tun [ 308.055305][ T7279] RDS/IB: syz1: added [ 308.060782][ T7279] smc: adding ib device syz1 with port count 1 [ 308.067222][ T7279] smc: ib device syz1 port 1 has pnetid [ 309.356471][ T7284] loop1: detected capacity change from 0 to 16 [ 309.418624][ T7284] erofs: (device loop1): mounted with root inode @ nid 36. [ 309.525400][ T7287] erofs: (device loop1): z_erofs_extent_lookback: bogus lookback distance 1586 @ lcn 46 of nid 36 [ 309.536321][ T7287] erofs: (device loop1): z_erofs_readahead: readahead error at folio 47 @ nid 36 [ 309.545645][ T7287] erofs: (device loop1): z_erofs_extent_lookback: bogus lookback distance 1586 @ lcn 46 of nid 36 [ 309.556376][ T7287] erofs: (device loop1): z_erofs_readahead: readahead error at folio 46 @ nid 36 [ 309.566028][ T7287] erofs: (device loop1): z_erofs_readahead: readahead error at folio 45 @ nid 36 [ 309.575544][ T7287] erofs: (device loop1): z_erofs_extent_lookback: bogus lookback distance 1388 @ lcn 42 of nid 36 [ 309.586336][ T7287] erofs: (device loop1): z_erofs_readahead: readahead error at folio 43 @ nid 36 [ 309.595743][ T7287] erofs: (device loop1): z_erofs_extent_lookback: bogus lookback distance 1388 @ lcn 42 of nid 36 [ 309.606464][ T7287] erofs: (device loop1): z_erofs_readahead: readahead error at folio 42 @ nid 36 [ 309.615790][ T7287] erofs: (device loop1): z_erofs_extent_lookback: bogus lookback distance 774 @ lcn 40 of nid 36 [ 309.626481][ T7287] erofs: (device loop1): z_erofs_readahead: readahead error at folio 41 @ nid 36 [ 309.635780][ T7287] erofs: (device loop1): z_erofs_extent_lookback: bogus lookback distance 774 @ lcn 40 of nid 36 [ 309.646402][ T7287] erofs: (device loop1): z_erofs_readahead: readahead error at folio 40 @ nid 36 [ 309.655701][ T7287] erofs: (device loop1): z_erofs_readahead: readahead error at folio 39 @ nid 36 [ 309.665015][ T7287] erofs: (device loop1): z_erofs_readahead: readahead error at folio 38 @ nid 36 [ 309.674908][ T7287] erofs: (device loop1): z_erofs_readahead: readahead error at folio 36 @ nid 36 [ 309.684942][ T7287] erofs: (device loop1): z_erofs_extent_lookback: bogus lookback distance 1468 @ lcn 31 of nid 36 [ 309.695663][ T7287] erofs: (device loop1): z_erofs_readahead: readahead error at folio 31 @ nid 36 [ 309.705733][ T7287] erofs: (device loop1): z_erofs_readahead: readahead error at folio 25 @ nid 36 [ 309.715119][ T7287] erofs: (device loop1): z_erofs_readahead: readahead error at folio 24 @ nid 36 [ 309.725640][ T7287] erofs: (device loop1): z_erofs_readahead: readahead error at folio 19 @ nid 36 [ 309.736307][ T7287] syz.1.232: attempt to access beyond end of device [ 309.736307][ T7287] loop1: rw=524288, sector=784, nr_sectors = 64 limit=16 [ 309.750447][ T7287] syz.1.232: attempt to access beyond end of device [ 309.750447][ T7287] loop1: rw=524288, sector=13478624080, nr_sectors = 24 limit=16 [ 309.765230][ T7287] syz.1.232: attempt to access beyond end of device [ 309.765230][ T7287] loop1: rw=524288, sector=13478624032, nr_sectors = 48 limit=16 [ 309.779922][ T7287] syz.1.232: attempt to access beyond end of device [ 309.779922][ T7287] loop1: rw=524288, sector=16, nr_sectors = 16 limit=16 [ 310.866620][ T7287] erofs: (device loop1): z_erofs_extent_lookback: bogus lookback distance 1388 @ lcn 42 of nid 36 [ 310.877426][ T7287] erofs: (device loop1): z_erofs_lz4_decompress_mem: failed to decompress -29 in[58, 4038] out[1851] [ 311.055992][ T7287] erofs: (device loop1): z_erofs_read_folio: read error -117 @ 43 of nid 36 [ 311.397906][ T5796] Bluetooth: hci4: command 0x0405 tx timeout [ 315.116429][ T5796] Bluetooth: hci1: command 0x0406 tx timeout [ 315.408349][ T7308] netlink: 12 bytes leftover after parsing attributes in process `syz.1.235'. [ 315.418889][ T7308] netlink: 12 bytes leftover after parsing attributes in process `syz.1.235'. [ 316.555805][ T7319] loop1: detected capacity change from 0 to 512 [ 316.633815][ T7319] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 316.650901][ T7319] ext4 filesystem being mounted at /60/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 316.865408][ T7324] EXT4-fs error (device loop1): ext4_mb_generate_buddy:1215: group 0, block bitmap and bg descriptor inconsistent: 96 vs 65376 free clusters [ 316.897200][ T7329] netlink: 12 bytes leftover after parsing attributes in process `syz.0.249'. [ 316.907949][ T7329] netlink: 12 bytes leftover after parsing attributes in process `syz.0.249'. [ 317.561352][ T1286] ieee802154 phy0 wpan0: encryption failed: -22 [ 317.576908][ T1286] ieee802154 phy1 wpan1: encryption failed: -22 [ 317.730337][ T7331] __quota_error: 2 callbacks suppressed [ 317.730450][ T7331] Quota error (device loop1): write_blk: dquota write failed [ 317.744354][ T7331] Quota error (device loop1): qtree_write_dquot: Error -28 occurred while creating quota [ 317.755061][ T7331] EXT4-fs error (device loop1): ext4_acquire_dquot:6940: comm syz.1.239: Failed to acquire dquot type 0 [ 318.659221][ T5792] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 319.546890][ T7335] autofs4:pid:7335:autofs_fill_super: called with bogus options [ 322.082761][ T7347] loop1: detected capacity change from 0 to 1024 [ 322.109125][ T7347] EXT4-fs (loop1): couldn't mount as ext2 due to feature incompatibilities [ 324.574059][ T7361] loop2: detected capacity change from 0 to 2048 [ 325.267122][ T7371] loop4: detected capacity change from 0 to 2048 [ 325.287740][ T7371] UDF-fs: bad mount option "18446744073709551615" or missing value [ 325.380855][ T7351] I/O error, dev loop4, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 325.461307][ T7357] I/O error, dev loop2, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 325.884562][ T7375] loop1: detected capacity change from 0 to 16 [ 326.353048][ T7375] erofs: (device loop1): mounted with root inode @ nid 36. [ 327.454084][ T7383] erofs: (device loop1): z_erofs_extent_lookback: bogus lookback distance 1586 @ lcn 46 of nid 36 [ 327.465051][ T7383] erofs: (device loop1): z_erofs_readahead: readahead error at folio 47 @ nid 36 [ 327.474354][ T7383] erofs: (device loop1): z_erofs_extent_lookback: bogus lookback distance 1586 @ lcn 46 of nid 36 [ 327.485431][ T7383] erofs: (device loop1): z_erofs_readahead: readahead error at folio 46 @ nid 36 [ 327.495102][ T7383] erofs: (device loop1): z_erofs_readahead: readahead error at folio 45 @ nid 36 [ 327.677014][ T7383] erofs: (device loop1): z_erofs_extent_lookback: bogus lookback distance 1388 @ lcn 42 of nid 36 [ 327.818285][ T7383] erofs: (device loop1): z_erofs_readahead: readahead error at folio 43 @ nid 36 [ 327.868757][ T7383] erofs: (device loop1): z_erofs_extent_lookback: bogus lookback distance 1388 @ lcn 42 of nid 36 [ 327.879571][ T7383] erofs: (device loop1): z_erofs_readahead: readahead error at folio 42 @ nid 36 [ 327.888925][ T7383] erofs: (device loop1): z_erofs_extent_lookback: bogus lookback distance 774 @ lcn 40 of nid 36 [ 327.899553][ T7383] erofs: (device loop1): z_erofs_readahead: readahead error at folio 41 @ nid 36 [ 327.908842][ T7383] erofs: (device loop1): z_erofs_extent_lookback: bogus lookback distance 774 @ lcn 40 of nid 36 [ 327.919601][ T7383] erofs: (device loop1): z_erofs_readahead: readahead error at folio 40 @ nid 36 [ 327.929063][ T7383] erofs: (device loop1): z_erofs_readahead: readahead error at folio 39 @ nid 36 [ 327.938521][ T7383] erofs: (device loop1): z_erofs_readahead: readahead error at folio 38 @ nid 36 [ 327.948348][ T7383] erofs: (device loop1): z_erofs_readahead: readahead error at folio 36 @ nid 36 [ 327.958439][ T7383] erofs: (device loop1): z_erofs_extent_lookback: bogus lookback distance 1468 @ lcn 31 of nid 36 [ 327.969371][ T7383] erofs: (device loop1): z_erofs_readahead: readahead error at folio 31 @ nid 36 [ 327.979407][ T7383] erofs: (device loop1): z_erofs_readahead: readahead error at folio 25 @ nid 36 [ 327.988899][ T7383] erofs: (device loop1): z_erofs_readahead: readahead error at folio 24 @ nid 36 [ 327.998829][ T7383] erofs: (device loop1): z_erofs_readahead: readahead error at folio 19 @ nid 36 [ 328.011660][ T7383] syz.1.252: attempt to access beyond end of device [ 328.011660][ T7383] loop1: rw=524288, sector=784, nr_sectors = 64 limit=16 [ 328.064249][ T7383] syz.1.252: attempt to access beyond end of device [ 328.064249][ T7383] loop1: rw=524288, sector=13478624080, nr_sectors = 24 limit=16 [ 328.079080][ T7383] syz.1.252: attempt to access beyond end of device [ 328.079080][ T7383] loop1: rw=524288, sector=13478624032, nr_sectors = 48 limit=16 [ 328.093811][ T7383] syz.1.252: attempt to access beyond end of device [ 328.093811][ T7383] loop1: rw=524288, sector=16, nr_sectors = 16 limit=16 [ 328.632389][ T7384] erofs: (device loop1): z_erofs_extent_lookback: bogus lookback distance 1388 @ lcn 42 of nid 36 [ 328.647759][ T7384] erofs: (device loop1): z_erofs_lz4_decompress_mem: failed to decompress -29 in[58, 4038] out[1851] [ 328.664551][ T7384] erofs: (device loop1): z_erofs_read_folio: read error -117 @ 43 of nid 36 [ 329.037847][ T5796] Bluetooth: hci4: command 0x0405 tx timeout [ 329.732912][ T7394] netlink: 12 bytes leftover after parsing attributes in process `syz.2.262'. [ 329.743869][ T7394] netlink: 12 bytes leftover after parsing attributes in process `syz.2.262'. [ 330.345653][ T7400] vcan0: tx drop: invalid da for name 0x00000000000000f5 [ 331.062096][ T7408] loop2: detected capacity change from 0 to 128 [ 331.903171][ T7412] ALSA: seq fatal error: cannot create timer (-22) [ 332.634421][ T7408] EXT4-fs (loop2): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 332.724553][ T7408] ext4 filesystem being mounted at /59/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 332.774377][ T7418] loop1: detected capacity change from 0 to 16 [ 332.827945][ T7418] erofs: (device loop1): mounted with root inode @ nid 36. [ 332.916789][ T7421] erofs: (device loop1): z_erofs_extent_lookback: bogus lookback distance 1586 @ lcn 46 of nid 36 [ 332.933197][ T7421] erofs: (device loop1): z_erofs_readahead: readahead error at folio 47 @ nid 36 [ 332.942487][ T7421] erofs: (device loop1): z_erofs_extent_lookback: bogus lookback distance 1586 @ lcn 46 of nid 36 [ 332.953421][ T7421] erofs: (device loop1): z_erofs_readahead: readahead error at folio 46 @ nid 36 [ 332.963053][ T7421] erofs: (device loop1): z_erofs_readahead: readahead error at folio 45 @ nid 36 [ 332.972649][ T7421] erofs: (device loop1): z_erofs_extent_lookback: bogus lookback distance 1388 @ lcn 42 of nid 36 [ 332.983554][ T7421] erofs: (device loop1): z_erofs_readahead: readahead error at folio 43 @ nid 36 [ 332.992848][ T7421] erofs: (device loop1): z_erofs_extent_lookback: bogus lookback distance 1388 @ lcn 42 of nid 36 [ 333.003576][ T7421] erofs: (device loop1): z_erofs_readahead: readahead error at folio 42 @ nid 36 [ 333.013045][ T7421] erofs: (device loop1): z_erofs_extent_lookback: bogus lookback distance 774 @ lcn 40 of nid 36 [ 333.023695][ T7421] erofs: (device loop1): z_erofs_readahead: readahead error at folio 41 @ nid 36 [ 333.032979][ T7421] erofs: (device loop1): z_erofs_extent_lookback: bogus lookback distance 774 @ lcn 40 of nid 36 [ 333.043627][ T7421] erofs: (device loop1): z_erofs_readahead: readahead error at folio 40 @ nid 36 [ 333.053037][ T7421] erofs: (device loop1): z_erofs_readahead: readahead error at folio 39 @ nid 36 [ 333.062281][ T7421] erofs: (device loop1): z_erofs_readahead: readahead error at folio 38 @ nid 36 [ 333.072023][ T7421] erofs: (device loop1): z_erofs_readahead: readahead error at folio 36 @ nid 36 [ 333.081944][ T7421] erofs: (device loop1): z_erofs_extent_lookback: bogus lookback distance 1468 @ lcn 31 of nid 36 [ 333.092696][ T7421] erofs: (device loop1): z_erofs_readahead: readahead error at folio 31 @ nid 36 [ 333.102716][ T7421] erofs: (device loop1): z_erofs_readahead: readahead error at folio 25 @ nid 36 [ 333.112161][ T7421] erofs: (device loop1): z_erofs_readahead: readahead error at folio 24 @ nid 36 [ 333.121974][ T7421] erofs: (device loop1): z_erofs_readahead: readahead error at folio 19 @ nid 36 [ 333.132785][ T7421] syz.1.259: attempt to access beyond end of device [ 333.132785][ T7421] loop1: rw=524288, sector=784, nr_sectors = 64 limit=16 [ 333.148411][ T7421] syz.1.259: attempt to access beyond end of device [ 333.148411][ T7421] loop1: rw=524288, sector=13478624080, nr_sectors = 24 limit=16 [ 333.163250][ T7421] syz.1.259: attempt to access beyond end of device [ 333.163250][ T7421] loop1: rw=524288, sector=13478624032, nr_sectors = 48 limit=16 [ 333.179351][ T7421] syz.1.259: attempt to access beyond end of device [ 333.179351][ T7421] loop1: rw=524288, sector=16, nr_sectors = 16 limit=16 [ 334.309409][ T7421] erofs: (device loop1): z_erofs_extent_lookback: bogus lookback distance 1388 @ lcn 42 of nid 36 [ 334.375571][ T7421] erofs: (device loop1): z_erofs_lz4_decompress_mem: failed to decompress -29 in[58, 4038] out[1851] [ 334.412548][ T7421] erofs: (device loop1): z_erofs_read_folio: read error -117 @ 43 of nid 36 [ 334.419090][ T5785] EXT4-fs (loop2): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 334.976832][ T7426] siw: device registration error -23 [ 336.892824][ T28] audit: type=1326 audit(1761178200.829:79): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7429 comm="syz.1.261" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6ed818efc9 code=0x7ffc0000 [ 336.914986][ C1] vkms_vblank_simulate: vblank timer overrun [ 337.016865][ T7437] loop4: detected capacity change from 0 to 16 [ 337.186621][ T7442] ceph: No mds server is up or the cluster is laggy [ 337.216891][ T7437] erofs: (device loop4): mounted with root inode @ nid 36. [ 337.264299][ T28] audit: type=1326 audit(1761178200.829:80): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7429 comm="syz.1.261" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6ed818efc9 code=0x7ffc0000 [ 337.445114][ T7447] erofs: (device loop4): z_erofs_extent_lookback: bogus lookback distance 1586 @ lcn 46 of nid 36 [ 337.455937][ T7447] erofs: (device loop4): z_erofs_readahead: readahead error at folio 47 @ nid 36 [ 337.465390][ T7447] erofs: (device loop4): z_erofs_extent_lookback: bogus lookback distance 1586 @ lcn 46 of nid 36 [ 337.476144][ T7447] erofs: (device loop4): z_erofs_readahead: readahead error at folio 46 @ nid 36 [ 337.485701][ T7447] erofs: (device loop4): z_erofs_readahead: readahead error at folio 45 @ nid 36 [ 337.495442][ T7447] erofs: (device loop4): z_erofs_extent_lookback: bogus lookback distance 1388 @ lcn 42 of nid 36 [ 337.506229][ T7447] erofs: (device loop4): z_erofs_readahead: readahead error at folio 43 @ nid 36 [ 337.515531][ T7447] erofs: (device loop4): z_erofs_extent_lookback: bogus lookback distance 1388 @ lcn 42 of nid 36 [ 337.526274][ T7447] erofs: (device loop4): z_erofs_readahead: readahead error at folio 42 @ nid 36 [ 337.535622][ T7447] erofs: (device loop4): z_erofs_extent_lookback: bogus lookback distance 774 @ lcn 40 of nid 36 [ 337.546268][ T7447] erofs: (device loop4): z_erofs_readahead: readahead error at folio 41 @ nid 36 [ 337.555574][ T7447] erofs: (device loop4): z_erofs_extent_lookback: bogus lookback distance 774 @ lcn 40 of nid 36 [ 337.566219][ T7447] erofs: (device loop4): z_erofs_readahead: readahead error at folio 40 @ nid 36 [ 337.575707][ T7447] erofs: (device loop4): z_erofs_readahead: readahead error at folio 39 @ nid 36 [ 337.585044][ T7447] erofs: (device loop4): z_erofs_readahead: readahead error at folio 38 @ nid 36 [ 337.594854][ T7447] erofs: (device loop4): z_erofs_readahead: readahead error at folio 36 @ nid 36 [ 337.604834][ T7447] erofs: (device loop4): z_erofs_extent_lookback: bogus lookback distance 1468 @ lcn 31 of nid 36 [ 337.615645][ T7447] erofs: (device loop4): z_erofs_readahead: readahead error at folio 31 @ nid 36 [ 337.626398][ T7447] erofs: (device loop4): z_erofs_readahead: readahead error at folio 25 @ nid 36 [ 337.635824][ T7447] erofs: (device loop4): z_erofs_readahead: readahead error at folio 24 @ nid 36 [ 337.645771][ T7447] erofs: (device loop4): z_erofs_readahead: readahead error at folio 19 @ nid 36 [ 337.656305][ T7447] syz.4.264: attempt to access beyond end of device [ 337.656305][ T7447] loop4: rw=524288, sector=784, nr_sectors = 64 limit=16 [ 337.670695][ T7447] syz.4.264: attempt to access beyond end of device [ 337.670695][ T7447] loop4: rw=524288, sector=13478624080, nr_sectors = 24 limit=16 [ 337.685563][ T7447] syz.4.264: attempt to access beyond end of device [ 337.685563][ T7447] loop4: rw=524288, sector=13478624032, nr_sectors = 48 limit=16 [ 337.700303][ T7447] syz.4.264: attempt to access beyond end of device [ 337.700303][ T7447] loop4: rw=524288, sector=16, nr_sectors = 16 limit=16 [ 337.787309][ T28] audit: type=1326 audit(1761178201.009:81): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7429 comm="syz.1.261" exe="/root/syz-executor" sig=0 arch=c000003e syscall=280 compat=0 ip=0x7f6ed818efc9 code=0x7ffc0000 [ 338.132096][ T28] audit: type=1326 audit(1761178201.009:82): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7429 comm="syz.1.261" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6ed818efc9 code=0x7ffc0000 [ 338.237099][ T7447] erofs: (device loop4): z_erofs_extent_lookback: bogus lookback distance 1388 @ lcn 42 of nid 36 [ 338.248119][ T7447] erofs: (device loop4): z_erofs_lz4_decompress_mem: failed to decompress -29 in[58, 4038] out[1851] [ 338.259161][ T7447] erofs: (device loop4): z_erofs_read_folio: read error -117 @ 43 of nid 36 [ 338.459652][ T28] audit: type=1326 audit(1761178201.009:83): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7429 comm="syz.1.261" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6ed818efc9 code=0x7ffc0000 [ 338.481811][ C1] vkms_vblank_simulate: vblank timer overrun [ 338.827819][ T28] audit: type=1326 audit(1761178201.139:84): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7429 comm="syz.1.261" exe="/root/syz-executor" sig=0 arch=c000003e syscall=144 compat=0 ip=0x7f6ed818efc9 code=0x7ffc0000 [ 339.111394][ T5790] Bluetooth: hci0: command 0x0406 tx timeout [ 340.488370][ T7459] bridge0: port 3(team0) entered blocking state [ 340.495305][ T7459] bridge0: port 3(team0) entered disabled state [ 340.502769][ T7459] team0: entered allmulticast mode [ 340.508008][ T7459] team_slave_0: entered allmulticast mode [ 340.513808][ T7459] team_slave_1: entered allmulticast mode [ 340.530747][ T7459] team0: entered promiscuous mode [ 340.535909][ T7459] team_slave_0: entered promiscuous mode [ 340.543055][ T7459] team_slave_1: entered promiscuous mode [ 340.554238][ T7459] bridge0: port 3(team0) entered blocking state [ 340.561023][ T7459] bridge0: port 3(team0) entered forwarding state [ 341.306163][ T28] audit: type=1326 audit(1761178201.249:85): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7429 comm="syz.1.261" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6ed818efc9 code=0x7ffc0000 [ 341.435276][ T28] audit: type=1326 audit(1761178201.259:86): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7429 comm="syz.1.261" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6ed818efc9 code=0x7ffc0000 [ 342.607775][ T5790] Bluetooth: hci3: command 0x0406 tx timeout [ 342.797905][ T28] audit: type=1326 audit(1761178201.309:87): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7429 comm="syz.1.261" exe="/root/syz-executor" sig=0 arch=c000003e syscall=430 compat=0 ip=0x7f6ed818efc9 code=0x7ffc0000 [ 344.492153][ T7466] loop1: detected capacity change from 0 to 2048 [ 344.501254][ T7466] UDF-fs: bad mount option "18446744073709551615" or missing value [ 344.502646][ T28] audit: type=1326 audit(1761178201.309:88): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7429 comm="syz.1.261" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6ed818efc9 code=0x7ffc0000 [ 345.404650][ T28] audit: type=1326 audit(1761178201.309:89): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7429 comm="syz.1.261" exe="/root/syz-executor" sig=0 arch=c000003e syscall=431 compat=0 ip=0x7f6ed818efc9 code=0x7ffc0000 [ 345.616515][ T28] audit: type=1326 audit(1761178201.309:90): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7429 comm="syz.1.261" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6ed818efc9 code=0x7ffc0000 [ 345.670252][ T7351] I/O error, dev loop1, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 345.679948][ T28] audit: type=1326 audit(1761178201.309:91): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7429 comm="syz.1.261" exe="/root/syz-executor" sig=0 arch=c000003e syscall=431 compat=0 ip=0x7f6ed818efc9 code=0x7ffc0000 [ 345.811874][ T28] audit: type=1326 audit(1761178201.309:92): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7429 comm="syz.1.261" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6ed818efc9 code=0x7ffc0000 [ 345.935533][ T28] audit: type=1326 audit(1761178201.309:93): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7429 comm="syz.1.261" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6ed818efc9 code=0x7ffc0000 [ 346.073504][ T28] audit: type=1326 audit(1761178201.319:94): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7429 comm="syz.1.261" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f6ed818d810 code=0x7ffc0000 [ 346.102795][ T28] audit: type=1326 audit(1761178201.319:95): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7429 comm="syz.1.261" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6ed818efc9 code=0x7ffc0000 [ 346.980235][ T7490] MTD: Attempt to mount non-MTD device "/dev/nullb0" [ 346.988341][ T7490] cramfs: wrong magic [ 347.322735][ T28] audit: type=1326 audit(1761178201.319:96): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7429 comm="syz.1.261" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f6ed818efc9 code=0x7ffc0000 [ 348.293244][ T28] audit: type=1326 audit(1761178201.319:97): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7429 comm="syz.1.261" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6ed818efc9 code=0x7ffc0000 [ 348.356527][ T28] audit: type=1326 audit(1761178201.329:98): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7429 comm="syz.1.261" exe="/root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7f6ed818efc9 code=0x7ffc0000 [ 348.515096][ T28] audit: type=1326 audit(1761178201.329:99): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7429 comm="syz.1.261" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6ed818efc9 code=0x7ffc0000 [ 348.643397][ T28] audit: type=1326 audit(1761178201.329:100): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7429 comm="syz.1.261" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6ed818efc9 code=0x7ffc0000 [ 349.415630][ T7510] workqueue: Failed to create a rescuer kthread for wq "ceph-watch-notify": -EINTR [ 349.707899][ T5790] Bluetooth: hci1: command 0x0406 tx timeout [ 349.715161][ T28] audit: type=1326 audit(1761178213.399:101): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7499 comm="syz.0.277" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f001738efc9 code=0x7ffc0000 [ 350.113133][ T7517] loop1: detected capacity change from 0 to 32768 [ 351.268967][ T5790] Bluetooth: hci4: command 0x0405 tx timeout [ 351.308567][ T28] audit: type=1326 audit(1761178213.399:102): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7499 comm="syz.0.277" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f001738efc9 code=0x7ffc0000 [ 351.331504][ T7517] BTRFS info (device loop1): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 351.337349][ T28] audit: type=1326 audit(1761178213.399:103): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7499 comm="syz.0.277" exe="/root/syz-executor" sig=0 arch=c000003e syscall=280 compat=0 ip=0x7f001738efc9 code=0x7ffc0000 [ 351.342135][ T7517] BTRFS info (device loop1): using sha256 (sha256-avx2) checksum algorithm [ 351.364137][ T28] audit: type=1326 audit(1761178213.399:104): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7499 comm="syz.0.277" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f001738efc9 code=0x7ffc0000 [ 351.372665][ T7517] BTRFS info (device loop1): using free space tree [ 351.484422][ T7527] loop4: detected capacity change from 0 to 16 [ 351.524003][ T7527] erofs: (device loop4): mounted with root inode @ nid 36. [ 351.528438][ T28] audit: type=1326 audit(1761178213.399:105): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7499 comm="syz.0.277" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f001738efc9 code=0x7ffc0000 [ 351.553827][ T28] audit: type=1326 audit(1761178213.399:106): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7499 comm="syz.0.277" exe="/root/syz-executor" sig=0 arch=c000003e syscall=144 compat=0 ip=0x7f001738efc9 code=0x7ffc0000 [ 351.659493][ T7535] erofs: (device loop4): z_erofs_extent_lookback: bogus lookback distance 1586 @ lcn 46 of nid 36 [ 351.670568][ T7535] erofs: (device loop4): z_erofs_readahead: readahead error at folio 47 @ nid 36 [ 351.679875][ T7535] erofs: (device loop4): z_erofs_extent_lookback: bogus lookback distance 1586 @ lcn 46 of nid 36 [ 351.690618][ T7535] erofs: (device loop4): z_erofs_readahead: readahead error at folio 46 @ nid 36 [ 351.700310][ T7535] erofs: (device loop4): z_erofs_readahead: readahead error at folio 45 @ nid 36 [ 351.709900][ T7535] erofs: (device loop4): z_erofs_extent_lookback: bogus lookback distance 1388 @ lcn 42 of nid 36 [ 351.720797][ T7535] erofs: (device loop4): z_erofs_readahead: readahead error at folio 43 @ nid 36 [ 351.730053][ T7535] erofs: (device loop4): z_erofs_extent_lookback: bogus lookback distance 1388 @ lcn 42 of nid 36 [ 351.740859][ T7535] erofs: (device loop4): z_erofs_readahead: readahead error at folio 42 @ nid 36 [ 