last executing test programs: 16m3.62797079s ago: executing program 1 (id=65): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000480)={0x11, 0x3, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000fe050000000000000000000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200000, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000080)='sched_switch\x00', r3}, 0x10) r4 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) accept4$llc(r4, 0x0, 0x0, 0x0) 15m59.316242992s ago: executing program 1 (id=69): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000200)='./file1\x00', 0x200000, &(0x7f0000000a40)={[{@stripe={'stripe', 0x3d, 0x1}}, {@noauto_da_alloc}, {@jqfmt_vfsold}, {@data_err_ignore}, {@noauto_da_alloc}, {@delalloc}, {@resuid}, {@oldalloc}, {@jqfmt_vfsv1}]}, 0xfc, 0x550, &(0x7f0000000b00)="$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") openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x101042, 0x0) openat$sysfs(0xffffffffffffff9c, &(0x7f00000001c0)='/sys/power/pm_print_times', 0x169a82, 0x0) socket$inet6_sctp(0xa, 0x1, 0x84) r0 = syz_io_uring_setup(0x10d, &(0x7f0000000200), &(0x7f0000000340)=0x0, &(0x7f0000000280)=0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r4, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x0) recvmsg$unix(r3, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000140), 0x100}, 0x0) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) write$UHID_CREATE2(r5, &(0x7f0000000180)=ANY=[], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x9, 0x12, r5, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000080), 0x0, 0x4) syz_io_uring_submit(r1, r2, &(0x7f0000000040)=@IORING_OP_WRITE={0x17, 0x10, 0x4007, @fd_index=0x8000000, 0x2, 0x0}) io_uring_enter(r0, 0x3f70, 0xfffffffd, 0x0, 0x0, 0x0) 15m58.629240205s ago: executing program 1 (id=77): r0 = socket(0x10, 0x3, 0x0) r1 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r1, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000000000)=""/5, 0x211000, 0x1000}, 0x20) setsockopt$XDP_RX_RING(r1, 0x11b, 0x2, &(0x7f0000000040)=0x20, 0x4) socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000440)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000300)={'ipvlan1\x00', 0x0}) setsockopt$XDP_UMEM_COMPLETION_RING(r1, 0x11b, 0x6, &(0x7f0000000180)=0x20, 0x4) setsockopt$XDP_UMEM_FILL_RING(r1, 0x11b, 0x5, &(0x7f0000000140)=0x4000, 0x4) ioctl$FS_IOC_SETFLAGS(0xffffffffffffffff, 0x40088a01, 0x0) bind$xdp(r1, &(0x7f0000000100)={0x2c, 0x0, r3}, 0x10) write(r0, &(0x7f0000000000)="2400000011005f0414f9f40700090400810000003c0000000000000008000f0001000000", 0x24) r4 = socket$netlink(0x10, 0x3, 0x400000000000004) writev(r4, &(0x7f0000019440)=[{&(0x7f0000000200)="480000001400190d7ebdeb75fd0d8c562c84d8c033ed7a80ffe0090f000060000000a2bc5603ca00000f7f89000000200000004a2471083ec6991778581acb6c0101ff0000000309", 0x48}], 0x1) 15m56.883812063s ago: executing program 1 (id=83): syz_mount_image$udf(&(0x7f0000000040), &(0x7f0000005b80)='./file0\x00', 0x218008, &(0x7f0000005b40)=ANY=[@ANYRES16=0x0], 0xfe, 0x4b1, &(0x7f0000001d00)="$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") mkdir(&(0x7f0000000300)='./bus\x00', 0x0) chdir(&(0x7f00000003c0)='./bus\x00') mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) mkdir(&(0x7f00000004c0)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000400)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) syz_mount_image$msdos(&(0x7f00000011c0), &(0x7f0000001200)='./file2\x00', 0x0, &(0x7f0000001240)=ANY=[@ANYBLOB='\x00'], 0x1, 0x11aa, &(0x7f0000001280)="$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") symlink(&(0x7f0000000dc0)='./file0\x00', &(0x7f0000000cc0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') r0 = open(&(0x7f0000000140)='./file0\x00', 0x0, 0x0) mknodat$loop(r0, &(0x7f0000001600)='./file1\x00', 0x0, 0x0) chdir(&(0x7f0000000140)='./bus\x00') unlink(&(0x7f0000000180)='./file1\x00') 15m54.456007936s ago: executing program 1 (id=87): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0/file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000004b64ffec850000006d000000850000000e00000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r3}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x3, 0x16, &(0x7f0000000140)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xffffffffffffffd2, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) 15m50.959272253s ago: executing program 1 (id=95): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r1 = openat$sysctl(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/vm/drop_caches\x00', 0x1, 0x0) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r2, 0x4018620d, &(0x7f0000000100)) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000180)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0}) r4 = dup3(r3, r2, 0x0) r5 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r5, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r5, 0x4018620d, &(0x7f0000000040)) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f00000003c0)={0x8, 0x0, &(0x7f0000000000)=[@acquire], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f00000001c0)={0x4c, 0x0, &(0x7f0000000740)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3000, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) writev(r1, &(0x7f00000000c0)=[{&(0x7f0000000140)='2', 0x1}], 0x1) 15m50.620143234s ago: executing program 32 (id=95): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r1 = openat$sysctl(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/vm/drop_caches\x00', 0x1, 0x0) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r2, 0x4018620d, &(0x7f0000000100)) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000180)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0}) r4 = dup3(r3, r2, 0x0) r5 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r5, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r5, 0x4018620d, &(0x7f0000000040)) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f00000003c0)={0x8, 0x0, &(0x7f0000000000)=[@acquire], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f00000001c0)={0x4c, 0x0, &(0x7f0000000740)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3000, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) writev(r1, &(0x7f00000000c0)=[{&(0x7f0000000140)='2', 0x1}], 0x1) 13m11.836270104s ago: executing program 4 (id=540): r0 = socket$can_bcm(0x1d, 0x2, 0x2) r1 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(r1, 0x0, 0x0) connect$can_bcm(r0, 0x0, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000000)={'vcan0\x00', 0x0}) r3 = socket$nl_route(0x10, 0x3, 0x0) socket(0x1d, 0x2, 0x6) r4 = socket(0x1d, 0x2, 0x6) ioctl$ifreq_SIOCGIFINDEX_vcan(r4, 0x8933, &(0x7f0000000040)={'vcan0\x00'}) bind$can_j1939(r4, &(0x7f00000000c0)={0x1d, r2, 0x2, {0x0, 0xf0, 0x2}, 0x2}, 0x18) r5 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r5, 0x8933, &(0x7f0000000000)={'vcan0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000f00)=@newtfilter={0x24, 0x11, 0x1, 0x691522eb, 0x0, {0x0, 0x0, 0x74, r6, {0xfff1}, {}, {0xb}}}, 0x24}, 0x1, 0xf0ffffffffffff}, 0x0) 13m10.54901367s ago: executing program 4 (id=543): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x6) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$key(0xf, 0x3, 0x2) r3 = openat$snapshot(0xffffff9c, &(0x7f0000000240), 0x800, 0x0) ioctl$SNAPSHOT_FREE(r3, 0x3305) socket$nl_generic(0x10, 0x3, 0x10) 13m9.457078395s ago: executing program 4 (id=546): ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000000)={'syztnl2\x00', &(0x7f00000002c0)={'syztnl1\x00', 0x0, 0x0, 0x0, 0x0, 0x0, {{0xa, 0x4, 0x0, 0x0, 0x28, 0x0, 0x0, 0x0, 0x0, 0x0, @broadcast, @remote, {[@timestamp_prespec={0x44, 0x4}, @timestamp_prespec={0x44, 0xc, 0x0, 0x3, 0x0, [{@dev}]}, @noop]}}}}}) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='hugetlb.2MB.usage_in_bytes\x00', 0x275a, 0x0) write$binfmt_script(r2, &(0x7f0000000240), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x280000b, 0x28011, r2, 0x0) r3 = dup(r1) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000080)={0x0, 0x2, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000300)=[@textreal={0x8, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f00000001c0)={0x0, 0xd000}) ioctl$KVM_NMI(r4, 0xae9a) creat(&(0x7f0000000000)='./file0\x00', 0xd931d3864d39ddd8) ioctl$KVM_RUN(r4, 0xae80, 0x0) 13m6.095425982s ago: executing program 4 (id=552): prctl$PR_SET_VMA(0x53564d41, 0x0, &(0x7f0000ffc000/0x4000)=nil, 0x4000, &(0x7f0000000cc0)='\x90\xe5') syz_mount_image$exfat(&(0x7f0000000280), &(0x7f0000003940)='./file2\x00', 0x2218050, &(0x7f0000000140)=ANY=[], 0x1, 0x1522, &(0x7f00000002c0)="$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") r0 = socket(0x10, 0x3, 0x0) sendto$inet6(r0, &(0x7f00000017c0)="7800000018002507b9409b14ffff0b7a0204be04020714056406040c5c0009003f0006180a0000000d0085a133d0bf46d32345653610648d270005000a06024e49935ade4a460c89b6ec0cff3959547f509058ba86c902007a00004a3200040016000803010000000000e000e218d1ddf66ed538f252720000", 0x79, 0x0, 0x0, 0x0) r1 = open(&(0x7f0000000640)='./file0\x00', 0x202980, 0x0) fcntl$getflags(r1, 0x1) socket$nl_route(0x10, 0x3, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) r2 = syz_open_procfs(0x0, &(0x7f0000000000)='smaps\x00') r3 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_tx_ring(r3, 0x107, 0x5, &(0x7f00000000c0)=@req3={0x8000, 0x6, 0x8000, 0x6}, 0x1c) mmap(&(0x7f0000000000/0x2000)=nil, 0x30000, 0x2, 0x11, r3, 0x0) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) read$FUSE(r2, &(0x7f0000001800)={0x2020}, 0x1314) 13m3.723642774s ago: executing program 4 (id=555): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x80042, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000000)=0xd) dup(r0) socket$inet_smc(0x2b, 0x1, 0x0) r1 = syz_io_uring_setup(0x110, &(0x7f0000000140)={0x0, 0xfad6}, &(0x7f0000000240)=0x0, &(0x7f0000000280)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x6) sched_setscheduler(0x0, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) sendmmsg$unix(0xffffffffffffffff, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0xfffffffffffffc33, &(0x7f0000000280)=0x2) syz_io_uring_submit(r2, r3, &(0x7f00000002c0)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3}) io_uring_enter(r1, 0x47f6, 0x0, 0x0, 0x0, 0x0) 13m2.744038749s ago: executing program 4 (id=557): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) ioctl$SNDRV_CTL_IOCTL_ELEM_READ(0xffffffffffffffff, 0xc4c85512, &(0x7f0000000340)={{}, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000000000, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x6]}) r3 = memfd_create(&(0x7f0000000280)='\x00\x00\x00\x00\x00\x00z\x9b\xb6\xe8t;\xfc\x02\x00\x00\x009\xa0\x8b\x14d\xa2\xa1\xa8!\xe8\xd1\xa0\x8a\xce0\x1c\xb7\xf1\xccm\xce\xd4\xdb\x89\xe5\x8f\xe2\xb6\xd6\x9cF\xbd\xff\x14\x05\x00\x00\x00\x00\x00\x00\x00\xf3\xdc\x91\'\x06\\8\r\xfc\xeeG\xbe\x90C\x1c)5\x98\xa3\xfa\a\xf9\x98\xbb}\xeb\x86P=\xe51\x9d,\xb7\xe6_M\xbe\x19\xea#\xff[\xd1\xc3\x9a\xa3\x1b\xf9\xe9\x1d \xce1\xc9\x9f\xb0\x14\xc2\xeb\xf9\xceE\xad\xa4\x92\f\xef\x87g\xb6\xabW\xac\rP\xf42\xb7\xc8\xaajn\xd7\n\r\x802\xd7\x1b$\x95tO*\xf4\xae\xb8\xb8m\xbf\r\xd5\xbf*\xfd\xc7\x85\x1b\x8b\xe5\x97j`c\xe0\x88?\xda\x8a#t>r\xae\xe8\xc9)', 0x0) syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) execveat(r3, &(0x7f0000000000)='\x00', 0x0, 0x0, 0x1000) 13m1.794670873s ago: executing program 33 (id=557): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) ioctl$SNDRV_CTL_IOCTL_ELEM_READ(0xffffffffffffffff, 0xc4c85512, &(0x7f0000000340)={{}, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000000000, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x6]}) r3 = memfd_create(&(0x7f0000000280)='\x00\x00\x00\x00\x00\x00z\x9b\xb6\xe8t;\xfc\x02\x00\x00\x009\xa0\x8b\x14d\xa2\xa1\xa8!\xe8\xd1\xa0\x8a\xce0\x1c\xb7\xf1\xccm\xce\xd4\xdb\x89\xe5\x8f\xe2\xb6\xd6\x9cF\xbd\xff\x14\x05\x00\x00\x00\x00\x00\x00\x00\xf3\xdc\x91\'\x06\\8\r\xfc\xeeG\xbe\x90C\x1c)5\x98\xa3\xfa\a\xf9\x98\xbb}\xeb\x86P=\xe51\x9d,\xb7\xe6_M\xbe\x19\xea#\xff[\xd1\xc3\x9a\xa3\x1b\xf9\xe9\x1d \xce1\xc9\x9f\xb0\x14\xc2\xeb\xf9\xceE\xad\xa4\x92\f\xef\x87g\xb6\xabW\xac\rP\xf42\xb7\xc8\xaajn\xd7\n\r\x802\xd7\x1b$\x95tO*\xf4\xae\xb8\xb8m\xbf\r\xd5\xbf*\xfd\xc7\x85\x1b\x8b\xe5\x97j`c\xe0\x88?\xda\x8a#t>r\xae\xe8\xc9)', 0x0) syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) execveat(r3, &(0x7f0000000000)='\x00', 0x0, 0x0, 0x1000) 12m43.010406036s ago: executing program 5 (id=612): pipe2(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r2 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r2}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000040)=0x1000) ioctl$sock_SIOCGPGRP(r0, 0x8904, &(0x7f0000000080)=0x0) ptrace$peek(0x2, r3, &(0x7f00000000c0)) write$P9_RGETLOCK(r1, &(0x7f0000000040)=ANY=[], 0xffffff6a) r4 = accept4$unix(0xffffffffffffffff, 0x0, &(0x7f0000000100), 0x80800) bind$unix(r4, &(0x7f0000000140)=@file={0x0, './file0\x00'}, 0x6e) unshare(0x400) pipe2(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) tee(r0, r5, 0xfffffffffffffc01, 0x0) tee(r0, r5, 0x60000000000, 0x0) 12m41.029841946s ago: executing program 5 (id=617): r0 = openat$vsock(0xffffff9c, &(0x7f00000001c0), 0x40101, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000100)={0x0, 0x54}}, 0x0) syz_genetlink_get_family_id$wireguard(&(0x7f0000000040), 0xffffffffffffffff) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) sendmsg$RDMA_NLDEV_CMD_GET(r0, &(0x7f0000000280)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x84000000}, 0xc, &(0x7f0000000240)={0x0}, 0x1, 0x0, 0x0, 0x4008000}, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_NMI(r3, 0xae9a) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, 0x0, &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f0000000380)={[0x0, 0x100000000, 0x0, 0x0, 0x0, 0x0, 0x2004c8, 0x8000000, 0x0, 0x0, 0xfffffffffffffffe]}) ioctl$KVM_RUN(r3, 0xae80, 0x0) ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f00000002c0)={[0x400000000000002, 0x5, 0xfffffffffffffffe, 0x4, 0x2, 0x0, 0xefffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x3], 0x0, 0x41901}) ioctl$KVM_RUN(r3, 0xae80, 0x0) 12m40.637231757s ago: executing program 5 (id=622): write$nbd(0xffffffffffffffff, 0x0, 0x8a) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000380)=ANY=[@ANYBLOB="12010000000000406d0422c20000000000010902"], 0x0) r1 = socket$inet6_udp(0xa, 0x2, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000340), 0x0, &(0x7f0000000240)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) chdir(&(0x7f00000003c0)='./bus\x00') r2 = creat(&(0x7f0000000300)='./bus\x00', 0x0) io_setup(0x800, &(0x7f0000000040)=0x0) io_submit(r3, 0x8, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r2, &(0x7f0000000000), 0x200a00, 0x8800000}]) getsockopt$IP6T_SO_GET_INFO(r1, 0x29, 0x40, 0x0, &(0x7f0000000000)) 12m34.471576548s ago: executing program 5 (id=643): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x2a08000, &(0x7f00000000c0)={[{@init_itable}]}, 0xfc, 0x484, &(0x7f0000000a80)="$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") r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpuset.effective_cpus\x00', 0x275a, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cpuset.effective_cpus\x00', 0x275a, 0x0) write$cgroup_int(r1, &(0x7f0000000380), 0x101bf) open(&(0x7f0000000000)='./bus\x00', 0x401c2, 0xb) mount(&(0x7f0000000380)=@loop={'/dev/loop', 0x0}, &(0x7f0000000140)='./bus\x00', 0x0, 0x1000, 0x0) r2 = open(&(0x7f0000000000)='./bus\x00', 0x14913e, 0x0) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r4, r5, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000380)=[@text64={0x40, 0x0}], 0x1, 0x40, 0x0, 0x0) ioctl$KVM_RUN(r5, 0xae80, 0x0) write$binfmt_script(r2, &(0x7f0000000280), 0x208e24b) ioctl$EXT4_IOC_MOVE_EXT(r0, 0x40305829, &(0x7f0000000000)={0x0, 0xffffffffffffffff, 0x0, 0x40c000}) 12m31.232993464s ago: executing program 5 (id=657): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x5, 0x4, 0xfff, 0x5, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000001070000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000840)=@base={0xb, 0x8, 0x2, 0x4, 0x5, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000380)={{r1, 0xffffffffffffffff}, &(0x7f0000000b00), &(0x7f0000000300)}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r2}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x2}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000380)='mm_page_alloc\x00', r3}, 0x10) ioctl$KVM_CAP_HYPERV_ENLIGHTENED_VMCS(0xffffffffffffffff, 0x4068aea3, &(0x7f00000004c0)) ioctl$MON_IOCT_RING_SIZE(0xffffffffffffffff, 0x9204, 0xdd218) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000040)='sched_switch\x00'}, 0x10) eventfd(0x3fd) r4 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) preadv(r4, &(0x7f0000000240)=[{&(0x7f0000033a80)=""/102386, 0xfffffd6e}], 0x1, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x9, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xd, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) 12m31.048046034s ago: executing program 5 (id=659): r0 = creat(&(0x7f0000000280)='./file0\x00', 0x0) close(r0) r1 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) r2 = openat$udambuf(0xffffffffffffff9c, &(0x7f00000001c0), 0x2) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x18, 0x3, &(0x7f0000000cc0)=ANY=[@ANYBLOB="18000000000000"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000004c0)='contention_begin\x00', r3}, 0x10) r4 = memfd_create(&(0x7f0000000300)='y\x105\xfb\xf7u\x83%:r\xc2\xb9x\xa4q\xc1\xea_\x8cZ7\xe7a\x9b\x11x\x0e\xa1\xcf\x1a\x98S7\xc9\x00\x00\x00\x00\x00\x00\a\x00\x00\x00\x00\x00\x00\x04\x879\xa24\xa9am\xde\xb2\xd3\xcbZJoa\xc4\x1acB\xaa\xc1\xfb Q\xd4\xf4\x01\xa52\xe2DG\xd4\xbd{\x9f\xa9\x97\x9b@\xdb\x00b\xe1br\xb6\xea7\xe3\x10\xff\xc2\x9d\r2\x9e\x8e\x04sW\x1b\xb7\xb3\xa2\xc9&@\xca\xda\xdc\xe2/\x97X\xac\b\xb0\xc2<\x80E\x1a\xbc\xc7W\xda9VsA\xaf\xc6\xcf\xe1\xa1\xb5M\xa2\x85\xa6y\xc4J\xf1\xf7\xfcD\x95\xe3\xeb\x0f<\x91\xb0\xa8\x9eo\xebF(\x9dL\x01vRk\xaacB\x04\xa7I\v\x86EZ\x96\xd5\x14OD\\\xe8R\xe4\xcd\xec\xcc\xd1\x0fre\xe86\xcd\xeb\xc4$\x98\x06J\xd6dD\x8d_U`ji{\xab\x97\xaf;l\x1f\xaf\xb38U\xcb\xfa\xb3j\x92\f\x81\xa0\xa2-g\b\x99\x0e\x8d\x8d\x16\xd9w\\\xf8\xce\xb0j\x9d\'\x93\xef\x1d\xa0H\xcd\xbd\xd9\xaf\x12$\x8d\x16%\x8b\x00\xd5\xf3\\\x00\xbe]Et\xad*\xecj\x02\xc8\xc4\f\x04\x99\xf6\xfc', 0x3) ftruncate(r4, 0xffff) fcntl$addseals(r4, 0x409, 0x7) r5 = ioctl$UDMABUF_CREATE(r2, 0x40187542, &(0x7f00000002c0)={r4, 0x0, 0x0, 0x1000}) r6 = fcntl$dupfd(r5, 0x0, r5) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r0, 0xc00c642e, &(0x7f0000000180)={0x0, 0x0, r6}) ioctl$DRM_IOCTL_GEM_FLINK(r1, 0xc008640a, &(0x7f0000000100)={r7}) ioctl$DRM_IOCTL_GEM_CLOSE(r0, 0x40086409, &(0x7f0000000080)={r7}) 12m30.956360414s ago: executing program 34 (id=659): r0 = creat(&(0x7f0000000280)='./file0\x00', 0x0) close(r0) r1 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) r2 = openat$udambuf(0xffffffffffffff9c, &(0x7f00000001c0), 0x2) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x18, 0x3, &(0x7f0000000cc0)=ANY=[@ANYBLOB="18000000000000"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000004c0)='contention_begin\x00', r3}, 0x10) r4 = memfd_create(&(0x7f0000000300)='y\x105\xfb\xf7u\x83%:r\xc2\xb9x\xa4q\xc1\xea_\x8cZ7\xe7a\x9b\x11x\x0e\xa1\xcf\x1a\x98S7\xc9\x00\x00\x00\x00\x00\x00\a\x00\x00\x00\x00\x00\x00\x04\x879\xa24\xa9am\xde\xb2\xd3\xcbZJoa\xc4\x1acB\xaa\xc1\xfb Q\xd4\xf4\x01\xa52\xe2DG\xd4\xbd{\x9f\xa9\x97\x9b@\xdb\x00b\xe1br\xb6\xea7\xe3\x10\xff\xc2\x9d\r2\x9e\x8e\x04sW\x1b\xb7\xb3\xa2\xc9&@\xca\xda\xdc\xe2/\x97X\xac\b\xb0\xc2<\x80E\x1a\xbc\xc7W\xda9VsA\xaf\xc6\xcf\xe1\xa1\xb5M\xa2\x85\xa6y\xc4J\xf1\xf7\xfcD\x95\xe3\xeb\x0f<\x91\xb0\xa8\x9eo\xebF(\x9dL\x01vRk\xaacB\x04\xa7I\v\x86EZ\x96\xd5\x14OD\\\xe8R\xe4\xcd\xec\xcc\xd1\x0fre\xe86\xcd\xeb\xc4$\x98\x06J\xd6dD\x8d_U`ji{\xab\x97\xaf;l\x1f\xaf\xb38U\xcb\xfa\xb3j\x92\f\x81\xa0\xa2-g\b\x99\x0e\x8d\x8d\x16\xd9w\\\xf8\xce\xb0j\x9d\'\x93\xef\x1d\xa0H\xcd\xbd\xd9\xaf\x12$\x8d\x16%\x8b\x00\xd5\xf3\\\x00\xbe]Et\xad*\xecj\x02\xc8\xc4\f\x04\x99\xf6\xfc', 0x3) ftruncate(r4, 0xffff) fcntl$addseals(r4, 0x409, 0x7) r5 = ioctl$UDMABUF_CREATE(r2, 0x40187542, &(0x7f00000002c0)={r4, 0x0, 0x0, 0x1000}) r6 = fcntl$dupfd(r5, 0x0, r5) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r0, 0xc00c642e, &(0x7f0000000180)={0x0, 0x0, r6}) ioctl$DRM_IOCTL_GEM_FLINK(r1, 0xc008640a, &(0x7f0000000100)={r7}) ioctl$DRM_IOCTL_GEM_CLOSE(r0, 0x40086409, &(0x7f0000000080)={r7}) 11m50.810924668s ago: executing program 3 (id=800): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r4 = socket$inet6(0xa, 0x5, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r4, 0x29, 0x20, &(0x7f0000000200)={@private0, 0x800, 0x0, 0x1, 0x1}, 0x20) 11m48.739210397s ago: executing program 3 (id=804): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={0x0, r0}, 0x18) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r4, &(0x7f0000000240)={0x1f, 0xffff, 0x2}, 0x6) recvmmsg(r4, &(0x7f0000000600), 0x204083acb88ff8b, 0x2, 0x0) 11m44.574179856s ago: executing program 3 (id=809): landlock_create_ruleset(0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000740)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = syz_io_uring_setup(0xd2, &(0x7f0000000480), &(0x7f0000000040)=0x0, &(0x7f0000000080)=0x0) syz_io_uring_submit(r4, r5, &(0x7f00000000c0)=@IORING_OP_WRITEV={0x2, 0x0, 0x0, @fd_index=0x4, 0x0, 0x0}) io_uring_enter(r3, 0x11af, 0xdfd2, 0x1, 0x0, 0x0) setsockopt$MRT_ADD_MFC_PROXY(0xffffffffffffffff, 0x0, 0xd2, 0x0, 0x0) 11m41.824834589s ago: executing program 3 (id=811): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f00000001c0)='./file1\x00', 0x0, &(0x7f0000000000)={[{@dioread_lock}, {@dioread_nolock}]}, 0xfd, 0x586, &(0x7f0000000e80)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x42, 0x0) pwrite64(r0, &(0x7f00000008c0)="10", 0x1, 0x8000c61) r1 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file1\x00', 0x103042, 0x0) creat(&(0x7f00000000c0)='./bus\x00', 0x0) mount(&(0x7f0000000380)=@loop={'/dev/loop', 0x0}, &(0x7f0000000140)='./bus\x00', 0x0, 0x1000, 0x0) r2 = open(&(0x7f0000000140)='./bus\x00', 0x127842, 0x0) r3 = open(&(0x7f0000002000)='./bus\x00', 0x0, 0x0) write$sndseq(r2, &(0x7f0000000080)=[{0x0, 0x0, 0x0, 0x0, @time, {}, {}, @time=@time}], 0x1c) sendfile(r2, r3, 0x0, 0x1000000201005) pwritev2(r1, &(0x7f0000000500)=[{&(0x7f0000000140)='\x00', 0x1}], 0x1, 0x0, 0x0, 0x0) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000100)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x18, 0x18, 0x2, [@func_proto={0x0, 0x0, 0x0, 0xd, 0xa}, @union={0xffffffff}]}}, &(0x7f0000000f40)=""/4089, 0x32, 0xff9, 0x1, 0x0, 0x0, @void, @value}, 0x20) syz_usb_connect(0x0, 0x4a, &(0x7f0000000980)=ANY=[@ANYBLOB="120100003217a6409904581095310000000109023800010000000009040000013d78bf00053306000105240000000d240f0104000000000000000006241a000000090502"], 0x0) 11m38.154816986s ago: executing program 3 (id=825): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000180)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x11, 0xf, &(0x7f0000000340)=@ringbuf={{}, {{0x18, 0x1, 0x1, 0x0, r3}}, {}, [], {{}, {}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000001dc0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000280)={&(0x7f0000000080)='sched_switch\x00', r4}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0xe, 0x16, &(0x7f0000000940)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xffffffffffffffd2, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) 11m37.2000331s ago: executing program 3 (id=828): socket$alg(0x26, 0x5, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) mq_notify(0xffffffffffffffff, &(0x7f0000000000)={0x20000000, 0x4000000000003, 0x2, @thr={0x0, 0x0}}) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000880)={0x0, 0x0, &(0x7f0000000840)={&(0x7f00000009c0)=@bridge_getlink={0x28, 0x12, 0x101, 0x0, 0x0, {}, [@IFLA_EXT_MASK={0x8, 0x1d, 0xff}]}, 0x28}}, 0x0) 11m36.715032863s ago: executing program 35 (id=828): socket$alg(0x26, 0x5, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) mq_notify(0xffffffffffffffff, &(0x7f0000000000)={0x20000000, 0x4000000000003, 0x2, @thr={0x0, 0x0}}) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000880)={0x0, 0x0, &(0x7f0000000840)={&(0x7f00000009c0)=@bridge_getlink={0x28, 0x12, 0x101, 0x0, 0x0, {}, [@IFLA_EXT_MASK={0x8, 0x1d, 0xff}]}, 0x28}}, 0x0) 10m13.881270243s ago: executing program 8 (id=995): io_uring_setup(0x30d3, 0x0) creat(&(0x7f0000000080)='./file0\x00', 0x0) r0 = socket$tipc(0x1e, 0x2, 0x0) setsockopt$TIPC_GROUP_JOIN(r0, 0x10f, 0x87, &(0x7f0000000000)={0x40}, 0x10) r1 = gettid() timer_create(0x0, &(0x7f0000000040)={0x0, 0x21, 0x800000000004, @tid=r1}, &(0x7f0000bbdffc)) r2 = open(&(0x7f0000000300)='.