last executing test programs: 3m40.300834264s ago: executing program 0 (id=144): openat$vhost_vsock(0xffffffffffffff9c, 0x0, 0x2, 0x0) timer_create(0x8, 0x0, &(0x7f00000001c0)) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x5) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r1}, 0x10) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) sched_setaffinity(0x0, 0xfffffef7, &(0x7f0000000740)=0x410000002) r3 = openat$udambuf(0xffffffffffffff9c, &(0x7f0000000040), 0x2) ioctl$UDMABUF_CREATE(r3, 0x40187542, &(0x7f0000000000)={0xffffffffffffffff, 0x0, 0x0, 0x8000}) timer_delete(0x0) openat$fuse(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) r4 = openat$ptmx(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$TCSETS(r4, 0x40045431, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, "2af01c3d0040fbffffffffffffff00"}) ioctl$TIOCGPTPEER(r4, 0x5441, 0x0) 3m39.569297836s ago: executing program 0 (id=145): fsopen(&(0x7f0000000000)='bpf\x00', 0x0) syz_open_dev$cec(&(0x7f0000000000), 0x0, 0x82000) socket$inet_mptcp(0x2, 0x1, 0x106) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x3, &(0x7f0000000300)=ANY=[@ANYBLOB], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000080)='sched_switch\x00', r3}, 0x10) openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x2000, 0x0) syz_open_dev$cec(&(0x7f0000000080), 0x0, 0x0) r4 = syz_io_uring_setup(0xd1, &(0x7f0000000480)={0x0, 0x0, 0x400, 0x0, 0x338}, &(0x7f0000000080)=0x0, &(0x7f00000001c0)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r5, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r5, r6, &(0x7f0000000200)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x4, 0x0, 0x0}) io_uring_enter(r4, 0x47ba, 0x0, 0x0, 0x0, 0x0) 3m34.758570771s ago: executing program 0 (id=153): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x3, &(0x7f0000000040)=ANY=[@ANYBLOB="1800000000000000000000001300040095"], &(0x7f0000000180)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0xf, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f00000190c0)=0x8) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$ifreq_SIOCGIFINDEX_vcan(r4, 0x8933, &(0x7f0000000380)={'vcan0\x00', 0x0}) r6 = socket$can_j1939(0x1d, 0x2, 0x7) bind$can_j1939(r6, &(0x7f0000000080)={0x1d, r5}, 0x18) sendmsg$can_j1939(r6, &(0x7f00000001c0)={&(0x7f0000000040), 0x18, &(0x7f0000000180)={&(0x7f00000000c0)="92", 0x1a000}}, 0xee) sendmsg$can_j1939(r6, &(0x7f00000002c0)={&(0x7f0000000200), 0x18, &(0x7f0000000280)={0x0}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x5) 3m30.330124524s ago: executing program 0 (id=160): syz_mount_image$ext4(&(0x7f0000000580)='ext4\x00', &(0x7f00000005c0)='./file0\x00', 0x1008002, &(0x7f0000000300)={[{@grpquota}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x84}}, {@resuid}, {@max_batch_time={'max_batch_time', 0x3d, 0x3}}, {@lazytime}, {@jqfmt_vfsold}, {@usrquota}, {@data_err_abort}]}, 0x1, 0x5d8, &(0x7f0000000c00)="$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") quotactl$Q_SETQUOTA(0xffffffff80000800, &(0x7f00000000c0)=@loop={'/dev/loop', 0x0}, 0x0, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x2, 0x0, 0x9, 0x0, 0x0, 0x9d}) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x4, 0x16, &(0x7f0000000540)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) capset(&(0x7f0000000000)={0x20080522}, &(0x7f0000000280)) r0 = socket(0xa, 0x2, 0x0) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, &(0x7f0000cab000)=0xa) r2 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_int(r2, 0x107, 0x12, &(0x7f00000000c0), 0x4) syz_emit_ethernet(0xfdef, &(0x7f0000000100)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaaaa86dd6092c01f00082f00fe80000000bb00000000000000000000ffff04000000242065580000000000000021"], 0x0) setresuid(0x0, r1, 0x0) r3 = socket$inet_tcp(0x2, 0x1, 0x0) listen(r3, 0x0) r4 = socket$nl_sock_diag(0x10, 0x3, 0x4) sendmsg$DCCPDIAG_GETSOCK(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)={0x4c, 0x12, 0x101, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {}, 0x400}}, 0x4c}}, 0x0) recvmmsg(r4, &(0x7f00000023c0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) open(&(0x7f0000000100)='.\x00', 0x555502, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.numa_stat\x00', 0x26e1, 0x0) r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000021000010000000003b810000850000006d000000850000005000000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f00000002c0)='tlb_flush\x00', r5}, 0x10) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) 3m28.68230236s ago: executing program 0 (id=174): mknodat$null(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x103) bpf$PROG_LOAD(0x5, 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000200)='./cgroup\x00', 0x101000, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, &(0x7f0000000300)) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) sched_setaffinity(0x0, 0xfffffef7, &(0x7f0000000740)=0x410000002) socket$inet_tcp(0x2, 0x1, 0x0) socket$inet6_sctp(0xa, 0x1, 0x84) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) sendmsg$NFT_MSG_GETRULE(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, 0x0}, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) mount(&(0x7f0000000180)=@nbd={'/dev/nbd', 0x0}, &(0x7f0000000140)='./file0\x00', &(0x7f0000000040)='romfs\x00', 0x208090, 0x0) 3m25.646765119s ago: executing program 0 (id=169): bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00'}, 0x10) mkdir(&(0x7f00000002c0)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000740)='cgroup2\x00', 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000240)={0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0}, 0x30) mkdir(&(0x7f0000000040)='./file1\x00', 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000340)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@xino_on}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) chdir(&(0x7f00000003c0)='./bus\x00') r3 = open(&(0x7f00000000c0)='.\x00', 0x0, 0x0) getdents(r3, &(0x7f0000001fc0)=""/184, 0x20002078) 3m25.33935019s ago: executing program 32 (id=169): bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00'}, 0x10) mkdir(&(0x7f00000002c0)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000740)='cgroup2\x00', 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000240)={0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0}, 0x30) mkdir(&(0x7f0000000040)='./file1\x00', 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000340)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@xino_on}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) chdir(&(0x7f00000003c0)='./bus\x00') r3 = open(&(0x7f00000000c0)='.\x00', 0x0, 0x0) getdents(r3, &(0x7f0000001fc0)=""/184, 0x20002078) 2m1.261374064s ago: executing program 1 (id=285): bpf$PROG_LOAD(0x5, &(0x7f0000000480)={0x8, 0x3, &(0x7f0000000000)=@framed, &(0x7f0000000300)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_skb, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_netfilter(0x10, 0x3, 0xc) syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f0000000180)=ANY=[@ANYBLOB="180100000100a7d9000000000020b200850000007b00000095"], &(0x7f0000000300)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) socket$l2tp6(0xa, 0x2, 0x73) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000240)={0x26, 'hash\x00', 0x0, 0x0, 'sm3\x00'}, 0x58) accept4(r0, 0x0, 0x0, 0x0) socket$netlink(0x10, 0x3, 0x2) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) socket$kcm(0x11, 0x200000000000002, 0x300) socket$packet(0x11, 0x3, 0x300) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000240)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.freeze\x00', 0x275a, 0x0) socket$kcm(0xa, 0x922000000003, 0x11) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x9, 0x4, &(0x7f0000000280)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_sock, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x70) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000680)=ANY=[@ANYRES32=r1, @ANYRES32, @ANYRES32=r2], 0x20) 2m0.529765516s ago: executing program 1 (id=286): syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() syz_open_procfs(0xffffffffffffffff, 0x0) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r3}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) r4 = socket$inet_sctp(0x2, 0x1, 0x84) bind$inet(r4, &(0x7f0000000000)={0x2, 0x4e22, @local}, 0x10) setsockopt$inet_sctp_SCTP_DEFAULT_PRINFO(r4, 0x84, 0x72, &(0x7f0000000080)={0x0, 0x7, 0x30}, 0xc) sendto$inet(r4, &(0x7f0000000040)='}', 0x1, 0x0, &(0x7f00000001c0)={0x2, 0x4e22, @local}, 0x10) sendto$inet(r4, &(0x7f0000000280)='p', 0x29fcb, 0x0, 0x0, 0x0) sendto$inet(r4, &(0x7f0000000300)="ab", 0x1, 0x0, 0x0, 0x0) 1m59.15872137s ago: executing program 1 (id=287): ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x5) write$UHID_INPUT(0xffffffffffffffff, &(0x7f00000040c0)={0x8, {"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", 0x1000}}, 0x1006) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r1}, 0x10) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) bpf$OBJ_PIN_PROG(0x6, 0x0, 0x0) sched_setaffinity(0x0, 0xfffffef7, &(0x7f0000000740)=0x410000002) r3 = openat$udambuf(0xffffffffffffff9c, &(0x7f0000000040), 0x2) r4 = memfd_create(&(0x7f0000000540)='y\x105\xfb\xf7u\x83%\x1f\xe09@:r\xc2\xb9x0\x90P\x03\x00\x00\x00\x00\x00\x00\x00\xfe,\x1c\xf1\xdd\xcf]\xac\xbc\t\xbb\xfc\xa4j\x9f\xceX\x8f5=\xaa\xd5\xe9n\xab s\xa5\x00\x8d\tV\t\x91\x18\x06O\xb0=D\xda\xb6F\x1a\xc82\x8b\xc0l\xd0\x89d\xe6\xb7\xd8\x97\xb8\xde\xa3\x89\"%/u\x17\xdam\x8d\x01Lh\x1e^\x9ej\x1c\xc5\xf0\xf6\x92\x05\x9aH\x00\'\xd4\x94d[\v\xfc\xad\x0f\xa8\xc5\xad\x001\x8b%\xaa?\x00\x00\x00\x00\x00\x00\x00\nj\x8c\xef\x90\xc0Z\xfa\x1a\xb3\xf0wVq\xe9d\xf8N\x80\xd1g\xd8e\xc8\x16\xad1\x02\xab\xce3\xb2\xb0\xd1\x11\xf0\xc2Gj+kV', 0x2) ftruncate(r4, 0xffff) fcntl$addseals(r4, 0x409, 0x7) r5 = ioctl$UDMABUF_CREATE(r3, 0x40187542, &(0x7f0000000000)={r4, 0x0, 0x0, 0x8000}) ioctl$DMA_BUF_IOCTL_SYNC(r5, 0x40086203, 0x0) 1m58.405349372s ago: executing program 1 (id=289): syz_mount_image$hfsplus(&(0x7f0000000000), &(0x7f0000000400)='./file1\x00', 0xa08006, &(0x7f0000000100)=ANY=[@ANYRES32=0x0], 0xfe, 0x687, &(0x7f0000000fc0)="$eJzs3c1vHGcdB/DvrNeOHaTUfUlaUCWsRioIi8QvcsFcGjggHypUhUOFxMVKnMbKxq1sF7kVAvN+5dA/oBx8QOICEvdIReKAgFvFzeKAKiFx6cm3oJmdtdfxS9Ybv8Tw+Viz+8w8r/PbmWd3dmVNgP9bc+NpPkiRufE31sr1zY3p1ubG9IU6u5WkTDeSZvspxVJSfJzcSHvJ58uNdfnioH4+XJy9+clnm5+215r1UpVvHFavN+v1krEkA/XzXoN9tXfrwPYON7+dKrb3sAzY1U7g4Kw93GP9KNWf8LwFngZF+31zj9HkYpLh+nNA6tmhcbqjO35HmuUAAADgnHpmK1tZy6WzHgcAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACcJ/X9/4t6aXTSYyk69/8fqrelTt9snPGYn8SDsx4AAAAAAAAAAByDL25lK2u5lPrH/YftX/ZfqR5fqB4/l/eykoUs51rWMp/VrGY5k0lGuxoaWptfXV2e7KHm1L41p/ob/+/7qwYAAAAAAAAA/2t+mrn27/8AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAPC0KJKB9lO1vNBJj6bRTDKcZKgst578vZM+J4r9Nj44/XEAAADAExnuo84zW9nKWi511h8W1TX/lep6eTjvZSmrWcxqWlnI7foaurzqb2xuTLc2N6bvb25MVx1//2Fbu51v/udIw6haTPu7h/17fqkqMZI7Way2XMutajC306hqll6qx7O97O7kJ+WYRl6v9Tiy2/Vz2dmvD/oW4Tg0jlphtKo0uB2RiXpsZUPPHh6Jx746zUN7mkxj+5ufFw7pqbNLxRFjfrFTL8kvH4n56//67fd6bOYEbEeikSoSU11H35XDY5586Y+/e+tua+ne3Tsr4yd2GJ2WR4+J6a5IvHiuI9E8YvmJKhKXt9fn8u18N+MZy5tZzmJ+kPmsZiH1zJj5+nguH0e7opTsidSNXWtvPm4kQ/Xr0p5FexnTWC5Uqfm8UtW9lMUUeSe3s5DXqr+pTOZrmclMZrte4csHvsLVvlUzbeNoZ/3VL2fnVP9VOVP3Vi/5c68Fj679llrG9dmuuHbPuaNVXveWnSg918P70RHnxuYX6kTZx8/6eds4MY9GYrIrEs8fHonfVOfGSmvp3vLd+XcPaH/9kfVXB3fSv+jrnfmkpp7yeHkuw/VMsvvoKPOe355ldsdrqP7FpZ3X2JN3ucoris6Z+p19ztQy4rNV6Sv7tjRV5b24N2+gHvk//tmVt+vzVt756wkFDIDjdfErF4dG/j3yt5GPRn4+cnfkjeFvXfj6hZeHMvinwW80JwZebbxc/CEf5Uc71/8AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAED/Vt7/4N58q7WwvH+icXDW8SaK+rY8B5VpZiSnMIzTTBTJ+rG3nLPfrx4SnZsIPmk7b914KnbnXCcGktRbfpzsHD/1S9TPzUWBc+H66v13r6+8/8FXF+/Pv73w9sLS4MzM7MTszGvT1+8sthYm2o9nPUrgJOx8HuixwuAJDwgAAAAAAAAAAAB4rP3+MeAvx/yfBl3djZ3hrgIAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADn1Nx4moMpMjlxbaJc39yYbpVLJ71Tspmk0UiKHybFx8mNtJeMdjVXHNTPh4uzNz/5bPPTnbaanfKNw+r1Zr1eMpZkoH7eY6i/9m4d1F7Piu09LAN2tRM4OGv/DQAA//+iHAcm") prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = socket$inet6(0xa, 0x6, 0x0) bind$inet6(r3, 0x0, 0x0) socket$inet_dccp(0x2, 0x6, 0x0) r4 = getpid() r5 = syz_pidfd_open(r4, 0x0) setns(r5, 0x24020000) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000380)) syz_clone3(&(0x7f0000000000)={0x11f000400, 0x0, 0x0, 0x0, {0x3f}, 0x0, 0x0, 0x0, 0x0}, 0x58) 1m56.620882708s ago: executing program 1 (id=291): ioctl$KVM_CREATE_IRQCHIP(0xffffffffffffffff, 0xae60) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) ioctl$KVM_SET_IRQCHIP(0xffffffffffffffff, 0x8208ae63, &(0x7f0000000140)={0x1, 0x0, @ioapic={0x22223000, 0x0, 0x4, 0xeffffdff, 0x0, [{0x0, 0xff}, {0x19, 0x3, 0xf8}, {0xb6, 0x1}, {0x0, 0x0, 0x7f}, {0x0, 0x0, 0x0, '\x00', 0x40}, {0x0, 0x65, 0x3}, {0x0, 0x0, 0x2a}, {}, {0x0, 0x40, 0xfa, '\x00', 0xf7}, {0x2, 0x9, 0x0, '\x00', 0x4}, {0x0, 0x4, 0x0, '\x00', 0x1}, {0x0, 0x8, 0x1, '\x00', 0xfc}, {0x0, 0x0, 0x0, '\x00', 0x3}, {0x3, 0xc, 0x0, '\x00', 0x1e}, {0x22, 0x6, 0x4, '\x00', 0x3}, {0x7, 0x0, 0x80}, {0x0, 0x1, 0x9, '\x00', 0x9}, {0x0, 0x4, 0x0, '\x00', 0x2}, {0xe8, 0x0, 0x4, '\x00', 0x5}, {0x0, 0x0, 0x0, '\x00', 0x26}, {0x8, 0x3, 0x0, '\x00', 0x1}, {0x0, 0x2, 0x1}, {0x0, 0x0, 0x9}, {0x0, 0x0, 0x8, '\x00', 0x1}]}}) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00'}, 0x10) prlimit64(0x0, 0xe, &(0x7f00000003c0)={0x2000000000000008, 0x20000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket$inet6(0xa, 0x3, 0x8000000003c) connect$inet6(r3, &(0x7f0000000140)={0xa, 0x0, 0x0, @empty, 0x9}, 0x1c) r4 = socket$igmp6(0xa, 0x3, 0x2) setsockopt$IP6T_SO_SET_REPLACE(r4, 0x29, 0x40, &(0x7f0000000b00)=@raw={'raw\x00', 0x8, 0x3, 0x428, 0xd0, 0xffffffff, 0xffffffff, 0x0, 0xffffffff, 0x358, 0xffffffff, 0xffffffff, 0x358, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@private0, @mcast2, [], [], 'veth0_macvtap\x00', 'dvmrp1\x00'}, 0x0, 0xa8, 0xd0}, @common=@unspec=@NFQUEUE0={0x28}}, {{@ipv6={@remote, @ipv4={'\x00', '\xff\xff', @dev}, [], [], 'wg1\x00', 'gre0\x00'}, 0x0, 0x258, 0x288, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'pim6reg\x00', {0x0, 0x0, 0x5, 0x0, 0x0, 0x7, 0x3ff}}}, @common=@inet=@hashlimit3={{0x158}, {'wg1\x00', {0x3, 0x0, 0x41, 0x0, 0x0, 0x1000, 0x6, 0x3}}}]}, @common=@unspec=@CONNMARK={0x30}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x488) sendmsg(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000000)=',', 0xff80}], 0x1, 0x0, 0x0, 0x2c}, 0x0) 1m53.150743488s ago: executing program 1 (id=298): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=@base={0x1, 0x4, 0x8, 0x8, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r4}, 0x10) close(r3) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000200), 0x105000, 0x0) write$P9_RVERSION(0xffffffffffffffff, &(0x7f0000000000)=ANY=[], 0x15) r5 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) r6 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000180)='./binderfs/binder0\x00', 0x0, 0x0) r7 = dup3(r6, r5, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r7, 0x4018620d, &(0x7f0000000040)) 1m50.312092627s ago: executing program 33 (id=298): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=@base={0x1, 0x4, 0x8, 0x8, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r4}, 0x10) close(r3) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000200), 0x105000, 0x0) write$P9_RVERSION(0xffffffffffffffff, &(0x7f0000000000)=ANY=[], 0x15) r5 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) r6 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000180)='./binderfs/binder0\x00', 0x0, 0x0) r7 = dup3(r6, r5, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r7, 0x4018620d, &(0x7f0000000040)) 20.421667878s ago: executing program 2 (id=420): write$UHID_INPUT(0xffffffffffffffff, &(0x7f00000004c0)={0x8, {"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", 0x1000}}, 0x1006) r0 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000280)=@bpf_lsm={0x6, 0x3, &(0x7f00000003c0)=ANY=[], &(0x7f0000000140)='GPL\x00', 0x0, 0xffffffffffffff0d, 0x0, 0x0, 0x0, '\x00', 0x0, 0x1b, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) r1 = openat$binderfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r3 = dup3(r2, r1, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000580)={0x10, 0x0, &(0x7f0000000700)=[@request_death={0x400c6313, 0x0, 0xffffff7f00000000}], 0x2, 0x1000000000000, 0x0}) r4 = openat$binder_debug(0xffffffffffffff9c, &(0x7f00000002c0)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) lseek(r4, 0x851, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000000c0)}, 0x0) bind$bt_hci(r3, &(0x7f00000001c0)={0x1f, 0x0, 0x3}, 0x6) r5 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000180), 0x201, 0x0) ioctl$SNDCTL_SEQ_THRESHOLD(r5, 0x80045104, 0xfffffffffffffffe) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f0000000240)={r0, 0xf, 0x25, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40) r6 = accept$inet(0xffffffffffffffff, &(0x7f00000000c0)={0x2, 0x0, @dev}, 0x0) ioctl$sock_SIOCETHTOOL(r6, 0x8946, &(0x7f00000002c0)={'veth0_to_bond\x00', &(0x7f0000001500)=@ethtool_eeprom={0xc, 0x7, 0x4}}) r7 = socket$can_bcm(0x1d, 0x2, 0x2) sendmsg$can_bcm(r7, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f00000003c0)={0x5, 0x3, 0x0, {}, {}, {}, 0x2, @can={{}, 0x0, 0x0, 0x0, 0x0, "7385b6116602f9fc"}}, 0x48}}, 0x0) acct(0x0) 19.581839251s ago: executing program 3 (id=422): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) sched_setaffinity(0x0, 0xfffffef7, &(0x7f0000000740)=0x410000002) ioctl$TIOCL_BLANKSCREEN(0xffffffffffffffff, 0x541c, 0x0) ioctl$TIOCL_UNBLANKSCREEN(0xffffffffffffffff, 0x541c, &(0x7f00000000c0)) socket$netlink(0x10, 0x3, 0x12) socket$inet_tcp(0x2, 0x1, 0x0) openat$vimc2(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) r3 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt(r3, 0x84, 0x81, &(0x7f00000002c0)="1a00000002000000", 0x8) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r3, 0x84, 0x64, &(0x7f0000000040)=[@in6={0xa, 0x4e23, 0x0, @loopback}], 0x1c) setsockopt$inet_sctp6_SCTP_AUTH_KEY(r3, 0x84, 0x17, &(0x7f0000000380)=ANY=[@ANYRES8=0x0], 0x9) sendto$inet6(r3, &(0x7f0000000000)="eb", 0x1, 0x0, &(0x7f0000000240)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) 17.901122846s ago: executing program 4 (id=425): bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000140)='./file1\x00', 0x200000, &(0x7f00000005c0)={[{@noblock_validity}, {}, {@sysvgroups}, {@norecovery}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x80}}, {@orlov}, {@nogrpid}, {@noauto_da_alloc}, {@nomblk_io_submit}]}, 0x3, 0x56a, &(0x7f00000015c0)="$eJzs3c9rHFUcAPDvbJL+1qZQinqQQA9WajdN4o8KQutRtFjQe12SaSjZdEt2U5pYaHuwFy9SBBEL4h/g3WPxH/CvKGihSAl68BKZzWy7TbL5uXW3zucD0743M5s3b998335nZ5cNoLBGsn9KEa9GxDdJxOG2bYORbxxZ2W/p8Y3JbEliefmzP5NI8nWt/ZP8/4N55ZWI+PWriJOlte3WFxZnKtVqOpfXRxuzV0frC4unLs9WptPp9Mr4xMSZdybG33/v3a719c0Lf3//6f2Pznx9fOm7nx8euZvEuTiUb2vvxy7caq+MxEj+nAzFuVU7jnWhsX6S9PoA2JGBPM6HIpsDDsdAHvXA/9/NiFgGCioR/1BQrTygdW3fpevgF8ajD1cugNb2f3DlvZHY17w2OrCUPHNllF3vDneh/ayNX/64dzdbYpP3IW52oT2Allu3I+L04ODa+S/J57+dO91883hjq9so2usP9NL9LP95a738p/Qk/4l18p+D68TuTmwe/6WHXWimoyz/+2Dd/PfJ1DU8kNdeauZ8Q8mly9X0dES8HBEnYmhvVt/ofs6ZpQfLnba153/ZkrXfygXz43g4uPfZx0xVGpXd9Lndo9sRrz3Nf5NYM//va+a6q8c/ez4ubLGNY+m91ztt27z/7bqfAS//FPHGuuP/9I5WsvH9ydHm+TDaOivW+uvOsd86tb+9/ndfNv4HNu7/cNJ+v7a+/TZ+3PdP2mnbTs//PcnnzfKefN31SqMxNxaxJ/lk7frxp49t1Vv7Z/0/cXzj+W+9839/RHyxxf7fOXqn4679MP5T2xr/7RcefPzlD53a39r4v90sncjXbGX+2+oB7ua5AwAAAAAAgH5TiohDkZTKT8qlUrm88vmOo3GgVK3VGycv1eavTEXzu7LDMVRq3ek+3PZ5iLH887Ct+viq+kREHImIbwf2N+vlyVp1qtedBwAAAAAAAAAAAAAAAAAAgD5xsMP3/zO/D/T66IDnzk9+Q3FtGv/d+KUnoC95/YfiEv9QXOIfikv8Q3GJfygu8Q/FJf6huMQ/AAAAAAAAAAAAAAAAAAAAAAAAAAAAdNWF8+ezZXnp8Y3JrD51bWF+pnbt1FRanynPzk+WJ2tzV8vTtdp0NS1P1mY3+3vVWu3q2HjMXx9tpPXGaH1h8eJsbf5K4+Ll2cp0ejEd+k96BQAAAAAAAAAAAAAAAAAAAC+W+sLiTKVaTecUOhbORl8cxo4LyWajfDY/GXbUxGDvO6jwHAo9npgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAoM2/AQAA///fKTPH") r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r4 = add_key$keyring(&(0x7f0000000100), &(0x7f0000000180)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffe) r5 = add_key(&(0x7f00000003c0)='ceph\x00', 0x0, &(0x7f0000000400)="010000000037a788a11d1f000000000000006923c63a4541062101a59ea9cb", 0x1f, r4) add_key(0x0, 0x0, 0x0, 0x0, r4) setxattr$trusted_overlay_upper(&(0x7f0000000200)='./file1\x00', &(0x7f00000001c0), &(0x7f0000001400)=ANY=[], 0x835, 0x0) keyctl$search(0xa, r4, &(0x7f0000000340)='pkcs7_test\x00', 0x0, r5) 16.723057619s ago: executing program 5 (id=427): r0 = socket$l2tp(0x2, 0x2, 0x73) r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) bind$bt_l2cap(r1, &(0x7f0000000000)={0x1f, 0x0, @any, 0x4, 0x1}, 0xe) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8a}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x6) syz_mount_image$erofs(&(0x7f0000000180), &(0x7f0000000000)='./file1\x00', 0x1000801, &(0x7f0000000140)=ANY=[], 0x2, 0x216, &(0x7f0000001900)="$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") openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r5 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$EBT_SO_GET_INIT_ENTRIES(r5, 0x0, 0x50, 0x0, &(0x7f0000000000)=0xff5f) accept(r1, &(0x7f0000000040)=@qipcrtr, 0x0) syz_emit_vhci(&(0x7f0000000100)=ANY=[@ANYBLOB="043e130100c90001"], 0x16) setsockopt$inet_int(r0, 0x0, 0x15, &(0x7f0000000000)=0x64, 0x4) 16.30960788s ago: executing program 3 (id=428): r0 = syz_mount_image$ext4(&(0x7f0000000580)='ext4\x00', &(0x7f00000005c0)='./file0\x00', 0x1008002, &(0x7f0000000300)={[{@grpquota}, {@bsdgroups}, {@resuid}, {@max_batch_time={'max_batch_time', 0x3d, 0x3}}, {@lazytime}, {@jqfmt_vfsold}, {@usrquota}, {@data_err_abort}]}, 0x1, 0x5d8, &(0x7f0000000c00)="$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") creat(&(0x7f0000000040)='./bus\x00', 0x0) open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) r1 = syz_open_dev$usbfs(&(0x7f0000000040), 