351.750211][ T7535] erofs: (device loop4): z_erofs_extent_lookback: bogus lookback distance 774 @ lcn 40 of nid 36 [ 351.760992][ T7535] erofs: (device loop4): z_erofs_readahead: readahead error at folio 41 @ nid 36 [ 351.770383][ T7535] erofs: (device loop4): z_erofs_extent_lookback: bogus lookback distance 774 @ lcn 40 of nid 36 [ 351.781077][ T7535] erofs: (device loop4): z_erofs_readahead: readahead error at folio 40 @ nid 36 [ 351.790420][ T7535] erofs: (device loop4): z_erofs_readahead: readahead error at folio 39 @ nid 36 [ 351.799696][ T7535] erofs: (device loop4): z_erofs_readahead: readahead error at folio 38 @ nid 36 [ 351.809467][ T7535] erofs: (device loop4): z_erofs_readahead: readahead error at folio 36 @ nid 36 [ 351.819613][ T7535] erofs: (device loop4): z_erofs_extent_lookback: bogus lookback distance 1468 @ lcn 31 of nid 36 [ 351.830401][ T7535] erofs: (device loop4): z_erofs_readahead: readahead error at folio 31 @ nid 36 [ 351.840728][ T7535] erofs: (device loop4): z_erofs_readahead: readahead error at folio 25 @ nid 36 [ 351.850081][ T7535] erofs: (device loop4): z_erofs_readahead: readahead error at folio 24 @ nid 36 [ 351.860246][ T7535] erofs: (device loop4): z_erofs_readahead: readahead error at folio 19 @ nid 36 [ 351.870806][ T7535] syz.4.280: attempt to access beyond end of device [ 351.870806][ T7535] loop4: rw=524288, sector=784, nr_sectors = 64 limit=16 [ 351.885105][ T7535] syz.4.280: attempt to access beyond end of device [ 351.885105][ T7535] loop4: rw=524288, sector=13478624080, nr_sectors = 24 limit=16 [ 351.899982][ T7535] syz.4.280: attempt to access beyond end of device [ 351.899982][ T7535] loop4: rw=524288, sector=13478624032, nr_sectors = 48 limit=16 [ 351.914653][ T7535] syz.4.280: attempt to access beyond end of device [ 351.914653][ T7535] loop4: rw=524288, sector=16, nr_sectors = 16 limit=16 [ 351.975749][ T7517] BTRFS info (device loop1): enabling ssd optimizations [ 351.982932][ T7517] BTRFS info (device loop1): auto enabling async discard [ 352.018249][ T1148] BTRFS warning (device loop1): checksum verify failed on logical 5308416 mirror 1 wanted 0x77808b7ecca445f549ae3d233ea0eb27adb628f92d0be59092c566b0ee5e6744 found 0x311bfb1612b2753cc312413fb73db904ebab18a99522a2031b0e3be5616ccef9 level 0 [ 352.334184][ T7517] BTRFS: error (device loop1) in btrfs_fill_super:1172: errno=-5 IO failure [ 352.354524][ T7517] BTRFS error (device loop1: state E): commit super ret -30 [ 352.524319][ T7535] erofs: (device loop4): z_erofs_extent_lookback: bogus lookback distance 1388 @ lcn 42 of nid 36 [ 352.535521][ T7535] erofs: (device loop4): z_erofs_lz4_decompress_mem: failed to decompress -29 in[58, 4038] out[1851] [ 352.546784][ T7535] erofs: (device loop4): z_erofs_read_folio: read error -117 @ 43 of nid 36 [ 352.754627][ T7351] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop1 scanned by udevd (7351) [ 353.412994][ T5790] Bluetooth: hci4: command 0x0405 tx timeout [ 354.160098][ T7545] bridge0: port 3(team0) entered blocking state [ 354.166549][ T7545] bridge0: port 3(team0) entered disabled state [ 354.173154][ T7545] team0: entered allmulticast mode [ 354.178357][ T7545] team_slave_0: entered allmulticast mode [ 354.184129][ T7545] team_slave_1: entered allmulticast mode [ 354.191873][ T7545] team0: entered promiscuous mode [ 354.196964][ T7545] team_slave_0: entered promiscuous mode [ 354.202847][ T7545] team_slave_1: entered promiscuous mode [ 354.209368][ T7545] bridge0: port 3(team0) entered blocking state [ 354.215896][ T7545] bridge0: port 3(team0) entered forwarding state [ 355.938621][ T5797] Bluetooth: hci1: command 0x0406 tx timeout [ 355.952953][ T7552] netlink: 8 bytes leftover after parsing attributes in process `syz.0.282'. [ 355.953272][ T5796] Bluetooth: hci4: command 0x0405 tx timeout [ 358.143891][ T28] kauditd_printk_skb: 6 callbacks suppressed [ 358.143906][ T28] audit: type=1326 audit(1761178222.159:113): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7547 comm="syz.0.282" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f001738efc9 code=0x7ffc0000 [ 360.030468][ T5790] Bluetooth: hci4: command 0x0405 tx timeout [ 360.388012][ T28] audit: type=1326 audit(1761178222.499:114): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7547 comm="syz.0.282" exe="/root/syz-executor" sig=0 arch=c000003e syscall=85 compat=0 ip=0x7f001738efc9 code=0x7ffc0000 [ 362.065943][ T5797] Bluetooth: hci0: command 0x0406 tx timeout [ 363.992958][ T28] audit: type=1326 audit(1761178228.279:115): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7586 comm="syz.2.301" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f7db738efc9 code=0x0 [ 364.074405][ T7593] netlink: 128 bytes leftover after parsing attributes in process `syz.2.301'. [ 364.104553][ T7593] A link change request failed with some changes committed already. Interface team0 may have been left with an inconsistent configuration, please check. [ 364.120418][ T5797] Bluetooth: hci0: command 0x0406 tx timeout [ 364.140636][ T1148] bridge0: port 3(team0) entered disabled state [ 365.734941][ T28] audit: type=1326 audit(1761178230.109:116): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7597 comm="syz.4.294" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f45d4b8efc9 code=0x7ffc0000 [ 365.907156][ T28] audit: type=1326 audit(1761178230.109:117): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7597 comm="syz.4.294" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f45d4b8efc9 code=0x7ffc0000 [ 365.936134][ T7602] workqueue: Failed to create a rescuer kthread for wq "ceph-completion": -EINTR [ 366.787788][ T28] audit: type=1326 audit(1761178230.199:118): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7597 comm="syz.4.294" exe="/root/syz-executor" sig=0 arch=c000003e syscall=430 compat=0 ip=0x7f45d4b8efc9 code=0x7ffc0000 [ 367.163311][ T7615] netlink: 12 bytes leftover after parsing attributes in process `syz.1.303'. [ 367.577767][ T28] audit: type=1326 audit(1761178230.199:119): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7597 comm="syz.4.294" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f45d4b8efc9 code=0x7ffc0000 [ 368.546189][ T28] audit: type=1326 audit(1761178230.199:120): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7597 comm="syz.4.294" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f45d4b8efc9 code=0x7ffc0000 [ 368.998423][ T28] audit: type=1326 audit(1761178230.199:121): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7597 comm="syz.4.294" exe="/root/syz-executor" sig=0 arch=c000003e syscall=431 compat=0 ip=0x7f45d4b8efc9 code=0x7ffc0000 [ 369.020983][ T28] audit: type=1326 audit(1761178230.199:122): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7597 comm="syz.4.294" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f45d4b8efc9 code=0x7ffc0000 [ 369.043382][ T28] audit: type=1326 audit(1761178230.199:123): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7597 comm="syz.4.294" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f45d4b8efc9 code=0x7ffc0000 [ 369.494556][ T7629] tipc: Enabling of bearer rejected, failed to enable media [ 369.508774][ T28] audit: type=1326 audit(1761178230.199:124): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7597 comm="syz.4.294" exe="/root/syz-executor" sig=0 arch=c000003e syscall=431 compat=0 ip=0x7f45d4b8efc9 code=0x7ffc0000 [ 369.590568][ T28] audit: type=1326 audit(1761178230.199:125): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7597 comm="syz.4.294" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f45d4b8efc9 code=0x7ffc0000 [ 370.423126][ T5797] Bluetooth: hci1: command 0x0406 tx timeout [ 370.506569][ T28] audit: type=1326 audit(1761178230.199:126): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7597 comm="syz.4.294" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f45d4b8efc9 code=0x7ffc0000 [ 370.683530][ T28] audit: type=1326 audit(1761178230.199:127): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7597 comm="syz.4.294" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f45d4b8efc9 code=0x7ffc0000 [ 371.657839][ T28] audit: type=1326 audit(1761178230.199:128): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7597 comm="syz.4.294" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f45d4b8efc9 code=0x7ffc0000 [ 372.121002][ T28] audit: type=1326 audit(1761178230.199:129): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7597 comm="syz.4.294" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f45d4b8d810 code=0x7ffc0000 [ 372.191689][ T28] audit: type=1326 audit(1761178230.199:130): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7597 comm="syz.4.294" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f45d4b8efc9 code=0x7ffc0000 [ 372.306442][ T7639] netlink: 8 bytes leftover after parsing attributes in process `syz.2.302'. [ 372.477828][ T5797] Bluetooth: hci0: command 0x0406 tx timeout [ 373.367870][ T5776] usb 2-1: new high-speed USB device number 6 using dummy_hcd [ 373.588127][ T5776] usb 2-1: Using ep0 maxpacket: 8 [ 373.599761][ T5776] usb 2-1: config index 0 descriptor too short (expected 301, got 45) [ 373.625936][ T5776] usb 2-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 373.653042][ T5776] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 373.683444][ T5776] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 373.725196][ T5776] usb 2-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 373.765652][ T5776] usb 2-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 373.784898][ T5776] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 374.421116][ T7647] netlink: 'syz.1.304': attribute type 3 has an invalid length. [ 374.430728][ T7647] netlink: 'syz.1.304': attribute type 3 has an invalid length. [ 374.487224][ T5776] usb 2-1: usb_control_msg returned -32 [ 374.508611][ T5776] usbtmc 2-1:16.0: can't read capabilities [ 377.565306][ T5790] Bluetooth: hci4: command 0x0405 tx timeout [ 377.574636][ T5790] Bluetooth: hci0: command 0x0406 tx timeout [ 377.643844][ T5859] usb 2-1: USB disconnect, device number 6 [ 379.188189][ T1286] ieee802154 phy0 wpan0: encryption failed: -22 [ 379.197747][ T1286] ieee802154 phy1 wpan1: encryption failed: -22 [ 379.958621][ T7686] netlink: 'syz.4.313': attribute type 10 has an invalid length. [ 380.138782][ T7691] netlink: 72 bytes leftover after parsing attributes in process `syz.1.315'. [ 380.171519][ T7686] netlink: 40 bytes leftover after parsing attributes in process `syz.4.313'. [ 380.233636][ T7686] team0: entered promiscuous mode [ 380.329122][ T7694] overlayfs: failed to decode file handle (len=6, type=196859, flags=0, err=-22) [ 380.556098][ T7686] team_slave_0: entered promiscuous mode [ 381.677927][ T7686] team_slave_1: entered promiscuous mode [ 381.797765][ T5790] Bluetooth: hci3: command 0x0406 tx timeout [ 381.803862][ T5790] Bluetooth: hci4: command 0x0405 tx timeout [ 382.875130][ T7686] team0: entered allmulticast mode [ 382.903601][ T7686] team_slave_0: entered allmulticast mode [ 382.914598][ T7686] team_slave_1: entered allmulticast mode [ 382.965253][ T7686] bridge0: port 3(team0) entered blocking state [ 382.976605][ T7686] bridge0: port 3(team0) entered disabled state [ 383.250123][ T7686] bridge0: port 3(team0) entered blocking state [ 383.256537][ T7686] bridge0: port 3(team0) entered forwarding state [ 383.987347][ T7706] netlink: 24 bytes leftover after parsing attributes in process `syz.0.316'. [ 385.783251][ T5838] libceph: connect (1)[c::]:6789 error -13 [ 385.789457][ T5838] libceph: mon0 (1)[c::]:6789 connect error [ 386.081964][ T5838] libceph: connect (1)[c::]:6789 error -13 [ 386.084423][ T7727] ceph: No mds server is up or the cluster is laggy [ 386.116510][ T5838] libceph: mon0 (1)[c::]:6789 connect error [ 388.036187][ T787] libceph: connect (1)[c::]:6789 error -13 [ 388.042801][ T787] libceph: mon0 (1)[c::]:6789 connect error [ 388.288637][ T7741] No such timeout policy "syz1" [ 390.139779][ T5790] Bluetooth: hci1: command 0x0406 tx timeout [ 392.566016][ T7773] MTD: Attempt to mount non-MTD device "/dev/nullb0" [ 392.600604][ T7773] cramfs: wrong magic [ 394.767734][ T5790] Bluetooth: hci1: command 0x0406 tx timeout [ 396.827187][ T5790] Bluetooth: hci0: command 0x0406 tx timeout [ 398.114164][ T7808] loop1: detected capacity change from 0 to 128 [ 399.293118][ T7818] loop4: detected capacity change from 0 to 32768 [ 399.314375][ T5790] Bluetooth: hci0: command 0x0406 tx timeout [ 399.864290][ T7818] XFS (loop4): DAX unsupported by block device. Turning off DAX. [ 399.897121][ T7818] XFS (loop4): Mounting V5 Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 399.962615][ T7818] XFS (loop4): Ending clean mount [ 399.985143][ T7818] XFS (loop4): Quotacheck needed: Please wait. [ 400.051811][ T7818] XFS (loop4): Quotacheck: Done. [ 401.466407][ T6701] XFS (loop4): Unmounting Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 401.831623][ T7837] loop1: detected capacity change from 0 to 256 [ 404.852597][ T7852] Bluetooth: MGMT ver 1.22 [ 405.338629][ T5790] Bluetooth: hci0: command 0x0406 tx timeout [ 407.397709][ T5790] Bluetooth: hci0: command 0x0406 tx timeout [ 407.527864][ T7854] syz_tun: entered allmulticast mode [ 408.701397][ T7875] loop1: detected capacity change from 0 to 16 [ 408.715071][ T7875] erofs: (device loop1): mounted with root inode @ nid 36. [ 409.400375][ T7879] erofs: (device loop1): z_erofs_extent_lookback: bogus lookback distance 1586 @ lcn 46 of nid 36 [ 409.411168][ T7879] erofs: (device loop1): z_erofs_readahead: readahead error at folio 47 @ nid 36 [ 409.420489][ T7879] erofs: (device loop1): z_erofs_extent_lookback: bogus lookback distance 1586 @ lcn 46 of nid 36 [ 409.431429][ T7879] erofs: (device loop1): z_erofs_readahead: readahead error at folio 46 @ nid 36 [ 409.441073][ T7879] erofs: (device loop1): z_erofs_readahead: readahead error at folio 45 @ nid 36 [ 409.450579][ T7879] erofs: (device loop1): z_erofs_extent_lookback: bogus lookback distance 1388 @ lcn 42 of nid 36 [ 409.461337][ T7879] erofs: (device loop1): z_erofs_readahead: readahead error at folio 43 @ nid 36 [ 409.470789][ T7879] erofs: (device loop1): z_erofs_extent_lookback: bogus lookback distance 1388 @ lcn 42 of nid 36 [ 409.481583][ T7879] erofs: (device loop1): z_erofs_readahead: readahead error at folio 42 @ nid 36 [ 409.490914][ T7879] erofs: (device loop1): z_erofs_extent_lookback: bogus lookback distance 774 @ lcn 40 of nid 36 [ 409.503207][ T7879] erofs: (device loop1): z_erofs_readahead: readahead error at folio 41 @ nid 36 [ 409.512581][ T7879] erofs: (device loop1): z_erofs_extent_lookback: bogus lookback distance 774 @ lcn 40 of nid 36 [ 409.523274][ T7879] erofs: (device loop1): z_erofs_readahead: readahead error at folio 40 @ nid 36 [ 409.532603][ T7879] erofs: (device loop1): z_erofs_readahead: readahead error at folio 39 @ nid 36 [ 409.541964][ T7879] erofs: (device loop1): z_erofs_readahead: readahead error at folio 38 @ nid 36 [ 409.551678][ T7879] erofs: (device loop1): z_erofs_readahead: readahead error at folio 36 @ nid 36 [ 409.565935][ T7879] erofs: (device loop1): z_erofs_extent_lookback: bogus lookback distance 1468 @ lcn 31 of nid 36 [ 409.576659][ T7879] erofs: (device loop1): z_erofs_readahead: readahead error at folio 31 @ nid 36 [ 409.586485][ T7879] erofs: (device loop1): z_erofs_readahead: readahead error at folio 25 @ nid 36 [ 409.595737][ T7879] erofs: (device loop1): z_erofs_readahead: readahead error at folio 24 @ nid 36 [ 409.605381][ T7879] erofs: (device loop1): z_erofs_readahead: readahead error at folio 19 @ nid 36 [ 409.617505][ T7879] syz.1.350: attempt to access beyond end of device [ 409.617505][ T7879] loop1: rw=524288, sector=784, nr_sectors = 64 limit=16 [ 409.631693][ T7879] syz.1.350: attempt to access beyond end of device [ 409.631693][ T7879] loop1: rw=524288, sector=13478624080, nr_sectors = 24 limit=16 [ 409.646854][ T7879] syz.1.350: attempt to access beyond end of device [ 409.646854][ T7879] loop1: rw=524288, sector=13478624032, nr_sectors = 48 limit=16 [ 409.661745][ T7879] syz.1.350: attempt to access beyond end of device [ 409.661745][ T7879] loop1: rw=524288, sector=16, nr_sectors = 16 limit=16 [ 410.509696][ T5790] Bluetooth: hci1: command 0x0406 tx timeout [ 410.941768][ T7887] autofs4:pid:7887:autofs_fill_super: called with bogus options [ 413.332596][ T7895] input: syz1 as /devices/virtual/input/input12 [ 417.075922][ T7907] syz.2.356 (7907): drop_caches: 2 [ 417.185180][ T58] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 417.197782][ T5838] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 418.703379][ T6323] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 418.717725][ T7919] MTD: Attempt to mount non-MTD device "/dev/nullb0" [ 418.802089][ T7919] cramfs: wrong magic [ 420.059951][ T5876] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 420.302748][ T5858] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 422.518549][ T5986] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 424.228433][ T5790] Bluetooth: hci3: command 0x0406 tx timeout [ 424.235050][ T5985] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 424.277262][ T5858] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 424.569786][ T7951] trusted_key: encrypted_key: insufficient parameters specified [ 426.280792][ T5797] Bluetooth: hci1: command 0x0406 tx timeout [ 427.723364][ T8] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 428.086257][ T7974] loop1: detected capacity change from 0 to 1024 [ 428.551047][ T5985] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 429.068462][ T7974] EXT4-fs: Ignoring removed bh option [ 429.073993][ T7974] EXT4-fs: Ignoring removed nobh option [ 429.114053][ T7974] EXT4-fs: Ignoring removed bh option [ 429.135573][ T7974] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 429.192114][ T7974] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 429.825404][ T6323] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 430.132366][ T7988] binder: 7983:7988 ioctl 4018620d 0 returned -22 [ 430.364163][ T5838] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 431.232312][ T7994] EXT4-fs error (device loop1): ext4_mb_mark_diskspace_used:4031: comm syz.1.375: Allocating blocks 497-513 which overlap fs metadata [ 431.360977][ T5797] Bluetooth: hci1: command 0x0406 tx timeout [ 431.430416][ T7994] EXT4-fs (loop1): pa ffff88805d78f2b8: logic 256, phys. 385, len 8 [ 431.439100][ T7994] EXT4-fs error (device loop1): ext4_mb_release_inode_pa:5372: group 0, free 0, pa_free 1 [ 432.396066][ T5876] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 432.846428][ T5792] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 433.401821][ T5797] Bluetooth: hci1: command 0x0406 tx timeout [ 433.750399][ T8011] md: could not open device unknown-block(128,0). [ 433.782754][ T8011] md: md_import_device returned -6 [ 434.046019][ T8008] loop4: detected capacity change from 0 to 65536 [ 434.681231][ T5985] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 435.358486][ T8008] XFS (loop4): Mounting V5 Filesystem 6653b971-41ab-480a-bd7b-5ff79b9409b5 [ 435.403979][ T5876] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 436.154780][ T5986] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 436.164108][ T8008] XFS (loop4): Ending clean mount [ 437.894837][ T5790] Bluetooth: hci3: command 0x0406 tx timeout [ 438.362111][ T6701] XFS (loop4): Unmounting Filesystem 6653b971-41ab-480a-bd7b-5ff79b9409b5 [ 439.404849][ T8053] netlink: 'syz.1.389': attribute type 9 has an invalid length. [ 439.413055][ T8053] netlink: 'syz.1.389': attribute type 7 has an invalid length. [ 439.421035][ T8053] netlink: 'syz.1.389': attribute type 8 has an invalid length. [ 439.887011][ T5858] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 440.137267][ T8] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 440.359551][ T1127] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 440.450542][ T1286] ieee802154 phy0 wpan0: encryption failed: -22 [ 440.456903][ T1286] ieee802154 phy1 wpan1: encryption failed: -22 [ 441.609098][ T5790] Bluetooth: hci1: command 0x0406 tx timeout [ 441.816827][ T1127] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 442.617910][ T5790] Bluetooth: hci3: command 0x0406 tx timeout [ 443.944269][ T8] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 444.094970][ T8077] siw: device registration error -23 [ 444.818281][ T8084] loop4: detected capacity change from 0 to 256 [ 445.585900][ T1092] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 445.624046][ T5790] Bluetooth: hci1: command 0x0406 tx timeout [ 447.483587][ T34] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 447.523490][ T8] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 449.010024][ T8103] Bluetooth: hci0: invalid length 0, exp 2 for type 0 [ 449.471063][ T8] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 451.099795][ T5790] Bluetooth: hci3: command 0x0406 tx timeout [ 451.245684][ T1127] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 451.595843][ T5858] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 451.817024][ T8124] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 451.826225][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 453.783311][ T58] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 453.873172][ T8133] block device autoloading is deprecated and will be removed. [ 456.012381][ T8143] loop4: detected capacity change from 0 to 2048 [ 456.275498][ T8143] UDF-fs: error (device loop4): udf_read_tagged: tag checksum failed, block 99: 0x27 != 0x4d [ 456.281900][ T8] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 456.289467][ T8143] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 456.590809][ T8145] netlink: 28 bytes leftover after parsing attributes in process `syz.2.410'. [ 456.778056][ T8145] netlink: 36 bytes leftover after parsing attributes in process `syz.2.410'. [ 457.031033][ T8149] loop1: detected capacity change from 0 to 4096 [ 457.066454][ T8149] ntfs3: loop1: Different NTFS sector size (1024) and media sector size (512). [ 457.078224][ T1127] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 457.868879][ T8153] netdevsim netdevsim1 netdevsim0: entered allmulticast mode [ 457.887405][ T8153] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 458.595161][ T28] kauditd_printk_skb: 18 callbacks suppressed [ 458.595176][ T28] audit: type=1800 audit(1761178322.949:149): pid=8156 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.412" name="file1" dev="loop1" ino=30 res=0 errno=0 [ 459.414407][ T5858] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 459.423429][ T5838] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 460.262099][ T8188] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 460.353175][ T8156] ntfs3: loop1: ino=1e, "file1" ntfs_sync_inode failed, -22. [ 461.638753][ T8193] ntfs3: loop1: ino=1e, ntfs3_write_inode failed, -22. [ 462.117676][ T5790] Bluetooth: hci4: command 0x0405 tx timeout [ 462.718433][ T5858] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 462.848335][ T5790] Bluetooth: hci0: command 0x0406 tx timeout [ 462.849741][ T8228] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 463.675265][ T8265] netlink: 16 bytes leftover after parsing attributes in process `syz.2.418'. [ 464.918074][ T8270] trusted_key: encrypted_key: insufficient parameters specified [ 464.919243][ T8276] loop1: detected capacity change from 0 to 32768 [ 464.979635][ T8276] XFS (loop1): DAX unsupported by block device. Turning off DAX. [ 464.988534][ T8276] XFS (loop1): Mounting V5 Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 465.185947][ T8291] x_tables: ip6_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING [ 465.492760][ T8228] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 465.917613][ T8294] syz.2.422 calls setitimer() with new_value NULL pointer. Misfeature support will be removed [ 466.470635][ T8294] ptrace attach of "./syz-executor exec"[5785] was attempted by " [ 466.565858][ T5838] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 467.072577][ T8276] XFS (loop1): Ending clean mount [ 467.103091][ T8276] XFS (loop1): Quotacheck needed: Please wait. [ 467.393974][ T8276] XFS (loop1): Quotacheck: Done. [ 468.279917][ T5792] XFS (loop1): Unmounting Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 468.505169][ T8304] loop4: detected capacity change from 0 to 512 [ 468.607851][ T8234] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 468.616038][ T5838] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 468.729969][ T8304] EXT4-fs: Ignoring removed nobh option [ 468.897513][ T8304] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 469.219880][ T8302] dvmrp1: entered allmulticast mode [ 469.255501][ T8300] netlink: 12 bytes leftover after parsing attributes in process `syz.2.426'. [ 469.277873][ T8300] tipc: Started in network mode [ 469.282776][ T8300] tipc: Node identity 00000000000000000000000000000001, cluster identity 4711 [ 469.314233][ T8304] Bluetooth: MGMT ver 1.22 [ 469.598556][ T8300] tipc: New replicast peer: fe80:0000:0000:0000:0000:0000:0000:0000 [ 469.613712][ T8300] tipc: Enabled bearer , priority 10 [ 469.638657][ T5838] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 470.249338][ T6701] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 470.360181][ T8311] netlink: 'syz.1.424': attribute type 4 has an invalid length. [ 470.680561][ T5926] tipc: Node number set to 1 [ 471.150141][ T8320] tipc: Enabling of bearer rejected, failed to enable media [ 471.375282][ T8325] siw: device registration error -23 [ 471.965437][ T8329] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(7) [ 