\x00', 0x0, 0x0) flock(r2, 0x2) r3 = open(&(0x7f0000000300)='.\x00', 0x0, 0x0) flock(r3, 0x2) r4 = open(&(0x7f0000000300)='.\x00', 0x0, 0x0) flock(r4, 0x1) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) mount$9p_fd(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f00000002c0), 0x0, &(0x7f00000000c0)=ANY=[]) mount(0x0, &(0x7f00000006c0)='./file0\x00', 0x0, 0x0, &(0x7f0000000900)='trans=tcp,') 10m13.869941643s ago: executing program 8 (id=1000): r0 = syz_open_dev$dri(&(0x7f0000000180), 0x0, 0x0) r1 = syz_open_dev$dri(&(0x7f0000000180), 0x3ffffffffffffffd, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000100)={0x80002, 0x1, 0x6}) r2 = syz_open_dev$dri(&(0x7f0000000040), 0xd21, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r2, 0xc04064a0, &(0x7f00000004c0)={0x0, &(0x7f00000000c0)=[0x0], 0x0, 0x0, 0x0, 0x1}) socket$inet_udp(0x2, 0x2, 0x0) ioctl$DRM_IOCTL_MODE_GETCRTC(r2, 0xc06864a1, &(0x7f00000003c0)={0x0, 0x0, r3, 0x0}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, 0x0) getpid() recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) ioctl$DRM_IOCTL_MODE_GETFB2(r2, 0xc06864ce, &(0x7f0000000440)={r4, 0x0, 0x0, 0x0, 0x0, [0x0]}) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r1, 0xc00c642d, &(0x7f0000000200)={r5, 0x0, 0xffffffffffffffff}) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r0, 0xc00c642e, &(0x7f0000000000)={0x0, 0x0, r6}) close_range(r0, 0xffffffffffffffff, 0x0) 10m13.856965183s ago: executing program 8 (id=1002): socket$l2tp6(0xa, 0x2, 0x73) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000001c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'xchacha20\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000300)="c99b57381801238c09d0ff0f1d0dbd301e5a47b2f3caa73dcd2a6a370554375a", 0x20) r1 = accept4(r0, 0x0, 0x0, 0x0) recvmmsg(r1, &(0x7f0000000ac0)=[{{0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000100)=""/52, 0x34}, {&(0x7f0000003380)=""/4111, 0x100f}], 0x2}}], 0x1, 0x0, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000b40), 0x2328}}, 0x0) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000100)=ANY=[@ANYRES8, @ANYRES32, @ANYBLOB="0000000000000000400012800c0001"], 0x68}, 0x1, 0x0, 0x0, 0x20000010}, 0x0) r3 = socket$igmp6(0xa, 0x3, 0x2) r4 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r4, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(r3, 0x8983, &(0x7f0000000300)={0x0, 'syzkaller1\x00'}) write$tun(r2, &(0x7f0000000100)=ANY=[@ANYBLOB="06000000bbbbbbbbbbbbaaaaaaaaaabb88f5"], 0x72) 10m11.186271805s ago: executing program 8 (id=1010): sendmsg$NLBL_MGMT_C_LISTDEF(0xffffffffffffffff, 0x0, 0x40080) syz_mount_image$fuse(0x0, &(0x7f0000000340)='./file0\x00', 0x2112018, 0x0, 0xff, 0x0, 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000100), 0x42, 0x0) mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000000080)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4000}}) bpf$PROG_LOAD(0x5, 0x0, 0x0) syz_mount_image$ext4(&(0x7f00000000c0)='ext4\x00', &(0x7f0000000200)='./file1\x00', 0x3000006, &(0x7f0000000480)={[{@inode_readahead_blks={'inode_readahead_blks', 0x3d, 0x10000}}, {@orlov}, {@barrier_val={'barrier', 0x3d, 0x2}}, {@jqfmt_vfsv1}, {@i_version}, {@minixdf}, {@data_err_abort}, {@max_batch_time={'max_batch_time', 0x3d, 0x2}}, {@bsdgroups}, {@min_batch_time={'min_batch_time', 0x3d, 0x2}}, {@quota}]}, 0x1, 0x54f, &(0x7f0000000b00)="$eJzs3d9rW1UcAPDvTdv91nUwhopIYQ9O5tK19ccEH+aj6HCg7zO0d2U0WUaTjrUO3B7ciy8yBBEH4ru++zj8B/wrBjoYMoo++BK56U2XrUmbZdnamc8HbnvOvTc995t7v6fn5iQkgKE1kf0oRLwcEd8kEQfbto1GvnFibb/V+1dnsyWJRuPTv5JI8nWt/ZP89/688lJE/PZVxPHCxnZryysLpXI5Xczrk/XKpcna8sqJC5XSfDqfXpyemTn19sz0e+++M7BY3zj7z/ef3P7w1NdHV7/75e6hm0mcjgP5tvY4nsC19spETOTPyVicfmTHqQE0tpMk230A9GUkz/OxyPqAgzGSZz3w//dlRDSAIZXIfxhSrXFA695+QPfBz417H6zdAG2Mf3TttZHY07w32reaPHRnlN3vjg+g/ayNX/+8dTNbYnCvQwBs6dr1iDg5Orqx/0vy/q9/J3vY59E29H/w7NzOxj9vdhr/FNbHP9Fh/LO/Q+72Y+v8L9wdQDNdZeO/9zuOf9cnrcZH8toLzTHfWHL+QjnN+rYXI+JYjO3O6pvN55xavdPotq19/JctWfutsWB+HHdHdz/8mLlSvfQkMbe7dz3ilY7j32T9/Ccdzn/2fJztsY0j6a3Xum3bOv6nq/FTxOsdz/+DGa1k8/nJyeb1MNm6Kjb6+8aR37u1v93xZ+d/3+bxjyft87W1x2/jxz3/pt229Xv970o+a5Z35euulOr1xamIXcnHG9dPP3hsq97aP4v/2NHN+79O1//eiPi8x/hvHP751f7jf7qy+Oce6/w/fuHOR1/80K393s7/W83SsXxNL/1frwf4JM8dAAAAAAAA7DSFiDgQSaG4Xi4UisW193ccjn2FcrVWP36+unRxLpqflR2PsUJrpvtg2/shpvL3w7bq04/UZyLiUER8O7K3WS/OVstz2x08AAAAAAAAAAAAAAAAAAAA7BD7u3z+P/PHyHYfHfDU+cpvGF5b5v8gvukJ2JH8/4fhJf9heMl/GF7yH4aX/IfhJf9heMl/GF7yHwAAAAAAAAAAAAAAAAAAAAAAAAAAAAbq7Jkz2dJYvX91NqvPXV5eWqhePjGX1haKlaXZ4mx18VJxvlqdL6fF2Wplq79XrlYvTU3H0pXJelqrT9aWV85VqksX6+cuVErz6bl07JlEBQAAAAAAAAAAAAAAAAAAAM+X2vLKQqlcThcVFPoqjO6Mw1AYcGG7eyYAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAeOC/AAAA///ktDiZ") r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000100)='mounts\x00') r2 = open(&(0x7f0000000080)='./file1\x00', 0x10b942, 0x0) mount$bind(&(0x7f00000002c0)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f0000000000)='./file0/../file0\x00', &(0x7f0000000340)='./file0/file0\x00', 0x0, 0x89101a, 0x0) mount$bind(&(0x7f0000000040)='./file0/../file0\x00', &(0x7f0000000140)='./file0/../file0\x00', 0x0, 0x1217880, 0x0) r3 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r3, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) sendfile(r2, r1, 0x0, 0x8000000d) 10m7.330216293s ago: executing program 8 (id=1020): syz_open_dev$cec(0x0, 0x0, 0xe2000) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = syz_open_dev$dri(&(0x7f0000000180), 0x1, 0x0) r4 = syz_open_dev$dri(&(0x7f0000000180), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r4, 0xc02064b2, &(0x7f0000000340)={0xda2, 0x8169, 0x6, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r3, 0xc02064b2, &(0x7f00000000c0)={0xdb, 0x1ff, 0xb}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r3, 0xc00464b4, &(0x7f0000000400)={r5}) 10m4.045914448s ago: executing program 8 (id=1029): socket$kcm(0x21, 0x2, 0xa) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) socket$nl_rdma(0x10, 0x3, 0x14) syz_io_uring_setup(0x45b7, &(0x7f00000005c0), 0x0, 0x0) r0 = syz_io_uring_setup(0x6438, &(0x7f0000000340), &(0x7f0000000100)=0x0, &(0x7f0000000180)=0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.swap.current\x00', 0x275a, 0x0) socket(0x10, 0x3, 0x0) socket$packet(0x11, 0x3, 0x300) socket$inet6_tcp(0xa, 0x1, 0x0) r4 = socket$xdp(0x2c, 0x3, 0x0) write$FUSE_NOTIFY_INVAL_ENTRY(r3, &(0x7f0000000080)=ANY=[@ANYRES64=r4, @ANYRESOCT], 0x29) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x10012, r3, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_RECV=@use_registered_buffer) io_uring_enter(r0, 0x2, 0x0, 0x0, 0x0, 0x0) 10m1.547478949s ago: executing program 36 (id=1029): socket$kcm(0x21, 0x2, 0xa) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) socket$nl_rdma(0x10, 0x3, 0x14) syz_io_uring_setup(0x45b7, &(0x7f00000005c0), 0x0, 0x0) r0 = syz_io_uring_setup(0x6438, &(0x7f0000000340), &(0x7f0000000100)=0x0, &(0x7f0000000180)=0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.swap.current\x00', 0x275a, 0x0) socket(0x10, 0x3, 0x0) socket$packet(0x11, 0x3, 0x300) socket$inet6_tcp(0xa, 0x1, 0x0) r4 = socket$xdp(0x2c, 0x3, 0x0) write$FUSE_NOTIFY_INVAL_ENTRY(r3, &(0x7f0000000080)=ANY=[@ANYRES64=r4, @ANYRESOCT], 0x29) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x10012, r3, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_RECV=@use_registered_buffer) io_uring_enter(r0, 0x2, 0x0, 0x0, 0x0, 0x0) 12.996143821s ago: executing program 2 (id=2717): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='io.stat\x00', 0x275a, 0x0) socket$netlink(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_DROP_MEMBERSHIP(0xffffffffffffffff, 0x10e, 0x2, 0x0, 0x0) getsockopt$netlink(0xffffffffffffffff, 0x10e, 0x9, 0x0, 0x0) r1 = socket$inet6(0xa, 0x800000000000002, 0x0) setsockopt$sock_linger(r1, 0x1, 0x3c, &(0x7f0000000180)={0x200000000000001}, 0x8) sendto$inet6(r1, 0x0, 0x0, 0x4c881, &(0x7f0000000540)={0xa, 0x4e24, 0x0, @local, 0x6}, 0x1c) sendmmsg$inet6(r1, &(0x7f0000002540)=[{{0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000000040)='v', 0x1}], 0x1}}, {{0x0, 0x0, &(0x7f0000000440)=[{&(0x7f00000001c0)="f8", 0x1}], 0x11, &(0x7f00000026c0)=ANY=[], 0x318}}], 0x2, 0x400c404) bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x16, 0x0, 0x0, 0xff, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f00000002c0)='mm_page_alloc\x00', r2}, 0x10) r3 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_MCAST_MSFILTER(r3, 0x29, 0x30, 0x0, 0x5000) bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x16, 0x0, 0x4, 0xff, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000180)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00'}, 0x10) write$binfmt_script(r0, &(0x7f0000000040), 0xfecc) 12.932774681s ago: executing program 9 (id=2718): r0 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) ioctl$SNDCTL_DSP_SETFRAGMENT(r0, 0xc004500a, &(0x7f00000001c0)) ioctl$SNDCTL_DSP_SETFMT(r0, 0xc0045005, &(0x7f0000000040)=0x10000) ioctl$SNDCTL_DSP_CHANNELS(r0, 0xc0045006, &(0x7f0000000080)=0x7f) read$dsp(r0, &(0x7f00000000c0)=""/108, 0x6c) ioctl$SNDCTL_DSP_SETFMT(r0, 0xc0045005, &(0x7f0000000000)=0x1) openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) mmap$dsp(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x1, 0x13, r0, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a3200000000140000001100"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)={{0x14}, [@NFT_MSG_NEWRULE={0x4c, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x20, 0x4, 0x0, 0x1, [{0x1c, 0x1, 0x0, 0x1, @reject={{0xb}, @val={0xc, 0x2, 0x0, 0x1, [@NFTA_REJECT_TYPE={0x8, 0x1, 0x1, 0x0, 0x2}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x74}}, 0x0) ioctl$SNDCTL_DSP_SETFMT(r0, 0xc0045005, &(0x7f00000002c0)=0x81) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='net_prio.prioidx\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1000004, 0x10012, r2, 0x0) read$dsp(r0, &(0x7f0000000200)=""/168, 0xa8) 12.864112991s ago: executing program 2 (id=2720): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f00000000c0)={0x9, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x0, 0x0) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x5) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000180)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r3 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={0x0, r3}, 0x18) setsockopt$bt_l2cap_L2CAP_OPTIONS(0xffffffffffffffff, 0x6, 0x1, 0x0, 0x0) prctl$PR_TASK_PERF_EVENTS_DISABLE(0x1f) openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x40, 0x0) mount(0x0, &(0x7f0000c7f000)='./file0\x00', &(0x7f0000df9000)='nfs4\x00', 0x0, &(0x7f0000590ffe)='v4') 11.444081967s ago: executing program 6 (id=2722): getsockname$tipc(0xffffffffffffffff, 0x0, 0x0) getsockopt$MRT6(0xffffffffffffffff, 0x29, 0xce, 0x0, &(0x7f0000000080)) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$SO_TIMESTAMPING(r3, 0x1, 0x25, &(0x7f0000000080)=0x474c, 0x4) bind$inet(r3, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10) connect$inet(r3, &(0x7f0000000040)={0x2, 0x0, @multicast2}, 0x10) sendmmsg(r3, &(0x7f0000007fc0), 0x2d, 0x0) recvmmsg(r3, &(0x7f0000000040), 0x291962b, 0x45833af92e4b39ff, 0x0) 10.83634556s ago: executing program 9 (id=2723): bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='kmem_cache_free\x00'}, 0x10) syz_mount_image$ext4(&(0x7f00000000c0)='ext4\x00', &(0x7f0000000040)='./file0\x00', 0x200003, &(0x7f0000000000), 0x1, 0x636, &(0x7f0000000740)="$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") setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x4000000000000, 0x40, &(0x7f0000000ac0)=@raw={'raw\x00', 0x4001, 0x3, 0xa10, 0x0, 0xb, 0x148, 0x0, 0x148, 0x9a0, 0x240, 0x240, 0x9a0, 0x215, 0x3, 0x0, {[{{@ip={@local, @local, 0x0, 0x0, 'ip6gretap0\x00', 'veth0\x00'}, 0x2e8, 0x880, 0x8e8, 0x0, {0xff0f000000000000}, [@common=@inet=@udp={{0x30}}, @common=@unspec=@u32={{0x7e0}}]}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0x0, 0x0, '\x00', 'syz1\x00'}}}, {{@ip={@broadcast, @broadcast, 0x0, 0x0, 'team0\x00', 'netpci0\x00'}, 0xec010000, 0x70, 0x90}, @unspec=@NOTRACK={0x20}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0xa70) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0) write$binfmt_aout(r0, &(0x7f0000000180)=ANY=[], 0xff2e) ioctl$TCSETS(r0, 0x40045431, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x0, "0062ba7d82000000070000000000f7ffffff00"}) r1 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x242) ioctl$SNDRV_TIMER_IOCTL_SELECT(r1, 0x40345410, &(0x7f00000083c0)={{0x1, 0x0, 0x0, 0x0, 0x6}}) r2 = syz_open_pts(r0, 0x0) r3 = dup3(r2, r0, 0x0) syz_mount_image$vfat(&(0x7f0000000040), &(0x7f0000000000)='./file1\x00', 0x0, &(0x7f0000000080)=ANY=[], 0x1, 0x327, &(0x7f0000001540)="$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") sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) pwritev2(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000000)=0x12) syz_emit_ethernet(0xdf, &(0x7f00000002c0)=ANY=[@ANYBLOB="aaaaaaaaaaaaffffffffffff86dd609fbbb000a9000000fcfe8000000000000000000000000000aa687b0729c7651f97b6a639619ef9c34b"], 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000240)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, @fallback, r3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) 10.667830281s ago: executing program 2 (id=2725): r0 = socket$packet(0x11, 0x3, 0x300) r1 = socket(0x10, 0x3, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$BATADV_CMD_GET_MESH(r3, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={0x0, 0x92}}, 0x0) getsockname$packet(r3, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x0) r5 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r5, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)={0x2, 0xf, 0x0, 0x0, 0x11, 0x0, 0x0, 0x0, [@sadb_address={0x3, 0x6, 0x0, 0x0, 0x0, @in={0x2, 0x4e23, @multicast2}}, @sadb_address={0x3, 0x5, 0x0, 0x0, 0x0, @in={0x2, 0x0, @loopback}}, @sadb_x_sec_ctx={0x1}, @sadb_x_policy={0x8, 0x12, 0x0, 0x2, 0x0, 0x0, 0x0, {0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @in=@initdev={0xac, 0x1e, 0x0, 0x0}, @in=@initdev={0xac, 0x1e, 0x0, 0x0}}}]}, 0x88}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000007c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=@newqdisc={0x40, 0x24, 0xe0b, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_cake={{0x9}, {0x10, 0x2, [@TCA_CAKE_BASE_RATE64={0xc, 0x2, 0x80000000}]}}]}, 0x40}}, 0x0) r6 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000340)={'bridge_slave_0\x00', 0x0}) r8 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route(r8, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=@bridge_setlink={0x2c, 0x13, 0xa29, 0x0, 0x0, {0x7, 0x0, 0x0, r7}, [@IFLA_AF_SPEC={0xc, 0x1a, 0x0, 0x1, [@AF_INET={0x8, 0x4, 0x0, 0x1, {0x4, 0x2}}]}]}, 0x2c}}, 0x0) sendto$packet(0xffffffffffffffff, &(0x7f0000000280)="ffcc043b4c2f2ae4248cde238dbc64be70fcdad4129b8ba2cad05e5fda1355e1b6", 0x21, 0x24044001, &(0x7f00000002c0)={0x11, 0xec, r7, 0x1, 0x20, 0x6, @broadcast}, 0x14) bind$packet(r0, &(0x7f00000001c0)={0x11, 0x0, r4, 0x1, 0x0, 0x6, @multicast}, 0x14) sendto$packet(r0, &(0x7f0000000240)="93a749700b71659fbc09a7b50800", 0x36, 0x0, 0x0, 0x0) 10.466438172s ago: executing program 2 (id=2726): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) mmap(&(0x7f0000000000/0xa000)=nil, 0xa000, 0x0, 0x2172, 0xffffffffffffffff, 0x2b8bc000) munmap(&(0x7f0000001000/0x3000)=nil, 0x3000) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x7) symlink(&(0x7f0000000dc0)='./file0\x00', &(0x7f0000000cc0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') readlink(&(0x7f0000000240)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f0000001200)=""/4096, 0x1000) 9.305136647s ago: executing program 2 (id=2727): openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0, 0x0) r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000600)=ANY=[@ANYBLOB="12010000a3b370086d04ae08581101020301090212000d000000000904"], 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f0000000440)={0x44, &(0x7f00000001c0)={0x20, 0xe}, 0x0, &(0x7f0000000280)={0x0, 0x8, 0x1, 0x8}, &(0x7f00000002c0)={0x20, 0x80, 0x1c, {0x4, 0x8, 0x4, 0x4, 0x5, 0x9, 0x5, 0x4, 0x2, 0x5, 0x9, 0x7fff}}, &(0x7f0000000340)={0x20, 0x85, 0x4, 0xf3a}, &(0x7f0000000380)={0x20, 0x83, 0x2, 0x1}, &(0x7f00000004c0)={0x20, 0x87, 0x2, 0xfff9}, &(0x7f0000000400)={0x20, 0x89, 0x2, 0x1}}) syz_usb_control_io(r0, 0x0, &(0x7f0000000c00)={0x84, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000680)={0x2c, &(0x7f0000000300)={0x20, 0x10}, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$hid(r0, 0x0, &(0x7f00000005c0)={0x2c, &(0x7f0000000240)={0x40, 0xe, 0x1, '!'}, 0x0, 0x0, 0x0, 0x0}) bind$inet6(0xffffffffffffffff, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000580)={0x2c, &(0x7f00000007c0)={0x0, 0x5}, &(0x7f00000003c0)={0x0, 0xa, 0x1, 0x80}, 0x0, 0x0, 0x0}) 9.008715478s ago: executing program 6 (id=2729): r0 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) ioctl$SNDCTL_DSP_SETFRAGMENT(r0, 0xc004500a, &(0x7f00000001c0)) ioctl$SNDCTL_DSP_SETFMT(r0, 0xc0045005, &(0x7f0000000040)=0x10000) ioctl$SNDCTL_DSP_CHANNELS(r0, 0xc0045006, &(0x7f0000000080)=0x7f) read$dsp(r0, &(0x7f00000000c0)=""/108, 0x6c) ioctl$SNDCTL_DSP_SETFMT(r0, 0xc0045005, &(0x7f0000000000)=0x1) openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) mmap$dsp(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x1, 0x13, r0, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r1, 0x0, 0x0) ioctl$SNDCTL_DSP_SETFMT(r0, 0xc0045005, &(0x7f00000002c0)=0x81) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='net_prio.prioidx\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1000004, 0x10012, r2, 0x0) read$dsp(r0, &(0x7f0000000200)=""/168, 0xa8) 8.482972641s ago: executing program 7 (id=2731): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000b40)={0x18, 0x10, &(0x7f0000000400)=ANY=[@ANYBLOB, @ANYBLOB="da2261875f58323cf5704ca92bdcc7e39a892ad9ce2e9482b397d74faa777043c79850203e844203a9e2442046"], &(0x7f0000000080)='syzkaller\x00', 0x8, 0x0, 0x0, 0x41000, 0x48, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x37, @void, @value}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000040)=0x6) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sched_setaffinity(0x0, 0x8, &(0x7f0000000740)=0x2) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0xfffffffffffffc33, &(0x7f0000000280)=0x2) mkdir(&(0x7f0000000000)='./cgroup/../file0\x00', 0x0) r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r4 = openat$cgroup_ro(r3, &(0x7f0000000040)='cgroup.freeze\x00', 0x275a, 0x0) rmdir(&(0x7f00000001c0)='./cgroup/../file0\x00') write$cgroup_int(r4, 0x0, 0x0) openat$rdma_cm(0xffffffffffffff9c, 0x0, 0x2, 0x0) 8.146010002s ago: executing program 6 (id=2732): r0 = syz_open_dev$sndctrl(&(0x7f0000000040), 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) socket$inet(0x2, 0x6, 0x0) setsockopt$sock_int(r4, 0x1, 0x3c, 0x0, 0x0) openat$vnet(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) socket$packet(0x11, 0x3, 0x300) ioctl$SNDRV_CTL_IOCTL_ELEM_INFO(r0, 0xc1105511, &(0x7f0000000240)={{0x8, 0x0, 0x0, 0x0, 'syz1\x00'}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'syz0\x00', 0x0}) 6.4205506s ago: executing program 6 (id=2734): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8e}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0/file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000006c0)={0xffffffffffffffff, 0x0, 0x0}, 0x10) bpf$BPF_PROG_GET_FD_BY_ID(0xd, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000000)={0x0, 0xb}, 0x10, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000680)={0x6, 0x3, &(0x7f0000000000)=ANY=[@ANYBLOB='&'], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) ioctl$SIOCSIFHWADDR(r3, 0x8946, &(0x7f00000000c0)={'bridge_slave_1\x00', @random='\x00\x00\x00 \x00'}) socket$inet6(0xa, 0x8000000000080001, 0x0) r4 = open(&(0x7f0000000040)='./bus\x00', 0x44842, 0x0) pwritev2(r4, &(0x7f0000000240), 0x0, 0x1400, 0x0, 0x3) 6.287269801s ago: executing program 9 (id=2735): r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000c00)={&(0x7f0000000b40)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000bc0)={&(0x7f0000000b80)={0x14}, 0x14}}, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xb, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b7030000feffffff850000007100000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = socket$alg(0x26, 0x5, 0x0) bind$alg(r3, &(0x7f0000000240)={0x26, 'hash\x00', 0x0, 0x0, 'michael_mic-generic\x00'}, 0x58) setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, &(0x7f0000000040)="4dc07f947163300c", 0x8) r4 = accept4(r3, 0x0, 0x0, 0x0) sendmsg$kcm(r4, &(0x7f0000002b00)={0x0, 0x0, &(0x7f00000006c0)=[{&(0x7f00000001c0)="58d84c3fb4facf57280364e07062786dadf58e301ff3b64cc93ba07b97762f5fd200b5bb48de7a77878f42d34dfa31bbdb3c8fa016371c944117", 0x3a}], 0x1}, 0x20008040) sendmsg$IPCTNL_MSG_TIMEOUT_DEFAULT_GET(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={0x0}}, 0x0) ioctl$sock_SIOCOUTQ(r0, 0x5411, &(0x7f00000002c0)) r5 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f00000003c0), r2) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000000)={&(0x7f0000000040)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x2, [@func_proto={0x0, 0x0, 0x0, 0x9, 0x3}]}}, &(0x7f0000000100)=""/223, 0x26, 0xdf, 0x1, 0x0, 0x0, @void, @value}, 0x20) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.net/syz0\x00', 0x1ff) r6 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040), 0x200002, 0x0) r7 = openat$cgroup_devices(r6, &(0x7f0000000080)='devices.allow\x00', 0x2, 0x0) write$cgroup_devices(r7, &(0x7f0000000140)=ANY=[@ANYBLOB='b 75:*\tw'], 0xa) sendmsg$NLBL_CIPSOV4_C_LISTALL(r2, &(0x7f00000009c0)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000800)=ANY=[@ANYBLOB="14000000", @ANYRES16=r5, @ANYBLOB="fba7000000002bd4000004"], 0x14}}, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r1, 0x500, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 6.240673402s ago: executing program 7 (id=2737): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) mmap(&(0x7f0000000000/0xa000)=nil, 0xa000, 0x0, 0x2172, 0xffffffffffffffff, 0x2b8bc000) munmap(&(0x7f0000001000/0x3000)=nil, 