last executing test programs: 8m26.745057593s ago: executing program 2 (id=41): r0 = syz_usb_connect(0x0, 0x1cb, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000122f0d4071040403dfe4000000010902b901010000003f0904"], 0x0) syz_usb_disconnect(r0) r1 = syz_usb_connect(0x0, 0x24, &(0x7f00000007c0)=ANY=[], 0x0) syz_usb_control_io(r1, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r1, 0x0, 0x0) syz_usb_control_io$hid(r1, 0x0, 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r1, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r1, 0x0, 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io$printer(r1, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r1, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) syz_usb_control_io$uac1(r1, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r1, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, &(0x7f0000000080)={0x1c, &(0x7f00000000c0)={0x20, 0x11, 0x1, '.'}, 0x0, 0x0}) 8m22.617541308s ago: executing program 2 (id=46): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000001c00)=ANY=[@ANYBLOB="050000000e000000400000000300000041"], 0x50) socket$nl_route(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000002100)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) getrandom(&(0x7f0000000000)=""/35, 0x23, 0x2) listxattr(&(0x7f0000000000)='./cgroup.cpu/cpuset.cpus\x00', 0x0, 0x0) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x1003, r1}, 0x38) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000380)={r1, &(0x7f0000000300), 0x0}, 0x20) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000180)=ANY=[@ANYBLOB="3000000020000103000000000000000002000004000000030200"], 0x30}, 0x1, 0x0, 0x0, 0x240480c4}, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000480)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000400)=@newlink={0x30, 0x10, 0x437, 0xfffffffe, 0x0, {0x0, 0x0, 0x0, 0x0, 0x4048b}, [@IFLA_LINKINFO={0x10, 0x12, 0x0, 0x1, @sit={{0x8}, {0x4}}}]}, 0x30}, 0x1, 0x0, 0x0, 0x4c050}, 0x0) 8m20.60450451s ago: executing program 2 (id=49): socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) syz_emit_ethernet(0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) socket(0x10, 0x3, 0x0) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="0100000001000000e27f000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x5}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r5}, 0x10) r6 = open(&(0x7f0000000140)='./file1\x00', 0x109cc2, 0x40) ftruncate(r6, 0x200004) sendfile(r1, r6, 0x0, 0x80001d00c0d1) 8m18.455727714s ago: executing program 2 (id=51): bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x0, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x8}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r0 = gettid() sigaltstack(&(0x7f0000000000)={0x0, 0x180000001, 0xffffffffffffff73}, 0x0) tkill(r0, 0x21) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x5, 0x10001, 0x9, 0x1, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32=r1], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xc, 0x0, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f0000000300)='sched_switch\x00', r2}, 0x10) syz_mount_image$ext4(&(0x7f0000000280)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x3000046, &(0x7f0000001840)={[{@delalloc}, {@data_err_abort}, {@barrier_val={'barrier', 0x3d, 0x2}}, {@dioread_lock}, {@data_err_ignore}, {@resgid}, {@data_err_ignore}, {@max_dir_size_kb={'max_dir_size_kb', 0x3d, 0x2}}, {@grpjquota}, {@user_xattr}, {@bh}, {@dioread_nolock}]}, 0x1, 0x553, &(0x7f0000001080)="$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") mknodat$loop(0xffffffffffffff9c, 0x0, 0x6004, 0x1) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) open(&(0x7f0000000080)='./file1\x00', 0x10b942, 0x0) prctl$PR_SET_NAME(0xf, 0x0) mount(0x0, &(0x7f0000000140)='./bus\x00', 0x0, 0x1205000, 0x0) open(&(0x7f0000000080)='./bus\x00', 0x800, 0x49) syz_mount_image$vfat(&(0x7f00000005c0), &(0x7f0000000180)='./file1\x00', 0x804800, &(0x7f0000000000)=ANY=[@ANYRES8=0x0, @ANYBLOB="6092034e5823f645654f6e8edfc3b8e1a948efb0d4b9a9d4c30f5dacb3c1a7ea2587d59165777f070017c2921e793ec5a1384e143b57bb832f14bb43afdef6cb4ed4960b6c732be46a927cdd8c57f93ee6c15401df91ebcbe4f9989843313ea9f243d4dc3d276b966b898100a620b69b543033b9b7bcd9069b9248fbdff46c4a49f094a61938776ce1a1d0f0c84cb7a84bf0b1e2ce5f38f95e11d5b1977ead80625337f66dc391089ab8573d008a4bd03f6f9f01406db632558ed25be4beecd844ac00e52f95c5dc96a1e4a25c80d56aebf6cb33914d6bc72a40bf2fc94efed2f941cf3e"], 0xf9, 0x1213, &(0x7f0000000600)="$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") r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='memory.events.local\x00', 0x275a, 0x0) write$binfmt_script(r3, &(0x7f0000001400), 0x208e24b) fdatasync(r3) 8m15.031674328s ago: executing program 2 (id=59): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000001c0)={0x26, 'hash\x00', 0x0, 0x0, 'cbcmac(aes)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f00000003c0)="93378e66209b48cb59070000", 0xc) r1 = accept4(r0, 0x0, 0x0, 0x80800) sendmmsg$alg(r1, &(0x7f0000008580)=[{0x0, 0x0, &(0x7f0000000240)=[{&(0x7f0000000000)="fc3a55979c", 0x5}, {&(0x7f00000005c0)="b7", 0x1}], 0x2, 0x0, 0x0, 0x11}], 0x1, 0x80) socket$nl_route(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0x1, 0x5, 0x9, 0x84, 0x144, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x2, 0x0, 0x0, @void, @value, @void, @value}, 0x50) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x3) syz_clone(0x600, 0x0, 0x33, 0x0, 0x0, 0x0) syz_emit_ethernet(0x52, &(0x7f0000001300)={@local, @local, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "00ed6a", 0x1c, 0x2c, 0x0, @remote, @local, {[@hopopts={0x3c}], {{0x2c00, 0x0, 0x41424344, 0x41424344, 0x0, 0x0, 0x5}}}}}}}, 0x0) r3 = syz_open_procfs$namespace(0x0, 0x0) mount_setattr(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000300)={0x1000a4, 0x7a, 0x0, {r3}}, 0x20) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz1\x00', 0x1ff) r5 = openat$binder_debug(0xffffffffffffff9c, &(0x7f00000005c0)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) read$FUSE(r5, &(0x7f0000007a80)={0x2020}, 0x2020) 8m12.36512339s ago: executing program 2 (id=65): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000940)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = timerfd_create(0x0, 0x0) timerfd_settime(r3, 0x3, &(0x7f0000000040)={{0x77359400}, {0x0, 0x989680}}, 0x0) read(r3, &(0x7f0000000240)=""/178, 0xb2) r4 = creat(&(0x7f0000000040)='./file0\x00', 0x0) close(r4) mmap$KVM_VCPU(&(0x7f00000db000/0x1000)=nil, 0x930, 0x100000e, 0x4018831, 0xffffffffffffffff, 0x0) r5 = userfaultfd(0x80801) ioctl$UFFDIO_API(r4, 0xc018aa3f, &(0x7f00000000c0)) ioctl$UFFDIO_REGISTER(r5, 0xc020aa00, &(0x7f0000000040)={{&(0x7f0000ffa000/0x3000)=nil, 0x3000}, 0x1}) ioctl$UFFDIO_UNREGISTER(r4, 0x8010aa01, &(0x7f0000000000)={&(0x7f0000ffa000/0x3000)=nil, 0x3000}) 7m55.439426278s ago: executing program 32 (id=65): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000940)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = timerfd_create(0x0, 0x0) timerfd_settime(r3, 0x3, &(0x7f0000000040)={{0x77359400}, {0x0, 0x989680}}, 0x0) read(r3, &(0x7f0000000240)=""/178, 0xb2) r4 = creat(&(0x7f0000000040)='./file0\x00', 0x0) close(r4) mmap$KVM_VCPU(&(0x7f00000db000/0x1000)=nil, 0x930, 0x100000e, 0x4018831, 0xffffffffffffffff, 0x0) r5 = userfaultfd(0x80801) ioctl$UFFDIO_API(r4, 0xc018aa3f, &(0x7f00000000c0)) ioctl$UFFDIO_REGISTER(r5, 0xc020aa00, &(0x7f0000000040)={{&(0x7f0000ffa000/0x3000)=nil, 0x3000}, 0x1}) ioctl$UFFDIO_UNREGISTER(r4, 0x8010aa01, &(0x7f0000000000)={&(0x7f0000ffa000/0x3000)=nil, 0x3000}) 6m21.913062897s ago: executing program 4 (id=216): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket$inet6_sctp(0xa, 0x1, 0x84) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000040)={0x1f, 0x4, &(0x7f0000000140)=@framed={{}, [@ldst={0x3, 0x0, 0x3, 0x1, 0x0, 0xffffffffffffffe0}]}, &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x13, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) setsockopt(r3, 0x84, 0x81, &(0x7f00000002c0)="1a00000002000000", 0x8) setsockopt$inet_sctp6_SCTP_AUTH_KEY(r3, 0x84, 0x17, &(0x7f0000000380)=ANY=[@ANYRES32=0x0, @ANYBLOB="01"], 0x9) setsockopt$inet_sctp6_SCTP_AUTH_DELETE_KEY(r3, 0x84, 0x19, &(0x7f0000000340)={0x0, 0x1}, 0x8) r4 = add_key$keyring(&(0x7f0000000280), &(0x7f00000002c0)={'syz', 0x3}, 0x0, 0x0, 0xffffffffffffffff) add_key(&(0x7f0000000040)='rxrpc\x00', 0x0, &(0x7f0000000100)="01000000a06b9500000011f7000000002b8ad7243ca17f9d191a522d04e76f04e0af039853983d5ad38db637e610f1f9f0de1213ab207f0e710622ff1338756272f9d78d84a8c6c00745aad46f08e3e97aed24db424e93168a8b55fc8da375e933ae52b1cb5f0050d5b0226129f0ad5a66724a36c71f5ae916ec0546e1ef34f1132bb4c9c877be2fdeccd553abcf53cdc03f730344e69fb1c51b19392d516b12ec8030697212e9ace1ce81ae2c", 0xad, r4) r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002c80)={0x3, 0x4, &(0x7f0000000140)=@framed={{0x18, 0x2, 0x0, 0x0, 0x5}, [@call={0x85, 0x0, 0x0, 0x30}]}, &(0x7f0000000bc0)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r5, 0x0, 0xe, 0x0, &(0x7f0000000100)="e0b9547ed387dbe9abc89b6f5bec", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) creat(&(0x7f0000000380)='./file0\x00', 0x89) mount(&(0x7f0000000040)=@nbd={'/dev/nbd', 0x0}, &(0x7f0000001080)='./file0\x00', 0x0, 0x1001, 0x0) 6m20.356394632s ago: executing program 4 (id=218): mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x100) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) socket$nl_route(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r5 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="1b00000000000000000000000000040000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32], 0x48) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000ac0)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b702000014000000b7030000010100008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000085000000b70000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x25, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r6}, 0x2d) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'lo\x00'}) r7 = dup(r1) mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000b80), 0x0, &(0x7f0000000140)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r7}, 0x2c, {[{@access_user}]}}) 6m18.231357955s ago: executing program 4 (id=222): mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', 0x0, 0x0, &(0x7f00000003c0)=ANY=[@ANYRESHEX=r0, @ANYRESDEC=0x0, @ANYBLOB, @ANYRESDEC=0x0]) read$FUSE(r0, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) socket$nl_generic(0x10, 0x3, 0x10) openat$uhid(0xffffffffffffff9c, &(0x7f0000000280), 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) pselect6(0x40, &(0x7f0000000000)={0x0, 0x0, 0x8000000000000000, 0x0, 0x0, 0x0, 0x0, 0x10000000}, 0x0, &(0x7f00000002c0)={0x3ff, 0x0, 0x0, 0x8, 0x0, 0x0, 0x2, 0x7}, 0x0, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_GET(r2, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000001c0)={0x30, 0x1, 0x1, 0x201, 0x0, 0x0, {0x2, 0x0, 0x2}, [@CTA_FILTER={0xc, 0x19, 0x0, 0x1, [@CTA_FILTER_ORIG_FLAGS={0x8, 0x1, 0x81c}]}, @CTA_TUPLE_ORIG={0x10, 0x1, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x3a}}]}]}, 0x30}, 0x1, 0x0, 0x0, 0x20000000}, 0x4008080) socket$inet6_sctp(0xa, 0x5, 0x84) r3 = socket$netlink(0x10, 0x3, 0x4) writev(r3, &(0x7f0000000080)=[{&(0x7f0000000340)="480000001400190d09034beafd0d36020a841a000000230f00000000a2bc5603ca00000f7f89004e00200000000101ff00c00e03000200000000000000000300005839c900910000", 0x48}], 0x1) 6m15.086809915s ago: executing program 4 (id=226): socket$inet6_udp(0xa, 0x2, 0x0) syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) socket$inet6_sctp(0xa, 0x5, 0x84) socket$inet_tcp(0x2, 0x1, 0x0) r0 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000140)='kmem_cache_free\x00', r0}, 0x10) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={0x0}, 0x18) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) mkdir(&(0x7f0000005740)='./file0\x00', 0x3b) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000002c0)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x3, 0x0, 0x0, {0x7}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x5c, 0x9, 0xa, 0x409, 0x0, 0x0, {0x7}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x31}, @NFTA_SET_EXPR={0x20, 0x11, 0x0, 0x1, @quota={{0xa}, @val={0x10, 0x2, 0x0, 0x1, [@NFTA_QUOTA_BYTES={0xc, 0x1, 0x1, 0x0, 0x8}]}}}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x0, 0x84}}}, 0xa4}, 0x1, 0x0, 0x0, 0x4008084}, 0x0) 6m13.536389279s ago: executing program 4 (id=228): r0 = socket$inet_mptcp(0x2, 0x1, 0x106) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e24, @multicast2}, 0x10) r4 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r4, 0x6, 0xc, &(0x7f0000000280)=0x4, 0x4) connect$inet(r0, &(0x7f00000009c0)={0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0x21}}, 0x10) writev(r0, &(0x7f0000000200)=[{&(0x7f00000000c0)='X', 0x8030000}], 0x1) shutdown(r0, 0x1) r5 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) ioctl$int_in(r5, 0x40000000af01, 0x0) 6m11.57154229s ago: executing program 4 (id=231): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000000)=@abs={0x0, 0x0, 0xffffffff}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket(0x10, 0x803, 0x0) write(r3, &(0x7f0000000540)="1c0000005e001f2a7921c550334ef9f92b4525733814584707f9f4ff", 0x1c) r4 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000140)='/proc/crypto\x00', 0x0, 0x0) getsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x6, 0x0, 0x0) unshare(0x62040200) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='net/ip6_flowlabel\x00') r5 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x0, 0x0}) ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, 0x0) close_range(r5, 0xffffffffffffffff, 0x0) pread64(r4, &(0x7f0000001280)=""/4108, 0x100c, 0xfa64) syz_emit_ethernet(0x76, &(0x7f0000001600)={@broadcast, @dev, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, '\x00', 0x40, 0x3a, 0x0, @remote, @mcast2, {[], @pkt_toobig={0x2, 0x0, 0x0, 0x1, {0x6, 0x6, "c1665d", 0xfffb, 0x0, 0x1, @loopback, @mcast2, [@routing={0x33, 0x0, 0x1, 0x46}, @fragment={0x3b, 0x0, 0xcf, 0x1, 0x0, 0x1e, 0x64}]}}}}}}}, 0x0) 5m56.229883873s ago: executing program 33 (id=231): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000000)=@abs={0x0, 0x0, 0xffffffff}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket(0x10, 0x803, 0x0) write(r3, &(0x7f0000000540)="1c0000005e001f2a7921c550334ef9f92b4525733814584707f9f4ff", 0x1c) r4 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000140)='/proc/crypto\x00', 0x0, 0x0) getsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x6, 0x0, 0x0) unshare(0x62040200) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='net/ip6_flowlabel\x00') r5 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x0, 0x0}) ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, 0x0) close_range(r5, 0xffffffffffffffff, 0x0) pread64(r4, &(0x7f0000001280)=""/4108, 0x100c, 0xfa64) syz_emit_ethernet(0x76, &(0x7f0000001600)={@broadcast, @dev, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, '\x00', 0x40, 0x3a, 0x0, @remote, @mcast2, {[], @pkt_toobig={0x2, 0x0, 0x0, 0x1, {0x6, 0x6, "c1665d", 0xfffb, 0x0, 0x1, @loopback, @mcast2, [@routing={0x33, 0x0, 0x1, 0x46}, @fragment={0x3b, 0x0, 0xcf, 0x1, 0x0, 0x1e, 0x64}]}}}}}}}, 0x0) 3m5.084150538s ago: executing program 5 (id=548): syz_mount_image$tmpfs(&(0x7f0000000040), &(0x7f00000000c0)='./file0\x00', 0x21408, 0x0, 0x1, 0x0, &(0x7f0000006380)) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r1, &(0x7f0000000040)={0x15, 0x65, 0xffff, 0x1000, 0x8, '9P2000.u'}, 0x15) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f00000009c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee2, 0x8031, 0xffffffffffffffff, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = syz_open_dev$sndpcmc(&(0x7f00000003c0), 0x0, 0x0) ioctl$SNDRV_PCM_IOCTL_HW_REFINE(r3, 0xc25c4110, 0x0) mount$9p_fd(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000004380), 0x10, &(0x7f00000043c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {}, 0x2c, {[{@version_9p2000}, {@cache_mmap}, {@privport}, {@aname={'aname', 0x3d, '@#@'}}, {@cache_none}], [], 0x6b}}) 3m4.654514334s ago: executing program 5 (id=550): syz_mount_image$udf(&(0x7f0000000080), &(0x7f0000000180)='./file1\x00', 0x4000, &(0x7f00000003c0)=ANY=[@ANYBLOB='lastblock=00000000000000000000,umask=00000000000000000000102,dmode=00000000000000000077777,novrs,shortad,shortad,undelete,iocharset=cp437,shortad,umask=00000000000000000000006,dmode=00000000000000000000011,fileset=00000000000000000011,uid=', @ANYBLOB="d6d84c0df937ed4a0cd30000f2e9ea9568eab74a46c525dc386983eade0b0ce5f1dd911706cf7d32d7d508d1823b8871e001000000eb4ce0a008f5cdea622fc6675e5486860a752ed0298a948efa72b2c8d8525181644a3124f3544a50f192b98f055ad125fd4674534413c6044136ea5aefac5267e43739626ea9391d8f346c4694f70400000000000000cee1f628d1cec3462830606bb612bfed91181cdc107bb91a2e86de2ad5", @ANYBLOB=',session=0000\x00000000000000005,\x00'], 0x12, 0xc38, &(0x7f0000001080)="$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") r0 = openat(0xffffffffffffff9c, 0x0, 0x42, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x5) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000004c0)={0x18, 0x4, &(0x7f00000000c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r2}, 0x10) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) r3 = syz_open_dev$MSR(&(0x7f0000000280), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) sched_setaffinity(0x0, 0xfffffef7, &(0x7f0000000740)=0x410000002) socket$key(0xf, 0x3, 0x2) r4 = socket$inet6_udp(0xa, 0x2, 0x0) r5 = socket(0x840000000002, 0x3, 0xff) getsockopt$sock_cred(r5, 0x1, 0x11, 0x0, &(0x7f0000000140)) syz_mount_image$exfat(&(0x7f0000000400), &(0x7f0000000240)='./file0\x00', 0x2000084c, &(0x7f0000000540)=ANY=[@ANYBLOB='iocharset=ascii,discard,dmask=00000000000000000000007,uid=', @ANYRESHEX, @ANYRES16, @ANYRES8, @ANYBLOB=',uid=', @ANYRESHEX=0xee00, @ANYBLOB="2c646973636172642c00fb278330ab3b4884d36adf6908d11f57832035e96a1513231140da182ca77aeedc492bbc501d94f854a7e26909bde6e698d72a15ec808a86c25d"], 0x81, 0x14ff, &(0x7f0000002a80)="$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") link(0x0, 0x0) setsockopt$inet6_int(r4, 0x29, 0x10, &(0x7f0000000040)=0xfffffff8, 0x4) pwrite64(r0, &(0x7f00000000c0)='a', 0x200000c1, 0x9000) r6 = open(&(0x7f0000000240)='./file1\x00', 0x145142, 0x0) sendfile(r6, r6, 0x0, 0x800000009) 2m57.103318532s ago: executing program 5 (id=576): prlimit64(0x0, 0xe, &(0x7f0000000180)={0xc, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = fanotify_init(0x200, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000700)={'wlan1\x00'}) sendmsg$NL80211_CMD_SET_INTERFACE(r4, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000000)=ANY=[], 0x24}}, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f00000000c0)={'wlan1\x00'}) syz_80211_inject_frame(&(0x7f00000002c0)=@device_b, &(0x7f0000000100)=@mgmt_frame=@probe_response={{{}, {}, @device_b, @device_a, @from_mac}, 0x0, @random=0x101, 0x1, @val={0x0, 0x6, @default_ap_ssid}, @val, @void, @void, @void, @void, @void, @val={0x71, 0x7, {0x0, 0x0, 0x1, 0x0, 0x1, 0x8, 0x1}}}, 0x37) syz_80211_inject_frame(0x0, 0x0, 0x0) syz_80211_inject_frame(0x0, 0x0, 0x0) syz_80211_inject_frame(0x0, 0x0, 0x32) fanotify_mark(r3, 0x201, 0x4800003e, 0xffffffffffffffff, 0x0) 2m55.552142956s ago: executing program 5 (id=570): syz_mount_image$msdos(&(0x7f00000001c0), &(0x7f0000000080)='./file1\x00', 0x8, &(0x7f0000000840)=ANY=[@ANYBLOB="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"], 0xfd, 0x1bf, &(0x7f0000000480)="$eJzs3TGL02AYB/Cn9bzmnG4TRCHg4nSon+BEThADgtJBJ4XT5SqCt0SX9mP4Af0A0qmLRGrSxkaHWmxS6++39En/edvnHZp26ZNXN99dnL+/fPvl+udIkl70T+M0Zr04jn4sTAIA2CezooivRanrXgCAdqzx/f+t5ZYAgC17/uLlkwdZdvYsTZOI6SQf5sPyscwfPc7O7qY/HNerpnk+vLLM76XN3w7z/Gpcq/L75fp0NT+MO7fLfJ49fJo18kGcb3frAAAAAAAAAAAAAAAAAAAAAADQmVuRLvx2vs/JSTM/qvLy6Kf5QI35PQdx46A6rMcDFeM2NgUAAAAAAAAAAAAAAAAAAAD/mMuPny5ej0ZvPtTFICJWn/mTole98IbL2y76sRNtKP5qke5GG6MNPwWHEbGtxmZFUax1cn2NGHR1cQIAAAAAAAAAAAAAAAAAgP9M/affX7Oki4YAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAoAP1/f83KMYRscbJyzc76nSrAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA7LHvAQAA///DgjXa") syz_mount_image$ext4(&(0x7f0000000780)='ext4\x00', &(0x7f0000000440)='./file0\x00', 0x800010, &(0x7f0000000400)={[], [{@subj_type={'subj_type', 0x3d, '.'}}, {@dont_hash}, {@obj_type={'obj_type', 0x3d, 'F!-'}}, {@context={'context', 0x3d, 'root'}}, {@mask={'mask', 0x3d, 'MAY_READ'}}]}, 0x1, 0x793, &(0x7f0000001700)="$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") prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="18000000000004000000000000000000850000002300000095"], &(0x7f0000000180)='GPL\x00', 0x4, 0x8f, &(0x7f00000002c0)=""/143, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x3c) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000380)='sched_switch\x00', r3}, 0x10) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) creat(&(0x7f0000000040)='./file0\x00', 0x0) pipe2$9p(0x0, 0x0) open(&(0x7f00000003c0)='./file0\x00', 0x101000, 0x110) bpf$PROG_LOAD(0x5, 0x0, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='pids.current\x00', 0x275a, 0x0) ftruncate(r4, 0xc17a) syz_clone(0x8002000, 0x0, 0x0, 0x0, 0x0, 0x0) 2m52.709254991s ago: executing program 5 (id=577): connect$inet6(0xffffffffffffffff, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) symlink(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)='./file0\x00') sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0xffffffb3, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r3, &(0x7f0000000080)={0x2, 0x4e21, @broadcast}, 0x10) r4 = syz_init_net_socket$llc(0x1a, 0x801, 0x0) bind$llc(r4, &(0x7f0000000000)={0x1a, 0x0, 0x0, 0x0, 0x81, 0x42}, 0x10) connect$llc(r4, &(0x7f0000000340)={0x1a, 0x322, 0x0, 0x0, 0x4, 0x90, @random="48bd00"}, 0x10) r5 = syz_init_net_socket$llc(0x1a, 0x801, 0x0) bind$llc(r5, &(0x7f0000000000)={0x1a, 0x0, 0x0, 0x0, 0x81, 0x42}, 0x10) r6 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000600), 0x0, 0x0) close_range(r6, 0xffffffffffffffff, 0x0) 2m51.205489965s ago: executing program 5 (id=583): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x3) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x140, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = fcntl$dupfd(r2, 0x0, r2) munmap(&(0x7f0000ffc000/0x2000)=nil, 0x2000) prctl$PR_SET_MM(0x23, 0x6, &(0x7f0000001000/0x4000)=nil) prctl$PR_SET_MM(0x23, 0x7, &(0x7f0000ffc000/0x4000)=nil) brk(0x400000ffc020) setsockopt$IPT_SO_SET_REPLACE(r3, 0x4000000000000, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0xc08, 0x3, 0x468, 0xc, 0x5002004a, 0xb, 0x310, 0xea13, 0x3d0, 0x3c8, 0x3c8, 0x3d0, 0x3c8, 0x3, 0x0, {[{{@ip={@rand_addr, @local, 0x0, 0x0, 'erspan0\x00', 'ip6tnl0\x00', {}, {}, 0x6}, 0x0, 0x2c8, 0x310, 0x0, {}, [@common=@unspec=@bpf1={{0x230}, @bytecode={0x0, 0x2, 0x0, [{}, {0x16}]}}, @common=@ttl={{0x28}}]}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'pptp\x00'}}}, {{@uncond, 0x0, 0x98, 0xc0, 0x0, {}, [@inet=@rpfilter={{0x28}}]}, @common=@unspec=@NFQUEUE2={0x28}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x4c8) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty}, 0x1c) listen(r0, 0x5) getsockopt$inet_tcp_TCP_ZEROCOPY_RECEIVE(0xffffffffffffffff, 0x6, 0x23, &(0x7f0000000240)={&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1c}, &(0x7f0000000280)=0x40) r4 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x40101, 0x0) ioctl$sock_kcm_SIOCKCMUNATTACH(0xffffffffffffffff, 0x89e1, 0x0) ioctl$TCSETS(r4, 0x8926, &(0x7f00000000c0)={0x1fffc, 0xfffffffe, 0x0, 0x0, 0xfd, "bb40ef000180000002000000e600"}) syz_emit_ethernet(0x4a, &(0x7f0000000200)={@local, @empty, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "0200", 0x14, 0x6, 0x0, @remote, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0x2, 0x0, 0x0, 0x81}}}}}}}, 0x0) syz_emit_ethernet(0xa2, &(0x7f0000000100)={@local, @dev, @val={@void, {0x8100, 0x1, 0x1, 0x2}}, {@ipv6={0x86dd, @tcp={0x0, 0x6, "0a3ff2", 0x68, 0x6, 0x0, @remote, @loopback, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x1a, 0x10, 0x0, 0x0, 0x0, {[@eol, @sack={0x5, 0x1a, [0x80, 0x7, 0x1, 0xffffff01, 0x2d04, 0x8]}, @exp_smc={0xfe, 0x6}, @generic={0x0, 0xd, "4789e40599484e657b1e91"}, @sack={0x5, 0x16, [0x4, 0x3, 0xb, 0x4, 0x3]}, @exp_smc={0xfe, 0x6}, @mss={0x2, 0x4, 0x2}, @exp_smc={0xfe, 0x6}]}}}}}}}}, 0x0) 2m48.790596132s ago: executing program 34 (id=583): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x3) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x140, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = fcntl$dupfd(r2, 