471.972018][ T8329] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 472.068813][ T8329] vhci_hcd vhci_hcd.0: Device attached [ 472.508170][ T5926] usb 37-1: new high-speed USB device number 2 using vhci_hcd [ 472.580774][ T8333] netlink: 'syz.4.433': attribute type 10 has an invalid length. [ 473.359915][ T8333] netlink: 40 bytes leftover after parsing attributes in process `syz.4.433'. [ 475.395743][ T8332] team0: left allmulticast mode [ 475.406738][ T8332] team_slave_0: left allmulticast mode [ 475.413934][ T8332] team_slave_1: left allmulticast mode [ 475.426648][ T8332] team0: left promiscuous mode [ 475.431637][ T8332] team_slave_0: left promiscuous mode [ 475.437355][ T8332] team_slave_1: left promiscuous mode [ 475.443502][ T8332] bridge0: port 3(team0) entered disabled state [ 475.668114][ T8332] bridge_slave_0: left allmulticast mode [ 475.673799][ T8332] bridge_slave_0: left promiscuous mode [ 475.680189][ T8332] bridge0: port 1(bridge_slave_0) entered disabled state [ 475.697109][ T8332] bridge_slave_1: left allmulticast mode [ 475.703660][ T8332] bridge_slave_1: left promiscuous mode [ 476.418829][ T8332] bridge0: port 2(bridge_slave_1) entered disabled state [ 476.452857][ T8332] bond0: (slave bond_slave_0): Releasing backup interface [ 476.464224][ T8330] vhci_hcd: connection reset by peer [ 476.472128][ T8193] vhci_hcd: stop threads [ 476.484687][ T8193] vhci_hcd: release socket [ 476.491905][ T8193] vhci_hcd: disconnect device [ 476.497398][ T8332] bond0: (slave bond_slave_1): Releasing backup interface [ 476.546108][ T8332] team0: Port device team_slave_0 removed [ 476.560396][ T8332] team0: Port device team_slave_1 removed [ 476.568162][ T8332] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 476.575619][ T8332] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 476.592159][ T8332] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 476.603120][ T8332] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 476.627149][ T8339] team0: Mode changed to "loadbalance" [ 476.644772][ T8341] pim6reg: entered allmulticast mode [ 477.005903][ T8351] sch_tbf: burst 3298 is lower than device lo mtu (65550) ! [ 477.065805][ T8358] trusted_key: encrypted_key: insufficient parameters specified [ 477.648575][ T5926] vhci_hcd: vhci_device speed not set [ 477.753600][ T8366] loop1: detected capacity change from 0 to 16 [ 477.851271][ T8366] erofs: (device loop1): mounted with root inode @ nid 36. [ 477.963683][ T8369] erofs: (device loop1): z_erofs_extent_lookback: bogus lookback distance 1586 @ lcn 46 of nid 36 [ 477.974489][ T8369] erofs: (device loop1): z_erofs_readahead: readahead error at folio 47 @ nid 36 [ 477.983812][ T8369] erofs: (device loop1): z_erofs_extent_lookback: bogus lookback distance 1586 @ lcn 46 of nid 36 [ 477.994531][ T8369] erofs: (device loop1): z_erofs_readahead: readahead error at folio 46 @ nid 36 [ 478.004085][ T8369] erofs: (device loop1): z_erofs_readahead: readahead error at folio 45 @ nid 36 [ 478.126425][ T8371] binder: 8367:8371 ioctl 4018620d 0 returned -22 [ 478.626608][ T8369] erofs: (device loop1): z_erofs_extent_lookback: bogus lookback distance 1388 @ lcn 42 of nid 36 [ 478.638357][ T8369] erofs: (device loop1): z_erofs_readahead: readahead error at folio 43 @ nid 36 [ 478.648736][ T8369] erofs: (device loop1): z_erofs_extent_lookback: bogus lookback distance 1388 @ lcn 42 of nid 36 [ 478.677680][ T8369] erofs: (device loop1): z_erofs_readahead: readahead error at folio 42 @ nid 36 [ 478.695082][ T8369] erofs: (device loop1): z_erofs_extent_lookback: bogus lookback distance 774 @ lcn 40 of nid 36 [ 478.705821][ T8369] erofs: (device loop1): z_erofs_readahead: readahead error at folio 41 @ nid 36 [ 478.715360][ T8369] erofs: (device loop1): z_erofs_extent_lookback: bogus lookback distance 774 @ lcn 40 of nid 36 [ 478.726027][ T8369] erofs: (device loop1): z_erofs_readahead: readahead error at folio 40 @ nid 36 [ 478.735300][ T8369] erofs: (device loop1): z_erofs_readahead: readahead error at folio 39 @ nid 36 [ 478.744495][ T8369] erofs: (device loop1): z_erofs_readahead: readahead error at folio 38 @ nid 36 [ 478.754335][ T8369] erofs: (device loop1): z_erofs_readahead: readahead error at folio 36 @ nid 36 [ 478.764527][ T8369] erofs: (device loop1): z_erofs_extent_lookback: bogus lookback distance 1468 @ lcn 31 of nid 36 [ 478.775298][ T8369] erofs: (device loop1): z_erofs_readahead: readahead error at folio 31 @ nid 36 [ 478.785316][ T8369] erofs: (device loop1): z_erofs_readahead: readahead error at folio 25 @ nid 36 [ 478.794580][ T8369] erofs: (device loop1): z_erofs_readahead: readahead error at folio 24 @ nid 36 [ 478.804478][ T8369] erofs: (device loop1): z_erofs_readahead: readahead error at folio 19 @ nid 36 [ 478.815424][ T8369] syz.1.440: attempt to access beyond end of device [ 478.815424][ T8369] loop1: rw=524288, sector=784, nr_sectors = 64 limit=16 [ 478.829648][ T8369] syz.1.440: attempt to access beyond end of device [ 478.829648][ T8369] loop1: rw=524288, sector=13478624080, nr_sectors = 24 limit=16 [ 478.844666][ T8369] syz.1.440: attempt to access beyond end of device [ 478.844666][ T8369] loop1: rw=524288, sector=13478624032, nr_sectors = 48 limit=16 [ 478.859327][ T8369] syz.1.440: attempt to access beyond end of device [ 478.859327][ T8369] loop1: rw=524288, sector=16, nr_sectors = 16 limit=16 [ 479.340092][ T8369] erofs: (device loop1): z_erofs_extent_lookback: bogus lookback distance 1388 @ lcn 42 of nid 36 [ 479.351168][ T8369] erofs: (device loop1): z_erofs_lz4_decompress_mem: failed to decompress -29 in[58, 4038] out[1851] [ 479.377781][ T8369] erofs: (device loop1): z_erofs_read_folio: read error -117 @ 43 of nid 36 [ 480.723563][ T8389] netlink: 'syz.4.445': attribute type 2 has an invalid length. [ 480.731926][ T8389] netlink: 'syz.4.445': attribute type 1 has an invalid length. [ 480.742448][ T8389] netlink: 8 bytes leftover after parsing attributes in process `syz.4.445'. [ 481.018746][ T8390] netlink: 12 bytes leftover after parsing attributes in process `syz.4.445'. [ 481.028015][ T8380] netlink: 16 bytes leftover after parsing attributes in process `syz.1.443'. [ 485.353174][ T8418] netlink: 'syz.0.451': attribute type 9 has an invalid length. [ 485.360942][ T8418] netlink: 'syz.0.451': attribute type 7 has an invalid length. [ 485.368744][ T8418] netlink: 'syz.0.451': attribute type 8 has an invalid length. [ 485.716145][ T8415] binder: 8394:8415 unknown command 0 [ 486.489073][ T8415] binder: 8394:8415 ioctl c0306201 200000000500 returned -22 [ 489.095718][ T8436] netlink: 'syz.4.456': attribute type 4 has an invalid length. [ 492.302781][ T8456] loop1: detected capacity change from 0 to 2048 [ 493.686188][ T8461] loop4: detected capacity change from 0 to 32768 [ 494.078373][ T8456] UDF-fs: error (device loop1): udf_read_tagged: tag checksum failed, block 99: 0x27 != 0x4d [ 494.096419][ T8456] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 494.106007][ T8461] BTRFS info (device loop4): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 494.116282][ T8461] BTRFS info (device loop4): using sha256 (sha256-avx2) checksum algorithm [ 494.125078][ T8461] BTRFS info (device loop4): using free space tree [ 494.442209][ T8461] BTRFS info (device loop4): enabling ssd optimizations [ 494.449655][ T8461] BTRFS info (device loop4): auto enabling async discard [ 494.651829][ T6701] BTRFS info (device loop4): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 496.440415][ T5790] Bluetooth: hci1: command 0x0406 tx timeout [ 497.790879][ T8499] x_tables: ip6_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING [ 498.081161][ T8502] xt_CT: You must specify a L4 protocol and not use inversions on it [ 498.116637][ T8502] iommufd_mock iommufd_mock1: Adding to iommu group 0 [ 499.911304][ T8519] Cannot find add_set index 0 as target [ 500.655082][ T8521] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 502.398196][ T1286] ieee802154 phy0 wpan0: encryption failed: -22 [ 502.404539][ T1286] ieee802154 phy1 wpan1: encryption failed: -22 [ 503.881425][ T8535] loop1: detected capacity change from 0 to 16 [ 504.758211][ T8535] erofs: (device loop1): mounted with root inode @ nid 36. [ 509.476174][ T8559] ptrace attach of "./syz-executor exec"[5792] was attempted by " [ 510.732260][ T8565] netlink: 8 bytes leftover after parsing attributes in process `syz.2.482'. [ 510.847411][ T8565] netlink: 20 bytes leftover after parsing attributes in process `syz.2.482'. [ 510.998019][ T5926] usb 5-1: new high-speed USB device number 5 using dummy_hcd [ 511.287390][ T5926] usb 5-1: Using ep0 maxpacket: 32 [ 511.344713][ T5926] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 511.589334][ T5926] usb 5-1: New USB device found, idVendor=06f8, idProduct=301b, bcdDevice=bb.39 [ 511.664634][ T5926] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 511.744182][ T5926] usb 5-1: Product: syz [ 511.781370][ T5926] usb 5-1: Manufacturer: syz [ 511.822369][ T5926] usb 5-1: SerialNumber: syz [ 511.929024][ T5926] usb 5-1: config 0 descriptor?? [ 512.026984][ T5926] gspca_main: gspca_pac7302-2.14.0 probing 06f8:301b [ 512.422003][ T8584] pim6reg: entered allmulticast mode [ 513.058322][ T5926] gspca_pac7302: reg_w() failed i: 78 v: 00 error -110 [ 513.065318][ T5926] gspca_pac7302: probe of 5-1:0.0 failed with error -110 [ 515.204862][ T8591] netlink: 44 bytes leftover after parsing attributes in process `syz.4.483'. [ 515.999760][ T5858] usb 5-1: USB disconnect, device number 5 [ 522.108469][ T8629] trusted_key: encrypted_key: insufficient parameters specified [ 522.352679][ T8635] netlink: 20 bytes leftover after parsing attributes in process `syz.4.496'. [ 529.879510][ T8692] tipc: Started in network mode [ 529.884404][ T8692] tipc: Node identity aaf8dbd4346a, cluster identity 4711 [ 529.893270][ T8692] tipc: Enabled bearer , priority 0 [ 530.105922][ T8691] tipc: Disabling bearer [ 531.058023][ T8697] Cannot find add_set index 0 as target [ 532.422162][ T8706] block device autoloading is deprecated and will be removed. [ 532.430958][ T8706] syz.2.515: attempt to access beyond end of device [ 532.430958][ T8706] md34: rw=2048, sector=0, nr_sectors = 8 limit=0 [ 533.405293][ T8712] overlayfs: failed to decode file handle (len=5, type=251, flags=0, err=-22) [ 535.132319][ T5926] usb 3-1: new high-speed USB device number 5 using dummy_hcd [ 535.673337][ T8713] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 535.727799][ T8713] batadv_slave_0: entered promiscuous mode [ 535.807866][ T5926] usb 3-1: Using ep0 maxpacket: 32 [ 535.822885][ T5926] usb 3-1: New USB device found, idVendor=0fd9, idProduct=0025, bcdDevice=29.40 [ 535.858010][ T5926] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 535.912008][ T5926] usb 3-1: config 0 descriptor?? [ 537.125790][ T5926] dvb-usb: found a 'Elgato EyeTV Sat' in cold state, will try to load a firmware [ 537.662846][ T5926] usb 3-1: Direct firmware load for dvb-usb-az6027-03.fw failed with error -2 [ 537.673552][ T5926] usb 3-1: Falling back to sysfs fallback for: dvb-usb-az6027-03.fw [ 537.759007][ T8735] loop4: detected capacity change from 0 to 256 [ 537.784768][ T8735] exfat: Deprecated parameter 'namecase' [ 537.792471][ T8735] exfat: Deprecated parameter 'utf8' [ 537.821049][ T8735] exFAT-fs (loop4): failed to load upcase table (idx : 0x0001ff53, chksum : 0xd72bb7d8, utbl_chksum : 0xe619d30d) [ 538.184593][ T8742] iommufd_mock iommufd_mock1: Adding to iommu group 0 [ 539.567249][ T8754] loop4: detected capacity change from 0 to 2048 [ 539.623400][ T8754] NILFS (loop4): broken superblock, retrying with spare superblock (blocksize = 1024) [ 539.860333][ T8755] NILFS (loop4): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 541.336700][ T8761] x_tables: ip6_tables: icmp6 match: only valid for protocol 58 [ 549.989760][ T8800] netlink: 28 bytes leftover after parsing attributes in process `syz.4.532'. [ 549.999356][ T8800] netlink: 28 bytes leftover after parsing attributes in process `syz.4.532'. [ 550.762768][ T8802] syz.0.529: attempt to access beyond end of device [ 550.762768][ T8802] nbd0: rw=0, sector=64, nr_sectors = 8 limit=0 [ 550.787641][ T8802] syz.0.529: attempt to access beyond end of device [ 550.787641][ T8802] nbd0: rw=0, sector=120, nr_sectors = 8 limit=0 [ 550.802050][ T8802] Mount JFS Failure: -5 [ 550.807036][ T8802] jfs_mount failed w/return code = -5 [ 551.243025][ T8808] loop4: detected capacity change from 0 to 4096 [ 551.261567][ T8811] xt_CT: You must specify a L4 protocol and not use inversions on it [ 551.338967][ T8809] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 551.687805][ T8815] NILFS (loop4): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 552.184959][ T8819] xt_CT: You must specify a L4 protocol and not use inversions on it [ 552.212176][ T8819] iommufd_mock