0x76, 0x141201) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r2 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$sock_int(r2, 0x1, 0x3c, &(0x7f0000000040)=0x1, 0xfff0) setsockopt$inet_tcp_TCP_REPAIR(r2, 0x6, 0x13, &(0x7f0000000100)=0x1, 0x4) connect$inet(r2, &(0x7f00000006c0)={0x2, 0x0, @dev}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r2, 0x6, 0x14, &(0x7f0000000180)=0x2, 0x4) sendmmsg$inet(r2, &(0x7f00000018c0)=[{{0x0, 0x0, &(0x7f00000001c0), 0x1}}, {{0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f00000005c0)="b8", 0xfe49}, {&(0x7f0000000080)="61fc4777003a5456300750e99d9d0963"}], 0x1}}], 0x2, 0x4008440) ioctl$F2FS_IOC_MOVE_RANGE(r1, 0x550b, 0x0) mmap(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x0, 0x111, 0xffffffffffffffff, 0x0) r3 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) bind$bt_l2cap(r3, &(0x7f0000000040)={0x1f, 0x0, @any, 0xfffa, 0x1}, 0xe) ioctl$BTRFS_IOC_SEND(r3, 0x40489426, &(0x7f00000000c0)={{r0}, 0x8, &(0x7f0000000080)=[0x0, 0xd34, 0xffffffff, 0xe485, 0x7, 0x0, 0xffffffffffffffff, 0x6], 0x100, 0x0, 0x1}) dup(0xffffffffffffffff) r4 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0, 0x0) getdents(r4, &(0x7f0000000000)=""/36, 0x14) getdents(r4, 0x0, 0x66) 16.211632271s ago: executing program 2 (id=429): preadv(0xffffffffffffffff, &(0x7f0000000240)=[{&(0x7f0000033a80)=""/102386, 0xfffffd6e}], 0x1, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() mount$cgroup(0x0, &(0x7f0000000400)='./file0\x00', &(0x7f0000000440), 0x0, 0x0) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mremap(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x2000, 0x6, &(0x7f0000636000/0x2000)=nil) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r3, 0x6, 0x10, &(0x7f00000000c0)=0x1, 0x4) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x1}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket(0x10, 0x803, 0x0) r4 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f00000000c0)={'bridge_slave_0\x00'}) socket$netlink(0x10, 0x3, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000800)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r5, 0x8937, &(0x7f0000000000)={'bridge_slave_0\x00', @random="010000201000"}) 15.642303243s ago: executing program 4 (id=430): seccomp$SECCOMP_SET_MODE_FILTER(0x1, 0x0, 0x0) getrusage(0x0, &(0x7f0000000180)) socket$inet_tcp(0x2, 0x1, 0x0) ioctl$TCSETS(0xffffffffffffffff, 0x40045431, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x48) prlimit64(0x0, 0xe, &(0x7f00000000c0)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x5) r0 = getpid() futex(0x0, 0x4, 0xffffffbe, 0x0, 0x0, 0x4000001) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) syz_clone(0x0, 0x0, 0xfffffe11, 0x0, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) r1 = syz_open_dev$MSR(&(0x7f0000000140), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) ioctl$TIOCVHANGUP(0xffffffffffffffff, 0x5437, 0x0) r2 = socket$inet6(0xa, 0x800000000000002, 0x0) close(r2) socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r2, 0x6, 0x1e, &(0x7f0000000080)=0x400000001, 0x4) 14.587525116s ago: executing program 2 (id=432): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) ioctl$UFFDIO_API(0xffffffffffffffff, 0xc018aa3f, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000080), 0x140, 0x0) ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(r3, 0xc018937e, &(0x7f0000001040)={{0x1, 0x1, 0x1018, 0xffffffffffffffff}, './file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa/file0\x00'}) r5 = userfaultfd(0x801) mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x3000002, 0x2010, 0xffffffffffffffff, 0x0) ioctl$sock_ax25_SIOCADDRT(r4, 0x890b, &(0x7f0000000180)={@null, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, 0x0, [@bcast, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @null, @default, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @default, @null, @bcast]}) ioctl$UFFDIO_COPY(r5, 0xc028aa03, &(0x7f0000000000)={&(0x7f0000800000/0x800000)=nil, &(0x7f00002b3000/0x2000)=nil, 0x800000}) openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) 14.584712836s ago: executing program 3 (id=433): syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000480)='./file0\x00', 0x1008a, &(0x7f00000000c0)={[{@nomblk_io_submit}, {@usrjquota, 0x22}, {@errors_continue}, {@noload}, {@data_err_ignore}, {@grpjquota, 0x22}, {@errors_continue}, {@errors_remount}, {@jqfmt_vfsv1}]}, 0xfe, 0x456, &(0x7f0000000d80)="$eJzs3MtvG8UfAPCv7Tht+vg5v1IeLS0ECqLikTTpgx64FIHEASQkOBRxCklahboNaoJEq4gGDuWIKnFHHJH4C7hQLgg4IXGFO0KKUC4UTkZr76ZOYjsvJ07rz0faesYz7sx3d8cez64TQNcaSP7JReyLiN8iolTLLq0wUHu4szA79s/C7FguKpW3/spV6/29MDuWVc1et7eWqVRatHvz3YjRcnniapofmrn8wdD0tesvTF4evThxceLKyNmzp04e7T0zcrotce5P+nr446kjh15759YbY+dvvffTN0l/96Xl9XG0y0Bt7zb0dLsb67D9delcTwc7wroUIiI5XMXq+C9FIfoWy0rx6qfRahAD97RKJV/Z1bx4rgLcx5KJOtCNsg/65Ptvtm3T1GNHmD8Xi+sYd9KtVtIT+bROMf2OtBUGIuL83L9fJlts0ToEAEC92+ci4vlG8798PFRX73/ptaH+iPh/RByIiAci4mBEPBhRrftwRDyyzvaXXyFZOf+plDYU2Bol87+X0mtbS+d/2ewv+gtpbn81/mLuwmR54kS6T45HcVeSH27Rxvev/Pp5s7L6+V+yJe1nc8G0H3/2LFugGx+dGd1MzPXmP4k43NMo/tzinDeZHx+KiMMbbGPy2a+PNCtbPf4W2jApr3wV8Uzt+M/FsvgzuabXJ4dfPDNyemh3lCdODGVnxUo//3LzzWbtbyr+Npi/XYk9Dc//xfj7c7sjpq9dv1S9Xju9jv/8Rvr4+2dNv9Ns9Pzvzb1dTfemz300OjNzdTiiN/f6yudH7r42y2f1k/P/+LHG4/9A3N0Tj0ZEchIfjYjHIuLxtO9PRMSTEXGsxW748eWn3l9//C1W5dsoiX98teMf9cd/WaLU17QoSxQu/fDt+uPPJMf/VDV1PH1mLe9/LbqzJLGZfQcAAAD3inz1HvhcfnAxnc8PDtbu4T8Ye/LlqemZ5y5MfXhlvHavfH8U89lKV6luPXQ4XRvO8iPL8ifTdeMvCn3V/ODYVHm808FDl9vbZPwn/ih0unfAlvN7Lehexj90L+MfupfxD93L+Ifu1Wj83+hAP4Dtt8rnf9929QPYfub/0L2Mf+hexj90paa/jc83L5LYuYnvelsc07YmIr9DQr5vEsVoWNSz5j9mscHEroZFnX5nAgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAaI//AgAA//+GZONN") syz_mount_image$vfat(&(0x7f0000000200), &(0x7f0000000080)='./file0\x00', 0xa08886, &(0x7f0000000040)=ANY=[@ANYRES32=0x0], 0x9, 0x2a8, &(0x7f0000000500)="$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") bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x0, 0x0) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) socket$tipc(0x1e, 0x5, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) clock_getres(0x3, &(0x7f0000000240)) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x141842, 0x0) tgkill(r0, r0, 0x41) 13.415201929s ago: executing program 5 (id=434): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x3, &(0x7f0000000040)=@framed, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0x0) r4 = dup(0xffffffffffffffff) write$UHID_INPUT(r4, 0x0, 0x0) r5 = syz_open_dev$swradio(&(0x7f0000000000), 0x1, 0x2) ioctl$VIDIOC_SUBSCRIBE_EVENT(r5, 0x4020565a, &(0x7f0000000080)={0x5}) ioctl$VIDIOC_SUBSCRIBE_EVENT(r5, 0x4020565a, &(0x7f0000000180)={0x5, 0x5825}) r6 = syz_open_dev$video4linux(&(0x7f0000000300), 0x0, 0x0) dup3(r6, r5, 0x0) ioctl$sock_SIOCDELRT(0xffffffffffffffff, 0x890c, 0x0) 13.406681749s ago: executing program 2 (id=435): r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) r1 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$ifreq_SIOCGIFINDEX_team(r1, 0x8933, &(0x7f0000000200)={'team0\x00', 0x0}) bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=@base={0x1a, 0x4, 0x4, 0x7, 0x0, 0xffffffffffffffff, 0x0, '\x00', r2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) ptrace(0x10, r0) ptrace$setregs(0xd, r0, 0x0, &(0x7f00000003c0)) r3 = socket$packet(0x11, 0x2, 0x300) r4 = dup(r3) r5 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000240), 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r5, 0xc08c5332, &(0x7f00000003c0)={0x0, 0x0, 0x0, 'queue0\x00'}) r6 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000018c0), 0x82401) write$sndseq(r6, &(0x7f0000000840), 0x0) bind$packet(r4, &(0x7f00000001c0)={0x11, 0x4, 0x0, 0x1, 0x0, 0x6, @multicast}, 0x14) r7 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000000)={'syz_tun\x00', 0x0}) bind$packet(r3, &(0x7f00000000c0)={0x11, 0x0, r8, 0x1, 0x0, 0x6, @local}, 0x14) bind$packet(r7, &(0x7f0000000100)={0x11, 0x4, r8}, 0x14) setsockopt$packet_fanout(r4, 0x107, 0x12, &(0x7f0000000200), 0x4) syz_emit_ethernet(0x11, &(0x7f0000000140)=ANY=[@ANYBLOB="aaaaaaaaaaaa0180c200000000040000ec02dd400822d8da9ff819ef1c552146610d2950dab2a39e1b13edf4d019"], 0x0) ptrace$getregset(0x4205, r0, 0x2, &(0x7f0000000080)={&(0x7f0000000000)=""/120, 0x78}) 12.890883081s ago: executing program 4 (id=436): r0 = socket(0x10, 0x3, 0x0) sendto$inet6(r0, &(0x7f0000000000), 0x0, 0x0, 0x0, 0x0) socket(0x2a, 0x2, 0x3ff) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x5) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e22}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x5, &(0x7f00000002c0)=ANY=[@ANYBLOB="18050000000000fe000000004b64ffec850000007d000000040000000700000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r4}, 0x10) fchmodat(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0xfffffed3) symlink(0x0, &(0x7f0000000200)='./control\x00') syz_mount_image$udf(&(0x7f0000000a40), &(0x7f0000000500)='./file1\x00', 0x4400, &(0x7f0000000480)=ANY=[@ANYBLOB='shortad,rootdir=00000000000000000002,noadinicb\x00\x00\x00\x00=', @ANYRESDEC=0x0, @ANYRES16], 0x1, 0xa23, &(0x7f0000001b00)="$eJzs209sm+d9B/Dfw1eyaadrFbd1kzbLWLQIPKUN5P9KvAH2rApt5iZGZWXzZTBlyQ4R/askF043tB42oAjQg1FgPWzAkMsOA3bwDrvsFOwwDBg2GDsMxYp2Wrpm6Y3BBuS0aXhfPpQoWbbVOLZk5/Mx7C/58veSzx+afMmHbwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAEb/1lVNDB9N2twIAeJBeGvvG0GHv/wDwkXLO538AAAAAAAAAAAAAANjpUhTxZ5Hi1Z+004Xqekf9TGv2ytXxkdHNd9uTIkUtiqq+/Fs/eOjwkaPHjg938877f9iejJfHzp1qnJ6bmV+YWlycmmyMz7Yuzk1Obfke7nX/jQarAWjMvHZl8tKlxcah5w6vu/nqwDu7H9s/cOL4i+f3dWvHR0ZHx3pq+vo/8KPf4nZneOyKIn4WKerfezc1I6IW9z4Wd3nu3G97qk4MVp0YHxmtOjLdas4ulTemWq6qRQz07HSyO0YPYC7uSSPiWtn8ssGDZffG5psLzYnpqcbZ5sJSa6k1N5tqndaW/RmIWgyniPmIaBe33l1/FPHvkeL777fTREQU3XF4tjox+O7tqd2HPm5BX9m3IuJmPARztoPtjiLeiBQ/OD8UF/O4VsP2TMTXy3w64ptlLkdcz9dT+QR5KuK9TZ5PPFz6ooh/ihRzqZ0mu3Nfva6ceaXxtdlLcz213deVh/794UHa4a9N9ShionrFb6cPfrADAAAAAMDOU8TfRoobMwfSfPSuKbZmLzfONSemO98Kd7/7b+S9VlZWVgZSJxs5h3KezHk254Wc8zmv5bye882cN3K+lfNmzuWc7ZxRy4+fs5FzKOfJnGdzXsg5n/Nazus538x5I+dbOW/mXM7ZzhnWvQAAAAAAAADYYfZEET+OFF/4m29V5xVHdV76J04MH/jqF3vPGf/MXe6nrH0uIm7E1s7J7c+nDqda+efD7xdbU48ivpPP//vD7W4MAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACwrWpRxGcixQ/faKdIEdGIuBCdXC62u3UAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADAB1FPRZyOFL/4Sr26fjMiPhsR/7dS/omI5ZUNtrvFAAAAAAAAAMAtUhFDkeLxJ9tpICKuDryz+7H9AyeOv3h+XxFFpLKkt/7lsXOnGqfnZuYXphYXpyYb47Oti3OTU1t9uPqZ1uyVq+Mjo/elM3e15z63f0/99Nz86wuty68ubXr73vqpicWlhebFzW+OPVGLGOrdMlg1eHxktGr0dKs5W+2aardpYC2isdXOAAAAAAAAAPDI2JuKOBopXm0dSd11477Omv+vdK4Vq7V/8QdrvwWY3pBdvb8f2MrltNWGDlYL743xkdHRsZ7Nff23lpZtSqmIv44Un/vdJ6r18BR7N10bL+t2RYpj3zqS6wY+V9adXFdVHxwfGW28NDf75VPT03MXm0vNiempxth88+KWfzgAAAAAAAAAAPfR3lTEn0eK3xu6mbrnnef1/77OtZ71/9+oltAr9bQ+V1Vr+x+v1vY7lz9xYrgx+mu3234/1v/LNqVUxL9Fisd//4nqfPru+v/Qhtqy7r8jxb/+41O5rrarrDvY7U7nHi+1pqeGUh6rzz/brY2q9niu/eRa7cGy9vOR4i+fWV87nGs/tVZ7qKz940jxv0c3r/30Wu3hsvaPIsVvv93o1u4ta8/k2v1rtc9dnJuevNuwlvP/d5Hi7C++mrp9vu389/z+49qGXHXLnN/58oc1/wM9267lef1xnv+Dd5n/v48Uf/LTp3JdZ+wP5dsfr/5dm//fiRT/9avra4/l2n1rtQe32q3tVs7/lyLFiR/9aLXPef7zyK7NUO/8f7Zvfa4+S7Zp/h/v2TaQ23X4lxyLj6LF17/9WnN6emrBBRce2IXyKGIHNMOFO1zY7lcmHoTy/f+fI8ULZ2qpexyT3/8/1rm2dvz3/nfW3v9f2JCrtun9f1/PthfyUUt/X0R9aWa+f39EffH1b3+5NdO8PHV5anb42NEjzw8fO/Z8/67usd3apS0P3SOhnP8zkeKVn/7L6ueY9cd/mx//792Qq7Zp/j/Z26d1xzVbHoqPpHL+r0eK77797urnzTsd/3c//x/4wvpc/f+3TfP/qZ5t1W/8Px7xfM+2A5+OOLXVxwIAAIBHzN68Tv6nv/4Pq+e8r//8H1/s1vZ+/3M7O+H8fwAAAAAA+Kjbm4r4q0jxP0NfSt1zyLby+8/JDblqm37/t79n2+QDOq9ly4MMAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAALADpSji6Ujx6k/aabkor3fUz7Rmr1wdHxndfLc9KVLUoqjqy7/1g4cOHzl67PhwN++8/4ftyXh57Nypxum5mfmFqcXFqcnG+Gzr4tzk1Jbv4V7332iwGoDGzGtXJi9dWmwceu7wupuvDryz+7H9AyeOv3h+X7d2fGR0dKynpq//Az/6LdJttu+KIi5Fivr33k3/UUTU4t7H4i7PnfttT9WJwaoT4yOjVUemW83ZpfLGVMtVtYiBnp1OdsfoAczFPWlEXCubXzZ4sOze2HxzoTkxPdU421xYai215mZTrdPasj8DUYvhFDEfEe3i1rvrjyImIsX332+nt4uIojsOz7409o2hw3dvT+0+9LHXync33dxX9q2IuBkPwZztYLujiI9Fih+cH4qfFZ1xrYbtmYivl/l0xDfLXI64nq+n8gnyVMR7mzyfeLj0RRFnI8Vcaqf/LPLcV68rZ15pfG320lxPbfd15aF/f3iQdvhrUz2K+Hn1it9OP/f/GQAAAADgEVLEb0aKGzMHUrU+uLqm2Jq93DjXnJjufK3f/e6/kfdaWVlZGUidbOQcynky59mcF3LO57yW83rON3PeyPlWzps5l3O2c0YtP37ORs6hnCdzns15Ied8zms5r+d8M+eNnG/lvJlzOWc7Z/ieHAAAAAAAANiBalHEE5Hih2+000rRWeC9EJ1cts75yPv/AAAA////DD1f") openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) 11.146139486s ago: executing program 4 (id=437): socket$nl_route(0x10, 0x3, 0x0) r0 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000140)={'ipvlan0\x00'}) r1 = socket$igmp(0x2, 0x3, 0x2) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000200)={'netdevsim0\x00', 0x0}) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000380)={0x6, 0x3, &(0x7f0000000040)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', r2, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r3 = socket$inet6_sctp(0xa, 0x801, 0x84) sendto$inet6(r3, &(0x7f0000000140)="96", 0x1, 0x0, &(0x7f0000000280)={0xa, 0x0, 0x0, @private2}, 0x1c) setsockopt$inet_sctp6_SCTP_AUTO_ASCONF(r3, 0x84, 0x1e, &(0x7f0000000180)=0x2, 0x4) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x3, 0x6, &(0x7f0000000200)=ANY=[], &(0x7f0000000080)='GPL\x00', 0x4, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000100)=@newqdisc={0x44, 0x24, 0x3fe3aa0262d8c583, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {}, {0xffff, 0xffff}, {0x0, 0x4}}, [@qdisc_kind_options=@q_fq_pie={{0xb}, {0x14, 0x8002, [@TCA_FQ_PIE_TARGET={0x8, 0x3, 0x20}, @TCA_FQ_PIE_FLOWS={0x8, 0x2, 0xe0ec}]}}]}, 0x44}}, 0x0) sendmsg$nl_route(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="500000001000010425bbe5ad600027842cf52300", @ANYRES32=0x0, @ANYBLOB="0000000000008000280012800a00010076786c616e00"], 0x50}}, 0x4008040) socket$kcm(0x10, 0x400000002, 0x0) socket$igmp(0x2, 0x3, 0x2) socket$netlink(0x10, 0x3, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'bond_slave_0\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f00000003c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000040)=@getchain={0x24, 0x11, 0x839, 0x0, 0x0, {0x0, 0x0, 0x0, r7}}, 0x24}}, 0x0) 10.995910117s ago: executing program 6 (id=438): syz_emit_ethernet(0x2be, 0x0, 0x0) socket(0x2, 0x80805, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000002080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$devlink(0x0, 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RATE_SET(r3, &(0x7f0000000240)={0x0, 0x0, 0x0}, 0x0) r4 = socket$isdn(0x22, 0x2, 0x26) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x80044943, &(0x7f00000002c0)={'wlan0\x00'}) timerfd_settime(0xffffffffffffffff, 0x3, 0x0, 0x0) socket(0x10, 0x803, 0x0) r5 = syz_open_procfs$namespace(0x0, &(0x7f0000000080)='ns/cgroup\x00') setns(r5, 0x0) 9.91611184s ago: executing program 5 (id=439): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) sched_setaffinity(0x0, 0xfffffef7, &(0x7f0000000740)=0x410000002) ioctl$TIOCL_BLANKSCREEN(0xffffffffffffffff, 0x541c, 0x0) ioctl$TIOCL_UNBLANKSCREEN(0xffffffffffffffff, 0x541c, &(0x7f00000000c0)) socket$netlink(0x10, 0x3, 0x12) socket$inet_tcp(0x2, 0x1, 0x0) openat$vimc2(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) r3 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt(r3, 0x84, 0x81, &(0x7f00000002c0)="1a00000002000000", 0x8) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r3, 0x84, 0x64, &(0x7f0000000040)=[@in6={0xa, 0x4e23, 0x0, @loopback}], 0x1c) setsockopt$inet_sctp6_SCTP_AUTH_KEY(r3, 0x84, 0x17, &(0x7f0000000380)=ANY=[@ANYRES8=0x0], 0x9) sendto$inet6(r3, &(0x7f0000000000)="eb", 0x1, 0x0, &(0x7f0000000240)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) 9.81075741s ago: executing program 2 (id=440): r0 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r1 = syz_open_dev$dri(&(0x7f0000000180), 0x1, 0x0) r2 = syz_open_dev$dri(&(0x7f0000000180), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000100)={0x6, 0x1f, 0x6}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f00000000c0)={0xdb, 0x1ff, 0xb}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000000)={0x7fff, 0x8, 0x100}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000080)={0x2, 0x5, 0x3}) r3 = syz_open_dev$dri(&(0x7f0000000180), 0x1, 0x0) r4 = syz_open_dev$dri(&(0x7f0000000180), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r4, 0xc02064b2, &(0x7f0000000100)={0x6, 0x1f, 0x6, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r3, 0xc02064b2, &(0x7f00000000c0)={0xdb, 0x1ff, 0xb}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f00000001c0)={0x15, 0x1, 0x3}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r3, 0xc00464b4, &(0x7f0000000400)={r5}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000040)={0x49, 0x7fff, 0x4}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000200)={0x10001, 0x401f, 0x3}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000380)={0xff, 0x3, 0xd83f}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f00000002c0)={0x8, 0xd7, 0x8}) close_range(r3, 0xffffffffffffffff, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000240)={0x6, 0x12f, 0x2}) close_range(r0, 0xffffffffffffffff, 0x0) 8.890784213s ago: executing program 6 (id=441): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './bus/file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket(0x1e, 0x5, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r3 = syz_open_dev$video4linux(0x0, 0x200008f, 0x0) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(r3, 0xc038563b, 0x0) pipe(0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) socket$inet_udp(0x2, 0x2, 0x0) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x1000000000000f, 0x0, 0x0) openat$sndtimer(0xffffffffffffff9c, 0x0, 0x0) mprotect(&(0x7f0000001000/0x2000)=nil, 0x2000, 0x0) r4 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000040), 0x103201, 0x0) write$P9_RSTATu(r4, &(0x7f0000000080)={0x265, 0x2, 0xafd, {{0x500, 0x124, 0x28, 0x1f00, {}, 0x0, 0x0, 0xc, 0x401, 0xffffffffffffff3b, '\nnodev{evo\x03\xd3\x8b\x92\x00'/27, 0x28, 'pg>\xff\xeb\t\xb55\x1f[\xde\x05@\x00\x00\x00\x00\x18x\x99\xa9\x16c\x88\x14\xe5p\x81\x03\xb4\x94\xe1\x00\x00\x00\x00\x00\x00\x00\x00', 0x2, '\b\x00', 0xac, '\xf8\xf6i\xfbqm\xcf1^\xca\xf3\x85@\x9a\xc6[\x94\bg\x8c,;\x9e\x1dR\xc3l\xde{\xa4\xa4@\xb4\xb0\xb4\xf1t\xa6f\xa8R\x9aE\x1b4\a\xdb\xda\xb2\x88K\xaf\x05\x00\x00\x00\x00\x00\x00\x00G\xec!\xca\xbf\xf2\x0f\x9c\x1c\xbe6\xf4\xfd\x1aL\xc2\x80\xe8\xe2\x89\xdad\x9a7\x009\x86Ac\x1dD\xf4\xa3\x9b\x11\x91\x93z(\x0e\x8d\x88\x9f\xc2 \xd1\x15\xac\x8e/\x18K\x9aau\x8d&w*\xb0\xf2\x04M\x8e\xf0&=\xdd\x97\xd3\xc4\'\xb3\xa52\xef\xab\x1d\x1c\xe3,\xa7\xc1\xfc#\x1a\xf4\x84\b\xe0+%P(\xb7\xc9\xbb\x859oM\x8a\xf0\xeb\x95\xfc\x0e\xcc\x99\xf7\x80\xe2'}, 0x12c, 'odev/n\xb1{#\x00\xf9\xda\xa5\xee#&n\xcf\x85\xfe\xa6^B\xd9y\xa3\xfd\xe5\xf4u\xda\xf0;\x11r\xd9{\xad\xc7\tZ\xfdv\xfeO\x04A\xf7\xf7t\x1e\xac\x03\x00\x00\xec\xff\x00\x00\xdb\xa0\xc2\xf7\xf0\x9f\xf5<~M\x1a\xd6n-\a\x01\x98\x01\x9f0\x11\x84G\xaa\x9at\xf5\x16\x85\xf5\x06\xae\x89H\x06\x87\x82g\xd5\xa1)\x8dy,J7\xf2\xe1\xcb\xbd$\x82\x92\x9a\r\x89r\xb5\xcfs.\xa5\xb0\xd7#\x85\x9d\xba?\x93\xae\xd3\xb4.\xe7\xca\xc0}\xe0\x9d\x1dh\xa6\x033\xa8\x82F}+1\xaa\xcd\xf9\x18\x85I\xb1\x12]lL\x9b\x18\xc2\xfbV\xc5}}\xc6&\xe49\a\x96\xa1\xebH\'Fi\xab\x13\xf8\xb1\x1d\x14`Y\xf3\x10\xe2cMY?\xece\xd5)\xf3\x82\x06fd\xdf$NL\x90W\np\x04\x9f9\x9f\x06\x1fu\xb7y|\xe1\xfe\x11\xea\x91\x96\t\xd5\x1aA\xdd=\xe3\x04\xbd|~\xd0\xa4V\xf0\xae\x12Qa\x05\xc9\xce\x88}\xf5\xa6\xe0\xb6\xa7}Yl\xf8\x8b\xa6\xe5\xc69|}P!