0x0, r2) munmap(&(0x7f0000ffc000/0x2000)=nil, 0x2000) prctl$PR_SET_MM(0x23, 0x6, &(0x7f0000001000/0x4000)=nil) prctl$PR_SET_MM(0x23, 0x7, &(0x7f0000ffc000/0x4000)=nil) brk(0x400000ffc020) setsockopt$IPT_SO_SET_REPLACE(r3, 0x4000000000000, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0xc08, 0x3, 0x468, 0xc, 0x5002004a, 0xb, 0x310, 0xea13, 0x3d0, 0x3c8, 0x3c8, 0x3d0, 0x3c8, 0x3, 0x0, {[{{@ip={@rand_addr, @local, 0x0, 0x0, 'erspan0\x00', 'ip6tnl0\x00', {}, {}, 0x6}, 0x0, 0x2c8, 0x310, 0x0, {}, [@common=@unspec=@bpf1={{0x230}, @bytecode={0x0, 0x2, 0x0, [{}, {0x16}]}}, @common=@ttl={{0x28}}]}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'pptp\x00'}}}, {{@uncond, 0x0, 0x98, 0xc0, 0x0, {}, [@inet=@rpfilter={{0x28}}]}, @common=@unspec=@NFQUEUE2={0x28}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x4c8) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty}, 0x1c) listen(r0, 0x5) getsockopt$inet_tcp_TCP_ZEROCOPY_RECEIVE(0xffffffffffffffff, 0x6, 0x23, &(0x7f0000000240)={&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1c}, &(0x7f0000000280)=0x40) r4 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x40101, 0x0) ioctl$sock_kcm_SIOCKCMUNATTACH(0xffffffffffffffff, 0x89e1, 0x0) ioctl$TCSETS(r4, 0x8926, &(0x7f00000000c0)={0x1fffc, 0xfffffffe, 0x0, 0x0, 0xfd, "bb40ef000180000002000000e600"}) syz_emit_ethernet(0x4a, &(0x7f0000000200)={@local, @empty, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "0200", 0x14, 0x6, 0x0, @remote, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0x2, 0x0, 0x0, 0x81}}}}}}}, 0x0) syz_emit_ethernet(0xa2, &(0x7f0000000100)={@local, @dev, @val={@void, {0x8100, 0x1, 0x1, 0x2}}, {@ipv6={0x86dd, @tcp={0x0, 0x6, "0a3ff2", 0x68, 0x6, 0x0, @remote, @loopback, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x1a, 0x10, 0x0, 0x0, 0x0, {[@eol, @sack={0x5, 0x1a, [0x80, 0x7, 0x1, 0xffffff01, 0x2d04, 0x8]}, @exp_smc={0xfe, 0x6}, @generic={0x0, 0xd, "4789e40599484e657b1e91"}, @sack={0x5, 0x16, [0x4, 0x3, 0xb, 0x4, 0x3]}, @exp_smc={0xfe, 0x6}, @mss={0x2, 0x4, 0x2}, @exp_smc={0xfe, 0x6}]}}}}}}}}, 0x0) 1m17.691932646s ago: executing program 7 (id=732): r0 = socket$inet_tcp(0x2, 0x1, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$SO_TIMESTAMPING(r1, 0x1, 0x25, &(0x7f0000000080)=0x474c, 0x4) bind$inet(r1, 0x0, 0x0) setsockopt$inet_int(r1, 0x0, 0xc, 0x0, 0x0) setsockopt$inet_int(r1, 0x0, 0x8, 0x0, 0x0) bind$inet(r0, &(0x7f00000000c0)={0x2, 0x4e20, @broadcast}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sendto$inet(r0, &(0x7f0000000140), 0xffffffffffffff58, 0x20008005, &(0x7f0000000100)={0x2, 0x4e20}, 0x10) shutdown(r0, 0x1) recvfrom(r0, &(0x7f0000000480)=""/110, 0x168f6f3d, 0x734, 0x0, 0xfffffffffffffecb) msgsnd(0x0, 0x0, 0x8, 0x800) msgsnd(0x0, 0x0, 0x8, 0x800) msgrcv(0x0, &(0x7f0000000380)={0x0, ""/114}, 0x7a, 0x3, 0x3800) 1m15.51383025s ago: executing program 7 (id=735): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = dup(r1) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x2000, 0x2000, &(0x7f0000006000/0x2000)=nil}) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r4 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000540)='rcu_utilization\x00', r4}, 0x10) r5 = getpid() sched_setscheduler(r5, 0x2, &(0x7f0000000200)=0x6) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r6, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r7, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r6, &(0x7f00000000c0), 0x10106, 0x2, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) mkdirat(0xffffffffffffff9c, 0x0, 0x0) mount$fuse(0x0, 0x0, 0x0, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text64={0x40, 0x0}], 0x1, 0x11, 0x0, 0x0) syz_kvm_setup_cpu$x86(r1, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text16={0x10, 0x0}], 0x1, 0x2a, 0x0, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) 1m3.318968591s ago: executing program 7 (id=756): r0 = socket(0x11, 0x800000003, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000600)={'team0\x00', 0x0}) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000140)=@newqdisc={0x14c, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x12, r1, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_mqprio={{0xb}, {0x11c, 0x2, {{0x1, [], 0x0, [0x2]}, [@TCA_MQPRIO_MIN_RATE64={0xc4, 0x3, 0x0, 0x1, [{0xc, 0x3, 0x95}, {0xc, 0x3, 0x2d}, {0xc, 0x3, 0x800}, {0xc, 0x3, 0x4}, {0xc, 0x3, 0x8}, {0xc, 0x3, 0x2}, {0xc, 0x3, 0x7f}, {0xc, 0x3, 0x5}, {0xc, 0x3, 0xc96}, {0xc, 0x3, 0x8000}, {0xc, 0x3, 0x2}, {0xc}, {0xc, 0x3, 0x8000000000000001}, {0xc, 0x3, 0x9}, {0xc}, {0xc, 0x3, 0x40}]}]}}}]}, 0x14c}}, 0x0) ioctl$BTRFS_IOC_SEND(0xffffffffffffffff, 0x40489426, &(0x7f0000000500)={{r2}, 0x8, &(0x7f00000004c0)=[0x9d78000, 0x7, 0x3, 0xbc2, 0x3, 0x1000000, 0xf827, 0xa931], 0x4}) syz_80211_join_ibss(&(0x7f0000000100)='wlan1\x00', &(0x7f0000000180)=@random='<', 0x1, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_init_net_socket$x25(0x9, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000000)={'wlan0\x00'}) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000700)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r3, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000380)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16, @ANYBLOB="050000000000000000000600000008000300", @ANYRES32=r5, @ANYBLOB="0800050003000000b52dc49d1d4d5f82f6b61906b1d40e6b0b49ddb2121812deaa2cb307815fd08df4e509dcfad853ab818a709bbe696b2ea2ee4c5d8a48cf39971a06ce7acd883077b7903424552b2a6264f1abe7a12d641455c824cdb5fc8744a83eeada9256884f643f91e058ca329832e98474647cd75eb9a107153bc44f"], 0x24}}, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r6, 0x8933, &(0x7f0000000040)={'wlan1\x00', 0x0}) r8 = socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff) sendmsg$NL80211_CMD_DEL_KEY(r8, &(0x7f0000000440)={0x0, 0x50, &(0x7f0000000400)={&(0x7f0000000340)={0x3c, r9, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r7}, @void}}, [@NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_KEY={0x14, 0x50, 0x0, 0x1, [@NL80211_KEY_IDX={0x5}, @NL80211_KEY_TYPE={0x8}]}]}, 0x3c}}, 0x0) 1m2.225589008s ago: executing program 7 (id=757): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, 0x0, &(0x7f0000000300)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) syz_mount_image$ext4(&(0x7f00000004c0)='ext4\x00', &(0x7f0000000500)='./file1\x00', 0x1010001, &(0x7f0000000080)={[{@sb={'sb', 0x3d, 0x1}}, {@nodioread_nolock}]}, 0x4, 0x4f3, &(0x7f00000012c0)="$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") sched_setscheduler(0x0, 0x2, 0x0) syz_clone(0x600, 0x0, 0x33, 0x0, 0x0, 0x0) r1 = getpid() getpriority(0x1, r1) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) r2 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000040), 0x42, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_EXP_GET(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000340)=ANY=[@ANYBLOB="3800000001020103000000f300000000020020082400018014000180"], 0x38}, 0x1, 0x0, 0x0, 0x40048095}, 0x20004010) mount$fuse(0x0, 0x0, 0x0, 0x20, &(0x7f00000003c0)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r2, @ANYRESDEC=0x0, @ANYBLOB="2c04000000000000003d"]) read$FUSE(r2, &(0x7f00000077c0)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r2, &(0x7f0000000080)={0x50, 0x0, r4, {0x7, 0x1f, 0x0, 0xbe952926be63d77d, 0xfffe, 0x19, 0x0, 0x0, 0x0, 0x0, 0x80}}, 0x50) syz_fuse_handle_req(r2, &(0x7f00000042c0)="000000000000000000000000000000000000000000000000000000000000000090c400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000542d0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ea8286a2fba523440000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000633956a1000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001800000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000007d6ab715107fa1820000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f6ffffffffffffff0000000000000e000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000e1ffffff00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f4000000000000000000000000000000000200000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000286071480000000000b13bc1e6d970884f00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000060000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000fcffffff00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000200000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f3ffffffffffffff00", 0x2000, 0x0) openat(0xffffffffffffff9c, &(0x7f0000004280)='./file0\x00', 0x0, 0x0) fallocate(r0, 0x0, 0x0, 0x20000) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xb, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r5 = getpid() sched_setscheduler(r5, 0x2, &(0x7f0000000200)=0x4) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000280)='sched_switch\x00'}, 0x18) r6 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDSETLED(r6, 0x4b45, 0x4) 1m1.082146726s ago: executing program 7 (id=759): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r3, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x4) ioctl$KVM_IOEVENTFD(0xffffffffffffffff, 0x4040ae79, 0x0) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r3, 0x6, 0x14, &(0x7f00000013c0)=0x80000000001, 0x4) connect$inet6(r3, &(0x7f0000000180)={0xa, 0x0, 0x0, @loopback}, 0x1c) sendto$inet6(r3, &(0x7f00000002c0)="e8", 0xfffffffffffffd79, 0x2000c850, 0x0, 0x4d) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) dup3(r3, r4, 0x0) mmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x12, r4, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r4, 0x6, 0x23, &(0x7f0000000140)={&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000000080)=0x40) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r4, 0x6, 0x23, &(0x7f0000000100)={&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000001380)=0x40) 59.329675933s ago: executing program 7 (id=763): ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) r0 = open(&(0x7f0000000180)='./bus\x00', 0x14927e, 0x0) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x27fffff, 0x4002011, r0, 0x3000) fallocate(r0, 0x0, 0x0, 0x1000f4) r1 = socket$alg(0x26, 0x5, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x6) syz_clone(0x0, 0x0, 0xfffffe11, 0x0, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000000580)=""/102392, 0x18ff8) bind$alg(r1, &(0x7f0000000440)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-cipher_null\x00'}, 0x58) r3 = accept$alg(r1, 0x0, 0x0) r4 = dup(r3) write$FUSE_INIT(r4, &(0x7f0000000080)={0x4f}, 0xfffffdef) setsockopt(r4, 0x1, 0x20, &(0x7f0000000040)="c04bfa0a", 0x4) read$FUSE(r4, &(0x7f0000002000)={0x2020}, 0xfffffc7c) 57.914950185s ago: executing program 35 (id=763): ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) r0 = open(&(0x7f0000000180)='./bus\x00', 0x14927e, 0x0) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x27fffff, 0x4002011, r0, 0x3000) fallocate(r0, 0x0, 0x0, 0x1000f4) r1 = socket$alg(0x26, 0x5, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x6) syz_clone(0x0, 0x0, 0xfffffe11, 0x0, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000000580)=""/102392, 0x18ff8) bind$alg(r1, &(0x7f0000000440)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-cipher_null\x00'}, 0x58) r3 = accept$alg(r1, 0x0, 0x0) r4 = dup(r3) write$FUSE_INIT(r4, &(0x7f0000000080)={0x4f}, 0xfffffdef) setsockopt(r4, 0x1, 0x20, &(0x7f0000000040)="c04bfa0a", 0x4) read$FUSE(r4, &(0x7f0000002000)={0x2020}, 0xfffffc7c) 21.740548761s ago: executing program 6 (id=820): socket$inet_icmp_raw(0x2, 0x3, 0x1) socket(0x2a, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) pread64(0xffffffffffffffff, 0x0, 0x0, 0x1) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0xa4, 0x30, 0x1, 0x0, 0x0, {}, [{0x90, 0x1, [@m_ct={0x44, 0x2, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x9d, 0x11e41e7a, 0x7, 0x2, 0xf}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}, @m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x804}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) r3 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r3, 0x29, 0x40, 0x0, 0x0) r4 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) bind$llc(r4, &(0x7f0000000040)={0x1a, 0x0, 0x0, 0x54}, 0x10) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='blkio.bfq.io_queued\x00', 0x275a, 0x0) write$cgroup_int(r5, &(0x7f0000000000), 0xffffff6a) sendfile(r4, r5, 0x0, 0xffffffff000) 18.476630222s ago: executing program 3 (id=823): mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0xa4, 0x30, 0x1, 0x0, 0x0, {}, [{0x90, 0x1, [@m_ct={0x44, 0x2, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x9d, 0x11e41e7a, 0x20000000, 0x0, 0xf}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}, @m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x804}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mount(0x0, &(0x7f00000002c0)='./file0\x00', &(0x7f0000000400)='ramfs\x00', 0x2000000, 0x0) chdir(&(0x7f0000000280)='./file0\x00') creat(&(0x7f0000000300)='./bus\x00', 0x15d) r3 = open(&(0x7f00000000c0)='./bus\x00', 0x14103e, 0x0) r4 = open(&(0x7f0000000000)='./file0\x00', 0x143042, 0xfe) ftruncate(r4, 0x2008002) r5 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r5, 0x0, 0x0) mount$overlay(0x0, 0x0, &(0x7f0000000180), 0x0, &(0x7f00000001c0)={[{@lowerdir={'lowerdir', 0x3d, './file0'}, 0x3a}], [], 0x2f}) sendfile(r3, r4, 0x0, 0x80000001) 14.626815082s ago: executing program 3 (id=827): r0 = creat(0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0xb, &(0x7f0000000380)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020000000000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000300)='rcu_utilization\x00', r4}, 0x10) execveat(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x1000) bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000040)={r4, r0, 0x7, 0x0, @void}, 0x10) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000600)='cpuacct.usage_percpu_sys\x00', 0x275a, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) socket$packet(0x11, 0x3, 0x300) creat(&(0x7f0000000000)='./file0\x00', 0x0) r6 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r6, 0xaf01, 0x0) read$FUSE(0xffffffffffffffff, &(0x7f000000e0c0)={0x2020}, 0x2020) openat(r5, &(0x7f0000004280)='./file0\x00', 0x410000, 0x100) openat(0xffffffffffffff9c, 0x0, 0x90001, 0x0) 14.144147239s ago: executing program 6 (id=828): ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) r0 = open(&(0x7f0000000180)='./bus\x00', 0x14927e, 0x0) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x27fffff, 0x4002011, r0, 0x3000) fallocate(r0, 0x0, 0x0, 0x1000f4) r1 = socket$alg(0x26, 0x5, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x6) syz_clone(0x0, 0x0, 0xfffffe11, 0x0, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000000580)=""/102392, 0x18ff8) bind$alg(r1, &(0x7f0000000440)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-cipher_null\x00'}, 0x58) r4 = accept$alg(r1, 0x0, 0x0) r5 = dup(r4) write$FUSE_INIT(r5, &(0x7f0000000080)={0x4f}, 0xfffffdef) setsockopt(r5, 0x1, 0x20, &(0x7f0000000040)="c04bfa0a", 0x4) read$FUSE(r5, &(0x7f0000002000)={0x2020}, 0xfffffc7c) 13.321220002s ago: executing program 1 (id=829): socket$packet(0x11, 0x3, 0x300) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000002000000b7030000e8ff"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000d00)='sched_switch\x00', r0}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000280)=0x8) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000180)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x18, 0x3, &(0x7f0000000d00)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r4 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000001c0)='task_newtask\x00', r3}, 0x10) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz1\x00', 0x1ff) r5 = bpf$ITER_CREATE(0xb, &(0x7f0000000100)={r4}, 0x8) close(r5) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0x15, 0x10, 0x8, 0x0, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) r7 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x8, 0xf, &(0x7f0000000c80)=@ringbuf={{}, {{0x18, 0x1, 0x1, 0x0, r6}, {}, {0x7, 0x0, 0xb, 0x2}, {0x85, 0x0, 0x0, 0x51}}, {}, [], {{}, {}, {0x85, 0x0, 0x0, 0x5}}}, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$BPF_GET_PROG_INFO(0x1c, &(0x7f00000003c0)={r7, 0x0, 0x0}, 0x10) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000500)={r6, &(0x7f0000000240), 0x0}, 0x20) syz_open_dev$dri(&(0x7f00000008c0), 0xd21, 0x0) 12.273757999s ago: executing program 1 (id=832): r0 = syz_usb_connect(0x0, 0x3f, &(0x7f00000001c0)=ANY=[@ANYBLOB="11010000733336088dee1adb23610000000109022d0001100000000904000003fe03010009cd8d1f000200000009050502000000001009058b1e20"], 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000300)={0x84, &(0x7f0000000100)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) kexec_load(0x7fffffffffffffff, 0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f00000007c0)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x2, 0x16, &(0x7f0000000180)=ANY=[@ANYBLOB="611230000000000061134c0000000000bf2000000000000016001000071b48013d030100000000000f02000000000000bc26100000000000bf67200000000000160200000fff07006702000007000000360600000ee600f0bf050000000000000f650000000000006507f4ff02000000070700004c0040001f75000000000000bf54000000000000070500000300f9ffad430100000000009500000000000000050000000000000095000000000000004d9bd591d568253e9988431ec068e3a83683d58719d72183f2cb7f43dd55788be820b2"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) ioctl$int_out(0xffffffffffffffff, 0x5462, 0x0) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mkdir(&(0x7f0000000040)='./file1\x00', 0x0) mkdir(&(0x7f0000000000)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000380)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}]}) r2 = syz_usb_connect(0x0, 0x24, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0x9e, 0x17, 0x36, 0x10, 0x17ef, 0x721e, 0xde06, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x2, 0x6}}]}}]}}, 0x0) syz_usb_control_io$hid(r2, 0x0, &(0x7f0000000480)={0x2c, &(0x7f0000000080)={0x40, 0x14, 0x4, "3fab0be5"}, 0x0, 0x0, 0x0, 0x0}) r3 = open(&(0x7f0000000580)='./file1\x00', 0x80242, 0x1df2a23c5997fa5f) write$FUSE_CREATE_OPEN(r3, &(0x7f0000000180)={0xa0, 0xffffffffffffffda, 0x0, {{0x4, 0x3, 0x5, 0x6, 0x3, 0x1, {0x1, 0x180, 0x20ff, 0x5, 0x89, 0xd615, 0x9, 0x7fffffff, 0xfffffffe, 0x8000, 0x0, 0x0, 0x0, 0x3ff, 0x1}}, {0x0, 0x13}}}, 0xa0) syz_io_uring_setup(0xa94, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x20000000, 0x26b}, &(0x7f0000000040), 0x0) r4 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) ioctl$FS_IOC_GETVERSION(r4, 0x40045b0a, &(0x7f0000000040)) 12.272746799s ago: executing program 6 (id=833): socket$nl_netfilter(0x10, 0x3, 0xc) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) syz_open_dev$sndpcmp(0x0, 0x0, 0x100) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) r1 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r1, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000000000)=""/96, 0x128000, 0x800}, 0x20) r2 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$XDP_UMEM_COMPLETION_RING(r1, 0x11b, 0x6, &(0x7f0000000140)=0x20, 0x4) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r2, 0x8933, &(0x7f0000000080)={'batadv_slave_1\x00', 0x0}) setsockopt$XDP_UMEM_FILL_RING(r1, 0x11b, 0x5, &(0x7f0000000200)=0x8, 0x4) setsockopt$XDP_RX_RING(r1, 0x11b, 0x2, &(0x7f0000000180)=0x8, 0x4) bind$xdp(r1, &(0x7f00000002c0)={0x2c, 0x0, r3}, 0x10) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r4 = syz_open_dev$vim2m(&(0x7f0000000000), 0x3, 0x2) ioctl$vim2m_VIDIOC_STREAMOFF(r4, 0xc0205647, 0x0) pselect6(0x40, &(0x7f0000000000)={0x0, 0x2, 0x8000000000000000, 0x8000f, 0xffffffffffffffff, 0x0, 0x100, 0x10001000}, 0x0, &(0x7f00000002c0)={0x3ff, 0x6, 0xfffffffffffffffd, 0x8, 0x0, 0x0, 0x2, 0x5}, 0x0, 0x0) 10.719021293s ago: executing program 3 (id=834): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) quotactl_fd$Q_GETFMT(0xffffffffffffffff, 0xffffffff80000402, 0x0, &(0x7f0000000280)) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = inotify_init() prctl$PR_GET_TID_ADDRESS(0x28, &(0x7f0000000040)) inotify_add_watch(r3, &(0x7f0000000340)='.\x00', 0xa50003d1) socket$nl_generic(0x10, 0x3, 0x10) faccessat2(0xffffffffffffff9c, 0x0, 0x1, 0x100) mknod$loop(&(0x7f0000000140)='./file0\x00', 0x0, 0x1) mount(&(0x7f0000000100)=@nullb, &(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)='befs\x00', 0x0, 0x0) r4 = fsopen(&(0x7f00000000c0)='gadgetfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r4, 0x6, 0x0, 0x0, 0x0) syz_mount_image$nilfs2(&(0x7f00000000c0), &(0x7f0000000300)='./file1\x00', 0x4800, &(0x7f0000000340)=ANY=[@ANYRES16=0x0, @ANYBLOB="f9cba1923b054572145c2e67b885838cb353bc831573228abfb498e7f1fd8103aceb50858482ddb69dd9112c10e3d66c32cab6609b02bf9f07615fb29a27d49a24de56c84013a0c47945492852bdc34e69ddc25ffb9f4d1dd1af98558daa9974edd7d1abd46ee9d69da503b22758321d5031603da076b28cfc7d9477af38586cb482ad3a187ab4c7b916fad188280cee", @ANYRES8=r4, @ANYRES64=r4, @ANYRES32=r4, @ANYRES64=r4, @ANYRESHEX=r4, @ANYRES64, @ANYRES64=r4], 0x1, 0xda6, &(0x7f0000003c80)="$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") mknodat(0xffffffffffffff9c, &(0x7f0000000100)='./file3\x00', 0xc1c0, 0x0) 10.645509124s ago: executing program 0 (id=835): madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={0x0, r0}, 0x18) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x11, 0x3, &(0x7f0000000680)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000}}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x16, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r2 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDFONTOP_GET(r2, 0x4b72, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) r3 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r3, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$tipc(&(0x7f0000000300), 0xffffffffffffffff) getpid() setsockopt$RXRPC_SECURITY_KEYRING(0xffffffffffffffff, 0x110, 0x2, &(0x7f0000000540)='string\x00\xa2\xb5\xbf4\x04`P\xfb\b}\xd6\xe1\"\xf9\xae\xa4N\x10\x13!\x04\x00\x97\xb6\x94\xc2\x0f8\x997Vg\xa2\xeb\xb4RU|\x99t\xe0N\x1c\xf4-\t\x80?\x10\xf7J\',\xd1Bxq\x16R\xe4\x88\x02\xfd\x81q<5n^.izR*\xcfL\xb7Q\xb8\xf2e\xbb\xd3r>\x86\x14\x963\xc0N\x18\x1cm%\x01w\xba*\xd1\xfa\xf8\xa3\xfabP\xaf\x9a\x0e\x9fjZ\xcaX\xdaV\x88`\xac\xe4\x86(\xfd\x0f\x96\xffd9;\xb5\xdd?\xbcc#\x17\xea\\\xc1\x12\xa2\xdcb\fB\xddk\xb3\x14=T\xcb\xe0\v\xeb\x18!