0x3000) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x7) symlink(&(0x7f0000000dc0)='./file0\x00', &(0x7f0000000cc0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') readlink(&(0x7f0000000240)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f0000001200)=""/4096, 0x1000) 6.156984172s ago: executing program 2 (id=2738): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) syz_mount_image$exfat(&(0x7f0000000280), &(0x7f00000000c0)='./file2\x00', 0x810, &(0x7f00000018c0)=ANY=[], 0xfd, 0x1501, &(0x7f00000002c0)="$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") prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x0, 0x0) sendmsg$TIPC_CMD_SET_NETID(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x10}, 0x0) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x6, 0x4, 0x8, 0x8, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r3}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000005c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000040)='sched_switch\x00', r4}, 0x10) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) 6.098067722s ago: executing program 0 (id=2739): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) mmap(&(0x7f0000000000/0xa000)=nil, 0xa000, 0x0, 0x2172, 0xffffffffffffffff, 0x2b8bc000) munmap(&(0x7f0000001000/0x3000)=nil, 0x3000) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x7) symlink(&(0x7f0000000dc0)='./file0\x00', &(0x7f0000000cc0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') readlink(&(0x7f0000000240)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f0000001200)=""/4096, 0x1000) 5.867922083s ago: executing program 9 (id=2740): syz_mount_image$ext4(&(0x7f0000000280)='ext4\x00', &(0x7f0000000200)='./file1\x00', 0x200000, &(0x7f0000000040)={[{@init_itable}]}, 0xfc, 0x564, &(0x7f00000003c0)="$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") bpf$BPF_PROG_QUERY(0x10, 0x0, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x8, 0x10001, 0x9, 0x1, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xa, 0x1, 0x8, 0x8, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r2}, 0x10) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000680)={{r1}, &(0x7f0000000600), &(0x7f0000000640)='%-010d \x00'}, 0x20) r3 = socket(0x10, 0x3, 0x9) connect$netlink(r3, &(0x7f00000014c0)=@proc={0x10, 0x0, 0x25dfdbfc}, 0xc) sendmsg$TIPC_CMD_GET_MAX_PORTS(r3, &(0x7f0000000b00)={&(0x7f0000000a00), 0xc, &(0x7f0000000ac0)={&(0x7f0000000400)={0x1c}, 0xdb}}, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000740)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, &(0x7f0000000700)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000002340)={&(0x7f0000000200)='sched_switch\x00', r4}, 0x10) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000080)=@newlink={0x50, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0xffff}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @xfrm={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_XFRM_LINK={0x8, 0x1, 0x3}]}}}, @IFLA_IFNAME={0x14, 0x3, 'xfrm0\x00'}]}, 0x50}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x17, 0x0, 0x4, 0xff, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00'}, 0x10) r6 = openat$dir(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) getdents(r6, &(0x7f0000000280)=""/45, 0x2d) 4.931088847s ago: executing program 7 (id=2741): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000480)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) bpf$MAP_CREATE_TAIL_CALL(0x0, 0x0, 0x48) syz_open_dev$usbmon(&(0x7f0000000000), 0x0, 0x0) r3 = syz_io_uring_setup(0x112, &(0x7f0000000a00)={0x0, 0x0, 0x400}, &(0x7f0000000580)=0x0, &(0x7f0000000140)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r4, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r4, r5, &(0x7f00000000c0)=@IORING_OP_PROVIDE_BUFFERS={0x1f, 0x2, 0x0, 0x5, 0x0, 0x0}) io_uring_enter(r3, 0x47f6, 0x0, 0x0, 0x0, 0x0) 4.796684468s ago: executing program 6 (id=2742): openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, &(0x7f0000000300)={'batadv_slave_0\x00', 0x0}) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f00000002c0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000007300000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000140)='kmem_cache_free\x00', r3}, 0x10) r4 = open_tree(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x8100) ioctl$SNDRV_SEQ_IOCTL_QUERY_NEXT_PORT(r4, 0xc0a85352, &(0x7f0000000240)={{0x6, 0xff}, 'port1\x00', 0x80, 0x41000, 0xb04f, 0x36}) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x2) pidfd_getfd(r4, r5, 0x0) setregid(0x0, 0xffffffffffffffff) r6 = syz_mount_image$vfat(&(0x7f0000000200), &(0x7f0000000280)='./file0\x00', 0x4c, &(0x7f00000003c0)={[{@numtail}, {@shortname_win95}, {@numtail}, {@shortname_winnt}, {@shortname_win95}, {@rodir}, {@utf8}, {@shortname_mixed}, {@shortname_win95}]}, 0x0, 0x2a8, &(0x7f0000000d00)="$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") ioctl$VFAT_IOCTL_READDIR_SHORT(r6, 0x82307202, &(0x7f0000000ac0)=[{0x0, 0x0, 0x100}, {0x0, 0x0, 0x100}]) ioctl$VFAT_IOCTL_READDIR_SHORT(r6, 0x82307201, &(0x7f0000000500)=[{0x0, 0x0, 0x100}, {0x0, 0x0, 0x100}]) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000006c0)=ANY=[@ANYBLOB="340000001a000100000000000000000002000000000000000000000008000100e000000108000300", @ANYRES32=r2], 0x34}}, 0x0) r7 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/power/pm_trace', 0x0, 0x0) r8 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') mount$9p_fd(0x0, &(0x7f0000000300)='.\x00', &(0x7f0000000080), 0x0, &(0x7f00000001c0)={'trans=fd,', {'rfdno', 0x3d, r7}, 0x2c, {'wfdno', 0x3d, r8}}) 3.942744392s ago: executing program 0 (id=2743): r0 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) ioctl$SNDCTL_DSP_SETFRAGMENT(r0, 0xc004500a, &(0x7f00000001c0)) ioctl$SNDCTL_DSP_SETFMT(r0, 0xc0045005, &(0x7f0000000040)=0x10000) ioctl$SNDCTL_DSP_CHANNELS(r0, 0xc0045006, &(0x7f0000000080)=0x7f) read$dsp(r0, &(0x7f00000000c0)=""/108, 0x6c) ioctl$SNDCTL_DSP_SETFMT(r0, 0xc0045005, &(0x7f0000000000)=0x1) openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) mmap$dsp(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x1, 0x13, r0, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r1, 0x0, 0x0) ioctl$SNDCTL_DSP_SETFMT(r0, 0xc0045005, &(0x7f00000002c0)=0x81) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='net_prio.prioidx\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1000004, 0x10012, r2, 0x0) read$dsp(r0, &(0x7f0000000200)=""/168, 0xa8) 3.695256293s ago: executing program 0 (id=2744): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) mmap(&(0x7f0000000000/0xa000)=nil, 0xa000, 0x0, 0x2172, 0xffffffffffffffff, 0x2b8bc000) munmap(&(0x7f0000001000/0x3000)=nil, 0x3000) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x7) symlink(&(0x7f0000000dc0)='./file0\x00', &(0x7f0000000cc0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') readlink(&(0x7f0000000240)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f0000001200)=""/4096, 0x1000) 3.642101133s ago: executing program 7 (id=2745): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff) sched_setaffinity(0x0, 0x0, 0x0) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r3 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) connect$bt_l2cap(r3, &(0x7f0000000000), 0xe) connect$bt_l2cap(r3, &(0x7f0000000100)={0x1f, 0x0, @none}, 0xe) socket$inet6(0xa, 0x3, 0x88) syz_emit_ethernet(0x83, &(0x7f0000000240)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaf9ff030086dd601b8b97004d88c19edace00000000000000002100000002ff020000000000000000"], 0x0) 2.558144228s ago: executing program 0 (id=2746): shmget$private(0x0, 0x400000, 0x800, &(0x7f000000e000/0x400000)=nil) chdir(0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) ioctl$SNDRV_CTL_IOCTL_ELEM_READ(0xffffffffffffffff, 0xc4c85512, &(0x7f0000000280)={{0x6, 0x0, 0x0, 0x0, 'syz1\x00'}, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0xfffffffffffffffc, 0x0, 0x0, 0x0, 0x4000000000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8001]}) r3 = syz_open_dev$vbi(&(0x7f0000000000), 0x0, 0x2) ioctl$VIDIOC_S_INPUT(r3, 0xc0045627, &(0x7f00000000c0)=0x3) ioctl$VIDIOC_SUBDEV_S_DV_TIMINGS(r3, 0xc0845657, &(0x7f0000000200)={0x0, @bt={0x8a5, 0x93, 0x1, 0x3, 0xd59f80, 0x19ef, 0x7, 0x19ef, 0x3, 0x7, 0x2800, 0x6, 0x2, 0xbb6, 0x0, 0x18, {0x8, 0xffffffff}, 0xd0, 0x9}}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)) memfd_create(&(0x7f0000000180)='\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xaaSc\xf3]WhI\xf4\x89\x85!mPl\x90\xa5\x93\x19\f\x9a\xae\xd5a\x9bU5\x1a\x86\x9d)5y\xef\x90\xea5\x81\xfeO;\xd4zh?\xbdW\xe0\x84\xe6\x9d\xcb\xcd\xb6\xad3\x7fWY\x02\xa2\x8baG\x00\x0e\x8e/\xc1\xaf\xd0\xbcH9\x04\x00\x00\x00z\x16\xdf\xf3hLpLaA\x89n]>,^M\x82\x8e\xe40\x97_\x809y)Z\xeb\x9d\xbawv\xe9\xc0\x16\xdc\xf5\xcb\xdb\x96\xd6\xba@\xa7\x1bl\xca\xe0\x1e3\x81\xc6S\x86\xf7\xf0\xba\x1b\x14N\xa2\x04\xdb\xb5X\xe4y\xef\xe8\xdb\xd5r\x11\xfb\xe4v\xef\x06\xbb\x00\x96CR\xe0~5\x16=:A2\x9c\b\xd9\xa0CB\r\xe9\xb8$\xfe\x8d\xb1Gg\xa9\xac<\xbf\x10]\b9\xd9\x89\xaf\xa6\xd1\x10\x1fq\xba\x06_NW\xdb67Xv(\xa8\xce\x1b\xe6\xbd\x947\x8f)8\xe5\xb3\xac;\x7f+\xf67\xea\x1ei\x92w-)\xa1B/M\x0e7:9\xdb~V\xb7\xd5\x13^v\x14\xe6O\xea\x00\x87\x8dkG\xdf%\xebe\x83\xb97\x01| \xb3\xd8W\xe8o\x17\x97\xd9\x14o\x92\xb9\x9a\x8c\xd7\xcf\xa2\x11\xc3\xa5\xb3\xd2\xdeQ\xa7\x05\x7f\x99Lq(\xcd\\\xa2y\x14or\x1efn\xf2\x97\x96c\xda7\t,', 0x4) 2.028132961s ago: executing program 7 (id=2747): r0 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) ioctl$SNDCTL_DSP_SETFRAGMENT(r0, 0xc004500a, &(0x7f00000001c0)) ioctl$SNDCTL_DSP_SETFMT(r0, 0xc0045005, &(0x7f0000000040)=0x10000) ioctl$SNDCTL_DSP_CHANNELS(r0, 0xc0045006, &(0x7f0000000080)=0x7f) read$dsp(r0, &(0x7f00000000c0)=""/108, 0x6c) ioctl$SNDCTL_DSP_SETFMT(r0, 0xc0045005, &(0x7f0000000000)=0x1) openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) mmap$dsp(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x1, 0x13, r0, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r1, 0x0, 0x0) ioctl$SNDCTL_DSP_SETFMT(r0, 0xc0045005, &(0x7f00000002c0)=0x81) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='net_prio.prioidx\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1000004, 0x10012, r2, 0x0) read$dsp(r0, &(0x7f0000000200)=""/168, 0xa8) 1.352216134s ago: executing program 0 (id=2748): r0 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000540)='rcu_utilization\x00', r0}, 0x10) io_setup(0x7, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) syz_open_procfs(0x0, &(0x7f00000000c0)='task\x00') readlinkat(0xffffffffffffffff, 0x0, &(0x7f0000000440)=""/163, 0xa3) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) shmat(0x0, &(0x7f0000ffc000/0x2000)=nil, 0x4000) shmctl$IPC_RMID(0x0, 0x0) r4 = socket$inet6(0xa, 0x3, 0x7) setsockopt$inet6_IPV6_XFRM_POLICY(r4, 0x29, 0x23, &(0x7f0000000340)={{{@in=@private=0x1, @in=@initdev={0xac, 0x1e, 0x0, 0x0}, 0x4e20, 0x0, 0x0, 0x0, 0xa}, {0x0, 0xfffffffffffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, {0x0, 0x0, 0x0, 0x1}, 0x0, 0x0, 0x1}, {{@in6=@mcast2, 0x0, 0x33}, 0x0, @in=@multicast2, 0x0, 0x0, 0x0, 0x7}}, 0xe8) 1.346611254s ago: executing program 9 (id=2749): r0 = socket$packet(0x11, 0x3, 0x300) r1 = socket(0x10, 0x3, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$BATADV_CMD_GET_MESH(r3, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={0x0, 0x92}}, 0x0) getsockname$packet(r3, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={0x0, 0x3c}}, 0x0) r5 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r5, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)={0x2, 0xf, 0x0, 0x0, 0x11, 0x0, 0x0, 0x0, [@sadb_address={0x3, 0x6, 0x0, 0x0, 0x0, @in={0x2, 0x4e23, @multicast2}}, @sadb_address={0x3, 0x5, 0x0, 0x0, 0x0, @in={0x2, 0x0, @loopback}}, @sadb_x_sec_ctx={0x1}, @sadb_x_policy={0x8, 0x12, 0x0, 0x2, 0x0, 0x0, 0x0, {0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @in=@initdev={0xac, 0x1e, 0x0, 0x0}, @in=@initdev={0xac, 0x1e, 0x0, 0x0}}}]}, 0x88}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000007c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=@newqdisc={0x40, 0x24, 0xe0b, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_cake={{0x9}, {0x10, 0x2, [@TCA_CAKE_BASE_RATE64={0xc, 0x2, 0x80000000}]}}]}, 0x40}}, 0x0) r6 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000340)={'bridge_slave_0\x00', 0x0}) r8 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route(r8, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=@bridge_setlink={0x2c, 0x13, 0xa29, 0x0, 0x0, {0x7, 0x0, 0x0, r7}, [@IFLA_AF_SPEC={0xc, 0x1a, 0x0, 0x1, [@AF_INET={0x8, 0x4, 0x0, 0x1, {0x4, 0x2}}]}]}, 0x2c}}, 0x0) sendto$packet(0xffffffffffffffff, &(0x7f0000000280)="ffcc043b4c2f2ae4248cde238dbc64be70fcdad4129b8ba2cad05e5fda1355e1b6", 0x21, 0x24044001, &(0x7f00000002c0)={0x11, 0xec, r7, 0x1, 0x20, 0x6, @broadcast}, 0x14) bind$packet(r0, &(0x7f00000001c0)={0x11, 0x0, r4, 0x1, 0x0, 0x6, @multicast}, 0x14) sendto$packet(r0, &(0x7f0000000240)="93a749700b71659fbc09a7b50800", 0x36, 0x0, 0x0, 0x0) 1.039741305s ago: executing program 6 (id=2750): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$inet_mptcp(0x2, 0x1, 0x106) setsockopt$inet_mreqsrc(r1, 0x0, 0x28, &(0x7f0000000140)={@multicast2, @multicast2, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0xc) r2 = open_tree(0xffffffffffffff9c, &(0x7f0000000100)='\x00', 0x89901) fchdir(r2) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mount_setattr(0xffffffffffffff9c, &(0x7f0000000240)='.\x00', 0x8000, &(0x7f0000000200)={0x7}, 0x20) sendmsg$NFNL_MSG_ACCT_NEW(r0, &(0x7f00000002c0)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x10000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x20000000}, 0x4004080) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000080)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) clock_settime(0x0, &(0x7f0000003c80)={0x77359400}) 383.360329ms ago: executing program 7 (id=2751): socket$can_j1939(0x1d, 0x2, 0x7) socket$nl_route(0x10, 0x3, 0x0) socket$inet_udp(0x2, 0x2, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket(0x10, 0x3, 0x0) syz_mount_image$ext4(&(0x7f00000004c0)='ext4\x00', &(0x7f0000000500)='./bus\x00', 0x0, &(0x7f0000000240), 0x21, 0x4a6, &(0x7f0000000a40)="$eJzs3cFPG9kZAPBvBgiEkEDaHNqqbdI0bVpFscFJUJRTemlVRZGqRj31kFBwEMLGCJs00BzI/1CpkXpq/4QeKvVQKae97233tpfsYaXsbrSrsNIevJqxIYRgYDcES/j3k55m3jzj7z2sec98gF8APetcRKxFxLGIuBcRo+3rSbvEzVbJHvfyxaPp9RePppNoNu98luTt2bXY8jWZE+3nHIqIP/4u4i/Jm3HrK6vzU5VKealdLzaqi8X6yurluerUbHm2vFAqTU5Mjl+/cq10YGM9W/3P89/O3frT///3k2fvr/36b1m3RtptW8dxkFpDH9iMk+mPiFvvIlgX9LXHc6zbHeE7SSPiexFxPr//R6MvfzUBgKOs2RyN5ujWOgBw1KV5DixJC+1cwEikaaHQyuGdieG0Uqs3Lt2vLS/MtHJlYzGQ3p+rlMfbucKxGEiy+kR+/qpe2la/EhGnI+Lvg8fzemG6Vpnp5hsfAOhhJ7at/18OttZ/AOCIG+p2BwCAQ2f9B4DeY/0HgN5j/QeA3mP9B4DeY/0HgN5j/QeAnvKH27ez0lxvf/71zIOV5fnag8sz5fp8obo8XZiuLS0WZmu12fwze6p7PV+lVlucuBrLD4uNcr1RrK+s3q3Wlhcad/PP9b5bHjiUUQEAuzl99umHSUSs3Tiel9iyl4O1Go62tNsdALqmr9sdALrGbl/Qu/yMD+ywRe9rOv6J0JOD7wtwOC7+UP4fepX8P/Qu+X/oXfL/0LuazcSe/wDQY+T4Ab//BwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAgG9vJC9JWmjvBT4SaVooRJyMiLEYSO7PVcrjEXEqIj4YHBjM6hPd7jQA8JbST5L2/l8XRy+MbG89lnw1mB8j4q//vPOPh1ONxtJEdv3zzeuNJ+3rpW70HwDYy8Y6vbGOb3j54tH0RjnM/jz/TWtz0Szueru0WvqjPz8OxUBEDH+RtOst2fuVvgOIv/Y4In6w0/iTPDcy1t75dHv8LPbJQ42fvhY/zdtax+x78f0D6Av0mqfZ/HNzp/svjXP5cef7fyifod7exvy3/sb8l27Of30d5r9z+41x9b3fd2x7HPGj/p3iJ5vxkw7xL+wz/kc//un5Tm3Nf0VcjJ3jb41VbFQXi/WV1ctz1anZ8mx5oVSanJgcv37lWqmY56iLG5nqN31649Kp3cY/3CH+0B7j/8U+x//vr+/9+We7xP/Vz3d+/c/sEj9bE3+5z/hTw//tuH13Fn+mw/j3ev0v7TP+s49XZ/b5UADgENRXVuenKpXykhMnTpxsnnR7ZgLetVc3fbd7AgAAAAAAAAAAAAAAdHIY/07U7TECAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABwdH0TAAD//yyP2UE=") open(&(0x7f0000000180)='./bus\x00', 0x14927e, 0x0) open(&(0x7f0000000040)='./bus\x00', 0x2a000, 0x30) syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) socket$packet(0x11, 0xa, 0x300) socket$inet_udp(0x2, 0x2, 0x0) openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) socket$nl_route(0x10, 0x3, 0x0) r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r0, 0x107, 0x14, &(0x7f0000000080)=0xfff, 0x4) socketpair(0x1, 0x100000005, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) getpeername$packet(r1, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000040)=0x14) sendmmsg(r0, &(0x7f0000000440)=[{{&(0x7f0000000700)=@xdp={0x2c, 0x0, r2}, 0x80, &(0x7f00000004c0)=[{&(0x7f0000000180)='O', 0x36}], 0x1}}], 0x1, 0x0) 207.793879ms ago: executing program 9 (id=2752): socket$inet6_mptcp(0xa, 0x1, 0x106) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r1 = dup(r0) add_key(&(0x7f0000000580)='rxrpc\x00', 0x0, &(0x7f0000000600)="4f89fe156ef9de280d4a80c894d7c69e40dd3767d2abb8945e69", 0x1a, 0xfffffffffffffffb) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000040)=@IORING_OP_POLL_ADD={0x6, 0x2, 0x0, @fd_index=0x4, 0x0, 0x0, 0x0, {}, 0x1}) io_uring_enter(0xffffffffffffffff, 0x2ded, 0x4000, 0x0, 0x0, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000140)={'team_slave_0\x00'}) r3 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r3, &(0x7f0000514ff4)={0x10, 0x0, 0x25dfdbfd, 0x2ffffffff}, 0xc) mkdir(0x0, 0x82) mount$afs(0x0, 0x0, &(0x7f00000001c0), 0x0, &(0x7f0000000500)={[{@dyn}]}) r4 = syz_open_dev$sndctrl(&(0x7f0000000000), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_PCM_NEXT_DEVICE(r4, 0xc1205531, &(0x7f0000000040)=""/112) 0s ago: executing program 0 (id=2753): ioperm(0x0, 0x7, 0x7) prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x420000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) socket$alg(0x26, 0x5, 0x0) io_setup(0x7, &(0x7f0000000280)) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x0, 0x0}) getsockopt$inet_buf(0xffffffffffffffff, 0x0, 0x30, 0x0, &(0x7f0000001000)) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) socket(0x10, 0x2, 0x0) add_key(&(0x7f00000000c0)='pkcs7_test\x00', 0x0, 0x0, 0x0, 0xfffffffffffffffc) kernel console output (not intermixed with test programs): _version,minixdf,data_err=abort,max_batch_time=0x0000000000000002,bsdgroups,min_batch_time=0x0000000000000002,quota,,errors=continue. Quota mode: writeback. [ 439.307542][ C1] vkms_vblank_simulate: vblank timer overrun [ 439.403312][ T8628] loop7: detected capacity change from 0 to 16 [ 439.620120][ T8628] erofs: (device loop7): mounted with root inode @ nid 36. [ 439.999412][ T1421] ieee802154 phy0 wpan0: encryption failed: -22 [ 440.007598][ T1421] ieee802154 phy1 wpan1: encryption failed: -22 [ 440.857090][ T8639] attempt to access beyond end of device [ 440.857090][ T8639] loop7: rw=0, want=24, limit=16 [ 445.009529][ T8664] pit: kvm: requested 4190 ns i8254 timer period limited to 200000 ns [ 445.114129][ T8664] kvm: pic: non byte read [ 445.188348][ T8664] kvm: pic: level sensitive irq not supported [ 445.194415][ T8664] kvm: pic: non byte read [ 445.232020][ T8664] kvm: pic: level sensitive irq not supported [ 445.232169][ T8664] kvm: pic: non byte read [ 445.319050][ T8664] kvm: pic: level sensitive irq not supported [ 445.319130][ T8664] kvm: pic: non byte read [ 448.336177][ T8700] chnl_net:caif_netlink_parms(): no params data found [ 448.584249][ T8700] bridge0: port 1(bridge_slave_0) entered blocking state [ 448.613498][ T8700] bridge0: port 1(bridge_slave_0) entered disabled state [ 448.629795][ T8700] device bridge_slave_0 entered promiscuous mode [ 448.656576][ T8700] bridge0: port 2(bridge_slave_1) entered blocking state [ 448.681916][ T8700] bridge0: port 2(bridge_slave_1) entered disabled state [ 448.709454][ T8700] device bridge_slave_1 entered promiscuous mode [ 448.782577][ T8700] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 448.811335][ T8700] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 448.878093][ T8700] team0: Port device team_slave_0 added [ 448.900929][ T8700] team0: Port device team_slave_1 added [ 448.961619][ T8700] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 448.977438][ T8700] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 449.005942][ T8700] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 449.019107][ T8700] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 449.026067][ T8700] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 449.060103][ T8700] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 449.129649][ T8700] device hsr_slave_0 entered promiscuous mode [ 449.137681][ T8700] device hsr_slave_1 entered promiscuous mode [ 449.144883][ T8700] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 449.168514][ T8700] Cannot create hsr debugfs directory [ 449.397037][ T8700] netdevsim netdevsim9 netdevsim0: renamed from eth0 [ 449.421250][ T8700] netdevsim netdevsim9 netdevsim1: renamed from eth1 [ 449.441988][ T8700] netdevsim netdevsim9 netdevsim2: renamed from eth2 [ 449.480009][ T8700] netdevsim netdevsim9 netdevsim3: renamed from eth3 [ 449.657433][ T8700] 8021q: adding VLAN 0 to HW filter on device bond0 [ 449.682937][ T4210] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 449.697905][ T4210] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 449.720090][ T8700] 8021q: adding VLAN 0 to HW filter on device team0 [ 449.739561][ T4210] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 449.759308][ T4210] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 449.768327][ T4210] bridge0: port 1(bridge_slave_0) entered blocking state [ 449.775462][ T4210] bridge0: port 1(bridge_slave_0) entered forwarding state [ 449.806447][ T4210] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 449.826927][ T4210] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 449.845201][ T4210] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 449.857857][ T4210] bridge0: port 2(bridge_slave_1) entered blocking state [ 449.865004][ T4210] bridge0: port 2(bridge_slave_1) entered forwarding state [ 449.882359][ T4210] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 449.904010][ T144] netdevsim netdevsim8 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 449.940961][ T8398] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 449.950754][ T8398] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 449.963477][ T8398] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 449.972610][ T8398] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 449.981638][ T8398] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 449.992953][ T8398] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 450.001628][ T8398] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 450.011263][ T8398] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 450.034723][ T144] netdevsim netdevsim8 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 450.049582][ T8700] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 450.061489][ T8700] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 450.069888][ T4304] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 450.079041][ T4304] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 450.106475][ T144] netdevsim netdevsim8 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 450.141633][ T4241] Bluetooth: hci2: command 0x0409 tx timeout [ 450.197350][ T144] netdevsim netdevsim8 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 450.263513][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 450.277522][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 450.292784][ T8700] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 450.487013][ T144] tipc: Left network mode [ 450.596411][ T4304] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 450.605548][ T4304] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 450.639928][ T4304] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 