iommufd_mock1: Adding to iommu group 0 [ 553.923750][ T5797] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 553.951471][ T5797] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 554.049299][ T5797] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 554.205542][ T5797] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 554.214975][ T5797] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 554.272381][ T5797] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 554.300191][ T5790] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 554.307814][ T5790] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 554.315354][ T5790] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 554.323701][ T5790] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 554.338416][ T5790] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 554.345843][ T5790] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 554.482392][ T8762] infiniband syz1: set down [ 554.516075][ T5876] infiniband syz1: ib_query_port failed (-19) [ 554.753144][ T8827] lo speed is unknown, defaulting to 1000 [ 554.799508][ T8232] smc: removing ib device syz1 [ 556.498161][ T5790] Bluetooth: hci2: command tx timeout [ 558.520547][ T5790] Bluetooth: hci2: command tx timeout [ 559.688169][ T28] audit: type=1804 audit(1761178423.319:150): pid=8867 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.0.542" name="file0" dev="hugetlbfs" ino=15637 res=1 errno=0 [ 560.609521][ T5790] Bluetooth: hci2: command tx timeout [ 561.895616][ T8222] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 561.919328][ T8876] netlink: 2384 bytes leftover after parsing attributes in process `syz.0.550'. [ 562.048831][ T8222] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 562.090824][ T8876] kvm: kvm [8875]: vcpu0, guest rIP: 0x9114 Unhandled WRMSR(0xc2) = 0x9d00 [ 562.099993][ T8876] kvm: kvm [8875]: vcpu0, guest rIP: 0x9114 Unhandled WRMSR(0xc1) = 0x9d00 [ 562.360800][ T8222] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 562.433645][ T8882] xt_CT: You must specify a L4 protocol and not use inversions on it [ 562.461106][ T8882] iommufd_mock iommufd_mock1: Adding to iommu group 0 [ 562.718838][ T5790] Bluetooth: hci2: command tx timeout [ 562.935862][ T8222] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 563.306337][ T8891] netlink: 20 bytes leftover after parsing attributes in process `syz.2.544'. [ 563.508619][ T1286] ieee802154 phy0 wpan0: encryption failed: -22 [ 563.515551][ T1286] ieee802154 phy1 wpan1: encryption failed: -22 [ 565.319508][ T8827] chnl_net:caif_netlink_parms(): no params data found [ 566.871606][ T8827] bridge0: port 1(bridge_slave_0) entered blocking state [ 566.887966][ T8827] bridge0: port 1(bridge_slave_0) entered disabled state [ 566.895250][ T8827] bridge_slave_0: entered allmulticast mode [ 566.929131][ T8827] bridge_slave_0: entered promiscuous mode [ 567.004154][ T8827] bridge0: port 2(bridge_slave_1) entered blocking state [ 567.017691][ T8827] bridge0: port 2(bridge_slave_1) entered disabled state [ 567.025373][ T8827] bridge_slave_1: entered allmulticast mode [ 567.051433][ T8827] bridge_slave_1: entered promiscuous mode [ 568.101548][ T8827] team0: Port device team_slave_0 added [ 568.238879][ T8827] team0: Port device team_slave_1 added [ 568.659707][ T8827] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 568.666737][ T8827] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 568.724590][ T8827] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 568.802520][ T8827] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 568.817638][ T8827] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 568.844224][ T8827] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 569.270411][ T8827] hsr_slave_0: entered promiscuous mode [ 569.332148][ T8827] hsr_slave_1: entered promiscuous mode [ 569.422425][ T8827] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 569.448999][ T8827] Cannot create hsr debugfs directory [ 569.594612][ T8962] xt_cgroup: path and classid specified [ 573.827845][ T8222] hsr_slave_0: left promiscuous mode [ 573.847811][ T8222] hsr_slave_1: left promiscuous mode [ 573.867929][ T8222] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 573.900877][ T8222] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 574.023956][ T9005] x_tables: ip6_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING [ 574.039631][ T8222] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 574.053330][ T8222] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 575.024576][ T8222] team0: left allmulticast mode [ 575.032006][ T8222] team_slave_0: left allmulticast mode [ 575.039319][ T8222] team_slave_1: left allmulticast mode [ 575.045115][ T8222] team0: left promiscuous mode [ 575.054679][ T8222] team_slave_0: left promiscuous mode [ 575.063576][ T8222] team_slave_1: left promiscuous mode [ 575.071753][ T8222] bridge0: port 3(team0) entered disabled state [ 575.083738][ T8222] bridge_slave_1: left allmulticast mode [ 575.092071][ T8222] bridge_slave_1: left promiscuous mode [ 575.098733][ T8222] bridge0: port 2(bridge_slave_1) entered disabled state [ 575.109093][ T8222] bridge_slave_0: left allmulticast mode [ 575.114840][ T8222] bridge_slave_0: left promiscuous mode [ 575.129469][ T8222] bridge0: port 1(bridge_slave_0) entered disabled state [ 575.373081][ T8222] bridge0: left promiscuous mode [ 575.380914][ T8222] veth1_macvtap: left promiscuous mode [ 575.387036][ T8222] veth0_macvtap: left promiscuous mode [ 575.393587][ T8222] veth1_vlan: left promiscuous mode [ 575.400090][ T8222] veth0_vlan: left promiscuous mode [ 575.612931][ T8222] pim6reg (unregistering): left allmulticast mode [ 576.124971][ T8222] team0 (unregistering): Port device team_slave_1 removed [ 576.176406][ T8222] team0 (unregistering): Port device team_slave_0 removed [ 576.228653][ T8222] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 576.283431][ T8222] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 576.878024][ T8222] bond0 (unregistering): Released all slaves [ 577.032669][ T8827] smc: adding net device geneve0 with user defined pnetid SYZ0 [ 577.409613][ T8827] netdevsim netdevsim5 netdevsim0: renamed from eth5 [ 577.453473][ T8827] netdevsim netdevsim5 netdevsim1: renamed from eth6 [ 577.490654][ T8827] netdevsim netdevsim5 netdevsim2: renamed from eth7 [ 577.536848][ T8827] netdevsim netdevsim5 netdevsim3: renamed from eth8 [ 577.745850][ T8222] IPVS: stop unused estimator thread 0... [ 577.787042][ T8827] 8021q: adding VLAN 0 to HW filter on device bond0 [ 577.865700][ T8827] 8021q: adding VLAN 0 to HW filter on device team0 [ 577.906578][ T8229] bridge0: port 1(bridge_slave_0) entered blocking state [ 577.913779][ T8229] bridge0: port 1(bridge_slave_0) entered forwarding state [ 577.960223][ T8229] bridge0: port 2(bridge_slave_1) entered blocking state [ 577.967392][ T8229] bridge0: port 2(bridge_slave_1) entered forwarding state [ 578.392443][ T8827] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 578.889844][ T8827] veth0_vlan: entered promiscuous mode [ 578.903918][ T8827] veth1_vlan: entered promiscuous mode [ 579.029828][ T8827] veth0_macvtap: entered promiscuous mode [ 579.057885][ T8827] veth1_macvtap: entered promiscuous mode [ 579.135826][ T8827] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 579.146901][ T8827] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 579.161972][ T8827] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 579.172495][ T8827] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 579.195622][ T8827] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 579.219071][ T8827] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 579.230792][ T8827] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 579.241984][ T8827] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 579.254499][ T8827] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 579.264606][ T8827] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 579.275113][ T8827] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 579.295761][ T8827] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 579.315135][ T8827] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 579.326845][ T8827] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 579.335384][ T8827] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 579.343718][ T8827] netdevsim netdevsim1 eth4: set [1, 0] type 2 family 0 port 6081 - 0 [ 579.352054][ T8827] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 579.360844][ T8827] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 579.369698][ T8827] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 579.378785][ T8827] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 579.515350][ T8229] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 579.533899][ T8229] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 579.582886][ T8234] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 579.594555][ T8234] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 579.787684][ T9047] netlink: 8 bytes leftover after parsing attributes in process `syz.0.573'. [ 579.928893][ T9051] netlink: 'syz.0.573': attribute type 1 has an invalid length. [ 579.936674][ T9051] netlink: 8 bytes leftover after parsing attributes in process `syz.0.573'. [ 580.864108][ T9044] netlink: 2384 bytes leftover after parsing attributes in process `syz.2.572'. [ 581.061879][ T9044] kvm: kvm [9043]: vcpu0, guest rIP: 0x9114 Unhandled WRMSR(0xc2) = 0x9d00 [ 581.070833][ T9044] kvm: kvm [9043]: vcpu0, guest rIP: 0x9114 Unhandled WRMSR(0xc1) = 0x9d00 [ 583.680827][ T9087] loop5: detected capacity change from 0 to 4096 [ 583.990227][ T9104] NILFS (loop5): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 585.102152][ T9110] xt_CT: You must specify a L4 protocol and not use inversions on it [ 585.129181][ T9110] iommufd_mock iommufd_mock1: Adding to iommu group 0 [ 585.405869][ T9113] netlink: 28 bytes leftover after parsing attributes in process `syz.0.570'. [ 585.415397][ T9113] netlink: 28 bytes leftover after parsing attributes in process `syz.0.570'. [ 589.501608][ T9140] 9pnet_fd: Insufficient options for proto=fd [ 593.803508][ T9152] A link change request failed with some changes committed already. Interface teql0 may have been left with an inconsistent configuration, please check. [ 593.841192][ T9152] xt_CT: You must specify a L4 protocol and not use inversions on it [ 595.221800][ T9169] netlink: 12 bytes leftover after parsing attributes in process `syz.4.583'. [ 596.930398][ T9182] sctp: failed to load transform for md5: -2 [ 597.132386][ T9198] netlink: 'syz.5.586': attribute type 2 has an invalid length. [ 597.141776][ T9198] netlink: 28 bytes leftover after parsing attributes in process `syz.5.586'. [ 598.952844][ T9219] iommufd_mock iommufd_mock1: Adding to iommu group 0 [ 599.525099][ T5926] dvb-usb: did not find the firmware file 'dvb-usb-az6027-03.fw' (status -110). You can use /scripts/get_dvb_firmware to get the firmware [ 600.099869][ T5797] Bluetooth: hci2: command tx timeout [ 600.347685][ T5926] dvb_usb_az6027: probe of 3-1:0.0 failed with error -110 [ 600.364169][ T5926] usb 3-1: USB disconnect, device number 5 [ 602.652707][ T9249] netlink: 12 bytes leftover after parsing attributes in process `syz.2.594'. [ 604.119085][ T5797] Bluetooth: hci2: command tx timeout [ 610.012356][ T9303] netlink: 4 bytes leftover after parsing attributes in process `syz.0.604'. [ 610.380695][ T9303] hsr_slave_1 (unregistering): left promiscuous mode [ 610.495184][ T9312] serio: Serial port ptm0 [ 610.500500][ T5891] usb 1-1: new high-speed USB device number 4 using dummy_hcd [ 611.878799][ T5891] usb 1-1: Using ep0 maxpacket: 32 [ 611.890337][ T5891] usb 1-1: New USB device found, idVendor=055f, idProduct=d001, bcdDevice=88.92 [ 611.900924][ T5891] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 611.970557][ T5891] usb 1-1: config 0 descriptor?? [ 611.983448][ T9312] netlink: 5 bytes leftover after parsing attributes in process `syz.2.605'. [ 612.036017][ T5891] gspca_main: nw80x-2.14.0 probing 055f:d001 [ 612.057755][ T9312] 0ªî{X¹¦: renamed from gretap0 (while UP) [ 612.090591][ T9312] 0ªî{X¹¦: entered allmulticast mode [ 612.096389][ T9312] A link change request failed with some changes committed already. Interface 30ªî{X¹¦ may have been left with an inconsistent configuration, please check. [ 612.439962][ T5891] gspca_nw80x: reg_w err -71 [ 612.487488][ T5891] nw80x: probe of 1-1:0.0 failed with error -71 [ 612.519195][ T5891] usb 1-1: USB disconnect, device number 4 [ 612.975690][ T9328] netlink: 40 bytes leftover after parsing attributes in process `syz.2.607'. [ 614.680306][ T5797] Bluetooth: hci2: command tx timeout [ 618.393901][ T9361] loop6: detected capacity change from 0 to 7 [ 618.636837][ T9361] Dev loop6: unable to