_\xa6\x06\xb5*_^ns\xd7\xfe\xc1t\'\x1bJ4V\rV\xf0\xabP]\x18\x8c\xe3\xb0@\xe0A:', 0xca) r4 = io_uring_setup(0x3eae, &(0x7f0000000080)={0x0, 0xc95e}) io_uring_register$IORING_REGISTER_BUFFERS(r4, 0x0, &(0x7f00000002c0), 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x8) r5 = dup(r1) ioctl$TIOCL_SETSEL(r5, 0x541c, &(0x7f0000000100)={0x2, {0x2, 0x0, 0x6, 0x1fc}}) 10.529515596s ago: executing program 6 (id=836): r0 = syz_open_dev$radio(&(0x7f00000000c0), 0xffffffffffffffff, 0x2) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r1}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x9, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r2 = getpid() pipe2$9p(&(0x7f0000000240), 0x0) write$binfmt_script(0xffffffffffffffff, &(0x7f0000000180), 0x4) close(0xffffffffffffffff) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) write$USERIO_CMD_SET_PORT_TYPE(0xffffffffffffffff, &(0x7f00000001c0)={0x1, 0x3}, 0x2) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) setsockopt$SO_BINDTODEVICE(0xffffffffffffffff, 0x1, 0x19, 0x0, 0x0) mknodat$loop(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x0) mount(0x0, 0x0, 0x0, 0x8200, 0x0) ioctl$VIDIOC_S_EXT_CTRLS(r0, 0xc0205647, &(0x7f0000000000)={0xfffffff, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0}) syz_usb_connect(0x0, 0x2d, &(0x7f00000002c0)={{0x12, 0x1, 0x0, 0xfa, 0xcf, 0x89, 0x10, 0x499, 0x8206, 0xf455, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x1b, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x94, 0x0, 0x1, 0xff, 0xe5, 0x57, 0x0, [], [{{0x9, 0x5, 0x4, 0x2, 0x20, 0x9, 0x5, 0x7}}]}}]}}]}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) 7.970821176s ago: executing program 1 (id=837): ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) socket(0x400000000010, 0x3, 0x0) socket$unix(0x1, 0x1, 0x0) socket(0x400000000010, 0x3, 0x0) openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040), 0x2801, 0x0) msgctl$IPC_SET(0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r3, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={0x0, 0x64}}, 0x0) r4 = socket(0x10, 0x80002, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=ANY=[@ANYBLOB="1400000010e7010000000000000000000000000a20000000000a03000000000000000000070000000c00044000000000000000021c000000090a010400000000000000000700000008000a400000"], 0x64}, 0x1, 0x0, 0x0, 0x4004001}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="500000001000010425bbe5ad600027842cf52300", @ANYRES32=0x0, @ANYBLOB="0300000000000000280012800a00010076786c616e00"], 0x50}, 0x1, 0x0, 0x0, 0x13d33d22cca65c15}, 0x4008840) sendmmsg$alg(r4, &(0x7f00000000c0), 0x492492492492627, 0x0) 7.749467229s ago: executing program 3 (id=838): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8a}, 0x0) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = fsopen(&(0x7f0000000280)='ceph\x00', 0x0) socket(0xa, 0x1, 0x3) r4 = openat$procfs(0xffffffffffffff9c, &(0x7f00000003c0)='/proc/sysvipc/shm\x00', 0x0, 0x0) read$FUSE(r4, &(0x7f0000002480)={0x2020}, 0x2020) syz_open_dev$evdev(0x0, 0x0, 0x121041) ioctl$EVIOCSFF(0xffffffffffffffff, 0x40304580, &(0x7f00000000c0)={0x0, 0x0, 0x0, {0x0, 0x100000000000001}, {0x74, 0x2}}) lseek(r4, 0xfffffffffffffff5, 0x1) fsconfig$FSCONFIG_SET_STRING(r3, 0x1, &(0x7f0000000b40)='source', &(0x7f0000000040)='c:::\x00', 0x0) r5 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_PORT_GET(r5, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000240)={0x20, 0x1405, 0x621, 0x0, 0x0, "", [{{0x8}, {0x8}}]}, 0x20}}, 0x0) 7.748514139s ago: executing program 0 (id=839): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x7) r1 = getpid() sendmsg$IPCTNL_MSG_EXP_GET(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={0x0}, 0x1, 0x0, 0x0, 0x81}, 0x4) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee2, 0x8031, 0xffffffffffffffff, 0xffffe000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) mknod$loop(&(0x7f0000000080)='./file0\x00', 0x100000000000600d, 0x1) r4 = openat$dir(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x8000, 0x6) lseek(r4, 0x9, 0x4) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @multicast1}, 0x10) connect$inet(r2, &(0x7f0000000040)={0x2, 0x4e23, @multicast2}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000001080)='dctcp\x00', 0x6) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000140)={0x1, &(0x7f0000000280)=[{0x6, 0x0, 0x2, 0xe4}]}, 0x10) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) writev(0xffffffffffffffff, &(0x7f0000000140)=[{&(0x7f0000000080)="580000001400192340834b80040d8c560a067f0200ff000000000000000058000b4824ca945f64009400ff0325010ebc000000000000008000f0fffeffe809005300fff5dd00000010000200040010000800014004000000", 0x58}], 0x1) sendto$inet(r0, 0x0, 0x0, 0x24040fbc, &(0x7f0000000440)={0x2, 0x4e23, @local}, 0x10) 5.658413052s ago: executing program 0 (id=840): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000080)={'ipvlan0\x00'}) socket$inet_icmp_raw(0x2, 0x3, 0x1) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000140)={{}, &(0x7f00000000c0), &(0x7f0000000100)}, 0x20) ioctl$sock_inet6_tcp_SIOCINQ(0xffffffffffffffff, 0x541b, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000300)={&(0x7f0000000380)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x2, [@struct]}}, 0x0, 0x26, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x20) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x1) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_getscheduler(0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) r2 = openat$audio(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$SNDCTL_DSP_SETFRAGMENT(r2, 0xc004500a, &(0x7f0000000240)=0x3) ioctl$SNDCTL_DSP_SPEED(r2, 0xc0045002, &(0x7f00000000c0)) read$dsp(r2, &(0x7f0000000300)=""/79, 0x4f) 5.617630613s ago: executing program 6 (id=841): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) write$binfmt_format(0xffffffffffffffff, &(0x7f0000000100)='-1\x00', 0x2) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="020000000400000006000000050000000010"], 0x48) sendmsg$TIPC_CMD_DISABLE_BEARER(0xffffffffffffffff, 0x0, 0x20008000) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000001070000000000000000260018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000800007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x26, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r4}, 0x10) mkdir(&(0x7f00000003c0)='./file0\x00', 0x21) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000100)='sysfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x0) mkdir(&(0x7f0000000200)='./bus\x00', 0x100) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000300)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) syz_mount_image$ext4(&(0x7f0000000100)='ext4\x00', &(0x7f0000000680)='./file1\x00', 0x1018ed8, &(0x7f00000005c0)={[{@nouid32}, {@nodiscard}, {@nodelalloc}, {@usrquota}, {@nolazytime}, {@noblock_validity}, {@block_validity}, {@barrier}]}, 0x6, 0x647, &(0x7f0000002740)="$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") syz_emit_ethernet(0x0, 0x0, 0x0) 4.295485503s ago: executing program 1 (id=842): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000400)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs={0x0, 0x0, 0x4e20}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r3}, 0x10) time(0xfffffffffffffffc) r4 = syz_io_uring_setup(0x24f7, 0x0, &(0x7f0000000000)=0x0, &(0x7f0000000140)=0x0) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)=ANY=[@ANYBLOB="640000000206010200000000000000000000000015000300686173683a69702c706f72742c6e6574000000000900020073797a32000000000500040000000000140007800800124000000000050015002200000005000500020000000500010006"], 0x64}}, 0x0) sendmsg$IPSET_CMD_LIST(r7, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000002c0)={0x1c, 0x7, 0x6, 0x301, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5}]}, 0x1c}}, 0x0) syz_io_uring_submit(r5, r6, 0x0) io_uring_enter(r4, 0x4d92, 0x0, 0x0, 0x0, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x4000) r8 = socket$inet6(0xa, 0x3, 0x8000000003c) writev(r8, &(0x7f0000000200), 0x0) madvise(&(0x7f0000bc0000/0x400000)=nil, 0x400000, 0x9) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0) 3.639852033s ago: executing program 0 (id=843): r0 = socket(0x11, 0x800000003, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000600)={'team0\x00', 0x0}) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000140)=@newqdisc={0x14c, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x12, r1, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_mqprio={{0xb}, {0x11c, 0x2, {{0x1, [], 0x0, [0x2]}, [@TCA_MQPRIO_MIN_RATE64={0xc4, 0x3, 0x0, 0x1, [{0xc, 0x3, 0x95}, {0xc, 0x3, 0x2d}, {0xc, 0x3, 0x800}, {0xc, 0x3, 0x4}, {0xc, 0x3, 0x8}, {0xc, 0x3, 0x2}, {0xc, 0x3, 0x7f}, {0xc, 0x3, 0x5}, {0xc, 0x3, 0xc96}, {0xc, 0x3, 0x8000}, {0xc, 0x3, 0x2}, {0xc}, {0xc, 0x3, 0x8000000000000001}, {0xc, 0x3, 0x9}, {0xc}, {0xc, 0x3, 0x40}]}]}}}]}, 0x14c}}, 0x0) ioctl$BTRFS_IOC_SEND(0xffffffffffffffff, 0x40489426, &(0x7f0000000500)={{r2}, 0x8, &(0x7f00000004c0)=[0x9d78000, 0x7, 0x3, 0xbc2, 0x3, 0x1000000, 0xf827, 0xa931], 0x4}) syz_80211_join_ibss(&(0x7f0000000100)='wlan1\x00', &(0x7f0000000180)=@random='<', 0x1, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_init_net_socket$x25(0x9, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000000)={'wlan0\x00'}) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000700)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r3, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000380)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16, @ANYRES32=r5, @ANYBLOB="0800050003000000b52dc49d1d4d5f82f6b61906b1d40e6b0b49ddb2121812deaa2cb307815fd08df4e509dcfad853ab818a709bbe696b2ea2ee4c5d8a48cf39971a06ce7acd883077b7903424552b2a6264f1abe7a12d641455c824cdb5fc8744a83eeada9256884f643f91e058ca329832e98474647cd75eb9a107153bc44fe5"], 0x24}}, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r6, 0x8933, &(0x7f0000000040)={'wlan1\x00', 0x0}) r8 = socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff) sendmsg$NL80211_CMD_DEL_KEY(r8, &(0x7f0000000440)={0x0, 0x50, &(0x7f0000000400)={&(0x7f0000000340)={0x3c, r9, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r7}, @void}}, [@NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_KEY={0x14, 0x50, 0x0, 0x1, [@NL80211_KEY_IDX={0x5}, @NL80211_KEY_TYPE={0x8}]}]}, 0x3c}}, 0x0) 3.572117914s ago: executing program 6 (id=844): r0 = socket$netlink(0x10, 0x3, 0xc) bind$netlink(r0, 0x0, 0x0) r1 = syz_init_net_socket$ax25(0x3, 0x3, 0x8) connect$ax25(r1, &(0x7f0000000000)={{0x3, @null}, [@netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @bcast, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @bcast, @default, @bcast, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}]}, 0x10) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r0, 0x10e, 0x4, &(0x7f0000000140)=0x6, 0x4) setsockopt$sock_int(r0, 0x1, 0x8, 0x0, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0x5, 0x4, 0x2003, 0xc, 0x0, 0xffffffffffffffff, 0xfffffffe, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) close(0x3) bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r3 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r3}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) r4 = socket$kcm(0x29, 0x5, 0x0) recvmsg$kcm(r4, &(0x7f0000001540)={0x0, 0x0, 0x0}, 0x6169380b529ab93a) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x2a, &(0x7f0000000000), 0x4) recvmmsg(0xffffffffffffffff, &(0x7f0000001140), 0x700, 0x2, 0x0) sendmsg$IPCTNL_MSG_CT_NEW(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000001c0)=ANY=[@ANYBLOB], 0x98}}, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1) write$6lowpan_enable(0xffffffffffffffff, 0x0, 0x2b) 3.053475782s ago: executing program 3 (id=845): bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000400)=@bpf_lsm={0xe, 0x0, 0x0, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x1b, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) syz_genetlink_get_family_id$nl802154(0x0, 0xffffffffffffffff) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000640)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r0}, 0x18) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) sched_setaffinity(0x0, 0xfffffef7, &(0x7f0000000740)=0x410000002) r2 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000040), 0xd00, 0x0) syz_mount_image$erofs(&(0x7f0000000180), &(0x7f0000000400)='./file3\x00', 0x200048, &(0x7f00000003c0)=ANY=[], 0xfd, 0x1d1, &(0x7f0000000440)="$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") r3 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file3\x00', 0x0, 0x0) read$FUSE(r3, &(0x7f0000003880)={0x2020}, 0xffffffe4) read$FUSE(r3, &(0x7f00000058c0)={0x2020}, 0x2020) read$FUSE(r2, &(0x7f0000002440)={0x2020}, 0x2020) read$char_usb(r2, &(0x7f00000045c0)=""/250, 0xfa) r4 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000280)={'macvtap0\x00'}) openat$vcsu(0xffffffffffffff9c, 0x0, 0x2, 0x0) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f00000005c0)={0xffffffffffffffff, &(0x7f00000000c0)="ca9d61cfa1abbe72ef94eda6a0d7862efcb6fef72642672c6147d924ae9715ebbbbe708a4016fff2645742dd6f4decb6167e67febb", 0x0}, 0x20) syz_mount_image$ext4(&(0x7f0000000880)='ext4\x00', &(0x7f0000000040)='./file0\x00', 0x21000e, &(0x7f0000000600)={[{@errors_remount}, {@init_itable_val={'init_itable', 0x3d, 0x3}}, {@usrquota}]}, 0xe1, 0x531, &(0x7f0000000a80)="$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") 2.987891294s ago: executing program 1 (id=846): syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000180)='./file0\x00', 0xc008, &(0x7f0000001140)=ANY=[@ANYRES8=0x0, @ANYBLOB="150372626c9d5f3317ad8221d37e160e79c5f6e278be2130ca7330b2", @ANYRESDEC, @ANYRES16, @ANYBLOB="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"], 0x40, 0x2f6, &(0x7f0000000e40)="$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") r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) recvfrom$inet6(0xffffffffffffffff, 0x0, 0x0, 0xc0000000, 0x0, 0x0) setsockopt$netlink_NETLINK_TX_RING(0xffffffffffffffff, 0x10e, 0xc, 0x0, 0x0) sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0x800) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) newfstatat(0xffffffffffffff9c, 0x0, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x100) lstat(&(0x7f0000000100)='./file0\x00', &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) setregid(r4, r5) unshare(0x22020400) syz_clone(0x200, 0x0, 0x0, 0x0, 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f00000018c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)=ANY=[@ANYBLOB="240000001e000100000000000000000007"], 0x24}}, 0x0) fstatfs(r0, 0x0) 936.211306ms ago: executing program 3 (id=847): syz_mount_image$hfsplus(&(0x7f0000000140), &(0x7f0000000080)='./bus\x00', 0x810484, &(0x7f0000000400)=ANY=[@ANYRES64=0x0, @ANYRES64, @ANYBLOB="0c67ad5302d79e0387ae2184cb9eab8866ee888f25e1f7f69325821748830f9254d0e210803af54ab70bcbf6ac50360fad1b2192cee8ca32b2d9f0df4387956cc596d85a2878d487b401b6c08ad074806e14880d0cc3e697739a5c4fc0688f75d64ff50f57d9d19eee36d5e08ba0e6cf80007b5be1ba5124", @ANYRESHEX=0x0, @ANYRES16=0x0, @ANYRES32, @ANYRESDEC=0x0], 0x1, 0x675, &(0x7f0000001280)="$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") r0 = socket$nl_route(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000040)={0x80}, 0x10) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, 0x0}, 0x0) setxattr$trusted_overlay_upper(&(0x7f0000000000)='./file1\x00', &(0x7f00000000c0), 0x0, 0x841, 0x0) unlinkat(0xffffffffffffffff, &(0x7f0000000180)='./bus\x00', 0x0) openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000300)='sched_switch\x00', r1}, 0x18) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x4) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000740)=0x410000002) socket$inet6(0xa, 0x2, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFQNL_MSG_CONFIG(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)={0x14, 0x2, 0x3, 0x101, 0x0, 0x0, {0x2, 0x0, 0xa}}, 0x14}, 0x1, 0x0, 0x0, 0x804}, 0x20000000) r5 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r5, 0x8001000000000000, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x8, 0x3, 0x258, 0x0, 0x11, 0x148, 0xb8, 0x0, 0x1c0, 0x2a8, 0x2a8, 0x1c0, 0x2a8, 0x3, 0x0, {[{{@uncond, 0x0, 0x70, 0xb8}, @unspec=@CT0={0x48}}, {{@ip={@multicast2, @empty, 0x0, 0x0, 'vlan0\x00', 'netdevsim0\x00'}, 0x0, 0xd8, 0x108, 0x0, {}, [@common=@unspec=@connmark={{0x30}, {0x40, 0x0, 0x1}}, @common=@unspec=@quota={{0x38}, {0x0, 0x0, 0x0, {0x7}}}]}, @common=@unspec=@CONNMARK={0x30, 'CONNMARK\x00', 0x1, {0x2}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x2b8) 929.551736ms ago: executing program 0 (id=856): r0 = socket(0x11, 0x800000003, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000600)={'team0\x00', 0x0}) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000140)=@newqdisc={0x14c, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x12, r1, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_mqprio={{0xb}, {0x11c, 0x2, {{0x1, [], 0x0, [0x2]}, [@TCA_MQPRIO_MIN_RATE64={0xc4, 0x3, 0x0, 0x1, [{0xc, 0x3, 0x95}, {0xc, 0x3, 0x2d}, {0xc, 0x3, 0x800}, {0xc, 0x3, 0x4}, {0xc, 0x3, 0x8}, {0xc, 0x3, 0x2}, {0xc, 0x3, 0x7f}, {0xc, 0x3, 0x5}, {0xc, 0x3, 0xc96}, {0xc, 0x3, 0x8000}, {0xc, 0x3, 0x2}, {0xc}, {0xc, 0x3, 0x8000000000000001}, {0xc, 0x3, 0x9}, {0xc}, {0xc, 0x3, 0x40}]}]}}}]}, 0x14c}}, 0x0) ioctl$BTRFS_IOC_SEND(0xffffffffffffffff, 0x40489426, &(0x7f0000000500)={{r2}, 0x8, &(0x7f00000004c0)=[0x9d78000, 0x7, 0x3, 0xbc2, 0x3, 0x1000000, 0xf827, 0xa931], 0x4}) syz_80211_join_ibss(&(0x7f0000000100)='wlan1\x00', &(0x7f0000000180)=@random='<', 0x1, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'wlan0\x00'}) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000700)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r3, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000380)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16, @ANYRES32=r4, @ANYBLOB="0800050003000000b52dc49d1d4d5f82f6b61906b1d40e6b0b49ddb2121812deaa2cb307815fd08df4e509dcfad853ab818a709bbe696b2ea2ee4c5d8a48cf39971a06ce7acd883077b7903424552b2a6264f1abe7a12d641455c824cdb5fc8744a83eeada9256884f643f91e058ca329832e98474647cd75eb9a107153bc44fe5"], 0x24}}, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff) sendmsg$NL80211_CMD_DEL_KEY(r5, &(0x7f0000000440)={0x0, 0x50, &(0x7f0000000400)={&(0x7f0000000340)={0x3c, r6, 0x1, 0x0, 0x0, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_KEY={0x14, 0x50, 0x0, 0x1, [@NL80211_KEY_IDX={0x5}, @NL80211_KEY_TYPE={0x8}]}]}, 0x3c}}, 0x0) 927.362266ms ago: executing program 1 (id=848): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f0000001c40)=ANY=[@ANYBLOB="620af8ff0c200021bfa100000000000007010000f8ffffffb702000003000000bd120000000000008500000006000000b70000000000000095000000000000003faf4f1e7f2aa3d9b18ed81c0c869b51ec6c0af4e0e4a9446c7670568982b4e020f698393aa0f3881f9c24aa56f15199fad0093c59d66b5ece9f36c70d0f13905ea23c22624c9f87f9793f50bb546040677b0c5077da80fb982c1e9400e693146cea484a415b76966118b64f751a0f241b072e90080008002d75593a286cecc93e64c227c95aa0b784625704f07a72c234664c0af9360a1f7a5e6b607130c89f18c0c1089d8b853289e01aa27ae8b09e00e79ab20b0b8e1148f49faf2ad0000000000000006fa03c6468972089b302d7bf6023cdcedb5e0125ebbc08dee510cb2364149215108333719acd97cfa107d40224edc5465a932b77e74e802a0d42bc6099ad2300000080006ef6c1ff0900000000000010c63a949e8b7955394ffa82b8e942c89112f4ab87b1bfeda7be586602d985430cea0162ab3fcf4591c926abfb0767192302000000b0eea24492a660583eecb42cbcd3de3a83209da17a0faf60fd6ad9b97aa5fa68480366c9c6fd6fa5043aa3926b81e3b59c95c25a573dc2ed0300000000000000af99431412fd134a996382a1a04d5bb924cfe5f3185418d605ffff9c4d2ec7c32f2095e63c80aff9fa740b5b7632f32030916f89c6dad7603f2ba2a790d62d6faec2fed44da4928b30142ba11de6c5d50b83bae613402216b5054d1e7c13b1355d6f4a8245ffa4997da9c77af4c0eb97fca585ec6bf58351d564beb6d952aab9c70764b0a8a7583c90b3433b809bdb9fbd48bc873495cbff8a326eea31ae4e0f7505ebf6c9d13330ca005ace1a84521f14008c9b476fccbd6c712016219848624b87cec2dbe98223a0eb4fa39f6b5c02e6d6d90756ff57902a8f57000000009700cf0b4b8bc2294133000000000000000000030000000000000000000000000010008bc0d9559711e6e8861c46495ba585a4b2d02edc3e28dd271c896249ed85b980680b00002b435ac15fc0288d9b2a169cdcacc413038dafb7a2c8cb482bac0ac502d9ba96ffffff7f0000100000006da21b40216e14ba2d6ad5656bfff17addaedab25b30002abbba7fa725f38400be7c1f001b2cd317902f19e385be9e48dccff729433282830689da6b53b263339863297771429d120000003341bf4abacac95900fca0493cf29b33dcc9ffffffffffffffd39fec2271ff01589646efd1cf870cd7bb2366fde41f94290c2a5ff870ce41fd3467decb05cfd9fcb32c8ed1dbd9d10a64c1083d5e71b5565b1768ee58969c4159b364a4fd7013f34db173a4fdacf15229df17bcad70fb4021428ce970275d13b78100788f11f76161d46ea3ab60fa4d30dc94ef241875f3b4ce0232fcea69c271d7fa29822aea68a660e717a04becff0f719197724f4fce1093b62d7e8c7123d8ec571be54c72d978cf906df0042e36acd37d7f9e119f2c06f815312e0cfe222a06f56dd022c074eb8a322fb0bf47c0a8d154b405c37feaf3dd95f6ef2ae582786105c7df8be5877050c91301bb997316dbf17866fb84d4173731efe895ff2e1c5560926e90109b598502d3e959efc71f665c4d75cf2458e3546c1c776da64fb5abee0acfd235f2f4632c9062ece84c99a061887a20639b41c8c12ee86c50804042b3fb5aac518a75f9e7d7101d5e186c489b3a06fb99e0aa7f23a054de2f4d92d6bd72ee2c9fdc75aaaf1e3e483b4ad05573af40326993947d9a631bcbf3583784acbda216550d7aec6b79e30cbd128f54c2d3335457acf37331766e472391e358c3b377327ac9ecc34f24c9ae153ec60ac0694dc55bff9f5f45f90400000000000000d6b2c5ea1393fdf24285bf16b99c9cc0ad1857216f1a985f369191ae954febb3df464bfe0f7f3ee9afe7befb89d2777399f5874c553aeb3729cffe86e66964ae09bb6d163118e4cbe024fd4500f8ff0700000000cc9d8046c216c1f895778cb25122a2a9f9b444aeadea2a40da8daccf080842a486721737390cbf3a74cb2003016f1514216bdf57d2a40d40b51ab63e96ec8485b3b8a8c9ae3d14f93100c2e0893862eef552fcde2981f48c482bde8a168c3f5db2fea6f26e4a4304e50c349f4f9ecee27defc93871c5f99b355b72d538ba4978ea8e4aa37014191e10096e7e60fc3541a2c905a1a95e9571bf38ae1981c4238ecaee6f75cd0a6881bd1517a8250ddc8674152f94e3a409e2a3bce109b60000000000000000d6d5210d7503000000a87a27602b81f76386f1535bef1497f92186086e29c6bc5a1fad6ec9a31137abf9a404abde7750898b1bd627e873f8703be867a28f09c5877fc2355ecdc9c30dcb2d70d1ab57075228a9f46ed9bd1f08fb8191bbab2dc51de3a61f0868afc4294859323e6c257a45319f18101288d139bd3da20fed05a8fe64680b0a3fc22dd70400000000946912d6c98cd1a9fbe1e7d58c08acaf30235b918a31d2eca55f74a23641f61f2d5b308cf0d031b0009556237badf4e7965bbe2777e808fcba821aa8e8c5c39609ff854352cb4900000000000000000000000000c1fee30a3f7a85d1b29e58c77685efc0ceb1c8e5729c66418d169fc03aa188546b3ad2a182068e1e3a0e2505bc7f41019645466a53f1c96e0d4b3bc19faa5449209b083dbd334b47f067bbab40743b2a42010082008df75cf43f8ecc8d3726602111b40e761fd21081920382f14d12ca3c3431ee97471c7868dcda7eaa69eb7f7f80572fdd11bb1d0d1280fbc22bf73468788df51710d7d31c632fc5ed1762eb0b428ee751c47d8e894f745a868404a0bf35f0121008b722b1eaa6aedfa1bf2e7ccb2d61d5d7226bbd9ccd628ab84875f2c50ba891cea592b0430a537a395dc73bda367bf12cb7d81691a5fe8c47be395656a297e9df0e71f96756ea5cce7daac4be290159f6bcd75f0dda9de5532e71ae9e48b0ed0254a83100000000f6fbb869604d51a36a54c832e45b2569dc0d90b075225fde44c4e0973171ad47d6b0fdf9743af932cd6db49a47613808bad959710300000000000000832d0a45fa4242e24c7e800003c9e8095e02985f28e678f66422436f949e2ab8f162d7e3f855e378f4a1f40b0c6fb2d4b205a800b6d713acebc5b014e61a543a5a194f9ac18d76b5440e3b1a569e7397f6cafa86966d7ba19e720413267a6ccea9c439671d2c680f2753ca184eeeb843450368acb4383a01d25eb3d1e23e0f2645d1cdfa9fa410632f95a5f622f851c66ee7e30393cd7a4d67ff3a49c4f93c0984b5c2d4523497e4d64f95f08493564a1df87111c9bf3194fef97dcecc467ace45feeb685c5870d05f88a0f463db88d377442e1349acaf766218b54a9d624778e1c4e064c98e494198276eb2df7766411bef0ebb5000000000006065d635b0b7a00ee767221d8af9753387e0cd8d718f54a29df6eba3bd4c440e6e2172e3fcc01b8babb357b5c59217b80d0db3ba582814a604e4ef7a803e9ca7c85b35c9b93a9e0885e238b44ae1c2e64cce3b27083b8246829e64056000302bffff15405bd5f2eba20000000000000000000000000000000000009a9823fd8fbc5aa165099c5ed032b48ea12d8e0588dc52702e4084913a06d468d0928bad76d697e1f85ab030e788d38788ee5b5428d4a971cc97db9fd231088e570735ce129e7e77fc2777692664a1488fd8d6dff4dad618fd54f529d4555c6507009ee69dd1bc55258789b24052137e9637f3efbab71720f88cf573fe0e5239c000be2733c49546f6e8a9175ec6f14dbf72cac91643b2fd99c29eca28a3c2e60d5e5b8795fae16a7c3ea57e728eca35eaf0155a39f97580e079175426c088a0208040982a0000000000000000000000000051ceaaf0159fe61f2eade7603d0a7a56fb09cd119ac06adb6597155ae47846892bb423c024d8cbe9240b71ec6dc2124d3a19e2d714b273d95d1d3aa737cb04a33615ff2a730e51067d5d675d7122361c37c61a43b5afd865b60d4cae891b73220f17d25985a7f76834995e53a93a1c7b9eef267df691ca983a0b15bda7f6c5c1ca7aa50265a3089a1ebf0734c9b07e8951ff023263ad5aed8cfb49b49e128c697724c057d22c5df5aef27ce3db11d5ad5527d149d076e1a87e2df27c0cb8a67ad026bf953e88f10447e125c2c0f1aebee1f3390a9e3ddad4e2a6e0f6e4569fdefa19e870e04acf9493b963f98e23cfc665e4f465fa3f801e1957c399e45f61d3459b1c606204368bb931345af2823c487d2fd99db6ea6e008e7ffa06ca861551189d155bd077a79fe2c7e961352e56824f727d21d41eae78bfec4a2d7a7edbc8ef958c5ea599f7c25bf71c2340558aa12fdd24a88aaad5921aee7dae6a2f3009d9cb43ab4898d0f0aa565431b6abe585d75db04d1c9ba0b9de4ae8b0d3132bc6810cc9a693979f55174a72e1df9fdef35bc470f9e6e591982757f45c52c645d891bf63bb21fb66926ebe1a8525611fc3e8bb8795c36dc2a86b5ab46ff33cc74f61751b2dae92676db85c8d0c721b7ea4544bf51c95c86fcac1f434d09d1ee4928aafe23de66fed972e0dddfb33f64e48701b049239e7f552d816441d11c4c2647c014462344359198d97c4b6e9ed31ca18987b64de079b2bed641e8a92f13ca70844c65cb423d01950b0ebf44bd28e09c05d9ae5dd689fb880fb18d042219f5ac60c3a03b085abf3e8e3efc842a8d328733461f04c99607061c65ed14c61322a5ac2d371a95b8ad867857ed13a4fa4ae033a09673866cd77f4bcdaaa05207166b19a8758d8855400d8c6a7242dc207251e8797eca24ea4f487663e60f2f5e1f1424958fd148f846830e88a42d9a0e06da200481cde8bf475bc3e1fe9c0b4a4a268921738938aa9f3cb3811ac87c54c8ebc8bcfb4613cc3a997ff1579edbd4ade8020e3ad001b072b1a751b588ac4639f35a58e00a50c0270608c7a7f10132b1c25b9ea81232fbef665f6212f875b2a00"/3590], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x2e) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000540)='rcu_utilization\x00', r0}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x6) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x0, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000380)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) r4 = socket$netlink(0x10, 0x3, 0x7) bind$netlink(r4, &(0x7f0000000000)={0x10, 0x0, 0x25dfdbff}, 0xc) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x400000, 0x3, &(0x7f0000000000/0x400000)=nil) r5 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r6 = socket$inet_tcp(0x2, 0x1, 0x0) sendfile(0xffffffffffffffff, r6, 0x0, 0x0) bind$bt_hci(r5, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='cgroup.controllers\x00', 0x7a44, 0x1700) write$bt_hci(r5, &(0x7f0000000380)=ANY=[@ANYBLOB="0e00010002"], 0x8) r7 = socket$inet(0xa, 0x1, 0x0) setsockopt$IPT_SO_SET_REPLACE(r7, 0x0, 0x40, &(0x7f0000004300)=@mangle={'mangle\x00', 0x44, 0x6, 0x420, 0x2b8, 0x0, 0x138, 0x0, 0x0, 0x388, 0x388, 0x388, 0x388, 0x388, 0x6, 0x0, {[{{@ip={@broadcast, @multicast1=0xe0007600, 0x0, 0x0, 'gre0\x00', 'ip6gre0\x00'}, 0x7a00, 0x70, 0x98}, @inet=@DSCP={0x28}}, {{@ip={@initdev={0xac, 0x1e, 0x0, 0x0}, @local, 0x0, 0x0, 'batadv_slave_1\x00', 'nicvf0\x00', {}, {}, 0x11}, 0x0, 0x70, 0xa0}, @TPROXY={0x30, 'TPROXY\x00', 0x0, {0x0, 0x0, @local}}}, {{@ip={@broadcast, @multicast2, 0x0, 0x0, 'vlan1\x00', 'nr0\x00'}, 0x0, 0xb8, 0xe0, 0x0, {}, [@common=@unspec=@limit={{0x48}, {0x29000000, 0x28, 0x0, 0x0, 0x0, 0x1}}]}, @ECN={0x28}}, {{@ip={@rand_addr, @private, 0x0, 0x0, 'syzkaller0\x00', 'veth1_to_team\x00'}, 0x0, 0x70, 0xa0}, @TPROXY={0x30, 'TPROXY\x00', 0x0, {0x0, 0x0, @empty}}}, {{@ip={@empty, @empty, 0x0, 0x0, 'lo\x00', 'batadv_slave_1\x00'}, 0x0, 0xa0, 0xd0, 0x0, {}, [@common=@unspec=@mac={{0x30}, {@multicast}}]}, @TPROXY={0x30, 'TPROXY\x00', 0x0, {0x0, 0x0, @loopback}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x480) 526.346692ms ago: executing program 0 (id=849): prlimit64(0x0, 0xe, &(0x7f0000000240)={0xc, 0xfffffffffffff800}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = openat$vcsa(0xffffffffffffff9c, 0x0, 0x4080, 0x0) syz_mount_image$nilfs2(&(0x7f00000005c0), &(0x7f0000000340)='./bus\x00', 0x8, &(0x7f00000002c0)=ANY=[], 0x1, 0xad4, &(0x7f0000001540)="$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") syz_mount_image$exfat(0x0, &(0x7f0000000100)='./bus\x00', 0x4800, 0x0, 0x0, 0x0, &(0x7f0000000000)) mount$overlay(0x0, &(0x7f00000000c0)='./file1\x00', &(0x7f0000000200), 0x0, &(0x7f0000001100)={[{@upperdir={'upperdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@workdir={'workdir', 0x3d, './bus'}}], [], 0x2c}) r4 = syz_init_net_socket$ax25(0x3, 0x3, 0xcd) ioctl$SIOCAX25ADDUID(r4, 0x89e1, &(0x7f0000000040)={0x3, @bcast, 0xee00}) r5 = socket$inet6_sctp(0xa, 0x5, 0x84) r6 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r6, 0x84, 0x6f, &(0x7f0000000280)={0x0, 0x10, &(0x7f0000000000)=[@in={0x2, 0x4e20, @rand_addr=0x64010102}]}, &(0x7f00000002c0)=0x10) ioctl$PPPOEIOCDFWD(r3, 0xb101, 0x0) getsockopt$inet_sctp6_SCTP_MAX_BURST(r6, 0x84, 0x83, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000300)=0x8) setsockopt$inet_sctp6_SCTP_AUTH_ACTIVE_KEY(r5, 0x84, 0x18, &(0x7f00000001c0)={r7, 0x9}, 0x8) syz_emit_vhci(&(0x7f0000000000)=ANY=[@ANYBLOB], 0x7) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x1e, 0x2, &(0x7f0000000000)=@raw=[@generic={0x9, 0x2, 0xe, 0xc8ec, 0x800}, @func={0x85, 0x0, 0x1, 0x0, 0xfffffffffffffff9}], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x28, '\x00', 0x0, 0x24, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) 0s ago: executing program 8 (id=764): syz_mount_image$iso9660(&(0x7f0000000080), &(0x7f0000000540)='./file0\x00', 0x320c81c, &(0x7f0000000380)=ANY=[], 0x1, 0x556, &(0x7f00000015c0)="$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") open_by_handle_at(0xffffffffffffff9c, &(0x7f00000000c0)=ANY=[@ANYBLOB=' \x00\x00'], 0x0) write$UHID_INPUT(0xffffffffffffffff, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000480)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4000000000000007910480000000000610400000000000095000000"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) close(r3) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000029c0)={0xffffffffffffffff, 0xffffffffffffffff}) r6 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f0000000540)=ANY=[@ANYBLOB="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"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x366, 0x10, &(0x7f0000000000), 0x1dd, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) r7 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0xf, 0x4, 0x4, 0x12, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$BPF_PROG_DETACH(0x8, &(0x7f00000007c0)=ANY=[@ANYRES32=r7, @ANYRES32=r6, @ANYBLOB='&'], 0x10) sendmsg$inet(r5, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000bc0)=[{&(0x7f0000000780)='}', 0x1}], 0x1}, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000000c0)={{r7}, &(0x7f0000000000), &(0x7f00000002c0)=r3}, 0x20) sendmsg$inet(r5, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000001740)=[{&(0x7f0000000280)='>', 0x22fe0}], 0x1}, 0x0) recvmsg$unix(r4, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)=[{&(0x7f0000000340)=""/229, 0xec1}], 0x1}, 0x0) kernel console output (not intermixed with test programs): ity change from 0 to 1024 [ 170.785664][ T4976] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 172.761690][ T4254] EXT4-fs (loop3): unmounting filesystem. [ 172.947376][ T4341] team0 (unregistering): Port device team_slave_1 removed [ 173.002501][ T4341] team0 (unregistering): Port device team_slave_0 removed [ 173.048237][ T4341] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 173.096869][ T4341] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 173.477685][ T4341] bond0 (unregistering): Released all slaves [ 174.116875][ T4992] loop4: detected capacity change from 0 to 2048 [ 174.906314][ T5005] netlink: 4 bytes leftover after parsing attributes in process `syz.3.141'. [ 176.007823][ T4737] 8021q: adding VLAN 0 to HW filter on device bond0 [ 177.323275][ T4441] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 177.346460][ T4441] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 177.509590][ T4347] usb 4-1: new low-speed USB device number 3 using dummy_hcd [ 177.549892][ T4991] I/O error, dev loop4, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 177.761073][ T4737] 8021q: adding VLAN 0 to HW filter on device team0 [ 178.321929][ T4347] usb 4-1: device descriptor read/all, error -71 [ 178.357190][ T4737] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 178.368502][ T4737] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 178.411276][ T4441] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 178.424511][ T5015] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 178.431146][ T5015] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 178.437649][ T5015] Bluetooth: hci1: Suspend notifier action (1) failed: -4 [ 178.444869][ T5015] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 178.450877][ T5015] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 178.456875][ T5015] Bluetooth: hci2: Suspend notifier action (1) failed: -4 [ 178.464075][ T5015] Bluetooth: hci5: Opcode 0x0c1a failed: -4 [ 178.470037][ T5015] Bluetooth: hci5: Opcode 0x0406 failed: -4 [ 178.477264][ T5015] Bluetooth: hci5: Suspend notifier action (1) failed: -4 [ 178.602455][ T4441] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 178.684067][ T4441] bridge0: port 1(bridge_slave_0) entered blocking state [ 178.691165][ T4441] bridge0: port 1(bridge_slave_0) entered forwarding state [ 179.593520][ T5022] netlink: 20 bytes leftover after parsing attributes in process `syz.4.143'. [ 179.659987][ T4441] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 179.684457][ T4441] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 179.708357][ T4441] bridge0: port 2(bridge_slave_1) entered blocking state [ 179.715587][ T4441] bridge0: port 2(bridge_slave_1) entered forwarding state [ 179.733309][ T4441] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 180.546828][ T4255] Bluetooth: hci2: command 0x0c1a tx timeout [ 180.552900][ T4261] Bluetooth: hci5: command 0x0c1a tx timeout [ 180.553931][ T4255] Bluetooth: hci1: command 0x0c1a tx timeout [ 180.569932][ T4441] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 180.579738][ T4441] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 180.590365][ T4441] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 180.600342][ T4441] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 180.611489][ T4441] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 180.852219][ T4441] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 180.923421][ T4441] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 180.981146][ T4441] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 181.029976][ T4441] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 181.057678][ T4441] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 181.103894][ T4441] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 181.143955][ T4441] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 181.656254][ T5058] mkiss: ax0: crc mode is auto. [ 182.339752][ T4441] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 182.359582][ T4441] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 182.419490][ T4737] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 182.563233][ T4255] Bluetooth: hci5: command 0x0406 tx timeout [ 182.563253][ T4257] Bluetooth: hci2: command 0x0406 tx timeout [ 182.643132][ T4257] Bluetooth: hci1: command 0x0406 tx timeout [ 182.936968][ T5064] netlink: 'syz.0.151': attribute type 21 has an invalid length. [ 183.028036][ T5071] mmap: syz.1.152 (5071) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 183.921275][ T5064] netlink: 'syz.0.151': attribute type 1 has an invalid length. [ 186.659405][ T5087] ceph: No mds server is up or the cluster is laggy [ 186.703573][ T3583] libceph: connect (1)[c::]:6789 error -101 [ 186.710176][ T3583] libceph: mon0 (1)[c::]:6789 connect error [ 187.679767][ T4294] libceph: connect (1)[c::]:6789 error -101 [ 187.696744][ T4294] libceph: mon0 (1)[c::]:6789 connect error [ 188.157460][ T4433] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 188.209962][ T4433] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 189.059437][ T5119] loop1: detected capacity change from 0 to 2048 [ 189.063379][ T4309] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 189.064353][ T4309] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 189.065853][ T4309] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 189.066346][ T4309] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 189.073467][ T4737] device veth0_vlan entered promiscuous mode [ 189.113194][ T5119] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 189.138677][ T5112] xt_CT: You must specify a L4 protocol and not use inversions on it [ 189.620657][ T5126] xt_addrtype: ipv6 BLACKHOLE matching not supported [ 190.612011][ T4737] device veth1_vlan entered promiscuous mode [ 190.650125][ T4350] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 191.087745][ T4737] device veth0_macvtap entered promiscuous mode [ 191.123151][ T4261] Bluetooth: hci2: command 0x0406 tx timeout [ 191.129282][ T4261] Bluetooth: hci1: command 0x0406 tx timeout [ 191.175347][ T4433] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 191.247157][ T5136] loop1: detected capacity change from 0 to 64 [ 191.272260][ T4433] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 191.306255][ T4737] device veth1_macvtap entered promiscuous mode [ 191.328804][ T4433] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 191.347471][ T4433] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 192.237725][ T5144] loop3: detected capacity change from 0 to 128 [ 192.245220][ T4737] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 192.247256][ T5144] ADFS-fs (loop3): unrecognised mount option "uid=0x00000000000000000x0000000000000000" or missing value [ 192.283335][ T4737] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 192.525474][ T4737] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 192.543058][ T4737] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 193.885441][ T4737] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 194.124083][ T4737] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 194.167548][ T1277] ieee802154 phy0 wpan0: encryption failed: -22 [ 194.173935][ T1277] ieee802154 phy1 wpan1: encryption failed: -22 [ 194.174756][ T4737] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 194.404970][ T4737] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 194.804490][ T4737] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 194.843434][ T4441] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 194.852547][ T4441] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 195.041616][ T4328] I/O error, dev loop3, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 195.184018][ T5160] loop4: detected capacity change from 0 to 256 [ 195.205199][ T5160] exfat: Deprecated parameter 'namecase' [ 195.688507][ T5160] exFAT-fs (loop4): failed to load upcase table (idx : 0x00010000, chksum : 0xb5fb52fc, utbl_chksum : 0xe619d30d) [ 195.750472][ T5170] loop3: detected capacity change from 0 to 128 [ 195.764174][ T5170] FAT-fs (loop3): Invalid FSINFO signature: 0x41615200, 0x61417272 (sector = 1) [ 195.871896][ T4261] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 195.882296][ T4261] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 195.890829][ T4261] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 195.900468][ T4261] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 195.909717][ T4261] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 195.918549][ T4261] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 196.640409][ T14] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 197.422123][ T14] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 198.144174][ T5191] gfs2: gfs2 mount does not exist [ 198.186759][ T4261] Bluetooth: hci4: command 0x0409 tx timeout [ 198.563178][ T14] usb 5-1: Using ep0 maxpacket: 32 [ 198.725221][ T26] kauditd_printk_skb: 44 callbacks suppressed [ 198.725238][ T26] audit: type=1326 audit(1744418967.781:57): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5193 comm="syz.0.177" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f89ca98d169 code=0x0 [ 198.773521][ T14] usb 5-1: device descriptor read/all, error -71 [ 199.255277][ T5207] loop3: detected capacity change from 0 to 1024 [ 200.307172][ T4261] Bluetooth: hci4: command 0x041b tx timeout [ 200.314655][ T4257] Bluetooth: hci2: unexpected cc 0x203e length: 2 > 1 [ 200.322986][ T4257] Bluetooth: hci2: unexpected event for opcode 0x203e [ 200.609870][ T4309] hfsplus: b-tree write err: -5, ino 4 [ 201.154790][ T5217] loop4: detected capacity change from 0 to 1024 [ 201.168297][ T5217] hfsplus: unable to parse mount options [ 202.166475][ T5171] chnl_net:caif_netlink_parms(): no params data found [ 202.363018][ T5238] loop0: detected capacity change from 0 to 2048 [ 202.371724][ T4257] Bluetooth: hci4: command 0x040f tx timeout [ 202.486930][ T5238] loop0: p2 p3 p7 [ 203.534718][ T4991] udevd[4991]: inotify_add_watch(7, /dev/loop0p2, 10) failed: No such file or directory [ 203.791550][ T4328] udevd[4328]: inotify_add_watch(7, /dev/loop0p3, 10) failed: No such file or directory [ 203.841809][ T5221] sctp: failed to load transform for md5: -2 [ 203.886600][ T4991] udevd[4991]: inotify_add_watch(7, /dev/loop0p7, 10) failed: No such file or directory [ 205.520815][ T4257] Bluetooth: hci4: command 0x0419 tx timeout [ 205.530836][ T14] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 205.754213][ T4295] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 205.867644][ T4295] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 207.056854][ T4991] udevd[4991]: inotify_add_watch(7, /dev/loop0p2, 10) failed: No such file or directory [ 207.072551][ T4989] udevd[4989]: inotify_add_watch(7, /dev/loop0p7, 10) failed: No such file or directory [ 207.156598][ T4328] udevd[4328]: inotify_add_watch(7, /dev/loop0p3, 10) failed: No such file or directory [ 208.147515][ T5271] device batadv0 entered promiscuous mode [ 208.156663][ T5271] 8021q: adding VLAN 0 to HW filter on device macvtap1 [ 211.656093][ T5291] loop3: detected capacity change from 0 to 1024 [ 211.696210][ T5171] bridge0: port 1(bridge_slave_0) entered blocking state [ 211.741223][ T5171] bridge0: port 1(bridge_slave_0) entered disabled state [ 211.772279][ T5291] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none. [ 211.808824][ T5171] device bridge_slave_0 entered promiscuous mode [ 211.915692][ T5171] bridge0: port 2(bridge_slave_1) entered blocking state [ 211.922870][ T5171] bridge0: port 2(bridge_slave_1) entered disabled state [ 212.434930][ T5171] device bridge_slave_1 entered promiscuous mode [ 212.696133][ T5171] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 212.978936][ T5291] EXT4-fs error (device loop3): ext4_mb_generate_buddy:1102: group 0, block bitmap and bg descriptor inconsistent: 25 vs 4278190105 free clusters [ 213.129080][ T5171] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 213.272316][ T4254] EXT4-fs (loop3): unmounting filesystem. [ 213.497540][ T5171] team0: Port device team_slave_0 added [ 213.728011][ T5171] team0: Port device team_slave_1 added [ 214.874031][ T5312] loop3: detected capacity change from 0 to 512 [ 214.891812][ T5312] EXT4-fs: Ignoring removed nobh option [ 214.917128][ T5312] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 214.930759][ T5314] loop4: detected capacity change from 0 to 256 [ 214.943738][ T5314] exfat: Deprecated parameter 'utf8' [ 214.950432][ T5314] exfat: Deprecated parameter 'utf8' [ 214.978768][ T5314] exFAT-fs (loop4): failed to load upcase table (idx : 0x00010000, chksum : 0x23a77120, utbl_chksum : 0xe619d30d) [ 215.103313][ T5171] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 215.112091][ T5171] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 215.137119][ T5312] EXT4-fs error (device loop3): ext4_free_branches:1030: inode #11: comm syz.3.196: invalid indirect mapped block 256 (level 2) [ 215.194799][ T5171] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 215.213644][ T5312] EXT4-fs (loop3): 2 truncates cleaned up [ 215.221663][ T5312] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 215.332687][ T5310] IPv6: ADDRCONF(NETDEV_CHANGE): bpq0: link becomes ready [ 216.066641][ T5171] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 216.081354][ T5171] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 216.148996][ T26] audit: type=1800 audit(1744418985.221:58): pid=5325 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.196" name="file1" dev="loop3" ino=15 res=0 errno=0 [ 216.442095][ T5171] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 217.220929][ T4299] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 217.326621][ T4254] EXT4-fs (loop3): unmounting filesystem. [ 218.899983][ T5338] netlink: 'syz.3.200': attribute type 10 has an invalid length. [ 218.913031][ T5338] netlink: 40 bytes leftover after parsing attributes in process `syz.3.200'. [ 219.108587][ T5338] team0: Port device geneve0 added [ 219.142589][ T5171] device hsr_slave_0 entered promiscuous mode [ 219.214926][ T5171] device hsr_slave_1 entered promiscuous mode [ 219.250782][ T5171] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 219.296089][ T5338] syz.3.200 (5338) used greatest stack depth: 19256 bytes left [ 219.304262][ T5171] Cannot create hsr debugfs directory [ 219.359468][ T5350] netlink: 24 bytes leftover after parsing attributes in process `syz.0.203'. [ 220.288682][ T5356] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 220.300322][ T5356] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 220.314140][ T5356] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 220.325754][ T5356] device bridge_slave_0 left promiscuous mode [ 220.354980][ T5356] bridge0: port 1(bridge_slave_0) entered disabled state [ 220.380523][ T5356] device bridge_slave_1 left promiscuous mode [ 220.393242][ T5356] bridge0: port 2(bridge_slave_1) entered disabled state [ 220.412312][ T5356] bond0: (slave bond_slave_0): Releasing backup interface [ 220.455582][ T5356] bond0: (slave bond_slave_1): Releasing backup interface [ 220.506964][ T5356] team0: Port device team_slave_0 removed [ 220.520051][ T5356] team0: Port device team_slave_1 removed [ 220.538317][ T5356] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 220.551853][ T5356] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 220.562726][ T5356] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 220.586101][ T5356] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 220.674224][ T5357] team0: Mode changed to "activebackup" [ 220.810098][ T5374] loop1: detected capacity change from 0 to 64 [ 221.559916][ T4352] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 223.088689][ T4352] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 223.640612][ T5386] netlink: 4 bytes leftover after parsing attributes in process `syz.3.210'. [ 224.510898][ T5394] loop0: detected capacity change from 0 to 8 [ 224.601325][ T26] audit: type=1800 audit(1744418993.661:59): pid=5394 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.212" name="file1" dev="loop0" ino=5 res=0 errno=0 [ 224.636479][ T5394] SQUASHFS error: Failed to read block 0x2fc: -5 [ 224.643683][ T5394] SQUASHFS error: Unable to read metadata cache entry [2fa] [ 224.650994][ T5394] SQUASHFS error: read_indexes: reading block [2fa:0] [ 224.658071][ T5394] SQUASHFS error: Failed to read block 0xfc: -5 [ 224.665193][ T5394] SQUASHFS error: Unable to read metadata cache entry [2fa] [ 224.672550][ T5394] SQUASHFS error: read_indexes: reading block [2fa:0] [ 224.680086][ T5394] SQUASHFS error: Unable to read metadata cache entry [2fa] [ 224.688528][ T5394] SQUASHFS error: read_indexes: reading block [2fa:0] [ 224.707893][ T5394] SQUASHFS error: Unable to read metadata cache entry [2fa] [ 224.715309][ T5394] SQUASHFS error: read_indexes: reading block [2fa:0] [ 224.722185][ T5394] SQUASHFS error: Unable to read metadata cache entry [2fa] [ 224.729924][ T5394] SQUASHFS error: read_indexes: reading block [2fa:0] [ 226.823513][ T5417] loop3: detected capacity change from 0 to 512 [ 226.830542][ T5417] EXT4-fs: Ignoring removed nobh option [ 227.568908][ T4352] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 227.705260][ T5417] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 227.817527][ T4433] device hsr_slave_0 left promiscuous mode [ 228.578568][ T4433] device hsr_slave_1 left promiscuous mode [ 228.596766][ T4254] EXT4-fs (loop3): unmounting filesystem. [ 228.724220][ T4681] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 228.770563][ T4433] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 228.808995][ T4433] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 229.060789][ T4433] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 229.892370][ T4433] device bridge_slave_1 left promiscuous mode [ 230.044445][ T4433] bridge0: port 2(bridge_slave_1) entered disabled state [ 231.082017][ T4433] device bridge_slave_0 left promiscuous mode [ 231.095823][ T4433] bridge0: port 1(bridge_slave_0) entered disabled state [ 231.747047][ T4433] device veth1_macvtap left promiscuous mode [ 231.770649][ T4433] device veth0_macvtap left promiscuous mode [ 231.779584][ T4433] device veth1_vlan left promiscuous mode [ 231.791049][ T4433] device veth0_vlan left promiscuous mode [ 232.994118][ T5471] netlink: 20 bytes leftover after parsing attributes in process `syz.0.225'. [ 233.285425][ T56] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 234.998733][ T4501] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 238.991506][ T4485] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 239.282538][ T4433] team0 (unregistering): Port device team_slave_1 removed [ 239.350157][ T4433] team0 (unregistering): Port device team_slave_0 removed [ 239.417641][ T4433] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 239.483260][ T4433] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 240.887423][ T4389] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 241.159034][ T5536] x_tables: ip_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING [ 242.544880][ T4433] bond0 (unregistering): Released all slaves [ 242.746564][ T5546] loop0: detected capacity change from 0 to 64 [ 243.344685][ T5509] netlink: 60 bytes leftover after parsing attributes in process `syz.3.233'. [ 243.368102][ T5540] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 243.395455][ T5540] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 243.405263][ T4328] I/O error, dev loop0, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 243.448905][ T5540] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 243.493880][ T5540] device bridge_slave_0 left promiscuous mode [ 243.505995][ T5540] bridge0: port 1(bridge_slave_0) entered disabled state [ 243.525846][ T5540] device bridge_slave_1 left promiscuous mode [ 243.532732][ T5540] bridge0: port 2(bridge_slave_1) entered disabled state [ 243.547617][ T5540] bond0: (slave bond_slave_0): Releasing backup interface [ 243.568494][ T5540] bond0: (slave bond_slave_1): Releasing backup interface [ 243.732123][ T5540] team0: Port device team_slave_0 removed [ 243.830358][ T5540] team0: Port device team_slave_1 removed [ 243.837134][ T5540] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 243.844797][ T5540] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 243.853597][ T5540] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 243.861115][ T5540] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 243.884845][ T5541] team0: Mode changed to "activebackup" [ 244.069803][ T5552] loop3: detected capacity change from 0 to 2048 [ 244.159769][ T5552] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 244.875974][ T46] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 246.765368][ T4403] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 248.158943][ T5571] input: syz0 as /devices/virtual/input/input6 [ 249.775210][ T5171] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 250.663884][ T5171] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 250.735906][ T5171] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 250.965218][ T5171] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 251.108202][ T5607] loop3: detected capacity change from 0 to 2048 [ 251.126794][ T4351] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 251.306499][ T5607] loop3: p2 p3 p7 [ 251.940371][ T5614] ALSA: seq fatal error: cannot create timer (-22) [ 251.948413][ T5613] loop0: detected capacity change from 0 to 512 [ 252.081277][ T4433] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 252.119290][ T5171] 8021q: adding VLAN 0 to HW filter on device bond0 [ 252.329150][ T5613] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback. [ 252.406949][ T32] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 252.611056][ T4433] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 252.722395][ T5613] ext4 filesystem being mounted at /68/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 252.913600][ T4261] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 252.944044][ T4261] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 252.953557][ T4261] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 252.961451][ T4261] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 252.971974][ T4261] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 252.979550][ T4261] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 253.145284][ T4351] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 253.193730][ T4351] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 253.370697][ T4433] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 254.288801][ T4433] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 254.304881][ T4259] EXT4-fs (loop0): unmounting filesystem. [ 255.045009][ T4257] Bluetooth: hci0: command 0x0409 tx timeout [ 255.654048][ T1277] ieee802154 phy0 wpan0: encryption failed: -22 [ 255.665247][ T1277] ieee802154 phy1 wpan1: encryption failed: -22 [ 256.600595][ T4255] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 257.792703][ T4485] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 257.807234][ T4441] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 258.893037][ T4255] Bluetooth: hci0: command 0x041b tx timeout [ 258.899163][ T4255] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 258.913777][ T4255] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 258.929664][ T4255] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 258.937912][ T4255] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 258.949576][ T4255] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 258.967136][ T5623] chnl_net:caif_netlink_parms(): no params data found [ 259.808654][ T5696] loop1: detected capacity change from 0 to 2048 [ 260.120459][ T5696] loop1: p2 p3 p7 [ 260.225002][ T4252] __loop_clr_fd: partition scan of loop1 failed (rc=-16) [ 260.232315][ T4991] I/O error, dev loop1, sector 608 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 260.253723][ T4989] I/O error, dev loop1, sector 408 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 260.263634][ T4328] I/O error, dev loop1, sector 208 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 260.293159][ T4991] I/O error, dev loop1, sector 608 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 260.310012][ T4328] I/O error, dev loop1, sector 208 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 260.320867][ T4989] I/O error, dev loop1, sector 408 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 260.333609][ T4991] Buffer I/O error on dev loop1p2, logical block 8, async page read [ 260.350947][ T4989] Buffer I/O error on dev loop1p7, logical block 8, async page read [ 260.359402][ T4328] Buffer I/O error on dev loop1p3, logical block 8, async page read [ 260.373125][ T4991] I/O error, dev loop1, sector 609 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 260.385945][ T5623] bridge0: port 1(bridge_slave_0) entered blocking state [ 260.398065][ T5623] bridge0: port 1(bridge_slave_0) entered disabled state [ 260.398669][ T4989] I/O error, dev loop1, sector 409 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 260.415347][ T4328] I/O error, dev loop1, sector 209 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 260.432041][ T5623] device bridge_slave_0 entered promiscuous mode [ 260.432041][ T4991] Buffer I/O error on dev loop1p2, logical block 9, async page read [ 260.432125][ T4991] I/O error, dev loop1, sector 610 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 260.465950][ T4328] Buffer I/O error on dev loop1p3, logical block 9, async page read [ 260.485911][ T4989] Buffer I/O error on dev loop1p7, logical block 9, async page read [ 260.505304][ T4328] Buffer I/O error on dev loop1p3, logical block 10, async page read [ 260.963238][ T4255] Bluetooth: hci0: command 0x040f tx timeout [ 260.972668][ T4989] Buffer I/O error on dev loop1p7, logical block 10, async page read [ 261.251417][ T4255] Bluetooth: hci5: command 0x0409 tx timeout [ 261.279394][ T5623] bridge0: port 2(bridge_slave_1) entered blocking state [ 261.293193][ T5623] bridge0: port 2(bridge_slave_1) entered disabled state [ 261.320743][ T4991] Buffer I/O error on dev loop1p2, logical block 10, async page read [ 261.331217][ T5623] device bridge_slave_1 entered promiscuous mode [ 261.340805][ T4328] Buffer I/O error on dev loop1p3, logical block 11, async page read [ 261.689260][ T4328] udevd[4328]: inotify_add_watch(7, /dev/loop1p3, 10) failed: No such file or directory [ 261.694379][ T4991] udevd[4991]: inotify_add_watch(7, /dev/loop1p2, 10) failed: No such file or directory [ 261.715983][ T4989] udevd[4989]: inotify_add_watch(7, /dev/loop1p7, 10) failed: No such file or directory [ 261.792339][ T5623] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 261.835466][ T4989] udevd[4989]: inotify_add_watch(7, /dev/loop1p7, 10) failed: No such file or directory [ 261.836020][ T4328] udevd[4328]: inotify_add_watch(7, /dev/loop1p3, 10) failed: No such file or directory [ 261.854887][ T4991] udevd[4991]: inotify_add_watch(7, /dev/loop1p2, 10) failed: No such file or directory [ 262.417421][ T5623] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 262.806021][ T5623] team0: Port device team_slave_0 added [ 262.989749][ T5730] loop3: detected capacity change from 0 to 128 [ 263.005171][ T5730] ufs: Invalid option: "0[p¶ÅI [ 263.005171][ T5730] q 4BOÀL¢‡s‰4æçŠì!±Àþ`" or missing value [ 263.016099][ T5730] ufs: wrong mount options [ 263.053388][ T4255] Bluetooth: hci0: command 0x0419 tx timeout [ 263.284702][ T4255] Bluetooth: hci5: command 0x041b tx timeout [ 263.432350][ T5623] team0: Port device team_slave_1 added [ 263.742511][ T4300] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 263.742814][ T46] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 263.901789][ T5665] chnl_net:caif_netlink_parms(): no params data found [ 263.928718][ T5623] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 263.947744][ T5623] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 264.000977][ T5623] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 264.187810][ T5623] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 264.201291][ T5623] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 264.271447][ T5623] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 264.497236][ T5754] xt_CT: You must specify a L4 protocol and not use inversions on it [ 264.652196][ T5623] device hsr_slave_0 entered promiscuous mode [ 264.673401][ T5623] device hsr_slave_1 entered promiscuous mode [ 264.691321][ T5623] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 264.700770][ T5623] Cannot create hsr debugfs directory [ 265.016238][ T4433] device hsr_slave_0 left promiscuous mode [ 265.176164][ T4433] device hsr_slave_1 left promiscuous mode [ 265.363120][ T4255] Bluetooth: hci5: command 0x040f tx timeout [ 265.390091][ T4433] device batadv0 left promiscuous mode [ 265.459852][ T4433] device veth1_macvtap left promiscuous mode [ 265.486163][ T4433] device veth0_macvtap left promiscuous mode [ 265.492419][ T4433] device veth1_vlan left promiscuous mode [ 265.498814][ T4433] device veth0_vlan left promiscuous mode [ 265.507508][ T5766] sctp: failed to load transform for md5: -2 [ 267.672984][ T4255] Bluetooth: hci5: command 0x0419 tx timeout [ 268.983825][ T4341] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 269.055226][ T4341] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 270.767689][ T4433] bond0 (unregistering): Released all slaves [ 271.358371][ T5665] bridge0: port 1(bridge_slave_0) entered blocking state [ 271.401819][ T5665] bridge0: port 1(bridge_slave_0) entered disabled state [ 271.575713][ T5665] device bridge_slave_0 entered promiscuous mode [ 271.645219][ T5665] bridge0: port 2(bridge_slave_1) entered blocking state [ 271.695505][ T5665] bridge0: port 2(bridge_slave_1) entered disabled state [ 271.731793][ T5665] device bridge_slave_1 entered promiscuous mode [ 272.027522][ T5665] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 272.278692][ T5665] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 273.025535][ T5665] team0: Port device team_slave_0 added [ 273.188309][ T5665] team0: Port device team_slave_1 added [ 273.254943][ T5665] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 273.261938][ T5665] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 273.291855][ T5665] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 273.316692][ T5665] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 273.324856][ T5665] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 273.379611][ T5665] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 273.404522][ T5623] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 273.426097][ T5623] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 273.457136][ T5623] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 273.558084][ T5623] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 273.582304][ T5665] device hsr_slave_0 entered promiscuous mode [ 273.594882][ T5665] device hsr_slave_1 entered promiscuous mode [ 273.601701][ T5665] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 273.618622][ T5665] Cannot create hsr debugfs directory [ 274.903968][ T4389] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 274.915305][ T4389] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 275.829342][ T5857] No such timeout policy "syz1" [ 275.883153][ T5853] sctp: failed to load transform for md5: -2 [ 277.053061][ T33] libceph: connect (1)[c::]:6789 error -101 [ 277.059126][ T33] libceph: mon0 (1)[c::]:6789 connect error [ 277.079029][ T5623] 8021q: adding VLAN 0 to HW filter on device bond0 [ 277.171781][ T4485] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 277.187602][ T4485] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 277.209193][ T5623] 8021q: adding VLAN 0 to HW filter on device team0 [ 277.269977][ T5623] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 277.298683][ T5623] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 277.312734][ T5870] ceph: No mds server is up or the cluster is laggy [ 277.346299][ T4441] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 277.413799][ T4441] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 277.422758][ T4441] bridge0: port 1(bridge_slave_0) entered blocking state [ 277.429937][ T4441] bridge0: port 1(bridge_slave_0) entered forwarding state [ 277.488320][ T4441] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 277.500728][ T5886] 9pnet_fd: Insufficient options for proto=fd [ 277.512399][ T4441] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 277.567188][ T4441] bridge0: port 2(bridge_slave_1) entered blocking state [ 277.574624][ T4441] bridge0: port 2(bridge_slave_1) entered forwarding state [ 277.636918][ T4441] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 277.649531][ T4441] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 277.662255][ T4441] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 277.733652][ T4441] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 277.770969][ T4441] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 277.825019][ T4441] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 277.857648][ T4441] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 277.894027][ T4441] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 277.950829][ T4441] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 277.987479][ T4441] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 278.172770][ T4441] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 278.182575][ T4441] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 278.191957][ T4441] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 279.323308][ T5908] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 279.329313][ T5908] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 279.335484][ T5908] Bluetooth: hci1: Suspend notifier action (1) failed: -4 [ 279.342733][ T5908] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 279.348731][ T5908] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 279.355201][ T5908] Bluetooth: hci2: Suspend notifier action (1) failed: -4 [ 279.362723][ T5908] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 279.368755][ T5908] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 279.374783][ T5908] Bluetooth: hci0: Suspend notifier action (1) failed: -4 [ 279.381967][ T5908] Bluetooth: hci5: Opcode 0x0c1a failed: -4 [ 279.388042][ T5908] Bluetooth: hci5: Opcode 0x0406 failed: -4 [ 279.394068][ T5908] Bluetooth: hci5: Suspend notifier action (1) failed: -4 [ 280.590043][ T4485] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 280.615784][ T4501] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 281.443219][ T4257] Bluetooth: hci5: command 0x0c1a tx timeout [ 281.449451][ T4257] Bluetooth: hci0: command 0x0c1a tx timeout [ 281.455668][ T4255] Bluetooth: hci2: command 0x0c1a tx timeout [ 281.461848][ T4255] Bluetooth: hci1: command 0x0c1a tx timeout [ 281.923492][ T5623] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 282.077654][ T4403] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 282.149091][ T4403] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 282.530517][ T5665] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 282.540999][ T5665] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 282.665863][ T5665] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 282.688176][ T5665] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 283.500580][ T4433] device hsr_slave_0 left promiscuous mode [ 283.523310][ T4255] Bluetooth: hci0: command 0x0406 tx timeout [ 283.529376][ T4255] Bluetooth: hci2: command 0x0406 tx timeout [ 283.536065][ T4257] Bluetooth: hci1: command 0x0406 tx timeout [ 283.536163][ T4265] Bluetooth: hci5: command 0x0406 tx timeout [ 283.555253][ T4433] device hsr_slave_1 left promiscuous mode [ 283.568515][ T4433] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 283.579251][ T4433] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 283.592495][ T4433] device bridge_slave_1 left promiscuous mode [ 283.602453][ T4433] bridge0: port 2(bridge_slave_1) entered disabled state [ 283.611674][ T4433] device bridge_slave_0 left promiscuous mode [ 283.618094][ T4433] bridge0: port 1(bridge_slave_0) entered disabled state [ 283.838317][ T4433] team0 (unregistering): Port device team_slave_1 removed [ 283.867942][ T4433] team0 (unregistering): Port device team_slave_0 removed [ 283.893884][ T4433] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 283.920333][ T4433] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 284.149163][ T4433] bond0 (unregistering): Released all slaves [ 284.326918][ T5665] 8021q: adding VLAN 0 to HW filter on device bond0 [ 284.352396][ T4403] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 284.370398][ T4403] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 284.395122][ T5665] 8021q: adding VLAN 0 to HW filter on device team0 [ 284.444640][ T4403] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 284.464710][ T4403] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 284.479601][ T4403] bridge0: port 1(bridge_slave_0) entered blocking state [ 284.486875][ T4403] bridge0: port 1(bridge_slave_0) entered forwarding state [ 284.505650][ T4403] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 284.515083][ T4403] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 284.529721][ T4403] bridge0: port 2(bridge_slave_1) entered blocking state [ 284.536936][ T4403] bridge0: port 2(bridge_slave_1) entered forwarding state [ 284.552600][ T4403] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 284.562749][ T4403] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 284.611835][ T4403] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 284.628585][ T4403] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 284.645786][ T4403] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 284.683890][ T4403] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 284.704928][ T4403] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 284.722356][ T4403] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 284.734371][ T4403] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 284.752554][ T4403] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 284.760809][ T4403] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 284.775090][ T4403] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 284.790243][ T4403] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 284.802846][ T4403] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 284.831707][ T5665] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 284.848751][ T5665] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 284.863980][ T5623] device veth0_vlan entered promiscuous mode [ 284.870883][ T4681] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 284.880538][ T4681] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 284.890053][ T4681] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 284.900095][ T4681] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 284.922067][ T5623] device veth1_vlan entered promiscuous mode [ 284.943050][ T4681] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 284.951369][ T4681] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 285.024872][ T4389] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 285.045667][ T4389] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 285.064599][ T4389] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 285.076232][ T5623] device veth0_macvtap entered promiscuous mode [ 285.095455][ T5623] device veth1_macvtap entered promiscuous mode [ 285.130451][ T5623] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 285.145107][ T5623] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 285.161269][ T5623] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 285.172724][ T5623] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 285.192525][ T5623] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 285.223755][ T4403] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 285.239901][ T4403] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 285.248768][ T4403] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 285.266161][ T4403] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 285.285117][ T5623] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 285.307497][ T5623] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 285.319847][ T5623] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 285.333938][ T5623] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 285.350353][ T5623] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 285.370820][ T4403] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 285.383572][ T4403] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 285.396706][ T5623] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 285.406605][ T5623] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 285.415810][ T5623] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 285.425471][ T5623] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 285.439349][ T4389] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 285.449668][ T4389] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 285.476778][ T5665] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 285.597791][ T4389] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 285.617810][ T4389] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 285.644007][ T4351] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 285.702317][ T4351] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 285.728130][ T4351] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 285.758892][ T4403] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 286.510533][ T6009] x_tables: ip_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING [ 287.190868][ T46] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 287.204750][ T9] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 287.557685][ T6015] No such timeout policy "syz1" [ 287.990262][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 288.158657][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 288.265962][ T4299] libceph: connect (1)[c::]:6789 error -101 [ 288.301040][ T4299] libceph: mon0 (1)[c::]:6789 connect error [ 288.584406][ T4294] libceph: connect (1)[c::]:6789 error -101 [ 288.590649][ T4294] libceph: mon0 (1)[c::]:6789 connect error [ 289.294385][ T5665] device veth0_vlan entered promiscuous mode [ 289.307676][ T6024] netlink: 'syz.0.310': attribute type 10 has an invalid length. [ 289.316193][ T6012] ceph: No mds server is up or the cluster is laggy [ 289.330818][ T6024] netlink: 40 bytes leftover after parsing attributes in process `syz.0.310'. [ 289.417804][ T6024] team0: Port device geneve0 added [ 289.447283][ T4433] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 289.477947][ T4433] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 289.554635][ T5665] device veth1_vlan entered promiscuous mode [ 289.601709][ T4433] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 289.641022][ T4433] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 289.904092][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 289.936016][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 289.993944][ T6042] gfs2: gfs2 mount does not exist [ 290.419633][ T5665] device veth0_macvtap entered promiscuous mode [ 290.701224][ T4485] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 290.730139][ T5665] device veth1_macvtap entered promiscuous mode [ 290.869538][ T5665] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 290.912995][ T5665] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 290.948629][ T5665] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 291.008673][ T5665] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 291.181303][ T5665] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 291.191864][ T5665] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 291.329186][ T5665] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 291.458375][ T4352] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 291.487957][ T4352] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 291.538196][ T5665] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 291.551537][ T5665] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 291.561952][ T5665] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 291.572649][ T5665] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 291.587998][ T5665] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 291.610605][ T5665] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 291.664826][ T5665] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 291.676884][ T5665] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 291.692771][ T5665] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 291.708938][ T5665] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 291.717885][ T5665] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 291.785490][ T4433] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 291.840028][ T4433] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 292.750875][ T6071] x_tables: ip_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING [ 292.795489][ T6077] No such timeout policy "syz1" [ 292.829521][ T4351] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 292.856692][ T4351] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 293.039063][ T4351] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 293.043917][ T4352] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 293.077192][ T4352] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 293.115678][ T4433] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 293.363458][ T4433] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 293.377602][ T4352] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 293.544978][ T6083] loop5: detected capacity change from 0 to 2048 [ 294.289580][ T6094] NILFS (loop5): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 294.876427][ T6094] NILFS (loop5): vblocknr = 23 has abnormal lifetime: start cno (= 4294967298) > current cno (= 3) [ 294.976025][ T6094] NILFS error (device loop5): nilfs_bmap_propagate: broken bmap (inode number=4) [ 295.450395][ T6117] netlink: 'syz.1.327': attribute type 10 has an invalid length. [ 295.458407][ T6117] netlink: 40 bytes leftover after parsing attributes in process `syz.1.327'. [ 295.470560][ T6094] Remounting filesystem read-only [ 297.097569][ T6117] team0: Port device geneve0 added [ 297.502624][ T6131] block nbd6: shutting down sockets [ 300.184015][ T4352] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 300.184515][ T4681] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 302.885484][ T6178] ubi31: attaching mtd0 [ 302.892406][ T6178] ubi31: scanning is finished [ 302.897240][ T6178] ubi31: empty MTD device detected [ 303.129670][ T6178] ubi31 error: ubi_attach_mtd_dev: cannot spawn "ubi_bgt31d", error -4 [ 305.318474][ T6209] netlink: 'syz.5.350': attribute type 10 has an invalid length. [ 305.326546][ T6209] netlink: 40 bytes leftover after parsing attributes in process `syz.5.350'. [ 305.376939][ T4255] Bluetooth: hci5: link tx timeout [ 305.382456][ T4255] Bluetooth: hci5: killing stalled connection 11:aa:aa:aa:aa:aa [ 305.410876][ T6209] team0: Port device geneve0 added [ 305.525079][ T56] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 307.601715][ T4255] Bluetooth: hci5: command 0x0406 tx timeout [ 307.626355][ T4501] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 311.852064][ T6255] lo speed is unknown, defaulting to 1000 [ 311.859263][ T6255] lo speed is unknown, defaulting to 1000 [ 311.877515][ T6255] lo speed is unknown, defaulting to 1000 [ 311.908589][ T6255] iwpm_register_pid: Unable to send a nlmsg (client = 2) [ 311.951833][ T6255] infiniband syz0: RDMA CMA: cma_listen_on_dev, error -98 [ 312.006135][ T6255] lo speed is unknown, defaulting to 1000 [ 312.017270][ T4309] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 312.096413][ T6255] lo speed is unknown, defaulting to 1000 [ 312.113517][ T6255] lo speed is unknown, defaulting to 1000 [ 312.120560][ T6255] lo speed is unknown, defaulting to 1000 [ 312.320457][ T6263] netlink: 'syz.6.364': attribute type 10 has an invalid length. [ 312.328347][ T6263] netlink: 40 bytes leftover after parsing attributes in process `syz.6.364'. [ 312.649087][ T4265] Bluetooth: hci5: link tx timeout [ 312.654891][ T4265] Bluetooth: hci5: killing stalled connection 11:aa:aa:aa:aa:aa [ 312.790855][ T6252] loop1: detected capacity change from 0 to 1024 [ 312.965274][ T6252] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none. [ 313.196758][ T6263] team0: Port device geneve0 added [ 313.214281][ T6255] lo speed is unknown, defaulting to 1000 [ 314.484842][ T11] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 314.732347][ T4252] EXT4-fs (loop1): unmounting filesystem. [ 314.942414][ T6292] loop5: detected capacity change from 0 to 1024 [ 315.802356][ T6292] EXT4-fs: Ignoring removed orlov option [ 315.809146][ T6292] EXT4-fs: Ignoring removed nomblk_io_submit option [ 316.022249][ T6292] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: none. [ 316.158640][ T6304] loop0: detected capacity change from 0 to 128 [ 316.169146][ T6304] FAT-fs (loop0): Invalid FSINFO signature: 0x41615200, 0x61417272 (sector = 1) [ 316.468555][ T26] audit: type=1326 audit(1744419085.541:60): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6290 comm="syz.5.371" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6d12b8d169 code=0x7ffc0000 [ 316.791098][ T5665] EXT4-fs (loop5): unmounting filesystem. [ 317.052265][ T1277] ieee802154 phy0 wpan0: encryption failed: -22 [ 317.058663][ T1277] ieee802154 phy1 wpan1: encryption failed: -22 [ 317.457852][ T26] audit: type=1326 audit(1744419085.541:61): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6290 comm="syz.5.371" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6d12b8d169 code=0x7ffc0000 [ 317.490467][ T26] audit: type=1326 audit(1744419085.571:62): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6290 comm="syz.5.371" exe="/root/syz-executor" sig=0 arch=c000003e syscall=2 compat=0 ip=0x7f6d12b8d169 code=0x7ffc0000 [ 317.612686][ T26] audit: type=1326 audit(1744419085.571:63): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6290 comm="syz.5.371" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6d12b8d169 code=0x7ffc0000 [ 317.646924][ T26] audit: type=1326 audit(1744419085.571:64): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6290 comm="syz.5.371" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6d12b8d169 code=0x7ffc0000 [ 317.683328][ T11] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 318.436518][ T26] audit: type=1326 audit(1744419085.571:65): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6290 comm="syz.5.371" exe="/root/syz-executor" sig=0 arch=c000003e syscall=82 compat=0 ip=0x7f6d12b8d169 code=0x7ffc0000 [ 318.458727][ T26] audit: type=1326 audit(1744419085.581:66): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6290 comm="syz.5.371" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6d12b8d169 code=0x7ffc0000 [ 318.499190][ T26] audit: type=1326 audit(1744419085.581:67): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6290 comm="syz.5.371" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6d12b8d169 code=0x7ffc0000 [ 319.239994][ T6341] siw: device registration error -23 [ 322.593518][ T4352] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 323.954151][ T6282] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 324.418823][ T6369] lo speed is unknown, defaulting to 1000 [ 325.014022][ T6371] loop6: detected capacity change from 0 to 128 [ 325.026358][ T6371] FAT-fs (loop6): Invalid FSINFO signature: 0x41615200, 0x61417272 (sector = 1) [ 325.083746][ T6373] loop1: detected capacity change from 0 to 2048 [ 327.322731][ T6343] blk_print_req_error: 17 callbacks suppressed [ 327.322748][ T6343] I/O error, dev loop1, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 327.377356][ T6373] loop1: detected capacity change from 0 to 256 [ 327.493650][ T6373] exfat: Unknown parameter 'ÿÿ00000000000000000000' [ 327.767674][ T6282] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 328.374520][ T6397] loop1: detected capacity change from 0 to 512 [ 328.778050][ T6400] lo speed is unknown, defaulting to 1000 [ 329.368376][ T6397] EXT4-fs: failed to create workqueue [ 329.373861][ T6397] EXT4-fs (loop1): mount failed [ 329.843523][ T4368] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 330.103062][ T6407] siw: device registration error -23 [ 331.890658][ T6425] netlink: 8 bytes leftover after parsing attributes in process `syz.0.399'. [ 332.620381][ T6426] loop3: detected capacity change from 0 to 32768 [ 332.628477][ T6426] XFS: ikeep mount option is deprecated. [ 332.634317][ T6426] XFS: noikeep mount option is deprecated. [ 333.901393][ T6426] XFS (loop3): Mounting V5 Filesystem [ 336.243344][ T4501] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 336.280200][ T9] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 336.450133][ T6426] XFS (loop3): Ending clean mount [ 336.464913][ T6426] XFS (loop3): Quotacheck needed: Please wait. [ 336.740060][ T6426] XFS (loop3): Quotacheck: Done. [ 338.025851][ T4254] XFS (loop3): Unmounting Filesystem [ 341.961169][ T6481] TCP: MD5 Hash mismatch for [fe80::bb]:20001->[ff02::1]:20002 L3 index 0 [ 342.051466][ T4485] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 342.051466][ T4501] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 344.186741][ T6509] tmpfs: Unknown parameter 'quota' [ 347.836846][ T4341] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 347.845483][ T6282] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 351.359345][ T6565] ubi31: attaching mtd0 [ 351.374589][ T6565] ubi31: scanning is finished [ 351.913915][ T6565] ubi31 error: ubi_attach_mtd_dev: cannot spawn "ubi_bgt31d", error -4 [ 353.163340][ T22] usb 7-1: new full-speed USB device number 2 using dummy_hcd [ 353.969686][ T6282] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 353.971022][ T46] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 355.074025][ T22] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 355.254314][ T22] usb 7-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 355.267976][ T22] usb 7-1: New USB device found, idVendor=04f3, idProduct=0755, bcdDevice= 0.00 [ 355.318463][ T22] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 355.977893][ T22] usb 7-1: config 0 descriptor?? [ 355.986194][ T22] usb 7-1: can't set config #0, error -71 [ 355.996742][ T22] usb 7-1: USB disconnect, device number 2 [ 356.432258][ T6608] loop1: detected capacity change from 0 to 8192 [ 359.810307][ T4681] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 359.928452][ T4501] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 359.963329][ T6639] lo speed is unknown, defaulting to 1000 [ 364.210592][ T6692] loop1: detected capacity change from 0 to 1024 [ 364.376375][ T6692] EXT4-fs: Ignoring removed mblk_io_submit option [ 364.387755][ T6692] EXT4-fs: Ignoring removed nomblk_io_submit option [ 365.454504][ T6692] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none. [ 365.716251][ T4309] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 366.730427][ T4341] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 366.873577][ T6711] Bluetooth: MGMT ver 1.22 [ 367.383125][ T4252] EXT4-fs (loop1): unmounting filesystem. [ 368.032375][ T6725] lo speed is unknown, defaulting to 1000 [ 372.686715][ T4501] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 372.703502][ T4351] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 373.636525][ T6767] autofs4:pid:6767:autofs_fill_super: called with bogus options [ 374.948950][ T6774] loop5: detected capacity change from 0 to 32768 [ 374.955966][ T6774] XFS: ikeep mount option is deprecated. [ 374.961637][ T6774] XFS: noikeep mount option is deprecated. [ 375.075825][ T6767] lo speed is unknown, defaulting to 1000 [ 375.228503][ T6774] XFS (loop5): Mounting V5 Filesystem [ 375.422163][ T6774] XFS (loop5): Ending clean mount [ 375.433560][ T6774] XFS (loop5): Quotacheck needed: Please wait. [ 375.578286][ T6774] XFS (loop5): Quotacheck: Done. [ 375.763017][ T4265] Bluetooth: hci0: command 0x0406 tx timeout [ 375.843165][ T5665] XFS (loop5): Unmounting Filesystem [ 377.621828][ T6814] netlink: 4 bytes leftover after parsing attributes in process `syz.1.476'. [ 377.841675][ T6819] netlink: 16 bytes leftover after parsing attributes in process `syz.1.476'. [ 378.494508][ T6609] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 378.496542][ T1277] ieee802154 phy0 wpan0: encryption failed: -22 [ 378.507665][ T4368] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 378.514135][ T1277] ieee802154 phy1 wpan1: encryption failed: -22 [ 382.164292][ T6848] loop6: detected capacity change from 0 to 32768 [ 382.171397][ T6848] XFS: ikeep mount option is deprecated. [ 382.177199][ T6848] XFS: noikeep mount option is deprecated. [ 382.289119][ T6848] XFS (loop6): Mounting V5 Filesystem [ 382.389562][ T6848] XFS (loop6): Ending clean mount [ 382.400365][ T6848] XFS (loop6): Quotacheck needed: Please wait. [ 382.529317][ T6848] XFS (loop6): Quotacheck: Done. [ 382.816827][ T5623] XFS (loop6): Unmounting Filesystem [ 384.803546][ T4441] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 385.933316][ T46] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 388.860316][ T6908] loop3: detected capacity change from 0 to 256 [ 390.308693][ T6908] __vm_enough_memory: pid: 6908, comm: syz.3.490, no enough memory for the allocation [ 390.646327][ T46] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 391.035607][ T6906] loop6: detected capacity change from 0 to 40427 [ 391.349109][ T6906] F2FS-fs (loop6): Mismatch start address, segment0(67109376) cp_blkaddr(0) [ 391.358168][ T6906] F2FS-fs (loop6): Can't find valid F2FS filesystem in 1th superblock [ 391.543851][ T4300] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 391.565426][ T6906] F2FS-fs (loop6): build fault injection attr: rate: 0, type: 0x16481 [ 391.585561][ T6906] F2FS-fs (loop6): invalid crc value [ 391.605461][ T6906] F2FS-fs (loop6): Found nat_bits in checkpoint [ 391.642916][ T6906] F2FS-fs (loop6): Start checkpoint disabled! [ 391.672115][ T6906] F2FS-fs (loop6): Try to recover 1th superblock, ret: 0 [ 391.679448][ T6906] F2FS-fs (loop6): Mounted with checkpoint version = 48b305e6 [ 391.706557][ T6925] input: syz0 as /devices/virtual/input/input7 [ 396.021969][ T6967] loop0: detected capacity change from 0 to 2048 [ 396.830635][ T4681] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 396.897604][ T6351] I/O error, dev loop0, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 397.035220][ T6967] loop0: detected capacity change from 0 to 256 [ 397.042117][ T6967] exfat: Unknown parameter 'ÿÿ00000000000000000000' [ 397.049519][ T4681] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 398.969529][ T6351] I/O error, dev loop0, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 402.104970][ T7015] autofs4:pid:7015:autofs_fill_super: called with bogus options [ 402.129312][ T7015] lo speed is unknown, defaulting to 1000 [ 402.814265][ T4433] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 405.657627][ T4300] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 405.671644][ T7047] netlink: 28 bytes leftover after parsing attributes in process `syz.1.519'. [ 405.693495][ T7047] fuse: Unknown parameter 'group_id00000000000000000000' [ 405.720512][ T7047] [U] [ 405.723652][ T7047] [U] [ 405.726388][ T7047] [U] [ 405.729113][ T7047] [U] [ 405.735579][ T7047] [U] [ 405.738324][ T7047] [U] [ 405.741054][ T7047] [U] [ 405.743792][ T7047] [U] [ 405.749051][ T7047] [U] [ 405.751801][ T7047] [U] [ 405.754525][ T7047] [U] [ 405.757242][ T7047] [U] [ 405.763429][ T7047] [U] [ 405.766158][ T7047] [U] [ 405.768862][ T7047] [U] [ 405.771567][ T7047] [U] [ 405.943678][ T7047] [U] [ 405.946439][ T7047] [U] [ 405.949128][ T7047] [U] [ 405.951821][ T7047] [U] [ 405.982810][ T7054] loop3: detected capacity change from 0 to 2048 [ 406.013849][ T7054] loop3: p1 < > p3 [ 406.059049][ T7054] loop3: p3 size 134217728 extends beyond EOD, truncated [ 406.083245][ T7047] [U] [ 406.147140][ T7059] lo speed is unknown, defaulting to 1000 [ 406.196465][ T7053] input: syz0 as /devices/virtual/input/input8 [ 406.205467][ T3623] loop3: p1 < > p3 [ 406.221908][ T3623] loop3: p3 size 134217728 extends beyond EOD, truncated [ 408.111181][ T7082] ubi31: attaching mtd0 [ 408.122257][ T7082] ubi31: scanning is finished [ 408.579281][ T56] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 408.746780][ T7082] ubi31 error: ubi_attach_mtd_dev: cannot spawn "ubi_bgt31d", error -4 [ 408.877802][ T7086] loop3: detected capacity change from 0 to 1024 [ 408.913140][ T7086] EXT4-fs: Ignoring removed mblk_io_submit option [ 408.919735][ T7086] EXT4-fs: Ignoring removed nomblk_io_submit option [ 409.912675][ T7086] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none. [ 410.027287][ T7096] loop6: detected capacity change from 0 to 256 [ 410.878090][ T4254] EXT4-fs (loop3): unmounting filesystem. [ 411.229513][ T4368] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 414.391026][ T7132] 9pnet_fd: Insufficient options for proto=fd [ 414.497883][ T4351] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 414.694906][ T7139] loop6: detected capacity change from 0 to 512 [ 414.713462][ T7139] EXT4-fs (loop6): encrypted files will use data=ordered instead of data journaling mode [ 415.036430][ T7139] EXT4-fs (loop6): 1 truncate cleaned up [ 415.062656][ T7139] EXT4-fs (loop6): mounted filesystem without journal. Quota mode: writeback. [ 416.220694][ T5623] EXT4-fs (loop6): unmounting filesystem. [ 417.306721][ T7162] loop5: detected capacity change from 0 to 1024 [ 417.323896][ T7162] EXT4-fs: Ignoring removed mblk_io_submit option [ 417.943185][ T7162] EXT4-fs: Ignoring removed nomblk_io_submit option [ 418.794892][ T4368] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 418.893102][ T7162] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: none. [ 420.085152][ T4352] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 421.823866][ T5665] EXT4-fs (loop5): unmounting filesystem. [ 422.124508][ T7202] 9pnet_fd: Insufficient options for proto=fd [ 422.900839][ T7210] loop5: detected capacity change from 0 to 2048 [ 422.962939][ T7210] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 423.228974][ T26] audit: type=1800 audit(1744419192.308:68): pid=7217 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.5.550" name="file1" dev="loop5" ino=1346 res=0 errno=0 [ 423.259850][ T7215] loop6: detected capacity change from 0 to 2048 [ 423.393873][ T7215] EXT4-fs (loop6): mounted filesystem without journal. Quota mode: none. [ 423.942069][ T4433] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 424.707821][ T7233] loop0: detected capacity change from 0 to 2048 [ 425.418277][ T7233] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 425.601220][ T5623] EXT4-fs (loop6): unmounting filesystem. [ 425.687969][ T26] audit: type=1800 audit(1744419194.765:69): pid=7233 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.557" name="bus" dev="loop0" ino=1367 res=0 errno=0 [ 426.109013][ T4433] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 426.985353][ T7257] 9pnet_fd: Insufficient options for proto=fd [ 427.256288][ T7261] loop6: detected capacity change from 0 to 512 [ 427.274246][ T7261] EXT4-fs (loop6): encrypted files will use data=ordered instead of data journaling mode [ 427.357543][ T7261] EXT4-fs (loop6): couldn't mount as ext3 due to feature incompatibilities [ 427.798120][ T7270] "syz.6.562" (7270) uses obsolete ecb(arc4) skcipher [ 429.687372][ T6609] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 430.603478][ T7291] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 430.662109][ T7298] loop0: detected capacity change from 0 to 2048 [ 430.723997][ T7285] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 430.810623][ T7298] loop0: p1 < > p3 [ 430.874244][ T7298] loop0: p3 size 134217728 extends beyond EOD, truncated [ 430.930304][ T7293] input: syz0 as /devices/virtual/input/input9 [ 431.578455][ T7311] loop5: detected capacity change from 0 to 256 [ 431.624381][ T6282] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 432.783482][ T7324] 9pnet_fd: Insufficient options for proto=fd [ 432.949249][ T26] audit: type=1804 audit(1744419201.975:70): pid=7327 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.5.570" name="/newroot/41/file1/file0" dev="loop5" ino=1048612 res=1 errno=0 [ 435.043287][ T6282] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 435.568173][ T7350] loop6: detected capacity change from 0 to 40427 [ 435.579513][ T7350] F2FS-fs (loop6): Invalid log_blocksize (268), supports only 12 [ 435.587419][ T7350] F2FS-fs (loop6): Can't find valid F2FS filesystem in 1th superblock [ 435.599898][ T7350] F2FS-fs (loop6): invalid crc value [ 435.698296][ T7350] F2FS-fs (loop6): Found nat_bits in checkpoint [ 436.230865][ T6282] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 436.386264][ T7350] F2FS-fs (loop6): Try to recover 1th superblock, ret: 0 [ 436.393343][ T7350] F2FS-fs (loop6): Mounted with checkpoint version = 48b305e5 [ 437.596831][ T7368] loop1: detected capacity change from 0 to 2048 [ 437.607370][ T56] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 437.655585][ T7368] loop1: p1 < > p3 [ 437.661713][ T6282] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 437.676216][ T7368] loop1: p3 size 134217728 extends beyond EOD, truncated [ 437.763279][ T7367] input: syz0 as /devices/virtual/input/input10 [ 437.853104][ T6282] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 437.932914][ T6929] F2FS-fs (loop6): f2fs_check_nid_range: out-of-range nid=1, run fsck to fix. [ 438.000541][ T6929] F2FS-fs (loop6): f2fs_check_nid_range: out-of-range nid=2, run fsck to fix. [ 438.042459][ T6282] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 438.376456][ T7382] loop3: detected capacity change from 0 to 64 [ 438.764148][ T26] audit: type=1800 audit(1744419207.834:71): pid=7382 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.585" name="file1" dev="loop3" ino=5 res=0 errno=0 [ 439.206309][ T7382] syz.3.585 (7382) used greatest stack depth: 18016 bytes left [ 439.355393][ T7385] loop1: detected capacity change from 0 to 1024 [ 440.574999][ T7392] hfsplus: xattr searching failed [ 440.698857][ T9] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 440.710346][ T1277] ieee802154 phy0 wpan0: encryption failed: -22 [ 440.717849][ T1277] ieee802154 phy1 wpan1: encryption failed: -22 [ 440.759686][ T4433] hfsplus: b-tree write err: -5, ino 4 [ 441.359770][ T4255] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 441.372087][ T4255] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 441.381274][ T4255] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 441.389604][ T4255] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 441.405478][ T4255] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 441.528722][ T4261] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 442.213527][ T7418] ubi31: attaching mtd0 [ 442.228336][ T7418] ubi31: scanning is finished [ 442.375348][ T7418] ubi31: attached mtd0 (name "mtdram test device", size 0 MiB) [ 442.383287][ T7418] ubi31: PEB size: 4096 bytes (4 KiB), LEB size: 3968 bytes [ 442.391354][ T7418] ubi31: min./max. I/O unit sizes: 1/64, sub-page size 1 [ 442.398781][ T7418] ubi31: VID header offset: 64 (aligned 64), data offset: 128 [ 442.406588][ T7418] ubi31: good PEBs: 32, bad PEBs: 0, corrupted PEBs: 0 [ 442.687553][ T7418] ubi31: user volume: 0, internal volumes: 1, max. volumes count: 23 [ 442.696409][ T7418] ubi31: max/mean erase counter: 1/1, WL threshold: 4096, image sequence number: 3794149056 [ 442.706837][ T7418] ubi31: available PEBs: 28, total reserved PEBs: 4, PEBs reserved for bad PEB handling: 0 [ 442.720043][ T7420] ubi31: background thread "ubi_bgt31d" started, PID 7420 [ 442.938776][ T7407] lo speed is unknown, defaulting to 1000 [ 443.149059][ T6929] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 443.713665][ T7436] random: crng reseeded on system resumption [ 443.763030][ T4261] Bluetooth: hci4: command 0x0409 tx timeout [ 445.845812][ T4261] Bluetooth: hci4: command 0x041b tx timeout [ 446.957315][ T56] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 447.420412][ T7407] chnl_net:caif_netlink_parms(): no params data found [ 447.925893][ T4261] Bluetooth: hci4: command 0x040f tx timeout [ 448.183910][ T6282] device hsr_slave_0 left promiscuous mode [ 448.379800][ T6282] device hsr_slave_1 left promiscuous mode [ 449.201054][ T6282] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 449.249190][ T6282] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 449.328121][ T7487] ubi: mtd0 is already attached to ubi31 [ 449.596497][ T11] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 449.597096][ T6282] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 449.636235][ T6282] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 449.644279][ T6282] device bridge_slave_1 left promiscuous mode [ 449.651117][ T6282] bridge0: port 2(bridge_slave_1) entered disabled state [ 449.756594][ T6282] device bridge_slave_0 left promiscuous mode [ 449.763291][ T6282] bridge0: port 1(bridge_slave_0) entered disabled state [ 450.798103][ T4261] Bluetooth: hci4: command 0x0419 tx timeout [ 451.057545][ T6282] device veth1_macvtap left promiscuous mode [ 451.063638][ T6282] device veth0_macvtap left promiscuous mode [ 451.904493][ T6282] device veth1_vlan left promiscuous mode [ 452.036763][ T6282] device veth0_vlan left promiscuous mode [ 452.748269][ T46] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 453.072025][ T7515] loop6: detected capacity change from 0 to 512 [ 453.079135][ T7515] EXT4-fs: Ignoring removed nobh option [ 453.273295][ T7515] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 453.476554][ T7515] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=8856c018, mo2=0002] [ 453.485382][ T7515] EXT4-fs (loop6): orphan cleanup on readonly fs [ 453.493381][ T7515] EXT4-fs warning (device loop6): ext4_enable_quotas:7037: Failed to enable quota tracking (type=2, err=-22, ino=15). Please run e2fsck to fix. [ 453.508663][ T7515] EXT4-fs (loop6): Cannot turn on quotas: error -22 [ 453.517335][ T7515] EXT4-fs error (device loop6): ext4_ext_check_inode:520: inode #13: comm syz.6.607: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 1, max 4(4), depth 0(0) [ 453.538728][ T7515] EXT4-fs error (device loop6): ext4_orphan_get:1405: comm syz.6.607: couldn't read orphan inode 13 (err -117) [ 453.556062][ T7515] EXT4-fs (loop6): mounted filesystem without journal. Quota mode: writeback. [ 454.284543][ T5623] EXT4-fs (loop6): unmounting filesystem. [ 455.297593][ T4433] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 457.004652][ T6282] team0 (unregistering): Port device geneve0 removed [ 457.738754][ T6282] team0 (unregistering): Port device team_slave_1 removed [ 457.790288][ T6282] team0 (unregistering): Port device team_slave_0 removed [ 457.842519][ T6282] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 457.896505][ T6282] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 458.405641][ T6282] bond0 (unregistering): Released all slaves [ 458.504349][ T14] lo speed is unknown, defaulting to 1000 [ 458.596975][ T7407] bridge0: port 1(bridge_slave_0) entered blocking state [ 458.606679][ T7407] bridge0: port 1(bridge_slave_0) entered disabled state [ 458.630726][ T7407] device bridge_slave_0 entered promiscuous mode [ 458.649420][ T7407] bridge0: port 2(bridge_slave_1) entered blocking state [ 458.656730][ T7407] bridge0: port 2(bridge_slave_1) entered disabled state [ 458.685779][ T7514] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 458.705668][ T7514] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 458.715032][ T7407] device bridge_slave_1 entered promiscuous mode [ 458.732703][ T7514] Bluetooth: hci1: Suspend notifier action (1) failed: -4 [ 458.759499][ T7514] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 458.765622][ T7514] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 458.774155][ T7514] Bluetooth: hci2: Suspend notifier action (1) failed: -4 [ 458.785844][ T7514] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 458.817209][ T7514] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 458.823313][ T7514] Bluetooth: hci0: Suspend notifier action (1) failed: -4 [ 458.837723][ T7407] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 458.849769][ T7407] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 458.853551][ T7514] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 458.866561][ T7514] Bluetooth: hci4: Opcode 0x0406 failed: -4 [ 458.883632][ T7514] Bluetooth: hci4: Suspend notifier action (1) failed: -4 [ 459.196865][ T7407] team0: Port device team_slave_0 added [ 459.227366][ T7407] team0: Port device team_slave_1 added [ 459.773733][ T7555] loop6: detected capacity change from 0 to 512 [ 459.780818][ T7555] EXT4-fs: Ignoring removed nobh option [ 459.786420][ T7555] EXT4-fs: Ignoring removed nobh option [ 460.870026][ T7555] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 460.930349][ T7555] EXT4-fs (loop6): Cannot turn on journaled quota: type 0: error -2 [ 460.939276][ T7555] EXT4-fs error (device loop6): ext4_free_branches:1030: inode #13: comm syz.6.615: invalid indirect mapped block 2683928664 (level 1) [ 460.956945][ T7555] EXT4-fs (loop6): 1 truncate cleaned up [ 460.962883][ T7555] EXT4-fs (loop6): mounted filesystem without journal. Quota mode: writeback. [ 461.098326][ T4261] Bluetooth: hci1: command 0x0c1a tx timeout [ 461.098395][ T4265] Bluetooth: hci0: command 0x0c1a tx timeout [ 461.104739][ T4261] Bluetooth: hci2: command 0x0c1a tx timeout [ 461.110633][ T4255] Bluetooth: hci4: command 0x0c1a tx timeout [ 461.249191][ T5623] EXT4-fs (loop6): unmounting filesystem. [ 461.345701][ T7564] ubi: mtd0 is already attached to ubi31 [ 461.726828][ T7407] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 461.861468][ T7407] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 461.932957][ T7407] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 461.947260][ T7407] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 461.954380][ T7407] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 461.980724][ T7407] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 462.069114][ T7407] device hsr_slave_0 entered promiscuous mode [ 462.087903][ T7407] device hsr_slave_1 entered promiscuous mode [ 462.113647][ T7407] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 462.122644][ T7407] Cannot create hsr debugfs directory [ 463.254830][ T7562] Bluetooth: hci2: command 0x0406 tx timeout [ 463.260945][ T7562] Bluetooth: hci1: command 0x0406 tx timeout [ 463.268852][ T4257] Bluetooth: hci4: command 0x0406 tx timeout [ 463.274901][ T4257] Bluetooth: hci0: command 0x0406 tx timeout [ 463.929223][ T7407] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 463.963682][ T7407] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 464.024285][ T7407] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 464.183438][ T7407] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 465.353715][ T56] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 466.044911][ T7606] loop1: detected capacity change from 0 to 64 [ 466.775728][ T26] audit: type=1800 audit(1744419235.840:72): pid=7606 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.625" name="file1" dev="loop1" ino=5 res=0 errno=0 [ 466.825915][ T7407] 8021q: adding VLAN 0 to HW filter on device bond0 [ 466.841794][ T4433] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 466.900018][ T4433] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 466.947260][ T7407] 8021q: adding VLAN 0 to HW filter on device team0 [ 466.978130][ T4433] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 466.987049][ T4433] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 466.997847][ T4433] bridge0: port 1(bridge_slave_0) entered blocking state [ 467.005052][ T4433] bridge0: port 1(bridge_slave_0) entered forwarding state [ 467.031022][ T4433] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 467.050394][ T4433] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 467.069813][ T4433] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 467.178780][ T4433] bridge0: port 2(bridge_slave_1) entered blocking state [ 467.186242][ T4433] bridge0: port 2(bridge_slave_1) entered forwarding state [ 467.339245][ T4433] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 467.524151][ T4368] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 467.660811][ T4433] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 467.742823][ T4433] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 467.779356][ T4433] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 467.977770][ T7407] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 468.373351][ T7407] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 468.538595][ T7645] loop0: detected capacity change from 0 to 1024 [ 468.821066][ T7645] EXT4-fs: Ignoring removed nobh option [ 468.826704][ T7645] EXT4-fs: Ignoring removed bh option [ 468.838057][ T7640] sctp: failed to load transform for md5: -2 [ 468.954837][ T4433] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 468.986910][ T7645] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 469.066591][ T4433] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 469.076127][ T4433] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 469.086746][ T4433] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 469.149335][ T7645] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback. [ 469.159429][ T4433] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 469.524095][ T7659] EXT4-fs error (device loop0): ext4_mb_mark_diskspace_used:3841: comm syz.0.633: Allocating blocks 497-513 which overlap fs metadata [ 469.855104][ T7659] EXT4-fs (loop0): pa ffff8880746e02a0: logic 64, phys. 193, len 20 [ 469.864001][ T7659] EXT4-fs error (device loop0): ext4_mb_release_inode_pa:4881: group 0, free 0, pa_free 1 [ 469.883070][ T4433] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 470.022505][ T4433] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 471.067684][ T4341] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 471.929332][ T4368] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 473.305856][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 473.329144][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 473.463750][ T7407] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 475.952974][ T4630] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 475.972852][ T4259] EXT4-fs (loop0): unmounting filesystem. [ 476.006675][ T4630] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 476.112080][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 476.160196][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 476.179985][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 476.209295][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 476.220142][ T7407] device veth0_vlan entered promiscuous mode [ 476.263796][ T7407] device veth1_vlan entered promiscuous mode [ 476.335253][ T4630] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 476.350920][ T4630] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 476.369899][ T4630] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 476.390503][ T4630] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 476.413202][ T7407] device veth0_macvtap entered promiscuous mode [ 476.425143][ T7407] device veth1_macvtap entered promiscuous mode [ 476.461658][ T7407] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 476.473447][ T7407] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 476.484815][ T7407] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 476.497632][ T7407] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 476.513572][ T7407] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 476.540435][ T7407] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 476.560985][ T7407] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 476.588804][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 476.621360][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 476.640585][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 476.660310][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 476.704456][ T7407] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 476.748424][ T7407] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 476.774723][ T7407] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 476.798579][ T7407] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 476.819294][ T7407] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 476.849446][ T7407] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 476.870785][ T7407] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 476.888477][ T32] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 476.911025][ T32] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 476.934561][ T7407] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 476.956100][ T7407] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 476.965858][ T7407] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 476.975308][ T7407] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 477.091796][ T4630] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 477.109504][ T4630] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 477.130656][ T32] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 477.163430][ T4630] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 477.177730][ T4630] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 477.200373][ T32] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 479.985840][ T32] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 479.987396][ T4630] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 480.185886][ T7757] loop6: detected capacity change from 0 to 4096 [ 480.221566][ T7757] ntfs3: loop6: Different NTFS' sector size (2048) and media sector size (512) [ 480.234247][ T7757] ntfs3: loop6: Mark volume as dirty due to NTFS errors [ 480.246738][ T7757] ntfs3: loop6: Failed to load $MFT. [ 480.421354][ T7750] 9pnet_fd: Insufficient options for proto=fd [ 480.539737][ T6351] I/O error, dev loop6, sector 3968 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 481.346970][ T7769] random: crng reseeded on system resumption [ 482.065590][ T7775] ubi: mtd0 is already attached to ubi31 [ 485.674759][ T7792] loop3: detected capacity change from 0 to 512 [ 485.704216][ T7792] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 485.714976][ T7792] EXT4-fs (loop3): couldn't mount as ext3 due to feature incompatibilities [ 485.843479][ T6351] I/O error, dev loop3, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 486.274923][ T4341] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 486.286480][ T4403] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 488.355310][ T7810] 9pnet_fd: Insufficient options for proto=fd [ 489.257740][ T7816] loop1: detected capacity change from 0 to 512 [ 489.264899][ T7816] EXT4-fs: EXT4-fs: inode_readahead_blks must be 0 or a power of 2 smaller than 2^31 [ 491.774746][ T6282] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 491.827538][ T4433] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 494.341056][ T7849] loop0: detected capacity change from 0 to 512 [ 494.348256][ T7849] EXT4-fs: Ignoring removed nobh option [ 494.612582][ T7849] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 494.649294][ T7849] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=8856c018, mo2=0002] [ 494.660671][ T7849] EXT4-fs (loop0): orphan cleanup on readonly fs [ 494.668999][ T7849] EXT4-fs warning (device loop0): ext4_enable_quotas:7037: Failed to enable quota tracking (type=2, err=-22, ino=15). Please run e2fsck to fix. [ 494.683939][ T7849] EXT4-fs (loop0): Cannot turn on quotas: error -22 [ 494.711683][ T7849] EXT4-fs error (device loop0): ext4_ext_check_inode:520: inode #13: comm syz.0.673: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 1, max 4(4), depth 0(0) [ 494.764981][ T7849] EXT4-fs error (device loop0): ext4_orphan_get:1405: comm syz.0.673: couldn't read orphan inode 13 (err -117) [ 494.797553][ T7849] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback. [ 495.075915][ T7858] loop3: detected capacity change from 0 to 1024 [ 495.086042][ T7858] EXT4-fs: Ignoring removed orlov option [ 495.091906][ T7858] EXT4-fs: Ignoring removed nomblk_io_submit option [ 495.252060][ T4259] EXT4-fs (loop0): unmounting filesystem. [ 495.474118][ T7858] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none. [ 495.812604][ T4254] EXT4-fs (loop3): unmounting filesystem. [ 496.062320][ T7866] 9pnet_fd: Insufficient options for proto=fd [ 496.905698][ T7881] netlink: 12 bytes leftover after parsing attributes in process `syz.7.679'. [ 497.553250][ T32] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 497.564738][ T4630] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 498.031840][ T4295] usb 8-1: new full-speed USB device number 2 using dummy_hcd [ 500.038014][ T7909] random: crng reseeded on system resumption [ 500.741900][ T4295] usb 8-1: device not accepting address 2, error -71 [ 501.377280][ T1277] ieee802154 phy0 wpan0: encryption failed: -22 [ 501.384292][ T1277] ieee802154 phy1 wpan1: encryption failed: -22 [ 503.056584][ T7931] 9pnet_fd: Insufficient options for proto=fd [ 503.328081][ T4368] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 503.340729][ T4368] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 504.618932][ T7954] netlink: 12 bytes leftover after parsing attributes in process `syz.3.696'. [ 505.412762][ T7] usb 4-1: new full-speed USB device number 5 using dummy_hcd [ 507.633052][ T7] usb 4-1: device not accepting address 5, error -71 [ 509.085327][ T7996] loop7: detected capacity change from 0 to 512 [ 509.102710][ T7996] EXT4-fs: Ignoring removed nobh option [ 509.203148][ T7996] EXT4-fs: Ignoring removed nobh option [ 510.269473][ T7996] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 510.283939][ T4352] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 510.302423][ T6609] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 510.493706][ T7996] EXT4-fs (loop7): Cannot turn on journaled quota: type 0: error -2 [ 510.507878][ T7996] EXT4-fs error (device loop7): ext4_free_branches:1030: inode #13: comm syz.7.704: invalid indirect mapped block 2683928664 (level 1) [ 510.527339][ T7996] EXT4-fs (loop7): 1 truncate cleaned up [ 510.533062][ T7996] EXT4-fs (loop7): mounted filesystem without journal. Quota mode: writeback. [ 511.119441][ T7407] EXT4-fs (loop7): unmounting filesystem. [ 513.715488][ T8031] loop3: detected capacity change from 0 to 512 [ 513.744945][ T8032] loop0: detected capacity change from 0 to 64 [ 513.828817][ T8031] EXT4-fs: Ignoring removed mblk_io_submit option [ 514.065785][ T26] audit: type=1800 audit(1744419283.135:73): pid=8032 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.701" name="file1" dev="loop0" ino=5 res=0 errno=0 [ 514.205685][ T8031] EXT4-fs error (device loop3): __ext4_iget:5055: inode #11: block 1: comm syz.3.711: invalid block [ 514.353496][ T8031] EXT4-fs error (device loop3): ext4_orphan_get:1405: comm syz.3.711: couldn't read orphan inode 11 (err -117) [ 514.422540][ T8031] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 516.094464][ T4681] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 516.106047][ T4403] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 516.195882][ T4254] EXT4-fs (loop3): unmounting filesystem. [ 516.798612][ T8054] 9pnet_fd: Insufficient options for proto=fd [ 518.169676][ T8064] sctp: failed to load transform for md5: -2 [ 518.813039][ T8083] ubi: mtd0 is already attached to ubi31 [ 521.288142][ T6609] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 521.865266][ T6282] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 524.478334][ T8109] loop6: detected capacity change from 0 to 512 [ 524.534652][ T8109] EXT4-fs (loop6): encrypted files will use data=ordered instead of data journaling mode [ 524.544627][ T8109] EXT4-fs (loop6): couldn't mount as ext3 due to feature incompatibilities [ 524.904924][ T8107] netlink: 'syz.1.721': attribute type 10 has an invalid length. [ 524.913113][ T8107] netlink: 40 bytes leftover after parsing attributes in process `syz.1.721'. [ 525.763012][ T8118] 9pnet_fd: p9_fd_create_tcp (8118): problem connecting socket to 127.0.0.1 [ 526.416056][ T6609] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 527.770485][ T8128] sctp: failed to load transform for md5: -2 [ 528.779825][ T4368] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 531.537977][ T4341] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 533.938035][ T4341] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 534.906408][ T8183] kernel profiling enabled (shift: 17) [ 535.122788][ T8205] loop6: detected capacity change from 0 to 1024 [ 535.132051][ T8205] EXT4-fs: Ignoring removed nobh option [ 535.137805][ T8205] EXT4-fs: Ignoring removed bh option [ 535.197205][ T8205] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 535.962801][ T8203] loop0: detected capacity change from 0 to 1024 [ 536.007148][ T8203] EXT4-fs: Ignoring removed orlov option [ 536.017402][ T8203] EXT4-fs: Ignoring removed nomblk_io_submit option [ 536.070309][ T8205] EXT4-fs (loop6): mounted filesystem without journal. Quota mode: writeback. [ 536.142423][ T8204] EXT4-fs error (device loop6): ext4_mb_mark_diskspace_used:3841: comm syz.6.740: Allocating blocks 497-513 which overlap fs metadata [ 536.192219][ T8203] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none. [ 536.306197][ T8200] EXT4-fs (loop6): pa ffff8880746e02a0: logic 64, phys. 193, len 20 [ 536.314435][ T8200] EXT4-fs error (device loop6): ext4_mb_release_inode_pa:4881: group 0, free 0, pa_free 1 [ 536.453700][ T4259] EXT4-fs (loop0): unmounting filesystem. [ 536.637912][ T5623] EXT4-fs (loop6): unmounting filesystem. [ 536.978060][ T4433] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 539.744271][ T8239] ubi: mtd0 is already attached to ubi31 [ 540.417436][ T32] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 543.617658][ T4368] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 543.950262][ T8278] loop1: detected capacity change from 0 to 1024 [ 543.957593][ T8278] EXT4-fs: Ignoring removed nobh option [ 543.963395][ T8278] EXT4-fs: Ignoring removed bh option [ 543.980751][ T8278] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 544.356446][ T8278] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 544.760727][ T8278] EXT4-fs error (device loop1): ext4_mb_mark_diskspace_used:3841: comm syz.1.755: Allocating blocks 497-513 which overlap fs metadata [ 544.952268][ T8288] loop7: detected capacity change from 0 to 512 [ 545.050045][ T8270] EXT4-fs (loop1): pa ffff8880746e0e00: logic 64, phys. 193, len 20 [ 545.058455][ T8270] EXT4-fs error (device loop1): ext4_mb_release_inode_pa:4881: group 0, free 0, pa_free 1 [ 545.135139][ T8288] EXT4-fs (loop7): mounted filesystem without journal. Quota mode: writeback. [ 545.349040][ T8288] netlink: 12 bytes leftover after parsing attributes in process `syz.7.757'. [ 545.449875][ T8288] netlink: 16 bytes leftover after parsing attributes in process `syz.7.757'. [ 545.598135][ T8288] netlink: 16 bytes leftover after parsing attributes in process `syz.7.757'. [ 546.045875][ T7407] EXT4-fs (loop7): unmounting filesystem. [ 546.191725][ T4368] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 547.714289][ T8324] xt_CONNSECMARK: only valid in 'mangle' or 'security' table, not 'raw' [ 548.337259][ T8321] pci 0000:00:05.0: vgaarb: changed VGA decodes: olddecodes=io+mem,decodes=none:owns=io+mem [ 548.732136][ T4341] netdevsim netdevsim7 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 548.908183][ T4341] netdevsim netdevsim7 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 548.980099][ T4341] netdevsim netdevsim7 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 549.054004][ T4252] EXT4-fs (loop1): unmounting filesystem. [ 549.381901][ T8336] loop6: detected capacity change from 0 to 1024 [ 549.391509][ T8336] EXT4-fs: Ignoring removed orlov option [ 549.397298][ T8336] EXT4-fs: Ignoring removed nomblk_io_submit option [ 549.581755][ T32] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 550.120612][ T8340] netlink: 8 bytes leftover after parsing attributes in process `syz.0.765'. [ 550.154842][ T8336] EXT4-fs (loop6): mounted filesystem without journal. Quota mode: none. [ 550.531269][ T5623] EXT4-fs (loop6): unmounting filesystem. [ 550.660190][ T4341] netdevsim netdevsim7 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 551.226143][ T4257] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 551.245616][ T4257] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 551.254676][ T4257] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 551.263087][ T4257] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 551.274536][ T4257] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 551.282469][ T4257] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 551.940120][ T6929] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 553.017270][ T8355] chnl_net:caif_netlink_parms(): no params data found [ 554.116644][ T4261] Bluetooth: hci4: command 0x0409 tx timeout [ 554.263515][ T8393] loop0: detected capacity change from 0 to 1024 [ 554.844342][ T8403] loop1: detected capacity change from 0 to 1024 [ 554.858166][ T8403] EXT4-fs: Ignoring removed orlov option [ 554.864298][ T8403] EXT4-fs: Ignoring removed nomblk_io_submit option [ 555.449847][ T8403] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none. [ 555.705249][ T4252] EXT4-fs (loop1): unmounting filesystem. [ 555.711477][ T8355] bridge0: port 1(bridge_slave_0) entered blocking state [ 555.720056][ T8355] bridge0: port 1(bridge_slave_0) entered disabled state [ 555.728451][ T8355] device bridge_slave_0 entered promiscuous mode [ 555.751127][ T8355] bridge0: port 2(bridge_slave_1) entered blocking state [ 555.779135][ T11] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 555.804084][ T8355] bridge0: port 2(bridge_slave_1) entered disabled state [ 555.841175][ T8355] device bridge_slave_1 entered promiscuous mode [ 556.178945][ T4261] Bluetooth: hci4: command 0x041b tx timeout [ 556.775919][ T8421] loop3: detected capacity change from 0 to 1024 [ 557.019010][ T8421] EXT4-fs: Ignoring removed nobh option [ 557.024918][ T8421] EXT4-fs: Ignoring removed bh option [ 557.187148][ T8421] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 557.215181][ T6609] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 557.603203][ T8421] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 557.687898][ T8420] EXT4-fs error (device loop3): ext4_mb_mark_diskspace_used:3841: comm syz.3.782: Allocating blocks 497-513 which overlap fs metadata [ 557.837040][ T8415] EXT4-fs (loop3): pa ffff888070047b60: logic 64, phys. 193, len 20 [ 557.845189][ T8415] EXT4-fs error (device loop3): ext4_mb_release_inode_pa:4881: group 0, free 0, pa_free 1 [ 558.279097][ T4257] Bluetooth: hci4: command 0x040f tx timeout [ 559.356165][ T4254] EXT4-fs (loop3): unmounting filesystem. [ 559.765722][ T8355] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 559.818370][ T8355] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 559.904643][ T4341] device hsr_slave_0 left promiscuous mode [ 559.956675][ T4341] device hsr_slave_1 left promiscuous mode [ 560.019961][ T4341] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 560.037667][ T4341] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 560.068806][ T4341] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 560.129992][ T4341] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 560.160029][ T4341] device bridge_slave_1 left promiscuous mode [ 560.166347][ T4341] bridge0: port 2(bridge_slave_1) entered disabled state [ 560.198468][ T4341] device bridge_slave_0 left promiscuous mode [ 560.220972][ T4341] bridge0: port 1(bridge_slave_0) entered disabled state [ 560.339376][ T4261] Bluetooth: hci4: command 0x0419 tx timeout [ 561.200058][ T4341] device veth1_macvtap left promiscuous mode [ 561.206555][ T4341] device veth0_macvtap left promiscuous mode [ 561.213666][ T4341] device veth1_vlan left promiscuous mode [ 561.219865][ T4341] device veth0_vlan left promiscuous mode [ 561.536492][ T8464] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 561.621933][ T8464] loop3: detected capacity change from 0 to 1024 [ 562.185674][ T6929] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 562.231660][ T8464] EXT4-fs error (device loop3): ext4_ext_check_inode:520: inode #11: comm syz.3.789: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 1, max 4(4), depth 32512(32512) [ 562.251080][ T8464] EXT4-fs error (device loop3): ext4_orphan_get:1405: comm syz.3.789: couldn't read orphan inode 11 (err -117) [ 562.267223][ T8464] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 562.611281][ T4254] EXT4-fs (loop3): unmounting filesystem. [ 563.134549][ T1277] ieee802154 phy0 wpan0: encryption failed: -22 [ 563.140938][ T1277] ieee802154 phy1 wpan1: encryption failed: -22 [ 563.571952][ T6929] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 563.718257][ T8475] loop6: detected capacity change from 0 to 1024 [ 563.728128][ T8475] EXT4-fs: Ignoring removed orlov option [ 563.733979][ T8475] EXT4-fs: Ignoring removed nomblk_io_submit option [ 564.425306][ T8475] EXT4-fs (loop6): mounted filesystem without journal. Quota mode: none. [ 566.460247][ T5623] EXT4-fs (loop6): unmounting filesystem. [ 566.576937][ T8490] loop3: detected capacity change from 0 to 128 [ 566.637166][ T8490] FAT-fs (loop3): Invalid FSINFO signature: 0x41615252, 0x00067272 (sector = 1) [ 569.650784][ T9] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 569.662116][ T6929] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 570.012908][ T8493] FAT-fs (loop3): FAT read failed (blocknr 128) [ 570.997352][ T4341] team0 (unregistering): Port device team_slave_1 removed [ 571.077208][ T4341] team0 (unregistering): Port device team_slave_0 removed [ 571.125517][ T4341] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 571.176895][ T4341] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 571.706078][ T4341] bond0 (unregistering): Released all slaves [ 571.805802][ T8355] team0: Port device team_slave_0 added [ 571.818795][ T8492] netlink: 8 bytes leftover after parsing attributes in process `syz.3.795'. [ 571.921951][ T8355] team0: Port device team_slave_1 added [ 572.093441][ T8512] netlink: 8 bytes leftover after parsing attributes in process `syz.6.799'. [ 575.061605][ T8355] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 575.080730][ T8355] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 576.369302][ T9] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 576.372124][ T4501] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 576.982648][ T8355] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 577.556671][ T8355] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 577.812633][ T8355] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 577.838713][ C1] vkms_vblank_simulate: vblank timer overrun [ 577.940737][ T8355] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 578.733215][ T8553] loop3: detected capacity change from 0 to 1024 [ 578.749522][ T8553] EXT4-fs: Ignoring removed orlov option [ 578.755519][ T8553] EXT4-fs: Ignoring removed nomblk_io_submit option [ 579.384310][ T8553] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none. [ 579.412171][ T8355] device hsr_slave_0 entered promiscuous mode [ 579.460810][ T8355] device hsr_slave_1 entered promiscuous mode [ 579.510331][ T8355] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 579.717611][ T4254] EXT4-fs (loop3): unmounting filesystem. [ 579.728089][ T8355] Cannot create hsr debugfs directory [ 579.852428][ T8562] loop1: detected capacity change from 0 to 1024 [ 579.862238][ T8562] EXT4-fs: Ignoring removed orlov option [ 579.867996][ T8562] EXT4-fs: Ignoring removed nomblk_io_submit option [ 580.792308][ T8562] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none. [ 581.493800][ T4252] EXT4-fs (loop1): unmounting filesystem. [ 582.948837][ T6609] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 582.949696][ T4630] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 583.132346][ T8355] netdevsim netdevsim8 netdevsim0: renamed from eth0 [ 583.165413][ T8355] netdevsim netdevsim8 netdevsim1: renamed from eth1 [ 583.221580][ T8355] netdevsim netdevsim8 netdevsim2: renamed from eth2 [ 583.271769][ T8355] netdevsim netdevsim8 netdevsim3: renamed from eth3 [ 583.488898][ T8600] 9pnet_fd: Insufficient options for proto=fd [ 583.705863][ T4261] Bluetooth: Wrong link type (-22) [ 585.236755][ T8355] 8021q: adding VLAN 0 to HW filter on device bond0 [ 585.397321][ T8355] 8021q: adding VLAN 0 to HW filter on device team0 [ 585.410903][ T8617] loop3: detected capacity change from 0 to 4096 [ 585.431566][ T8617] ntfs3: loop3: Different NTFS' sector size (4096) and media sector size (512) [ 585.633427][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 585.651331][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 585.723860][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 585.772958][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 585.789509][ T56] bridge0: port 1(bridge_slave_0) entered blocking state [ 585.796694][ T56] bridge0: port 1(bridge_slave_0) entered forwarding state [ 585.813931][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 585.998374][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 586.574252][ T8637] netlink: 24 bytes leftover after parsing attributes in process `syz.3.818'. [ 588.313124][ T56] bridge0: port 2(bridge_slave_1) entered blocking state [ 588.320312][ T56] bridge0: port 2(bridge_slave_1) entered forwarding state [ 588.446287][ T4403] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 588.661529][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 588.795312][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 588.873834][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 588.960676][ T6282] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 588.984883][ T6282] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 589.036906][ T6282] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 590.499581][ T6282] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 590.556017][ T8355] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 590.602221][ T8355] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 592.263213][ T6282] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 592.274336][ T4403] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 592.387260][ T6282] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 592.451048][ T6282] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 592.498470][ T6282] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 592.545530][ T6282] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 592.779620][ T6282] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 592.790503][ T6282] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 592.830094][ T6282] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 592.978843][ T8675] xt_limit: Overflow, try lower: 687865856/40 [ 593.299456][ T8355] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 595.023304][ T14] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 596.293467][ T14] usb 2-1: Using ep0 maxpacket: 8 [ 596.300732][ T14] usb 2-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 596.341754][ T14] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 596.359008][ T14] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 596.383454][ T14] usb 2-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 596.414324][ T6282] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 596.438514][ T14] usb 2-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 596.464822][ T6282] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 596.648566][ T14] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 596.794864][ T8726] befs: (nullb0): No write support. Marking filesystem read-only [ 596.809806][ T8726] befs: (nullb0): invalid magic header [ 597.046580][ T8726] loop3: detected capacity change from 0 to 4096 [ 597.477254][ T8726] NILFS (loop3): invalid segment: Checksum error in segment payload [ 597.486133][ T8726] NILFS (loop3): trying rollback from an earlier position [ 597.601160][ T8355] device veth0_vlan entered promiscuous mode [ 597.608740][ T4403] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 597.621678][ T8726] NILFS (loop3): recovery complete [ 597.643798][ T8729] NILFS (loop3): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 597.700401][ T4403] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 597.775563][ T8355] device veth1_vlan entered promiscuous mode [ 597.886080][ T4403] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 598.105177][ T4368] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 598.381323][ T4403] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 598.462998][ T14] usb 2-1: usb_control_msg returned -71 [ 598.489193][ T14] usbtmc 2-1:16.0: can't read capabilities [ 598.574075][ T4294] usb 7-1: new high-speed USB device number 3 using dummy_hcd [ 598.764010][ T4368] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 598.817659][ T4294] usb 7-1: Using ep0 maxpacket: 16 [ 598.934507][ T4294] usb 7-1: config 0 has an invalid interface number: 148 but max is 0 [ 598.974958][ T4294] usb 7-1: config 0 has no interface number 0 [ 598.984087][ T14] usb 2-1: USB disconnect, device number 2 [ 598.999221][ T6609] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 599.009001][ T6609] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 599.030689][ T4294] usb 7-1: config 0 interface 148 altsetting 0 bulk endpoint 0x4 has invalid maxpacket 32 [ 599.044568][ T8355] device veth0_macvtap entered promiscuous mode [ 599.146384][ T8355] device veth1_macvtap entered promiscuous mode [ 599.165554][ T4294] usb 7-1: New USB device found, idVendor=0499, idProduct=8206, bcdDevice=f4.55 [ 599.210459][ T4294] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 599.287378][ T4294] usb 7-1: config 0 descriptor?? [ 599.365047][ T8735] raw-gadget.1 gadget.6: fail, usb_ep_enable returned -22 [ 599.492851][ T8355] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 599.649784][ T8355] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 601.202765][ T8355] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 601.334338][ T8355] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 601.376428][ T4294] usb 7-1: USB disconnect, device number 3 [ 601.460809][ T8355] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 601.481090][ T8497] udevd[8497]: error opening ATTR{/sys/devices/platform/dummy_hcd.6/usb7/7-1/7-1:0.148/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 601.497265][ T8355] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 601.577521][ T8355] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 601.656659][ T4341] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 601.682679][ T4341] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 601.785637][ T4341] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 601.901600][ T4341] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 601.951182][ T8740] netlink: 24 bytes leftover after parsing attributes in process `syz.1.837'. [ 602.183749][ T8756] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 602.293941][ T8756] loop6: detected capacity change from 0 to 1024 [ 602.798126][ T8756] EXT4-fs error (device loop6): ext4_ext_check_inode:520: inode #11: comm syz.6.841: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 1, max 4(4), depth 32512(32512) [ 602.820013][ T8756] EXT4-fs error (device loop6): ext4_orphan_get:1405: comm syz.6.841: couldn't read orphan inode 11 (err -117) [ 602.839221][ T8355] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 602.853088][ T8756] EXT4-fs (loop6): mounted filesystem without journal. Quota mode: writeback. [ 602.894403][ T8355] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 602.931490][ T8355] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 602.963306][ T8355] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 603.256075][ T8758] EXT4-fs error (device loop6): ext4_validate_block_bitmap:438: comm ext4lazyinit: bg 0: block 10: padding at end of block bitmap is not set [ 603.361836][ T8355] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 603.630650][ T8355] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 603.728040][ T8355] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 603.736242][ T4341] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 603.746077][ T4341] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 603.780921][ T8355] netdevsim netdevsim8 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 603.793693][ T4630] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 603.879146][ T8355] netdevsim netdevsim8 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 604.016459][ T8355] netdevsim netdevsim8 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 604.154367][ T8355] netdevsim netdevsim8 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 604.160444][ T8769] loop3: detected capacity change from 0 to 16 [ 604.233935][ T5623] EXT4-fs (loop6): unmounting filesystem. [ 604.425624][ T8769] erofs: (device loop3): mounted with root inode @ nid 36. [ 604.426215][ T4300] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 604.482581][ T8773] loop1: detected capacity change from 0 to 128 [ 604.577179][ T8773] FAT-fs (loop1): Invalid FSINFO signature: 0x41615252, 0x00067272 (sector = 1) [ 604.665733][ T8766] erofs: (device loop3): z_erofs_readahead: readahead error at page 2 @ nid 89 [ 604.691207][ T4257] erofs: (device loop3): z_erofs_lz4_decompress_mem: failed to decompress 6887 in[4096, 0] out[8192] [ 604.706983][ T8766] erofs: (device loop3): z_erofs_lz4_decompress_mem: failed to decompress 6887 in[4096, 0] out[8192] [ 604.720953][ T26] audit: type=1800 audit(1744419373.774:74): pid=8766 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.845" name="file3" dev="loop3" ino=89 res=0 errno=0 [ 604.767872][ T8766] erofs: (device loop3): z_erofs_lz4_decompress_mem: failed to decompress 6887 in[4096, 0] out[8192] [ 604.781143][ T8766] erofs: (device loop3): z_erofs_lz4_decompress_mem: failed to decompress 6887 in[4096, 0] out[8192] [ 604.796481][ T8766] erofs: (device loop3): z_erofs_lz4_decompress_mem: failed to decompress 6887 in[4096, 0] out[8192] [ 604.845144][ T4341] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 604.944888][ T4341] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 605.299177][ T4300] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 605.622153][ T8780] FAT-fs (loop1): FAT read failed (blocknr 128) [ 605.820587][ T8778] netlink: 8 bytes leftover after parsing attributes in process `syz.1.846'. [ 605.956337][ T8783] ax25_connect(): syz.6.844 uses autobind, please contact jreuter@yaina.de [ 605.989858][ T6609] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 606.038429][ T6609] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 606.139963][ T4341] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 606.392797][ T8791] loop3: detected capacity change from 0 to 1024 [ 606.608201][ T8795] xt_limit: Overflow, try lower: 687865856/40 [ 606.804244][ T8781] ------------[ cut here ]------------ [ 606.810492][ T8781] refcount_t: decrement hit 0; leaking memory. [ 607.126573][ T8781] WARNING: CPU: 1 PID: 8781 at lib/refcount.c:31 refcount_warn_saturate+0x16d/0x1a0 [ 607.136218][ T8781] Modules linked in: [ 607.140160][ T8781] CPU: 1 PID: 8781 Comm: syz.6.844 Not tainted 6.1.134-syzkaller #0 [ 607.148254][ T8781] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 607.158660][ T8781] RIP: 0010:refcount_warn_saturate+0x16d/0x1a0 [ 607.164922][ T8781] Code: c7 c7 e0 31 5f 8b e8 72 c7 0e fd 0f 0b e9 6e ff ff ff e8 d6 b1 46 fd c6 05 26 6c 48 0a 01 48 c7 c7 40 32 5f 8b e8 53 c7 0e fd <0f> 0b e9 4f ff ff ff 89 d9 80 e1 07 80 c1 03 38 c1 0f 8c b2 fe ff [ 607.185466][ T8781] RSP: 0018:ffffc90003ec7b28 EFLAGS: 00010246 [ 607.191570][ T8781] RAX: 78f2b20e085f9500 RBX: 0000000000000004 RCX: ffff88802aab8000 [ 607.200061][ T8781] RDX: 0000000000000000 RSI: 0000000000000001 RDI: 0000000000000000 [ 607.208094][ T8781] RBP: 0000000000000004 R08: ffffffff8152c26e R09: fffff520007d8ec5 [ 607.216119][ T8781] R10: 0000000000000000 R11: dffffc0000000001 R12: ffff88807404a5b8 [ 607.224118][ T8781] R13: 0000000000000000 R14: ffff88807404a5fc R15: dffffc0000000000 [ 607.232149][ T8781] FS: 0000555557518500(0000) GS:ffff8880b8f00000(0000) knlGS:0000000000000000 [ 607.241168][ T8781] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 607.247810][ T8781] CR2: 000020000001a000 CR3: 00000000711b8000 CR4: 00000000003506e0 [ 607.255833][ T8781] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 607.263820][ T8781] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 607.271853][ T8781] Call Trace: [ 607.275185][ T8781] [ 607.278484][ T8781] ref_tracker_free+0x6a0/0x7d0 [ 607.283380][ T8781] ? refcount_inc+0x80/0x80 [ 607.288059][ T8781] ? ax25_destroy_socket+0x53c/0x5b0 [ 607.293514][ T8781] ax25_release+0x3ef/0x950 [ 607.298117][ T8781] sock_close+0xcd/0x230 [ 607.302405][ T8781] ? sock_mmap+0x90/0x90 [ 607.306809][ T8781] __fput+0x3f6/0x8d0 [ 607.310873][ T8781] task_work_run+0x246/0x300 [ 607.315578][ T8781] ? task_work_cancel+0x2e0/0x2e0 [ 607.320663][ T8781] ? exit_to_user_mode_loop+0x39/0x100 [ 607.326233][ T8781] exit_to_user_mode_loop+0xde/0x100 [ 607.331560][ T8781] exit_to_user_mode_prepare+0xb1/0x140 [ 607.337205][ T8781] syscall_exit_to_user_mode+0x60/0x270 [ 607.342813][ T8781] do_syscall_64+0x47/0xb0 [ 607.347316][ T8781] ? clear_bhb_loop+0x45/0xa0 [ 607.352131][ T8781] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 607.358118][ T8781] RIP: 0033:0x7fda55f8d169 [ 607.362580][ T8781] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 607.382281][ T8781] RSP: 002b:00007ffec0538ac8 EFLAGS: 00000246 ORIG_RAX: 00000000000001b4 [ 607.390814][ T8781] RAX: 0000000000000000 RBX: 00007fda561a7ba0 RCX: 00007fda55f8d169 [ 607.398889][ T8781] RDX: 0000000000000000 RSI: 000000000000001e RDI: 0000000000000003 [ 607.406938][ T8781] RBP: 00007fda561a7ba0 R08: 000000000000a874 R09: 00000017c0538dbf [ 607.415020][ T8781] R10: 00007fda561a7ac0 R11: 0000000000000246 R12: 00000000000941d0 [ 607.423024][ T8781] R13: 00007fda561a6080 R14: ffffffffffffffff R15: 00007ffec0538be0 [ 607.431128][ T8781] [ 607.434182][ T8781] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 607.441863][ T8781] CPU: 1 PID: 8781 Comm: syz.6.844 Not tainted 6.1.134-syzkaller #0 [ 607.449961][ T8781] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 607.453650][ T8802] loop0: detected capacity change from 0 to 2048 [ 607.466461][ T8781] Call Trace: [ 607.469842][ T8781] [ 607.472788][ T8781] dump_stack_lvl+0x1e3/0x2cb [ 607.477581][ T8781] ? nf_tcp_handle_invalid+0x647/0x647 [ 607.483056][ T8781] ? panic+0x764/0x764 [ 607.487175][ T8781] ? vscnprintf+0x59/0x80 [ 607.491531][ T8781] panic+0x318/0x764 [ 607.495454][ T8781] ? __warn+0x169/0x520 [ 607.499650][ T8781] ? memcpy_page_flushcache+0xfc/0xfc [ 607.505153][ T8781] __warn+0x348/0x520 [ 607.509159][ T8781] ? refcount_warn_saturate+0x16d/0x1a0 [ 607.514741][ T8781] report_bug+0x2af/0x500 [ 607.519091][ T8781] ? refcount_warn_saturate+0x16d/0x1a0 [ 607.524667][ T8781] handle_bug+0x3d/0x70 [ 607.528844][ T8781] exc_invalid_op+0x16/0x40 [ 607.533366][ T8781] asm_exc_invalid_op+0x16/0x20 [ 607.538239][ T8781] RIP: 0010:refcount_warn_saturate+0x16d/0x1a0 [ 607.544419][ T8781] Code: c7 c7 e0 31 5f 8b e8 72 c7 0e fd 0f 0b e9 6e ff ff ff e8 d6 b1 46 fd c6 05 26 6c 48 0a 01 48 c7 c7 40 32 5f 8b e8 53 c7 0e fd <0f> 0b e9 4f ff ff ff 89 d9 80 e1 07 80 c1 03 38 c1 0f 8c b2 fe ff [ 607.564055][ T8781] RSP: 0018:ffffc90003ec7b28 EFLAGS: 00010246 [ 607.570168][ T8781] RAX: 78f2b20e085f9500 RBX: 0000000000000004 RCX: ffff88802aab8000 [ 607.578176][ T8781] RDX: 0000000000000000 RSI: 0000000000000001 RDI: 0000000000000000 [ 607.586174][ T8781] RBP: 0000000000000004 R08: ffffffff8152c26e R09: fffff520007d8ec5 [ 607.594173][ T8781] R10: 0000000000000000 R11: dffffc0000000001 R12: ffff88807404a5b8 [ 607.602173][ T8781] R13: 0000000000000000 R14: ffff88807404a5fc R15: dffffc0000000000 [ 607.610220][ T8781] ? __warn_printk+0x28e/0x350 [ 607.615023][ T8781] ? refcount_warn_saturate+0x16d/0x1a0 [ 607.620607][ T8781] ref_tracker_free+0x6a0/0x7d0 [ 607.625502][ T8781] ? refcount_inc+0x80/0x80 [ 607.630047][ T8781] ? ax25_destroy_socket+0x53c/0x5b0 [ 607.635347][ T8781] ax25_release+0x3ef/0x950 [ 607.639863][ T8781] sock_close+0xcd/0x230 [ 607.644114][ T8781] ? sock_mmap+0x90/0x90 [ 607.648368][ T8781] __fput+0x3f6/0x8d0 [ 607.652456][ T8781] task_work_run+0x246/0x300 [ 607.657064][ T8781] ? task_work_cancel+0x2e0/0x2e0 [ 607.662112][ T8781] ? exit_to_user_mode_loop+0x39/0x100 [ 607.667581][ T8781] exit_to_user_mode_loop+0xde/0x100 [ 607.672870][ T8781] exit_to_user_mode_prepare+0xb1/0x140 [ 607.678424][ T8781] syscall_exit_to_user_mode+0x60/0x270 [ 607.683986][ T8781] do_syscall_64+0x47/0xb0 [ 607.688405][ T8781] ? clear_bhb_loop+0x45/0xa0 [ 607.693094][ T8781] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 607.698998][ T8781] RIP: 0033:0x7fda55f8d169 [ 607.703418][ T8781] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 607.723027][ T8781] RSP: 002b:00007ffec0538ac8 EFLAGS: 00000246 ORIG_RAX: 00000000000001b4 [ 607.731446][ T8781] RAX: 0000000000000000 RBX: 00007fda561a7ba0 RCX: 00007fda55f8d169 [ 607.739421][ T8781] RDX: 0000000000000000 RSI: 000000000000001e RDI: 0000000000000003 [ 607.747433][ T8781] RBP: 00007fda561a7ba0 R08: 000000000000a874 R09: 00000017c0538dbf [ 607.755420][ T8781] R10: 00007fda561a7ac0 R11: 0000000000000246 R12: 00000000000941d0 [ 607.763394][ T8781] R13: 00007fda561a6080 R14: ffffffffffffffff R15: 00007ffec0538be0 [ 607.771381][ T8781] [ 607.774675][ T8781] Kernel Offset: disabled [ 607.779122][ T8781] Rebooting in 86400 seconds..