450.649601][ T4304] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 450.663097][ T8700] device veth0_vlan entered promiscuous mode [ 450.671313][ T4304] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 450.680940][ T4304] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 450.711680][ T8700] device veth1_vlan entered promiscuous mode [ 450.756331][ T4304] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 450.774225][ T4304] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 450.786475][ T4304] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 450.801964][ T4304] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 450.819094][ T8700] device veth0_macvtap entered promiscuous mode [ 450.842155][ T8700] device veth1_macvtap entered promiscuous mode [ 450.861775][ T8700] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 450.874148][ T8700] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 450.889404][ T8700] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 450.900543][ T8700] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 450.911717][ T8700] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 450.922452][ T8700] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 450.932560][ T8700] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 450.946693][ T8700] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 450.956685][ T8700] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 450.967551][ T8700] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 450.979449][ T8700] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 451.013923][ T4304] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 451.027537][ T4304] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 451.048048][ T4304] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 451.063044][ T4304] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 451.082974][ T8700] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 451.094377][ T8700] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 451.104686][ T8700] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 451.115362][ T8700] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 451.125397][ T8700] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 451.135986][ T8700] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 451.146490][ T8700] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 451.157149][ T8700] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 451.166993][ T8700] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 451.177457][ T8700] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 451.189126][ T8700] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 451.205970][ T8398] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 451.215852][ T8398] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 451.227900][ T8700] netdevsim netdevsim9 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 451.237018][ T8700] netdevsim netdevsim9 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 451.246508][ T8700] netdevsim netdevsim9 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 451.255563][ T8700] netdevsim netdevsim9 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 451.385322][ T4304] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 451.404437][ T4304] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 451.413904][ T9] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 451.439615][ T9] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 451.461673][ T4210] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 451.476101][ T4210] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 451.667806][ T8800] netlink: 1 bytes leftover after parsing attributes in process `syz.9.1030'. [ 451.952941][ T8800] loop9: detected capacity change from 0 to 512 [ 451.991529][ T8805] rdma_op ffff88802a1681f0 conn xmit_rdma 0000000000000000 [ 452.229658][ T4241] Bluetooth: hci2: command 0x041b tx timeout [ 452.317340][ T8800] EXT4-fs (loop9): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 452.325226][ T5727] Bluetooth: hci3: command 0x0406 tx timeout [ 452.328999][ T8800] ext4 filesystem being mounted at /0/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 452.594524][ T144] device hsr_slave_0 left promiscuous mode [ 452.607650][ T144] device hsr_slave_1 left promiscuous mode [ 452.638176][ T144] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 452.665056][ T144] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 452.785130][ T144] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 452.794866][ T8822] loop7: detected capacity change from 0 to 64 [ 452.824839][ T144] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 452.953909][ T144] device bridge_slave_1 left promiscuous mode [ 453.032510][ T144] bridge0: port 2(bridge_slave_1) entered disabled state [ 453.440925][ T144] device bridge_slave_0 left promiscuous mode [ 453.812422][ T144] bridge0: port 1(bridge_slave_0) entered disabled state [ 454.060750][ T8832] loop9: detected capacity change from 0 to 16 [ 454.076420][ T144] device veth1_macvtap left promiscuous mode [ 454.092843][ T144] device veth0_macvtap left promiscuous mode [ 454.140651][ T144] device veth1_vlan left promiscuous mode [ 454.822949][ T8832] erofs: (device loop9): mounted with root inode @ nid 36. [ 454.846952][ T144] device veth0_vlan left promiscuous mode [ 454.986849][ T5727] Bluetooth: hci2: command 0x040f tx timeout [ 455.116316][ T8840] siw: device registration error -23 [ 455.129061][ T8840] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1036'. [ 455.261386][ T8841] attempt to access beyond end of device [ 455.261386][ T8841] loop9: rw=0, want=24, limit=16 [ 457.266221][ T1108] Bluetooth: hci2: command 0x0419 tx timeout [ 459.116293][ T144] team0 (unregistering): Port device team_slave_1 removed [ 459.353195][ T144] team0 (unregistering): Port device team_slave_0 removed [ 459.412817][ T8874] loop7: detected capacity change from 0 to 16 [ 459.424412][ T144] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 459.526045][ T144] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 459.574364][ T8874] erofs: (device loop7): mounted with root inode @ nid 36. [ 460.791203][ T4167] erofs: (device loop7): z_erofs_lz4_decompress: failed to decompress -26 in[46, 4050] out[9000] [ 460.879896][ T8874] erofs: (device loop7): z_erofs_lz4_decompress: failed to decompress -26 in[46, 4050] out[8192] [ 460.916532][ T144] bond0 (unregistering): Released all slaves [ 460.959865][ T26] kauditd_printk_skb: 2 callbacks suppressed [ 460.959881][ T26] audit: type=1800 audit(1733207124.766:48): pid=8874 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.7.1049" name="file3" dev="loop7" ino=89 res=0 errno=0 [ 463.081501][ T8903] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 463.095351][ T8903] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 463.103570][ T8903] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 463.169513][ T8903] tipc: Resetting bearer [ 464.065591][ T8901] loop9: detected capacity change from 0 to 2048 [ 464.114182][ T8910] loop7: detected capacity change from 0 to 256 [ 464.175820][ T8910] FAT-fs (loop7): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 464.196523][ T8901] UDF-fs: error (device loop9): udf_read_tagged: tag checksum failed, block 99: 0x27 != 0x4d [ 464.352852][ T8901] UDF-fs: error (device loop9): udf_read_tagged: tag checksum failed, block 160: 0xd2 != 0xd4 [ 466.028555][ T8901] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 466.144627][ T8924] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 466.493070][ T8927] loop7: detected capacity change from 0 to 256 [ 466.632798][ T8933] sch_tbf: burst 4398 is lower than device lo mtu (65550) ! [ 470.161977][ T8967] loop7: detected capacity change from 0 to 512 [ 470.188146][ T8956] IPVS: set_ctl: invalid protocol: 0 224.0.0.2:20002 [ 470.298458][ T8971] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1074'. [ 470.307463][ T8971] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1074'. [ 470.401834][ T8971] bridge0: port 2(bridge_slave_1) entered blocking state [ 470.409081][ T8971] bridge0: port 2(bridge_slave_1) entered forwarding state [ 470.416523][ T8971] bridge0: port 1(bridge_slave_0) entered blocking state [ 470.423641][ T8971] bridge0: port 1(bridge_slave_0) entered forwarding state [ 470.452884][ T4210] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 470.461969][ T8967] EXT4-fs (loop7): encrypted files will use data=ordered instead of data journaling mode [ 470.804044][ T8967] EXT4-fs (loop7): 1 orphan inode deleted [ 470.920613][ T8967] EXT4-fs (loop7): 1 truncate cleaned up [ 471.366446][ T8967] EXT4-fs (loop7): mounted filesystem without journal. Opts: errors=remount-ro,noinit_itable,debug_want_extra_isize=0x000000000000002a,errors=remount-ro,nodelalloc,grpjquota=,. Quota mode: none. [ 472.118632][ T8989] netlink: 8 bytes leftover after parsing attributes in process `syz.7.1070'. [ 472.131451][ T8989] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 472.143896][ T8989] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 472.151676][ T8989] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 473.000044][ T8993] loop9: detected capacity change from 0 to 256 [ 475.659648][ T9057] netlink: 'syz.0.1092': attribute type 6 has an invalid length. [ 475.946935][ T9066] loop7: detected capacity change from 0 to 256 [ 476.039074][ T9066] exfat: Deprecated parameter 'namecase' [ 476.557584][ T9066] exFAT-fs (loop7): failed to load upcase table (idx : 0x00010000, chksum : 0xb89b369d, utbl_chksum : 0xe619d30d) [ 478.417303][ T9089] loop6: detected capacity change from 0 to 256 [ 479.763729][ T9089] FAT-fs (loop6): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 481.962356][ T9100] xt_CONNSECMARK: only valid in 'mangle' or 'security' table, not 'raw' [ 481.996071][ T9103] netlink: 104 bytes leftover after parsing attributes in process `syz.7.1101'. [ 486.241428][ T9156] loop9: detected capacity change from 0 to 256 [ 486.320813][ T9156] FAT-fs (loop9): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 488.721557][ T9195] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1110'. [ 490.825435][ T9215] cgroup: fork rejected by pids controller in /syz2 [ 491.676654][ T9220] xt_nat: multiple ranges no longer supported [ 492.984905][ T9236] Cannot find set identified by id 0 to match [ 498.027648][ T9277] loop9: detected capacity change from 0 to 1024 [ 499.522155][ T9277] EXT4-fs (loop9): ext4_check_descriptors: Checksum for group 0 failed (62631!=20869) [ 499.576605][ T9277] EXT4-fs (loop9): mounted filesystem without journal. Opts: nombcache,nobarrier,norecovery,errors=remount-ro,nodiscard,. Quota mode: writeback. [ 499.587219][ T144] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 499.606157][ T144] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 1] type 2 family 0 port 20000 - 0 [ 499.641757][ T9287] chnl_net:caif_netlink_parms(): no params data found [ 499.757086][ T9277] EXT4-fs error (device loop9): htree_dirblock_to_tree:1112: inode #2: block 48: comm syz.9.1142: bad entry in directory: rec_len is smaller than minimal - offset=76, inode=16, rec_len=5, size=1024 fake=0 [ 499.798245][ T144] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 499.813518][ T144] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 1] type 2 family 0 port 20000 - 0 [ 500.938549][ T23] Bluetooth: hci1: command 0x0409 tx timeout [ 502.519363][ T1421] ieee802154 phy0 wpan0: encryption failed: -22 [ 502.525878][ T1421] ieee802154 phy1 wpan1: encryption failed: -22 [ 503.028730][ T2372] Bluetooth: hci1: command 0x041b tx timeout [ 503.271462][ T144] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 503.308950][ T144] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 1] type 2 family 0 port 20000 - 0 [ 503.492255][ T9287] bridge0: port 1(bridge_slave_0) entered blocking state [ 503.506439][ T9287] bridge0: port 1(bridge_slave_0) entered disabled state [ 503.556686][ T9287] device bridge_slave_0 entered promiscuous mode [ 503.578645][ T9287] bridge0: port 2(bridge_slave_1) entered blocking state [ 503.586272][ T9287] bridge0: port 2(bridge_slave_1) entered disabled state [ 503.609926][ T9287] device bridge_slave_1 entered promiscuous mode [ 503.720518][ T9346] xt_TCPMSS: Only works on TCP SYN packets [ 504.452754][ T2372] Bluetooth: hci4: command 0x0406 tx timeout [ 504.561582][ T9357] loop7: detected capacity change from 0 to 47 [ 504.566738][ T144] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 504.596315][ T144] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 1] type 2 family 0 port 20000 - 0 [ 505.100597][ T9363] overlayfs: failed to clone lowerpath [ 505.108675][ T2372] Bluetooth: hci1: command 0x040f tx timeout [ 505.660632][ T9287] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 505.724602][ T9357] MINIX-fs: deleted inode referenced: 9 [ 506.002749][ T9287] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 506.155853][ T9379] loop6: detected capacity change from 0 to 16 [ 506.205541][ T9287] team0: Port device team_slave_0 added [ 506.236670][ T9379] erofs: (device loop6): mounted with root inode @ nid 36. [ 506.261991][ T9287] team0: Port device team_slave_1 added [ 507.318652][ T9390] netlink: 4 bytes leftover after parsing attributes in process `syz.7.1163'. [ 507.332345][ T144] tipc: Disabling bearer [ 507.338607][ T6192] Bluetooth: hci1: command 0x0419 tx timeout [ 507.362656][ T144] tipc: Left network mode [ 508.039658][ T9287] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 508.108404][ T9287] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 508.318579][ T9287] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 509.141389][ T9411] loop7: detected capacity change from 0 to 8 [ 509.316987][ T9416] loop6: detected capacity change from 0 to 4096 [ 511.511521][ T9287] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 511.549046][ T9287] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 511.598925][ T9287] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 511.839702][ T9416] 9pnet: Insufficient options for proto=fd [ 514.160020][ T9453] loop6: detected capacity change from 0 to 4096 [ 516.681972][ T9287] device hsr_slave_0 entered promiscuous mode [ 516.740568][ T9287] device hsr_slave_1 entered promiscuous mode [ 516.831801][ T9287] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 516.868615][ T9287] Cannot create hsr debugfs directory [ 520.246470][ T9503] loop9: detected capacity change from 0 to 16 [ 520.397535][ T9503] MTD: Attempt to mount non-MTD device "/dev/loop9" [ 522.209700][ T9525] loop7: detected capacity change from 0 to 512 [ 522.475958][ T9525] EXT4-fs (loop7): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 522.566048][ T9525] ext4 filesystem being mounted at /88/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 525.752487][ T9556] dlm: no local IP address has been set [ 525.758653][ T9556] dlm: cannot start dlm midcomms -107 [ 527.372573][ T9574] loop7: detected capacity change from 0 to 128 [ 527.608536][ T9574] UDF-fs: error (device loop7): udf_read_tagged: read failed, block=256, location=256 [ 527.871558][ T9581] bridge0: port 2(bridge_slave_1) entered blocking state [ 527.879163][ T9581] bridge0: port 2(bridge_slave_1) entered listening state [ 527.887829][ T9581] bridge0: port 1(bridge_slave_0) entered blocking state [ 527.895088][ T9581] bridge0: port 1(bridge_slave_0) entered listening state [ 528.388539][ T9545] usb 8-1: new full-speed USB device number 2 using dummy_hcd [ 528.494464][ T9581] team0: Port device bridge0 added [ 528.944832][ T144] bond0: (slave wlan1): Releasing backup interface [ 529.910847][ C1] bridge0: port 2(bridge_slave_1) entered learning state [ 530.617795][ C1] bridge0: port 1(bridge_slave_0) entered learning state [ 530.786720][ T9545] usb 8-1: unable to get BOS descriptor or descriptor too short [ 531.136895][ T9287] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 531.718609][ T9545] usb 8-1: unable to read config index 0 descriptor/start: -71 [ 531.726308][ T9545] usb 8-1: can't read configurations, error -71 [ 531.763593][ T9614] loop7: detected capacity change from 0 to 256 [ 531.943805][ T9287] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 531.961928][ T9287] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 531.971605][ T9287] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 531.988414][ C1] bridge0: port 2(bridge_slave_1) entered forwarding state [ 531.995641][ C1] bridge0: topology change detected, propagating [ 532.022276][ T9614] FAT-fs (loop7): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 532.367053][ T4314] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 532.823969][ C1] bridge0: port 1(bridge_slave_0) entered forwarding state [ 532.831261][ C1] bridge0: topology change detected, propagating [ 534.911968][ T144] device hsr_slave_0 left promiscuous mode [ 534.919632][ T26] audit: type=1326 audit(1733207198.726:49): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9634 comm="syz.0.1213" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fbbeb5ccf19 code=0x0 [ 534.978895][ T26] audit: type=1326 audit(1733207198.776:50): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9634 comm="syz.0.1213" exe="/root/syz-executor" sig=31 arch=c000003e syscall=436 compat=0 ip=0x7fbbeb5ccf19 code=0x0 [ 535.001272][ T144] device hsr_slave_1 left promiscuous mode [ 535.016648][ T144] device bridge_slave_1 left promiscuous mode [ 535.039201][ T144] bridge0: port 2(bridge_slave_1) entered disabled state [ 535.066049][ T144] device bridge_slave_0 left promiscuous mode [ 535.088682][ T144] bridge0: port 1(bridge_slave_0) entered disabled state [ 535.132199][ T144] device hsr_slave_0 left promiscuous mode [ 535.149104][ T144] device hsr_slave_1 left promiscuous mode [ 535.158650][ T144] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 535.166127][ T144] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 535.191775][ T144] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 535.206224][ T9646] loop7: detected capacity change from 0 to 2048 [ 535.208553][ T144] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 535.250025][ T144] device bridge_slave_1 left promiscuous mode [ 535.256282][ T144] bridge0: port 2(bridge_slave_1) entered disabled state [ 535.278549][ T9646] EXT4-fs (loop7): Ignoring removed mblk_io_submit option [ 535.296523][ T144] device bridge_slave_0 left promiscuous mode [ 535.326563][ T144] bridge0: port 1(bridge_slave_0) entered disabled state [ 535.369666][ T9646] EXT4-fs (loop7): mounted filesystem without journal. Opts: nouid32,mblk_io_submit,i_version,,errors=continue. Quota mode: none. [ 535.403817][ T144] device veth1_macvtap left promiscuous mode [ 535.416327][ T144] device veth0_macvtap left promiscuous mode [ 535.556518][ T144] device veth1_vlan left promiscuous mode [ 535.586152][ T144] device veth0_vlan left promiscuous mode [ 535.631221][ T144] device veth1_macvtap left promiscuous mode [ 535.638711][ T144] device veth0_macvtap left promiscuous mode [ 535.652586][ T144] device veth1_vlan left promiscuous mode [ 535.663661][ T144] device veth0_vlan left promiscuous mode [ 536.915552][ T26] audit: type=1326 audit(1733207200.716:51): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9670 comm="syz.6.1217" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fb732140f19 code=0x0 [ 537.017593][ T26] audit: type=1326 audit(1733207200.816:52): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9670 comm="syz.6.1217" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fb732140f19 code=0x0 [ 537.283876][ T144] team0 (unregistering): Port device team_slave_1 removed [ 537.308260][ T144] team0 (unregistering): Port device team_slave_0 removed [ 537.336464][ T144] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 537.360461][ T144] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 537.473309][ T144] bond0 (unregistering): Released all slaves [ 537.723299][ T144] team0 (unregistering): Port device team_slave_1 removed [ 537.747121][ T144] team0 (unregistering): Port device team_slave_0 removed [ 537.805059][ T144] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 537.834832][ T144] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 538.892116][ T144] bond0 (unregistering): Released all slaves [ 538.900265][ T9683] loop6: detected capacity change from 0 to 512 [ 539.016608][ T9642] sch_tbf: burst 4398 is lower than device lo mtu (65550) ! [ 539.237252][ T9683] EXT4-fs (loop6): Ignoring removed orlov option [ 539.346828][ T9683] EXT4-fs (loop6): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 539.899948][ T9287] 8021q: adding VLAN 0 to HW filter on device bond0 [ 539.925339][ T9683] EXT4-fs (loop6): encrypted files will use data=ordered instead of data journaling mode [ 540.028193][ T9688] loop9: detected capacity change from 0 to 256 [ 540.058629][ T9287] 8021q: adding VLAN 0 to HW filter on device team0 [ 540.065722][ T4210] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 540.086848][ T4210] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 540.185225][ T9683] EXT4-fs (loop6): 1 orphan inode deleted [ 540.357381][ T9683] EXT4-fs (loop6): 1 truncate cleaned up [ 540.363882][ T9683] EXT4-fs (loop6): mounted filesystem without journal. Opts: discard,nombcache,debug_want_extra_isize=0x000000000000002a,stripe=0x0000000000000008,orlov,dioread_nolock,,errors=continue. Quota mode: none. [ 540.709398][ T4210] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 540.789204][ T4210] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 541.963112][ T4210] bridge0: port 1(bridge_slave_0) entered blocking state [ 541.970304][ T4210] bridge0: port 1(bridge_slave_0) entered forwarding state [ 541.980329][ T4210] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 541.989341][ T4210] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 542.000454][ T4210] bridge0: port 2(bridge_slave_1) entered blocking state [ 542.007537][ T4210] bridge0: port 2(bridge_slave_1) entered forwarding state [ 542.015811][ T4210] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 542.035700][ T4210] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 542.061419][ T4210] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 542.370386][ T8810] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 542.427239][ T9719] loop9: detected capacity change from 0 to 8 [ 542.445441][ T9701] Process accounting resumed [ 542.450759][ T9701] kernel write not supported for file /asound/timers (pid: 9701 comm: syz.7.1222) [ 542.467963][ T8810] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 542.528822][ T9704] : renamed from ipvlan1 [ 542.580163][ T8810] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 542.599486][ T8810] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 542.627366][ T8810] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 542.645822][ T8810] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 542.692136][ T8810] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 542.720431][ T9719] squashfs image failed sanity check [ 542.804140][ T9287] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 542.828171][ T9287] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 542.838047][ T8810] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 544.204539][ T9719] netlink: 8 bytes leftover after parsing attributes in process `syz.9.1225'. [ 544.216425][ T8810] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 544.256970][ T9732] tipc: Started in network mode [ 544.262678][ T9732] tipc: Node identity 00000000000000000000000000000001, cluster identity 4711 [ 544.272090][ T9732] tipc: New replicast peer: fe80:0000:0000:0000:0000:0000:0000:00bb [ 544.289262][ T9732] tipc: Enabled bearer , priority 10 [ 545.526984][ T13] tipc: Node number set to 1 [ 545.943904][ T8810] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 545.962059][ T8810] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 546.863148][ T9287] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 546.982078][ T9490] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 547.039654][ T9490] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 547.090620][ T9775] loop7: detected capacity change from 0 to 128 [ 547.202992][ T9780] loop9: detected capacity change from 0 to 256 [ 547.303578][ T9490] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 547.330188][ T9490] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 547.717476][ T9490] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 547.727636][ T9490] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 547.748681][ T9287] device veth0_vlan entered promiscuous mode [ 548.693507][ T9287] device veth1_vlan entered promiscuous mode [ 548.824732][ T4260] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 549.086840][ T9780] loop9: detected capacity change from 0 to 256 [ 549.110720][ T9780] exfat: Unknown parameter 'oharset' [ 549.620878][ T9798] syz.0.1242 sent an empty control message without MSG_MORE. [ 549.835716][ T8810] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 550.108130][ T8810] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 550.642974][ T9287] device veth0_macvtap entered promiscuous mode [ 550.778712][ T9803] netlink: 152 bytes leftover after parsing attributes in process `syz.9.1243'. [ 550.850588][ T9287] device veth1_macvtap entered promiscuous mode [ 550.913201][ T4389] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 550.934155][ T9803] netlink: 152 bytes leftover after parsing attributes in process `syz.9.1243'. [ 552.837596][ T9287] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 552.859550][ T9287] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 552.874838][ T9287] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 554.428495][ T9287] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 554.446784][ T9829] loop6: detected capacity change from 0 to 512 [ 554.546226][ T9287] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 554.556940][ T9287] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 554.566946][ T9287] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 554.733112][ T9287] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 554.744472][ T9287] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 554.761680][ T4389] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 554.792999][ T4389] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 555.005562][ T9287] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 555.042355][ T9829] EXT4-fs warning (device loop6): ext4_enable_quotas:6432: Failed to enable quota tracking (type=0, err=-13, ino=3). Please run e2fsck to fix. [ 555.047349][ T9287] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 556.016904][ T9287] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 556.028045][ T9287] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 556.038222][ T9287] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 556.051599][ T9829] EXT4-fs (loop6): mount failed [ 556.055725][ T9287] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 556.185300][ T9287] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 556.237152][ T9287] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 556.251513][ T9287] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 556.284402][ T9287] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 556.395540][ T9287] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 556.562198][ T9287] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 556.740220][ T9287] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 557.012899][ T4384] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 557.066870][ T4384] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 557.479598][ T9854] loop9: detected capacity change from 0 to 8 [ 559.719873][ T9852] bridge0: port 2(bridge_slave_1) entered disabled state [ 559.727457][ T9852] bridge0: port 1(bridge_slave_0) entered disabled state [ 561.876381][ T9898] loop6: detected capacity change from 0 to 2048 [ 562.458700][ T4293] Bluetooth: hci5: command 0x0409 tx timeout [ 563.083353][ T1421] ieee802154 phy0 wpan0: encryption failed: -22 [ 563.092823][ T1421] ieee802154 phy1 wpan1: encryption failed: -22 [ 563.233500][ T9909] NILFS (loop6): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 563.430656][ T9917] netlink: 'syz.9.1264': attribute type 10 has an invalid length. [ 563.438792][ T9917] netlink: 40 bytes leftover after parsing attributes in process `syz.9.1264'. [ 563.452342][ T9917] bridge0: port 3(veth1_vlan) entered blocking state [ 563.459349][ T9917] bridge0: port 3(veth1_vlan) entered disabled state [ 563.486106][ T9917] A link change request failed with some changes committed already. Interface veth1_vlan may have been left with an inconsistent configuration, please check. [ 564.240803][ T9879] chnl_net:caif_netlink_parms(): no params data found [ 564.611619][ T4293] Bluetooth: hci5: command 0x041b tx timeout [ 564.945072][ T9924] Process accounting resumed [ 564.949926][ T9924] kernel write not supported for file /asound/timers (pid: 9924 comm: syz.9.1267) [ 567.330884][ T4207] Bluetooth: hci5: command 0x040f tx timeout [ 567.700664][ T9943] loop7: detected capacity change from 0 to 8 [ 567.803797][ T9940] loop9: detected capacity change from 0 to 4096 [ 568.543910][ T9879] bridge0: port 1(bridge_slave_0) entered blocking state [ 568.590674][ T9879] bridge0: port 1(bridge_slave_0) entered disabled state [ 568.684162][ T9879] device bridge_slave_0 entered promiscuous mode [ 568.694247][ T9879] bridge0: port 2(bridge_slave_1) entered blocking state [ 568.708069][ T9879] bridge0: port 2(bridge_slave_1) entered disabled state [ 568.716895][ T9879] device bridge_slave_1 entered promiscuous mode [ 568.769148][ T9941] bridge0: port 2(bridge_slave_1) entered disabled state [ 568.776653][ T9941] bridge0: port 1(bridge_slave_0) entered disabled state [ 569.076068][ T9879] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 569.481833][ T4207] Bluetooth: hci5: command 0x0419 tx timeout [ 569.541010][ T9879] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 570.937535][ T9879] team0: Port device team_slave_0 added [ 570.982166][ T9879] team0: Port device team_slave_1 added [ 571.398768][ T9879] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 571.451886][ T9879] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 571.489883][ T9991] xt_addrtype: both incoming and outgoing interface limitation cannot be selected [ 572.388076][ T9879] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 572.567311][ T9879] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 572.588645][ T9879] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 572.695109][ T9879] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 573.202607][ T144] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 573.328523][ T144] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 1] type 2 family 0 port 20000 - 0 [ 573.412209][ T9879] device hsr_slave_0 entered promiscuous mode [ 573.490406][ T9879] device hsr_slave_1 entered promiscuous mode [ 573.532077][ T9879] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 573.568395][ T9879] Cannot create hsr debugfs directory [ 573.624834][ T144] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 573.636795][ T144] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 1] type 2 family 0 port 20000 - 0 [ 574.135239][ T144] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 574.598316][ T144] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 1] type 2 family 0 port 20000 - 0 [ 576.512616][ T144] team0: Port device netdevsim0 removed [ 576.557692][ T4207] Bluetooth: hci2: command 0x0406 tx timeout [ 577.316258][ T144] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 577.377562][ T144] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 1] type 2 family 0 port 20000 - 0 [ 577.864598][ T9879] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 578.533918][ T144] tipc: Disabling bearer [ 578.560680][ T144] tipc: Left network mode [ 580.211368][T10056] loop6: detected capacity change from 0 to 1024 [ 580.235606][ T9879] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 580.271208][T10056] EXT4-fs (loop6): Ignoring removed orlov option [ 580.298115][T10056] EXT4-fs (loop6): Ignoring removed nomblk_io_submit option [ 580.373143][ T9879] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 580.425635][T10056] EXT4-fs (loop6): mounted filesystem without journal. Opts: noblock_validity,bsddf,sysvgroups,norecovery,debug_want_extra_isize=0x0000000000000080,orlov,nogrpid,noauto_da_alloc,nomblk_io_submit,,errors=continue. Quota mode: none. [ 582.160786][ T9879] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 582.555927][ T26] audit: type=1326 audit(1733208462.365:53): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10090 comm="syz.0.1308" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbbeb5ccf19 code=0x7ffc0000 [ 582.686160][ T26] audit: type=1326 audit(1733208462.495:54): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10090 comm="syz.0.1308" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbbeb5ccf19 code=0x7ffc0000 [ 584.499807][ T26] audit: type=1326 audit(1733208463.385:55): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10090 comm="syz.0.1308" exe="/root/syz-executor" sig=0 arch=c000003e syscall=2 compat=0 ip=0x7fbbeb5ccf19 code=0x7ffc0000 [ 584.677795][ T26] audit: type=1326 audit(1733208463.385:56): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10090 comm="syz.0.1308" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbbeb5ccf19 code=0x7ffc0000 [ 584.750533][ T26] audit: type=1326 audit(1733208464.305:57): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10090 comm="syz.0.1308" exe="/root/syz-executor" sig=0 arch=c000003e syscall=5 compat=0 ip=0x7fbbeb5ccf19 code=0x7ffc0000 [ 584.776903][ T26] audit: type=1326 audit(1733208464.305:58): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10090 comm="syz.0.1308" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbbeb5ccf19 code=0x7ffc0000 [ 584.841070][T10108] loop9: detected capacity change from 0 to 2048 [ 586.290043][ T26] audit: type=1326 audit(1733208464.305:59): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10090 comm="syz.0.1308" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbbeb5ccf19 code=0x7ffc0000 [ 586.332771][ T9879] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 586.359817][T10119] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1313'. [ 586.381477][ T9879] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 586.416743][ T26] audit: type=1326 audit(1733208464.305:60): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10090 comm="syz.0.1308" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7fbbeb5ccf19 code=0x7ffc0000 [ 586.448696][ T9879] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 586.497815][ T9879] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 586.545635][ T26] audit: type=1326 audit(1733208464.305:61): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10090 comm="syz.0.1308" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbbeb5ccf19 code=0x7ffc0000 [ 586.568064][ T26] audit: type=1326 audit(1733208464.305:62): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10090 comm="syz.0.1308" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbbeb5ccf19 code=0x7ffc0000 [ 586.616618][T10108] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 590.455287][T10161] loop6: detected capacity change from 0 to 512 [ 590.517957][ T9879] 8021q: adding VLAN 0 to HW filter on device bond0 [ 590.536164][ T9879] 8021q: adding VLAN 0 to HW filter on device team0 [ 592.326237][T10169] loop9: detected capacity change from 0 to 128 [ 592.363937][T10161] EXT4-fs (loop6): Ignoring removed orlov option [ 592.380736][T10161] EXT4-fs (loop6): encrypted files will use data=ordered instead of data journaling mode [ 592.445927][T10161] EXT4-fs (loop6): 1 truncate cleaned up [ 592.455332][T10161] EXT4-fs (loop6): mounted filesystem without journal. Opts: journal_ioprio=0x0000000000000002,resuid=0x000000000000ee01,orlov,lazytime,block_validity,quota,,errors=continue. Quota mode: writeback. [ 592.519746][ T4384] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 592.527883][ T4384] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 592.565936][ T4384] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 592.837833][ T4384] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 592.840812][T10169] UDF-fs: error (device loop9): udf_read_tagged: read failed, block=256, location=256 [ 592.855654][ T4384] bridge0: port 1(bridge_slave_0) entered blocking state [ 592.862795][ T4384] bridge0: port 1(bridge_slave_0) entered forwarding state [ 592.933708][ T4384] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 593.008134][ T4384] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 593.035523][ T4384] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 593.045464][ T4384] bridge0: port 2(bridge_slave_1) entered blocking state [ 593.052636][ T4384] bridge0: port 2(bridge_slave_1) entered forwarding state [ 593.101804][ T4384] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 593.236489][ T4384] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 593.255633][ T4384] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 593.283734][ T4384] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 593.859096][ T2372] usb 10-1: new full-speed USB device number 2 using dummy_hcd [ 594.046208][ T9879] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 594.186560][ T9879] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 594.207096][ T4384] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 594.226981][ T4384] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 594.290579][ T4384] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 594.310467][ T4384] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 594.328576][ T4384] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 594.353986][ T4384] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 594.365910][ T4384] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 594.419702][ T4384] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 594.628888][ T144] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 594.636370][ T144] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 594.663442][ T144] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 594.678772][ T144] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 594.696423][ T144] device bridge_slave_1 left promiscuous mode [ 594.706544][ T144] bridge0: port 2(bridge_slave_1) entered disabled state [ 594.728223][ T144] device bridge_slave_0 left promiscuous mode [ 594.747207][ T144] bridge0: port 1(bridge_slave_0) entered disabled state [ 594.770914][ T144] device hsr_slave_0 left promiscuous mode [ 594.785719][ T144] device hsr_slave_1 left promiscuous mode [ 594.797141][ T144] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 594.812298][ T144] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 594.825348][ T144] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 594.845709][ T144] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 594.857384][ T144] device bridge_slave_1 left promiscuous mode [ 594.870761][ T144] bridge0: port 2(bridge_slave_1) entered disabled state [ 594.888558][ T144] device bridge_slave_0 left promiscuous mode [ 594.901218][ T144] bridge0: port 1(bridge_slave_0) entered disabled state [ 594.940449][ T144] device veth1_macvtap left promiscuous mode [ 594.955141][ T144] device veth0_macvtap left promiscuous mode [ 594.967921][ T144] device veth1_vlan left promiscuous mode [ 594.981505][ T144] device veth0_vlan left promiscuous mode [ 594.993575][ T144] device veth1_macvtap left promiscuous mode [ 595.005224][ T144] device veth0_macvtap left promiscuous mode [ 595.033213][ T144] device veth1_vlan left promiscuous mode [ 595.068964][ T144] device veth0_vlan left promiscuous mode [ 596.299340][ T2372] usb 10-1: unable to get BOS descriptor or descriptor too short [ 597.066897][ T2372] usb 10-1: unable to read config index 0 descriptor/start: -71 [ 597.525894][T10231] No such timeout policy "syz0" [ 597.538116][ T2372] usb 10-1: can't read configurations, error -71 [ 597.564037][T10225] netlink: 4 bytes leftover after parsing attributes in process `syz.6.1325'. [ 598.611822][T10242] loop6: detected capacity change from 0 to 128 [ 598.701923][T10244] loop9: detected capacity change from 0 to 8 [ 601.374274][T10259] loop9: detected capacity change from 0 to 256 [ 601.399632][T10259] FAT-fs (loop9): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 601.464001][T10259] FAT-fs (loop9): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 602.649680][T10273] loop7: detected capacity change from 0 to 128 [ 602.782139][T10273] UDF-fs: error (device loop7): udf_read_tagged: read failed, block=256, location=256 [ 602.827927][ T144] team0 (unregistering): Port device team_slave_1 removed [ 606.995701][ T144] team0 (unregistering): Port device team_slave_0 removed [ 607.048236][ T144] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 607.073033][ T144] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 607.084939][T10284] netlink: 4 bytes leftover after parsing attributes in process `syz.9.1344'. [ 607.478540][ T2372] usb 8-1: new full-speed USB device number 4 using dummy_hcd [ 607.791694][ T144] bond0 (unregistering): Released all slaves [ 608.586804][T10294] netlink: 4 bytes leftover after parsing attributes in process `syz.9.1347'. [ 611.008862][T10303] xt_CT: No such helper "netbios-ns" [ 611.031474][T10309] loop7: detected capacity change from 0 to 512 [ 611.144607][T10309] EXT4-fs (loop7): test_dummy_encryption requires encrypt feature [ 611.482141][T10319] input: syz0 as /devices/virtual/input/input7 [ 612.543275][ T144] team0 (unregistering): Port device team_slave_1 removed [ 613.885582][ T144] team0 (unregistering): Port device team_slave_0 removed [ 614.007546][ T144] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 615.128892][ T144] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 615.343552][ T144] bond0 (unregistering): Released all slaves [ 615.464494][ T9879] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 615.474283][ T4396] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 615.487679][ T4396] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 616.302013][T10331] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 616.449330][T10331] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 617.655776][ T9879] device veth0_vlan entered promiscuous mode [ 617.726460][ T145] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 617.756366][ T145] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 617.793136][ T145] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 617.844302][ T145] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 617.893568][ T9879] device veth1_vlan entered promiscuous mode [ 618.057860][T10372] loop7: detected capacity change from 0 to 512 [ 618.079328][T10331] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 618.109297][T10331] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 618.125171][ T9879] device veth0_macvtap entered promiscuous mode [ 618.144420][T10372] EXT4-fs (loop7): inline encryption not supported [ 618.164006][ T9879] device veth1_macvtap entered promiscuous mode [ 618.242824][T10372] EXT4-fs error (device loop7): ext4_validate_block_bitmap:438: comm syz.7.1366: bg 0: block 248: padding at end of block bitmap is not set [ 618.279164][T10372] __quota_error: 31 callbacks suppressed [ 618.279182][T10372] Quota error (device loop7): write_blk: dquota write failed [ 618.298759][T10372] Quota error (device loop7): qtree_write_dquot: Error -117 occurred while creating quota [ 618.338153][T10372] EXT4-fs error (device loop7): ext4_acquire_dquot:6197: comm syz.7.1366: Failed to acquire dquot type 1 [ 618.419988][T10372] EXT4-fs (loop7): 1 truncate cleaned up [ 618.425693][T10372] EXT4-fs (loop7): mounted filesystem without journal. Opts: discard,inlinecrypt,,errors=continue. Quota mode: writeback. [ 618.547629][T10372] ext4 filesystem being mounted at /122/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 618.769590][T10331] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 618.804435][T10331] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 620.086144][T10411] xt_CT: No such helper "netbios-ns" [ 620.119921][T10407] loop9: detected capacity change from 0 to 1024 [ 621.770369][ T13] Bluetooth: hci1: command 0x0409 tx timeout [ 621.978108][T10331] hfsplus: b-tree write err: -5, ino 8 [ 622.287805][T10425] netlink: 'syz.9.1373': attribute type 12 has an invalid length. [ 623.950366][ T4207] Bluetooth: hci1: command 0x041b tx timeout [ 623.950492][T10442] tipc: Started in network mode [ 623.962164][T10442] tipc: Node identity 101, cluster identity 4711 [ 623.968601][T10442] tipc: Node number set to 257 [ 624.305856][ T1421] ieee802154 phy0 wpan0: encryption failed: -22 [ 624.313161][ T1421] ieee802154 phy1 wpan1: encryption failed: -22 [ 624.919006][T10397] chnl_net:caif_netlink_parms(): no params data found [ 625.490153][T10397] bridge0: port 1(bridge_slave_0) entered blocking state [ 625.516425][T10397] bridge0: port 1(bridge_slave_0) entered disabled state [ 625.575220][T10397] device bridge_slave_0 entered promiscuous mode [ 625.607344][T10397] bridge0: port 2(bridge_slave_1) entered blocking state [ 625.641980][T10397] bridge0: port 2(bridge_slave_1) entered disabled state [ 625.675913][T10397] device bridge_slave_1 entered promiscuous mode [ 625.764612][T10397] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 626.000357][ T4207] Bluetooth: hci1: command 0x040f tx timeout [ 626.011020][T10397] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 626.191631][T10397] team0: Port device team_slave_0 added [ 626.226509][T10397] team0: Port device team_slave_1 added [ 626.294954][T10397] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 626.318535][T10397] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 626.405819][T10397] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 626.442430][T10397] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 626.468439][T10397] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 626.555757][T10397] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 626.793426][T10397] device hsr_slave_0 entered promiscuous mode [ 626.826669][T10397] device hsr_slave_1 entered promiscuous mode [ 626.866313][T10397] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 626.898688][T10397] Cannot create hsr debugfs directory [ 628.078255][ T4207] Bluetooth: hci1: command 0x0419 tx timeout [ 628.450688][T10495] loop6: detected capacity change from 0 to 1024 [ 629.879440][T10505] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 629.919784][T10508] xt_CT: No such helper "netbios-ns" [ 630.177500][T10510] loop7: detected capacity change from 0 to 512 [ 630.365008][T10519] sch_tbf: burst 274 is lower than device lo mtu (65550) ! [ 631.031635][T10510] EXT4-fs (loop7): revision level too high, forcing read-only mode [ 631.069644][T10510] EXT4-fs (loop7): orphan cleanup on readonly fs [ 631.178947][T10510] Quota error (device loop7): do_check_range: Getting dqdh_prev_free 16777216 out of range 0-5 [ 631.250452][ T145] hfsplus: b-tree write err: -5, ino 8 [ 631.278946][T10510] Quota error (device loop7): qtree_write_dquot: Error -117 occurred while creating quota [ 631.360083][T10510] EXT4-fs error (device loop7): ext4_acquire_dquot:6197: comm syz.7.1387: Failed to acquire dquot type 1 [ 631.443847][T10510] EXT4-fs error (device loop7): ext4_validate_block_bitmap:438: comm syz.7.1387: bg 0: block 40: padding at end of block bitmap is not set [ 631.508735][T10510] EXT4-fs error (device loop7) in ext4_mb_clear_bb:6183: Corrupt filesystem [ 631.553132][T10510] EXT4-fs (loop7): 1 truncate cleaned up [ 631.566315][T10397] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 631.579770][T10510] EXT4-fs (loop7): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 631.645554][T10397] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 631.894671][T10397] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 632.033828][T10545] xt_CT: You must specify a L4 protocol and not use inversions on it [ 633.105871][T10397] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 633.211942][T10552] loop9: detected capacity change from 0 to 512 [ 633.733290][T10552] EXT4-fs (loop9): encrypted files will use data=ordered instead of data journaling mode [ 633.948107][T10552] EXT4-fs (loop9): 1 orphan inode deleted [ 633.988506][T10552] EXT4-fs (loop9): 1 truncate cleaned up [ 633.994209][T10552] EXT4-fs (loop9): mounted filesystem without journal. Opts: errors=remount-ro,noinit_itable,debug_want_extra_isize=0x000000000000002a,errors=remount-ro,nodelalloc,grpjquota=,. Quota mode: none. [ 636.091958][T10397] 8021q: adding VLAN 0 to HW filter on device bond0 [ 636.182982][T10397] 8021q: adding VLAN 0 to HW filter on device team0 [ 636.315547][ T4304] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 636.355069][T10576] uffd: Set unprivileged_userfaultfd sysctl knob to 1 if kernel faults must be handled without obtaining CAP_SYS_PTRACE capability [ 636.370853][ T4304] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 636.395952][ T4304] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 636.421661][ T4304] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 636.441286][ T4304] bridge0: port 1(bridge_slave_0) entered blocking state [ 636.448454][ T4304] bridge0: port 1(bridge_slave_0) entered forwarding state [ 636.499120][ T4304] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 636.579839][ T4304] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 636.624054][ T4304] bridge0: port 2(bridge_slave_1) entered blocking state [ 636.631390][ T4304] bridge0: port 2(bridge_slave_1) entered forwarding state [ 636.665446][ T4304] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 636.682298][T10331] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 636.735381][T10331] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 636.795081][T10331] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 636.832146][T10331] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 636.860775][T10331] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 636.895703][T10331] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 636.921466][T10331] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 636.955520][T10331] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 636.981629][T10331] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 637.126237][T10331] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 637.154227][T10331] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 637.174157][T10397] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 637.439001][ T4304] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 637.446745][ T4304] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 637.482319][T10397] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 637.562040][ T9490] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 637.580879][ T9490] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 637.645219][ T9490] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 637.659678][ T9490] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 637.700171][ T9490] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 637.714883][ T9490] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 637.748206][T10397] device veth0_vlan entered promiscuous mode [ 637.795156][T10397] device veth1_vlan entered promiscuous mode [ 637.846584][ T9490] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 637.862893][ T9490] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 637.875734][ T9490] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 637.888133][ T9490] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 637.917169][T10397] device veth0_macvtap entered promiscuous mode [ 637.930937][T10397] device veth1_macvtap entered promiscuous mode [ 637.950299][T10397] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 637.962467][T10397] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 637.982935][T10397] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 638.004037][T10397] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 638.025480][T10397] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 638.040348][T10397] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 638.056756][T10397] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 638.083993][T10331] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 638.092496][T10331] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 638.101312][T10331] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 638.111355][T10331] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 638.125502][T10397] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 638.142118][T10397] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 638.152869][T10397] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 638.169553][T10397] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 638.180863][T10397] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 638.192115][T10397] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 638.204475][T10397] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 638.225905][T10331] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 638.240869][T10331] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 638.273154][T10397] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 638.299787][T10397] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 638.318134][T10397] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 638.347527][T10397] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 638.635821][T10625] loop6: detected capacity change from 0 to 256 [ 638.692743][T10625] exfat: Unknown parameter ';Å.±[ì{Å>ñ™Ø/>Ä"G|ùwæŸýoù' [ 639.944460][T10629] loop7: detected capacity change from 0 to 1024 [ 639.961469][ T4304] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 639.976996][ T4304] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 640.033736][T10331] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 640.046168][T10331] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 640.289807][ T4384] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 640.297867][ T4384] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 641.999208][ T4210] hfsplus: b-tree write err: -5, ino 8 [ 642.161256][T10636] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1418'. [ 642.509062][T10657] loop6: detected capacity change from 0 to 4096 [ 643.532875][T10660] usb usb1: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 643.570108][T10666] NILFS (loop6): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 643.620669][T10667] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1413'. [ 644.844514][T10688] x_tables: ip6_tables: CLASSIFY target: used from hooks PREROUTING, but only usable from FORWARD/OUTPUT/POSTROUTING [ 644.858509][ T144] device hsr_slave_0 left promiscuous mode [ 645.761931][ T144] device hsr_slave_1 left promiscuous mode [ 645.827217][T10694] misc userio: No port type given on /dev/userio [ 646.268649][ T144] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 646.453651][ T144] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 646.496747][ T144] device bridge_slave_1 left promiscuous mode [ 646.503630][ T144] bridge0: port 2(bridge_slave_1) entered disabled state [ 646.515133][ T144] device bridge_slave_0 left promiscuous mode [ 646.522573][ T144] bridge0: port 1(bridge_slave_0) entered disabled state [ 646.563834][ T144] device veth1_macvtap left promiscuous mode [ 646.634538][ T144] device veth0_macvtap left promiscuous mode [ 646.722475][ T144] device veth1_vlan left promiscuous mode [ 646.772252][ T144] device veth0_vlan left promiscuous mode [ 647.865240][T10714] xt_nat: multiple ranges no longer supported [ 650.611442][ T144] team0 (unregistering): Port device team_slave_1 removed [ 650.763089][ T144] team0 (unregistering): Port device team_slave_0 removed [ 650.774198][T10730] loop9: detected capacity change from 0 to 256 [ 650.790466][ T144] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 650.819620][ T144] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 652.084889][ T144] bond0 (unregistering): Released all slaves [ 653.665084][ T26] audit: type=1326 audit(1733208533.475:94): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10757 comm="syz.2.1437" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fd8b82fff19 code=0x0 [ 653.737853][T10756] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2 [ 653.748164][T10756] platform regulatory.0: Falling back to sysfs fallback for: regulatory.db [ 655.887632][T10793] loop7: detected capacity change from 0 to 47 [ 656.378926][T10809] device vlan2 entered promiscuous mode [ 656.384660][T10809] device bond0 entered promiscuous mode [ 656.391973][T10809] device bond_slave_0 entered promiscuous mode [ 656.398745][T10809] device bond_slave_1 entered promiscuous mode [ 656.407692][T10809] IPv6: ADDRCONF(NETDEV_CHANGE): vlan2: link becomes ready [ 656.416541][ T9490] IPv6: ADDRCONF(NETDEV_CHANGE): vlan2: link becomes ready [ 665.420606][T10869] loop7: detected capacity change from 0 to 40427 [ 665.703838][T10869] F2FS-fs (loop7): Invalid log_blocksize (268), supports only 12 [ 665.712753][T10869] F2FS-fs (loop7): Can't find valid F2FS filesystem in 1th superblock [ 665.749055][T10869] F2FS-fs (loop7): invalid crc value [ 667.252019][T10869] F2FS-fs (loop7): Found nat_bits in checkpoint [ 667.310388][T10869] F2FS-fs (loop7): Try to recover 1th superblock, ret: 0 [ 667.317822][T10869] F2FS-fs (loop7): Mounted with checkpoint version = 48b305e5 [ 668.633919][T10894] netlink: 'syz.9.1469': attribute type 5 has an invalid length. [ 672.772506][T10331] attempt to access beyond end of device [ 672.772506][T10331] loop7: rw=1, want=45112, limit=40427 [ 686.946318][ T1421] ieee802154 phy0 wpan0: encryption failed: -22 [ 686.983041][ T1421] ieee802154 phy1 wpan1: encryption failed: -22 [ 688.237305][T11045] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1504'. [ 689.335387][T11059] loop6: detected capacity change from 0 to 256 [ 689.598540][T11059] FAT-fs (loop6): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 691.819437][T11096] misc userio: No port type given on /dev/userio [ 692.646201][T11101] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 692.828677][T11104] netlink: 12 bytes leftover after parsing attributes in process `syz.9.1515'. [ 694.362381][T11120] device wlan0 entered promiscuous mode [ 694.368532][T11120] device macvtap1 entered promiscuous mode [ 695.275820][T11125] netlink: 'syz.6.1521': attribute type 28 has an invalid length. [ 695.585736][T11138] loop6: detected capacity change from 0 to 512 [ 697.078475][T11138] EXT4-fs (loop6): Ignoring removed oldalloc option [ 697.085592][T11138] EXT4-fs (loop6): encrypted files will use data=ordered instead of data journaling mode [ 697.749468][T11138] EXT4-fs warning (device loop6): ext4_expand_extra_isize_ea:2816: Unable to expand inode 11. Delete some EAs or run e2fsck. [ 697.763554][T11138] EXT4-fs (loop6): 1 truncate cleaned up [ 697.769312][T11138] EXT4-fs (loop6): mounted filesystem without journal. Opts: quota,oldalloc,barrier=0x0000000000000003,debug_want_extra_isize=0x0000000000000080,block_validity,jqfmt=vfsv1,,errors=continue. Quota mode: writeback. [ 700.394043][T11163] loop7: detected capacity change from 0 to 256 [ 700.555421][T11163] FAT-fs (loop7): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 700.569745][T11159] loop9: detected capacity change from 0 to 2048 [ 701.449223][T11159] EXT4-fs (loop9): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 701.808153][T11184] can: request_module (can-proto-0) failed. [ 703.156765][T11200] loop7: detected capacity change from 0 to 40427 [ 703.213637][T11200] F2FS-fs (loop7): Unrecognized mount option "memory=low" or missing value [ 703.243772][T11208] loop6: detected capacity change from 0 to 256 [ 703.385288][T11210] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1542'. [ 704.338950][T11228] loop9: detected capacity change from 0 to 512 [ 705.592477][T11228] EXT4-fs (loop9): Ignoring removed oldalloc option [ 705.599634][T11228] EXT4-fs (loop9): encrypted files will use data=ordered instead of data journaling mode [ 705.734882][T11228] EXT4-fs (loop9): 1 truncate cleaned up [ 705.740923][T11228] EXT4-fs (loop9): mounted filesystem without journal. Opts: quota,oldalloc,barrier=0x0000000000000003,debug_want_extra_isize=0x0000000000000080,block_validity,jqfmt=vfsv1,,errors=continue. Quota mode: writeback. [ 706.769812][T11263] loop6: detected capacity change from 0 to 512 [ 707.861626][T11263] EXT4-fs (loop6): mounted filesystem without journal. Opts: errors=remount-ro,. Quota mode: writeback. [ 707.904946][T11272] netlink: 12 bytes leftover after parsing attributes in process `syz.9.1557'. [ 707.926999][T11263] ext4 filesystem being mounted at /132/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 710.913964][T11329] loop6: detected capacity change from 0 to 2048 [ 713.205777][T11332] loop9: detected capacity change from 0 to 256 [ 713.407801][T11336] device wlan0 entered promiscuous mode [ 713.413908][T11336] device macvtap1 entered promiscuous mode [ 713.720473][T11329] EXT4-fs (loop6): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 713.906333][T11345] netlink: 'syz.2.1576': attribute type 30 has an invalid length. [ 713.945613][T11345] bond0: option arp_missed_max: invalid value (0) [ 713.975258][T11345] bond0: option arp_missed_max: allowed values 1 - 255 [ 714.337695][T11361] loop9: detected capacity change from 0 to 16 [ 714.365512][T11360] netlink: 8 bytes leftover after parsing attributes in process `syz.7.1583'. [ 714.438659][T11360] netlink: 4 bytes leftover after parsing attributes in process `syz.7.1583'. [ 715.372346][T11360] netlink: 4 bytes leftover after parsing attributes in process `syz.7.1583'. [ 715.862346][T11361] MTD: Attempt to mount non-MTD device "/dev/loop9" [ 716.320567][T11381] delete_channel: no stack [ 716.590382][T11372] delete_channel: no stack [ 717.445414][T11360] bond0: (slave bond_slave_0): Releasing backup interface [ 718.954379][T11375] netlink: 'syz.2.1584': attribute type 10 has an invalid length. [ 718.962318][T11375] netlink: 40 bytes leftover after parsing attributes in process `syz.2.1584'. [ 718.971910][T11375] bridge0: port 3(macvlan1) entered blocking state [ 718.978516][T11375] bridge0: port 3(macvlan1) entered disabled state [ 718.986341][T11375] device macvlan1 entered promiscuous mode [ 718.993324][T11375] bridge0: port 3(macvlan1) entered blocking state [ 718.999916][T11375] bridge0: port 3(macvlan1) entered forwarding state [ 720.574897][T11404] device macvtap2 entered promiscuous mode [ 720.581033][T11404] device wlan0 entered promiscuous mode [ 723.714825][T11448] loop9: detected capacity change from 0 to 4096 [ 723.960136][T11466] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1604'. [ 726.434854][T11448] ntfs: volume version 3.1. [ 726.607163][T11478] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 726.683961][T11478] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 726.703708][T11486] overlayfs: missing 'lowerdir' [ 726.872250][T11486] netlink: 4 bytes leftover after parsing attributes in process `syz.6.1612'. [ 729.471784][T11521] loop6: detected capacity change from 0 to 512 [ 729.589766][T11521] EXT4-fs (loop6): encrypted files will use data=ordered instead of data journaling mode [ 729.618554][T11521] EXT4-fs (loop6): couldn't mount as ext3 due to feature incompatibilities [ 729.945777][T11521] loop6: detected capacity change from 0 to 256 [ 730.823509][ T4170] Bluetooth: hci5: Entering manufacturer mode failed (-110) [ 731.205369][T11547] loop7: detected capacity change from 0 to 128 [ 731.584737][T11547] EXT4-fs (loop7): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 731.648552][T11547] ext4 filesystem being mounted at /171/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 731.967367][T11566] netlink: 'syz.2.1623': attribute type 12 has an invalid length. [ 735.002086][ T26] audit: type=1326 audit(1733208612.385:95): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11573 comm="syz.9.1627" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f200c765f19 code=0x0 [ 735.162121][T11573] ALSA: mixer_oss: invalid index 80000 [ 735.324603][T11583] loop6: detected capacity change from 0 to 2048 [ 735.481140][T11583] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 735.607999][ T26] audit: type=1800 audit(1733208615.415:96): pid=11597 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.6.1629" name="bus" dev="loop6" ino=1367 res=0 errno=0 [ 735.632354][T11594] autofs4:pid:11594:autofs_fill_super: called with bogus options [ 735.758709][T11604] loop7: detected capacity change from 0 to 16 [ 735.874391][T11604] erofs: (device loop7): mounted with root inode @ nid 36. [ 736.971918][T11613] loop9: detected capacity change from 0 to 64 [ 737.305516][T11617] loop7: detected capacity change from 0 to 512 [ 737.386365][T11613] attempt to access beyond end of device [ 737.386365][T11613] loop9: rw=0, want=1026, limit=64 [ 737.481606][T11613] Buffer I/O error on dev loop9, logical block 512, async page read [ 737.530631][T11613] attempt to access beyond end of device [ 737.530631][T11613] loop9: rw=0, want=113154, limit=64 [ 737.594672][T11613] Buffer I/O error on dev loop9, logical block 56576, async page read [ 737.605053][T11625] loop6: detected capacity change from 0 to 16 [ 737.715411][T11625] erofs: (device loop6): mounted with root inode @ nid 36. [ 737.832721][T11627] attempt to access beyond end of device [ 737.832721][T11627] loop9: rw=0, want=1026, limit=64 [ 737.868438][T11627] Buffer I/O error on dev loop9, logical block 512, async page read [ 737.914630][T11627] attempt to access beyond end of device [ 737.914630][T11627] loop9: rw=0, want=113154, limit=64 [ 737.948608][T11627] Buffer I/O error on dev loop9, logical block 56576, async page read [ 737.983459][ T26] audit: type=1800 audit(1733208617.795:97): pid=11627 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.9.1641" name="bus" dev="loop9" ino=9 res=0 errno=0 [ 738.004330][T11642] loop6: detected capacity change from 0 to 128 [ 738.137330][T11617] EXT4-fs (loop7): 1 orphan inode deleted [ 738.266992][T11617] EXT4-fs (loop7): mounted filesystem without journal. Opts: errors=remount-ro,nodiscard,noquota,init_itable,stripe=0x0000000000000079,resgid=0x0000000000000000,sysvgroups,delalloc,usrquota,. Quota mode: writeback. [ 738.842397][T11617] ext4 filesystem being mounted at /173/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 738.860063][T11642] EXT4-fs (loop6): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 738.880474][T11642] ext4 filesystem being mounted at /152/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 741.593657][T11676] loop7: detected capacity change from 0 to 40427 [ 741.794905][T11676] F2FS-fs (loop7): Invalid log_blocksize (268), supports only 12 [ 741.802877][T11676] F2FS-fs (loop7): Can't find valid F2FS filesystem in 1th superblock [ 741.815789][T11676] F2FS-fs (loop7): invalid crc value [ 741.911729][T11676] F2FS-fs (loop7): Found nat_bits in checkpoint [ 741.980348][T11676] F2FS-fs (loop7): Try to recover 1th superblock, ret: 0 [ 741.987483][T11676] F2FS-fs (loop7): Mounted with checkpoint version = 48b305e5 [ 742.024262][T11685] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1655'. [ 742.035307][T11686] loop9: detected capacity change from 0 to 256 [ 742.220121][T11694] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 742.224400][T11686] exFAT-fs (loop9): failed to load upcase table (idx : 0x000104d0, chksum : 0x60d18cac, utbl_chksum : 0xe619d30d) [ 742.959428][ T26] audit: type=1800 audit(1733208622.745:98): pid=11707 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.9.1654" name="file1" dev="loop9" ino=1048647 res=0 errno=0 [ 744.262381][ T2372] Bluetooth: hci1: command 0x0406 tx timeout [ 744.355621][T11716] loop9: detected capacity change from 0 to 256 [ 744.366232][ T4304] F2FS-fs (loop7): f2fs_check_nid_range: out-of-range nid=1, run fsck to fix. [ 744.398376][ T4304] F2FS-fs (loop7): f2fs_check_nid_range: out-of-range nid=2, run fsck to fix. [ 747.462885][ T1421] ieee802154 phy0 wpan0: encryption failed: -22 [ 747.473268][ T1421] ieee802154 phy1 wpan1: encryption failed: -22 [ 749.278489][T11774] loop9: detected capacity change from 0 to 16 [ 749.396806][ T2372] usb 3-1: new high-speed USB device number 13 using dummy_hcd [ 749.433339][T11774] erofs: (device loop9): mounted with root inode @ nid 36. [ 749.513893][T11774] kvm: vcpu 0: requested 128 ns lapic timer period limited to 200000 ns [ 749.522429][T11774] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=1812281087 (231971979136 ns) > initial count (200000 ns). Using initial count to start timer. [ 749.789138][ T2372] usb 3-1: New USB device found, idVendor=046d, idProduct=0870, bcdDevice=61.47 [ 749.826757][ T2372] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 750.011683][ T2372] usb 3-1: config 0 descriptor?? [ 750.083599][ T2372] gspca_main: STV06xx-2.14.0 probing 046d:0870 [ 752.437669][T11796] loop6: detected capacity change from 0 to 4096 [ 752.679691][T11796] ntfs3: Unknown parameter './file0' [ 756.139014][ T2372] gspca_stv06xx: I2C: Read error writing address: -71 [ 756.201255][ T2372] usb 3-1: USB disconnect, device number 13 [ 758.378293][T11869] tipc: Failed to remove unknown binding: 66,1,1/4:3694759578/3694759580 [ 758.387509][T11869] tipc: Failed to remove unknown binding: 66,1,1/4:3694759578/3694759580 [ 759.292137][T11882] loop6: detected capacity change from 0 to 64 [ 759.372042][T11882] MINIX-fs: bad superblock [ 759.983552][T11896] loop9: detected capacity change from 0 to 4096 [ 760.889546][T11905] netlink: 12 bytes leftover after parsing attributes in process `syz.7.1705'. [ 764.217446][T11919] loop7: detected capacity change from 0 to 8192 [ 765.302416][T11944] netlink: 8 bytes leftover after parsing attributes in process `syz.7.1716'. [ 765.911793][T11953] netlink: 8 bytes leftover after parsing attributes in process `syz.7.1719'. [ 766.035442][T11959] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1720'. [ 769.434203][T11984] device bridge_slave_1 left promiscuous mode [ 769.465401][T11984] bridge0: port 2(bridge_slave_1) entered disabled state [ 771.184119][T12004] ALSA: seq fatal error: cannot create timer (-22) [ 771.194736][T12008] netlink: 12 bytes leftover after parsing attributes in process `syz.6.1735'. [ 771.333521][T12012] tipc: Failed to remove unknown binding: 66,1,1/0:1816989152/1816989154 [ 771.342122][T12012] tipc: Failed to remove unknown binding: 66,1,1/0:1816989152/1816989154 [ 772.197182][T12005] netlink: 8 bytes leftover after parsing attributes in process `syz.7.1743'. [ 772.469708][ T21] usb 8-1: new high-speed USB device number 5 using dummy_hcd [ 772.537583][T12023] loop6: detected capacity change from 0 to 512 [ 772.657539][T12023] EXT4-fs (loop6): Test dummy encryption mode enabled [ 772.702548][T12025] netlink: 12 bytes leftover after parsing attributes in process `syz.9.1739'. [ 772.723807][T12023] EXT4-fs error (device loop6): __ext4_iget:4872: inode #11: block 1: comm syz.6.1738: invalid block [ 772.758445][ T21] usb 8-1: Using ep0 maxpacket: 16 [ 772.763954][T12023] EXT4-fs error (device loop6): ext4_orphan_get:1406: comm syz.6.1738: couldn't read orphan inode 11 (err -117) [ 772.807189][T12023] EXT4-fs (loop6): mounted filesystem without journal. Opts: noauto_da_alloc,user_xattr,max_dir_size_kb=0x0000000000000009,inode_readahead_blks=0x0000000000010000,jqfmt=vfsv0,delalloc,inode_readahead_blks=0x0000000000400000,noauto_da_alloc,test_dummy_encryption,,errors=continue. Quota mode: none. [ 772.898655][ T21] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0xD has invalid wMaxPacketSize 0 [ 772.913051][ T21] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x6 has invalid wMaxPacketSize 0 [ 773.120326][ T21] usb 8-1: New USB device found, idVendor=054c, idProduct=06c3, bcdDevice=8b.57 [ 773.166090][ T21] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 775.169979][ T21] usb 8-1: Product: syz [ 775.174188][ T21] usb 8-1: Manufacturer: syz [ 775.179644][ T21] usb 8-1: SerialNumber: syz [ 775.195823][ T21] usb 8-1: config 0 descriptor?? [ 775.267747][ T21] port100 8-1:0.0: NFC: Could not find bulk-in or bulk-out endpoint [ 775.619039][ T7] usb 8-1: USB disconnect, device number 5 [ 777.540323][T12069] netlink: 12 bytes leftover after parsing attributes in process `syz.7.1751'. [ 777.705985][T12073] loop6: detected capacity change from 0 to 512 [ 778.193250][T12073] EXT4-fs (loop6): encrypted files will use data=ordered instead of data journaling mode [ 778.699786][T12073] EXT4-fs (loop6): 1 truncate cleaned up [ 778.716076][T12073] EXT4-fs (loop6): mounted filesystem without journal. Opts: journal_ioprio=0x0000000000000001,resuid=0x000000000000ee01,debug_want_extra_isize=0x0000000000000068,lazytime,nombcache,noload,,errors=continue. Quota mode: none. [ 781.129615][T12095] loop7: detected capacity change from 0 to 4096 [ 781.339238][T12095] EXT4-fs (loop7): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 782.271625][T12111] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1764'. [ 782.647463][T12113] loop6: detected capacity change from 0 to 4096 [ 782.709716][T12113] ntfs3: Bad value for 'uid' [ 784.508673][T12138] 9pnet: Insufficient options for proto=fd [ 784.547671][T12138] pci 0000:00:05.0: vgaarb: changed VGA decodes: olddecodes=io+mem,decodes=none:owns=io+mem [ 785.626306][T12152] IPv6: ADDRCONF(NETDEV_CHANGE): syzkaller0: link becomes ready [ 785.681959][T12154] netlink: 12 bytes leftover after parsing attributes in process `syz.9.1778'. [ 787.560156][T12176] netlink: 12 bytes leftover after parsing attributes in process `syz.6.1791'. [ 787.964376][T12187] loop6: detected capacity change from 0 to 16 [ 787.987829][T12185] netlink: 24 bytes leftover after parsing attributes in process `syz.9.1786'. [ 788.037894][T12187] erofs: (device loop6): mounted with root inode @ nid 36. [ 788.146995][T12187] kvm: vcpu 0: requested 128 ns lapic timer period limited to 200000 ns [ 788.155601][T12187] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=1812281087 (231971979136 ns) > initial count (200000 ns). Using initial count to start timer. [ 788.906808][ C0] hrtimer: interrupt took 19025505 ns [ 788.910346][T12198] fuse: Bad value for 'fd' [ 791.465086][T12211] netlink: 40 bytes leftover after parsing attributes in process `syz.9.1798'. [ 792.774931][T12242] loop7: detected capacity change from 0 to 512 [ 792.783985][T12238] netlink: 'syz.2.1804': attribute type 1 has an invalid length. [ 794.153162][T12242] EXT4-fs error (device loop7): ext4_orphan_get:1401: inode #15: comm syz.7.1802: casefold flag without casefold feature [ 794.192189][T12242] EXT4-fs error (device loop7): ext4_orphan_get:1406: comm syz.7.1802: couldn't read orphan inode 15 (err -117) [ 794.356908][T12242] EXT4-fs (loop7): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 795.563753][T12260] kvm: vcpu 0: requested 128 ns lapic timer period limited to 200000 ns [ 795.572923][T12260] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=1812281087 (231971979136 ns) > initial count (200000 ns). Using initial count to start timer. [ 796.117997][T12267] loop6: detected capacity change from 0 to 64 [ 796.837825][T12267] overlayfs: upper fs needs to support d_type. [ 796.851795][T12267] overlayfs: upper fs does not support RENAME_WHITEOUT. [ 796.860642][T12267] overlayfs: failed to set xattr on upper [ 796.866500][T12267] overlayfs: ...falling back to index=off,metacopy=off. [ 797.815346][ T7596] Trying to free block not in datazone [ 797.923398][ T7596] Trying to free block not in datazone [ 797.950989][ T7596] Trying to free block not in datazone [ 798.397005][T12292] loop6: detected capacity change from 0 to 1024 [ 798.596080][T12292] hfsplus: extend alloc file! (8192,65536,366) [ 802.400026][T12322] loop6: detected capacity change from 0 to 1024 [ 802.470671][T12322] EXT4-fs (loop6): Ignoring removed nobh option [ 802.503300][T12322] EXT4-fs (loop6): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 802.575749][T12322] EXT4-fs (loop6): mounted filesystem without journal. Opts: nobh,noauto_da_alloc,jqfmt=vfsold,data_err=ignore,resuid=0x0000000000000000,dioread_nolock,usrjquota=,discard,jqfmt=vfsv1,,errors=continue. Quota mode: none. [ 802.628110][T12337] syz.7.1830[12337] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 802.630519][T12337] syz.7.1830[12337] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 802.867848][T12348] program syz.9.1833 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 804.855941][T12366] ODEBUG: Out of memory. ODEBUG disabled [ 805.469720][T12378] loop7: detected capacity change from 0 to 512 [ 805.570500][T12378] EXT4-fs (loop7): encrypted files will use data=ordered instead of data journaling mode [ 805.773800][T12378] EXT4-fs (loop7): 1 truncate cleaned up [ 805.787530][T12378] EXT4-fs (loop7): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 808.623121][ T1421] ieee802154 phy0 wpan0: encryption failed: -22 [ 808.629545][ T1421] ieee802154 phy1 wpan1: encryption failed: -22 [ 810.098132][T12445] loop7: detected capacity change from 0 to 256 [ 810.756262][T12449] vivid-002: disconnect [ 811.183516][T12438] vivid-002: reconnect [ 813.861965][T12474] netlink: 12 bytes leftover after parsing attributes in process `syz.7.1867'. [ 813.897156][T12481] loop9: detected capacity change from 0 to 64 [ 815.133686][ T26] audit: type=1800 audit(1733208694.945:99): pid=12481 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.9.1870" name="bus" dev="loop9" ino=25 res=0 errno=0 [ 815.853597][T12506] loop6: detected capacity change from 0 to 256 [ 816.948049][T12506] FAT-fs (loop6): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 817.295030][T12519] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1882'. [ 818.350573][T12542] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1888'. [ 819.692128][T12546] device syzkaller0 entered promiscuous mode [ 820.411657][T12562] netlink: 12 bytes leftover after parsing attributes in process `syz.7.1894'. [ 822.363659][T12584] loop7: detected capacity change from 0 to 512 [ 823.042957][T12584] EXT4-fs (loop7): encrypted files will use data=ordered instead of data journaling mode [ 823.950415][T12584] EXT4-fs (loop7): 1 truncate cleaned up [ 824.096059][T12584] EXT4-fs (loop7): mounted filesystem without journal. Opts: data_err=abort,min_batch_time=0x0000000000000fff,inode_readahead_blks=0x0000000000000080,stripe=0x0000000000004000,errors=remount-ro,max_batch_time=0x0000000000000004,. Quota mode: none. [ 825.193277][T12612] loop6: detected capacity change from 0 to 512 [ 825.310820][T12612] EXT4-fs (loop6): Ignoring removed orlov option [ 825.317231][T12612] EXT4-fs (loop6): encrypted files will use data=ordered instead of data journaling mode [ 825.505863][T12618] ALSA: seq fatal error: cannot create timer (-22) [ 825.527914][T12618] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1908'. [ 825.676347][T12612] EXT4-fs (loop6): 1 truncate cleaned up [ 825.682885][T12612] EXT4-fs (loop6): mounted filesystem without journal. Opts: journal_ioprio=0x0000000000000002,resuid=0x000000000000ee01,orlov,lazytime,block_validity,quota,,errors=continue. Quota mode: writeback. [ 826.157383][ T2372] usb 3-1: new high-speed USB device number 14 using dummy_hcd [ 826.616016][ T2372] usb 3-1: Using ep0 maxpacket: 16 [ 826.749307][ T2372] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0xD has invalid wMaxPacketSize 0 [ 826.764117][ T2372] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x6 has invalid wMaxPacketSize 0 [ 826.796087][T12640] loop9: detected capacity change from 0 to 256 [ 826.817641][T12640] FAT-fs (loop9): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 827.067816][T12646] netlink: 12 bytes leftover after parsing attributes in process `syz.6.1919'. [ 827.080862][ T2372] usb 3-1: New USB device found, idVendor=054c, idProduct=06c3, bcdDevice=8b.57 [ 827.095244][ T2372] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 827.135341][T12649] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1920'. [ 827.185197][ T2372] usb 3-1: Product: syz [ 827.189626][ T2372] usb 3-1: Manufacturer: syz [ 827.194603][ T2372] usb 3-1: SerialNumber: syz [ 827.202197][ T2372] usb 3-1: config 0 descriptor?? [ 827.260765][ T2372] port100 3-1:0.0: NFC: Could not find bulk-in or bulk-out endpoint [ 827.439562][T12660] netlink: 12 bytes leftover after parsing attributes in process `syz.6.1922'. [ 828.366751][ T2372] usb 3-1: USB disconnect, device number 14 [ 831.483228][T12709] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1936'. [ 831.563977][T12708] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1937'. [ 832.075854][T12726] netlink: 12 bytes leftover after parsing attributes in process `syz.9.1942'. [ 832.959332][T12742] netlink: 12 bytes leftover after parsing attributes in process `syz.9.1949'. [ 833.320779][T12753] loop7: detected capacity change from 0 to 256 [ 833.344048][T12755] netlink: 12 bytes leftover after parsing attributes in process `syz.6.1953'. [ 833.455243][T12753] FAT-fs (loop7): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 834.217056][T12775] netlink: 12 bytes leftover after parsing attributes in process `syz.6.1961'. [ 834.782091][T12787] netlink: 12 bytes leftover after parsing attributes in process `syz.6.1964'. [ 835.191030][T12796] netlink: 12 bytes leftover after parsing attributes in process `syz.6.1967'. [ 836.503842][T12824] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1976'. [ 836.569640][T12827] netlink: 12 bytes leftover after parsing attributes in process `syz.6.1978'. [ 836.874069][T12836] netlink: 12 bytes leftover after parsing attributes in process `syz.6.1982'. [ 837.823133][T12859] netlink: 12 bytes leftover after parsing attributes in process `syz.6.1991'. [ 838.172730][T12872] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1995'. [ 838.507653][T12882] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1999'. [ 839.798571][T12903] netlink: 12 bytes leftover after parsing attributes in process `syz.6.2005'. [ 840.256633][T12914] netlink: 12 bytes leftover after parsing attributes in process `syz.9.2010'. [ 840.801880][T12933] netlink: 12 bytes leftover after parsing attributes in process `syz.6.2017'. [ 842.140237][T12957] netlink: 12 bytes leftover after parsing attributes in process `syz.6.2026'. [ 842.394194][T12965] netlink: 12 bytes leftover after parsing attributes in process `syz.6.2028'. [ 842.636943][T12968] loop6: detected capacity change from 0 to 256 [ 842.725302][T12968] FAT-fs (loop6): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 843.077758][T12974] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2032'. [ 843.813346][T12994] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2039'. [ 844.140574][T13003] netlink: 12 bytes leftover after parsing attributes in process `syz.7.2042'. [ 844.199687][T13007] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2043'. [ 844.773164][T13027] loop7: detected capacity change from 0 to 256 [ 844.979444][T13027] FAT-fs (loop7): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 846.265343][T13044] netlink: 12 bytes leftover after parsing attributes in process `syz.9.2056'. [ 846.403666][T13048] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2057'. [ 846.444131][T13049] netlink: 12 bytes leftover after parsing attributes in process `syz.7.2058'. [ 847.192072][T13069] loop9: detected capacity change from 0 to 256 [ 847.286964][T13069] FAT-fs (loop9): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 847.821138][T13087] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2071'. [ 847.998052][T13090] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2072'. [ 848.424954][T13099] netlink: 12 bytes leftover after parsing attributes in process `syz.6.2076'. [ 849.613702][T13121] netlink: 12 bytes leftover after parsing attributes in process `syz.9.2082'. [ 850.086838][T13133] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2088'. [ 850.554995][T13144] loop7: detected capacity change from 0 to 256 [ 850.657240][T13144] FAT-fs (loop7): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 851.142557][T13152] netlink: 12 bytes leftover after parsing attributes in process `syz.6.2094'. [ 851.284132][T13155] netlink: 12 bytes leftover after parsing attributes in process `syz.9.2095'. [ 853.160181][T13187] netlink: 12 bytes leftover after parsing attributes in process `syz.7.2106'. [ 853.345486][T13190] netlink: 12 bytes leftover after parsing attributes in process `syz.7.2107'. [ 853.819544][T13202] netlink: 12 bytes leftover after parsing attributes in process `syz.7.2112'. [ 853.968128][T13206] netlink: 12 bytes leftover after parsing attributes in process `syz.7.2113'. [ 856.794805][T13242] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2126'. [ 856.979949][T13251] netlink: 12 bytes leftover after parsing attributes in process `syz.6.2130'. [ 857.522252][T13261] netlink: 12 bytes leftover after parsing attributes in process `syz.7.2134'. [ 857.841165][T13270] loop9: detected capacity change from 0 to 256 [ 857.981021][T13270] FAT-fs (loop9): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 859.556107][T13294] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2146'. [ 859.815571][T13301] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2148'. [ 860.465658][T13314] netlink: 12 bytes leftover after parsing attributes in process `syz.6.2153'. [ 861.995547][T13337] loop9: detected capacity change from 0 to 256 [ 862.083511][T13337] FAT-fs (loop9): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 862.775352][T13354] netlink: 12 bytes leftover after parsing attributes in process `syz.9.2169'. [ 863.043467][T13359] netlink: 12 bytes leftover after parsing attributes in process `syz.9.2171'. [ 865.225187][T13397] netlink: 12 bytes leftover after parsing attributes in process `syz.9.2184'. [ 865.910536][T13408] loop7: detected capacity change from 0 to 256 [ 866.057901][T13408] FAT-fs (loop7): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 870.062542][ T1421] ieee802154 phy0 wpan0: encryption failed: -22 [ 870.069048][ T1421] ieee802154 phy1 wpan1: encryption failed: -22 [ 870.593518][T13488] loop6: detected capacity change from 0 to 256 [ 870.686526][T13488] FAT-fs (loop6): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 873.473793][T13541] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2236'. [ 876.824579][T13594] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2255'. [ 877.826084][T13609] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2261'. [ 879.541824][T13640] netlink: 12 bytes leftover after parsing attributes in process `syz.6.2271'. [ 879.923723][T13646] netlink: 12 bytes leftover after parsing attributes in process `syz.6.2274'. [ 880.301318][T13649] netlink: 12 bytes leftover after parsing attributes in process `syz.6.2275'. [ 882.866630][T13681] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2287'. [ 884.983780][T13707] netlink: 12 bytes leftover after parsing attributes in process `syz.6.2295'. [ 885.665158][T13715] netlink: 12 bytes leftover after parsing attributes in process `syz.7.2299'. [ 885.942918][T13726] netlink: 12 bytes leftover after parsing attributes in process `syz.7.2303'. [ 886.047122][T13732] loop6: detected capacity change from 0 to 256 [ 886.209186][T13732] FAT-fs (loop6): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 888.206752][T13759] netlink: 12 bytes leftover after parsing attributes in process `syz.7.2313'. [ 889.035814][T13778] loop9: detected capacity change from 0 to 512 [ 889.350618][T13778] EXT4-fs (loop9): encrypted files will use data=ordered instead of data journaling mode [ 889.610988][T13778] EXT4-fs (loop9): 1 truncate cleaned up [ 889.626379][T13778] EXT4-fs (loop9): mounted filesystem without journal. Opts: data_err=abort,min_batch_time=0x0000000000000fff,inode_readahead_blks=0x0000000000000080,stripe=0x0000000000004000,errors=remount-ro,max_batch_time=0x0000000000000004,. Quota mode: none. [ 891.693513][T13802] netlink: 12 bytes leftover after parsing attributes in process `syz.9.2328'. [ 896.816038][T13853] loop9: detected capacity change from 0 to 256 [ 897.251267][T13853] FAT-fs (loop9): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 903.617563][T13929] netlink: 12 bytes leftover after parsing attributes in process `syz.9.2374'. [ 905.264426][T13949] loop6: detected capacity change from 0 to 512 [ 905.365813][T13949] EXT4-fs (loop6): encrypted files will use data=ordered instead of data journaling mode [ 905.481167][T13949] EXT4-fs (loop6): 1 truncate cleaned up [ 905.487084][T13949] EXT4-fs (loop6): mounted filesystem without journal. Opts: data_err=abort,min_batch_time=0x0000000000000fff,inode_readahead_blks=0x0000000000000080,stripe=0x0000000000004000,errors=remount-ro,max_batch_time=0x0000000000000004,. Quota mode: none. [ 908.843710][T14003] netlink: 12 bytes leftover after parsing attributes in process `syz.9.2397'. [ 908.884759][T14000] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2395'. [ 909.258838][T14016] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2401'. [ 912.583207][T14050] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2411'. [ 912.839324][T14054] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2412'. [ 913.771741][T14064] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2415'. [ 914.111699][T14074] loop9: detected capacity change from 0 to 256 [ 914.195919][T14074] FAT-fs (loop9): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 915.592096][T14089] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2425'. [ 916.970511][T14100] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2428'. [ 917.192558][T14101] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2427'. [ 917.859018][T14108] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2430'. [ 918.771524][T14132] loop9: detected capacity change from 0 to 256 [ 918.808937][T14133] netlink: 12 bytes leftover after parsing attributes in process `syz.6.2437'. [ 919.094979][T14141] netlink: 12 bytes leftover after parsing attributes in process `syz.7.2440'. [ 919.636865][T14132] FAT-fs (loop9): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 920.935579][T14154] syz.6.2441 (14154): drop_caches: 2 [ 923.083438][T14177] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2450'. [ 923.146211][T14179] netlink: 12 bytes leftover after parsing attributes in process `syz.9.2448'. [ 923.162723][T14181] netlink: 12 bytes leftover after parsing attributes in process `syz.7.2451'. [ 924.789867][T14203] loop6: detected capacity change from 0 to 512 [ 924.796752][T14210] netlink: 'syz.7.2457': attribute type 1 has an invalid length. [ 925.488127][T14203] EXT4-fs (loop6): DAX enabled. Warning: EXPERIMENTAL, use at your own risk [ 925.727844][T14203] EXT4-fs (loop6): can't mount with both data=journal and dax [ 927.387242][T14250] netlink: 12 bytes leftover after parsing attributes in process `syz.6.2468'. [ 927.616728][T14251] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2467'. [ 928.470044][T14260] loop7: detected capacity change from 0 to 1024 [ 928.870356][T14260] EXT4-fs (loop7): revision level too high, forcing read-only mode [ 928.885219][T14260] EXT4-fs (loop7): orphan cleanup on readonly fs [ 928.903810][T14260] Quota error (device loop7): v2_read_header: Failed header read: expected=8 got=2 [ 928.913536][T14260] EXT4-fs warning (device loop7): ext4_enable_quotas:6432: Failed to enable quota tracking (type=0, err=-22, ino=3). Please run e2fsck to fix. [ 928.928340][T14260] EXT4-fs (loop7): Cannot turn on quotas: error -22 [ 928.964321][T14260] EXT4-fs (loop7): 1 truncate cleaned up [ 928.970315][T14260] EXT4-fs (loop7): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 929.234157][T14266] loop9: detected capacity change from 0 to 256 [ 929.323558][T14266] FAT-fs (loop9): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 929.586179][T14268] netlink: 16 bytes leftover after parsing attributes in process `syz.7.2473'. [ 929.596790][T14268] bond0: (slave bond_slave_1): Slave does not support ipsec offload [ 932.334266][ T1421] ieee802154 phy0 wpan0: encryption failed: -22 [ 932.340627][ T1421] ieee802154 phy1 wpan1: encryption failed: -22 [ 932.710980][T14298] loop9: detected capacity change from 0 to 4096 [ 933.812312][T14316] netlink: 12 bytes leftover after parsing attributes in process `syz.7.2485'. [ 935.120277][T14298] EXT4-fs (loop9): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 937.052641][T14341] loop6: detected capacity change from 0 to 1024 [ 937.961079][T14346] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2495'. [ 938.976616][T14356] hfsplus: request for non-existent node 32 in B*Tree [ 938.984188][T14356] hfsplus: request for non-existent node 32 in B*Tree [ 938.991674][T14356] hfsplus: request for non-existent node 33 in B*Tree [ 938.998488][T14356] hfsplus: request for non-existent node 33 in B*Tree [ 939.252983][T14365] netlink: 12 bytes leftover after parsing attributes in process `syz.9.2499'. [ 939.263927][ T145] hfsplus: b-tree write err: -5, ino 4 [ 941.383380][T14386] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2505'. [ 944.308100][T14407] netlink: 12 bytes leftover after parsing attributes in process `syz.7.2511'. [ 944.442793][T14416] netlink: 12 bytes leftover after parsing attributes in process `syz.6.2514'. [ 945.428281][T14425] loop6: detected capacity change from 0 to 512 [ 945.442043][T14423] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2515'. [ 946.759645][T14425] EXT4-fs (loop6): Number of reserved GDT blocks insanely large: 768 [ 946.840078][T14439] netlink: 12 bytes leftover after parsing attributes in process `syz.7.2520'. [ 951.769093][T14477] loop7: detected capacity change from 0 to 64 [ 952.015207][T14479] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2528'. [ 952.741373][T14481] netlink: 12 bytes leftover after parsing attributes in process `syz.9.2529'. [ 953.001271][T14499] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2534'. [ 954.058299][T14495] netlink: 'syz.6.2531': attribute type 10 has an invalid length. [ 954.066213][T14495] netlink: 40 bytes leftover after parsing attributes in process `syz.6.2531'. [ 954.080873][T14495] device team0 entered promiscuous mode [ 954.093821][T14495] device team_slave_0 entered promiscuous mode [ 954.105029][T14495] device team_slave_1 entered promiscuous mode [ 954.111722][T14495] device vxlan0 entered promiscuous mode [ 954.119008][T14495] bridge0: port 3(team0) entered blocking state [ 955.318389][T14495] bridge0: port 3(team0) entered disabled state [ 955.326788][T14495] bridge0: port 3(team0) entered blocking state [ 955.333274][T14495] bridge0: port 3(team0) entered forwarding state [ 957.064440][T14536] netlink: 12 bytes leftover after parsing attributes in process `syz.6.2545'. [ 958.004317][T14547] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2549'. [ 958.028348][T14218] usb 8-1: new high-speed USB device number 6 using dummy_hcd [ 958.081115][T14550] loop6: detected capacity change from 0 to 256 [ 959.131407][T14553] syz.9.2547 (14553): drop_caches: 2 [ 959.308568][T14218] usb 8-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 959.360163][T14218] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 959.436385][T14563] futex_wake_op: syz.0.2553 tries to shift op by 35; fix this program [ 959.475719][T14559] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2552'. [ 959.488073][T14218] usb 8-1: config 0 descriptor?? [ 959.562472][T14218] cp210x 8-1:0.0: cp210x converter detected [ 960.898396][T14218] cp210x 8-1:0.0: failed to get vendor val 0x370b size 1: -71 [ 961.110022][T14218] cp210x 8-1:0.0: querying part number failed [ 961.356971][T14578] netlink: 12 bytes leftover after parsing attributes in process `syz.9.2558'. [ 961.979329][T14218] usb 8-1: cp210x converter now attached to ttyUSB0 [ 963.123073][T14218] usb 8-1: USB disconnect, device number 6 [ 964.244500][T14218] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 964.272662][T14218] cp210x 8-1:0.0: device disconnected [ 968.281835][T14626] netlink: 12 bytes leftover after parsing attributes in process `syz.9.2568'. [ 968.645528][T14640] netlink: 40 bytes leftover after parsing attributes in process `syz.2.2571'. [ 971.215569][T14664] loop6: detected capacity change from 0 to 128 [ 971.324135][T14666] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2578'. [ 972.436562][T14674] loop7: detected capacity change from 0 to 32768 [ 973.124780][T14674] XFS (loop7): Mounting V5 Filesystem [ 973.371919][T14674] XFS (loop7): Ending clean mount [ 973.390542][T14674] XFS (loop7): Quotacheck needed: Please wait. [ 974.214010][T14674] XFS (loop7): Quotacheck: Done. [ 975.471991][ T7016] XFS (loop7): Unmounting Filesystem [ 976.395531][T14721] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2593'. [ 984.134313][T14775] vimc link validate: Scaler:src:1920x1440 (0x33424752, 8, 0, 0, 0) RGB/YUV Capture:snk:640x480 (0x33424752, 8, 0, 0, 0) [ 985.538004][T14783] overlayfs: failed to clone upperpath [ 990.424736][T14808] x_tables: ip_tables: TPROXY target: used from hooks FORWARD, but only usable from PREROUTING [ 990.429420][T14813] loop7: detected capacity change from 0 to 1024 [ 991.912639][T14819] program syz.2.2618 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 991.947497][T14813] EXT4-fs (loop7): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 991.958650][T14813] ext4 filesystem being mounted at /348/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 994.690342][ T1421] ieee802154 phy0 wpan0: encryption failed: -22 [ 994.696809][ T1421] ieee802154 phy1 wpan1: encryption failed: -22 [ 996.452180][T14855] overlayfs: failed to resolve './file0': -2 [ 1000.035213][T14876] loop6: detected capacity change from 0 to 1024 [ 1000.164004][T14869] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1000.945692][ T26] audit: type=1326 audit(1733208880.755:100): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14868 comm="syz.7.2634" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb65d8abf19 code=0x7ffc0000 [ 1001.068098][T14883] 9pnet: Insufficient options for proto=fd [ 1001.086632][T14876] EXT4-fs (loop6): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 1001.101140][T14876] ext4 filesystem being mounted at /348/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 1001.110091][ T26] audit: type=1326 audit(1733208880.755:101): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14868 comm="syz.7.2634" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb65d8abf19 code=0x7ffc0000 [ 1001.767418][ T26] audit: type=1326 audit(1733208880.795:102): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14868 comm="syz.7.2634" exe="/root/syz-executor" sig=0 arch=c000003e syscall=444 compat=0 ip=0x7fb65d8abf19 code=0x7ffc0000 [ 1002.557738][T14900] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 1002.567461][T14900] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 1002.575178][T14900] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 1003.737993][ T26] audit: type=1326 audit(1733208880.795:103): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14868 comm="syz.7.2634" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb65d8abf19 code=0x7ffc0000 [ 1003.873330][T14911] usb usb9: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 1004.011432][ T26] audit: type=1326 audit(1733208880.795:104): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14868 comm="syz.7.2634" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb65d8abf19 code=0x7ffc0000 [ 1004.108084][ T26] audit: type=1326 audit(1733208880.795:105): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14868 comm="syz.7.2634" exe="/root/syz-executor" sig=0 arch=c000003e syscall=446 compat=0 ip=0x7fb65d8abf19 code=0x7ffc0000 [ 1005.276801][ T26] audit: type=1326 audit(1733208880.795:106): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14868 comm="syz.7.2634" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb65d8abf19 code=0x7ffc0000 [ 1005.330027][T14907] loop7: detected capacity change from 0 to 8192 [ 1006.749907][T14907] REISERFS (device loop7): found reiserfs format "3.5" with non-standard journal [ 1006.789295][T14907] REISERFS (device loop7): using ordered data mode [ 1006.816414][T14907] reiserfs: using flush barriers [ 1006.863423][T14907] REISERFS (device loop7): journal params: device loop7, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 1006.891540][ T26] audit: type=1326 audit(1733208880.795:107): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14868 comm="syz.7.2634" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb65d8abf19 code=0x7ffc0000 [ 1006.959101][T14907] REISERFS (device loop7): checking transaction log (loop7) [ 1007.001127][ T26] audit: type=1326 audit(1733208880.795:108): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14868 comm="syz.7.2634" exe="/root/syz-executor" sig=0 arch=c000003e syscall=56 compat=0 ip=0x7fb65d8abf19 code=0x7ffc0000 [ 1007.043134][T14907] REISERFS warning: reiserfs-5086 is_leaf: item location seems wrong (second one): *3.5*[1 2 0(1) DIR], item_len 3, item_location 4004, free_space(entry_count) 2 [ 1007.088282][T14907] REISERFS error (device loop7): vs-5150 search_by_key: invalid format found in block 531. Fsck? [ 1007.107966][ T26] audit: type=1326 audit(1733208880.795:109): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14868 comm="syz.7.2634" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb65d8abf19 code=0x7ffc0000 [ 1007.148239][T14907] REISERFS error (device loop7): vs-13070 reiserfs_read_locked_inode: i/o failure occurred trying to find stat data of [1 2 0x0 SD] [ 1007.188196][ T26] audit: type=1326 audit(1733208880.865:110): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14868 comm="syz.7.2634" exe="/root/syz-executor" sig=0 arch=c000003e syscall=101 compat=0 ip=0x7fb65d8abf19 code=0x7ffc0000 [ 1007.274204][ T26] audit: type=1326 audit(1733208880.865:111): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14868 comm="syz.7.2634" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb65d8abf19 code=0x7ffc0000 [ 1007.334550][ T26] audit: type=1326 audit(1733208880.865:112): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14868 comm="syz.7.2634" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb65d8abf19 code=0x7ffc0000 [ 1007.396715][ T26] audit: type=1326 audit(1733208880.875:113): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14879 comm="syz.7.2634" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7fb65d8de7c5 code=0x7ffc0000 [ 1007.463335][ T26] audit: type=1326 audit(1733208880.875:114): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14868 comm="syz.7.2634" exe="/root/syz-executor" sig=0 arch=c000003e syscall=101 compat=0 ip=0x7fb65d8abf19 code=0x7ffc0000 [ 1007.516726][ T26] audit: type=1326 audit(1733208880.875:115): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14868 comm="syz.7.2634" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb65d8abf19 code=0x7ffc0000 [ 1007.605296][ T26] audit: type=1326 audit(1733208880.875:116): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14868 comm="syz.7.2634" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7fb65d848129 code=0x7ffc0000 [ 1008.158356][T14938] loop9: detected capacity change from 0 to 1024 [ 1009.274033][T14938] EXT4-fs (loop9): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 1009.285037][T14938] ext4 filesystem being mounted at /332/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 1010.347767][T14960] netlink: 'syz.0.2655': attribute type 10 has an invalid length. [ 1010.385816][T14960] netlink: 40 bytes leftover after parsing attributes in process `syz.0.2655'. [ 1010.407599][T14960] device team0 entered promiscuous mode [ 1010.435080][T14960] device team_slave_0 entered promiscuous mode [ 1010.455534][T14960] device team_slave_1 entered promiscuous mode [ 1010.465933][T14960] device bridge0 entered promiscuous mode [ 1010.492046][T14960] bridge0: port 3(team0) entered blocking state [ 1010.501306][T14960] bridge0: port 3(team0) entered disabled state [ 1013.007326][T14960] A link change request failed with some changes committed already. Interface team0 may have been left with an inconsistent configuration, please check. [ 1016.803207][T15009] loop6: detected capacity change from 0 to 256 [ 1017.145239][T15009] exFAT-fs (loop6): failed to load upcase table (idx : 0x0000fd4f, chksum : 0x3963664b, utbl_chksum : 0xe619d30d) [ 1017.283431][T15016] loop7: detected capacity change from 0 to 128 [ 1017.657557][T15016] hpfs: bad mount options. [ 1017.997513][ T26] kauditd_printk_skb: 25 callbacks suppressed [ 1017.997542][ T26] audit: type=1326 audit(1733208897.805:142): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15024 comm="syz.0.2673" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbbeb5ccf19 code=0x7ffc0000 [ 1018.836268][ T26] audit: type=1326 audit(1733208898.635:143): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15024 comm="syz.0.2673" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbbeb5ccf19 code=0x7ffc0000 [ 1019.118522][ T26] audit: type=1326 audit(1733208898.905:144): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15024 comm="syz.0.2673" exe="/root/syz-executor" sig=0 arch=c000003e syscall=160 compat=0 ip=0x7fbbeb5ccf19 code=0x7ffc0000 [ 1019.935944][ T26] audit: type=1326 audit(1733208898.955:145): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15024 comm="syz.0.2673" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbbeb5ccf19 code=0x7ffc0000 [ 1020.024094][ T26] audit: type=1326 audit(1733208898.955:146): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15024 comm="syz.0.2673" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbbeb5ccf19 code=0x7ffc0000 [ 1020.080547][ T26] audit: type=1326 audit(1733208898.975:147): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15024 comm="syz.0.2673" exe="/root/syz-executor" sig=0 arch=c000003e syscall=54 compat=0 ip=0x7fbbeb5ccf19 code=0x7ffc0000 [ 1020.802236][ T26] audit: type=1326 audit(1733208898.985:148): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15024 comm="syz.0.2673" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbbeb5ccf19 code=0x7ffc0000 [ 1020.839773][T15044] loop6: detected capacity change from 0 to 24 [ 1020.898902][T15044] romfs: bad initial checksum on dev loop6. [ 1020.966270][ T26] audit: type=1326 audit(1733208899.515:149): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15024 comm="syz.0.2673" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbbeb5ccf19 code=0x7ffc0000 [ 1021.005573][ T26] audit: type=1326 audit(1733208899.515:150): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15024 comm="syz.0.2673" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fbbeb5cb880 code=0x7ffc0000 [ 1021.028097][ C0] vkms_vblank_simulate: vblank timer overrun [ 1021.164078][ T26] audit: type=1326 audit(1733208899.515:151): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15024 comm="syz.0.2673" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbbeb5ccf19 code=0x7ffc0000 [ 1025.574729][T15087] loop9: detected capacity change from 0 to 256 [ 1025.915744][T15089] loop7: detected capacity change from 0 to 40427 [ 1027.553776][T15105] loop6: detected capacity change from 0 to 1024 [ 1027.557126][T15089] F2FS-fs (loop7): Invalid log_blocksize (268), supports only 12 [ 1027.568351][T15089] F2FS-fs (loop7): Can't find valid F2FS filesystem in 1th superblock [ 1027.609903][T15089] F2FS-fs (loop7): invalid crc value [ 1027.627024][T15087] exFAT-fs (loop9): failed to load upcase table (idx : 0x0000fd4f, chksum : 0x3963664b, utbl_chksum : 0xe619d30d) [ 1028.573080][T15089] F2FS-fs (loop7): Found nat_bits in checkpoint [ 1028.705977][T15105] hfsplus: xattr searching failed [ 1028.742656][ T26] kauditd_printk_skb: 19 callbacks suppressed [ 1028.742672][ T26] audit: type=1800 audit(1733208908.555:171): pid=15105 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.6.2693" name="bus" dev="loop6" ino=4 res=0 errno=0 [ 1028.810420][T15112] hfsplus: catalog searching failed [ 1029.037684][T11084] hfsplus: b-tree write err: -5, ino 3 [ 1029.046978][ T7596] hfsplus: node 4:3 still has 1 user(s)! [ 1029.484481][T15122] netlink: 'syz.7.2695': attribute type 10 has an invalid length. [ 1029.492871][T15122] netlink: 40 bytes leftover after parsing attributes in process `syz.7.2695'. [ 1029.509523][T15122] bridge0: port 2(macvlan1) entered blocking state [ 1029.516906][T15122] bridge0: port 2(macvlan1) entered disabled state [ 1029.912391][T15122] device macvlan1 entered promiscuous mode [ 1030.916732][T15134] loop6: detected capacity change from 0 to 512 [ 1030.927426][T15133] netlink: 20 bytes leftover after parsing attributes in process `syz.9.2702'. [ 1031.287760][T15134] EXT4-fs (loop6): encrypted files will use data=ordered instead of data journaling mode [ 1031.327022][T15134] EXT4-fs (loop6): 1 truncate cleaned up [ 1033.920897][T15134] EXT4-fs (loop6): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 1038.550594][T15200] loop9: detected capacity change from 0 to 1024 [ 1038.723650][T15200] EXT4-fs (loop9): ext4_check_descriptors: Inode table for group 0 overlaps block group descriptors [ 1038.784640][T15200] EXT4-fs (loop9): ext4_check_descriptors: Checksum for group 0 failed (25054!=20869) [ 1038.794653][T15200] EXT4-fs (loop9): filesystem has both journal inode and journal device! [ 1041.255151][T14218] usb 3-1: new high-speed USB device number 15 using dummy_hcd [ 1044.388215][T14218] usb 3-1: device not accepting address 15, error -71 [ 1045.470231][T15257] loop6: detected capacity change from 0 to 128 [ 1045.485561][T15252] loop9: detected capacity change from 0 to 1024 [ 1046.932690][T15257] FAT-fs (loop6): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 1046.959317][T15252] EXT4-fs (loop9): mounted filesystem without journal. Opts: init_itable,,errors=continue. Quota mode: none. [ 1047.396797][T15257] netlink: 8 bytes leftover after parsing attributes in process `syz.6.2742'. [ 1049.080447][T15294] loop7: detected capacity change from 0 to 512 [ 1049.376246][T15294] EXT4-fs (loop7): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 1049.428007][T15294] ext4 filesystem being mounted at /374/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 1154.978105][ C1] rcu: INFO: rcu_preempt detected stalls on CPUs/tasks: [ 1154.985279][ C1] (detected by 1, t=10503 jiffies, g=55553, q=18) [ 1154.991795][ C1] rcu: All QSes seen, last rcu_preempt kthread activity 10503 (4295052620-4295042117), jiffies_till_next_fqs=1, root ->qsmask 0x0 [ 1155.005438][ C1] rcu: rcu_preempt kthread starved for 10503 jiffies! g55553 f0x2 RCU_GP_WAIT_FQS(5) ->state=0x0 ->cpu=0 [ 1155.016742][ C1] rcu: Unless rcu_preempt kthread gets sufficient CPU time, OOM is now expected behavior. [ 1155.026714][ C1] rcu: RCU grace-period kthread stack dump: [ 1155.032603][ C1] task:rcu_preempt state:R running task stack:26816 pid: 15 ppid: 2 flags:0x00004000 [ 1155.043403][ C1] Call Trace: [ 1155.046692][ C1] [ 1155.049638][ C1] __schedule+0x12c4/0x45b0 [ 1155.054160][ C1] ? _raw_spin_unlock_irqrestore+0x8b/0x130 [ 1155.060069][ C1] ? _raw_spin_unlock_irqrestore+0xd9/0x130 [ 1155.065995][ C1] ? __mod_timer+0xa8e/0xeb0 [ 1155.070605][ C1] ? release_firmware_map_entry+0x190/0x190 [ 1155.076505][ C1] ? mod_timer_pending+0x20/0x20 [ 1155.081449][ C1] ? lockdep_softirqs_off+0x420/0x420 [ 1155.087053][ C1] schedule+0x11b/0x1f0 [ 1155.091218][ C1] schedule_timeout+0x1b9/0x300 [ 1155.096076][ C1] ? console_conditional_schedule+0x40/0x40 [ 1155.101978][ C1] ? update_process_times+0x200/0x200 [ 1155.107377][ C1] ? prepare_to_swait_event+0x321/0x340 [ 1155.113024][ C1] rcu_gp_fqs_loop+0x2bf/0x1080 [ 1155.117886][ C1] ? _raw_spin_unlock_irq+0x1f/0x40 [ 1155.123182][ C1] ? lockdep_hardirqs_on+0x94/0x130 [ 1155.128403][ C1] ? rcu_gp_init+0xdae/0x1140 [ 1155.133101][ C1] ? rcu_gp_init+0x1140/0x1140 [ 1155.137885][ C1] rcu_gp_kthread+0xa4/0x360 [ 1155.142484][ C1] ? _raw_spin_unlock+0x40/0x40 [ 1155.147436][ C1] ? rcu_report_qs_rsp+0x1a0/0x1a0 [ 1155.152643][ C1] ? _raw_spin_unlock_irqrestore+0xd9/0x130 [ 1155.158552][ C1] ? __kthread_parkme+0x15c/0x1c0 [ 1155.163594][ C1] kthread+0x3f6/0x4f0 [ 1155.167684][ C1] ? rcu_report_qs_rsp+0x1a0/0x1a0 [ 1155.172812][ C1] ? kthread_blkcg+0xd0/0xd0 [ 1155.177417][ C1] ret_from_fork+0x1f/0x30 [ 1155.181858][ C1] [ 1155.185062][ C1] rcu: Stack dump where RCU GP kthread last ran: [ 1155.191394][ C1] Sending NMI from CPU 1 to CPUs 0: [ 1155.196896][ C0] NMI backtrace for cpu 0 [ 1155.196911][ C0] CPU: 0 PID: 0 Comm: swapper/0 Not tainted 5.15.173-syzkaller #0 [ 1155.196926][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 1155.196934][ C0] RIP: 0010:lock_is_held_type+0x117/0x180 [ 1155.196958][ C0] Code: 01 00 00 00 48 c7 c7 20 3d ab 8a e8 83 11 00 00 b8 ff ff ff ff 65 0f c1 05 c6 d6 c3 75 83 f8 01 75 40 48 c7 04 24 00 00 00 00 <9c> 8f 04 24 f7 04 24 00 02 00 00 75 46 41 f7 c4 00 02 00 00 74 01 [ 1155.196970][ C0] RSP: 0018:ffffc90000007c78 EFLAGS: 00000046 [ 1155.196985][ C0] RAX: 0000000000000001 RBX: 0000000000000000 RCX: ffffffff8c8bd5c0 [ 1155.196995][ C0] RDX: ffffffff8c8bd5c0 RSI: ffffffff8aab3d20 RDI: ffffffff8af9ed00 [ 1155.197006][ C0] RBP: 0000000000000001 R08: ffffffff888c1bab R09: 0000000000000003 [ 1155.197015][ C0] R10: ffffffffffffffff R11: dffffc0000000001 R12: 0000000000000046 [ 1155.197024][ C0] R13: ffffffff8c8bd5c0 R14: 00000000ffffffff R15: ffff888019df4b00 [ 1155.197034][ C0] FS: 0000000000000000(0000) GS:ffff8880b8e00000(0000) knlGS:0000000000000000 [ 1155.197046][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 1155.197056][ C0] CR2: 0000001b2df16ff8 CR3: 0000000077d2b000 CR4: 00000000003506f0 [ 1155.197070][ C0] Call Trace: [ 1155.197078][ C0] [ 1155.197085][ C0] ? nmi_cpu_backtrace+0x39f/0x4a0 [ 1155.197100][ C0] ? read_lock_is_recursive+0x10/0x10 [ 1155.197116][ C0] ? nmi_trigger_cpumask_backtrace+0x2a0/0x2a0 [ 1155.197131][ C0] ? unknown_nmi_error+0xd0/0xd0 [ 1155.197153][ C0] ? nmi_cpu_backtrace_handler+0x8/0x10 [ 1155.197168][ C0] ? nmi_handle+0xf7/0x370 [ 1155.197183][ C0] ? lock_is_held_type+0x117/0x180 [ 1155.197197][ C0] ? default_do_nmi+0x62/0x150 [ 1155.197211][ C0] ? exc_nmi+0xa8/0x100 [ 1155.197224][ C0] ? end_repeat_nmi+0x16/0x31 [ 1155.197242][ C0] ? advance_sched+0x12b/0x940 [ 1155.197258][ C0] ? lock_is_held_type+0x117/0x180 [ 1155.197273][ C0] ? lock_is_held_type+0x117/0x180 [ 1155.197288][ C0] ? lock_is_held_type+0x117/0x180 [ 1155.197302][ C0] [ 1155.197306][ C0] [ 1155.197313][ C0] advance_sched+0x13d/0x940 [ 1155.197327][ C0] ? _raw_spin_unlock+0x40/0x40 [ 1155.197345][ C0] ? taprio_free_sched_cb+0x1a0/0x1a0 [ 1155.197359][ C0] __hrtimer_run_queues+0x598/0xcf0 [ 1155.197383][ C0] ? hrtimer_interrupt+0x980/0x980 [ 1155.197396][ C0] ? ktime_get_update_offsets_now+0x407/0x420 [ 1155.197415][ C0] hrtimer_interrupt+0x392/0x980 [ 1155.197439][ C0] __sysvec_apic_timer_interrupt+0x13b/0x4b0 [ 1155.197458][ C0] sysvec_apic_timer_interrupt+0x9b/0xc0 [ 1155.197473][ C0] [ 1155.197477][ C0] [ 1155.197482][ C0] asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 1155.197498][ C0] RIP: 0010:acpi_idle_do_entry+0x10f/0x340 [ 1155.197513][ C0] Code: 43 38 f7 48 83 e3 08 0f 85 0a 01 00 00 4c 8d 74 24 20 e8 04 be 3e f7 0f 1f 44 00 00 e8 aa 3f 38 f7 0f 00 2d 43 f5 bb 00 fb f4 <4c> 89 f3 48 c1 eb 03 42 80 3c 3b 00 74 08 4c 89 f7 e8 4b 18 82 f7 [ 1155.197525][ C0] RSP: 0018:ffffffff8c807b80 EFLAGS: 000002d3 [ 1155.197536][ C0] RAX: ffffffff8a4833f6 RBX: 0000000000000000 RCX: ffffffff8c8bd5c0 [ 1155.197546][ C0] RDX: 0000000000000000 RSI: ffffffff8aab2a80 RDI: ffffffff8af9ed00 [ 1155.197555][ C0] RBP: ffffffff8c807c10 R08: ffffffff8186f220 R09: fffffbfff1917ab9 [ 1155.197565][ C0] R10: 0000000000000000 R11: dffffc0000000001 R12: 1ffffffff1900f70 [ 1155.197575][ C0] R13: ffff8881467fc804 R14: ffffffff8c807ba0 R15: dffffc0000000000 [ 1155.197588][ C0] ? trace_hardirqs_on+0x30/0x80 [ 1155.197603][ C0] ? acpi_idle_do_entry+0x106/0x340 [ 1155.197622][ C0] ? acpi_idle_enter_bm+0x5c0/0x5c0 [ 1155.197635][ C0] ? rcu_preempt_deferred_qs+0x6b/0x190 [ 1155.197649][ C0] ? rcu_qs+0x190/0x190 [ 1155.197666][ C0] acpi_idle_enter+0x352/0x4f0 [ 1155.197682][ C0] cpuidle_enter_state+0x521/0xef0 [ 1155.197704][ C0] ? cpuidle_enter_s2idle+0x6b0/0x6b0 [ 1155.197722][ C0] ? menu_enable_device+0x380/0x380 [ 1155.197740][ C0] cpuidle_enter+0x59/0x90 [ 1155.197756][ C0] do_idle+0x3e4/0x670 [ 1155.197777][ C0] ? idle_inject_timer_fn+0x60/0x60 [ 1155.197799][ C0] ? do_idle+0x1/0x670 [ 1155.197814][ C0] cpu_startup_entry+0x14/0x20 [ 1155.197828][ C0] ? time_init+0x40/0x40 [ 1155.197841][ C0] start_kernel+0x48c/0x540 [ 1155.197866][ C0] secondary_startup_64_no_verify+0xb1/0xbb [ 1155.197889][ C0]