read RDB block 7 [ 618.769823][ T9361] loop6: AHDI p3 [ 618.833078][ T9361] loop6: partition table partially beyond EOD, truncated [ 619.421155][ T9356] DRBG: could not allocate CTR cipher TFM handle: ctr(aes) [ 620.021667][ T9381] netlink: 4 bytes leftover after parsing attributes in process `syz.5.614'. [ 620.032090][ T9381] netlink: 12 bytes leftover after parsing attributes in process `syz.5.614'. [ 620.221714][ T9383] loop4: detected capacity change from 0 to 1024 [ 620.241010][ T9383] hfsplus: unable to parse mount options [ 620.380381][ T9383] overlayfs: upper fs does not support RENAME_WHITEOUT. [ 620.403111][ T9383] overlayfs: failed to set xattr on upper [ 620.408986][ T9383] overlayfs: ...falling back to redirect_dir=nofollow. [ 620.415918][ T9383] overlayfs: ...falling back to index=off. [ 620.421858][ T9383] overlayfs: ...falling back to uuid=null. [ 621.660348][ T28] audit: type=1326 audit(1761178486.009:151): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9387 comm="syz.2.616" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7db738efc9 code=0x7ffc0000 [ 621.989351][ T28] audit: type=1326 audit(1761178486.009:152): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9387 comm="syz.2.616" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7db738efc9 code=0x7ffc0000 [ 622.312186][ T28] audit: type=1326 audit(1761178486.009:153): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9387 comm="syz.2.616" exe="/root/syz-executor" sig=0 arch=c000003e syscall=284 compat=0 ip=0x7f7db738efc9 code=0x7ffc0000 [ 622.591871][ T28] audit: type=1326 audit(1761178486.009:154): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9387 comm="syz.2.616" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7db738efc9 code=0x7ffc0000 [ 622.620498][ T28] audit: type=1326 audit(1761178486.009:155): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9387 comm="syz.2.616" exe="/root/syz-executor" sig=0 arch=c000003e syscall=46 compat=0 ip=0x7f7db738efc9 code=0x7ffc0000 [ 622.643136][ T28] audit: type=1326 audit(1761178486.019:156): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9387 comm="syz.2.616" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7db738efc9 code=0x7ffc0000 [ 622.666067][ T28] audit: type=1326 audit(1761178486.019:157): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9387 comm="syz.2.616" exe="/root/syz-executor" sig=0 arch=c000003e syscall=54 compat=0 ip=0x7f7db738efc9 code=0x7ffc0000 [ 622.688951][ T28] audit: type=1326 audit(1761178486.019:158): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9387 comm="syz.2.616" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7db738efc9 code=0x7ffc0000 [ 622.712847][ T28] audit: type=1326 audit(1761178486.019:159): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9387 comm="syz.2.616" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7db738efc9 code=0x7ffc0000 [ 622.737903][ T28] audit: type=1326 audit(1761178486.019:160): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9387 comm="syz.2.616" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f7db738efc9 code=0x7ffc0000 [ 622.945522][ T9398] netlink: 'syz.4.617': attribute type 2 has an invalid length. [ 622.953662][ T9398] netlink: 28 bytes leftover after parsing attributes in process `syz.4.617'. [ 624.771317][ T1286] ieee802154 phy0 wpan0: encryption failed: -22 [ 624.777730][ T1286] ieee802154 phy1 wpan1: encryption failed: -22 [ 627.133165][ T9442] loop6: detected capacity change from 0 to 7 [ 627.313574][ T9444] hfs: can't find a HFS filesystem on dev nullb0 [ 627.656154][ T9442] Dev loop6: unable to read RDB block 7 [ 627.807982][ T9442] loop6: AHDI p3 [ 627.811688][ T9442] loop6: partition table partially beyond EOD, truncated [ 628.983880][ T9456] netlink: 12 bytes leftover after parsing attributes in process `syz.2.627'. [ 628.995582][ T9456] netlink: 12 bytes leftover after parsing attributes in process `syz.2.627'. [ 632.441359][ T9470] @0Ù: renamed from syz_tun (while UP) [ 632.811718][ T9475] netlink: 'syz.2.632': attribute type 2 has an invalid length. [ 632.819678][ T9475] netlink: 28 bytes leftover after parsing attributes in process `syz.2.632'. [ 634.650235][ T9499] netlink: 16 bytes leftover after parsing attributes in process `syz.0.635'. [ 635.537702][ T9504] loop5: detected capacity change from 0 to 16 [ 635.725049][ T9504] erofs: (device loop5): mounted with root inode @ nid 36. [ 635.975006][ T9511] erofs: (device loop5): z_erofs_extent_lookback: bogus lookback distance 1586 @ lcn 46 of nid 36 [ 635.986428][ T9511] erofs: (device loop5): z_erofs_readahead: readahead error at folio 47 @ nid 36 [ 635.997680][ T9511] erofs: (device loop5): z_erofs_extent_lookback: bogus lookback distance 1586 @ lcn 46 of nid 36 [ 636.008511][ T9511] erofs: (device loop5): z_erofs_readahead: readahead error at folio 46 @ nid 36 [ 636.020012][ T9511] erofs: (device loop5): z_erofs_readahead: readahead error at folio 45 @ nid 36 [ 636.043071][ T5797] Bluetooth: hci2: command tx timeout [ 636.483158][ T9511] erofs: (device loop5): z_erofs_extent_lookback: bogus lookback distance 1388 @ lcn 42 of nid 36 [ 636.547992][ T9511] erofs: (device loop5): z_erofs_readahead: readahead error at folio 43 @ nid 36 [ 636.557197][ T9511] erofs: (device loop5): z_erofs_extent_lookback: bogus lookback distance 1388 @ lcn 42 of nid 36 [ 636.568262][ T9511] erofs: (device loop5): z_erofs_readahead: readahead error at folio 42 @ nid 36 [ 636.577788][ T9511] erofs: (device loop5): z_erofs_extent_lookback: bogus lookback distance 774 @ lcn 40 of nid 36 [ 636.588480][ T9511] erofs: (device loop5): z_erofs_readahead: readahead error at folio 41 @ nid 36 [ 636.597732][ T9511] erofs: (device loop5): z_erofs_extent_lookback: bogus lookback distance 774 @ lcn 40 of nid 36 [ 636.608382][ T9511] erofs: (device loop5): z_erofs_readahead: readahead error at folio 40 @ nid 36 [ 636.617708][ T9511] erofs: (device loop5): z_erofs_readahead: readahead error at folio 39 @ nid 36 [ 636.626930][ T9511] erofs: (device loop5): z_erofs_readahead: readahead error at folio 38 @ nid 36 [ 636.752004][ T9511] erofs: (device loop5): z_erofs_readahead: readahead error at folio 36 @ nid 36 [ 636.822155][ T9511] erofs: (device loop5): z_erofs_extent_lookback: bogus lookback distance 1468 @ lcn 31 of nid 36 [ 636.832988][ T9511] erofs: (device loop5): z_erofs_readahead: readahead error at folio 31 @ nid 36 [ 636.843696][ T9511] erofs: (device loop5): z_erofs_readahead: readahead error at folio 25 @ nid 36 [ 636.853018][ T9511] erofs: (device loop5): z_erofs_readahead: readahead error at folio 24 @ nid 36 [ 636.862989][ T9511] erofs: (device loop5): z_erofs_readahead: readahead error at folio 19 @ nid 36 [ 636.876975][ T9511] syz.5.637: attempt to access beyond end of device [ 636.876975][ T9511] loop5: rw=524288, sector=784, nr_sectors = 64 limit=16 [ 636.891550][ T9511] syz.5.637: attempt to access beyond end of device [ 636.891550][ T9511] loop5: rw=524288, sector=13478624080, nr_sectors = 24 limit=16 [ 636.906616][ T9511] syz.5.637: attempt to access beyond end of device [ 636.906616][ T9511] loop5: rw=524288, sector=13478624032, nr_sectors = 48 limit=16 [ 636.922066][ T9511] syz.5.637: attempt to access beyond end of device [ 636.922066][ T9511] loop5: rw=524288, sector=16, nr_sectors = 16 limit=16 [ 637.241871][ T9512] erofs: (device loop5): z_erofs_extent_lookback: bogus lookback distance 1388 @ lcn 42 of nid 36 [ 637.253222][ T9512] erofs: (device loop5): z_erofs_lz4_decompress_mem: failed to decompress -29 in[58, 4038] out[1851] [ 637.264252][ T9512] erofs: (device loop5): z_erofs_read_folio: read error -117 @ 43 of nid 36 [ 640.427888][ T9535] loop4: detected capacity change from 0 to 32768 [ 640.449823][ T9537] loop5: detected capacity change from 0 to 512 [ 640.970663][ T28] kauditd_printk_skb: 22 callbacks suppressed [ 640.970678][ T28] audit: type=1800 audit(1761178505.349:183): pid=9535 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.641" name="file2" dev="loop4" ino=5 res=0 errno=0 [ 642.489614][ T9544] mkiss: ax0: crc mode is auto. [ 644.955876][ T9550] xt_CONNSECMARK: only valid in 'mangle' or 'security' table, not 'raw' [ 647.524054][ T9587] netlink: 16 bytes leftover after parsing attributes in process `syz.2.649'. [ 650.283533][ T5776] usb 6-1: new high-speed USB device number 2 using dummy_hcd [ 651.135081][ T5776] usb 6-1: config index 0 descriptor too short (expected 39, got 27) [ 651.203113][ T5776] usb 6-1: config 0 interface 0 altsetting 251 endpoint 0x9 has invalid wMaxPacketSize 0 [ 651.280884][ T5776] usb 6-1: config 0 interface 0 has no altsetting 0 [ 651.384096][ T5776] usb 6-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 651.418081][ T5776] usb 6-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 651.467029][ T5776] usb 6-1: Product: syz [ 651.483920][ T5776] usb 6-1: Manufacturer: syz [ 651.514509][ T5776] usb 6-1: SerialNumber: syz [ 651.546312][ T5776] usb 6-1: config 0 descriptor?? [ 651.774550][ T5776] hub 6-1:0.0: bad descriptor, ignoring hub [ 651.781143][ T5776] hub: probe of 6-1:0.0 failed with error -5 [ 651.814762][ T5776] usb 6-1: selecting invalid altsetting 0 [ 653.689863][ T5776] usb 6-1: USB disconnect, device number 2 [ 653.791529][ T28] audit: type=1326 audit(1761178518.169:184): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9631 comm="syz.0.658" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f001738efc9 code=0x7ffc0000 [ 655.931783][ T28] audit: type=1326 audit(1761178518.189:185): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9631 comm="syz.0.658" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f001738efc9 code=0x7ffc0000 [ 655.954588][ T28] audit: type=1326 audit(1761178518.199:186): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9631 comm="syz.0.658" exe="/root/syz-executor" sig=0 arch=c000003e syscall=284 compat=0 ip=0x7f001738efc9 code=0x7ffc0000 [ 655.977922][ T28] audit: type=1326 audit(1761178518.199:187): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9631 comm="syz.0.658" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f001738efc9 code=0x7ffc0000 [ 656.001348][ T28] audit: type=1326 audit(1761178518.199:188): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9631 comm="syz.0.658" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f001738efc9 code=0x7ffc0000 [ 656.024674][ T28] audit: type=1326 audit(1761178518.199:189): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9631 comm="syz.0.658" exe="/root/syz-executor" sig=0 arch=c000003e syscall=46 compat=0 ip=0x7f001738efc9 code=0x7ffc0000 [ 656.075963][ T9016] udevd[9016]: error opening ATTR{/sys/devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 656.183849][ T28] audit: type=1326 audit(1761178518.199:190): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9631 comm="syz.0.658" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f001738efc9 code=0x7ffc0000 [ 656.373348][ T9645] loop4: detected capacity change from 0 to 64 [ 656.648797][ T28] audit: type=1326 audit(1761178518.199:191): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9631 comm="syz.0.658" exe="/root/syz-executor" sig=0 arch=c000003e syscall=54 compat=0 ip=0x7f001738efc9 code=0x7ffc0000 [ 657.247850][ T28] audit: type=1326 audit(1761178518.199:192): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9631 comm="syz.0.658" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f001738efc9 code=0x7ffc0000 [ 657.303886][ T28] audit: type=1326 audit(1761178518.209:193): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9631 comm="syz.0.658" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f001738efc9 code=0x7ffc0000 [ 658.677873][ T9655] netlink: 'syz.4.661': attribute type 32 has an invalid length. [ 658.747889][ T9655] netlink: 8 bytes leftover after parsing attributes in process `syz.4.661'. [ 658.820651][ T9655] bond0: option coupled_control: mode dependency failed, not supported in mode balance-rr(0) [ 661.769892][ T9677] netlink: 3 bytes leftover after parsing attributes in process `syz.4.663'. [ 662.041070][ T9677] batadv1: entered promiscuous mode [ 662.258508][ T9677] batadv1: entered allmulticast mode [ 664.876125][ T9714] input: syz1 as /devices/virtual/input/input13 [ 665.842450][ T28] kauditd_printk_skb: 20 callbacks suppressed [ 665.842469][ T28] audit: type=1326 audit(1761178529.439:214): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9713 comm="syz.4.669" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f45d4b8efc9 code=0x7ffc0000 [ 666.075618][ T28] audit: type=1326 audit(1761178529.439:215): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9713 comm="syz.4.669" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f45d4b8efc9 code=0x7ffc0000 [ 666.397870][ T28] audit: type=1326 audit(1761178530.249:216): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9713 comm="syz.4.669" exe="/root/syz-executor" sig=0 arch=c000003e syscall=284 compat=0 ip=0x7f45d4b8efc9 code=0x7ffc0000 [ 666.420208][ T28] audit: type=1326 audit(1761178530.249:217): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9713 comm="syz.4.669" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f45d4b8efc9 code=0x7ffc0000 [ 666.452268][ T28] audit: type=1326 audit(1761178530.249:218): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9713 comm="syz.4.669" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f45d4b8efc9 code=0x7ffc0000 [ 667.269205][ T28] audit: type=1326 audit(1761178530.249:219): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9713 comm="syz.4.669" exe="/root/syz-executor" sig=0 arch=c000003e syscall=54 compat=0 ip=0x7f45d4b8efc9 code=0x7ffc0000 [ 667.341563][ T28] audit: type=1326 audit(1761178530.249:220): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9713 comm="syz.4.669" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f45d4b8efc9 code=0x7ffc0000 [ 667.437649][ T28] audit: type=1326 audit(1761178530.249:221): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9713 comm="syz.4.669" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f45d4b8efc9 code=0x7ffc0000 [ 667.652768][ T28] audit: type=1326 audit(1761178530.249:222): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9713 comm="syz.4.669" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f45d4b8efc9 code=0x7ffc0000 [ 667.810166][ T9734] netlink: 12 bytes leftover after parsing attributes in process `syz.4.672'. [ 668.119112][ T9730] netlink: 'syz.0.671': attribute type 10 has an invalid length. [ 668.614269][ T28] audit: type=1326 audit(1761178530.249:223): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9713 comm="syz.4.669" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f45d4b8efc9 code=0x7ffc0000 [ 668.774508][ T9736] slcan: can't register candev [ 668.784236][ T9736] Falling back ldisc for ttyS3. [ 669.497130][ T9751] program syz.4.674 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 669.513426][ T9751] sd 0:0:1:0: ioctl_internal_command: ILLEGAL REQUEST asc=0x20 ascq=0x0 [ 670.293078][ T9755] netlink: 48 bytes leftover after parsing attributes in process `syz.2.676'. [ 670.491125][ T9755] vlan2: entered allmulticast mode [ 670.496326][ T9755] erspan0: entered allmulticast mode [ 671.916433][ T9749] netlink: 8 bytes leftover after parsing attributes in process `syz.0.675'. [ 671.925334][ T9749] netlink: 4 bytes leftover after parsing attributes in process `syz.0.675'. [ 671.934211][ T9749] netlink: 'syz.0.675': attribute type 11 has an invalid length. [ 671.942064][ T9749] netlink: 'syz.0.675': attribute type 13 has an invalid length. [ 672.209863][ T9749] bridge0: port 3(team0) entered disabled state [ 672.217711][ T9749] bridge0: port 2(bridge_slave_1) entered disabled state [ 672.224952][ T9749] bridge0: port 1(bridge_slave_0) entered disabled state [ 672.233190][ T9749] bridge0: entered allmulticast mode [ 672.763068][ T5797] Bluetooth: hci2: command tx timeout [ 676.350546][ T9802] netlink: 12 bytes leftover after parsing attributes in process `syz.2.684'. [ 677.667828][ T5926] usb 5-1: new high-speed USB device number 6 using dummy_hcd [ 677.974552][ T5926] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 678.007060][ T5926] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 678.027706][ T5926] usb 5-1: New USB device found, idVendor=10c4, idProduct=ea90, bcdDevice= 0.00 [ 678.036812][ T5926] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 678.036840][ T9816] loop5: detected capacity change from 0 to 512 [ 678.053595][ T9795] Bluetooth: hci2: command 0x0406 tx timeout [ 678.112638][ T5926] usb 5-1: config 0 descriptor?? [ 678.175852][ T9816] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 678.268084][ T9816] ext4 filesystem being mounted at /24/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 680.433788][ T5926] cp2112 0003:10C4:EA90.0001: unknown main item tag 0x0 [ 680.450677][ T8827] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 680.468676][ T5926] cp2112 0003:10C4:EA90.0001: hidraw0: USB HID v0.00 Device [HID 10c4:ea90] on usb-dummy_hcd.4-1/input0 [ 680.714167][ T5926] cp2112 0003:10C4:EA90.0001: error requesting version [ 680.730164][ T5926] cp2112: probe of 0003:10C4:EA90.0001 failed with error -32 [ 681.572699][ T9844] loop5: detected capacity change from 0 to 1024 [ 681.712009][ T9844] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 682.097284][ T5838] usb 5-1: USB disconnect, device number 6 [ 682.203147][ T9854] netlink: 8 bytes leftover after parsing attributes in process `syz.2.691'. [ 683.409296][ T9865] tipc: New replicast peer: 255.255.255.255 [ 683.418840][ T9865] tipc: Enabled bearer , priority 10 [ 683.430888][ T9865] netlink: 12 bytes leftover after parsing attributes in process `syz.2.693'. [ 685.238257][ T9868] binder: 9858:9868 ioctl 40182103 200000000300 returned -22 [ 685.410492][ T9860] sctp: [Deprecated]: syz.4.692 (pid 9860) Use of struct sctp_assoc_value in delayed_ack socket option. [ 685.410492][ T9860] Use struct sctp_sack_info instead [ 686.214593][ T1286] ieee802154 phy0 wpan0: encryption failed: -22 [ 686.223330][ T1286] ieee802154 phy1 wpan1: encryption failed: -22 [ 686.343229][ T8827] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 686.982575][ T9887] netlink: 28 bytes leftover after parsing attributes in process `syz.4.695'. [ 686.991752][ T9887] netlink: 28 bytes leftover after parsing attributes in process `syz.4.695'. [ 687.650766][ T9885] netlink: 68 bytes leftover after parsing attributes in process `syz.4.695'. [ 687.705165][ T9887] ubi31: attaching mtd0 [ 687.713553][ T9887] ubi31: scanning is finished [ 687.718538][ T9887] ubi31 error: ubi_read_volume_table: the layout volume was not found [ 688.078488][ T9887] ubi31 error: ubi_attach_mtd_dev: failed to attach mtd0, error -22 [ 688.911323][ T9900] binder: 9895:9900 ioctl 40182103 200000000300 returned -22 [ 692.753873][ T9930] netlink: 48 bytes leftover after parsing attributes in process `syz.0.703'. [ 696.099850][ T9905] syz.5.700 (9905) used greatest stack depth: 17672 bytes left [ 697.181524][ T9961] netlink: 4 bytes leftover after parsing attributes in process `syz.5.708'. [ 697.982693][ T9963] __vm_enough_memory: pid: 9963, comm: syz.4.711, not enough memory for the allocation [ 702.264396][ T9981] netlink: 'syz.2.714': attribute type 10 has an invalid length. [ 702.494971][ T9983] can0: slcan on ttyS3. [ 704.678274][ T9977] can0 (unregistered): slcan off ttyS3. [ 705.316292][ T28] kauditd_printk_skb: 22 callbacks suppressed [ 705.316362][ T28] audit: type=1326 audit(1761178569.679:246): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9995 comm="syz.2.717" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7db738efc9 code=0x7ffc0000 [ 705.624817][ T5926] usb 5-1: new high-speed USB device number 7 using dummy_hcd [ 705.739689][ T28] audit: type=1326 audit(1761178569.679:247): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9995 comm="syz.2.717" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7db738efc9 code=0x7ffc0000 [ 706.138025][ T5926] usb 5-1: Using ep0 maxpacket: 8 [ 706.913647][ T28] audit: type=1326 audit(1761178569.679:248): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9995 comm="syz.2.717" exe="/root/syz-executor" sig=0 arch=c000003e syscall=284 compat=0 ip=0x7f7db738efc9 code=0x7ffc0000 [ 706.970102][ T5926] usb 5-1: config 2 has an invalid interface number: 226 but max is 0 [ 707.008082][ T5926] usb 5-1: config 2 has no interface number 0 [ 707.014311][ T5926] usb 5-1: config 2 interface 226 altsetting 91 endpoint 0xD has invalid maxpacket 512, setting to 64 [ 707.047688][ T5926] usb 5-1: config 2 interface 226 altsetting 91 endpoint 0xE has invalid maxpacket 1023, setting to 64 [ 707.057598][ T28] audit: type=1326 audit(1761178569.679:249): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9995 comm="syz.2.717" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7db738efc9 code=0x7ffc0000 [ 707.066513][ T5926] usb 5-1: config 2 interface 226 altsetting 91 endpoint 0xA has invalid maxpacket 512, setting to 64 [ 707.093601][ T5926] usb 5-1: config 2 interface 226 has no altsetting 0 [ 707.104213][ T5926] usb 5-1: New USB device found, idVendor=05c8, idProduct=0403, bcdDevice=d4.d4 [ 707.117864][ T5926] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 707.126109][ T5926] usb 5-1: Product: syz [ 707.147961][ T5926] usb 5-1: Manufacturer: syz [ 707.157669][ T5926] usb 5-1: SerialNumber: syz [ 707.187921][ T28] audit: type=1326 audit(1761178569.689:250): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9995 comm="syz.2.717" exe="/root/syz-executor" sig=0 arch=c000003e syscall=46 compat=0 ip=0x7f7db738efc9 code=0x7ffc0000 [ 707.265250][ T28] audit: type=1326 audit(1761178569.689:251): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9995 comm="syz.2.717" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7db738efc9 code=0x7ffc0000 [ 707.335580][ T28] audit: type=1326 audit(1761178569.729:252): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9995 comm="syz.2.717" exe="/root/syz-executor" sig=0 arch=c000003e syscall=54 compat=0 ip=0x7f7db738efc9 code=0x7ffc0000 [ 707.721363][ T28] audit: type=1326 audit(1761178569.729:253): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9995 comm="syz.2.717" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7db738efc9 code=0x7ffc0000 [ 707.812085][ T28] audit: type=1326 audit(1761178569.729:254): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9995 comm="syz.2.717" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7db738efc9 code=0x7ffc0000 [ 707.952366][ T28] audit: type=1326 audit(1761178569.729:255): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9995 comm="syz.2.717" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f7db738efc9 code=0x7ffc0000 [ 708.173250][ T5926] usb 5-1: Found UVC 0.00 device syz (05c8:0403) [ 708.188919][ T5926] usb 5-1: No valid video chain found. [ 708.479962][ T5926] usb 5-1: USB disconnect, device number 7 [ 709.243240][ T5797] Bluetooth: hci2: command 0x0406 tx timeout [ 715.167915][T10064] Invalid option length (57448) for dns_resolver key [ 716.115204][T10066] netlink: 48 bytes leftover after parsing attributes in process `syz.4.728'. [ 719.019069][T10090] input: syz1 as /devices/virtual/input/input14 [ 719.536774][T10094] netlink: 180 bytes leftover after parsing attributes in process `syz.2.733'. [ 724.147054][T10122] netdevsim netdevsim0 netdevsim0: entered allmulticast mode [ 725.147623][T10122] netlink: 40 bytes leftover after parsing attributes in process `syz.0.738'. [ 725.168271][T10122] netlink: 80 bytes leftover after parsing attributes in process `syz.0.738'. [ 725.177347][T10122] netlink: 40 bytes leftover after parsing attributes in process `syz.0.738'. [ 725.388579][T10122] netlink: 80 bytes leftover after parsing attributes in process `syz.0.738'. [ 725.736066][T10145] netlink: 48 bytes leftover after parsing attributes in process `syz.2.741'. [ 729.833638][T10122] A link change request failed with some changes committed already. Interface ip6gre0 may have been left with an inconsistent configuration, please check. [ 747.653880][ T1286] ieee802154 phy0 wpan0: encryption failed: -22 [ 747.667587][ T1286] ieee802154 phy1 wpan1: encryption failed: -22 [ 747.680107][ T1286] aoe: packet could not be sent on ipvlan0. consider increasing tx_queue_len [ 747.689485][ T1286] aoe: packet could not be sent on ipvlan1. consider increasing tx_queue_len [ 809.090535][ T1286] ieee802154 phy0 wpan0: encryption failed: -22 [ 809.098005][ T1286] ieee802154 phy1 wpan1: encryption failed: -22 [ 809.112507][ T1286] aoe: packet could not be sent on ipvlan0. consider increasing tx_queue_len [ 809.124185][ T1286] aoe: packet could not be sent on ipvlan1. consider increasing tx_queue_len [ 870.538094][ T1286] ieee802154 phy0 wpan0: encryption failed: -22 [ 870.544598][ T1286] ieee802154 phy1 wpan1: encryption failed: -22 [ 870.566562][ T1286] aoe: packet could not be sent on ipvlan0. consider increasing tx_queue_len [ 870.576034][ T1286] aoe: packet could not be sent on ipvlan1. consider increasing tx_queue_len [ 931.972131][ T1286] ieee802154 phy0 wpan0: encryption failed: -22 [ 931.978656][ T1286] ieee802154 phy1 wpan1: encryption failed: -22 [ 931.992867][ T1286] aoe: packet could not be sent on ipvlan0. consider increasing tx_queue_len [ 932.002070][ T1286] aoe: packet could not be sent on ipvlan1. consider increasing tx_queue_len [ 993.414168][ T1286] ieee802154 phy0 wpan0: encryption failed: -22 [ 993.431134][ T1286] ieee802154 phy1 wpan1: encryption failed: -22 [ 993.445638][ T1286] aoe: packet could not be sent on ipvlan0. consider increasing tx_queue_len [ 993.455076][ T1286] aoe: packet could not be sent on ipvlan1. consider increasing tx_queue_len