\xd7\x98\x95(\xfd\x179\xe1\xc2\xd8\x7f\xff\x00'/300}}, 0xfd85) 8.483339974s ago: executing program 5 (id=442): keyctl$KEYCTL_WATCH_KEY(0x20, 0x0, 0xffffffffffffffff, 0x0) keyctl$unlink(0x7, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = epoll_create(0xff) kcmp$KCMP_EPOLL_TFD(r0, r0, 0x7, 0xffffffffffffffff, &(0x7f0000000000)={r3, 0xffffffffffffffff, 0x7}) 6.207380101s ago: executing program 6 (id=443): pipe2$9p(0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000600), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) syz_mount_image$hfsplus(&(0x7f0000000000), &(0x7f0000000080)='./file0\x00', 0x80000c, &(0x7f00000003c0)=ANY=[@ANYBLOB="706172743d3078300002a27f9edc6b44900000c63d5f852c6769643d", @ANYRESOCT, @ANYRESOCT=0x0, @ANYRES8, @ANYRES32, @ANYRES8, @ANYBLOB="2c6e03d465636f6d706f73652c6769643d29ab72f4a2f73b811c7fd9bae7ecd520839bd791f81b6637f549a77ac6cb621635f9c08b2615964a3c43b727df50d049dc760465dea7349206240e6fb4756f276c72f20bab7d507fe4853b18ebe583cbf9009044b021249834326e80399ca072639251325e38177eef4f05093acfe76553919ecca99460ea4ebdbcef9c4e0ed3f10f86889116979b7aa52b38442546b806d6b8964f99a04195ad43adb611", @ANYRES16, @ANYBLOB="4599"], 0x1, 0x701, &(0x7f00000009c0)="$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") ioctl$KVM_CREATE_IRQCHIP(r2, 0xae60) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000300)=[@text64={0x40, &(0x7f0000000200)="f7790066baa00066b86b4266ef66ba420066b8e20066ef0f29902cbb0000c4e2b1ba8c88d9000000666666440f38826b410f7842280f07b8010000000f01d9c4033921820f47a753fd", 0x49}], 0x1, 0x0, 0x0, 0x0) clock_adjtime(0x0, &(0x7f00000004c0)={0xc5, 0x0, 0xfffffffffffffff9, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x2, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x200004, 0x0, 0x0, 0x0, 0x0, 0x7}) syz_kvm_setup_cpu$x86(r2, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000180)=[@text64={0x40, &(0x7f0000000680)="66420f3841c5b9f60200000f3266baf80cb870047a85ef66bafc0c66ed66b80c008ee80fe9b300000100b9220000400f322e0f211c26460fc7b0003000000f78e2b8010000000f01c1", 0x49}], 0x1, 0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) open(&(0x7f00000000c0)='./bus\x00', 0xce942, 0x0) r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8) ioctl$KVM_SET_VCPU_EVENTS(r3, 0x4400ae8f, &(0x7f0000000140)) ioctl$KVM_RUN(r3, 0xae80, 0x0) connect$inet6(0xffffffffffffffff, 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000280)={&(0x7f0000000080)=ANY=[@ANYBLOB="9feb010018000000000000003c0000003c000000020000000000000002000004ffffffff0000000003000000000000000000000003000400000000000000000000000002000000000000000000000006"], 0x0, 0x56, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x20) 5.929089501s ago: executing program 3 (id=444): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x5) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="1b0000000000000000000000000004", @ANYRES32=0x0], 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0xf, &(0x7f0000000600)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000084000000b70000000000000095"], &(0x7f0000001dc0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r4}, 0x2d) r5 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0xf, 0x7fff0006}]}) r6 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) connect$bt_l2cap(r6, 0x0, 0x0) r7 = syz_open_dev$usbfs(&(0x7f0000000040), 0x80000000003, 0x101301) syz_emit_ethernet(0x2a, &(0x7f0000000000)=ANY=[], 0x0) ioctl$USBDEVFS_FREE_STREAMS(r7, 0x802c550a, &(0x7f0000000000)=ANY=[]) close_range(r5, 0xffffffffffffffff, 0x0) 5.267444404s ago: executing program 2 (id=445): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) getpid() mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) ioctl$UFFDIO_API(0xffffffffffffffff, 0xc018aa3f, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r2 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000080), 0x140, 0x0) ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(r2, 0xc018937e, &(0x7f0000001040)={{0x1, 0x1, 0x1018, 0xffffffffffffffff}, './file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa/file0\x00'}) r4 = userfaultfd(0x801) mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x3000002, 0x2010, 0xffffffffffffffff, 0x0) ioctl$sock_ax25_SIOCADDRT(r3, 0x890b, &(0x7f0000000180)={@null, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, 0x0, [@bcast, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @null, @default, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @default, @null, @bcast]}) ioctl$UFFDIO_COPY(r4, 0xc028aa03, &(0x7f0000000000)={&(0x7f0000800000/0x800000)=nil, &(0x7f00002b3000/0x2000)=nil, 0x800000}) openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) 4.879710495s ago: executing program 5 (id=446): r0 = socket(0x15, 0x5, 0x0) r1 = syz_open_dev$midi(&(0x7f0000000040), 0xb6, 0x48801) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f0000001040)={0x26, 'hash\x00', 0x0, 0x0, 'sha224-generic\x00'}, 0x58) setsockopt$ALG_SET_AEAD_AUTHSIZE(r2, 0x117, 0x5, 0x0, 0x4) writev(r1, &(0x7f0000003480)=[{0x0}, {&(0x7f00000034c0)="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", 0xff0}], 0x2) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000240)={'wlan1\x00'}) r3 = socket(0x1d, 0x2, 0x6) getsockopt$nfc_llcp(r3, 0x6a, 0x1, 0x0, 0x2000003b) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz0\x00', 0x1ff) openat$cgroup_root(0xffffff9c, &(0x7f0000000440)='./cgroup.net/syz0\x00', 0x200002, 0x0) r4 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r5 = openat$cgroup_freezer_state(r4, &(0x7f0000000140), 0x2, 0x0) write$cgroup_freezer_state(r5, &(0x7f0000000040)='FROZEN\x00', 0x7) mkdirat$cgroup(r4, &(0x7f0000000740)='syz1\x00', 0x1ff) sendfile(r5, r5, 0x0, 0x9) setsockopt$TIPC_GROUP_JOIN(r0, 0x10f, 0x87, 0x0, 0x0) getsockopt(r0, 0x200000000114, 0x2713, 0x0, 0x0) recvmsg(r0, 0x0, 0x0) 4.807400835s ago: executing program 6 (id=447): syz_io_uring_setup(0x48a, &(0x7f0000000080)={0x0, 0x8f3c, 0x400, 0x0, 0x360}, &(0x7f0000000240), &(0x7f0000000140)) socket$nl_netfilter(0x10, 0x3, 0xc) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f00000001c0)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) r3 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r3}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) r4 = mq_open(&(0x7f0000000080)='!selx\x00\x00 \x00\x00\x00\x00\x00\x00\x00\x00', 0x6e93ebbbcc0884f2, 0x0, &(0x7f0000000300)={0x0, 0x1, 0x7, 0x1}) ioctl$TIOCPKT(0xffffffffffffffff, 0x5420, &(0x7f0000000100)=0x8683) mq_timedsend(r4, 0x0, 0x0, 0x0, 0x0) mq_timedsend(r4, 0x0, 0x0, 0x0, 0x0) 1.802729324s ago: executing program 3 (id=448): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$TIPC_CMD_GET_NODES(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000300)={0x1c, r1, 0x1, 0x70bd28, 0x25dfdc00, {{}, {0x0, 0x410c}}}, 0x1c}, 0x1, 0x0, 0x0, 0x40}, 0x10) r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) mmap(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x0, 0x1010, r2, 0x6192c000) setsockopt$inet6_IPV6_HOPOPTS(r2, 0x29, 0x36, &(0x7f0000000040)=ANY=[], 0x8) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0xa, 0x1, 0x7fe2, 0x1, 0x12, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x0, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r3}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r4}, 0x10) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000002c0), &(0x7f0000000740), 0x80000002, r3}, 0x38) connect$inet6(r2, &(0x7f0000000100)={0xa, 0x0, 0x0, @mcast2, 0x5}, 0x1c) r5 = openat$ppp(0xffffffffffffff9c, &(0x7f00000003c0), 0x0, 0x0) ioctl$TUNSETOFFLOAD(r5, 0xc004743e, 0x20001400) ioctl$TUNSETOFFLOAD(r5, 0x4004743c, 0x20000000) r6 = socket(0x10, 0x3, 0x0) sendto$inet6(r6, &(0x7f0000000080)="7800000018002507b9409b14ffff0b7a0204be04050714056406040c5c0009003f0006180a0000000d0085a168d0bf46d32345653610648d270005000a06024e49935ade4a460c89b6ec0cff3959547f509058ba86c902007a00004a32000400160108030a0000000000e000e218d1ddf66ed538f2523250", 0x78, 0x0, 0x0, 0x0) setsockopt$SO_BINDTODEVICE(r2, 0x1, 0x19, &(0x7f0000000040)='lo\x00', 0x10) sendmmsg$inet6(r2, &(0x7f0000004b80)=[{{0x0, 0x0, &(0x7f0000000240)=[{&(0x7f00000000c0)="8484", 0x2}], 0x1}}], 0x1, 0x4400c800) sendto$inet6(r2, &(0x7f0000000140)="d18a9e11648bbabc0ef53ff8717bf515a150a20efe935f385ea3f4ded9f8d243e5db154bb412de471c2e2fbd38f0657c06791431d427de00dd5077160e398b59d064f8b322716abbeac50bf9fe4eeee1c5eb0f14284668d6a686c935782b41bed55c69349493581c87e68b17eec6b9d724855fbdffcbbd514e127b2ab7036d90f471bb7534edc57a364a6daf", 0x8c, 0x3b00, 0x0, 0x0) 1.802091414s ago: executing program 6 (id=449): r0 = socket$l2tp(0x2, 0x2, 0x73) r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) bind$bt_l2cap(r1, &(0x7f0000000000)={0x1f, 0x0, @any, 0x4, 0x1}, 0xe) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8a}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x6) syz_mount_image$erofs(&(0x7f0000000180), &(0x7f0000000000)='./file1\x00', 0x1000801, &(0x7f0000000140)=ANY=[], 0x2, 0x216, &(0x7f0000001900)="$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") openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r5 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$EBT_SO_GET_INIT_ENTRIES(r5, 0x0, 0x50, 0x0, &(0x7f0000000000)=0xff5f) accept(r1, &(0x7f0000000040)=@qipcrtr, 0x0) syz_emit_vhci(&(0x7f0000000100)=ANY=[@ANYBLOB="043e130100c90001"], 0x16) setsockopt$inet_int(r0, 0x0, 0x15, &(0x7f0000000000)=0x64, 0x4) 1.794638444s ago: executing program 4 (id=458): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) bpf$MAP_CREATE_RINGBUF(0x0, 0x0, 0x48) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r1}, 0x10) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) sched_setaffinity(0x0, 0xfffffef7, &(0x7f0000000740)=0x410000002) r3 = openat$urandom(0xffffffffffffff9c, &(0x7f00000004c0), 0x101000, 0x0) close_range(0xffffffffffffffff, r3, 0x2) sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x20020080, 0x0, 0x0) read$FUSE(0xffffffffffffffff, &(0x7f0000000d80)={0x2020}, 0x2020) mknodat$loop(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x6004, 0x1) r4 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0, 0x0) ioctl$FS_IOC_GET_ENCRYPTION_PWSALT(r4, 0x80041285, &(0x7f0000001080)) ioctl$sock_inet6_SIOCADDRT(0xffffffffffffffff, 0x890b, &(0x7f0000000340)={@private1, @remote, @mcast1={0xff, 0x7}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}) mkdir(&(0x7f0000000400)='./file0\x00', 0x0) 270.828439ms ago: executing program 6 (id=450): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x3, &(0x7f0000000040)=@framed, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0x0) r4 = dup(0xffffffffffffffff) write$UHID_INPUT(r4, 0x0, 0x0) r5 = syz_open_dev$swradio(&(0x7f0000000000), 0x1, 0x2) ioctl$VIDIOC_SUBSCRIBE_EVENT(r5, 0x4020565a, &(0x7f0000000080)={0x5}) ioctl$VIDIOC_SUBSCRIBE_EVENT(r5, 0x4020565a, &(0x7f0000000180)={0x5, 0x5825}) r6 = syz_open_dev$video4linux(&(0x7f0000000300), 0x0, 0x0) dup3(r6, r5, 0x0) ioctl$sock_SIOCDELRT(0xffffffffffffffff, 0x890c, 0x0) 270.364029ms ago: executing program 4 (id=451): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x24, r4, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r5}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x3}]}, 0x24}}, 0x0) sendmsg$NL80211_CMD_START_AP(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)={0x5c, r4, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r5}, @void}}, [@beacon=[@NL80211_ATTR_BEACON_HEAD={0x28, 0xe, {{{}, {}, @broadcast, @device_a, @from_mac}, 0x0, @default, 0x1, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void}}], @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}], @NL80211_ATTR_BEACON_INTERVAL={0x8}, @NL80211_ATTR_DTIM_PERIOD={0x8}]}, 0x5c}}, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000003c0)={0xffffffffffffffff}) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000f80), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r6, 0x8933, &(0x7f0000000300)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_NEW_STATION(r7, &(0x7f0000001080)={0x0, 0x0, &(0x7f0000001040)={&(0x7f0000000000)={0x3c, r8, 0xb97534d5fe9704cf, 0x0, 0x0, {{}, {@val={0x8, 0x3, r9}, @void}}, [@NL80211_ATTR_STA_SUPPORTED_RATES={0x4}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_STA_AID={0x6, 0x10, 0x580}, @NL80211_ATTR_STA_LISTEN_INTERVAL={0x6}]}, 0x3c}, 0x1, 0x0, 0x0, 0xc0}, 0x0) sendmsg$NL80211_CMD_CONNECT(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)={0x30, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}, @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}]]}, 0x30}}, 0x0) syz_80211_inject_frame(&(0x7f00000002c0)=@device_b, &(0x7f0000000300)=@mgmt_frame=@probe_response={{{}, {}, @device_b, @device_a, @from_mac}, 0xfffffffffffffff7, @default, 0x1, @val={0x0, 0x6, @default_ap_ssid}, @val={0x1, 0x1, [{0x2, 0x1}]}, @void, @void, @void, @void, @void, @void}, 0x2f) nanosleep(&(0x7f0000000340)={0x0, 0x2faf080}, 0x0) r10 = socket$nl_generic(0x10, 0x3, 0x10) r11 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r10, 0x8933, &(0x7f0000000040)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r10, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x24, r11, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r12}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x3}]}, 0x24}}, 0x0) 269.809389ms ago: executing program 5 (id=461): socket$nl_xfrm(0x10, 0x3, 0x6) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20000008b}, 0x0) sched_setscheduler(0x0, 0x1, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r3 = syz_open_dev$vim2m(0x0, 0xa, 0x2) ioctl$vim2m_VIDIOC_S_FMT(r3, 0xc0d05605, &(0x7f0000000240)={0x1, @raw_data="a425e2f1a54d24f15852323460608d70566e425a6c36af37b33fac9d31c8a9c7044410d324b03e044e454d2092a62fea8f13441431ce248bfc73a6726ee61ba491d15d8f392ff66fe0b17f0e11f5d2367d5593205ab1efa97d40619a553e7da2518125b850a186ef691daa55c9e50ffaf6ddc25220ded32aeba4524cec1afbd17abba1d15ea05e97ed3dcad452db6e08a991e2c78b057f55de7fdeba7411ce65700c0a1ad7946ff7c355db87566e3e5abb7a37a06731ed19ddfa970bb58a27fd9fa194c092730319"}) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x3, 0x0, &(0x7f0000000480)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r4 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$IPT_SO_SET_REPLACE(r4, 0x4000000000000, 0x40, &(0x7f00000003c0)=@raw={'raw\x00', 0x4001, 0x3, 0x330, 0x1b8, 0x0, 0x148, 0x0, 0x148, 0x298, 0x240, 0x240, 0x298, 0x240, 0x7fffffe, 0x0, {[{{@ip={@loopback, @local, 0x0, 0x0, 'ip6gretap0\x00', 'netdevsim0\x00'}, 0x0, 0x190, 0x1b8, 0x0, {}, [@common=@inet=@recent0={{0xf8}, {0x0, 0x0, 0x1, 0x0, 'syz0\x00'}}, @common=@unspec=@connlabel={{0x28}}]}, @common=@inet=@SYNPROXY={0x28}}, {{@ip={@local, @loopback, 0x0, 0x0, 'veth0_vlan\x00', 'macvtap0\x00'}, 0x0, 0xc0, 0xe0, 0x0, {}, [@inet=@rpfilter={{0x28}}, @inet=@rpfilter={{0x28, 'rpfilter\x00', 0x2}}]}, @unspec=@TRACE={0x20}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x390) r5 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TIOCSETD(r5, 0x5423, &(0x7f00000003c0)=0x14) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) 0s ago: executing program 3 (id=452): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r3}, 0x10) r4 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000018c0), 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r4, 0xc08c5332, &(0x7f0000000040)={0x0, 0x0, 0x0, 'queue0\x00'}) r5 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000080), 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TIMER(r5, 0x40605346, &(0x7f0000000180)={0x0, 0x0, {0x0, 0x3}}) r6 = syz_open_dev$usbfs(&(0x7f0000000240), 0xb, 0x101301) ioctl$USBDEVFS_IOCTL(r6, 0xc0105512, &(0x7f0000000200)) ioctl$USBDEVFS_IOCTL(r6, 0x80045505, &(0x7f0000000040)=@usbdevfs_connect) ioctl$USBDEVFS_FREE_STREAMS(r6, 0x8008551d, &(0x7f00000003c0)=ANY=[]) r7 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) close_range(r7, 0xffffffffffffffff, 0x0) kernel console output (not intermixed with test programs): p: link becomes ready [ 76.559987][ T4263] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 76.570634][ T4263] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 76.581211][ T4263] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 76.591955][ T4263] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 76.605643][ T4263] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 76.633531][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 76.642629][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 76.655825][ T4263] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 76.665618][ T4263] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 76.675146][ T4263] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 76.689045][ T4263] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 76.704504][ T4260] device veth0_macvtap entered promiscuous mode [ 76.740074][ T4260] device veth1_macvtap entered promiscuous mode [ 76.759925][ T2920] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 76.773285][ T4314] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 76.781058][ T2920] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 76.792328][ T4314] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 76.801428][ T4314] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 76.829554][ T46] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 76.839781][ T46] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 76.865808][ T4314] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 76.873757][ T4314] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 76.907816][ T4314] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 76.917129][ T4314] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 76.935183][ T4260] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 76.947076][ T4260] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 76.958094][ T4260] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 76.969079][ T4260] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 76.979194][ T4260] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 76.991519][ T4260] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 77.003674][ T4260] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 77.020118][ T4314] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 77.028674][ T4314] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 77.036919][ T4314] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 77.047161][ T4314] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 77.057132][ T4250] device veth0_vlan entered promiscuous mode [ 77.071011][ T2920] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 77.075838][ T4314] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 77.089705][ T4260] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 77.100544][ T2920] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 77.105904][ T4314] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 77.109808][ T4260] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 77.126926][ T4260] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 77.138669][ T4260] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 77.148837][ T4260] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 77.160285][ T4260] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 77.171902][ T4260] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 77.184261][ T4260] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 77.192993][ T4260] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 77.202565][ T4260] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 77.211811][ T4260] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 77.228463][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 77.245234][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 77.253272][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 77.262335][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 77.286777][ T4250] device veth1_vlan entered promiscuous mode [ 77.304623][ T4314] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 77.321900][ T4314] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 77.336942][ T4314] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 77.352554][ T4314] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 77.416624][ T2920] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 77.426182][ T2920] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 77.507921][ T4314] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 77.521914][ T4314] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 77.606466][ T9] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 77.642382][ T9] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 77.690326][ T4333] L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 77.739340][ T46] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 77.758511][ T46] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 77.790493][ T4314] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 77.800964][ T4314] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 77.817924][ T4314] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 77.826943][ T4314] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 78.214961][ T4250] device veth0_macvtap entered promiscuous mode [ 78.274773][ T4262] Bluetooth: hci2: command 0x0419 tx timeout [ 78.281578][ T4262] Bluetooth: hci0: command 0x0419 tx timeout [ 78.354949][ T4257] Bluetooth: hci3: command 0x0419 tx timeout [ 78.355205][ T4262] Bluetooth: hci4: command 0x0419 tx timeout [ 78.367764][ T4267] Bluetooth: hci1: command 0x0419 tx timeout [ 78.596644][ T4250] device veth1_macvtap entered promiscuous mode [ 78.611315][ T4343] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 78.651787][ T4343] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 78.774841][ T4250] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 78.835807][ T4250] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 78.867461][ T4347] loop3: detected capacity change from 0 to 256 [ 78.886041][ T4250] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 78.925185][ T4347] exfat: Deprecated parameter 'namecase' [ 78.951676][ T4250] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 78.997826][ T4250] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 79.008564][ T4250] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 79.018812][ T4250] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 79.030728][ T4250] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 79.045077][ T4250] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 79.069598][ T4342] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 79.079297][ T4342] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 79.080313][ T4347] exFAT-fs (loop3): failed to load upcase table (idx : 0x00010000, chksum : 0xb5fb52fc, utbl_chksum : 0xe619d30d) [ 79.330722][ T4354] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 80.394587][ T4250] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 80.410964][ T4250] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 80.421397][ T4250] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 80.433497][ T4250] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 80.455915][ T4250] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 80.504140][ T4250] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 80.524142][ T4250] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 80.536210][ T4250] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 80.552515][ T4250] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 80.631851][ T4314] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 80.650727][ T4314] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 80.684859][ T0] NOHZ tick-stop error: local softirq work is pending, handler #08!!! [ 80.694160][ T0] NOHZ tick-stop error: local softirq work is pending, handler #8a!!! [ 80.704071][ T0] NOHZ tick-stop error: local softirq work is pending, handler #8a!!! [ 80.712271][ T0] NOHZ tick-stop error: local softirq work is pending, handler #18a!!! [ 80.720625][ T0] NOHZ tick-stop error: local softirq work is pending, handler #18a!!! [ 80.728916][ T0] NOHZ tick-stop error: local softirq work is pending, handler #18a!!! [ 80.738555][ T0] NOHZ tick-stop error: local softirq work is pending, handler #18a!!! [ 80.746918][ T0] NOHZ tick-stop error: local softirq work is pending, handler #18a!!! [ 80.755277][ T0] NOHZ tick-stop error: local softirq work is pending, handler #18a!!! [ 80.763547][ T0] NOHZ tick-stop error: local softirq work is pending, handler #18a!!! [ 80.872394][ T4250] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 80.884569][ T4250] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 80.891791][ T4362] loop4: detected capacity change from 0 to 1024 [ 80.893611][ T4250] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 81.660738][ T4300] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 81.673851][ T4362] ======================================================= [ 81.673851][ T4362] WARNING: The mand mount option has been deprecated and [ 81.673851][ T4362] and is ignored by this kernel. Remove the mand [ 81.673851][ T4362] option from the mount to silence this warning. [ 81.673851][ T4362] ======================================================= [ 81.695599][ T4250] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 81.719789][ T126] cfg80211: failed to load regulatory.db [ 82.124318][ T4300] usb 4-1: Using ep0 maxpacket: 32 [ 82.145473][ T4300] usb 4-1: device descriptor read/all, error -71 [ 82.217673][ T4362] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 82.528388][ T4372] loop2: detected capacity change from 0 to 512 [ 82.561477][ T4374] loop3: detected capacity change from 0 to 164 [ 82.589440][ T4372] EXT4-fs: Invalid want_extra_isize 5 [ 82.780020][ T4377] loop1: detected capacity change from 0 to 512 [ 83.690811][ T4328] I/O error, dev loop2, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 83.728785][ T4372] xt_TCPMSS: Only works on TCP SYN packets [ 83.764495][ T4383] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 83.813936][ T4383] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 83.814500][ T4377] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 83.834854][ T4342] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 83.834944][ T34] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 83.954810][ T4388] rock: directory entry would overflow storage [ 83.961071][ T4388] rock: sig=0x4f50, size=4, remaining=3 [ 83.974015][ T4388] isofs: Unable to find the ".." directory for NFS. [ 84.438780][ T4377] ext4 filesystem being mounted at /2/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 84.518028][ T4342] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 84.566746][ T34] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 84.910928][ T4393] loop4: detected capacity change from 0 to 32768 [ 86.336575][ T4260] EXT4-fs (loop1): unmounting filesystem. [ 86.413089][ T4407] loop0: detected capacity change from 0 to 16 [ 86.618512][ T4407] erofs: (device loop0): mounted with root inode @ nid 36. [ 86.691330][ T26] audit: type=1800 audit(1734088850.468:2): pid=4393 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.13" name="file1" dev="loop4" ino=4 res=0 errno=0 [ 92.269803][ T4423] loop2: detected capacity change from 0 to 512 [ 95.885651][ T4423] EXT4-fs: failed to create workqueue [ 95.891166][ T4423] EXT4-fs (loop2): mount failed [ 97.093241][ T4442] binder_alloc: 4441: binder_alloc_buf, no vma [ 97.101847][ T4443] loop1: detected capacity change from 0 to 1024 [ 97.702827][ T4455] overlayfs: failed to decode file handle (len=5, type=251, flags=0, err=-22) [ 99.549501][ T4460] sched: RT throttling activated [ 102.813478][ T4474] loop4: detected capacity change from 0 to 512 [ 102.852515][ T4475] loop1: detected capacity change from 0 to 8 [ 102.899033][ T4477] netlink: 'syz.0.33': attribute type 21 has an invalid length. [ 103.194601][ T4477] netlink: 156 bytes leftover after parsing attributes in process `syz.0.33'. [ 106.032129][ T4495] loop0: detected capacity change from 0 to 736 [ 108.478791][ T4509] loop1: detected capacity change from 0 to 256 [ 108.591712][ T4512] loop0: detected capacity change from 0 to 256 [ 108.760586][ T4512] exFAT-fs (loop0): failed to load upcase table (idx : 0x00010000, chksum : 0x4f8593fa, utbl_chksum : 0xe619d30d) [ 110.449965][ T4262] Bluetooth: hci0: command 0x2016 tx timeout [ 110.846627][ T4512] Bluetooth: MGMT ver 1.22 [ 111.393422][ T4528] loop2: detected capacity change from 0 to 512 [ 112.962282][ T4536] usb usb8: usbfs: process 4536 (syz.4.43) did not claim interface 0 before use [ 113.659691][ T4528] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 113.688143][ T4528] ext4 filesystem being mounted at /11/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 114.266489][ T4552] loop4: detected capacity change from 0 to 4096 [ 114.928646][ T4554] netlink: 'syz.3.48': attribute type 8 has an invalid length. [ 114.979031][ T4554] loop3: detected capacity change from 0 to 1024 [ 116.456777][ T4265] Bluetooth: hci0: command 0x0406 tx timeout [ 116.488790][ T4554] hfsplus: unable to parse mount options [ 116.895424][ T4258] EXT4-fs (loop2): unmounting filesystem. [ 116.912429][ T4254] ntfs3: loop4: ntfs_evict_inode r=5 failed, -22. [ 116.967851][ T4254] ntfs3: loop4: Mark volume as dirty due to NTFS errors [ 118.822867][ T4579] loop1: detected capacity change from 0 to 512 [ 119.082925][ T4579] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support! [ 119.110197][ T4579] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 120.885979][ T4596] syz.4.49 uses obsolete (PF_INET,SOCK_PACKET) [ 121.887988][ T4579] EXT4-fs (loop1): 1 orphan inode deleted [ 121.893846][ T4579] EXT4-fs (loop1): 1 truncate cleaned up [ 121.964114][ T4579] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none. [ 122.023108][ T4600] process 'syz.2.58' launched './file1' with NULL argv: empty string added [ 122.082535][ T4600] netlink: 28 bytes leftover after parsing attributes in process `syz.2.58'. [ 122.125376][ T4600] netlink: 8 bytes leftover after parsing attributes in process `syz.2.58'. [ 122.236727][ T4260] EXT4-fs (loop1): unmounting filesystem. [ 127.428839][ T4631] capability: warning: `syz.2.62' uses deprecated v2 capabilities in a way that may be insecure [ 133.718248][ T1277] ieee802154 phy0 wpan0: encryption failed: -22 [ 133.975066][ T1277] ieee802154 phy1 wpan1: encryption failed: -22 [ 134.733092][ T4664] loop3: detected capacity change from 0 to 2048 [ 138.699556][ T4700] loop2: detected capacity change from 0 to 512 [ 138.785296][ T4705] loop3: detected capacity change from 0 to 1024 [ 139.523735][ T4700] EXT4-fs: Ignoring removed nobh option [ 139.909159][ T4700] EXT4-fs (loop2): Test dummy encryption mode enabled [ 139.937323][ T4700] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 140.142065][ T4700] EXT4-fs error (device loop2): ext4_mb_generate_buddy:1102: group 0, block bitmap and bg descriptor inconsistent: 191 vs 220 free clusters [ 140.179008][ T4700] EXT4-fs warning (device loop2): ext4_expand_extra_isize_ea:2809: Unable to expand inode 15. Delete some EAs or run e2fsck. [ 140.385453][ T4262] Bluetooth: hci4: command 0x0405 tx timeout [ 140.431875][ T4705] EXT4-fs: Ignoring removed orlov option [ 140.438955][ T4700] EXT4-fs (loop2): 1 truncate cleaned up [ 140.449439][ T4705] EXT4-fs (loop3): Test dummy encryption mode enabled [ 140.459236][ T4700] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 141.499307][ T4727] syz.4.85 (4727): drop_caches: 2 [ 141.550837][ T4705] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 141.950746][ T4722] loop1: detected capacity change from 0 to 1764 [ 144.455712][ T4258] EXT4-fs (loop2): unmounting filesystem. [ 144.462424][ T4263] EXT4-fs (loop3): unmounting filesystem. [ 147.791204][ T4767] netlink: 48 bytes leftover after parsing attributes in process `syz.2.95'. [ 148.367791][ T4768] loop1: detected capacity change from 0 to 128 [ 148.385735][ T4768] UDF-fs: error (device loop1): udf_read_tagged: read failed, block=256, location=256 [ 148.558920][ T4768] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 154.514413][ T4807] syz.1.106 calls setitimer() with new_value NULL pointer. Misfeature support will be removed [ 154.516695][ T4806] overlayfs: failed to resolve './file0': -2 [ 154.532752][ T4807] xt_NFQUEUE: number of queues (1280) out of range (got 65792) [ 155.549173][ T4818] loop1: detected capacity change from 0 to 256 [ 156.701305][ T4821] loop2: detected capacity change from 0 to 40427 [ 156.717902][ T4821] F2FS-fs (loop2): invalid crc value [ 156.786850][ T4821] F2FS-fs (loop2): Found nat_bits in checkpoint [ 156.843259][ T4821] F2FS-fs (loop2): Cannot turn on quotas: -2 on 0 [ 156.896410][ T4821] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e4 [ 156.912479][ T4825] loop1: detected capacity change from 0 to 4096 [ 156.949671][ T4825] ntfs3: loop1: Mark volume as dirty due to NTFS errors [ 156.959458][ T4825] ntfs3: loop1: Failed to load $Extend. [ 157.554986][ T26] audit: type=1800 audit(1734088921.298:3): pid=4830 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.110" name="bus" dev="loop1" ino=34 res=0 errno=0 [ 158.511784][ T4833] loop4: detected capacity change from 0 to 32768 [ 158.527919][ T4835] syz.2.109: attempt to access beyond end of device [ 158.527919][ T4835] loop2: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 161.467752][ T4845] syz.0.113 (4845): drop_caches: 2 [ 165.873871][ T14] usb 2-1: new low-speed USB device number 2 using dummy_hcd [ 166.068300][ T14] usb 2-1: device descriptor read/64, error -71 [ 167.395755][ T4882] loop0: detected capacity change from 0 to 64 [ 172.669525][ T4909] loop0: detected capacity change from 0 to 32768 [ 175.992720][ T4926] loop1: detected capacity change from 0 to 512 [ 176.237618][ T4926] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 176.437093][ T4926] EXT4-fs (loop1): feature flags set on rev 0 fs, running e2fsck is recommended [ 176.903734][ T4926] EXT4-fs (loop1): orphan cleanup on readonly fs [ 176.988394][ T4926] Quota error (device loop1): v2_read_file_info: Free block number 1 out of range (1, 6). [ 177.041331][ T4926] EXT4-fs warning (device loop1): ext4_enable_quotas:7036: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 177.119423][ T4926] EXT4-fs (loop1): Cannot turn on quotas: error -117 [ 177.129892][ T4926] EXT4-fs (loop1): 1 truncate cleaned up [ 177.140051][ T4926] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 178.917041][ T26] audit: type=1326 audit(1734088942.698:4): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4925 comm="syz.1.134" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f6283385d19 code=0x0 [ 179.342200][ T4953] loop2: detected capacity change from 0 to 64 [ 181.871695][ T4260] EXT4-fs (loop1): unmounting filesystem. [ 186.323169][ T4989] i2c i2c-0: Invalid block write size 129 [ 191.334827][ T5018] loop4: detected capacity change from 0 to 8 [ 191.429814][ T5018] SQUASHFS error: xz decompression failed, data probably corrupt [ 191.438133][ T5018] SQUASHFS error: Failed to read block 0x108: -5 [ 191.444696][ T5018] SQUASHFS error: Unable to read metadata cache entry [106] [ 191.452055][ T5018] SQUASHFS error: Unable to read inode 0x11f [ 192.001642][ T4328] I/O error, dev loop4, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 193.392271][ C1] vcan0: j1939_tp_rxtimer: 0xffff888057b9bc00: rx timeout, send abort [ 193.625595][ T5029] loop4: detected capacity change from 0 to 512 [ 193.664631][ T5031] loop0: detected capacity change from 0 to 1024 [ 193.686962][ T5031] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 193.747251][ T5033] loop2: detected capacity change from 0 to 512 [ 193.752013][ T5031] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback. [ 193.810491][ T5029] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 193.838117][ T5033] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 193.844166][ T5029] ext4 filesystem being mounted at /32/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 193.868120][ T5033] EXT4-fs (loop2): feature flags set on rev 0 fs, running e2fsck is recommended [ 193.901623][ C1] vcan0: j1939_tp_rxtimer: 0xffff888057b9bc00: abort rx timeout. Force session deactivation [ 194.063918][ T5039] loop3: detected capacity change from 0 to 32768 [ 194.079068][ T1277] ieee802154 phy0 wpan0: encryption failed: -22 [ 194.088959][ T1277] ieee802154 phy1 wpan1: encryption failed: -22 [ 194.587759][ T5033] EXT4-fs (loop2): orphan cleanup on readonly fs [ 194.685801][ T5033] Quota error (device loop2): v2_read_file_info: Free block number 1 out of range (1, 6). [ 194.709173][ T5033] EXT4-fs warning (device loop2): ext4_enable_quotas:7036: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 194.713241][ T5029] tipc: Started in network mode [ 194.730095][ T5033] EXT4-fs (loop2): Cannot turn on quotas: error -117 [ 194.777724][ T5033] EXT4-fs (loop2): 1 truncate cleaned up [ 194.783507][ T5029] tipc: Node identity 4, cluster identity 4711 [ 194.783526][ T5029] tipc: Node number set to 4 [ 194.874945][ T5033] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 195.021930][ T26] audit: type=1326 audit(1734088958.798:5): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5032 comm="syz.2.151" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f3cb3b85d19 code=0x0 [ 195.054136][ T4254] EXT4-fs (loop4): unmounting filesystem. [ 196.032044][ T4250] EXT4-fs (loop0): unmounting filesystem. [ 196.114288][ T4265] Bluetooth: hci1: command 0x0406 tx timeout [ 196.120415][ T4265] Bluetooth: hci0: command 0x0406 tx timeout [ 196.126499][ T4265] Bluetooth: hci3: command 0x0406 tx timeout [ 196.132528][ T4265] Bluetooth: hci2: command 0x0406 tx timeout [ 196.139790][ T4265] Bluetooth: hci4: command 0x0406 tx timeout [ 196.498381][ T5071] loop4: detected capacity change from 0 to 64 [ 197.999605][ T4258] EXT4-fs (loop2): unmounting filesystem. [ 198.053507][ T4250] syz-executor (4250) used greatest stack depth: 19576 bytes left [ 199.405138][ T46] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 202.728567][ T46] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 204.540870][ T5152] loop2: detected capacity change from 0 to 512 [ 205.088338][ T5152] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 205.124150][ T5152] EXT4-fs (loop2): feature flags set on rev 0 fs, running e2fsck is recommended [ 205.255168][ T5152] EXT4-fs (loop2): orphan cleanup on readonly fs [ 205.350491][ T5152] Quota error (device loop2): v2_read_file_info: Free block number 1 out of range (1, 6). [ 205.457805][ T5152] EXT4-fs warning (device loop2): ext4_enable_quotas:7036: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 205.472657][ T5152] EXT4-fs (loop2): Cannot turn on quotas: error -117 [ 205.508418][ T5152] EXT4-fs (loop2): 1 truncate cleaned up [ 205.518715][ T46] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 205.748519][ T5152] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 206.572010][ T26] audit: type=1326 audit(1734088970.348:6): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5151 comm="syz.2.179" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f3cb3b85d19 code=0x0 [ 206.594780][ T5183] device vlan2 entered promiscuous mode [ 206.672804][ T4265] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 206.695878][ T4265] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 206.714604][ T4265] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 206.727984][ T4265] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 206.738041][ T4265] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 206.745832][ T4265] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 206.763184][ T46] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 206.833252][ T5196] overlayfs: failed to resolve './file0': -2 [ 207.090750][ T4258] EXT4-fs (loop2): unmounting filesystem. [ 207.221403][ T5189] chnl_net:caif_netlink_parms(): no params data found [ 207.538072][ T5207] loop1: detected capacity change from 0 to 128 [ 207.921469][ T5207] UDF-fs: error (device loop1): udf_read_tagged: read failed, block=256, location=256 [ 207.941433][ T5207] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 207.957882][ T5207] UDF-fs: error (device loop1): udf_read_inode: (ino 96) failed !bh [ 207.966281][ T5207] UDF-fs: error (device loop1): udf_fill_super: Error in udf_iget, block=3, partition=0 [ 208.834211][ T4267] Bluetooth: hci0: command 0x0409 tx timeout [ 209.218323][ T7] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 211.199817][ T4267] Bluetooth: hci0: command 0x041b tx timeout [ 211.374606][ T5268] syz.3.188 (5268): drop_caches: 2 [ 211.450538][ T5273] loop4: detected capacity change from 0 to 1024 [ 211.520149][ T5273] UDF-fs: warning (device loop4): udf_fill_super: No partition found (2) [ 211.974176][ T5189] bridge0: port 1(bridge_slave_0) entered blocking state [ 211.996508][ T5189] bridge0: port 1(bridge_slave_0) entered disabled state [ 212.079156][ T5189] device bridge_slave_0 entered promiscuous mode [ 212.135634][ T5189] bridge0: port 2(bridge_slave_1) entered blocking state [ 212.165037][ T5286] loop2: detected capacity change from 0 to 64 [ 212.293458][ T5286] x_tables: ip_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING [ 212.331220][ T5288] netlink: 20 bytes leftover after parsing attributes in process `syz.3.192'. [ 213.631236][ T4265] Bluetooth: hci0: command 0x040f tx timeout [ 213.672691][ T5189] bridge0: port 2(bridge_slave_1) entered disabled state [ 214.164573][ T5189] device bridge_slave_1 entered promiscuous mode [ 215.110247][ T5189] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 215.551764][ T14] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 215.643721][ T5299] loop2: detected capacity change from 0 to 512 [ 215.729723][ T4265] Bluetooth: hci0: command 0x0419 tx timeout [ 215.747375][ T5299] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 215.859047][ T5189] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 215.885581][ T5299] EXT4-fs (loop2): feature flags set on rev 0 fs, running e2fsck is recommended [ 216.636583][ T5310] loop1: detected capacity change from 0 to 64 [ 217.169650][ T5299] EXT4-fs (loop2): orphan cleanup on readonly fs [ 217.217318][ T5299] Quota error (device loop2): v2_read_file_info: Free block number 1 out of range (1, 6). [ 217.294211][ T5299] EXT4-fs warning (device loop2): ext4_enable_quotas:7036: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 217.346344][ T5299] EXT4-fs (loop2): Cannot turn on quotas: error -117 [ 217.350685][ T5315] loop4: detected capacity change from 0 to 128 [ 217.370052][ T5299] EXT4-fs (loop2): 1 truncate cleaned up [ 217.377754][ T5299] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 217.763849][ T5189] team0: Port device team_slave_0 added [ 217.995636][ T26] audit: type=1800 audit(1734088981.768:7): pid=5320 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.197" name="file0" dev="loop4" ino=1048603 res=0 errno=0 [ 218.538976][ T26] audit: type=1804 audit(1734088981.768:8): pid=5320 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.4.197" name="/newroot/41/file0/file0" dev="loop4" ino=1048603 res=1 errno=0 [ 218.577928][ T5321] IPVS: sync thread started: state = BACKUP, mcast_ifn = veth1, syncid = 1, id = 0 [ 218.721021][ T26] audit: type=1326 audit(1734088982.498:9): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5298 comm="syz.2.195" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f3cb3b85d19 code=0x0 [ 219.104239][ T5326] loop1: detected capacity change from 0 to 32768 [ 219.114894][ T5189] team0: Port device team_slave_1 added [ 222.894261][ T4258] EXT4-fs (loop2): unmounting filesystem. [ 222.900968][ T5189] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 222.920471][ T5189] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 223.053350][ T5189] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 223.232541][ T5189] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 223.315145][ T5189] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 223.366110][ T5357] netlink: 20 bytes leftover after parsing attributes in process `syz.4.206'. [ 223.534964][ T5189] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 224.755405][ T4295] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 225.201964][ T5354] loop2: detected capacity change from 0 to 1024 [ 225.738980][ T5367] loop3: detected capacity change from 0 to 512 [ 228.215221][ T4435] hfsplus: b-tree write err: -5, ino 4 [ 228.235773][ T5367] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 228.244854][ T5367] ext4 filesystem being mounted at /43/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 228.291117][ T5374] loop1: detected capacity change from 0 to 16 [ 228.298176][ T5374] erofs: Unknown parameter '' [ 228.618081][ T4263] EXT4-fs (loop3): unmounting filesystem. [ 229.540129][ T4267] sysfs: cannot create duplicate filename '/devices/virtual/bluetooth/hci3/hci3:201' [ 229.540301][ T4267] CPU: 0 PID: 4267 Comm: kworker/u5:8 Not tainted 6.1.119-syzkaller #0 [ 229.540326][ T4267] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 229.540342][ T4267] Workqueue: hci3 hci_rx_work [ 229.540382][ T4267] Call Trace: [ 229.540397][ T4267] [ 229.540407][ T4267] dump_stack_lvl+0x1e3/0x2cb [ 229.540448][ T4267] ? nf_tcp_handle_invalid+0x642/0x642 [ 229.540484][ T4267] ? panic+0x764/0x764 [ 229.540521][ T4267] sysfs_create_dir_ns+0x2c6/0x390 [ 229.540548][ T4267] ? sysfs_warn_dup+0xa0/0xa0 [ 229.540578][ T4267] ? preempt_schedule_thunk+0x16/0x18 [ 229.540622][ T4267] kobject_add_internal+0x6df/0xd10 [ 229.540657][ T4267] kobject_add+0x14e/0x210 [ 229.540689][ T4267] ? device_add+0x3c2/0xfd0 [ 229.540722][ T4267] ? kobject_init+0x1d0/0x1d0 [ 229.540750][ T4267] ? __raw_spin_lock_init+0x41/0x100 [ 229.540776][ T4267] ? get_device_parent+0x128/0x400 [ 229.540813][ T4267] device_add+0x476/0xfd0 [ 229.540857][ T4267] hci_conn_add_sysfs+0xe4/0x1f0 [ 229.540886][ T4267] le_conn_complete_evt+0xcc6/0x1320 [ 229.540929][ T4267] ? trace_contention_end+0x61/0x170 [ 229.540964][ T4267] ? hci_le_big_info_adv_report_evt+0x390/0x390 [ 229.541004][ T4267] ? __mutex_unlock_slowpath+0x218/0x750 [ 229.541035][ T4267] ? mutex_unlock+0x10/0x10 [ 229.541056][ T4267] ? skb_pull_data+0x10e/0x220 [ 229.541096][ T4267] hci_le_conn_complete_evt+0x188/0x410 [ 229.541141][ T4267] hci_event_packet+0xa40/0x1510 [ 229.541172][ T4267] ? hci_remote_host_features_evt+0x210/0x210 [ 229.541208][ T4267] ? bis_list+0x290/0x290 [ 229.541239][ T4267] ? kcov_remote_start+0x27/0x7c0 [ 229.541273][ T4267] ? hci_send_to_monitor+0x99/0x4d0 [ 229.541312][ T4267] hci_rx_work+0x3cd/0xce0 [ 229.541355][ T4267] ? process_one_work+0x7a9/0x11d0 [ 229.541382][ T4267] process_one_work+0x8a9/0x11d0 [ 229.541427][ T4267] ? worker_detach_from_pool+0x260/0x260 [ 229.541460][ T4267] ? _raw_spin_lock_irqsave+0x120/0x120 [ 229.541488][ T4267] ? kthread_data+0x4e/0xc0 [ 229.541528][ T4267] ? wq_worker_running+0x97/0x190 [ 229.541561][ T4267] worker_thread+0xa47/0x1200 [ 229.541590][ T4267] ? _raw_spin_unlock+0x40/0x40 [ 229.541620][ T4267] ? release_firmware_map_entry+0x186/0x186 [ 229.541662][ T4267] ? _raw_spin_unlock+0x40/0x40 [ 229.541704][ T4267] kthread+0x28d/0x320 [ 229.541724][ T4267] ? worker_clr_flags+0x190/0x190 [ 229.541750][ T4267] ? kthread_blkcg+0xd0/0xd0 [ 229.541775][ T4267] ret_from_fork+0x1f/0x30 [ 229.541822][ T4267] [ 229.542117][ T4267] kobject_add_internal failed for hci3:201 with -EEXIST, don't try to register things with the same name in the same directory. [ 229.542210][ T4267] Bluetooth: hci3: failed to register connection device [ 229.597466][ T5189] device hsr_slave_0 entered promiscuous mode [ 230.030451][ T5189] device hsr_slave_1 entered promiscuous mode [ 230.033381][ T5189] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 230.033478][ T5189] Cannot create hsr debugfs directory [ 230.450364][ T5382] tty tty29: ldisc open failed (-12), clearing slot 28 [ 232.554949][ T4370] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 232.796415][ T5403] loop2: detected capacity change from 0 to 512 [ 232.846681][ T5403] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 232.893164][ T5403] EXT4-fs (loop2): feature flags set on rev 0 fs, running e2fsck is recommended [ 233.858035][ T5403] EXT4-fs (loop2): orphan cleanup on readonly fs [ 233.957729][ T5403] Quota error (device loop2): v2_read_file_info: Free block number 1 out of range (1, 6). [ 234.076883][ T5403] EXT4-fs warning (device loop2): ext4_enable_quotas:7036: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 234.144344][ T5403] EXT4-fs (loop2): Cannot turn on quotas: error -117 [ 234.161936][ T5403] EXT4-fs (loop2): 1 truncate cleaned up [ 234.174336][ T5403] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 234.383276][ T5429] Zero length message leads to an empty skb [ 234.390963][ T26] audit: type=1326 audit(1734088998.168:10): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5401 comm="syz.2.215" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f3cb3b85d19 code=0x0 [ 234.687083][ T5432] hub 2-0:1.0: USB hub found [ 234.694252][ T5432] hub 2-0:1.0: 1 port detected [ 235.037921][ T5434] loop4: detected capacity change from 0 to 1024 [ 235.788736][ T5434] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 235.855109][ T5412] overlayfs: statfs failed on './file0' [ 235.935362][ T4265] Bluetooth: hci3: command 0x0406 tx timeout [ 236.631045][ T5444] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 238.023435][ T4258] EXT4-fs (loop2): unmounting filesystem. [ 238.194466][ T7] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 238.207608][ T5174] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 242.113530][ T46] device hsr_slave_0 left promiscuous mode [ 242.370493][ T46] device hsr_slave_1 left promiscuous mode [ 242.420146][ T5575] loop1: detected capacity change from 0 to 512 [ 243.367475][ T4314] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 243.458659][ T46] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 243.473105][ T5572] loop2: detected capacity change from 0 to 2048 [ 243.539300][ T46] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 243.554245][ T5575] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 243.562738][ T5575] EXT4-fs (loop1): feature flags set on rev 0 fs, running e2fsck is recommended [ 243.641225][ T46] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 243.710462][ T46] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 243.718985][ T46] device bridge_slave_1 left promiscuous mode [ 243.727888][ T46] bridge0: port 2(bridge_slave_1) entered disabled state [ 243.754444][ T46] device bridge_slave_0 left promiscuous mode [ 243.790107][ T5589] loop4: detected capacity change from 0 to 512 [ 243.807471][ T46] bridge0: port 1(bridge_slave_0) entered disabled state [ 243.834960][ T5575] EXT4-fs (loop1): orphan cleanup on readonly fs [ 243.924992][ T5575] Quota error (device loop1): v2_read_file_info: Free block number 1 out of range (1, 6). [ 243.947668][ T5589] EXT4-fs: Ignoring removed i_version option [ 243.957058][ T5575] EXT4-fs warning (device loop1): ext4_enable_quotas:7036: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 244.021867][ T5589] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 244.054384][ T5575] EXT4-fs (loop1): Cannot turn on quotas: error -117 [ 244.090952][ T5572] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 244.104860][ T5575] EXT4-fs (loop1): 1 truncate cleaned up [ 244.110551][ T5575] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 244.453009][ T26] audit: type=1326 audit(1734089007.988:11): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5574 comm="syz.1.229" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f6283385d19 code=0x0 [ 244.526141][ T5589] EXT4-fs (loop4): 1 truncate cleaned up [ 244.532323][ T5589] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 245.100569][ T46] device veth1_macvtap left promiscuous mode [ 245.127846][ T46] device veth0_macvtap left promiscuous mode [ 245.166498][ T46] device veth1_vlan left promiscuous mode [ 245.202605][ T46] device veth0_vlan left promiscuous mode [ 245.344906][ T5604] Bluetooth: MGMT ver 1.22 [ 245.665889][ T5607] overlayfs: missing 'lowerdir' [ 245.830644][ T5606] x_tables: ip_tables: TPROXY target: used from hooks FORWARD, but only usable from PREROUTING [ 245.830895][ T4254] EXT4-fs (loop4): unmounting filesystem. [ 247.394167][ T4265] Bluetooth: hci0: Opcode 0x0c1a failed: -110 [ 247.474034][ T4265] Bluetooth: hci0: command 0x0c1a tx timeout [ 247.662287][ T5615] loop4: detected capacity change from 0 to 512 [ 247.700462][ T5615] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 247.719486][ T5615] EXT4-fs (loop4): feature flags set on rev 0 fs, running e2fsck is recommended [ 247.771098][ T5615] EXT4-fs (loop4): orphan cleanup on readonly fs [ 247.851780][ T5615] Quota error (device loop4): v2_read_file_info: Free block number 1 out of range (1, 6). [ 247.861515][ T5618] loop3: detected capacity change from 0 to 1024 [ 247.869715][ T5615] EXT4-fs warning (device loop4): ext4_enable_quotas:7036: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 247.869732][ T5618] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 247.896140][ T5615] EXT4-fs (loop4): Cannot turn on quotas: error -117 [ 247.904602][ T5615] EXT4-fs (loop4): 1 truncate cleaned up [ 247.911924][ T5615] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 247.976730][ T5618] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 247.985941][ T26] audit: type=1326 audit(1734089011.758:12): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5614 comm="syz.4.236" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fe788185d19 code=0x0 [ 249.238697][ T4343] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 249.266705][ T4258] EXT4-fs (loop2): unmounting filesystem. [ 249.377995][ T4263] EXT4-fs (loop3): unmounting filesystem. [ 249.532786][ T5632] sctp: [Deprecated]: syz.2.238 (pid 5632) Use of int in maxseg socket option. [ 249.532786][ T5632] Use struct sctp_assoc_value instead [ 250.531070][ T46] team0 (unregistering): Port device team_slave_1 removed [ 250.569961][ T46] team0 (unregistering): Port device team_slave_0 removed [ 250.825683][ T46] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 251.644468][ T46] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 251.831051][ T5688] loop2: detected capacity change from 0 to 512 [ 251.980727][ T5688] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 252.038361][ T5688] EXT4-fs (loop2): feature flags set on rev 0 fs, running e2fsck is recommended [ 252.171506][ T5688] EXT4-fs (loop2): orphan cleanup on readonly fs [ 252.185924][ T5688] Quota error (device loop2): v2_read_file_info: Free block number 1 out of range (1, 6). [ 252.199631][ T5688] EXT4-fs warning (device loop2): ext4_enable_quotas:7036: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 252.216400][ T5688] EXT4-fs (loop2): Cannot turn on quotas: error -117 [ 252.223814][ T5688] EXT4-fs (loop2): 1 truncate cleaned up [ 252.234194][ T5688] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 252.297082][ T26] audit: type=1326 audit(1734089016.078:13): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5687 comm="syz.2.241" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f3cb3b85d19 code=0x0 [ 252.691092][ T46] bond0 (unregistering): Released all slaves [ 252.767108][ T5189] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 252.777955][ T5189] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 252.791570][ T5189] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 252.884522][ T5189] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 252.908813][ T5634] infiniband syz2: set active [ 252.914575][ T5634] infiniband syz2: added team_slave_1 [ 252.924081][ T5634] rdma_rxe: unable to create cq [ 252.930371][ T4260] EXT4-fs (loop1): unmounting filesystem. [ 252.930538][ T5634] infiniband syz2: Couldn't create ib_mad CQ [ 252.946449][ T5634] infiniband syz2: Couldn't open port 1 [ 252.974499][ T5634] RDS/IB: syz2: added [ 252.979106][ T5634] smc: adding ib device syz2 with port count 1 [ 252.985567][ T5634] smc: ib device syz2 port 1 has pnetid [ 253.003319][ T4254] EXT4-fs (loop4): unmounting filesystem. [ 253.045917][ T4258] EXT4-fs (loop2): unmounting filesystem. [ 253.245980][ T5696] loop1: detected capacity change from 0 to 1024 [ 253.925809][ T5696] UDF-fs: warning (device loop1): udf_fill_super: No partition found (2) [ 253.967055][ T5189] 8021q: adding VLAN 0 to HW filter on device bond0 [ 254.714514][ T5259] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 254.759337][ T5178] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 254.828834][ T5178] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 254.927210][ T5189] 8021q: adding VLAN 0 to HW filter on device team0 [ 255.006477][ T5259] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 255.046316][ T5259] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 255.151731][ T5259] bridge0: port 1(bridge_slave_0) entered blocking state [ 255.159250][ T5259] bridge0: port 1(bridge_slave_0) entered forwarding state [ 255.167607][ T5259] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 255.200584][ T5173] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 255.269167][ T5173] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 255.334843][ T5173] bridge0: port 2(bridge_slave_1) entered blocking state [ 255.342024][ T5173] bridge0: port 2(bridge_slave_1) entered forwarding state [ 255.379453][ T5712] loop3: detected capacity change from 0 to 2048 [ 255.401699][ T5173] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 255.466864][ T5259] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 255.477237][ T1277] ieee802154 phy0 wpan0: encryption failed: -22 [ 255.483556][ T1277] ieee802154 phy1 wpan1: encryption failed: -22 [ 255.486168][ T5259] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 255.510323][ T5259] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 255.529882][ T5259] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 255.996858][ T5259] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 256.028223][ T5714] sctp: [Deprecated]: syz.3.245 (pid 5714) Use of struct sctp_assoc_value in delayed_ack socket option. [ 256.028223][ T5714] Use struct sctp_sack_info instead [ 256.093388][ T5189] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 256.226902][ T5189] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 256.257438][ T5712] Alternate GPT is invalid, using primary GPT. [ 256.286288][ T5259] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 256.299115][ T5259] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 256.306804][ T5712] loop3: p2 p3 p7 [ 256.313071][ T5723] loop4: detected capacity change from 0 to 16 [ 256.320410][ T5723] erofs: Unknown parameter '' [ 256.373823][ T5259] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 256.410452][ T5259] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 256.447637][ T5259] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 256.624198][ T5259] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 256.818527][ T4265] sysfs: cannot create duplicate filename '/devices/virtual/bluetooth/hci1/hci1:201' [ 256.828778][ T4265] CPU: 0 PID: 4265 Comm: kworker/u5:6 Not tainted 6.1.119-syzkaller #0 [ 256.837055][ T4265] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 256.847137][ T4265] Workqueue: hci1 hci_rx_work [ 256.851859][ T4265] Call Trace: [ 256.855160][ T4265] [ 256.858108][ T4265] dump_stack_lvl+0x1e3/0x2cb [ 256.862826][ T4265] ? nf_tcp_handle_invalid+0x642/0x642 [ 256.868321][ T4265] ? panic+0x764/0x764 [ 256.872419][ T4265] ? sysfs_create_dir_ns+0x29b/0x390 [ 256.877732][ T4265] sysfs_create_dir_ns+0x2c6/0x390 [ 256.882867][ T4265] ? asm_sysvec_reschedule_ipi+0x16/0x20 [ 256.888541][ T4265] ? sysfs_warn_dup+0xa0/0xa0 [ 256.893245][ T4265] ? kobject_add_internal+0x621/0xd10 [ 256.898659][ T4265] kobject_add_internal+0x6df/0xd10 [ 256.903888][ T4265] kobject_add+0x14e/0x210 [ 256.908507][ T4265] ? device_add+0x3c2/0xfd0 [ 256.913045][ T4265] ? kobject_init+0x1d0/0x1d0 [ 256.917777][ T4265] ? __raw_spin_lock_init+0x41/0x100 [ 256.923100][ T4265] ? get_device_parent+0x128/0x400 [ 256.928349][ T4265] device_add+0x476/0xfd0 [ 256.932723][ T4265] hci_conn_add_sysfs+0xe4/0x1f0 [ 256.937689][ T4265] le_conn_complete_evt+0xcc6/0x1320 [ 256.943028][ T4265] ? hci_le_big_info_adv_report_evt+0x390/0x390 [ 256.949348][ T4265] ? __mutex_unlock_slowpath+0x218/0x750 [ 256.955013][ T4265] ? mutex_unlock+0x10/0x10 [ 256.959535][ T4265] ? skb_pull_data+0x10e/0x220 [ 256.964335][ T4265] hci_le_conn_complete_evt+0x188/0x410 [ 256.969926][ T4265] hci_event_packet+0xa40/0x1510 [ 256.974918][ T4265] ? hci_remote_host_features_evt+0x210/0x210 [ 256.981022][ T4265] ? bis_list+0x290/0x290 [ 256.985381][ T4265] ? kcov_remote_start+0x27/0x7c0 [ 256.990437][ T4265] ? hci_send_to_monitor+0x99/0x4d0 [ 256.995761][ T4265] hci_rx_work+0x3cd/0xce0 [ 257.000206][ T4265] ? do_raw_spin_unlock+0x137/0x8a0 [ 257.005441][ T4265] ? process_one_work+0x7a9/0x11d0 [ 257.010580][ T4265] process_one_work+0x8a9/0x11d0 [ 257.015566][ T4265] ? worker_detach_from_pool+0x260/0x260 [ 257.021234][ T4265] ? _raw_spin_lock_irqsave+0x120/0x120 [ 257.026819][ T4265] ? kthread_data+0x4e/0xc0 [ 257.031366][ T4265] ? wq_worker_running+0x97/0x190 [ 257.036414][ T4265] worker_thread+0xa47/0x1200 [ 257.041137][ T4265] ? release_firmware_map_entry+0x186/0x186 [ 257.047093][ T4265] kthread+0x28d/0x320 [ 257.051192][ T4265] ? worker_clr_flags+0x190/0x190 [ 257.056254][ T4265] ? kthread_blkcg+0xd0/0xd0 [ 257.060872][ T4265] ret_from_fork+0x1f/0x30 [ 257.065348][ T4265] [ 257.079062][ T4265] kobject_add_internal failed for hci1:201 with -EEXIST, don't try to register things with the same name in the same directory. [ 257.092940][ T4265] Bluetooth: hci1: failed to register connection device [ 257.395210][ T4295] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 257.546953][ T5737] loop2: detected capacity change from 0 to 512 [ 257.804799][ T5737] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 257.917187][ T5737] EXT4-fs (loop2): feature flags set on rev 0 fs, running e2fsck is recommended [ 258.417593][ T5737] EXT4-fs (loop2): orphan cleanup on readonly fs [ 258.514779][ T5737] Quota error (device loop2): v2_read_file_info: Free block number 1 out of range (1, 6). [ 258.535423][ T5737] EXT4-fs warning (device loop2): ext4_enable_quotas:7036: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 258.611835][ T5737] EXT4-fs (loop2): Cannot turn on quotas: error -117 [ 258.642352][ T5737] EXT4-fs (loop2): 1 truncate cleaned up [ 258.734238][ T5737] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 259.181644][ T5799] loop3: detected capacity change from 0 to 512 [ 259.221317][ T26] audit: type=1326 audit(1734089022.998:14): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5735 comm="syz.2.251" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f3cb3b85d19 code=0x0 [ 259.283265][ T5802] loop1: detected capacity change from 0 to 128 [ 259.389509][ T5799] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 259.442140][ T5799] EXT4-fs (loop3): feature flags set on rev 0 fs, running e2fsck is recommended [ 259.468192][ T5802] UDF-fs: error (device loop1): udf_read_tagged: read failed, block=256, location=256 [ 259.527339][ T5799] EXT4-fs (loop3): orphan cleanup on readonly fs [ 259.554290][ T5802] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 259.572919][ T5799] Quota error (device loop3): v2_read_file_info: Free block number 1 out of range (1, 6). [ 259.645502][ T4258] EXT4-fs (loop2): unmounting filesystem. [ 259.667928][ T5799] EXT4-fs warning (device loop3): ext4_enable_quotas:7036: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 259.774136][ T5799] EXT4-fs (loop3): Cannot turn on quotas: error -117 [ 259.785057][ T5799] EXT4-fs (loop3): 1 truncate cleaned up [ 259.841504][ T5799] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 260.373573][ T26] audit: type=1326 audit(1734089024.148:15): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5797 comm="syz.3.253" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f5321585d19 code=0x0 [ 260.594467][ T9] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 260.751000][ T4267] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 260.761629][ T4267] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 260.772920][ T4267] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 260.781661][ T4267] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 260.790348][ T4267] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 260.798095][ T4267] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 260.803638][ T5821] loop1: detected capacity change from 0 to 512 [ 260.844680][ T4263] EXT4-fs (loop3): unmounting filesystem. [ 260.863994][ T4300] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 260.906519][ T5821] EXT4-fs: Ignoring removed bh option [ 261.054074][ T4300] usb 3-1: Using ep0 maxpacket: 16 [ 261.065530][ T4300] usb 3-1: config 0 has no interfaces? [ 261.081217][ T4300] usb 3-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 261.100642][ T4300] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 261.135512][ T4300] usb 3-1: Product: syz [ 261.139753][ T4300] usb 3-1: Manufacturer: syz [ 261.174166][ T4300] usb 3-1: SerialNumber: syz [ 261.205288][ T5821] EXT4-fs error (device loop1): ext4_xattr_inode_iget:404: comm syz.1.255: inode #11614: comm syz.1.255: iget: illegal inode # [ 261.281289][ T4300] usb 3-1: config 0 descriptor?? [ 261.306595][ T5821] EXT4-fs error (device loop1): ext4_xattr_inode_iget:409: comm syz.1.255: error while reading EA inode 11614 err=-117 [ 261.513306][ T5821] EXT4-fs (loop1): 1 truncate cleaned up [ 261.736997][ T5821] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none. [ 262.604750][ T4299] usb 3-1: USB disconnect, device number 2 [ 262.834097][ T4265] Bluetooth: hci0: command 0x0409 tx timeout [ 263.104034][ T4300] usb 4-1: new high-speed USB device number 4 using dummy_hcd [ 263.233840][ T4260] EXT4-fs (loop1): unmounting filesystem. [ 263.260930][ T5818] chnl_net:caif_netlink_parms(): no params data found [ 263.318982][ T4300] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 263.391073][ T4300] usb 4-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 263.512176][ T4300] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 263.600400][ T4300] usb 4-1: config 0 descriptor?? [ 263.941214][ T5851] loop2: detected capacity change from 0 to 16 [ 263.948198][ T5851] erofs: Unknown parameter '' [ 263.998109][ T5849] loop1: detected capacity change from 0 to 512 [ 264.165491][ T5849] ext4: Unknown parameter 'noacl' [ 264.219148][ T4300] keytouch 0003:0926:3333.0001: fixing up Keytouch IEC report descriptor [ 264.235242][ T4300] input: HID 0926:3333 as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/0003:0926:3333.0001/input/input5 [ 264.409244][ T4265] sysfs: cannot create duplicate filename '/devices/virtual/bluetooth/hci2/hci2:201' [ 264.420128][ T4265] CPU: 1 PID: 4265 Comm: kworker/u5:6 Not tainted 6.1.119-syzkaller #0 [ 264.428408][ T4265] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 264.438500][ T4265] Workqueue: hci2 hci_rx_work [ 264.443225][ T4265] Call Trace: [ 264.446527][ T4265] [ 264.449479][ T4265] dump_stack_lvl+0x1e3/0x2cb [ 264.454203][ T4265] ? nf_tcp_handle_invalid+0x642/0x642 [ 264.459698][ T4265] ? panic+0x764/0x764 [ 264.463808][ T4265] sysfs_create_dir_ns+0x2c6/0x390 [ 264.468962][ T4265] ? sysfs_warn_dup+0xa0/0xa0 [ 264.473673][ T4265] kobject_add_internal+0x6df/0xd10 [ 264.478916][ T4265] kobject_add+0x14e/0x210 [ 264.483358][ T4265] ? device_add+0x3c2/0xfd0 [ 264.487899][ T4265] ? kobject_init+0x1d0/0x1d0 [ 264.492704][ T4265] ? __raw_spin_lock_init+0x41/0x100 [ 264.498016][ T4265] ? get_device_parent+0x128/0x400 [ 264.503164][ T4265] device_add+0x476/0xfd0 [ 264.507540][ T4265] hci_conn_add_sysfs+0xe4/0x1f0 [ 264.512527][ T4265] le_conn_complete_evt+0xcc6/0x1320 [ 264.517854][ T4265] ? print_irqtrace_events+0x210/0x210 [ 264.523358][ T4265] ? hci_le_big_info_adv_report_evt+0x390/0x390 [ 264.529651][ T4265] ? asm_sysvec_reschedule_ipi+0x16/0x20 [ 264.535324][ T4265] ? lockdep_hardirqs_on+0x94/0x130 [ 264.540548][ T4265] ? asm_sysvec_reschedule_ipi+0x16/0x20 [ 264.546222][ T4265] ? skb_pull_data+0x10e/0x220 [ 264.551027][ T4265] hci_le_conn_complete_evt+0x188/0x410 [ 264.556620][ T4265] hci_event_packet+0xa40/0x1510 [ 264.563328][ T4265] ? hci_remote_host_features_evt+0x210/0x210 [ 264.569430][ T4265] ? bis_list+0x290/0x290 [ 264.573789][ T4265] ? kcov_remote_start+0x27/0x7c0 [ 264.578847][ T4265] ? hci_send_to_monitor+0x99/0x4d0 [ 264.584086][ T4265] hci_rx_work+0x3cd/0xce0 [ 264.588535][ T4265] ? do_raw_spin_unlock+0x137/0x8a0 [ 264.593761][ T4265] ? process_one_work+0x7a9/0x11d0 [ 264.598908][ T4265] process_one_work+0x8a9/0x11d0 [ 264.603888][ T4265] ? worker_detach_from_pool+0x260/0x260 [ 264.609557][ T4265] ? _raw_spin_lock_irqsave+0x120/0x120 [ 264.615131][ T4265] ? kthread_data+0x4e/0xc0 [ 264.619673][ T4265] ? wq_worker_running+0x97/0x190 [ 264.624721][ T4265] worker_thread+0xa47/0x1200 [ 264.629430][ T4265] ? release_firmware_map_entry+0x186/0x186 [ 264.635380][ T4265] kthread+0x28d/0x320 [ 264.639469][ T4265] ? worker_clr_flags+0x190/0x190 [ 264.644553][ T4265] ? kthread_blkcg+0xd0/0xd0 [ 264.649170][ T4265] ret_from_fork+0x1f/0x30 [ 264.653649][ T4265] [ 264.676356][ T4265] kobject_add_internal failed for hci2:201 with -EEXIST, don't try to register things with the same name in the same directory. [ 264.691063][ T4265] Bluetooth: hci2: failed to register connection device [ 264.914028][ T4265] Bluetooth: hci0: command 0x041b tx timeout [ 265.076374][ T4300] keytouch 0003:0926:3333.0001: input,hidraw0: USB HID v0.00 Keyboard [HID 0926:3333] on usb-dummy_hcd.3-1/input0 [ 265.124397][ T5818] bridge0: port 1(bridge_slave_0) entered blocking state [ 265.136429][ T5818] bridge0: port 1(bridge_slave_0) entered disabled state [ 265.178287][ T5867] loop1: detected capacity change from 0 to 256 [ 265.295818][ T5818] device bridge_slave_0 entered promiscuous mode [ 266.056449][ T5818] bridge0: port 2(bridge_slave_1) entered blocking state [ 266.283564][ T5818] bridge0: port 2(bridge_slave_1) entered disabled state [ 266.619308][ T5818] device bridge_slave_1 entered promiscuous mode [ 266.994058][ T4265] Bluetooth: hci0: command 0x040f tx timeout [ 267.142922][ T14] usb 4-1: USB disconnect, device number 4 [ 267.425354][ T5922] loop3: detected capacity change from 0 to 1024 [ 268.088742][ T5818] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 268.282669][ T5818] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 268.358615][ T5818] team0: Port device team_slave_0 added [ 268.383072][ T5926] loop1: detected capacity change from 0 to 128 [ 268.419636][ T5926] UDF-fs: error (device loop1): udf_read_tagged: read failed, block=256, location=256 [ 268.431855][ T5818] team0: Port device team_slave_1 added [ 268.469419][ T5818] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 268.476620][ T5818] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 268.520588][ T5926] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 268.536161][ T5818] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 268.626560][ T5930] loop4: detected capacity change from 0 to 128 [ 268.856985][ T5818] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 269.512000][ T4262] Bluetooth: hci0: command 0x0419 tx timeout [ 269.528465][ T5930] UDF-fs: error (device loop4): udf_read_tagged: read failed, block=256, location=256 [ 269.544269][ T26] audit: type=1800 audit(1734089033.318:16): pid=5926 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.275" name="file1" dev="loop1" ino=104 res=0 errno=0 [ 269.641326][ T5818] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 269.671865][ T5818] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 269.704017][ T5930] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 269.714181][ T5162] hfsplus: b-tree write err: -5, ino 4 [ 269.806154][ T5818] device hsr_slave_0 entered promiscuous mode [ 269.815689][ T5818] device hsr_slave_1 entered promiscuous mode [ 269.822754][ T5818] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 269.830426][ T5818] Cannot create hsr debugfs directory [ 272.054355][ T4265] Bluetooth: hci2: command 0x0406 tx timeout [ 272.375629][ T9] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 272.416135][ T5950] loop3: detected capacity change from 0 to 512 [ 272.645003][ T5950] EXT4-fs (loop3): feature flags set on rev 0 fs, running e2fsck is recommended [ 272.729227][ T5948] netlink: 28 bytes leftover after parsing attributes in process `syz.1.268'. [ 272.741439][ T5948] netlink: 28 bytes leftover after parsing attributes in process `syz.1.268'. [ 272.828874][ T5594] I/O error, dev loop3, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 272.969638][ T5960] loop1: detected capacity change from 0 to 128 [ 274.060303][ T26] audit: type=1800 audit(1734089037.178:17): pid=5963 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.271" name="bus" dev="loop1" ino=1048608 res=0 errno=0 [ 275.999144][ T5506] device hsr_slave_0 left promiscuous mode [ 276.204926][ T5972] netlink: 48 bytes leftover after parsing attributes in process `syz.1.276'. [ 277.033579][ T5506] device hsr_slave_1 left promiscuous mode [ 277.057096][ T14] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 277.096644][ T5506] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 277.128455][ T5506] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 277.145850][ T5506] device bridge_slave_1 left promiscuous mode [ 277.171449][ T5506] bridge0: port 2(bridge_slave_1) entered disabled state [ 277.220774][ T5506] device bridge_slave_0 left promiscuous mode [ 277.424255][ T5506] bridge0: port 1(bridge_slave_0) entered disabled state [ 278.322698][ T5567] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 280.408104][ T5506] team0 (unregistering): Port device team_slave_1 removed [ 280.731282][ T5506] team0 (unregistering): Port device team_slave_0 removed [ 281.500947][ T5506] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 282.726772][ T6027] loop4: detected capacity change from 0 to 2048 [ 282.751250][ T5506] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 282.820663][ T6027] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 283.698652][ T5543] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 283.793480][ T6040] x_tables: ip_tables: TPROXY target: used from hooks FORWARD, but only usable from PREROUTING [ 284.651721][ T4254] EXT4-fs (loop4): unmounting filesystem. [ 284.926309][ T6045] loop4: detected capacity change from 0 to 1024 [ 285.060140][ T5506] bond0 (unregistering): Released all slaves [ 285.414083][ T6048] loop1: detected capacity change from 0 to 1024 [ 287.365149][ T4521] hfsplus: b-tree write err: -5, ino 4 [ 288.466239][ T6062] loop4: detected capacity change from 0 to 128 [ 289.042156][ T26] audit: type=1800 audit(1734089052.808:18): pid=6068 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.292" name="bus" dev="loop4" ino=1048609 res=0 errno=0 [ 290.101132][ T4366] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 290.542079][ T6076] loop4: detected capacity change from 0 to 1024 [ 290.674777][ T6081] loop2: detected capacity change from 0 to 1024 [ 290.744530][ T6081] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 291.032816][ T5818] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 291.360792][ T5818] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 291.516836][ T5818] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 292.930749][ T5818] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 293.067057][ T4390] hfsplus: b-tree write err: -5, ino 4 [ 293.356820][ T5818] 8021q: adding VLAN 0 to HW filter on device bond0 [ 293.377007][ T4390] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 293.397468][ T4390] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 293.448754][ T5818] 8021q: adding VLAN 0 to HW filter on device team0 [ 293.588743][ T6103] loop3: detected capacity change from 0 to 1024 [ 293.620261][ T46] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 293.760412][ T6107] xt_CHECKSUM: CHECKSUM should be avoided. If really needed, restrict with "-p udp" and only use in OUTPUT [ 293.772182][ T6107] Cannot find add_set index 0 as target [ 295.736273][ T46] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 295.782654][ T4390] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 295.836953][ T4390] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 295.860193][ T4390] bridge0: port 1(bridge_slave_0) entered blocking state [ 295.867426][ T4390] bridge0: port 1(bridge_slave_0) entered forwarding state [ 295.881568][ T5162] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 295.884717][ T4390] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 295.901623][ T4390] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 296.007751][ T4390] bridge0: port 2(bridge_slave_1) entered blocking state [ 296.014968][ T4390] bridge0: port 2(bridge_slave_1) entered forwarding state [ 296.135313][ T4390] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 296.374851][ T4390] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 296.938866][ T4390] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 297.005323][ T4390] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 297.337301][ T4390] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 297.389116][ T7] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 297.435923][ T4390] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 297.473403][ T4390] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 297.553861][ T4265] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 297.575260][ T4265] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 297.579238][ T6126] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 297.584445][ T4265] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 297.610845][ T4265] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 297.619371][ T4265] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 297.626787][ T4265] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 297.678323][ T4390] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 297.761590][ T46] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 297.851105][ T46] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 297.878298][ T4366] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 297.899823][ T4366] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 298.795188][ T5818] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 298.806846][ T5818] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 298.822022][ T2920] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 298.854862][ T2920] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 299.083744][ T6148] loop3: detected capacity change from 0 to 512 [ 299.126716][ T6148] EXT4-fs: Ignoring removed i_version option [ 299.134851][ T6148] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 299.201379][ T6148] EXT4-fs (loop3): 1 truncate cleaned up [ 299.208887][ T6148] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 300.329278][ T4265] Bluetooth: hci3: command 0x0409 tx timeout [ 300.513158][ T5818] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 300.578852][ T4314] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 300.593833][ T4263] EXT4-fs (loop3): unmounting filesystem. [ 300.623161][ T4314] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 301.151792][ T6179] loop4: detected capacity change from 0 to 16 [ 301.308761][ T6183] loop3: detected capacity change from 0 to 1024 [ 301.346379][ T6183] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 301.617202][ T6179] erofs: (device loop4): mounted with root inode @ nid 36. [ 302.137617][ T5554] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 302.356318][ T4262] Bluetooth: hci3: command 0x041b tx timeout [ 302.765331][ T6195] syz.4.312: attempt to access beyond end of device [ 302.765331][ T6195] loop4: rw=0, sector=14552337256, nr_sectors = 8 limit=16 [ 302.780156][ T6195] syz.4.312: attempt to access beyond end of device [ 302.780156][ T6195] loop4: rw=0, sector=14546590680, nr_sectors = 8 limit=16 [ 303.772167][ T6199] loop2: detected capacity change from 0 to 2048 [ 304.548039][ T4262] Bluetooth: hci3: command 0x040f tx timeout [ 304.562029][ T6204] sctp: [Deprecated]: syz.2.315 (pid 6204) Use of struct sctp_assoc_value in delayed_ack socket option. [ 304.562029][ T6204] Use struct sctp_sack_info instead [ 304.647868][ T6199] Alternate GPT is invalid, using primary GPT. [ 304.689852][ T6199] loop2: p2 p3 p7 [ 304.734649][ T5558] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 304.779093][ T5558] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 305.380190][ T5558] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 305.404899][ T5558] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 305.443874][ T5818] device veth0_vlan entered promiscuous mode [ 305.511475][ T5558] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 305.528647][ T5558] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 305.537565][ T6212] kernel profiling enabled (shift: 4) [ 305.559156][ T6131] chnl_net:caif_netlink_parms(): no params data found [ 305.667593][ T5818] device veth1_vlan entered promiscuous mode [ 306.248719][ T6207] can0: slcan on ttyS3. [ 306.353011][ T5569] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 306.376270][ T6207] can0 (unregistered): slcan off ttyS3. [ 306.784161][ T4262] Bluetooth: hci3: command 0x0419 tx timeout [ 307.961787][ T11] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 308.049113][ T5818] device veth0_macvtap entered promiscuous mode [ 308.051819][ T6235] loop2: detected capacity change from 0 to 512 [ 308.070948][ T6235] EXT4-fs (loop2): Test dummy encryption mode enabled [ 308.151739][ T6238] loop3: detected capacity change from 0 to 2048 [ 308.223512][ T6235] EXT4-fs error (device loop2): __ext4_iget:5055: inode #11: block 1: comm syz.2.333: invalid block [ 308.236824][ T6238] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none. [ 308.261673][ T6235] EXT4-fs error (device loop2): ext4_orphan_get:1405: comm syz.2.333: couldn't read orphan inode 11 (err -117) [ 308.301692][ T6235] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 308.314126][ T5569] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 308.328634][ T5569] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 308.338079][ T5569] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 309.438045][ T6131] bridge0: port 1(bridge_slave_0) entered blocking state [ 310.405305][ T6251] x_tables: ip_tables: TPROXY target: used from hooks FORWARD, but only usable from PREROUTING [ 310.422842][ T6131] bridge0: port 1(bridge_slave_0) entered disabled state [ 311.011146][ T4258] EXT4-fs (loop2): unmounting filesystem. [ 311.042944][ T6131] device bridge_slave_0 entered promiscuous mode [ 311.819648][ T5818] device veth1_macvtap entered promiscuous mode [ 311.846298][ T6131] bridge0: port 2(bridge_slave_1) entered blocking state [ 312.938994][ T6131] bridge0: port 2(bridge_slave_1) entered disabled state [ 312.963532][ T6131] device bridge_slave_1 entered promiscuous mode [ 313.037601][ T6267] loop2: detected capacity change from 0 to 1024 [ 313.970727][ T5818] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 314.035712][ T5818] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 314.081452][ T5818] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 314.092510][ T5818] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 314.109633][ T5818] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 314.120475][ T5818] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 314.138179][ T5818] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 314.151289][ T5818] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 314.216949][ T5818] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 314.396018][ T5506] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 314.425219][ T5506] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 314.454912][ T6131] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 314.480062][ T6277] can0: slcan on ttyS3. [ 314.491797][ T5818] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 314.504325][ T5818] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 314.515925][ T5818] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 314.526813][ T5818] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 314.548079][ T5818] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 314.569022][ T5818] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 314.582237][ T26] audit: type=1326 audit(1734089078.358:19): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6279 comm="syz.4.331" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe788185d19 code=0x7fc00000 [ 314.594147][ T5818] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 314.625567][ T5818] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 314.633320][ T26] audit: type=1326 audit(1734089078.398:20): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6279 comm="syz.4.331" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fe788185d19 code=0x0 [ 314.660250][ T5818] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 314.670165][ T4263] EXT4-fs (loop3): unmounting filesystem. [ 314.679590][ T6131] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 314.754461][ T46] device hsr_slave_0 left promiscuous mode [ 314.770965][ T46] device hsr_slave_1 left promiscuous mode [ 314.780965][ T6276] can0 (unregistered): slcan off ttyS3. [ 314.974489][ T46] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 314.984411][ T26] audit: type=1326 audit(1734089078.768:21): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6279 comm="syz.4.331" exe="/root/syz-executor" sig=0 arch=c000003e syscall=0 compat=0 ip=0x7fe788185d19 code=0x7fc00000 [ 315.032242][ T46] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 315.042530][ T46] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 315.054541][ T46] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 315.465069][ T46] device bridge_slave_1 left promiscuous mode [ 315.477851][ T26] audit: type=1326 audit(1734089079.228:22): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6279 comm="syz.4.331" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe788185d19 code=0x7fc00000 [ 315.904198][ T46] bridge0: port 2(bridge_slave_1) entered disabled state [ 315.926626][ T46] device bridge_slave_0 left promiscuous mode [ 315.932913][ T46] bridge0: port 1(bridge_slave_0) entered disabled state [ 316.651877][ T46] device veth1_macvtap left promiscuous mode [ 316.718034][ T46] device veth0_macvtap left promiscuous mode [ 316.783602][ T46] device veth1_vlan left promiscuous mode [ 317.085481][ T1277] ieee802154 phy0 wpan0: encryption failed: -22 [ 317.091842][ T1277] ieee802154 phy1 wpan1: encryption failed: -22 [ 317.133517][ T46] device veth0_vlan left promiscuous mode [ 317.379371][ T4345] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 317.391038][ T4345] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 317.540637][ T6311] loop4: detected capacity change from 0 to 2048 [ 317.612908][ T6314] loop2: detected capacity change from 0 to 512 [ 317.959023][ T6310] sctp: [Deprecated]: syz.4.337 (pid 6310) Use of struct sctp_assoc_value in delayed_ack socket option. [ 317.959023][ T6310] Use struct sctp_sack_info instead [ 317.990755][ T6314] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 318.179623][ T6314] EXT4-fs (loop2): feature flags set on rev 0 fs, running e2fsck is recommended [ 318.416101][ T6311] Alternate GPT is invalid, using primary GPT. [ 318.440062][ T6311] loop4: p2 p3 p7 [ 318.468485][ T6314] EXT4-fs (loop2): orphan cleanup on readonly fs [ 318.510236][ T6314] Quota error (device loop2): v2_read_file_info: Free block number 1 out of range (1, 6). [ 318.546369][ T6314] EXT4-fs warning (device loop2): ext4_enable_quotas:7036: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 318.561956][ T6314] EXT4-fs (loop2): Cannot turn on quotas: error -117 [ 318.571147][ T6314] EXT4-fs (loop2): 1 truncate cleaned up [ 318.601908][ T6314] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 318.674676][ T5587] udevd[5587]: inotify_add_watch(7, /dev/loop4p2, 10) failed: No such file or directory [ 318.688884][ T5913] udevd[5913]: inotify_add_watch(7, /dev/loop4p7, 10) failed: No such file or directory [ 318.699668][ T5594] udevd[5594]: inotify_add_watch(7, /dev/loop4p3, 10) failed: No such file or directory [ 318.742952][ T6319] loop4: detected capacity change from 0 to 2048 [ 318.754459][ T4314] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 318.831669][ T6319] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 320.027531][ T4254] EXT4-fs (loop4): unmounting filesystem. [ 320.881314][ T6335] loop4: detected capacity change from 0 to 512 [ 320.888901][ T6335] ext3: Unknown parameter 'smackfshat' [ 321.601504][ T5587] I/O error, dev loop4, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 321.671227][ T46] team0 (unregistering): Port device team_slave_1 removed [ 321.729772][ T46] team0 (unregistering): Port device team_slave_0 removed [ 321.815819][ T4265] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 321.825898][ T4265] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 321.833784][ T4265] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 321.878731][ T46] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 321.899447][ T4265] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 321.909914][ T4265] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 321.918568][ T4265] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 321.972044][ T46] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 322.412590][ T46] bond0 (unregistering): Released all slaves [ 322.479314][ T4366] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 322.488326][ T4366] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 322.575754][ T6131] team0: Port device team_slave_0 added [ 322.606290][ T6131] team0: Port device team_slave_1 added [ 322.617574][ T4258] EXT4-fs (loop2): unmounting filesystem. [ 322.732133][ T6131] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 322.750788][ T6131] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 322.779335][ T6131] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 322.794357][ T6131] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 322.801337][ T6131] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 322.838616][ T6131] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 322.965975][ T6131] device hsr_slave_0 entered promiscuous mode [ 322.984409][ T6131] device hsr_slave_1 entered promiscuous mode [ 322.991296][ T6131] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 323.009797][ T6131] Cannot create hsr debugfs directory [ 323.550581][ T6336] chnl_net:caif_netlink_parms(): no params data found [ 323.588168][ T6131] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 323.627052][ T6131] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 323.671189][ T6131] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 323.682256][ T6131] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 323.721556][ T6336] bridge0: port 1(bridge_slave_0) entered blocking state [ 323.729193][ T6336] bridge0: port 1(bridge_slave_0) entered disabled state [ 323.738578][ T6336] device bridge_slave_0 entered promiscuous mode [ 323.749119][ T6336] bridge0: port 2(bridge_slave_1) entered blocking state [ 323.758710][ T6336] bridge0: port 2(bridge_slave_1) entered disabled state [ 323.766939][ T6336] device bridge_slave_1 entered promiscuous mode [ 323.954112][ T4262] Bluetooth: hci5: command 0x0409 tx timeout [ 323.977753][ T6336] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 324.019613][ T6131] 8021q: adding VLAN 0 to HW filter on device bond0 [ 324.033197][ T6336] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 324.056780][ T4366] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 324.066883][ T4366] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 324.106130][ T6131] 8021q: adding VLAN 0 to HW filter on device team0 [ 324.159969][ T5558] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 324.178044][ T5558] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 324.191809][ T5558] bridge0: port 1(bridge_slave_0) entered blocking state [ 324.198995][ T5558] bridge0: port 1(bridge_slave_0) entered forwarding state [ 324.215661][ T5558] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 324.230771][ T5558] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 324.241715][ T5558] bridge0: port 2(bridge_slave_1) entered blocking state [ 324.248870][ T5558] bridge0: port 2(bridge_slave_1) entered forwarding state [ 324.269207][ T6336] team0: Port device team_slave_0 added [ 324.300490][ T5558] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 324.318425][ T6336] team0: Port device team_slave_1 added [ 324.373447][ T5558] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 324.383760][ T5558] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 324.421758][ T5506] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 324.437451][ T5506] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 324.447721][ T5506] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 324.496223][ T5506] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 324.506462][ T5506] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 324.517442][ T6336] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 324.528353][ T6336] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 324.562101][ T6336] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 324.575324][ T6336] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 324.582296][ T6336] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 324.609542][ T6336] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 324.609665][ T5567] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 324.654840][ T5506] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 324.663262][ T5506] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 324.672257][ T5506] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 324.682940][ T5506] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 324.705826][ T6131] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 324.755830][ T6336] device hsr_slave_0 entered promiscuous mode [ 324.762820][ T6336] device hsr_slave_1 entered promiscuous mode [ 324.769653][ T6336] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 324.777935][ T6336] Cannot create hsr debugfs directory [ 325.216740][ T5558] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 325.224366][ T5558] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 325.258128][ T6131] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 325.481690][ T4390] device hsr_slave_0 left promiscuous mode [ 325.501234][ T4390] device hsr_slave_1 left promiscuous mode [ 325.514219][ T4390] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 325.521678][ T4390] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 325.540560][ T4390] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 325.564150][ T4390] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 325.572037][ T4390] device bridge_slave_1 left promiscuous mode [ 325.584140][ T4390] bridge0: port 2(bridge_slave_1) entered disabled state [ 325.593279][ T4390] device bridge_slave_0 left promiscuous mode [ 325.605816][ T4390] bridge0: port 1(bridge_slave_0) entered disabled state [ 325.639067][ T4390] device veth1_macvtap left promiscuous mode [ 325.645275][ T4390] device veth0_macvtap left promiscuous mode [ 325.651960][ T4390] device veth1_vlan left promiscuous mode [ 325.659509][ T4390] device veth0_vlan left promiscuous mode [ 326.037480][ T4262] Bluetooth: hci5: command 0x041b tx timeout [ 326.114442][ T4390] team0 (unregistering): Port device team_slave_1 removed [ 326.156868][ T4390] team0 (unregistering): Port device team_slave_0 removed [ 326.202547][ T4390] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 326.246535][ T4390] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 326.651054][ T4390] bond0 (unregistering): Released all slaves [ 326.803687][ T6336] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 326.850960][ T6336] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 326.871859][ T6336] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 326.882976][ T6336] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 327.038653][ T5554] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 327.053116][ T5554] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 327.106490][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 327.119545][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 327.131918][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 327.146860][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 327.170643][ T6131] device veth0_vlan entered promiscuous mode [ 327.215034][ T6336] 8021q: adding VLAN 0 to HW filter on device bond0 [ 327.223596][ T6131] device veth1_vlan entered promiscuous mode [ 327.277072][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 327.286238][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 327.294737][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 327.302716][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 327.316945][ T6131] device veth0_macvtap entered promiscuous mode [ 327.334426][ T5567] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 327.354486][ T5567] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 327.365174][ T5567] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 327.388235][ T6336] 8021q: adding VLAN 0 to HW filter on device team0 [ 327.407308][ T6131] device veth1_macvtap entered promiscuous mode [ 327.418846][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 327.429819][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 327.438736][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 327.447926][ T46] bridge0: port 1(bridge_slave_0) entered blocking state [ 327.455087][ T46] bridge0: port 1(bridge_slave_0) entered forwarding state [ 327.463223][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 327.499378][ T5567] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 327.508558][ T5567] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 327.519424][ T5567] bridge0: port 2(bridge_slave_1) entered blocking state [ 327.526605][ T5567] bridge0: port 2(bridge_slave_1) entered forwarding state [ 327.537696][ T5567] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 327.549114][ T5567] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 327.579803][ T6131] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 327.590875][ T6131] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 327.603504][ T6131] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 327.616889][ T6131] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 327.626872][ T6131] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 327.638339][ T6131] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 327.653825][ T6131] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 327.662269][ T5567] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 327.673054][ T5567] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 327.681989][ T5567] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 327.690956][ T5567] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 327.700342][ T5567] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 327.709275][ T5567] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 327.721073][ T5567] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 327.729488][ T5567] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 327.738531][ T5567] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 327.756840][ T6131] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 327.767509][ T6131] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 327.777783][ T6131] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 327.789824][ T6131] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 327.809167][ T6131] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 327.819946][ T6131] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 327.831228][ T6131] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 327.844788][ T6336] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 327.857213][ T4390] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 327.866397][ T4390] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 327.876011][ T4390] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 327.884598][ T4390] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 327.899845][ T6131] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 327.909747][ T6131] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 327.918590][ T6131] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 327.928544][ T6131] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 328.049776][ T5567] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 328.068102][ T5567] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 328.092139][ T5554] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 328.114449][ T4262] Bluetooth: hci5: command 0x040f tx timeout [ 328.130914][ T4390] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 328.143159][ T4390] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 328.157792][ T5567] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 328.406114][ T6427] loop4: detected capacity change from 0 to 1024 [ 330.762953][ T4262] Bluetooth: hci5: command 0x0419 tx timeout [ 331.119093][ T5506] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 331.147860][ T6429] loop6: detected capacity change from 0 to 1024 [ 331.193554][ T5558] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 331.233398][ T5558] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 331.297193][ T6336] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 331.356170][ T6429] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 331.725193][ T26] audit: type=1800 audit(1734089095.498:23): pid=6455 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.355" name="SYSV00000000" dev="hugetlbfs" ino=1 res=0 errno=0 [ 332.916140][ T5264] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 333.109703][ T6467] loop6: detected capacity change from 0 to 1024 [ 333.174660][ T6467] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 335.118292][ T6483] No such timeout policy "syz0" [ 335.881942][ T4390] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 335.915000][ T4390] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 335.957138][ T6336] device veth0_vlan entered promiscuous mode [ 335.992578][ T4390] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 336.014934][ T4390] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 337.141670][ T5554] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 337.219431][ T4390] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 337.251890][ T4390] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 337.272129][ T6336] device veth1_vlan entered promiscuous mode [ 337.495650][ T5549] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 337.695745][ T5549] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 337.882958][ T6336] device veth0_macvtap entered promiscuous mode [ 337.959555][ T6336] device veth1_macvtap entered promiscuous mode [ 337.977675][ T6336] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 337.988336][ T6336] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 338.003856][ T6336] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 338.015231][ T6336] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 338.035501][ T6336] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 338.209061][ T6336] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 338.272721][ T6336] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 338.378967][ T6336] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 338.562778][ T6515] netlink: 12 bytes leftover after parsing attributes in process `syz.2.356'. [ 339.329617][ T4390] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 339.343113][ T6336] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 339.366340][ T5174] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 339.376091][ T6508] loop3: detected capacity change from 0 to 1024 [ 339.983703][ T5174] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 340.015297][ T5174] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 340.048611][ T5174] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 341.337098][ T6336] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 342.347293][ T6336] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 342.515499][ T4345] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 342.535181][ T6523] loop2: detected capacity change from 0 to 512 [ 342.543353][ T6523] EXT4-fs: Ignoring removed i_version option [ 342.554111][ T6336] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 342.584189][ T6336] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 342.608577][ T6336] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 342.630559][ T6336] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 342.631260][ T6523] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 342.653703][ T6336] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 342.720609][ T6336] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 342.873276][ T6336] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 342.951968][ T5174] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 342.969894][ T5174] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 342.987888][ T6523] EXT4-fs (loop2): 1 truncate cleaned up [ 343.013707][ T6523] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 343.019967][ T6336] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 343.132226][ T6336] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 343.194880][ T6336] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 343.211403][ T6524] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 343.294170][ T6336] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 345.210715][ T5154] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 345.821989][ T4258] EXT4-fs (loop2): unmounting filesystem. [ 346.064940][ T5549] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 346.356306][ T5549] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 346.460582][ T5162] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 346.642842][ T5154] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 346.710300][ T5154] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 346.835069][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 348.624044][ T4298] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 348.833814][ T4298] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 348.844891][ T4298] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 348.856524][ T4298] usb 5-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 348.859703][ T4298] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 348.885588][ T4298] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 348.943217][ T4298] usb 5-1: Product: syz [ 348.959981][ T4298] usb 5-1: Manufacturer: syz [ 348.964943][ T4298] usb 5-1: SerialNumber: syz [ 349.029006][ T4298] cdc_ncm 5-1:1.0: CDC Union missing and no IAD found [ 349.040169][ T4298] cdc_ncm 5-1:1.0: bind() failure [ 349.133292][ T6570] netlink: 8 bytes leftover after parsing attributes in process `syz.3.368'. [ 349.194169][ T6570] netlink: 4 bytes leftover after parsing attributes in process `syz.3.368'. [ 349.280009][ T6570] netlink: 4 bytes leftover after parsing attributes in process `syz.3.368'. [ 350.709180][ T4300] usb 5-1: USB disconnect, device number 2 [ 350.815840][ T6570] bond0: (slave bond_slave_0): Releasing backup interface [ 350.884174][ T4298] usb 6-1: new low-speed USB device number 2 using dummy_hcd [ 350.942822][ T6588] fuse: Bad value for 'fd' [ 351.144246][ T4298] usb 6-1: device descriptor read/64, error -71 [ 351.487734][ T5154] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 351.702338][ T6592] loop4: detected capacity change from 0 to 512 [ 351.892436][ T6592] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 351.901887][ T6592] ext4 filesystem being mounted at /90/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 352.355767][ T4254] EXT4-fs (loop4): unmounting filesystem. [ 352.364273][ T4298] usb 6-1: new low-speed USB device number 3 using dummy_hcd [ 352.520755][ T6599] loop5: detected capacity change from 0 to 512 [ 352.577892][ T6599] EXT4-fs: Ignoring removed i_version option [ 352.654218][ T6599] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode [ 353.142776][ T6599] EXT4-fs (loop5): 1 truncate cleaned up [ 353.438490][ T128] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 353.458053][ T6599] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: writeback. [ 354.689729][ T6615] loop6: detected capacity change from 0 to 128 [ 354.796409][ T6615] UDF-fs: error (device loop6): udf_read_tagged: read failed, block=256, location=256 [ 354.931286][ T6615] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 356.716524][ T6336] EXT4-fs (loop5): unmounting filesystem. [ 357.275227][ T4390] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 358.327558][ T5264] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 361.010301][ T6665] x_tables: ip_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING [ 361.318032][ T26] audit: type=1800 audit(1734089125.098:24): pid=6656 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.4.385" name="SYSV00000000" dev="hugetlbfs" ino=1 res=0 errno=0 [ 361.788690][ T6678] loop6: detected capacity change from 0 to 512 [ 362.112484][ T6678] EXT4-fs (loop6): mounted filesystem without journal. Quota mode: writeback. [ 362.121893][ T6678] ext4 filesystem being mounted at /12/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 362.998310][ T5154] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 363.960600][ T6706] loop2: detected capacity change from 0 to 512 [ 363.976481][ T6706] ext3: Unknown parameter 'smackfshat' [ 365.295125][ T6707] hub 6-0:1.0: USB hub found [ 365.304070][ T6707] hub 6-0:1.0: 1 port detected [ 365.829005][ T9] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 366.382699][ T6716] loop5: detected capacity change from 0 to 1024 [ 367.929253][ T6716] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 368.267808][ T6722] loop2: detected capacity change from 0 to 512 [ 368.281797][ T6721] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 368.314336][ T6722] EXT4-fs: Ignoring removed mblk_io_submit option [ 368.320855][ T6722] EXT4-fs: Ignoring removed mblk_io_submit option [ 368.387145][ T6722] EXT4-fs: Ignoring removed i_version option [ 368.424099][ T6722] ext4: Unknown parameter 'pcr' [ 371.441199][ T4521] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 371.452901][ T5558] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 371.956483][ T6740] loop4: detected capacity change from 0 to 16 [ 371.963462][ T6740] erofs: Unknown parameter '' [ 371.971817][ T6739] loop3: detected capacity change from 0 to 2048 [ 374.861643][ T6746] NILFS (loop3): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 374.900783][ T6131] EXT4-fs (loop6): unmounting filesystem. [ 374.913442][ T6749] capability: warning: `syz.2.404' uses 32-bit capabilities (legacy support in use) [ 375.690666][ T6762] rdma_op ffff888078e309f0 conn xmit_rdma 0000000000000000 [ 377.082845][ T4390] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 377.254950][ T6775] loop5: detected capacity change from 0 to 512 [ 377.265477][ T6775] ext3: Unknown parameter 'smackfshat' [ 378.007361][ T6776] loop2: detected capacity change from 0 to 64 [ 378.134722][ T6780] loop3: detected capacity change from 0 to 16 [ 378.141672][ T6780] erofs: Unknown parameter '' [ 378.585971][ T1277] ieee802154 phy0 wpan0: encryption failed: -22 [ 378.949096][ T4262] sysfs: cannot create duplicate filename '/devices/virtual/bluetooth/hci4/hci4:201' [ 378.982734][ T4262] CPU: 0 PID: 4262 Comm: kworker/u5:5 Not tainted 6.1.119-syzkaller #0 [ 378.991035][ T4262] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 379.001123][ T4262] Workqueue: hci4 hci_rx_work [ 379.005855][ T4262] Call Trace: [ 379.009165][ T4262] [ 379.012121][ T4262] dump_stack_lvl+0x1e3/0x2cb [ 379.016846][ T4262] ? nf_tcp_handle_invalid+0x642/0x642 [ 379.022348][ T4262] ? panic+0x764/0x764 [ 379.026551][ T4262] sysfs_create_dir_ns+0x2c6/0x390 [ 379.031700][ T4262] ? sysfs_warn_dup+0xa0/0xa0 [ 379.036424][ T4262] kobject_add_internal+0x6df/0xd10 [ 379.041678][ T4262] kobject_add+0x14e/0x210 [ 379.046128][ T4262] ? device_add+0x3c2/0xfd0 [ 379.050672][ T4262] ? kobject_init+0x1d0/0x1d0 [ 379.055381][ T4262] ? __raw_spin_lock_init+0x41/0x100 [ 379.060700][ T4262] ? get_device_parent+0x128/0x400 [ 379.065851][ T4262] device_add+0x476/0xfd0 [ 379.070230][ T4262] hci_conn_add_sysfs+0xe4/0x1f0 [ 379.075203][ T4262] le_conn_complete_evt+0xcc6/0x1320 [ 379.080540][ T4262] ? hci_le_big_info_adv_report_evt+0x390/0x390 [ 379.086831][ T4262] ? __mutex_unlock_slowpath+0x218/0x750 [ 379.092520][ T4262] ? mutex_unlock+0x10/0x10 [ 379.097056][ T4262] ? skb_pull_data+0x10e/0x220 [ 379.101871][ T4262] hci_le_conn_complete_evt+0x188/0x410 [ 379.107475][ T4262] hci_event_packet+0xa40/0x1510 [ 379.112449][ T4262] ? hci_remote_host_features_evt+0x210/0x210 [ 379.118547][ T4262] ? bis_list+0x290/0x290 [ 379.122890][ T4262] ? do_raw_spin_unlock+0x137/0x8a0 [ 379.128123][ T4262] ? kcov_remote_start+0x4ae/0x7c0 [ 379.133263][ T4262] ? lockdep_hardirqs_on+0x90/0x130 [ 379.138487][ T4262] ? hci_send_to_monitor+0x99/0x4d0 [ 379.143712][ T4262] hci_rx_work+0x3cd/0xce0 [ 379.148165][ T4262] ? do_raw_spin_unlock+0x137/0x8a0 [ 379.153397][ T4262] ? process_one_work+0x7a9/0x11d0 [ 379.158560][ T4262] process_one_work+0x8a9/0x11d0 [ 379.163534][ T4262] ? worker_detach_from_pool+0x260/0x260 [ 379.169186][ T4262] ? _raw_spin_lock_irqsave+0x120/0x120 [ 379.174749][ T4262] ? kthread_data+0x4e/0xc0 [ 379.179277][ T4262] ? wq_worker_running+0x97/0x190 [ 379.184308][ T4262] worker_thread+0xa47/0x1200 [ 379.188998][ T4262] ? release_firmware_map_entry+0x186/0x186 [ 379.194925][ T4262] kthread+0x28d/0x320 [ 379.198999][ T4262] ? worker_clr_flags+0x190/0x190 [ 379.204030][ T4262] ? kthread_blkcg+0xd0/0xd0 [ 379.208622][ T4262] ret_from_fork+0x1f/0x30 [ 379.213064][ T4262] [ 379.216156][ C0] vkms_vblank_simulate: vblank timer overrun [ 379.220042][ T1277] ieee802154 phy1 wpan1: encryption failed: -22 [ 379.346910][ T4262] kobject_add_internal failed for hci4:201 with -EEXIST, don't try to register things with the same name in the same directory. [ 379.360384][ T4262] Bluetooth: hci4: failed to register connection device [ 379.433315][ T6794] loop5: detected capacity change from 0 to 16 [ 379.440339][ T6794] erofs: Unknown parameter '' [ 379.708418][ T5587] I/O error, dev loop5, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 380.040225][ T6799] loop2: detected capacity change from 0 to 40427 [ 380.058965][ T4265] sysfs: cannot create duplicate filename '/devices/virtual/bluetooth/hci5/hci5:201' [ 380.072358][ T4265] CPU: 0 PID: 4265 Comm: kworker/u5:6 Not tainted 6.1.119-syzkaller #0 [ 380.080647][ T4265] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 380.090744][ T4265] Workqueue: hci5 hci_rx_work [ 380.095474][ T4265] Call Trace: [ 380.098772][ T4265] [ 380.101723][ T4265] dump_stack_lvl+0x1e3/0x2cb [ 380.106446][ T4265] ? nf_tcp_handle_invalid+0x642/0x642 [ 380.111955][ T4265] ? panic+0x764/0x764 [ 380.116073][ T4265] sysfs_create_dir_ns+0x2c6/0x390 [ 380.121268][ T4265] ? sysfs_warn_dup+0xa0/0xa0 [ 380.125996][ T4265] ? preempt_schedule_thunk+0x16/0x18 [ 380.131415][ T4265] kobject_add_internal+0x6df/0xd10 [ 380.136668][ T4265] kobject_add+0x14e/0x210 [ 380.141129][ T4265] ? device_add+0x3c2/0xfd0 [ 380.145681][ T4265] ? kobject_init+0x1d0/0x1d0 [ 380.150410][ T4265] ? __raw_spin_lock_init+0x41/0x100 [ 380.155728][ T4265] ? get_device_parent+0x128/0x400 [ 380.160885][ T4265] device_add+0x476/0xfd0 [ 380.165263][ T4265] hci_conn_add_sysfs+0xe4/0x1f0 [ 380.170234][ T4265] le_conn_complete_evt+0xcc6/0x1320 [ 380.175578][ T4265] ? hci_le_big_info_adv_report_evt+0x390/0x390 [ 380.181890][ T4265] ? __mutex_unlock_slowpath+0x218/0x750 [ 380.187559][ T4265] ? mutex_unlock+0x10/0x10 [ 380.192083][ T4265] ? skb_pull_data+0x10e/0x220 [ 380.196927][ T4265] hci_le_conn_complete_evt+0x188/0x410 [ 380.202525][ T4265] hci_event_packet+0xa40/0x1510 [ 380.207500][ T4265] ? hci_remote_host_features_evt+0x210/0x210 [ 380.213603][ T4265] ? bis_list+0x290/0x290 [ 380.217982][ T4265] ? kcov_remote_start+0x27/0x7c0 [ 380.223040][ T4265] ? hci_send_to_monitor+0x99/0x4d0 [ 380.228286][ T4265] hci_rx_work+0x3cd/0xce0 [ 380.232929][ T4265] ? process_one_work+0x7a9/0x11d0 [ 380.238069][ T4265] process_one_work+0x8a9/0x11d0 [ 380.243061][ T4265] ? worker_detach_from_pool+0x260/0x260 [ 380.248726][ T4265] ? _raw_spin_lock_irqsave+0x120/0x120 [ 380.254297][ T4265] ? kthread_data+0x4e/0xc0 [ 380.258843][ T4265] ? wq_worker_running+0x97/0x190 [ 380.263901][ T4265] worker_thread+0xa47/0x1200 [ 380.268622][ T4265] ? release_firmware_map_entry+0x186/0x186 [ 380.274587][ T4265] kthread+0x28d/0x320 [ 380.278685][ T4265] ? worker_clr_flags+0x190/0x190 [ 380.283742][ T4265] ? kthread_blkcg+0xd0/0xd0 [ 380.288360][ T4265] ret_from_fork+0x1f/0x30 [ 380.292827][ T4265] [ 380.295996][ C0] vkms_vblank_simulate: vblank timer overrun [ 380.436131][ T6799] F2FS-fs (loop2): invalid crc value [ 380.453995][ T4265] kobject_add_internal failed for hci5:201 with -EEXIST, don't try to register things with the same name in the same directory. [ 380.467520][ T4265] Bluetooth: hci5: failed to register connection device [ 380.535299][ T6799] F2FS-fs (loop2): Found nat_bits in checkpoint [ 380.561633][ T6806] loop4: detected capacity change from 0 to 16 [ 380.568698][ T6806] erofs: Unknown parameter '' [ 380.612268][ T6799] F2FS-fs (loop2): Cannot turn on quotas: -2 on 0 [ 380.658516][ T6799] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e4 [ 381.226380][ T6814] syz.2.414: attempt to access beyond end of device [ 381.226380][ T6814] loop2: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 383.566877][ T4390] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 383.594286][ T4314] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 384.592036][ T6829] netlink: 8 bytes leftover after parsing attributes in process `syz.6.421'. [ 384.655416][ T6829] netlink: 4 bytes leftover after parsing attributes in process `syz.6.421'. [ 384.736100][ T6836] netlink: 4 bytes leftover after parsing attributes in process `syz.6.421'. [ 384.880620][ T6842] loop5: detected capacity change from 0 to 2048 [ 385.684318][ T6844] NILFS (loop5): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 386.009082][ T6847] loop4: detected capacity change from 0 to 1024 [ 386.059087][ T6836] bond0: (slave bond_slave_0): Releasing backup interface [ 386.119601][ T6847] EXT4-fs: Ignoring removed orlov option [ 386.332925][ T6850] syz.5.424: attempt to access beyond end of device [ 386.332925][ T6850] loop5: rw=0, sector=19791209300040, nr_sectors = 2 limit=2048 [ 386.347819][ T6850] NILFS (loop5): I/O error reading meta-data file (ino=6, block-offset=1) [ 386.976481][ T6847] EXT4-fs: Ignoring removed nomblk_io_submit option [ 387.026372][ T6844] NILFS (loop5): vblocknr = 23 has abnormal lifetime: start cno (= 4294967298) > current cno (= 3) [ 387.046151][ T6844] NILFS error (device loop5): nilfs_bmap_propagate: broken bmap (inode number=4) [ 387.114055][ T6844] Remounting filesystem read-only [ 387.119594][ T4521] NILFS (loop5): discard dirty page: offset=0, ino=6 [ 387.127993][ T6847] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 387.144433][ T4521] NILFS (loop5): discard dirty block: blocknr=35, size=1024 [ 387.185628][ T6856] loop6: detected capacity change from 0 to 512 [ 387.187316][ T4521] NILFS (loop5): discard dirty block: blocknr=9895604650020, size=1024 [ 387.201381][ T4521] NILFS (loop5): discard dirty block: blocknr=37, size=1024 [ 387.210536][ T4521] NILFS (loop5): discard dirty block: blocknr=38, size=1024 [ 387.218265][ T4521] NILFS (loop5): discard dirty page: offset=0, ino=3 [ 387.225107][ T4521] NILFS (loop5): discard dirty block: blocknr=42, size=1024 [ 387.232585][ T4521] NILFS (loop5): discard dirty block: blocknr=43, size=1024 [ 387.239997][ T4521] NILFS (loop5): discard dirty block: blocknr=44, size=1024 [ 387.247522][ T4521] NILFS (loop5): discard dirty block: blocknr=18446744073709551615, size=1024 [ 387.257842][ T6856] EXT4-fs: Ignoring removed nomblk_io_submit option [ 387.273951][ T4521] NILFS (loop5): discard dirty page: offset=229376, ino=3 [ 387.311720][ T4521] NILFS (loop5): discard dirty block: blocknr=18446744073709551615, size=1024 [ 387.393455][ T6856] EXT4-fs (loop6): mounted filesystem without journal. Quota mode: none. [ 387.407021][ T4521] NILFS (loop5): discard dirty block: blocknr=18446744073709551615, size=1024 [ 387.416555][ T4521] NILFS (loop5): discard dirty block: blocknr=50, size=1024 [ 387.424032][ T4521] NILFS (loop5): discard dirty block: blocknr=18446744073709551615, size=1024 [ 387.432978][ T4521] NILFS (loop5): discard dirty page: offset=0, ino=5 [ 387.439768][ T4521] NILFS (loop5): discard dirty block: blocknr=41, size=1024 [ 387.447167][ T4521] NILFS (loop5): discard dirty block: blocknr=18446744073709551615, size=1024 [ 387.456087][ T4521] NILFS (loop5): discard dirty block: blocknr=18446744073709551615, size=1024 [ 387.465128][ T4521] NILFS (loop5): discard dirty block: blocknr=18446744073709551615, size=1024 [ 387.501555][ T6336] NILFS (loop5): disposed unprocessed dirty file(s) when stopping log writer [ 387.705786][ T6336] NILFS (loop5): discard dirty page: offset=0, ino=2 [ 387.728959][ T6336] NILFS (loop5): discard dirty block: blocknr=18, size=1024 [ 387.856621][ T26] audit: type=1804 audit(1734089151.638:25): pid=6856 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.6.426" name="/newroot/16/file0/bus" dev="loop6" ino=19 res=1 errno=0 [ 387.909710][ T6336] NILFS (loop5): discard dirty block: blocknr=18446744073709551615, size=1024 [ 387.970737][ T6336] NILFS (loop5): discard dirty block: blocknr=18446744073709551615, size=1024 [ 388.012218][ T6866] loop3: detected capacity change from 0 to 1024 [ 388.046923][ T6336] NILFS (loop5): discard dirty block: blocknr=18446744073709551615, size=1024 [ 388.165032][ T6336] NILFS (loop5): discard dirty page: offset=0, ino=4 [ 388.171784][ T6336] NILFS (loop5): discard dirty block: blocknr=40, size=1024 [ 388.179676][ T6866] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 388.242374][ T6131] EXT4-fs (loop6): unmounting filesystem. [ 388.251036][ T6336] NILFS (loop5): discard dirty block: blocknr=18446744073709551615, size=1024 [ 388.264120][ T4254] EXT4-fs (loop4): unmounting filesystem. [ 388.297383][ T6866] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 388.306701][ T6336] NILFS (loop5): discard dirty block: blocknr=18446744073709551615, size=1024 [ 388.316572][ T6336] NILFS (loop5): discard dirty block: blocknr=18446744073709551615, size=1024 [ 388.956898][ T6877] loop5: detected capacity change from 0 to 16 [ 388.964012][ T6877] erofs: Unknown parameter '' [ 388.993181][ T26] audit: type=1804 audit(1734089152.768:26): pid=6866 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.3.428" name="/newroot/94/file0/bus" dev="loop3" ino=18 res=1 errno=0 [ 389.137006][ T5587] I/O error, dev loop5, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 389.147930][ T6879] loop6: detected capacity change from 0 to 16 [ 389.154832][ T6879] erofs: Unknown parameter '' [ 390.265134][ T4262] Bluetooth: hci5: Ignoring HCI_Connection_Complete for existing connection [ 390.408603][ T5166] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 390.420353][ T5546] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 391.959307][ T6897] loop4: detected capacity change from 0 to 1024 [ 392.015228][ T6897] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 392.170680][ T4263] EXT4-fs (loop3): unmounting filesystem. [ 392.624015][ T5913] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 393.780583][ T6910] netlink: 8 bytes leftover after parsing attributes in process `syz.4.437'. [ 393.824150][ T6912] loop3: detected capacity change from 0 to 512 [ 393.856304][ T6910] netlink: 4 bytes leftover after parsing attributes in process `syz.4.437'. [ 393.884711][ T6912] EXT4-fs: Ignoring removed nomblk_io_submit option [ 394.241214][ T6912] EXT4-fs (loop3): Cannot turn on journaled quota: type 0: error -2 [ 394.388115][ T6913] netlink: 4 bytes leftover after parsing attributes in process `syz.4.437'. [ 394.442945][ T6912] EXT4-fs (loop3): Cannot turn on journaled quota: type 1: error -2 [ 394.522329][ T6907] delete_channel: no stack [ 394.834497][ T6912] EXT4-fs (loop3): 1 truncate cleaned up [ 394.923008][ T6912] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 395.565201][ T6931] EXT4-fs error (device loop3): ext4_map_blocks:634: inode #2: block 4: comm syz.3.433: lblock 0 mapped to illegal pblock 4 (length 1) [ 397.514204][ T4521] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 397.518721][ T46] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 397.545100][ T6917] EXT4-fs error (device loop3): ext4_mb_generate_buddy:1102: group 0, block bitmap and bg descriptor inconsistent: 227 vs 220 free clusters [ 397.625928][ T6931] EXT4-fs (loop3): Remounting filesystem read-only [ 397.759213][ T6917] EXT4-fs (loop3): Remounting filesystem read-only [ 397.781030][ T6913] bond0: (slave bond_slave_0): Releasing backup interface [ 397.792515][ T4263] EXT4-fs (loop3): unmounting filesystem. [ 397.927239][ T6939] loop6: detected capacity change from 0 to 1024 [ 398.029036][ T6939] hfsplus: extend alloc file! (8192,65536,366) [ 402.114818][ T6967] loop6: detected capacity change from 0 to 16 [ 402.123198][ T6967] erofs: Unknown parameter '' [ 402.740083][ T4262] sysfs: cannot create duplicate filename '/devices/virtual/bluetooth/hci3/hci3:201' [ 402.751070][ T4262] CPU: 1 PID: 4262 Comm: kworker/u5:5 Not tainted 6.1.119-syzkaller #0 [ 402.759359][ T4262] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 402.769445][ T4262] Workqueue: hci3 hci_rx_work [ 402.774187][ T4262] Call Trace: [ 402.777518][ T4262] [ 402.780472][ T4262] dump_stack_lvl+0x1e3/0x2cb [ 402.785200][ T4262] ? nf_tcp_handle_invalid+0x642/0x642 [ 402.790704][ T4262] ? panic+0x764/0x764 [ 402.794819][ T4262] sysfs_create_dir_ns+0x2c6/0x390 [ 402.799966][ T4262] ? sysfs_warn_dup+0xa0/0xa0 [ 402.804689][ T4262] kobject_add_internal+0x6df/0xd10 [ 402.809933][ T4262] kobject_add+0x14e/0x210 [ 402.814491][ T4262] ? device_add+0x3c2/0xfd0 [ 402.819036][ T4262] ? kobject_init+0x1d0/0x1d0 [ 402.823758][ T4262] ? get_device_parent+0x6d/0x400 [ 402.828820][ T4262] ? get_device_parent+0x128/0x400 [ 402.833975][ T4262] device_add+0x476/0xfd0 [ 402.838377][ T4262] hci_conn_add_sysfs+0xe4/0x1f0 [ 402.843354][ T4262] le_conn_complete_evt+0xcc6/0x1320 [ 402.848687][ T4262] ? trace_contention_end+0x61/0x170 [ 402.854022][ T4262] ? hci_le_big_info_adv_report_evt+0x390/0x390 [ 402.860333][ T4262] ? __mutex_unlock_slowpath+0x218/0x750 [ 402.866003][ T4262] ? mutex_unlock+0x10/0x10 [ 402.870535][ T4262] ? skb_pull_data+0x10e/0x220 [ 402.875355][ T4262] hci_le_conn_complete_evt+0x188/0x410 [ 402.880955][ T4262] hci_event_packet+0xa40/0x1510 [ 402.885931][ T4262] ? hci_remote_host_features_evt+0x210/0x210 [ 402.892039][ T4262] ? bis_list+0x290/0x290 [ 402.896404][ T4262] ? kcov_remote_start+0x27/0x7c0 [ 402.901469][ T4262] ? hci_send_to_monitor+0x99/0x4d0 [ 402.906715][ T4262] hci_rx_work+0x3cd/0xce0 [ 402.911182][ T4262] ? process_one_work+0x7a9/0x11d0 [ 402.916331][ T4262] process_one_work+0x8a9/0x11d0 [ 402.921327][ T4262] ? worker_detach_from_pool+0x260/0x260 [ 402.926999][ T4262] ? _raw_spin_lock_irqsave+0x120/0x120 [ 402.932582][ T4262] ? kthread_data+0x4e/0xc0 [ 402.937135][ T4262] ? wq_worker_running+0x97/0x190 [ 402.942196][ T4262] worker_thread+0xa47/0x1200 [ 402.946916][ T4262] ? release_firmware_map_entry+0x186/0x186 [ 402.952871][ T4262] kthread+0x28d/0x320 [ 402.956968][ T4262] ? worker_clr_flags+0x190/0x190 [ 402.962027][ T4262] ? kthread_blkcg+0xd0/0xd0 [ 402.966650][ T4262] ret_from_fork+0x1f/0x30 [ 402.971122][ T4262] [ 403.087413][ T4314] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 403.109730][ T4262] kobject_add_internal failed for hci3:201 with -EEXIST, don't try to register things with the same name in the same directory. [ 403.123115][ T4262] Bluetooth: hci3: failed to register connection device [ 403.250451][ T6970] syz.3.448 (6970) used obsolete PPPIOCDETACH ioctl [ 403.457839][ T4435] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 403.732709][ T6976] [ 403.735538][ T6976] ============================= [ 403.740450][ T6976] WARNING: suspicious RCU usage [ 403.745445][ T6976] 6.1.119-syzkaller #0 Not tainted [ 403.750577][ T6976] ----------------------------- [ 403.755511][ T6976] net/mac80211/sta_info.c:361 suspicious rcu_dereference_protected() usage! [ 403.764495][ T6976] [ 403.764495][ T6976] other info that might help us debug this: [ 403.764495][ T6976] [ 403.774812][ T6976] [ 403.774812][ T6976] rcu_scheduler_active = 2, debug_locks = 1 [ 403.782926][ T6976] 3 locks held by syz.4.451/6976: [ 403.788041][ T6976] #0: ffffffff8e569790 (cb_lock){++++}-{3:3}, at: genl_rcv+0x15/0x40 [ 403.796355][ T6976] #1: ffff8880754907c8 (&rdev->wiphy.mtx){+.+.}-{3:3}, at: nl80211_pre_doit+0x58b/0x8a0 [ 403.806305][ T6976] #2: ffff888056b8cd40 (&wdev->mtx){+.+.}-{3:3}, at: nl80211_new_station+0x1c31/0x24f0 [ 403.816195][ T6976] [ 403.816195][ T6976] stack backtrace: [ 403.822121][ T6976] CPU: 1 PID: 6976 Comm: syz.4.451 Not tainted 6.1.119-syzkaller #0 [ 403.830171][ T6976] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 403.840337][ T6976] Call Trace: [ 403.843643][ T6976] [ 403.846626][ T6976] dump_stack_lvl+0x1e3/0x2cb [ 403.851366][ T6976] ? nf_tcp_handle_invalid+0x642/0x642 [ 403.856882][ T6976] ? panic+0x764/0x764 [ 403.861000][ T6976] lockdep_rcu_suspicious+0x21c/0x330 [ 403.866429][ T6976] sta_remove_link+0x353/0x4a0 [ 403.871248][ T6976] sta_info_free+0x4f/0x750 [ 403.875801][ T6976] ieee80211_add_station+0x369/0x560 [ 403.881202][ T6976] rdev_add_station+0x121/0x2f0 [ 403.886113][ T6976] nl80211_new_station+0x1d33/0x24f0 [ 403.891587][ T6976] ? nl80211_set_station+0x1f50/0x1f50 [ 403.897093][ T6976] ? netdev_run_todo+0xedc/0xf40 [ 403.902208][ T6976] genl_rcv_msg+0xc1a/0xf70 [ 403.906771][ T6976] ? genl_bind+0x400/0x400 [ 403.911256][ T6976] ? read_lock_is_recursive+0x10/0x10 [ 403.916685][ T6976] ? ref_tracker_free+0x638/0x7d0 [ 403.921751][ T6976] ? nl80211_set_station+0x1f50/0x1f50 [ 403.927247][ T6976] ? refcount_inc+0x80/0x80 [ 403.931788][ T6976] ? __copy_skb_header+0x47b/0x600 [ 403.936965][ T6976] netlink_rcv_skb+0x1cd/0x410 [ 403.941807][ T6976] ? genl_bind+0x400/0x400 [ 403.946279][ T6976] ? netlink_ack+0x1290/0x1290 [ 403.951116][ T6976] genl_rcv+0x24/0x40 [ 403.955146][ T6976] netlink_unicast+0x7d8/0x970 [ 403.959960][ T6976] ? netlink_detachskb+0x90/0x90 [ 403.964934][ T6976] ? __virt_addr_valid+0x45b/0x530 [ 403.970114][ T6976] ? __phys_addr_symbol+0x2b/0x70 [ 403.975182][ T6976] ? __check_object_size+0x4dd/0xa30 [ 403.980506][ T6976] ? bpf_lsm_netlink_send+0x5/0x10 [ 403.985659][ T6976] netlink_sendmsg+0xa26/0xd60 [ 403.990543][ T6976] ? netlink_getsockopt+0x580/0x580 [ 403.995762][ T6976] ? aa_sock_msg_perm+0x91/0x150 [ 404.000718][ T6976] ? bpf_lsm_socket_sendmsg+0x5/0x10 [ 404.006023][ T6976] ? security_socket_sendmsg+0x7d/0xa0 [ 404.011498][ T6976] ? netlink_getsockopt+0x580/0x580 [ 404.016718][ T6976] ____sys_sendmsg+0x5a5/0x8f0 [ 404.021509][ T6976] ? __sys_sendmsg_sock+0x30/0x30 [ 404.026564][ T6976] __sys_sendmsg+0x2a9/0x390 [ 404.031172][ T6976] ? ____sys_sendmsg+0x8f0/0x8f0 [ 404.036136][ T6976] ? __fget_files+0x28/0x4a0 [ 404.040750][ T6976] ? lockdep_hardirqs_on_prepare+0x438/0x7a0 [ 404.046761][ T6976] ? syscall_enter_from_user_mode+0x2e/0x230 [ 404.052748][ T6976] ? lockdep_hardirqs_on+0x94/0x130 [ 404.057956][ T6976] ? syscall_enter_from_user_mode+0x2e/0x230 [ 404.063946][ T6976] do_syscall_64+0x3b/0xb0 [ 404.068377][ T6976] ? clear_bhb_loop+0x45/0xa0 [ 404.073072][ T6976] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 404.079070][ T6976] RIP: 0033:0x7fe788185d19 [ 404.083501][ T6976] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 404.103124][ T6976] RSP: 002b:00007fe788f53038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 404.111557][ T6976] RAX: ffffffffffffffda RBX: 00007fe788375fa0 RCX: 00007fe788185d19 [ 404.119537][ T6976] RDX: 0000000000000000 RSI: 0000000020001080 RDI: 0000000000000007 [ 404.127520][ T6976] RBP: 00007fe788201a20 R08: 0000000000000000 R09: 0000000000000000 [ 404.135516][ T6976] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 404.143504][ T6976] R13: 0000000000000000 R14: 00007fe788375fa0 R15: 00007fff446303e8 [ 404.151503][ T6976] [ 406.294050][ T6976] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 409.078312][ T11] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration