last executing test programs: 11m35.196781471s ago: executing program 0 (id=15): socket$inet6_tcp(0xa, 0x1, 0x0) setresgid(0x0, 0x0, 0x0) setregid(0x0, 0xffffffffffffffff) r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) r1 = syz_open_procfs(0x0, &(0x7f00000000c0)='task\x00') fchdir(r1) mount(0x0, &(0x7f0000000180)='.\x00', &(0x7f0000000000)='proc\x00', 0x80, 0x0) syz_open_procfs(r0, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000001fc0)=ANY=[], 0x48) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000080)='kfree\x00'}, 0x18) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000040)={{r2}, 0x0, &(0x7f00000005c0)}, 0x20) syz_mount_image$ext4(&(0x7f00000004c0)='ext4\x00', &(0x7f0000000ac0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x1000410, &(0x7f0000000080)={[{@nolazytime}, {}]}, 0x6, 0x504, &(0x7f00000017c0)="$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") openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) r3 = socket$inet6(0xa, 0x6, 0x0) bind$inet6(r3, &(0x7f00000000c0)={0xa, 0x4e20, 0x0, @empty}, 0x1c) r4 = socket$inet_dccp(0x2, 0x6, 0x0) listen(r3, 0x5) setsockopt(r4, 0x800000000010d, 0x8000000011, &(0x7f00001c9fff), 0xc5) connect$inet(r4, &(0x7f0000000000)={0x2, 0x4e20, @local}, 0x10) sendmmsg(r4, &(0x7f0000002980), 0x400000000000239, 0x0) close_range(r3, 0xffffffffffffffff, 0x0) 11m33.463811863s ago: executing program 0 (id=19): r0 = socket$igmp(0x2, 0x3, 0x2) socket$nl_generic(0x10, 0x3, 0x10) r1 = openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$SW_SYNC_IOC_CREATE_FENCE(r1, 0xc0285700, &(0x7f0000000200)={0x1, "ff0f00000000000001a82d866bf4ff0713e4b89c3c00ffffffffebe800"}) r2 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000400)={0x1, &(0x7f0000000380)=[{0x6, 0x0, 0x0, 0x7fffffff}]}) r3 = openat$dma_heap(0xffffffffffffff9c, 0x0, 0x0, 0x0) r4 = syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x8002) setreuid(0x0, 0x0) readv(r4, &(0x7f0000000400)=[{0x0}], 0x1) ioctl$DMA_HEAP_IOCTL_ALLOC(r3, 0xc0184800, &(0x7f0000000100)={0x4, r2}) ioctl$DMA_BUF_SET_NAME_A(r5, 0x40086203, &(0x7f00000001c0)='\x02\x00\x00\x00\x05\x00\x00\x00-control\x00') setsockopt$MRT_ADD_VIF(r0, 0x0, 0xca, &(0x7f00000000c0)={0x0, 0x1, 0x0, 0x0, @vifc_lcl_addr=@private, @multicast1=0xe0000300}, 0x10) ioctl$sock_SIOCADDRT(r0, 0x890b, &(0x7f0000000100)={0x0, @l2={0x1f, 0xd1, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x3}, @qipcrtr={0x2a, 0x3, 0x3fff}, @llc={0x1a, 0x311, 0x8a, 0x8, 0x4, 0x6}, 0x8, 0x0, 0x0, 0x0, 0x2, &(0x7f0000000000)='veth0_to_hsr\x00', 0xa, 0x2, 0x1}) setsockopt$MRT_ADD_VIF(r0, 0x0, 0xca, &(0x7f0000000040)={0x1, 0x1, 0x0, 0x0, @vifc_lcl_addr=@multicast2, @multicast2}, 0x10) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xf, 0x4008032, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) r6 = userfaultfd(0x80801) ioctl$UFFDIO_API(r6, 0xc018aa3f, &(0x7f00000000c0)) ioctl$UFFDIO_REGISTER(r6, 0xc020aa00, &(0x7f0000000000)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}, 0x3}) ioctl$UFFDIO_WRITEPROTECT(r6, 0xc018aa06, &(0x7f0000000140)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}, 0x1}) socket$inet6(0xa, 0x6, 0x3) 11m29.450308441s ago: executing program 0 (id=26): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) socket$nl_generic(0x10, 0x3, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = bpf$MAP_CREATE(0x0, 0x0, 0x50) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1d, 0xc, &(0x7f0000000240)=ANY=[@ANYRESHEX=r3, @ANYRES32=r4], &(0x7f0000000200)='GPL\x00', 0x0, 0x5b, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={0x0, r5}, 0x18) r6 = syz_open_dev$usbfs(&(0x7f0000000080), 0x70, 0x101301) ioctl$USBDEVFS_IOCTL(r6, 0xc0105512, &(0x7f0000000200)) ioctl$USBDEVFS_IOCTL(r6, 0xc0105512, &(0x7f0000000040)=@usbdevfs_connect) bpf$PROG_LOAD(0x5, &(0x7f0000caefb8)={0x8, 0x3, &(0x7f0000000100)=ANY=[@ANYBLOB="850000006100000054000000000000009500000000000000b4a8b1541206000000e9c79077fa15ba36eca61299de54cf77c9062c30bc068829afff36b31f"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_skb, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000003f80)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000003f40)={&(0x7f0000002240)=ANY=[@ANYBLOB="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"], 0xcc8}, 0x1, 0x0, 0x0, 0x20000800}, 0x2200c0c0) socket$igmp(0x2, 0x3, 0x2) read$FUSE(0xffffffffffffffff, &(0x7f0000003fc0)={0x2020}, 0x1d34) getsockopt$inet_sctp6_SCTP_PR_STREAM_STATUS(r0, 0x84, 0x73, 0x0, &(0x7f0000000040)) 11m27.445102327s ago: executing program 0 (id=29): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x6) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000240)=0x1) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket(0x10, 0x803, 0x0) ioctl$sock_SIOCETHTOOL(r3, 0x8946, &(0x7f00000002c0)={'veth0_to_team\x00', 0x0}) r4 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000040)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x18, 0x18, 0x4, [@func={0x2, 0x0, 0x0, 0xc, 0x2}, @func_proto]}, {0x0, [0x0, 0x5f]}}, 0x0, 0x34, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x20) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x3, &(0x7f0000000100)=@framed, &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, r4, 0x8, &(0x7f00000000c0)={0x0, 0x1}, 0x1, 0x10, 0x0, 0xf400, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r5 = socket$alg(0x26, 0x5, 0x0) bind$alg(r5, &(0x7f0000000000)={0x26, 'hash\x00', 0x0, 0x0, 'ghash-generic\x00'}, 0x58) setsockopt$ALG_SET_KEY(r5, 0x117, 0x1, 0x0, 0x0) accept4(r5, 0x0, 0x0, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r6, 0x8933, 0x0) sendmsg$NL80211_CMD_SET_INTERFACE(r6, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)={0x1c, r7, 0x5, 0x0, 0x0, {{}, {@val={0x8}, @void}}}, 0x1c}}, 0x0) sendmsg$NL80211_CMD_START_AP(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000002c0)={0x0}}, 0x20044084) 11m24.121040323s ago: executing program 0 (id=33): r0 = socket$inet6(0xa, 0x3, 0x6) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000000100)={@dev={0xfe, 0x80, '\x00', 0x23}, 0x800, 0x0, 0x2, 0x1, 0x0, 0x7}, 0x20) syz_mount_image$exfat(&(0x7f00000000c0), &(0x7f0000000000)='./file0\x00', 0x800, &(0x7f0000000140)={[{@allow_utime}, {@zero_size_dir}, {@errors_continue}, {@errors_continue}, {@iocharset={'iocharset', 0x3d, 'cp861'}}, {}, {@gid}, {@keep_last_dots}, {@iocharset={'iocharset', 0x3d, 'iso8859-6'}}, {@errors_continue}]}, 0x1, 0x152d, &(0x7f0000001f80)="$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") r1 = socket$nl_route(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x40}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() socket$nl_xfrm(0x10, 0x3, 0x6) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$packet(0x11, 0x4000000000002, 0x300) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x800}, 0x0) r5 = syz_open_procfs(0xffffffffffffffff, &(0x7f00000001c0)='net/vlan/config\x00') preadv(r5, &(0x7f0000001780)=[{&(0x7f0000000380)=""/67, 0x43}], 0x1, 0x4, 0xd) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000000100)={@dev={0xfe, 0x80, '\x00', 0x2b}, 0x800, 0x0, 0x2}, 0x20) r6 = socket$nl_route(0x10, 0x3, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) sendmsg$nl_route(r6, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000380)=@newlink={0x44, 0x10, 0x421, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @gretap={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_GRE_LINK={0x8}]}}}, @IFLA_MASTER={0x8}]}, 0x44}}, 0x0) 11m16.829974932s ago: executing program 0 (id=41): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000400)={&(0x7f00000005c0)=@newqdisc={0x24}, 0x20}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x44050) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}}, 0x0) r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f0000003680)=@nat={'nat\x00', 0x19, 0x0, 0x90, [0x200035c0, 0x0, 0x0, 0x200035f0, 0x20003620], 0x0, 0x0, &(0x7f00000035c0)=ANY=[@ANYBLOB='\x00'/37]}, 0x9d) mknod$loop(&(0x7f00000003c0)='./file0\x00', 0x2000, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f0000003900)=ANY=[@ANYBLOB="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"], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10, 0x0, 0xffffffffffffffff, 0x2a, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x2e) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000540)='rcu_utilization\x00', r1}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x0, 0x0) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) connect$inet(0xffffffffffffffff, 0x0, 0x0) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000001480), 0x42002, 0x0) mount$pvfs2(&(0x7f0000000040), &(0x7f0000000100)='./file0\x00', &(0x7f0000000180), 0x2200000, 0x0) 11m0.11420191s ago: executing program 32 (id=41): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000400)={&(0x7f00000005c0)=@newqdisc={0x24}, 0x20}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x44050) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}}, 0x0) r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f0000003680)=@nat={'nat\x00', 0x19, 0x0, 0x90, [0x200035c0, 0x0, 0x0, 0x200035f0, 0x20003620], 0x0, 0x0, &(0x7f00000035c0)=ANY=[@ANYBLOB='\x00'/37]}, 0x9d) mknod$loop(&(0x7f00000003c0)='./file0\x00', 0x2000, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f0000003900)=ANY=[@ANYBLOB="620af8ff0c200021bfa100000000000007010000f8ffffffb702000003000000bd120000000000008500000006000000b70000000000000095000000000000003faf4f1e7f2aa3d9b18ed81c0c869b51ec6c0af4e0e4a9446c7670568982b4e020f698393aa0f3881f9c24aa56f15199fad0093c59d66b5ece9f36c70d0f13905ea23c22624c9f87f9793f50bb546040677b0c5077da80fb982c1e9400e693146cea484a415b76966118b64f751a0f241b07080008002d75593a286cecc93e64c227c95aa0b784625704f07a72c234664c0af9360a1f7a5e6b607130c89f18c0c1089d8b853289e01aa27ae8b09e00e79ab20b0b8e1148f49faf2ad0000000000000006fa03c6468972089b302d7bf6023cdcedb5e0125ebbc08dee510cb2364149215108333719acd97cfa107d40224edc5465a932b77e74e802a0d42bc6099ad2300000080006ef6c1ff0900000000000010c63a949e8b7955394ffa82b8e942c89112f4ab87b1bfeda7be586602d985430cea0162ab3fcf4591c926abfb0767192302000000b0eea24492a660583eecb42cbcd3de3a83209da17a0faf60fd6ad9b97aa5fa68480366c9c6fd6fa5043aa3926b81e3b59c95c25a573dc2edcaea2b1a52496dfcaf99431412fd134a996382a1a04d5bb924cfe5f3185418d605ffff9c4d2ec7c32f2095e63c80aff9fa740b5b7632f32030916f89c6dad7603f2ba2a790d62d6faec2fed44da4928b30142ba11de6c5d50b83bae613402216b5054d1e7c13b1355d6f4a8245ffa4997da9c77af4c0eb97fca585ec6bf5af51d564beb6d952aab9c70764b0a8a7583c90b3433b809bdb9fbd48bc873495cbff8a326eea31ae4e0f7505ebf6c9d13330ca005ace1a84521f14518c9b476fccbd6c712016219848624b87cec2dbe98223a0eb4fa39f6b5c02e6d6d90756ff57902a8f57000000009700cf0b4b8bc2294133000000000000000000030000000000000000000000000010008bc0d9559711e6e8861c46495ba585a4b2d02edc3e28dd271c896249ed85b980680b00002b435ac15fc0288d9b2a169cdcacc413038dafb7a2c8cb482bac0ac502d9ba96ffffff7f0000100000000000007d5ad897ef3b7cda42013d53046da21b40216e14ba2d6ad5656bfff17addaedab25b30002abbba7fa725f38400be7c1f001b2cd317902f19e385be9e48dccff729433282830689da6b53b263339863297771429d120000003341bf4abacac95900fca0493cf29b33dcc9ffffffffffffffd39fec2271ff01589646efd1cf870cd7bb2366fde41f94290c2a5ff870ce41fd3467decb05cfd9fcb32c8ed1dbd9d10a64c1083d5e71b5565b1768ee58969c41595229df17bcad70fb4021428ce970275d13b78100788f11f76161d46ea3abe0fa4d30dc94ef241875f3b4ce0232fcea69c271d7fa29822aea68a660e717a04becff0f719197724f4fce1093b62d7e8c7123d8ec571be54c72d978cf906df0042e36acd37d7f9e119f2c06f815312e0cfe222a06f56dd022c074eb8a322fb0bf47c0a8d154b405c37feaf3dd95f6ef2ae582786105c7df8be5877050c91301bb997316dbf17866fb84d4173731efe895ff2e1c5560926e90109b598502d3e959efc71f665c4d75cf2458e3546c1c776da64fb5abee0acfd235f2f4632c9062ece84c99a061887a20639b41c8c12ee86c50804042b3fb5aac518a75f9e7d7101d5e186c489b3a06fb99e0aa7f23a054de2f4d92d6bd72ee2c9fdc75aaaf1e3e483b4ad05573af40326993947d9a631bcbf3583784acbda216550d7aec6b79e30cbd128f54c2d3335457acf37331766e472391e358c3b377327ac9ecc34f24c9ae153ec60ac0694dc55bff9f5f45f90400000000000000d6b2c5ea1393fdf24285bf16b99c9cc0ad1857216f1a985f369191ae954febb3df464bfe0f7f3ee9afe7befb89d2777399f5874c553aeb3729cffe86e66964ae09bb6d163118e4cbe024fd4500f8ff0700000000cc9d8046c216c1f895778cb25122a2a9f9b444aeadea2a40da8daccf080842a486721737390cbf3a74cb2003016f1514216bdf57d2a40d40b51ab63e96ec8485b3b8a8c9ae3d14f93100c2e0893862eef552fcde2981f48c482bde8a168c3f5db2fea6f26e4a4304e50c349f4f9ecee27defc93871c5f99b355b72d538ba4958ea8e4aa37094191e10096e7e60fc3541a2c905a1a95e9571bf38ae1981c4238ecaee6f75cd0a6881bd1517a8250ddc8674152f94e3a409e2a3bce109b60000000000000000d6d5210d7503000000a87a27602b81f76386f1535bef1497f92186086e29c6bc5a1fad6ec9a31137abf9a404abde7750898b1bd627e873f8703be8672d70d1ab57075228a9f46ed9bd1f08fb8191bbab2dc51de3a61f0868afc4294859323e6c257a45319f18101288d139bd3da20fed05a8fe64680b0a3fc22dd70400000000946912d6c98cd1a9fbe1e7d58c08acaf30235b918a31d2eca55f74a23641f61f2d5b308cf0d031b0c7f0ced69993e9960ff5f76015e6009556237badf4e7965bbe2777e808fcba821aa8e8c5c39609ff854352cb4900000000000000000000000000c1fee30a3f7a85d1b29e58c77685efc0ceb1c8e5729c66418d169fc03aa188546b3ad2a182068e1e3a0e2505bc7f41019645466a53f1c96e0d4b3bc19faa5449209b083dbd334b47f067bbab40743b2a42010082008df75cf43f8ecc8d3726602111b40e761fd21081920382f14d12ca3c3431ee97471c7868dcda7eaa69eb7f7f80572fdd11bb1d0d1280fbc22bf73468788df51710d7d31c632fc5ed1762eb0b428ee751c47d8e894f745a868404a0bf35f0121008b722b1eaa6aedfa1bf2e7ccb2d61d5d76331945ecefa26b8471d42645288d7226bbd9ccd628ab84875f2c50ba891cea592b0430a537a395dc73bda367bf12cb7d81691a5fe8c47be395656a297e9df0e71f96756ea5cce7daac4be290159f6bcd75f0dda9de5532e71ae9e48b0ed0254a83100000000f6fbb869604d51a36a54c832e45b2569dc0d90b075225fde44c4e0973171ad47d6b0fdf9743af932cd6db49a47613808bad959710300000000000000832d0a45fa4242e24c7e800003c9e8095e02985f28e678f66422436f949e2ab8f162d7e3f855e378f4a1f40b0c6fb2d4b205a800b6d713acebc5b014e61a543a5a194f9ac18d76b5440e3b1a569e7397f6cafa86966d7ba19e720413267a6ccea9c439671d2c680f2753ca184eeeb843450368acb4383a01d25eb3d1e23e0f2645d1cdfa9fa410632f95a5f622f851c66ee7e30393cd7a4d67ff2a49c4f93c0984b5c2d4523497e4d64f95f08493564a1df87111c9bf3194fef97dcecc467ace45feeb685c5870d05f88a0f463db88d377442e1349acaf766218b54a9d624778e1c4e064c98e494198276eb2df7766411bef0ebb5000000000006065d635b0b7a00ee767221d8af9753387e0cd8d718f54a29df6eba3bd4c440e6e2172e3fcc01b8babb757b5c59217b80d0db3ba582814a604e4ef7a803e9ca7c85b35c9b93a9e0885e238b44ae1c2e64cce3b27083b8246829e64056000302bffff15405bd5f2eba20000000000000000000000000000000000009a9823fd8fbc5aa16509945ed032b48ea12d8e0588dc52702e4084913a06d468d0928bad76d697e1f85ab030e788d38788ee5b5428d4a971cc97db9fd231088e570735ce129e7e77fc2777692664a1488fd8d6dff4dad618fd54f529d4555c6507009ee69dd1bc55258789b24052137e9637f3efbab71720f88c3c44b3b7486f979e8a3174b531f573fe0e5239c000be2733c49546f6e8a9175ec6f14dbf72cac91643b2fd99c29eca28a3c2e60d5e5b8795fae16a7c3ea57e728eca35eaf0155a39f97580e079175426c088a0208040982a0000000000000000000000000051ceaaf0159fe61f2eade7603d0a7a56fb09cd119ac06adb6597155ae47846892bb423c024d8cbe9240b71ec6dc2124d3a19e2d714b273d95d1d3aa737cb04a33615ff2a730e51067d5d675d7122361c37c61a43b5afd865b60d4cae891b73220f17d25985a7f76834995e53a93a1c7b9eef267df691ca983a0b15bda7f6c5c1ca7aa50261a3089a1ebf0734c9b07e8951ff023263ad5aed8cfb49b49e128c697724c057d22c5df5aef27ce3db11d5ad5527d149d076e1a87e2df27c0cb8a67ad026bf953e88f10447e125c2c0f1aebee1f3390a9e3ddad4e2a6e0f6e4569fdefa19e870e04acf9493b963f98e23cfc665e4f465fa3f801e1957c399e45f61d3459b1c606204368bb931345af2823c487d2fd99db6ea6e008e7ffa06ca861551189d155bd077a79fe2c7e961352e56824f727d21d41eae78bfec4a2d7a7edbc8ef958c5ea599f7c25bf71c2340558aa12fdd24a88aaad5921aee7dae6a2f3009d9cb43ab4898d0f0aa565431b6abe585d75db04d1c9ba0b9de4ae8b0d3132bc6810cc9a693979f55174a72e1df9fdef35bc470f9e6e591982757f45c52c645d891bf63bb21fb66926ebe1a8525611fc3e8bb8795c36dc2a86b5ab46ff33cc74f61751b2dae92676db85c8d0c721b7ea4544bf51c95c86fcac1f434d09d1ee4928aafe23de66fed972e0dddfb33f64e48701b049239e7f552d816441d11c4c2647c014462344359198d97c4b6e9ed31ca18987b64de079b2bed641e8a92f13ca70844c65cb423d01950b0ebf44bd28e09c05d9ae5dd689fb880fb18d042219f5ac60c3a03b085abf3e8e3efc842a8d328733461f04c99607061c65ed14c61322a5ac2d371a95b8ad867ec92d13a4fa4ae033a09673866cd77f4bcdaaa05207166b19a8758d8855400d8c6a7242dc207251e8797eca24ea4f487663e60f2f5e1f1424958fd148f846830e88a42d93e1fe9c0b4a4a268921738938aa9f3cb3811ac87c54c8ebc8bcfb4613cc3a997ff1579edbd4ade8020e3ad001b072b1a751b588ac4639f35a58e00a50c0270608c7a7f10132b1c25b9ea81232fbef665f6212f875b2a0000000000000000000000000000cf7b6c4ba9bec153d6834bfef080df374703a8ff56a63ec1fe5f2e05a79e3cace7283dd68d41e94420c325fe4dae144fde5ec25a87d625cab20753a77b323fa3783c8b675859b9012647885a242adfee2fe812ecbe5191e0a15142f7349e7627cc39d724e2e34e7a24154f26ae3125b36d0504965295d0453902ac7079b11a3a1e655e482331e3dc35b2e7e4e3ea99064fe5b9c8ae0ca3e5fd653f3286a99d81ce4eba765c38d097391ad4babac38ce5b4344e24a361cd54e5"], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10, 0x0, 0xffffffffffffffff, 0x2a, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x2e) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000540)='rcu_utilization\x00', r1}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x0, 0x0) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) connect$inet(0xffffffffffffffff, 0x0, 0x0) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000001480), 0x42002, 0x0) mount$pvfs2(&(0x7f0000000040), &(0x7f0000000100)='./file0\x00', &(0x7f0000000180), 0x2200000, 0x0) 7m54.575858603s ago: executing program 1 (id=351): syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, 0x0) getpid() bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x20, 0x3, 0x0, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @netfilter=0x2d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) socket$isdn(0x22, 0x2, 0x11) r1 = openat$vmci(0xffffffffffffff9c, 0x0, 0x2, 0x0) ioctl$IOCTL_VMCI_QUEUEPAIR_ALLOC(r1, 0x7a8, 0x0) r2 = syz_open_procfs(0x0, &(0x7f00000042c0)='mounts\x00') read$FUSE(r2, &(0x7f0000000200)={0x2020}, 0x2020) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000000)='cifs\x00', 0x0, &(0x7f00000001c0)='=\n\x9b\xa1Q\x83\xe9\n@\xf6\"2a\xd7\x1fch\x1a}#\xfa\xe4\n\xdc[\x03\x97\xcd\xf1\xa6b\x9a\x1f\xff\xff\xffIT\xe4\x8c&\xac\xe6:\xc5\xe8\xd9\"\x82\xd5\xeb\x90\xef1:\xba\xc3\xc3\xd3\xad\'\xc44\x17,,\x8dZz\x04\x17-#F\xc7<\xe6\xf5]%gC\x9e\xca\nS\xc3\xc8\x98\xd8\xc8\x9eZ\xa76\x9f\xc2=\xaa\xcet7\xb9\xbd\xd47\xe3\xc8@$8\v\x9f\xfd\xe1!\x11\x19Y\x06J\x8f\x80\xef9Tw8\x1b\xe2\xf3\x85\xd5}\xa5\xb7\xd5|') modify_ldt$write(0x1, &(0x7f0000000000)={0x200, 0x100000, 0x400, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1}, 0x10) mknod$loop(&(0x7f0000000140)='./file0\x00', 0xfff, 0x0) execve(0x0, 0x0, 0xffffffffffffffff) bind$inet6(0xffffffffffffffff, 0x0, 0x0) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0xfffffeffffff7f7e, 0x0, 0x0) 7m47.825030036s ago: executing program 1 (id=358): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f00000000c0)='./file1\x00', 0x207, &(0x7f0000000000), 0x1, 0x469, &(0x7f0000000100)="$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") socket$key(0xf, 0x3, 0x2) r0 = syz_mount_image$hfsplus(&(0x7f0000000180), &(0x7f0000000000)='./file0\x00', 0x204802, &(0x7f0000000900)=ANY=[], 0x11, 0x6b1, &(0x7f0000000240)="$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") prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = fcntl$getown(r0, 0x9) syz_pidfd_open(r1, 0x0) openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000900), 0x40, 0x0) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mknod$loop(&(0x7f0000000000)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0xffffffffffffc000, 0x1) r5 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) sendmmsg$sock(r5, &(0x7f0000000cc0)=[{{&(0x7f0000000100)=@l2tp={0x2, 0x0, @broadcast, 0x3}, 0x80, 0x0}}, {{&(0x7f0000000700)=@in6={0xa, 0x4e20, 0x7, @dev={0xfe, 0x80, '\x00', 0x18}, 0x60}, 0x80, 0x0}}], 0x2, 0x48094) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='blkio.bfq.io_queued\x00', 0x275a, 0x0) syz_mount_image$udf(&(0x7f0000000000), &(0x7f0000000180)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x82, &(0x7f0000000a00)=ANY=[@ANYRES32=r5, @ANYRESDEC=0x0, @ANYBLOB="7a43ddb599526dacb1510b851ff68dc40bd032f6189e8acbb2217585240d787d9d6030390830ef5df3cf769fa7ae4bac3c928873ca"], 0xfd, 0xc58, &(0x7f00000019c0)="$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") fchown(0xffffffffffffffff, 0x0, 0x0) rename(&(0x7f0000000200)='./file1\x00', &(0x7f0000000280)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') 7m45.940326966s ago: executing program 1 (id=362): bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x0, 0x0, &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x6) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) socket$tipc(0x1e, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000380)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_io_uring_setup(0x10d, &(0x7f0000000140), &(0x7f0000000240)=0x0, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r3, 0x0, 0x0) clock_gettime(0x0, &(0x7f0000000300)={0x0, 0x0}) clock_nanosleep(0x1, 0x0, &(0x7f0000000480)={r4, r5+60000000}, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) gettid() timer_delete(0x0) futex_waitv(&(0x7f0000001080), 0x0, 0x0, 0x0, 0x1) syz_open_dev$dri(0x0, 0x1, 0x0) 7m41.857712803s ago: executing program 1 (id=367): r0 = bpf$MAP_CREATE_RINGBUF(0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) ioctl$BINDER_GET_FROZEN_INFO(0xffffffffffffffff, 0xc00c620f, 0x0) ioctl$sock_SIOCGPGRP(r0, 0x8904, &(0x7f0000000000)=0x0) ptrace$peek(0xffffffffffffffff, r1, &(0x7f0000000180)) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x6) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000040)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c000000000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r3}, 0x10) pipe2(0x0, 0x0) syz_clone(0x0, 0x0, 0xfffffe11, 0x0, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8) r5 = socket$nl_xfrm(0x10, 0x3, 0x6) syz_open_dev$evdev(&(0x7f0000000240), 0x3, 0x101202) sendmsg$nl_xfrm(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000480)=ANY=[@ANYBLOB="fc0000001900674c0000000000000000e0000001000000000000000000000000e000000200000000000000000000000000000000000000000a00000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="0000000000000000000000000000400000000000000000000000000000000000000000000000000001000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000010000000000000044000500000000000000000000000000000000000000000033"], 0xfc}}, 0x0) r6 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r6, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback}, 0x1c) sendmmsg(r6, &(0x7f0000000480), 0x21, 0x0) 7m40.288719356s ago: executing program 1 (id=372): socket$packet(0x11, 0x2, 0x300) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x3) syz_clone(0x0, 0x0, 0xfffffe11, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x3, r0, 0x1, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) bpf$TOKEN_CREATE(0x24, 0x0, 0x0) ioctl$KDFONTOP_GET(0xffffffffffffffff, 0x4b72, 0x0) mremap(&(0x7f00007d6000/0x3000)=nil, 0x3000, 0x3000, 0x0, &(0x7f00007d5000/0x3000)=nil) syz_genetlink_get_family_id$devlink(&(0x7f0000000140), 0xffffffffffffffff) pselect6(0x0, 0x0, 0x0, &(0x7f0000000200)={0x1fe}, 0x0, 0x0) sendmsg$802154_raw(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'netdevsim0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000140)=@newqdisc={0x40, 0x24, 0x4ee4e6a52ff56541, 0x70bd2c, 0x25dfdbfd, {0x0, 0x0, 0x0, r3, {}, {0xfff1, 0xffff}, {0xfff1, 0x1}}, [@qdisc_kind_options=@q_clsact={0xb}, @TCA_INGRESS_BLOCK={0x8, 0xd, 0x8}, @TCA_EGRESS_BLOCK={0x8, 0xe, 0x8}]}, 0x40}}, 0x0) sendmsg$netlink(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000008c0)}, 0x0) socket$packet(0x11, 0x2, 0x300) syz_emit_ethernet(0x106, 0x0, 0x0) 7m38.110576384s ago: executing program 1 (id=374): bind$inet(0xffffffffffffffff, &(0x7f0000000200)={0x2, 0x0, @local}, 0x10) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000003c0)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x10001, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x0, 0x10, &(0x7f0000000580)=@framed={{0x18, 0x5}, [@snprintf={{}, {}, {}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r1}, {0x7, 0x0, 0xb, 0x4}, {0x85, 0x0, 0x0, 0x95}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, @void, @value}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000580)=ANY=[], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000006c0)={&(0x7f0000000700)='kfree\x00', r2}, 0x10) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=ANY=[], 0x5c}}, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB, @ANYRES32, @ANYBLOB="000000000000000000000010000000", @ANYRES32=0x0], 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b70800000000002c7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r4}, 0x10) r5 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r5, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000b40)={&(0x7f0000000780)=@newsa={0x184, 0x10, 0x713, 0x0, 0x0, {{@in=@broadcast, @in6=@remote}, {@in6=@remote, 0x0, 0x32}, @in6=@mcast1, {}, {}, {}, 0x0, 0x0, 0x2}, [@algo_crypt={0x48, 0x2, {{'ecb(cipher_null)\x00'}}}, @algo_auth_trunc={0x4c, 0x14, {{'cmac(aes)\x00'}}}]}, 0x184}, 0x1, 0x0, 0x0, 0x20000015}, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000080)={'bridge_slave_0\x00'}) add_key$keyring(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x3}, 0x0, 0x0, 0x0) socket$key(0xf, 0x3, 0x2) r7 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000800), 0xffffffffffffffff) r9 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r9, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x20000005}, 0x4004) r10 = getpid() sendmsg$NL802154_CMD_SET_WPAN_PHY_NETNS(r7, &(0x7f0000000f40)={0x0, 0x0, &(0x7f0000000f00)={&(0x7f0000000000)={0x24, r8, 0x1, 0x0, 0x80000000, {}, [@NL802154_ATTR_WPAN_PHY={0x8}, @NL802154_ATTR_PID={0x8, 0x1c, r10}]}, 0x24}}, 0x0) 7m22.660987796s ago: executing program 33 (id=374): bind$inet(0xffffffffffffffff, &(0x7f0000000200)={0x2, 0x0, @local}, 0x10) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000003c0)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x10001, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x0, 0x10, &(0x7f0000000580)=@framed={{0x18, 0x5}, [@snprintf={{}, {}, {}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r1}, {0x7, 0x0, 0xb, 0x4}, {0x85, 0x0, 0x0, 0x95}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, @void, @value}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000580)=ANY=[], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000006c0)={&(0x7f0000000700)='kfree\x00', r2}, 0x10) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=ANY=[], 0x5c}}, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB, @ANYRES32, @ANYBLOB="000000000000000000000010000000", @ANYRES32=0x0], 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b70800000000002c7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r4}, 0x10) r5 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r5, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000b40)={&(0x7f0000000780)=@newsa={0x184, 0x10, 0x713, 0x0, 0x0, {{@in=@broadcast, @in6=@remote}, {@in6=@remote, 0x0, 0x32}, @in6=@mcast1, {}, {}, {}, 0x0, 0x0, 0x2}, [@algo_crypt={0x48, 0x2, {{'ecb(cipher_null)\x00'}}}, @algo_auth_trunc={0x4c, 0x14, {{'cmac(aes)\x00'}}}]}, 0x184}, 0x1, 0x0, 0x0, 0x20000015}, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000080)={'bridge_slave_0\x00'}) add_key$keyring(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x3}, 0x0, 0x0, 0x0) socket$key(0xf, 0x3, 0x2) r7 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000800), 0xffffffffffffffff) r9 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r9, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x20000005}, 0x4004) r10 = getpid() sendmsg$NL802154_CMD_SET_WPAN_PHY_NETNS(r7, &(0x7f0000000f40)={0x0, 0x0, &(0x7f0000000f00)={&(0x7f0000000000)={0x24, r8, 0x1, 0x0, 0x80000000, {}, [@NL802154_ATTR_WPAN_PHY={0x8}, @NL802154_ATTR_PID={0x8, 0x1c, r10}]}, 0x24}}, 0x0) 3m0.260168168s ago: executing program 3 (id=777): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000400)=@base={0xe, 0x4, 0x4, 0x3, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001280)={0x18, 0x3, &(0x7f0000000940)=ANY=[], &(0x7f0000000440)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) socket$inet(0x2, 0x4000000000000001, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8c}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f00000000c0)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SET_MM(0x23, 0x3, &(0x7f000068c000/0x3000)=nil) mlockall(0x2) shmctl$SHM_LOCK(0x0, 0xb) r4 = shmat(0x0, &(0x7f0000ff9000/0x4000)=nil, 0x1000) shmdt(r4) shmctl$SHM_UNLOCK(0x0, 0xc) bind$bt_hci(0xffffffffffffffff, 0x0, 0x0) write(0xffffffffffffffff, &(0x7f0000000000)="3f000000010000", 0x7) write$P9_RLERRORu(0xffffffffffffffff, &(0x7f0000000140)=ANY=[@ANYBLOB="1c00000007ffff0e"], 0x52) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000000)=@mangle={'mangle\x00', 0x64, 0x6, 0x510, 0x440, 0x1b8, 0x1b8, 0x358, 0x0, 0x440, 0x440, 0x440, 0x440, 0x440, 0x6, 0x0, {[{{@uncond, 0x0, 0xa8, 0xd0}, @common=@unspec=@NFQUEUE2={0x28, 'NFQUEUE\x00', 0x2, {0x0, 0x5}}}, {{@ipv6={@empty, @local, [], [0x0, 0x0, 0xffffff00], 'macvtap0\x00', 'ip6tnl0\x00', {}, {}, 0x11}, 0x0, 0xa8, 0xe8}, @inet=@TPROXY1={0x40, 'TPROXY\x00', 0x1, {0x0, 0x0, @ipv6=@ipv4={'\x00', '\xff\xff', @broadcast}}}}, {{@ipv6={@mcast2, @loopback, [], [], 'veth0_to_team\x00', 'syzkaller0\x00'}, 0x0, 0xa8, 0xd0}, @common=@unspec=@CLASSIFY={0x28, 'CLASSIFY\x00', 0x0, {0xa2}}}, {{@uncond, 0x0, 0xa8, 0xd0}, @inet=@DSCP={0x28, 'DSCP\x00', 0x0, {0xfe}}}, {{@ipv6={@mcast2, @dev={0xfe, 0x80, '\x00', 0x30}, [0x0, 0xffffff00, 0xffffff00], [0x1fe000000, 0x0, 0xffffff00, 0xffffffff], 'macvlan0\x00', 'bridge0\x00', {}, {}, 0x88, 0x5, 0x4, 0x1}, 0x0, 0xa8, 0xe8}, @inet=@TPROXY1={0x40, 'TPROXY\x00', 0x1, {0x0, 0x0, @ipv4=@dev}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x570) 2m58.745978536s ago: executing program 3 (id=779): prctl$PR_SET_SECCOMP(0x16, 0x2, 0x0) syz_mount_image$vfat(&(0x7f0000000040), &(0x7f0000000080)='./file0\x00', 0x101c0ca, &(0x7f0000000400)=ANY=[@ANYBLOB="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"], 0x6, 0x2c0, &(0x7f0000000900)="$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") set_tid_address(0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) ioctl$TIOCGSID(0xffffffffffffffff, 0x5429, &(0x7f00000000c0)=0x0) sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) bpf$ITER_CREATE(0x1d, 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x4000000000000, 0x40, &(0x7f0000000c00)=@raw={'raw\x00', 0x4001, 0x3, 0x248, 0x0, 0x720d, 0x148, 0x0, 0x148, 0x1b0, 0x240, 0x240, 0x1b0, 0x240, 0x7fffffe, 0x0, {[{{@ip={@initdev={0xac, 0x1e, 0x4, 0x0}, @initdev={0xac, 0x1e, 0x0, 0x0}, 0xffffffff, 0x0, 'veth1_macvtap\x00', 'pim6reg1\x00', {}, {0xff}, 0x1d, 0x3, 0x49}, 0x0, 0x70, 0xd0}, @common=@SET={0x60, 'SET\x00', 0x0, {{0xffffffffffffffff, [0x0, 0x0, 0x5, 0x1, 0x3], 0x2}, {0xffffffffffffffff, [0x1, 0xb2cc575b459b5b33, 0x7, 0x2, 0x2]}}}}, {{@uncond, 0x0, 0x98, 0xe0, 0x0, {}, [@inet=@rpfilter={{0x28}, {0x2}}]}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv4=@rand_addr=0x64010900, 'pim6reg0\x00', {0x80000001}}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x2a8) socket$alg(0x26, 0x5, 0x0) r4 = openat$sysfs(0xffffff9c, &(0x7f0000000340)='/sys/kernel/crash_elfcorehdr_size', 0x0, 0x38) preadv(r4, &(0x7f0000000140)=[{&(0x7f0000001240)=""/4089, 0xff9}], 0x1, 0x3, 0x0) syz_open_procfs(0xffffffffffffffff, 0x0) setgroups(0x0, 0x0) ioctl$MEDIA_IOC_ENUM_LINKS(0xffffffffffffffff, 0xc0287c02, 0x0) ioctl$MEDIA_IOC_SETUP_LINK(0xffffffffffffffff, 0xc0347c03, &(0x7f0000000400)={{}, {}, 0x10000000}) ioctl$MEDIA_IOC_ENUM_LINKS(0xffffffffffffffff, 0xc0287c02, 0x0) 2m57.640402669s ago: executing program 3 (id=780): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100008b}, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000180)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x11, 0xf, &(0x7f0000000340)=@ringbuf={{}, {{0x18, 0x1, 0x1, 0x0, r3}}, {}, [], {{}, {}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000001dc0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r4}, 0x2d) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_EXP_NEW(r5, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="580000000002010400000000000000000a00000004000180040003803c0002800c00028005000100010000002c00018014000300"], 0x58}}, 0x0) mkdirat(0xffffffffffffffff, 0x0, 0x10) socket$nl_route(0x10, 0x3, 0x0) r6 = socket$can_raw(0x1d, 0x3, 0x1) bind$can_raw(r6, &(0x7f0000000000), 0x10) setsockopt$CAN_RAW_FILTER(r6, 0x65, 0x1, &(0x7f00000000c0), 0x0) setsockopt$CAN_RAW_FILTER(r6, 0x65, 0x1, 0x0, 0x0) socket$packet(0x11, 0x2, 0x300) 2m56.260491171s ago: executing program 3 (id=784): openat$sw_sync(0xffffffffffffff9c, 0x0, 0x0, 0x0) syz_open_dev$mouse(&(0x7f0000000680), 0x0, 0x0) ioctl$vim2m_VIDIOC_EXPBUF(0xffffffffffffffff, 0xc0405610, &(0x7f0000000040)={0x2}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000480)=ANY=[@ANYBLOB="fc0000001900674c0000000000000000e0000001000000000000000000000000e000000200000000000000000000000000000000000000000a0000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="0000000000000000000000000000400000000000000000000000000000000000000000000000000001000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000010000000000000044000500000000000000000000000000000000000000000033"], 0xfc}}, 0x0) r4 = socket$inet6(0xa, 0x3, 0x7) connect$inet6(r4, &(0x7f00000000c0)={0xa, 0x0, 0xfffffffe, @empty}, 0x1c) sendmmsg(r4, &(0x7f0000000480), 0x2e9, 0xffd8) 2m53.740443759s ago: executing program 3 (id=787): r0 = io_uring_setup(0x1e95, 0x0) sendfile(r0, 0xffffffffffffffff, 0x0, 0x7) r1 = memfd_create(&(0x7f00000000c0)='\xfd\x0fm3#/\x00n\xaa\xaa\xe4\x01U\x8b\xc2\f\x03\x19\x9c\x8e\xcb\x90\x00\x00\xaegQ\x0e\x94\\y\x0fU2@\'\x8a\x80\x00$\x12\xfc\xe4.)\x9b\xf2@\xf0\xe0\xdb\x1f\xe6\xb4gc\x13\xda\xf9\xcd7el\xb7\xe6\b\x00\x00\x00\x00\xef\xff\x00vob/~\xc2\x00\b\x00\x00\x00\x00\x00\x00 \xff\xf1\xdem\x9c;%\xb5\"\xe4\xf1x2\x8a\x19p\x04\\\xaa-\x93\xd1\xc4 )\xbfK\xf7E\xf3\x05\xa0\xd0\xe6%\x97\x15\xf0\xab\x86\x90k\x10\xcer\x14\xe0a\xaf\xab\xfe\xd9V\x19\xa5d\x16\x8e]:3\xff\t\xe6\xf7\xb3\xbf\xa3\b[?\xb5\x14t\xd3\x8e\xc0\xe8\xefd\x88\xddz\xa25)\x17\xef\xfb4\xff\xdb\t\x8e\xeb\x1d\\\xf9\x14\xc7\v\xa8\x89\xdb A\xbaBAj\xfe\x18\xc3-+\xd6\xb0K\xee\x1b+\xc7lA\x84\xa6\xfe\x8bU<&\x1a\xe7m\x86\xb7\xa1A\xf9\x02S;C\x99\a.$K\x833\x82\x7f\x1b\'nj\x06\b\xb7\xe8] \x87A[y\xdc\x14\f\xcet\x00\x1f\x0f\xef\xca\xcfz\x7f\an0\xebB\xb8}&\xdd\xc9\xa7\x1dp\t\x9a\xceb \x81\xaaq{H\x88\xdf\xf8\x80\\\x1c8\xfe\xc4\xe3\xb0\x90\xcb\x8b1r\x94\x9f\x00\xce\xc8\xc3\x84\xa0\xc9\b\x00\x81Ks\xba\xbbC6\xd6\x13\xb5\xe086EzD\x18\xd5\x16\x88E\xc6\xf0A9\xf1u\xb3\x85\x02\x12\\Sp\xf4\x9a\xe8\x96^\xe6\xa8K\x12\b}\xff\xcb{\xc6\xf6\xb4\x8b\xb6\xa8Y\xf2\x91\xeeR\v#\xb5)\xb0\x99\x9b-p\xe3\x17\x04\xb0\xdc\x0fk\x11\xe1\x9a\a\x16\xb7\x9b\x88\xfa\x1e`\x84$\xfc\xd7\xf5^X\xd8[}\x032\xd0\x84\xdby\x94Vp\xa5\xcd(\xab\xb6\x95sR\xab\xfc\x8c\'\x9c\x16Q\xad\xbc\xb04%\xb7\xe5\x14\xb1`\x87#X\\W`;\'_4\xc5\xc9\x921<\xd9\xad\x9f\x12@!\xfaI\x88\xab\xef\x86\xe9\a>\xdd7\xb7\x8e\x9c0-o\xc9\xec_|\x02\xc8Ru\x95\xa8#U\xd6J\x87\xf6X\xb6{\x11$\x00\xc8\x14\xcb\xd1nK\xd8\xb9\x0e\x9bA\xed\xbcs\x1fS\r\x12O\x83\x15\xcb(\xdb\xb1S\x1f%\x04\x9a\xa0l\xa3}\xe7r\x02\x00\x00\x00\x8aeh;F[\xe2\x1c\xe26 \x19k&.\x7f\x1d~\xdaI\xd4\x99\a+\xdf]\xbc\xa6\xc3\x0f\x99W\x9c-t\v\xc7J\xfd\x91\x853\xd1j;\x19W\x96V\x8az+\xf9\x82#\xfaC\xa3YN:\xe8\xda\xbc\xb2h\x8f\xe0\xc6d\x96\xccy\xb3\xc2\x98\x1c\xca\xde\"\xaeW\x89\x83\xc2sB\xe7\b\x9b9~}\xc2\xb3\x1d\xcc?\xd1\x89\xef\xca\x00\x00\x00\x00\x00\x00\x00\x00\x00J[\xc4\x04\xc1\xa6\x10\xc2\x9d\x11\t|\xc0\t\xd9(\x80\xe6s\xaa\x88\x8a\xd6\xa2\x01\x10W]Z\x8d\xf7\xd1P\xf9d\x01|\xa3\x03hSq\x95\x8f\xe1J\xd3#/fcCz\xff\x80\xe2M\xa3-r\xf6\x1a\xd74\xdc\xe1\xe4\xc3\x9dU t}\x02\x9a{C|S\xf4\x98\x05\xb9\x15}\xfa\"\xdc\xc2r\xf9\a\xadnD\xb6\x06\xd3\'\x10\x9f|\x17\xd6\x89O\f\x98@\x85\xa5m\x9d\\&\x17o\x11Z=l\xfb\x93\x8exZ', 0x6) ioctl$FS_IOC_RESVSP(r1, 0x40305828, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x8010002}) fanotify_init(0x200, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) creat(&(0x7f0000000000)='./file0\x00', 0x0) readv(0xffffffffffffffff, 0x0, 0x0) connect$ax25(0xffffffffffffffff, &(0x7f0000000000)={{0x3, @null}, [@remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @bcast, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @bcast, @default, @bcast, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}]}, 0x48) r5 = syz_open_dev$vim2m(&(0x7f0000000000), 0x52cd, 0x2) ioctl$vim2m_VIDIOC_ENUM_FMT(r5, 0xc0405602, &(0x7f0000000040)={0x1c, 0x1, 0x0, "6106007722366ccef4ba566c4acd3d00e7bfeb8cace586d84a500000000800", 0x37303250}) r6 = socket(0x2, 0x80805, 0x0) setsockopt$inet_sctp6_SCTP_MAX_BURST(r6, 0x84, 0x14, &(0x7f0000000140)=@assoc_value={0x0, 0x48a3}, 0x8) mmap(&(0x7f0000000000/0x7000)=nil, 0x7000, 0xf, 0x97052, r1, 0x0) 2m52.661161004s ago: executing program 3 (id=789): r0 = socket$nl_generic(0x10, 0x3, 0x10) creat(&(0x7f0000000240)='./file0\x00', 0x0) pipe2$9p(&(0x7f0000001900)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r2, &(0x7f0000000500)=ANY=[@ANYBLOB="1500000065ffff048000000800395032303030"], 0x15) r3 = dup(r2) r4 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt(r4, 0x84, 0x81, &(0x7f0000000280)="1a00000002000000", 0x8) r5 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_MAX_BURST(r5, 0x84, 0xc, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) getsockopt$inet_sctp6_SCTP_AUTH_ACTIVE_KEY(r4, 0x84, 0x18, &(0x7f0000000080)={r6, 0xd}, &(0x7f00000000c0)=0x8) write$FUSE_BMAP(r3, &(0x7f0000000100)={0x18}, 0x18) write$FUSE_NOTIFY_RETRIEVE(r3, &(0x7f00000000c0)={0x14c}, 0x137) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f00000004c0), 0x10400, &(0x7f0000000700)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r1, @ANYBLOB=',wfdno=', @ANYRESHEX=r3, @ANYBLOB=',cache=mmap']) chmod(&(0x7f0000000140)='./file0\x00', 0x0) open$dir(&(0x7f0000000040)='./file0\x00', 0x400003, 0x4) r7 = open$dir(&(0x7f0000000140)='./file0\x00', 0x1, 0x0) r8 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='blkio.bfq.io_wait_time\x00', 0x275a, 0x0) ftruncate(r8, 0x2000009) sendfile(r7, r8, 0x0, 0x7ffff000) lstat(&(0x7f00000002c0)='./file0\x00', 0x0) clock_gettime(0x0, &(0x7f00000001c0)={0x0, 0x0}) clock_gettime(0x0, &(0x7f0000000200)={0x0, 0x0}) utimes(&(0x7f0000000180)='./file0\x00', &(0x7f0000000340)={{r9, r10/1000+60000}, {r11, r12/1000+60000}}) sendmsg$nl_generic(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)=ANY=[@ANYBLOB="2800000041000b0027bd7000004000000300000008000200", @ANYRES32=0x0, @ANYBLOB="0afa02c078a04905dd640000"], 0x28}}, 0x4040080) 2m36.114396662s ago: executing program 34 (id=789): r0 = socket$nl_generic(0x10, 0x3, 0x10) creat(&(0x7f0000000240)='./file0\x00', 0x0) pipe2$9p(&(0x7f0000001900)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r2, &(0x7f0000000500)=ANY=[@ANYBLOB="1500000065ffff048000000800395032303030"], 0x15) r3 = dup(r2) r4 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt(r4, 0x84, 0x81, &(0x7f0000000280)="1a00000002000000", 0x8) r5 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_MAX_BURST(r5, 0x84, 0xc, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) getsockopt$inet_sctp6_SCTP_AUTH_ACTIVE_KEY(r4, 0x84, 0x18, &(0x7f0000000080)={r6, 0xd}, &(0x7f00000000c0)=0x8) write$FUSE_BMAP(r3, &(0x7f0000000100)={0x18}, 0x18) write$FUSE_NOTIFY_RETRIEVE(r3, &(0x7f00000000c0)={0x14c}, 0x137) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f00000004c0), 0x10400, &(0x7f0000000700)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r1, @ANYBLOB=',wfdno=', @ANYRESHEX=r3, @ANYBLOB=',cache=mmap']) chmod(&(0x7f0000000140)='./file0\x00', 0x0) open$dir(&(0x7f0000000040)='./file0\x00', 0x400003, 0x4) r7 = open$dir(&(0x7f0000000140)='./file0\x00', 0x1, 0x0) r8 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='blkio.bfq.io_wait_time\x00', 0x275a, 0x0) ftruncate(r8, 0x2000009) sendfile(r7, r8, 0x0, 0x7ffff000) lstat(&(0x7f00000002c0)='./file0\x00', 0x0) clock_gettime(0x0, &(0x7f00000001c0)={0x0, 0x0}) clock_gettime(0x0, &(0x7f0000000200)={0x0, 0x0}) utimes(&(0x7f0000000180)='./file0\x00', &(0x7f0000000340)={{r9, r10/1000+60000}, {r11, r12/1000+60000}}) sendmsg$nl_generic(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)=ANY=[@ANYBLOB="2800000041000b0027bd7000004000000300000008000200", @ANYRES32=0x0, @ANYBLOB="0afa02c078a04905dd640000"], 0x28}}, 0x4040080) 19.024269446s ago: executing program 4 (id=995): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) sched_setaffinity(0x0, 0x0, 0x0) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000180)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x11, 0xf, &(0x7f0000000340)=@ringbuf={{}, {{0x18, 0x1, 0x1, 0x0, r3}}, {}, [], {{}, {}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000001dc0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r4}, 0x2d) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_EXP_NEW(r5, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="580000000002010400000000000000000a00000004000180040003803c0002800c00028005000100010000002c00018014000300"], 0x58}}, 0x0) mkdirat(0xffffffffffffffff, 0x0, 0x10) socket$nl_route(0x10, 0x3, 0x0) r6 = socket$can_raw(0x1d, 0x3, 0x1) bind$can_raw(r6, &(0x7f0000000000), 0x10) setsockopt$CAN_RAW_FILTER(r6, 0x65, 0x1, &(0x7f00000000c0), 0x0) setsockopt$CAN_RAW_FILTER(r6, 0x65, 0x1, 0x0, 0x0) socket$packet(0x11, 0x2, 0x300) 18.977269461s ago: executing program 2 (id=996): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000003c0)={0x18, 0x10, &(0x7f00000000c0)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x8, 0x0, 0x0, 0x41000, 0x3, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x37, @void, @value}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x6) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r1 = socket$alg(0x26, 0x5, 0x0) accept4$alg(r1, 0x0, 0x0, 0x80800) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000004002, 0x0) r5 = fsopen(&(0x7f0000000280)='cifs\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r5, 0x1, &(0x7f0000000200)='source', &(0x7f00000002c0)='\\/\xe9\x838\x9d<\f\x91\a\xd4$\xae$\x91&6n @\xf4M\xba\xf2<\xd6A\xdb\xd7\xbeY@g\xcc\xca\n@\x06\xa3\xfe%\x02\x96\xb7b\xa7\x15R.\xa3`fd\xdc\x8b\x18rBl{\x82\xda\xbeA\x17\n\f\xcd=\'\x11\x1bZ\x8e\xa1\xc3j$v\xefw\x96/\xff\xa2\xfc\xe3\xb8\xc7\x0f\xaaQ\x98F*T\xd5\xcd4g+\xbd\xd1\xe0R\x9d\x18\x19a:\xa2\xdf\xbe\x8b\x89\x81', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r5, 0x6, 0x0, 0x0, 0x0) r6 = dup(r4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000007, 0x38011, r6, 0x0) ioctl$SG_GET_KEEP_ORPHAN(r6, 0x2288, &(0x7f0000000240)) r7 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet6_IPV6_HOPOPTS(r7, 0x29, 0x36, &(0x7f00000000c0)=ANY=[], 0x8) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00304, 0x15) fadvise64(r4, 0x18, 0x0, 0x4) write$binfmt_register(r6, &(0x7f0000000540)={0x3a, 'syz0', 0x3a, 'M', 0x3a, 0x4d, 0x3a, '/dev/urandom\x00', 0x3a, '/dev/nullb0\x00', 0x3a, './file0', 0x3a, [0x4f, 0x4f, 0x4f, 0x50, 0x43, 0x4f, 0x46]}, 0x47) 17.433410563s ago: executing program 4 (id=999): r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) ioctl$int_in(r0, 0x40000000af01, 0x0) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000300)) r1 = syz_open_dev$sg(&(0x7f0000000040), 0x0, 0x2) prctl$PR_MCE_KILL(0x43, 0x0, 0x300) syz_mount_image$hfsplus(&(0x7f0000000140), &(0x7f0000000080)='./bus\x00', 0x810484, &(0x7f0000000340)=ANY=[@ANYRES64=0x0, @ANYRES64, @ANYRES8, @ANYRES64, @ANYRES16=0x0, @ANYRES16, @ANYRESDEC=0x0], 0x1, 0x675, &(0x7f0000001280)="$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") prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x3, &(0x7f0000000180)=@framed, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) add_key(&(0x7f0000000340)='dns_resolver\x00', &(0x7f0000000540)={'syz', 0x1}, &(0x7f0000000580)="fb9c", 0xfffff, 0x0) unlink(&(0x7f0000000280)='./file1\x00') ioctl$SCSI_IOCTL_STOP_UNIT(r1, 0x5319) socket$packet(0x11, 0x3, 0x300) ioctl$SCSI_IOCTL_TEST_UNIT_READY(r1, 0x2) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x0}) 16.58346162s ago: executing program 5 (id=1000): sched_setaffinity(0x0, 0x8, &(0x7f0000000040)) r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) preadv(r0, &(0x7f0000000240), 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x0, 0x0, 0x2, 0x0) prlimit64(0xffffffffffffffff, 0xf, &(0x7f0000000480)={0x8}, &(0x7f00000004c0)) r1 = socket$alg(0x26, 0x5, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000980)={0x0, 0x8, &(0x7f0000002e00)=ANY=[@ANYBLOB="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"/4141], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x49) prlimit64(0x0, 0x0, &(0x7f0000000140)={0x8, 0x8b}, 0x0) rt_sigaction(0x19, &(0x7f0000000000)={0xfffffffffffffffc, 0x0, 0x0}, 0x0, 0x0, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) io_submit(0x0, 0x0, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) connect$netlink(r3, &(0x7f0000000280)=@proc={0x10, 0x0, 0x25dfdbfc}, 0xc) rt_sigprocmask(0x0, &(0x7f0000000000)={[0xfffffffffffffffd]}, 0x0, 0x8) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f00000002c0)=ANY=[], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000140)='kmem_cache_free\x00', r4}, 0x10) sendmsg$nl_route(r3, &(0x7f0000000300)={&(0x7f0000000080), 0xc, &(0x7f00000001c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="1c00000020000f0000f901000000000002"], 0x1c}}, 0x0) setsockopt$netlink_NETLINK_DROP_MEMBERSHIP(r2, 0x10e, 0xc, &(0x7f00000000c0)=0x8004, 0x4) sendmsg$netlink(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000580)={0x1c, 0x56, 0x601, 0x0, 0x0, "", [@typed={0x7, 0x0, 0x0, 0x0, @str='\x00\x00\x00'}, @typed={0x4, 0x0, 0x0, 0x0, @binary}]}, 0x1c}], 0x1}, 0x0) bind$alg(r1, &(0x7f0000000280)={0x26, 'hash\x00', 0x0, 0x0, 'digest_null-generic\x00'}, 0x58) r5 = accept$alg(r1, 0x0, 0x0) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, 0x0, 0x0) recvmmsg(r5, &(0x7f0000006100), 0x49f, 0x0, 0x0) 16.57514039s ago: executing program 7 (id=1001): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x1, 0x4, 0x4, 0x4, 0x4, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) socketpair$unix(0x1, 0x2, 0x0, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={0x0}}, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000580)={0x0}, 0x18) r1 = socket$netlink(0x10, 0x3, 0x0) openat$rfkill(0xffffffffffffff9c, 0x0, 0x801, 0x0) syz_io_uring_setup(0x22f, &(0x7f0000000080)={0x0, 0x1, 0x10100}, &(0x7f0000000000)=0x0, &(0x7f0000000040)=0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00'}, 0x10) bpf$OBJ_PIN_MAP(0x6, &(0x7f0000000240)=@generic={&(0x7f0000000180)='./file0\x00', r0}, 0x18) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r5 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r5, 0x2, &(0x7f0000000200)=0x4) r6 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r6, &(0x7f0000019680)=""/102392, 0x18ff8) r7 = syz_open_dev$hiddev(&(0x7f0000000280), 0x5, 0x80002) read$hiddev(r7, &(0x7f0000000300)=""/229, 0xe5) sched_setaffinity(0x0, 0xfffffef7, &(0x7f0000000740)=0x410000002) socketpair(0x28, 0x20000000000001, 0x0, &(0x7f0000000100)) sendmsg$IPCTNL_MSG_CT_GET_STATS(r1, &(0x7f00000004c0)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000480)={&(0x7f0000000440)={0x14, 0x5, 0x1, 0x101, 0x0, 0x0, {0xa, 0x0, 0x6}, ["", "", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x20000004}, 0x0) syz_io_uring_submit(r2, r3, &(0x7f00000009c0)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd_index=0x3, 0x0, 0x0, 0xffffffffffffff31}) 15.236963606s ago: executing program 5 (id=1002): sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() syz_mount_image$jfs(&(0x7f0000000000), &(0x7f00000000c0)='./bus\x00', 0x2010880, &(0x7f0000000480)=ANY=[@ANYBLOB='discard=0x0000000000000001,gid=', @ANYRESHEX=0x0, @ANYBLOB="2c696f636861727365743d757466382c696e746567726974792c75737271756f74612c75737271756f74612c6e6f64697363617264006e6f646973636172642c756d61736b3d3078376666666666666666666666666b3d3078303030303030303030303030303030352c696f636861727365743d63703835372c696f636861727365743d6b6f69382d72752c6e6f696e746567726974792c646973636172642c0013f050947404e271e52c93e96c1d09fb1f75970f531614cfee15bd3aa2ff93bdd1e364317ee33f425708830000000000000000"], 0x9, 0x61c2, &(0x7f0000012d80)="$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") r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='memory.events.local\x00', 0x275a, 0x0) setrlimit(0x1, &(0x7f0000006300)={0xffffffffffffffff, 0xffffffffffffffff}) ftruncate(r1, 0x200ffffffff400) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x8) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) r4 = socket$kcm(0x10, 0x2, 0x10) setsockopt$sock_attach_bpf(r4, 0x10e, 0xa, &(0x7f0000000100), 0x4) process_vm_readv(r0, &(0x7f0000003640)=[{&(0x7f00000006c0)=""/66, 0x42}], 0x1, &(0x7f0000000140)=[{&(0x7f00000000c0)=""/12, 0xc}], 0x1, 0x0) sched_setaffinity(r0, 0x0, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) openat$ptp0(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$VHOST_GET_VRING_BASE(0xffffffffffffffff, 0xc008af12, &(0x7f00000001c0)) syz_genetlink_get_family_id$ethtool(&(0x7f0000000000), 0xffffffffffffffff) r5 = syz_io_uring_setup(0x10d, &(0x7f0000000300)={0x0, 0xce5d, 0x80, 0x0, 0x89}, &(0x7f0000000240)=0x0, &(0x7f0000000280)) syz_memcpy_off$IO_URING_METADATA_GENERIC(r6, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x3, &(0x7f0000000180)=ANY=[@ANYBLOB="3800a1b5d4530446d9930000000000009500feffffff0000"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r7}, 0x10) preadv(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) io_uring_enter(r5, 0x47f9, 0x0, 0x0, 0x0, 0x0) 15.236542316s ago: executing program 7 (id=1003): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r1 = socket$isdn_base(0x22, 0x3, 0x0) ioctl$IMGETCOUNT(r1, 0x80044944, &(0x7f0000000040)) r2 = socket$kcm(0x10, 0x2, 0x0) ioctl$KVM_REGISTER_COALESCED_MMIO(0xffffffffffffffff, 0x4010ae67, &(0x7f00000001c0)={0x4000, 0x100000}) r3 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r3, 0x107, 0x12, &(0x7f0000000140)={0x0, 0x803}, 0x4) sendmsg$kcm(r2, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000000)="2e00000010008188040f80ec59acbc0413a1810039000000000bf0fffffe00000e000a000f000000028002002d1f", 0x2e}], 0x1}, 0x0) r4 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r5 = socket(0x1, 0x2, 0x0) ioctl$sock_SIOCETHTOOL(r5, 0x8946, &(0x7f0000000080)={'netdevsim0\x00', &(0x7f0000000000)=@ethtool_perm_addr={0x33, 0x2000}}) r6 = socket$inet_tcp(0x2, 0x1, 0x0) r7 = openat$misdntimer(0xffffffffffffff9c, &(0x7f0000000040), 0x2041c2, 0x0) ioctl$IMDELTIMER(r7, 0x80044941, &(0x7f0000000180)) setsockopt$inet_tcp_TCP_REPAIR_WINDOW(r6, 0x6, 0x1d, &(0x7f0000000080)={0x0, 0x4, 0x32fe3cf8}, 0x14) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0xd, 0x4, &(0x7f0000000000)=@framed={{}, [@ldst={0x1, 0x0, 0x3, 0x9, 0x1, 0x64}]}, &(0x7f0000000080)='syzkaller\x00', 0x5, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r8 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x2) landlock_restrict_self(0xffffffffffffffff, 0x0) r9 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r9, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x5, 0x0, 0x0, {0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x2c, 0x3, 0xa, 0x101, 0x0, 0x0, {0x1, 0x0, 0x7}, [@NFTA_CHAIN_NAME={0x9, 0x3, 'syz1\x00'}, @NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWRULE={0x48, 0x6, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_RULE_EXPRESSIONS={0x20, 0x4, 0x0, 0x1, [{0x1c, 0x1, 0x0, 0x1, @reject={{0xb}, @val={0xc, 0x2, 0x0, 0x1, [@NFTA_REJECT_TYPE={0x8}]}}}]}, @NFTA_RULE_CHAIN_ID={0x8}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14}}, 0xbc}}, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r8, &(0x7f0000fe6000/0x18000)=nil, &(0x7f0000000140)=[@text16={0x10, &(0x7f0000000000)="36d8af10000f20e066355a0020000f22e0360f0144f23f7cec10a7148a10a7148a758a67f32e0f23e966b8010000000f01c1dbe20f01c3f0290b", 0x3a}], 0x1, 0x54, 0x0, 0x19) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r8, &(0x7f000000c000/0x18000)=nil, &(0x7f00000000c0)=[@text16={0x10, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r8, 0xae80, 0x0) 13.625908825s ago: executing program 4 (id=1004): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) socketpair(0x1, 0x80001, 0x0, &(0x7f0000000000)) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket$inet_icmp_raw(0x2, 0x3, 0x1) ioctl$sock_inet_SIOCADDRT(r3, 0x890b, &(0x7f0000000680)={0x0, {0x2, 0x100, @empty}, {0x2, 0x0, @loopback}, {0x2, 0x0, @broadcast}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}) ioctl$sock_inet_SIOCADDRT(r3, 0x890b, &(0x7f00000001c0)={0x0, {0x2, 0x0, @private}, {0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x3f}}, {0x2, 0x0, @broadcast}, 0x0, 0x0, 0x0, 0x0, 0xe, 0x0, 0x0, 0x399}) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) recvmmsg(r4, &(0x7f0000005c40)=[{{0x0, 0x0, &(0x7f0000000280)=[{&(0x7f0000000440)=""/233, 0xfffffffffffffff6}], 0x1}}], 0x1, 0x0, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000e40)=@IORING_OP_OPENAT2={0x1c, 0x0, 0x0, 0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, 0x28}, &(0x7f0000000100)='./file0\x00', 0x18}) openat$drirender128(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r5 = syz_open_dev$cec(&(0x7f0000000000), 0xffffffffffffffff, 0x0) socket(0x10, 0x2, 0x0) setresuid(0x0, 0x0, 0x0) add_key(&(0x7f0000000000)='big_key\x00', &(0x7f0000000280)={'syz', 0x1}, &(0x7f00000002c0)="1d", 0xfe3a, 0xfffffffffffffffe) add_key(&(0x7f0000000000)='big_key\x00', &(0x7f0000000280)={'syz', 0x1}, &(0x7f00000002c0)="1d", 0xfe3a, 0xfffffffffffffffe) ioctl$CEC_DQEVENT(r5, 0xc0506107, 0x0) 13.498254429s ago: executing program 2 (id=1005): r0 = socket$inet6(0xa, 0x3, 0xff) setsockopt$inet6_IPV6_RTHDR(r0, 0x29, 0x39, 0x0, 0x18) write$binfmt_elf64(r0, 0x0, 0x78) ioctl$VIDIOC_QUERYMENU(0xffffffffffffffff, 0xc040564a, &(0x7f0000000140)={0x0, 0x1, @value}) r1 = socket$inet6_mptcp(0xa, 0x1, 0x106) setsockopt$inet6_tcp_TCP_REPAIR_WINDOW(r1, 0x6, 0x1d, 0x0, 0x0) syz_io_uring_setup(0x31d9, &(0x7f00000004c0)={0x0, 0x0, 0x10100, 0x0, 0x341}, &(0x7f0000000280), &(0x7f0000000140)) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0x0) userfaultfd(0x801) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r5 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="02000000040000000800000001", @ANYRES32=0x0, @ANYBLOB="0000000000000300"/21, @ANYRES32=0x0, @ANYRES32=0x0], 0x48) r6 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x15, 0x1c, &(0x7f0000000d80)=@ringbuf={{0x18, 0x8, 0x0, 0x0, 0xd0}, {{0x18, 0x1, 0x1, 0x0, r6}, {}, {0x7, 0x0, 0xb, 0x6}, {0x85, 0x0, 0x0, 0x5}, {0x4}}, {{0x5, 0x0, 0x3}}, [@snprintf={{0x7, 0x0, 0xb, 0x2}, {0x3, 0x3, 0x6, 0xa, 0x9, 0xfff0, 0x41}, {0x5, 0x0, 0xb, 0x9, 0x0, 0x0, 0x4}, {0x3, 0x3, 0x3, 0xa, 0x9}, {0x6, 0x1, 0xb, 0xa, 0x8}, {0x7, 0x0, 0x0, 0x8}, {0x7, 0x1, 0xb, 0x4, 0x9, 0x20}, {}, {}, {0x18, 0x6, 0x2, 0x0, r5}, {}, {0x46, 0x8, 0xfff0, 0x76}}], {{0x7, 0x1, 0xb, 0x8}, {0x6, 0x0, 0x5, 0x8, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x7}}}, &(0x7f0000000980)='GPL\x00', 0x1, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @sk_reuseport, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='hugetlb.2MB.rsvd.usage_in_bytes\x00', 0x275a, 0x0) sendmsg$IEEE802154_LLSEC_SETPARAMS(0xffffffffffffffff, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000b40)={0x0}}, 0x4000000) 13.457069197s ago: executing program 6 (id=1006): socket(0x840000000002, 0x3, 0xff) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f0000003900)=ANY=[@ANYBLOB="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"], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10, 0x0, 0xffffffffffffffff, 0x2a, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x2e) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000540)='rcu_utilization\x00', r0}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x0, 0x0) r1 = getpid() bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000080)={{}, 0x0, &(0x7f0000000040)}, 0x20) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = epoll_create(0x207ffd) r5 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x0) epoll_ctl$EPOLL_CTL_ADD(r4, 0x1, r5, &(0x7f0000000280)={0x70002012}) mlockall(0x7) mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x4000002, 0x50032, 0xffffffffffffffff, 0x0) syz_clone(0x80000480, 0x0, 0x0, 0x0, 0x0, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) prlimit64(0x0, 0xe, 0x0, 0x0) mlockall(0x7) epoll_pwait(r4, &(0x7f0000000180)=[{}], 0x1, 0x0, 0x0, 0x0) 12.54188165s ago: executing program 4 (id=1007): r0 = openat(0xffffffffffffff9c, 0x0, 0x141042, 0x68) pwritev2(r0, &(0x7f00000001c0)=[{0x0}], 0x1, 0xe7b, 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f00000002c0)='./file1\x00', 0x42, 0x0) writev(0xffffffffffffffff, &(0x7f0000000140)=[{&(0x7f0000001200)}], 0x1) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x48000, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000040)=ANY=[], 0x48) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x6, 0x7}, 0x0) sched_setaffinity(0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x1) read$msr(r1, &(0x7f0000032680)=""/102392, 0x18ff8) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000d40)={0x60, 0x2, 0x6, 0x5, 0x0, 0x0, {}, [@IPSET_ATTR_TYPENAME={0xe, 0x3, 'bitmap:ip\x00'}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_DATA={0x18, 0x7, 0x0, 0x1, [@IPSET_ATTR_CIDR={0x5, 0x3, 0x1f}, @IPSET_ATTR_IP={0xc, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @initdev={0xac, 0x1e, 0x1, 0x0}}}]}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}]}, 0x60}}, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) socket$alg(0x26, 0x5, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000002b00)={0x0, 0x0, &(0x7f00000006c0)}, 0x20008040) sendmsg$IPSET_CMD_ADD(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000100)={0x2c, 0x9, 0x6, 0x201, 0x0, 0x0, {}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_DATA={0x4}]}, 0x2c}, 0x1, 0x0, 0x0, 0x10000047}, 0x4000084) syz_pidfd_open(0x0, 0x0) r4 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_RX_RING(r4, 0x11b, 0x2, &(0x7f0000000180)=0x200000, 0x4) socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(0xffffffffffffffff, 0x84, 0x1d, &(0x7f0000000000), &(0x7f0000000040)=0x4) getsockopt$XDP_STATISTICS(r4, 0x11b, 0x7, &(0x7f00000003c0), &(0x7f0000000400)=0x18) 10.586138479s ago: executing program 6 (id=1008): r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) setsockopt$bt_hci_HCI_TIME_STAMP(r0, 0x0, 0x3, &(0x7f0000000000)=0xb, 0x4) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000580)={0xffffffffffffffff, 0xe0, &(0x7f0000000680)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, &(0x7f0000000440)=[0x0, 0x0], 0x0, 0x13, &(0x7f0000001140), 0x0, 0x10, &(0x7f0000000fc0), 0x0, 0x0, 0xd0, 0x8, 0x8, &(0x7f0000000540)}}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000300)=ANY=[@ANYBLOB="180000000000000000000000fcffff", @ANYRES32], &(0x7f0000000380)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x14, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f0000000200)={'vxcan1\x00', 0x0}) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000002d00000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', r2, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r3 = open(&(0x7f00000001c0)='./file0\x00', 0x80ff, 0x88) r4 = open(&(0x7f0000000040)='./file0\x00', 0x0, 0x0) r5 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r5}, &(0x7f0000000000)=0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000380)={{}, &(0x7f0000000b00), &(0x7f0000000300)}, 0x20) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000300)='kmem_cache_free\x00', r7}, 0x10) r8 = socket(0x10, 0x3, 0x9) connect$netlink(r8, 0x0, 0x0) ftruncate(0xffffffffffffffff, 0xc17a) sendmsg$NFT_BATCH(r8, 0x0, 0x0) timer_settime(r6, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) fcntl$setlease(r4, 0x400, 0x1) fcntl$setlease(r3, 0x400, 0x0) openat$dir(0xffffffffffffff9c, &(0x7f00000003c0)='./file0\x00', 0x0, 0x0) fcntl$setlease(r4, 0x400, 0x0) creat(0x0, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) 10.569657842s ago: executing program 2 (id=1009): r0 = syz_init_net_socket$x25(0x9, 0x5, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setscheduler(r1, 0x1, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x1, 0x0) r4 = socket$netlink(0x10, 0x3, 0xc) bind$netlink(r4, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) setsockopt$sock_int(r4, 0x1, 0x8, &(0x7f0000000200), 0x4) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000004c0)={0x94, 0x0, 0x1, 0x401, 0x0, 0x0, {0xa}, [@CTA_TUPLE_ORIG={0x3c, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @empty}, {0x14, 0x4, @mcast1}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TUPLE_REPLY={0x3c, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @local}, {0x14, 0x4, @local}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TIMEOUT={0x8}]}, 0x94}}, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) r6 = syz_open_dev$dri(&(0x7f0000000000), 0x1ff, 0x0) r7 = syz_open_dev$dri(&(0x7f0000000000), 0x1ff, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r7, 0xc04064a0, &(0x7f0000000700)={0x0, &(0x7f0000000640)=[0x0], 0x0, 0x0, 0x0, 0x1}) syz_open_dev$dri(&(0x7f00000008c0), 0xd21, 0x0) ioctl$DRM_IOCTL_MODE_GETCRTC(r7, 0xc06864a1, &(0x7f0000000440)={0x0, 0x0, r8, 0x0}) ioctl$DRM_IOCTL_MODE_PAGE_FLIP(r6, 0xc01864b0, &(0x7f0000000080)={r8, r9}) ioctl$SIOCX25SCALLUSERDATA(r0, 0x89e5, &(0x7f0000002680)={0xa, "fde22bcadfdad43cf10d69ae9070108ead3574fc99cfb30855a49874b70cf1cb401bb63cfea3367da354b990eaa0dedb2b475d2839e0cb71c9b3914d3928b8de67e9552188f9fe34bf05a15a706c0f1b444f1d244944aa98b2f71608b1c8efe5eee36d42411318af9211ec639cdeadcd8762bd6999f6beeab3a46eab56a2ea08"}) 9.401855129s ago: executing program 2 (id=1010): syz_io_uring_setup(0xd2, &(0x7f0000000480)={0x0, 0x0, 0x0, 0xfffffffc}, 0x0, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xe, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz0\x00', 0x1ff) io_uring_setup(0x3e75, 0x0) r3 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r3, 0x84, 0x64, &(0x7f0000000080), 0x0) r4 = socket(0x10, 0x3, 0x0) sendmsg$inet(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000180)="1c00000021006bcd210002006e04fcff80000010000000017aa60864", 0x1c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_RENAME(r5, 0x0, 0x40040) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x9, 0xc, &(0x7f00000002c0)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_sock=0xc, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f0000000100)='kmem_cache_free\x00', r6}, 0xe) syz_io_uring_setup(0x83f, &(0x7f00000000c0)={0x0, 0xa9ee, 0x400, 0x3, 0x8002ae}, &(0x7f0000000140), &(0x7f0000000280)) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r3, 0x84, 0x6f, &(0x7f00000000c0)={0x0, 0x10, &(0x7f0000000040)=[@in={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x20}}]}, 0x0) 9.312658275s ago: executing program 6 (id=1011): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0x5, 0x4, 0x8, 0xa, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000002200000018010000202070250000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r0 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) setsockopt$inet_sctp6_SCTP_AUTH_KEY(0xffffffffffffffff, 0x84, 0x17, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) syz_mount_image$bfs(&(0x7f0000006700), &(0x7f0000006580)='./file0\x00', 0x0, &(0x7f0000002500)=ANY=[@ANYBLOB="9fcef773371e4e035a4ff190bea4efd68642046c23be8a9aae70a0043860f98931e9a9d2a4cb9b6cbfab8d88542eafc9851179a8bc28dad0fbfc05804b2b"], 0x1, 0x8a, &(0x7f0000000180)="$eJzszqENAkEUBNDhDKhrAEEH1wOlECQ4FISEimiFEugAgcUcYsGsxCy5vJf8n0zGzO11XaZPxksyVg7H026zLz9MUpdknmSRZNWX/FiXbvbp78/z9nut9wIAAL/rMtR5aDYGAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA4A+9AwAA///rYCNS") open(0x0, 0x147842, 0x184) syz_mount_image$msdos(&(0x7f0000000180), &(0x7f0000000100)='.\x00', 0xe1, &(0x7f00000001c0)=ANY=[], 0x0, 0x0, &(0x7f0000000000)) creat(0x0, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) bind$rds(0xffffffffffffffff, 0x0, 0x0) sendmsg$rds(0xffffffffffffffff, &(0x7f0000000080)={&(0x7f0000000040)={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, 0x0}, 0x0) ioctl$PTP_PEROUT_REQUEST2(r0, 0x40383d0c, &(0x7f0000000040)={{0xffffff7f00000000}, {}, 0x0, 0x6}) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000940)='percpu_alloc_percpu\x00'}, 0x10) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000300)=@bpf_lsm={0xd, 0x5, &(0x7f0000000040)=@framed={{0x26, 0xa, 0x0, 0x0, 0x0, 0x61, 0x10, 0x94}, [@initr0]}, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x1b, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) 9.125235041s ago: executing program 5 (id=1012): syz_init_net_socket$ax25(0x3, 0x2, 0x1) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xe, 0x8b}, 0x0) setsockopt$MRT6_ADD_MFC(0xffffffffffffffff, 0x29, 0xcc, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) syz_open_dev$usbfs(0x0, 0x80000000003, 0x101301) socket$inet_tcp(0x2, 0x1, 0x0) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x10) syz_genetlink_get_family_id$devlink(&(0x7f0000000600), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000880)={0x20, 0x40, 0x9, 0xfffffffc, 0x25dfdbfd, {0x2}, [@typed={0x4, 0x11f}, @nested={0x8, 0x1, 0x0, 0x1, [@nested={0x4, 0x65}]}]}, 0x20}, 0x1, 0x0, 0x0, 0x8000}, 0x0) 7.011809511s ago: executing program 2 (id=1013): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = syz_open_dev$MSR(&(0x7f0000000040), 0x8, 0x0) read$msr(r0, &(0x7f0000000300)=""/214, 0xd6) r1 = getpid() r2 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) ioctl$sock_netrom_SIOCADDRT(r2, 0x890b, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) timer_create(0x2, &(0x7f0000000000)={0x0, 0x29, 0x1, @thr={0x0, 0x0}}, 0x0) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) syz_mount_image$cramfs(&(0x7f0000000680), &(0x7f0000000180)='./file2\x00', 0x200014, &(0x7f00000006c0)=ANY=[], 0x1, 0x158, &(0x7f0000000500)="$eJzs0b9rGmEcx/H3449eW38WLNgOpdChYhHPE7t10FKpUHvQIoEMIaAnCWgiCuFGkzlD/oAbErKKQ8iYITFLTBSC+TvcAhkT7k5JhAz5A57Xcsfn+7m7557n149xgih4cQig1TY6HaP2+Z8eLv4/Oj4J2wMFeO1Umq22Xa65D5zmYc2++gLMnYc8QMMIVzcbdm2ahwRQCED954rTmW7DWw8UYlBfbxiZWZb4AoP3bqY9k2Vn2UcfFCJupgL3B/DV/sa7x/fdAqbldxelsMC05nep5CdjVyt+OAzGvVQM4e6Cad2kh6nrdL83GY/Kf/SyPs5q2vesmlHV3ES/GpVy3T18v4NbsOz0v/V7l39Hw1Iq6exlBXYEWAJ6ApaU6ZkIAYP9O70ZUWJvgI0oCNN6OhGzVTmTi+pq3D9PnLPpLvzEKyRJkiRJkiRJkiTpRR4CAAD//1a+VMg=") sched_setaffinity(0x0, 0xfffffef7, &(0x7f0000000740)=0x410000002) r4 = socket$xdp(0x2c, 0x3, 0x0) mmap$xdp(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x0, 0x42032, r4, 0x0) mremap(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x1000, 0x0, &(0x7f00008b5000/0x1000)=nil) r5 = syz_open_dev$usbfs(&(0x7f0000000100), 0x76, 0x101301) fanotify_init(0x0, 0x0) r6 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) getsockopt$WPAN_SECURITY_LEVEL(r6, 0x0, 0x2, 0x0, 0x0) r7 = openat$binfmt(0xffffffffffffff9c, 0x0, 0x41, 0x1ff) write$binfmt_elf64(r7, &(0x7f00000006c0)=ANY=[], 0x18) ioctl$USBDEVFS_FREE_STREAMS(r5, 0x802c550a, &(0x7f0000000000)=ANY=[]) 6.999762335s ago: executing program 4 (id=1014): bpf$MAP_CREATE(0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, 0x0, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) mmap(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0xb, 0x28011, r1, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_open_dev$tty1(0xc, 0x4, 0x1) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000001780)=ANY=[@ANYRES32=0x0, @ANYBLOB="00000000000000000000000000000000000000006c000000fc01000000000000000000000000000000000000000000000000000000000000000000000000000000ffffffff000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000c000000000000000100000000000000000000000000000000000000000000000000000a00000000000000480003006465666c61746500"/219], 0x134}}, 0x0) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, 0x0) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) ioctl$FITHAW(r0, 0xc0045878) wait4(0x0, &(0x7f0000000000), 0x100000000, &(0x7f0000000300)) openat$nullb(0xffffffffffffff9c, 0x0, 0x14d802, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000002, 0x4000810, 0xffffffffffffffff, 0x63) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) r3 = socket$kcm(0x10, 0x2, 0x4) sendmsg$inet(r3, 0x0, 0x0) bind$alg(0xffffffffffffffff, 0x0, 0x0) sendmsg$netlink(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, 0x0}, 0x0) 6.988211397s ago: executing program 6 (id=1015): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) r1 = socket(0x1, 0x1, 0x0) ioctl$sock_ifreq(r1, 0x8994, &(0x7f0000000040)={'batadv0\x00', @ifru_mtu=0x8}) syz_mount_image$nilfs2(&(0x7f0000000ec0), &(0x7f0000000100)='./file1\x00', 0x2008054, &(0x7f0000000400)=ANY=[@ANYRES8=0x0, @ANYRES8, @ANYRES32, @ANYRESHEX=0x0, @ANYRESDEC, @ANYBLOB="ac7b4efdd021fbb1d8ee6b170048105967759c5affb8c9a311dd24fa1fec64c3a032d17a1e12f67c0871188469a7b76eb91f0780a9be55ba0927c1e8a8cb84156181c4a8f7d14bcc78240dd07a852a874996a38fb6980492dc69488c8b853e837a5dfa02670ac7445b12c5577d7553127077bacf4d511e7163a93892b8a6ef9777456cc642cb6abccee8121783945547a8b4a6d257cf9fc5043c781271c9f6179c145b15fa52", @ANYRES64=0x0, @ANYRES16, @ANYRESHEX=0x0], 0x1, 0xf59, &(0x7f0000000f00)="$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") r2 = openat(0xffffffffffffff9c, &(0x7f0000000080)='.\x00', 0x0, 0x0) ioctl$FS_IOC_GET_ENCRYPTION_KEY_STATUS(r2, 0x40186e8d, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f00000000c0)={0x0, 0x10, &(0x7f00000002c0)=[@in={0x2, 0x4e20, @local}]}, &(0x7f0000000100)=0x10) recvmmsg(r0, &(0x7f0000000c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x201, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000340)='cpuacct.usage_sys\x00', 0x275a, 0x0) write$binfmt_script(r3, 0x0, 0x0) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r5, 0xae60) r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0) r7 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r8 = ioctl$KVM_CREATE_VM(r7, 0xae01, 0x0) ioctl$KVM_XEN_HVM_CONFIG(r8, 0x4038ae7a, 0x0) syz_kvm_setup_cpu$x86(r5, 0xffffffffffffffff, &(0x7f0000003000/0x18000)=nil, &(0x7f0000000300)=[@textreal={0x8, 0x0}], 0x1, 0x0, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r6, &(0x7f00003e1000/0x18000)=nil, &(0x7f00000001c0)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) futimesat(r3, &(0x7f0000000080)='./file2\x00', &(0x7f00000000c0)={{}, {0x0, 0xea60}}) ioctl$KVM_SET_REGS(r6, 0x4090ae82, &(0x7f0000000200)={[0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40000000000, 0xfffffffffffffffe], 0x0, 0x200394}) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x1, 0x10012, r6, 0x0) ioctl$KVM_RUN(r6, 0xae80, 0x0) 6.928370627s ago: executing program 7 (id=1016): mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) inotify_init1(0x800) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f0000000000)=0x5) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000001700)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="160000000000000004000000ff0000", @ANYBLOB, @ANYBLOB], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x42, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r4 = socket$igmp6(0xa, 0x3, 0x2) setsockopt$MRT6_DONE(r4, 0x29, 0xc9, 0x0, 0x0) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000280)={&(0x7f0000000040)='sched_switch\x00', r5}, 0x18) r6 = syz_open_procfs(0xffffffffffffffff, &(0x7f00000006c0)='net/route\x00') syz_mount_image$ext4(&(0x7f0000000140)='ext4\x00', &(0x7f00000005c0)='./file1\x00', 0xc248, &(0x7f0000000180), 0x83, 0x5f2, &(0x7f0000000600)="$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") socket$xdp(0x2c, 0x3, 0x0) mremap(&(0x7f0000186000/0x1000)=nil, 0x1000, 0x3000, 0x3, &(0x7f00000ad000/0x3000)=nil) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) read$msr(r6, &(0x7f00000004c0)=""/208, 0xd0) 4.624038562s ago: executing program 5 (id=1017): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r1 = socket$pppl2tp(0x18, 0x1, 0x1) r2 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r1, 0x0, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(r2, 0x29, 0x23, &(0x7f0000000540)={{{@in, @in6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0xa}, {}, {}, 0x0, 0x0, 0x1}, {{@in=@multicast2, 0x0, 0x32}, 0x0, @in6=@mcast2}}, 0xe8) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$l2tp(0x0, 0xffffffffffffffff) sendmsg$L2TP_CMD_TUNNEL_GET(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)={0x14, r4, 0x325, 0x0, 0x0, {0x8}}, 0x14}}, 0x0) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r6, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB], 0x48) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000280)={&(0x7f0000000000)=ANY=[@ANYBLOB="9feb010018000000000000003000000030000000020000000000000001000004080000000000000002000000200000000000000000000009030000000000000000000004"], 0x0, 0x4a, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x20) r7 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TIOCSETD(r7, 0x5423, &(0x7f0000000100)=0x2) syz_emit_ethernet(0x82, &(0x7f0000000300)={@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}, @local, @val={@val={0x88a8, 0x3, 0x1, 0x1}, {0x8100, 0x0, 0x0, 0x4}}, {@ipv6={0x86dd, @gre_packet={0x1, 0x6, "0961d3", 0x44, 0x2f, 0xff, @private1={0xfc, 0x1, '\x00', 0x1}, @loopback, {[], {{0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x880b, 0x0, 0x3}, {0x1}, {0x0, 0x0, 0x1, 0x1}, {0x8, 0x88be, 0x1, {{0x6, 0x1, 0x8, 0x3, 0x0, 0x0, 0x3, 0x2}, 0x1, {0x9}}}, {0x8, 0x22eb, 0x4, {{0x1, 0x2, 0x1, 0x3, 0x1, 0x3, 0x7, 0x6}, 0x2, {0x9, 0xe, 0x0, 0x0, 0x1, 0x0, 0x3, 0x1}}}}}}}}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x6, 0x6, &(0x7f0000000000)=@framed={{0xffffffb4, 0x9, 0x0, 0x0, 0x0, 0x61, 0x11, 0x10}, [@func={0x85, 0x0, 0x1, 0x0, 0x2}, @call={0x85, 0x0, 0x0, 0x8}, @exit]}, &(0x7f0000000080)='GPL\x00', 0x4, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x4, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0xe, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x70) 4.20539598s ago: executing program 7 (id=1018): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20000008b}, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0}, 0x10) openat$adsp1(0xffffffffffffff9c, 0x0, 0x8200, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="02000000040000000800000006"], 0x48) r4 = socket(0x1, 0x5, 0x0) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0x12, 0x4, 0x4, 0x12, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000640)=ANY=[@ANYRES32=r5, @ANYRES32, @ANYRES64=r4], 0x10) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000180)={r5, &(0x7f0000000040), &(0x7f0000000100)=@tcp=r4}, 0x20) r6 = syz_open_dev$vim2m(&(0x7f0000000080), 0x1, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r6, 0xc0145608, &(0x7f00000000c0)={0x2, 0x1, 0x1}) ioctl$vim2m_VIDIOC_STREAMOFF(r6, 0x40045612, &(0x7f0000000000)=0x1) socket$inet6_sctp(0xa, 0x0, 0x84) fanotify_mark(0xffffffffffffffff, 0x1, 0x0, 0xffffffffffffffff, 0x0) ioctl$vim2m_VIDIOC_QBUF(r6, 0xc058560f, &(0x7f0000000140)=@multiplanar_mmap={0x0, 0x1, 0x4, 0x0, 0x0, {0x0, 0x2710}, {}, 0x0, 0x1, {0x0}}) close(r6) 4.181326127s ago: executing program 4 (id=1019): r0 = socket$vsock_stream(0x28, 0x1, 0x0) bind$vsock_stream(r0, &(0x7f0000000040)={0x28, 0x0, 0x2710}, 0x10) listen(r0, 0x0) r1 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r1, &(0x7f0000000640)={0x28, 0x0, 0x2710}, 0x10) syz_open_dev$vim2m(0x0, 0x200000000000000, 0x2) socket$can_j1939(0x1d, 0x2, 0x7) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) socket$inet6(0x10, 0x80000, 0x0) syz_open_dev$sg(0x0, 0x0, 0x101005) r2 = socket$inet_sctp(0x2, 0x400000000001, 0x84) sendto$inet(r2, 0x0, 0x0, 0x0, &(0x7f0000000040)={0x2, 0x4e24, @remote}, 0x10) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r4 = dup(r3) write$6lowpan_enable(r4, &(0x7f0000000000)='0', 0xfffffd2c) r5 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r5, 0x3b81, 0x0) ioctl$IOMMU_VFIO_IOAS$SET(r5, 0x3b88, &(0x7f00000002c0)={0xc}) ioctl$IOMMU_VFIO_SET_IOMMU(r5, 0x3b66, 0x1) pselect6(0x40, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x2}, 0x0, &(0x7f0000000140)={0x1ff, 0x0, 0x0, 0x0, 0x0, 0x80, 0x0, 0xffffffffffffffff}, 0x0, 0x0) pselect6(0x40, &(0x7f00000000c0), 0x0, &(0x7f0000000140)={0x1ff}, 0x0, 0x0) syz_create_resource$binfmt(0x0) shutdown(r1, 0x0) 3.517310334s ago: executing program 2 (id=1020): r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x200, 0x0) mkdir(&(0x7f00000000c0)='./file0\x00', 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x6) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, 0x0, 0x0, 0x2, 0x0) socket$inet6_icmp(0xa, 0x2, 0x3a) sched_setaffinity(0x0, 0xfffffffffffffc33, &(0x7f0000000280)=0x2) r3 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r3, 0x29, 0x20, &(0x7f0000000000)={@mcast2={0xff, 0x5}, 0x0, 0x0, 0x2, 0x3}, 0x20) syz_open_procfs$namespace(0x0, &(0x7f0000000280)='ns/net\x00') capset(&(0x7f0000000340)={0x20071026}, &(0x7f0000000040)={0x6, 0x200001, 0xffffffff, 0x0, 0x0, 0x6}) mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000200)='ecryptfs\x00', 0x0, &(0x7f0000000040)=',l,io%bfq.io_serviced_recu\xd4\x0f\xe8rsi\x18\xc6\x8b\x8f\x1e\xa1}\xcd\x0f\xb8\xca\xbc(\xa9zm\xd4bE\x7f1\xf4\xc6\xac\b\xd0qd1\v\x98K') r4 = dup(r0) write$6lowpan_enable(r4, &(0x7f0000000000)='0', 0xfffffd2c) r5 = syz_io_uring_setup(0x239, &(0x7f0000000380)={0x0, 0x200000, 0x10100, 0x0, 0x217, 0x0, r4}, &(0x7f0000000180)=0x0, &(0x7f00000001c0)=0x0) syz_io_uring_submit(r6, r7, &(0x7f0000000040)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3}) io_uring_enter(r5, 0x2def, 0x4000, 0x0, 0x0, 0x0) poll(&(0x7f0000b2c000)=[{}], 0x2c, 0xffffffffffbffff8) 3.116540443s ago: executing program 5 (id=1021): bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mknod(&(0x7f0000000040)='./file0\x00', 0x0, 0x0) r3 = openat$fuse(0xffffffffffffff9c, &(0x7f00000001c0), 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000140), 0x0, &(0x7f0000002380)={{'fd', 0x3d, r3}, 0x2c, {'rootmode', 0x3d, 0x8000}}) read$FUSE(r3, &(0x7f0000008600)={0x2020, 0x0, 0x0}, 0x204b) open(&(0x7f00000000c0)='./file0\x00', 0x0, 0x0) write$FUSE_INIT(r3, &(0x7f0000002300)={0x50, 0x0, r4, {0x7, 0x9}}, 0x50) read$FUSE(r3, &(0x7f0000004580)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INTERRUPT(r3, &(0x7f0000002240)={0x10, 0xffffffffffffffda, r5}, 0x10) r6 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) dup3(r6, r3, 0x0) r7 = open$dir(&(0x7f0000000140)='./file0\x00', 0x1, 0x0) r8 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='blkio.bfq.io_wait_time\x00', 0x275a, 0x0) ftruncate(r8, 0x2000009) sendfile(r7, r8, 0x0, 0x7ffff000) 1.453111217s ago: executing program 6 (id=1022): r0 = socket(0x2, 0x80805, 0x0) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) socket$inet6_udp(0xa, 0x2, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r2}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) openat$dir(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x1, 0x0) r6 = landlock_create_ruleset(&(0x7f0000000140)={0x4000}, 0x18, 0x0) landlock_restrict_self(r6, 0x0) truncate(&(0x7f0000000240)='./file0\x00', 0x1) openat$sndtimer(0xffffffffffffff9c, 0x0, 0x8000) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) getsockopt$inet_sctp6_SCTP_MAX_BURST(r1, 0x84, 0x83, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000300)=0x8) setsockopt$inet_sctp6_SCTP_AUTH_DELETE_KEY(r0, 0x84, 0x19, &(0x7f0000000100)={r7, 0xa}, 0x8) 1.316441536s ago: executing program 7 (id=1023): r0 = socket$unix(0x1, 0x5, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000240)) r1 = openat$sw_sync(0xffffffffffffff9c, &(0x7f0000001700), 0x0, 0x0) ioctl$SW_SYNC_IOC_CREATE_FENCE(r1, 0xc0285700, &(0x7f0000000080)={0x1, "0600000000000000c64c3b6e6ff82a75e5318fca4288c2ffbdbec772020acd2c", 0xffffffffffffffff}) r3 = openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$SW_SYNC_IOC_CREATE_FENCE(r3, 0xc0285700, &(0x7f0000000440)={0x80, "421ae375378525f149154c9422ad0644f47d3bd7aaa45d6bb4823ab4c98100", 0xffffffffffffffff}) ioctl$SYNC_IOC_MERGE(r2, 0xc0303e03, &(0x7f00000000c0)={"e50d1af8899401000000010000007ea261dd00ff000000000000000000170020", r4}) dup3(r4, r1, 0x0) pselect6(0x40, &(0x7f0000000140), 0x0, &(0x7f00000002c0)={0x3ff}, &(0x7f0000000300)={0x0, 0x3938700}, 0x0) r5 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000680), 0x0, 0x0) ioctl$SNDCTL_SEQ_OUTOFBAND(r5, 0x40085112, &(0x7f0000000ec0)=@generic={0x8}) write$binfmt_script(0xffffffffffffffff, &(0x7f0000020240), 0x10010) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x7, 0x10012, 0xffffffffffffffff, 0x0) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) close(r6) r7 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r6, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000080)=@base={0xa, 0x4, 0xb, 0x7, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r8 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000680)={0x10, 0x4, &(0x7f0000000380)=ANY=[@ANYBLOB="1802000000c400000000000000000000850000003e00000095"], &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r9 = bpf$MAP_CREATE(0x0, &(0x7f00000023c0)=@base={0x12, 0x4, 0x8, 0xb, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$BPF_PROG_DETACH(0x8, &(0x7f00000001c0)={@map=r9, r8, 0x7, 0x0, 0x0, @void, @value}, 0x10) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000500)={r9, &(0x7f0000000240), &(0x7f00000004c0)=@tcp6=r7}, 0x20) sendmsg$IPCTNL_MSG_EXP_DELETE(r6, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)=ANY=[], 0xc3ff}}, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) 1.282700679s ago: executing program 5 (id=1024): syz_open_dev$usbmon(0x0, 0x0, 0x0) fsopen(&(0x7f0000000000)='bpf\x00', 0x0) r0 = socket$inet_mptcp(0x2, 0x1, 0x106) r1 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f00000001c0)={0x0, &(0x7f0000000040)}) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r1, 0xc0502100, &(0x7f00000000c0)={0x0, 0x0}) prlimit64(r2, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r3 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000080)='sched_switch\x00'}, 0x10) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) syz_open_procfs(0x0, 0x0) shutdown(r0, 0x1) sched_setscheduler(0x0, 0x1, 0x0) openat$vim2m(0xffffffffffffff9c, 0x0, 0x2, 0x0) r6 = openat$dma_heap(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r7 = fcntl$dupfd(r6, 0x0, r6) ioctl$VHOST_SET_FEATURES(r7, 0x4008af00, &(0x7f0000001140)=0x8000000) 48.326063ms ago: executing program 6 (id=1025): mkdir(&(0x7f0000000180)='./file0\x00', 0x0) socket$inet6_mptcp(0xa, 0x1, 0x106) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={0x0}, 0x18) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0xffffffffffffff01, 0x1, &(0x7f0000006680)) fcntl$lock(0xffffffffffffffff, 0x26, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000240)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30) r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x9, 0x4, &(0x7f00000008c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_sock, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x70) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000180)=ANY=[@ANYRES32=r3, @ANYRES32=r4, @ANYBLOB="020000"], 0x10) r5 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000280)={@cgroup=r5, 0x2, 0x1, 0x0, &(0x7f00000004c0)=[0x0], 0x1, 0x0, 0x0, 0x0, 0x0}, 0x40) syz_io_uring_setup(0xfa, 0x0, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, 0x0) sendmmsg(0xffffffffffffffff, &(0x7f000000ac00), 0x0, 0x804) 0s ago: executing program 7 (id=1026): r0 = creat(&(0x7f0000000280)='./file0\x00', 0x10ab8233df5870d1) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f00000027c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x2e) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000540)='rcu_utilization\x00', r1}, 0x10) r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x140, 0x0) r3 = syz_io_uring_setup(0x241d, &(0x7f0000000380)={0x0, 0x0, 0x13090}, &(0x7f0000000100), &(0x7f0000000080)) ppoll(0x0, 0x0, 0x0, 0x0, 0x0) mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f0000000480)={'trans=fd,', {'rfdno', 0x3d, r2}, 0x2c, {'wfdno', 0x3d, r3}}) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) fcntl$setpipe(r0, 0x407, 0xa05b) write$P9_RVERSION(r5, &(0x7f0000000040)={0x15, 0x65, 0xffff, 0x1000, 0x8, '9P2000.u'}, 0x15) r6 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r6, 0x3b81, &(0x7f0000000080)={0x19, 0x0, 0x0}) ioctl$IOMMU_IOAS_MAP$PAGES(r6, 0x3b85, &(0x7f0000000040)={0x28, 0x7, r7, 0x0, &(0x7f0000ff7000/0x2000)=nil, 0x2000}) ioctl$IOMMU_TEST_OP_CREATE_ACCESS(r6, 0x3ba0, &(0x7f00000001c0)={0x48, 0x5, r7, 0x0, 0xffffffffffffffff, 0x1}) r9 = syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x0) r10 = fcntl$dupfd(r9, 0x0, r9) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x13, r10, 0x8000000) ioctl$IOMMU_IOAS_MAP$PAGES(r6, 0x3b85, &(0x7f00000000c0)={0x28, 0x4, r7, 0x0, &(0x7f0000ffe000/0x1000)=nil, 0x1000}) ioctl$IOMMU_TEST_OP_ACCESS_PAGES$syz(r6, 0x3ba0, &(0x7f0000000140)={0x48, 0x7, r8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x12f9c5}) syz_emit_ethernet(0x7e, &(0x7f0000000280)={@broadcast, @empty, @void, {@ipv6={0x86dd, @gre_packet={0x0, 0x6, "dd690b", 0x48, 0x2f, 0x0, @private0, @mcast2, {[], {{0x0, 0x0, 0x1, 0x0, 0x2, 0x0, 0x0, 0x1, 0x8100, 0x0, 0x0, [0x2, 0x0]}}}}}}}, 0x0) r11 = dup(r5) write$FUSE_BMAP(r11, &(0x7f0000000100)={0x18}, 0x18) mount$9p_fd(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000200), 0x43428, &(0x7f0000000300)={'trans=fd,', {'rfdno', 0x3d, r4}, 0x2c, {'wfdno', 0x3d, r5}, 0x2c, {[{@uname={'uname', 0x3d, '-+-(]'}}], [{@fsuuid={'fsuuid', 0x3d, {[0x38, 0x34, 0x38, 0x31, 0x31, 0x37, 0x66, 0x36], 0x2d, [0x37, 0x31, 0x66, 0x34], 0x2d, [0x0, 0x36, 0x65, 0x32], 0x2d, [0x66, 0x32, 0x61, 0x30], 0x2d, [0x38, 0x64, 0x38, 0x30, 0x31, 0x62, 0x66, 0x34]}}}], 0x6b}}) read$FUSE(0xffffffffffffffff, &(0x7f00000023c0)={0x2020}, 0x2020) kernel console output (not intermixed with test programs): tected capacity change from 0 to 512 [ 119.189030][ T6100] loop3: detected capacity change from 0 to 64 [ 119.270008][ T6103] ======================================================= [ 119.270008][ T6103] WARNING: The mand mount option has been deprecated and [ 119.270008][ T6103] and is ignored by this kernel. Remove the mand [ 119.270008][ T6103] option from the mount to silence this warning. [ 119.270008][ T6103] ======================================================= [ 119.470299][ T6107] netlink: 20 bytes leftover after parsing attributes in process `syz.2.42'. [ 120.672116][ T6103] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 121.141501][ T6112] loop2: detected capacity change from 0 to 4096 [ 121.149235][ T6112] nilfs2: Unknown parameter 'noba' [ 121.149614][ T6103] ext4 filesystem being mounted at /8/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 121.377000][ T6103] overlay: ./file2 is not a directory [ 121.406153][ T29] audit: type=1800 audit(1736248176.903:3): pid=6112 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.45" name="bus" dev="tmpfs" ino=2 res=0 errno=0 [ 123.039541][ T6132] orangefs_mount: mount request failed with -4 [ 124.203442][ T5846] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 125.432648][ T6151] ALSA: mixer_oss: invalid OSS volume '00000000000000000000' [ 125.440189][ T6151] ALSA: mixer_oss: invalid OSS volume 'OGA' [ 130.494656][ T6169] QAT: Stopping all acceleration devices. [ 130.708287][ T6169] : entered promiscuous mode [ 131.328561][ T6172] netlink: 20 bytes leftover after parsing attributes in process `syz.1.55'. [ 132.266034][ T6177] loop4: detected capacity change from 0 to 64 [ 134.508891][ T1295] ieee802154 phy0 wpan0: encryption failed: -22 [ 134.515550][ T1295] ieee802154 phy1 wpan1: encryption failed: -22 [ 135.444758][ T6198] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 135.626219][ T6200] pci 0000:00:05.0: vgaarb: VGA decodes changed: olddecodes=io+mem,decodes=none:owns=io+mem [ 135.709681][ T6208] netlink: 20 bytes leftover after parsing attributes in process `syz.4.63'. [ 138.084679][ T6213] loop2: detected capacity change from 0 to 2048 [ 138.964984][ T5839] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 138.995251][ T5839] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 139.161524][ T6232] input: syz0 as /devices/virtual/input/input5 [ 139.925133][ T5839] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 139.944350][ T6213] EXT4-fs warning (device loop2): ext4_multi_mount_protect:398: Unable to create kmmpd thread for loop2. [ 139.982741][ T5839] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 139.990281][ T5839] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 139.997941][ T5839] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 141.614055][ T6221] chnl_net:caif_netlink_parms(): no params data found [ 142.662466][ T5839] Bluetooth: hci5: command tx timeout [ 142.670627][ T29] audit: type=1326 audit(1736248197.913:4): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6253 comm="syz.1.76" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f984f385d29 code=0x7ffc0000 [ 142.695950][ T29] audit: type=1326 audit(1736248197.913:5): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6253 comm="syz.1.76" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f984f385d29 code=0x7ffc0000 [ 142.722878][ T6258] netlink: 20 bytes leftover after parsing attributes in process `syz.3.74'. [ 142.733855][ T29] audit: type=1326 audit(1736248197.913:6): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6253 comm="syz.1.76" exe="/root/syz-executor" sig=0 arch=c000003e syscall=98 compat=0 ip=0x7f984f385d29 code=0x7ffc0000 [ 142.758063][ T29] audit: type=1326 audit(1736248197.913:7): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6253 comm="syz.1.76" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f984f385d29 code=0x7ffc0000 [ 142.780372][ T29] audit: type=1326 audit(1736248197.913:8): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6253 comm="syz.1.76" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f984f385d29 code=0x7ffc0000 [ 142.802518][ T29] audit: type=1326 audit(1736248197.913:9): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6253 comm="syz.1.76" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f984f385d29 code=0x7ffc0000 [ 143.687277][ T6268] loop2: detected capacity change from 0 to 64 [ 144.225715][ T6281] netlink: 8 bytes leftover after parsing attributes in process `syz.4.77'. [ 145.399770][ T5839] Bluetooth: hci5: command tx timeout [ 146.695261][ T4512] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 147.102199][ T6221] bridge0: port 1(bridge_slave_0) entered blocking state [ 147.113694][ T6221] bridge0: port 1(bridge_slave_0) entered disabled state [ 147.144853][ T6221] bridge_slave_0: entered allmulticast mode [ 147.151951][ T6221] bridge_slave_0: entered promiscuous mode [ 147.311015][ T6221] bridge0: port 2(bridge_slave_1) entered blocking state [ 147.318383][ T6221] bridge0: port 2(bridge_slave_1) entered disabled state [ 147.334099][ T6221] bridge_slave_1: entered allmulticast mode [ 147.341588][ T6221] bridge_slave_1: entered promiscuous mode [ 147.457148][ T6295] Bluetooth: MGMT ver 1.23 [ 147.489834][ T4512] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 147.500294][ T5839] Bluetooth: hci5: command tx timeout [ 147.673014][ T6221] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 147.694230][ T6221] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 147.868990][ T4512] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 148.226778][ T6298] x_tables: ip6_tables: TPROXY target: used from hooks FORWARD, but only usable from PREROUTING [ 148.268565][ T6221] team0: Port device team_slave_0 added [ 149.519227][ T6304] Bluetooth: MGMT ver 1.23 [ 150.421152][ T5839] Bluetooth: hci5: command tx timeout [ 150.557340][ T4512] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 150.807607][ T6309] insert transport fail, errno -7 [ 151.628908][ T6221] team0: Port device team_slave_1 added [ 151.973520][ T6318] netlink: 20 bytes leftover after parsing attributes in process `syz.2.88'. [ 154.186887][ T6221] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 154.194004][ T6221] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 154.275976][ T6221] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 157.415143][ T6345] binder: 6332:6345 ioctl 4018620d 0 returned -22 [ 157.479679][ T6221] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 157.487415][ T6221] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 157.534299][ T6221] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 158.366483][ T6221] hsr_slave_0: entered promiscuous mode [ 158.576275][ T6221] hsr_slave_1: entered promiscuous mode [ 158.758934][ T6221] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 158.941991][ T6221] Cannot create hsr debugfs directory [ 161.182999][ T6381] netlink: 20 bytes leftover after parsing attributes in process `syz.4.101'. [ 163.787571][ T4512] bridge_slave_1: left allmulticast mode [ 163.793481][ T4512] bridge_slave_1: left promiscuous mode [ 164.071115][ T4512] bridge0: port 2(bridge_slave_1) entered disabled state [ 165.968054][ T4512] bridge_slave_0: left allmulticast mode [ 166.003979][ T4512] bridge_slave_0: left promiscuous mode [ 166.044503][ T4512] bridge0: port 1(bridge_slave_0) entered disabled state [ 167.864944][ T5839] Bluetooth: hci2: Controller not accepting commands anymore: ncmd = 0 [ 167.873732][ T5839] Bluetooth: hci2: Injecting HCI hardware error event [ 167.889806][ T5839] Bluetooth: hci2: hardware error 0x00 [ 169.791025][ T4512] dvmrp0 (unregistering): left allmulticast mode [ 169.827088][ T4512] dvmrp1 (unregistering): left allmulticast mode [ 170.131921][ T4512] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 170.156421][ T4512] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 170.177568][ T4512] bond0 (unregistering): Released all slaves [ 170.287205][ T6444] tipc: Started in network mode [ 170.302083][ T6444] tipc: Node identity 00000000000000000000000000000001, cluster identity 4711 [ 170.312587][ T6444] tipc: New replicast peer: fe80:0000:0000:0000:0000:0000:0000:00bb [ 170.322822][ T6444] tipc: Enabled bearer , priority 10 [ 170.550498][ T5839] Bluetooth: hci2: Opcode 0x0c03 failed: -110 [ 171.436573][ T5932] tipc: Node number set to 1 [ 171.539725][ T6221] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 171.691304][ T6462] netlink: 20 bytes leftover after parsing attributes in process `syz.1.114'. [ 173.280688][ T6221] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 174.247217][ T6221] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 175.698467][ T6221] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 176.023273][ T6507] netlink: 64 bytes leftover after parsing attributes in process `syz.4.123'. [ 176.294611][ T6507] warning: `syz.4.123' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 177.238973][ T4512] hsr_slave_0: left promiscuous mode [ 177.260791][ T4512] hsr_slave_1: left promiscuous mode [ 177.279513][ T6522] netlink: 4 bytes leftover after parsing attributes in process `syz.2.128'. [ 177.284535][ T6520] netlink: 'syz.1.127': attribute type 1 has an invalid length. [ 177.293436][ T4512] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 177.389723][ T6520] netlink: 12 bytes leftover after parsing attributes in process `syz.1.127'. [ 177.410916][ T4512] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 178.136584][ T4512] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 178.189609][ T4512] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 178.370985][ T4512] veth1_macvtap: left promiscuous mode [ 178.453665][ T4512] veth0_macvtap: left promiscuous mode [ 178.460135][ T4512] veth1_vlan: left promiscuous mode [ 178.466482][ T4512] veth0_vlan: left promiscuous mode [ 179.518167][ T6553] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 179.531889][ T6553] xt_hashlimit: max too large, truncated to 1048576 [ 179.828165][ T6558] kvm_intel: L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 180.308151][ T4512] team0 (unregistering): Port device team_slave_1 removed [ 180.414758][ T4512] team0 (unregistering): Port device team_slave_0 removed [ 180.635081][ T6564] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 182.584706][ T6221] 8021q: adding VLAN 0 to HW filter on device bond0 [ 182.719401][ T6221] 8021q: adding VLAN 0 to HW filter on device team0 [ 182.931174][ T6581] netlink: 68 bytes leftover after parsing attributes in process `syz.3.137'. [ 184.444024][ T48] bridge0: port 1(bridge_slave_0) entered blocking state [ 184.451280][ T48] bridge0: port 1(bridge_slave_0) entered forwarding state [ 184.828643][ T6367] bridge0: port 2(bridge_slave_1) entered blocking state [ 184.835827][ T6367] bridge0: port 2(bridge_slave_1) entered forwarding state [ 184.935252][ T6591] input: syz0 as /devices/virtual/input/input7 [ 184.941607][ T6591] input: failed to attach handler leds to device input7, error: -6 [ 185.577617][ T6221] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 185.804861][ T6221] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 192.091141][ T6221] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 194.800470][ T6221] veth0_vlan: entered promiscuous mode [ 194.954435][ T6221] veth1_vlan: entered promiscuous mode [ 196.154793][ T1295] ieee802154 phy0 wpan0: encryption failed: -22 [ 196.161150][ T1295] ieee802154 phy1 wpan1: encryption failed: -22 [ 196.172574][ T6221] veth0_macvtap: entered promiscuous mode [ 198.251382][ T5842] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 198.374878][ T5842] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 198.383855][ T5842] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 198.394065][ T5842] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 198.403266][ T5842] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 198.411380][ T5842] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 198.599130][ T6725] CIFS: No dialect specified on mount. Default has changed to a more secure dialect, SMB2.1 or later (e.g. SMB3.1.1), from CIFS (SMB1). To use the less secure SMB1 dialect to access old servers which do not support SMB3.1.1 (or even SMB3 or SMB2.1) specify vers=1.0 on mount. [ 198.626020][ T6725] CIFS: Unable to determine destination address [ 200.699299][ T5842] Bluetooth: hci1: command tx timeout [ 202.844387][ T5842] Bluetooth: hci1: command tx timeout [ 203.037980][ T6718] chnl_net:caif_netlink_parms(): no params data found [ 204.012634][ T47] IPVS: starting estimator thread 0... [ 204.116976][ T6766] IPVS: using max 20 ests per chain, 48000 per kthread [ 204.136601][ T6773] netlink: 'syz.1.172': attribute type 10 has an invalid length. [ 204.157102][ T6762] mkiss: ax0: crc mode is auto. [ 204.271727][ T6773] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 204.312115][ T6773] bond0: (slave batadv0): Enslaving as an active interface with an up link [ 205.205888][ T5842] Bluetooth: hci1: command tx timeout [ 205.267179][ T6718] bridge0: port 1(bridge_slave_0) entered blocking state [ 205.328287][ T6718] bridge0: port 1(bridge_slave_0) entered disabled state [ 205.360450][ T6718] bridge_slave_0: entered allmulticast mode [ 205.391978][ T6718] bridge_slave_0: entered promiscuous mode [ 205.496951][ T6718] bridge0: port 2(bridge_slave_1) entered blocking state [ 205.504536][ T6718] bridge0: port 2(bridge_slave_1) entered disabled state [ 205.513740][ T6718] bridge_slave_1: entered allmulticast mode [ 205.521700][ T6718] bridge_slave_1: entered promiscuous mode [ 205.589316][ T6718] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 205.858482][ T6718] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 207.093247][ T6718] team0: Port device team_slave_0 added [ 207.234443][ T55] Bluetooth: hci1: command tx timeout [ 207.555841][ T5855] Bluetooth: hci4: command 0x0405 tx timeout [ 207.562252][ T55] Bluetooth: hci3: command 0x0406 tx timeout [ 207.821946][ T6718] team0: Port device team_slave_1 added [ 208.087251][ T6718] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 208.117574][ T6718] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 208.179854][ T6718] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 208.222836][ T6368] bridge_slave_1: left allmulticast mode [ 208.244238][ T6368] bridge_slave_1: left promiscuous mode [ 208.265974][ T6368] bridge0: port 2(bridge_slave_1) entered disabled state [ 208.485626][ T6368] bridge_slave_0: left allmulticast mode [ 208.492914][ T6368] bridge_slave_0: left promiscuous mode [ 208.499488][ T6368] bridge0: port 1(bridge_slave_0) entered disabled state [ 211.142358][ T6844] Context (ID=0x1) not attached to queue pair (handle=0x1:0x0) [ 213.001629][ T6850] netlink: 8 bytes leftover after parsing attributes in process `syz.2.186'. [ 213.231061][ T6368] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 213.257650][ T6368] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 213.268901][ T6368] bond0 (unregistering): Released all slaves [ 213.285014][ T6718] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 213.292100][ T6718] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 213.321573][ T6718] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 213.574770][ T6860] nbd3: detected capacity change from 0 to 2199023255576 [ 213.658021][ T6854] block nbd3: Send control failed (result -89) [ 214.208608][ T6854] block nbd3: Request send failed, requeueing [ 214.247156][ T40] block nbd3: Dead connection, failed to find a fallback [ 214.254577][ T40] block nbd3: shutting down sockets [ 214.260416][ T40] I/O error, dev nbd3, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 214.270139][ T40] Buffer I/O error on dev nbd3, logical block 0, async page read [ 214.282368][ T6854] I/O error, dev nbd3, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 214.457887][ T6854] Buffer I/O error on dev nbd3, logical block 0, async page read [ 214.473080][ T6854] I/O error, dev nbd3, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 214.507025][ T6854] Buffer I/O error on dev nbd3, logical block 0, async page read [ 214.970978][ T6854] I/O error, dev nbd3, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 214.980242][ T6854] Buffer I/O error on dev nbd3, logical block 0, async page read [ 214.989950][ T6854] I/O error, dev nbd3, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 215.006551][ T6864] input: syz0 as /devices/virtual/input/input8 [ 215.030538][ T6854] Buffer I/O error on dev nbd3, logical block 0, async page read [ 215.038965][ T6854] I/O error, dev nbd3, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 215.048336][ T6854] Buffer I/O error on dev nbd3, logical block 0, async page read [ 215.056830][ T6854] I/O error, dev nbd3, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 215.070251][ T6854] Buffer I/O error on dev nbd3, logical block 0, async page read [ 215.078620][ T6854] I/O error, dev nbd3, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 215.093247][ T6854] Buffer I/O error on dev nbd3, logical block 0, async page read [ 215.137250][ T6854] ldm_validate_partition_table(): Disk read failed. [ 215.144600][ T6854] I/O error, dev nbd3, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 215.155772][ T6854] Buffer I/O error on dev nbd3, logical block 0, async page read [ 215.163746][ T6854] I/O error, dev nbd3, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 215.181849][ T6854] Buffer I/O error on dev nbd3, logical block 0, async page read [ 215.304587][ T6854] Dev nbd3: unable to read RDB block 0 [ 215.311329][ T6854] nbd3: unable to read partition table [ 215.347671][ T6772] ldm_validate_partition_table(): Disk read failed. [ 215.354978][ T6772] Dev nbd3: unable to read RDB block 0 [ 215.373398][ T6772] nbd3: unable to read partition table [ 215.381905][ T6368] hsr_slave_0: left promiscuous mode [ 216.255932][ T6772] ldm_validate_partition_table(): Disk read failed. [ 216.558445][ T6772] Dev nbd3: unable to read RDB block 0 [ 216.564546][ T6772] nbd3: unable to read partition table [ 216.573536][ T6368] hsr_slave_1: left promiscuous mode [ 216.579680][ T6368] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 217.473272][ T6368] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 217.516069][ T6368] veth0_macvtap: left promiscuous mode [ 217.521782][ T6368] veth1_vlan: left promiscuous mode [ 217.527221][ T6368] veth0_vlan: left promiscuous mode [ 218.554645][ T6893] netlink: 4 bytes leftover after parsing attributes in process `syz.3.194'. [ 218.774272][ C1] vcan0: j1939_tp_txtimer: 0xffff88802f827000: tx aborted with unknown reason: -2 [ 219.176322][ T6368] team0 (unregistering): Port device team_slave_1 removed [ 219.285244][ C1] vcan0: j1939_tp_rxtimer: 0xffff88802f827000: abort rx timeout. Force session deactivation [ 219.462118][ T6368] team0 (unregistering): Port device team_slave_0 removed [ 220.176004][ T6901] syz.2.197 uses obsolete (PF_INET,SOCK_PACKET) [ 220.637775][ T6718] hsr_slave_0: entered promiscuous mode [ 221.644650][ T6718] hsr_slave_1: entered promiscuous mode [ 222.289236][ T6718] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 222.572010][ T6718] Cannot create hsr debugfs directory [ 227.171080][ T6948] Can't find a SQUASHFS superblock on nullb0 [ 231.216775][ T6718] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 231.600959][ T6718] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 232.509983][ T6999] netlink: 248 bytes leftover after parsing attributes in process `syz.2.216'. [ 232.541035][ T6999] netlink: 12 bytes leftover after parsing attributes in process `syz.2.216'. [ 232.548187][ T6718] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 233.992320][ T6718] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 234.136164][ T6718] 8021q: adding VLAN 0 to HW filter on device bond0 [ 234.153748][ T6718] 8021q: adding VLAN 0 to HW filter on device team0 [ 234.187878][ T6718] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 234.198462][ T6718] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 234.297123][ T256] bridge0: port 1(bridge_slave_0) entered blocking state [ 234.304313][ T256] bridge0: port 1(bridge_slave_0) entered forwarding state [ 234.314092][ T256] bridge0: port 2(bridge_slave_1) entered blocking state [ 234.321318][ T256] bridge0: port 2(bridge_slave_1) entered forwarding state [ 235.761635][ T7023] random: crng reseeded on system resumption [ 236.041855][ T7022] Restarting kernel threads ... done. [ 236.596962][ T7030] netlink: 68 bytes leftover after parsing attributes in process `syz.2.222'. [ 237.348187][ T6718] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 237.884062][ T7046] netlink: 28 bytes leftover after parsing attributes in process `syz.2.223'. [ 237.893594][ T7046] netlink: 12 bytes leftover after parsing attributes in process `syz.2.223'. [ 240.574730][ T6718] veth0_vlan: entered promiscuous mode [ 240.632728][ T6718] veth1_vlan: entered promiscuous mode [ 240.675259][ T6718] veth0_macvtap: entered promiscuous mode [ 240.696384][ T6718] veth1_macvtap: entered promiscuous mode [ 240.725791][ T6718] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 240.743279][ T6718] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 240.768049][ T6718] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 240.778765][ T6718] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 240.789395][ T6718] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 240.800321][ T6718] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 240.810576][ T6718] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 240.821997][ T6718] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 240.833417][ T6718] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 241.904802][ T6718] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 241.917804][ T6718] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 242.166929][ T7084] xt_NFQUEUE: number of total queues is 0 [ 242.181372][ T6718] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 242.914279][ T6718] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 242.961716][ T6718] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 243.290010][ T6718] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 243.308911][ T6718] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 243.387583][ T7092] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 243.853676][ T6718] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 243.868149][ T6718] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 243.888664][ T6718] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 243.897617][ T6718] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 243.906439][ T6718] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 243.915299][ T6718] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 244.060221][ T47] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 245.460781][ T35] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 245.468757][ T35] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 246.714269][ T5888] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 246.847015][ T48] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 246.914002][ T48] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 247.414322][ T5888] usb 5-1: Using ep0 maxpacket: 8 [ 247.424625][ T5888] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x6 has invalid wMaxPacketSize 0 [ 247.444201][ T5888] usb 5-1: config 0 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 248.436127][ T5888] usb 5-1: New USB device found, idVendor=2294, idProduct=425b, bcdDevice=56.ef [ 248.445358][ T5888] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 249.674236][ C0] Illegal XDP return value 16128 on prog (id 74) dev bond_slave_0, expect packet loss! [ 249.779410][ T5888] usb 5-1: config 0 descriptor?? [ 249.794868][ T5888] usb 5-1: can't set config #0, error -71 [ 249.857989][ T5888] usb 5-1: USB disconnect, device number 2 [ 250.595207][ T7157] xt_hashlimit: max too large, truncated to 1048576 [ 250.607092][ T7157] xt_CONNSECMARK: only valid in 'mangle' or 'security' table, not 'raw' [ 251.874269][ T7158] workqueue: Failed to create a rescuer kthread for wq "nfc2_nci_rx_wq": -EINTR [ 252.288123][ T7164] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(8) [ 252.304462][ T7164] vhci_hcd vhci_hcd.0: devid(0) speed(5) speed_str(super-speed) [ 252.316044][ T7164] vhci_hcd vhci_hcd.0: Device attached [ 253.216829][ T7159] workqueue: Failed to create a rescuer kthread for wq "nfc2_nci_cmd_wq": -EINTR [ 253.485388][ T7167] vhci_hcd: connection closed [ 253.564513][ T11] vhci_hcd: stop threads [ 253.575178][ T11] vhci_hcd: release socket [ 253.579667][ T11] vhci_hcd: disconnect device [ 254.564812][ T7183] netlink: 8 bytes leftover after parsing attributes in process `syz.2.245'. [ 254.605572][ T7183] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2 [ 254.615406][ T7183] platform regulatory.0: Falling back to sysfs fallback for: regulatory.db [ 256.086307][ T7184] Bluetooth: hci1: Opcode 0x080f failed: -4 [ 257.056064][ T1295] ieee802154 phy0 wpan0: encryption failed: -22 [ 257.062447][ T1295] ieee802154 phy1 wpan1: encryption failed: -22 [ 257.704190][ T7204] orangefs_mount: mount request failed with -4 [ 257.750002][ T5842] Bluetooth: hci1: command 0x080f tx timeout [ 258.524770][ T7214] netlink: 8 bytes leftover after parsing attributes in process `syz.2.253'. [ 259.290358][ T5842] Bluetooth: hci5: command 0xfc11 tx timeout [ 259.298299][ T5839] Bluetooth: hci5: Entering manufacturer mode failed (-110) [ 261.424612][ T5839] Bluetooth: Wrong link type (-71) [ 261.431494][ T29] audit: type=1800 audit(1736248572.254:10): pid=7237 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.257" name="SYSV00000000" dev="hugetlbfs" ino=0 res=0 errno=0 [ 262.360898][ T7252] mkiss: ax0: crc mode is auto. [ 264.689199][ T47] IPVS: starting estimator thread 0... [ 265.302090][ T7253] workqueue: Failed to create a rescuer kthread for wq "nfc2_nci_tx_wq": -EINTR [ 265.302235][ T7254] loop5: detected capacity change from 0 to 16 [ 265.597405][ T7257] IPVS: using max 38 ests per chain, 91200 per kthread [ 266.830022][ T7281] netlink: 32 bytes leftover after parsing attributes in process `syz.1.263'. [ 266.899368][ T7281] block device autoloading is deprecated and will be removed. [ 268.259437][ T7293] overlayfs: failed to resolve './file1': -2 [ 270.623543][ T7279] netlink: 8 bytes leftover after parsing attributes in process `syz.5.262'. [ 271.094541][ T7306] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 274.629481][ T7344] (unnamed net_device) (uninitialized): Removing last ns target with arp_interval on [ 274.691961][ T7350] capability: warning: `syz.2.278' uses deprecated v2 capabilities in a way that may be insecure [ 275.074276][ T7359] Bluetooth: MGMT ver 1.23 [ 278.420270][ T5889] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 282.588628][ T7412] loop5: detected capacity change from 0 to 64 [ 285.334535][ T29] audit: type=1326 audit(1736248596.624:11): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7421 comm="syz.4.292" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f019d785d29 code=0x0 [ 292.594404][ T7483] block nbd1: NBD_DISCONNECT [ 295.411504][ T7509] netlink: 'syz.2.306': attribute type 1 has an invalid length. [ 295.419267][ T7509] netlink: 'syz.2.306': attribute type 3 has an invalid length. [ 295.426958][ T7509] netlink: 224 bytes leftover after parsing attributes in process `syz.2.306'. [ 298.157998][ T7531] usb usb8: usbfs: process 7531 (syz.1.310) did not claim interface 0 before use [ 301.978606][ T7580] Bluetooth: MGMT ver 1.23 [ 304.548306][ T7597] IPVS: sync thread started: state = MASTER, mcast_ifn = vlan0, syncid = 0, id = 0 [ 305.624988][ T7602] netlink: 24 bytes leftover after parsing attributes in process `syz.4.323'. [ 305.638077][ T7602] netlink: 176 bytes leftover after parsing attributes in process `syz.4.323'. [ 309.208137][ T7620] loop5: detected capacity change from 0 to 512 [ 309.428372][ T7620] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode [ 309.762446][ T7620] EXT4-fs (loop5): 1 truncate cleaned up [ 310.205041][ T7620] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 310.335713][ T7644] netlink: 104 bytes leftover after parsing attributes in process `syz.3.331'. [ 311.659169][ T7653] netlink: 'syz.3.331': attribute type 21 has an invalid length. [ 311.997864][ T7653] netlink: 156 bytes leftover after parsing attributes in process `syz.3.331'. [ 312.069124][ T7653] netlink: 4 bytes leftover after parsing attributes in process `syz.3.331'. [ 312.968042][ T6718] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 313.102602][ T8] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 314.536288][ T7661] netlink: 36 bytes leftover after parsing attributes in process `syz.4.336'. [ 314.633524][ T7661] netlink: 16 bytes leftover after parsing attributes in process `syz.4.336'. [ 314.650356][ T7661] netlink: 36 bytes leftover after parsing attributes in process `syz.4.336'. [ 314.660963][ T7661] netlink: 36 bytes leftover after parsing attributes in process `syz.4.336'. [ 314.733152][ T8] usb 4-1: device not accepting address 2, error -71 [ 316.791048][ T7703] loop5: detected capacity change from 0 to 1024 [ 316.798774][ T7703] EXT4-fs: Ignoring removed nobh option [ 317.087633][ T7703] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 317.124368][ T7703] EXT4-fs (loop5): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 318.102055][ T7718] input: syz0 as /devices/virtual/input/input11 [ 318.108560][ T7718] input: failed to attach handler leds to device input11, error: -6 [ 318.227574][ T1295] ieee802154 phy0 wpan0: encryption failed: -22 [ 318.444280][ T1295] ieee802154 phy1 wpan1: encryption failed: -22 [ 318.474463][ T7703] EXT4-fs error (device loop5): ext4_ext_check_inode:524: inode #11: comm syz.5.342: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 1, max 4(4), depth 32512(32512) [ 318.492932][ C0] vkms_vblank_simulate: vblank timer overrun [ 319.174208][ T7703] EXT4-fs error (device loop5): ext4_orphan_get:1394: comm syz.5.342: couldn't read orphan inode 11 (err -117) [ 319.376380][ T7703] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 320.858569][ T6718] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 321.916945][ T7749] hub 6-0:1.0: USB hub found [ 321.922468][ T7749] hub 6-0:1.0: 1 port detected [ 322.473008][ T7745] cifs: Unknown parameter 'mode' [ 323.374989][ T7744] delete_channel: no stack [ 325.676780][ T7777] capability: warning: `syz.2.363' uses 32-bit capabilities (legacy support in use) [ 326.932968][ T7793] loop5: detected capacity change from 0 to 1024 [ 329.674671][ T7814] x_tables: ip6_tables: CLASSIFY target: used from hooks PREROUTING, but only usable from FORWARD/OUTPUT/POSTROUTING [ 333.010815][ T29] audit: type=1326 audit(2000000023.179:12): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7809 comm="syz.1.362" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f984f385d29 code=0x7ffc0000 [ 333.120038][ T29] audit: type=1326 audit(2000000023.179:13): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7809 comm="syz.1.362" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f984f385d29 code=0x7ffc0000 [ 333.142300][ T29] audit: type=1326 audit(2000000023.189:14): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7809 comm="syz.1.362" exe="/root/syz-executor" sig=0 arch=c000003e syscall=186 compat=0 ip=0x7f984f385d29 code=0x7ffc0000 [ 333.164532][ T29] audit: type=1326 audit(2000000023.189:15): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7809 comm="syz.1.362" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f984f385d29 code=0x7ffc0000 [ 333.194984][ T29] audit: type=1326 audit(2000000023.189:16): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7809 comm="syz.1.362" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f984f385d29 code=0x7ffc0000 [ 333.268688][ T29] audit: type=1326 audit(2000000023.199:17): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7809 comm="syz.1.362" exe="/root/syz-executor" sig=0 arch=c000003e syscall=226 compat=0 ip=0x7f984f385d29 code=0x7ffc0000 [ 333.761549][ T29] audit: type=1326 audit(2000000023.199:18): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7809 comm="syz.1.362" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f984f385d29 code=0x7ffc0000 [ 333.862689][ T29] audit: type=1326 audit(2000000023.199:19): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7809 comm="syz.1.362" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f984f385d29 code=0x7ffc0000 [ 334.589086][ T29] audit: type=1326 audit(2000000023.199:20): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7809 comm="syz.1.362" exe="/root/syz-executor" sig=0 arch=c000003e syscall=449 compat=0 ip=0x7f984f385d29 code=0x7ffc0000 [ 334.954246][ T29] audit: type=1326 audit(2000000023.199:21): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7809 comm="syz.1.362" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f984f385d29 code=0x7ffc0000 [ 339.612680][ T7884] netlink: 4 bytes leftover after parsing attributes in process `syz.5.378'. [ 341.624301][ T7899] netlink: 12 bytes leftover after parsing attributes in process `syz.5.381'. [ 342.933928][ T7898] tty tty31: ldisc open failed (-12), clearing slot 30 [ 354.121167][ T5842] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 355.374421][ T5842] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 355.383200][ T5842] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 355.392931][ T5842] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 355.402212][ T5842] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 355.409981][ T5842] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 357.474571][ T8018] overlayfs: "xino" feature enabled using 2 upper inode bits. [ 358.012498][ T5842] Bluetooth: hci5: command tx timeout [ 358.283190][ T8028] loop5: detected capacity change from 0 to 128 [ 358.640707][ T7966] chnl_net:caif_netlink_parms(): no params data found [ 359.604923][ T29] kauditd_printk_skb: 3 callbacks suppressed [ 359.604943][ T29] audit: type=1800 audit(2000000049.639:25): pid=8040 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.5.407" name="file0" dev="loop5" ino=1048605 res=0 errno=0 [ 359.958591][ T8041] netlink: del zone limit has 4 unknown bytes [ 360.356190][ T5842] Bluetooth: hci5: command tx timeout [ 360.391405][ T29] audit: type=1804 audit(2000000050.109:26): pid=8040 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.5.407" name="/newroot/32/file0/file0" dev="loop5" ino=1048605 res=1 errno=0 [ 360.627069][ T5839] Bluetooth: hci3: ACL packet for unknown connection handle 200 [ 360.676566][ T8043] tipc: Started in network mode [ 360.686380][ T8043] tipc: Node identity 7, cluster identity 9 [ 360.692375][ T8043] tipc: Node number set to 7 [ 362.152965][ T8065] netlink: 20 bytes leftover after parsing attributes in process `syz.3.412'. [ 362.779073][ T8075] loop5: detected capacity change from 0 to 256 [ 362.910115][ T5839] Bluetooth: hci5: command tx timeout [ 363.221126][ T8075] exFAT-fs (loop5): failed to load upcase table (idx : 0x00010000, chksum : 0x1a9973fb, utbl_chksum : 0xe619d30d) [ 364.970616][ T7966] bridge0: port 1(bridge_slave_0) entered blocking state [ 364.977946][ T7966] bridge0: port 1(bridge_slave_0) entered disabled state [ 364.985224][ T7966] bridge_slave_0: entered allmulticast mode [ 364.992235][ T7966] bridge_slave_0: entered promiscuous mode [ 364.999871][ T7966] bridge0: port 2(bridge_slave_1) entered blocking state [ 365.007030][ T7966] bridge0: port 2(bridge_slave_1) entered disabled state [ 365.014353][ T7966] bridge_slave_1: entered allmulticast mode [ 365.021321][ T7966] bridge_slave_1: entered promiscuous mode [ 365.109780][ T7966] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 365.157764][ T7966] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 365.314230][ T5839] Bluetooth: hci5: command 0x0419 tx timeout [ 365.375667][ T7966] team0: Port device team_slave_0 added [ 365.393116][ T7966] team0: Port device team_slave_1 added [ 365.442354][ T7966] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 365.496630][ T7966] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 365.554492][ T7966] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 365.567002][ T7966] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 365.573987][ T7966] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 365.626981][ T7966] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 365.788397][ T8086] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 365.944333][ T8086] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 366.227390][ T8086] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 366.273643][ T8100] loop5: detected capacity change from 0 to 40427 [ 366.334687][ T8086] Bluetooth: hci4: Opcode 0x0406 failed: -4 [ 366.391941][ T8100] F2FS-fs (loop5): Invalid log_blocksize (268), supports only 12 [ 366.400249][ T8100] F2FS-fs (loop5): Can't find valid F2FS filesystem in 1th superblock [ 366.410931][ T8100] F2FS-fs (loop5): invalid crc value [ 366.487371][ T8086] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 366.499698][ T8100] F2FS-fs (loop5): Found nat_bits in checkpoint [ 366.609083][ T8100] F2FS-fs (loop5): Try to recover 1th superblock, ret: 0 [ 366.616464][ T8100] F2FS-fs (loop5): Mounted with checkpoint version = 48b305e5 [ 366.623246][ T8086] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 367.527254][ T7966] hsr_slave_0: entered promiscuous mode [ 367.533359][ T5842] Bluetooth: hci5: command 0x0419 tx timeout [ 367.697274][ T8086] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 368.337096][ T5842] Bluetooth: hci3: command 0x0406 tx timeout [ 368.343302][ T5842] Bluetooth: hci4: command 0x0405 tx timeout [ 368.403169][ T7966] hsr_slave_1: entered promiscuous mode [ 368.545197][ T5839] Bluetooth: hci1: command 0x080f tx timeout [ 369.377472][ T7966] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 369.389340][ T7966] Cannot create hsr debugfs directory [ 369.529900][ T8086] Bluetooth: hci5: Opcode 0x0c1a failed: -4 [ 369.611477][ T8086] Bluetooth: hci5: Opcode 0x0406 failed: -4 [ 369.640842][ T8086] Bluetooth: hci5: Opcode 0x0406 failed: -4 [ 370.405292][ T5842] Bluetooth: hci4: command 0x0405 tx timeout [ 370.411551][ T5839] Bluetooth: hci3: command 0x0406 tx timeout [ 370.614269][ T5839] Bluetooth: hci1: command 0x080f tx timeout [ 371.645380][ T5839] Bluetooth: hci5: command 0x0419 tx timeout [ 371.944690][ T7966] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 372.987950][ T5839] Bluetooth: hci1: command 0x080f tx timeout [ 373.205499][ T8147] loop5: detected capacity change from 0 to 512 [ 373.804466][ T5839] Bluetooth: hci5: command 0x0419 tx timeout [ 373.868885][ T7966] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 373.876905][ T8147] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode [ 373.951821][ T7966] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 373.977648][ T7966] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 374.017614][ T8147] EXT4-fs (loop5): 1 truncate cleaned up [ 374.030333][ T8147] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 375.785950][ T7966] 8021q: adding VLAN 0 to HW filter on device bond0 [ 375.856046][ T6718] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 375.876808][ T5839] Bluetooth: hci5: command 0x0419 tx timeout [ 375.969019][ T7966] 8021q: adding VLAN 0 to HW filter on device team0 [ 376.120701][ T3014] bridge0: port 1(bridge_slave_0) entered blocking state [ 376.127935][ T3014] bridge0: port 1(bridge_slave_0) entered forwarding state [ 376.198237][ T3014] bridge0: port 2(bridge_slave_1) entered blocking state [ 376.205464][ T3014] bridge0: port 2(bridge_slave_1) entered forwarding state [ 378.075908][ T7966] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 379.059132][ T8203] Bluetooth: hci0: Frame reassembly failed (-84) [ 379.834642][ T1295] ieee802154 phy1 wpan1: encryption failed: -22 [ 380.230181][ T8207] tmpfs: Unknown parameter '' [ 380.690454][ T7966] veth0_vlan: entered promiscuous mode [ 380.859784][ T7966] veth1_vlan: entered promiscuous mode [ 380.882009][ T7966] veth0_macvtap: entered promiscuous mode [ 380.890994][ T7966] veth1_macvtap: entered promiscuous mode [ 380.941097][ T7966] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 380.951675][ T7966] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 380.962171][ T7966] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 380.972894][ T7966] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 381.589303][ T7966] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 381.620462][ T7966] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 381.694406][ T7966] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 381.896846][ T5842] Bluetooth: hci0: command 0xfc11 tx timeout [ 381.929140][ T7966] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 381.962063][ T7966] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 381.964556][ T5839] Bluetooth: hci0: Entering manufacturer mode failed (-110) [ 382.076932][ T7966] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 382.124809][ T7966] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 382.282121][ T7966] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 382.292665][ T7966] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 382.302667][ T7966] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 382.313155][ T7966] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 382.323154][ T7966] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 382.335143][ T7966] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 382.345130][ T7966] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 382.356012][ T7966] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 382.365891][ T7966] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 382.405399][ T7966] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 382.490757][ T7966] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 382.595167][ T8227] overlayfs: conflicting lowerdir path [ 382.933420][ T7966] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 383.155809][ T7966] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 383.169744][ T8232] loop5: detected capacity change from 0 to 512 [ 383.218094][ T7966] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 383.226392][ T8232] EXT4-fs error (device loop5): ext4_orphan_get:1389: inode #15: comm syz.5.439: casefold flag without casefold feature [ 383.227438][ T7966] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 383.298038][ T8232] EXT4-fs error (device loop5): ext4_orphan_get:1394: comm syz.5.439: couldn't read orphan inode 15 (err -117) [ 384.028744][ T8232] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 384.302292][ T4512] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 384.311405][ T4512] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 384.319121][ T4512] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 384.327344][ T4512] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 386.462008][ T6718] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 388.146781][ T8281] overlayfs: failed to resolve './file0': -2 [ 389.009003][ T8270] loop6: detected capacity change from 0 to 164 [ 390.500006][ T8287] loop5: detected capacity change from 0 to 4096 [ 390.894450][ T8287] ntfs3(loop5): Different NTFS sector size (1024) and media sector size (512). [ 392.329492][ T8287] ntfs3(loop5): Failed to read $UpCase (-4). [ 395.091381][ T8322] loop5: detected capacity change from 0 to 4096 [ 395.164803][ T8322] nilfs2: Unknown parameter '' [ 396.377594][ T8344] loop5: detected capacity change from 0 to 128 [ 396.455528][ T8328] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 396.466563][ T8345] loop6: detected capacity change from 0 to 164 [ 396.565354][ T8344] EXT4-fs (loop5): Test dummy encryption mode enabled [ 397.575928][ T8344] EXT4-fs (loop5): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 397.806039][ T8344] ext4 filesystem being mounted at /41/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 398.118515][ T8344] fscrypt: AES-256-CBC-CTS using implementation "cts-cbc-aes-aesni" [ 401.032265][ T6718] EXT4-fs (loop5): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 403.178011][ T8408] loop6: detected capacity change from 0 to 512 [ 403.681414][ T8408] EXT4-fs (loop6): orphan cleanup on readonly fs [ 403.688554][ T8408] EXT4-fs warning (device loop6): ext4_enable_quotas:7145: Failed to enable quota tracking (type=0, err=-22, ino=3). Please run e2fsck to fix. [ 403.703245][ T8408] EXT4-fs (loop6): Cannot turn on quotas: error -22 [ 403.710252][ T8408] EXT4-fs error (device loop6): ext4_orphan_get:1415: comm syz.6.479: bad orphan inode 768 [ 403.731029][ T8408] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 404.038206][ T7966] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 411.251321][ T8464] loop6: detected capacity change from 0 to 256 [ 411.258361][ T8464] exfat: Unknown parameter '00000000000000000000003ÿÿ' [ 416.246090][ T8487] mmap: syz.2.497 (8487) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 416.768891][ T5842] Bluetooth: hci5: command 0x0419 tx timeout [ 419.054191][ T8508] netlink: 68 bytes leftover after parsing attributes in process `syz.3.501'. [ 419.302768][ T8499] loop5: detected capacity change from 0 to 32768 [ 419.398706][ T8499] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop5 (7:5) scanned by syz.5.498 (8499) [ 420.005087][ T8501] loop6: detected capacity change from 0 to 1024 [ 420.089721][ T8499] BTRFS error (device loop5): open_ctree failed: -4 [ 420.889081][ T8519] sd 0:0:1:0: ioctl_internal_command: ILLEGAL REQUEST asc=0x20 ascq=0x0 [ 421.164284][ T8520] new mount options do not match the existing superblock, will be ignored [ 421.395329][ T8501] EXT4-fs warning (device loop6): ext4_multi_mount_protect:398: Unable to create kmmpd thread for loop6. [ 422.297420][ T5842] Bluetooth: hci5: command 0x0419 tx timeout [ 422.718961][ T8534] cgroup: No subsys list or none specified [ 423.547120][ T8540] /dev/loop3: Can't open blockdev [ 424.365401][ T8542] x_tables: ip_tables: TPROXY target: used from hooks FORWARD, but only usable from PREROUTING [ 427.231028][ T8558] netlink: 68 bytes leftover after parsing attributes in process `syz.3.513'. [ 429.351995][ T8575] syz.6.519 (8575) used obsolete PPPIOCDETACH ioctl [ 429.563427][ T5932] usb 3-1: new full-speed USB device number 3 using dummy_hcd [ 429.728596][ T8583] unsupported nlmsg_type 40 [ 429.856801][ T5932] usb 3-1: unable to get BOS descriptor or descriptor too short [ 429.912042][ T5932] usb 3-1: not running at top speed; connect to a high speed hub [ 430.482753][ T5932] usb 3-1: config 106 has an invalid interface number: 8 but max is 0 [ 430.491092][ T5932] usb 3-1: config 106 has no interface number 0 [ 430.497451][ T5932] usb 3-1: config 106 interface 8 has no altsetting 0 [ 430.511573][ T5932] usb 3-1: New USB device found, idVendor=04e8, idProduct=6889, bcdDevice=93.dd [ 430.522178][ T5932] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 430.645221][ T5932] usb 3-1: Product: syz [ 430.651305][ T5932] usb 3-1: Manufacturer: syz [ 430.656413][ T5932] usb 3-1: SerialNumber: syz [ 430.832455][ T8591] loop5: detected capacity change from 0 to 164 [ 430.898078][ T8591] netlink: 'syz.5.522': attribute type 1 has an invalid length. [ 430.905851][ T8591] netlink: 28 bytes leftover after parsing attributes in process `syz.5.522'. [ 431.601407][ T8589] random: crng reseeded on system resumption [ 432.067385][ T5932] usb 3-1: can't set config #106, error -71 [ 432.537538][ T8600] Cannot find add_set index 0 as target [ 433.217555][ T5932] usb 3-1: USB disconnect, device number 3 [ 434.879073][ T8611] loop5: detected capacity change from 0 to 8 [ 441.960818][ T8642] netlink: 28 bytes leftover after parsing attributes in process `syz.4.535'. [ 441.969821][ T8642] netlink: 28 bytes leftover after parsing attributes in process `syz.4.535'. [ 441.994434][ T1295] ieee802154 phy1 wpan1: encryption failed: -22 [ 442.518703][ T8650] loop5: detected capacity change from 0 to 64 [ 444.387311][ T8667] overlayfs: failed to resolve './file1': -2 [ 451.066510][ T8701] loop6: detected capacity change from 0 to 64 [ 455.592536][ T8736] loop6: detected capacity change from 0 to 128 [ 456.960782][ T8745] loop5: detected capacity change from 0 to 1024 [ 457.902777][ T8740] nfs: Unknown parameter '1' [ 461.053369][ T35] hfsplus: b-tree write err: -5, ino 3 [ 461.246373][ T8767] ubi0: attaching mtd0 [ 461.258688][ T8767] ubi0: scanning is finished [ 461.263356][ T8767] ubi0: empty MTD device detected [ 463.377011][ T29] audit: type=1326 audit(2000000152.749:27): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8769 comm="syz.4.568" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f019d785d29 code=0x0 [ 464.036627][ T8785] loop5: detected capacity change from 0 to 2048 [ 464.114437][ T8767] ubi0 error: ubi_attach_mtd_dev: cannot spawn "ubi_bgt0d", error -4 [ 464.234422][ T8789] NILFS (loop5): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 469.501444][ T8789] NILFS (loop5): vblocknr = 23 has abnormal lifetime: start cno (= 4294967298) > current cno (= 3) [ 469.512888][ T8789] NILFS error (device loop5): nilfs_bmap_propagate: broken bmap (inode number=4) [ 470.446633][ T8789] Remounting filesystem read-only [ 471.074990][ T8819] netlink: 20 bytes leftover after parsing attributes in process `syz.4.577'. [ 472.559707][ T8827] netlink: 'syz.5.572': attribute type 25 has an invalid length. [ 473.181040][ T8835] ip6t_rpfilter: unknown options [ 475.317839][ T8848] netlink: 24 bytes leftover after parsing attributes in process `syz.3.582'. [ 478.113787][ T8859] loop6: detected capacity change from 0 to 512 [ 478.485278][ T8859] EXT4-fs (loop6): blocks per group (95) and clusters per group (32768) inconsistent [ 478.590621][ T8855] xt_CT: No such helper "pptp" [ 479.484778][ T8862] tipc: Started in network mode [ 479.498591][ T8862] tipc: Node identity 4, cluster identity 4711 [ 480.223851][ T8862] tipc: Node number set to 4 [ 480.711617][ T8877] netlink: 20 bytes leftover after parsing attributes in process `syz.5.589'. [ 480.951880][ T8881] netlink: 224 bytes leftover after parsing attributes in process `syz.4.588'. [ 485.282989][ T5839] Bluetooth: hci1: unexpected event for opcode 0x1001 [ 487.529906][ T11] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 488.011185][ T29] audit: type=1800 audit(2000000178.269:28): pid=8928 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.6.602" name="SYSV00000000" dev="hugetlbfs" ino=0 res=0 errno=0 [ 489.061801][ T8941] Device name cannot be null; rc = [-22] [ 490.141660][ T5842] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 490.209471][ T5842] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 490.296424][ T5842] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 490.307987][ T5842] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 490.317937][ T5842] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 490.325998][ T5842] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 490.774907][ T11] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 491.640138][ T8960] can0: slcan on ttyS3. [ 492.182064][ T11] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 492.876150][ T8961] Cannot find set identified by id 0 to match [ 492.991449][ T5842] Bluetooth: hci0: command tx timeout [ 493.134608][ T8964] netlink: 4 bytes leftover after parsing attributes in process `syz.3.611'. [ 493.143570][ T8964] netlink: 4 bytes leftover after parsing attributes in process `syz.3.611'. [ 493.152922][ T8964] netlink: 4 bytes leftover after parsing attributes in process `syz.3.611'. [ 493.539662][ T8946] can0 (unregistered): slcan off ttyS3. [ 493.638037][ T11] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 495.675752][ T5842] Bluetooth: hci0: command tx timeout [ 496.016100][ T11] bridge_slave_1: left allmulticast mode [ 496.021800][ T11] bridge_slave_1: left promiscuous mode [ 496.028041][ T11] bridge0: port 2(bridge_slave_1) entered disabled state [ 496.055891][ T11] bridge_slave_0: left allmulticast mode [ 496.061833][ T11] bridge0: port 1(bridge_slave_0) entered disabled state [ 498.023721][ T5839] Bluetooth: hci0: command tx timeout [ 498.595397][ T5891] usb 4-1: new high-speed USB device number 5 using dummy_hcd [ 498.673260][ T8995] loop6: detected capacity change from 0 to 164 [ 498.784163][ T5891] usb 4-1: Using ep0 maxpacket: 32 [ 498.819327][ T5891] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 498.838903][ T5891] usb 4-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 498.873283][ T5891] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 498.891176][ T5891] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 498.908191][ T5891] usb 4-1: Product: syz [ 498.912525][ T5891] usb 4-1: Manufacturer: syz [ 498.926910][ T5891] usb 4-1: SerialNumber: syz [ 498.973514][ T5891] cdc_ncm 4-1:1.0: skipping garbage [ 498.988628][ T5891] cdc_ncm 4-1:1.0: CDC Union missing and no IAD found [ 499.004361][ T5891] cdc_ncm 4-1:1.0: bind() failure [ 499.077533][ T11] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 499.172958][ T11] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 499.319789][ T11] bond0 (unregistering): Released all slaves [ 499.400562][ T5891] usb 4-1: USB disconnect, device number 5 [ 500.049146][ T5839] Bluetooth: hci0: command tx timeout [ 500.786136][ T11] tipc: Left network mode [ 500.879547][ T9008] Bluetooth: MGMT ver 1.23 [ 500.898820][ T9008] loop6: detected capacity change from 0 to 8 [ 501.380035][ T8949] chnl_net:caif_netlink_parms(): no params data found [ 501.616038][ T9017] loop6: detected capacity change from 0 to 128 [ 501.706158][ T9017] EXT4-fs (loop6): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 502.027120][ T9017] ext4 filesystem being mounted at /36/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 502.458375][ T1295] ieee802154 phy1 wpan1: encryption failed: -22 [ 504.571563][ T9045] loop5: detected capacity change from 0 to 256 [ 504.638072][ T9046] x_tables: ip6_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING [ 504.781846][ T7966] EXT4-fs (loop6): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 504.794254][ T8949] bridge0: port 1(bridge_slave_0) entered blocking state [ 504.894237][ T8949] bridge0: port 1(bridge_slave_0) entered disabled state [ 504.904382][ T8949] bridge_slave_0: entered allmulticast mode [ 504.912899][ T8949] bridge_slave_0: entered promiscuous mode [ 504.921638][ T8949] bridge0: port 2(bridge_slave_1) entered blocking state [ 505.054214][ T8949] bridge0: port 2(bridge_slave_1) entered disabled state [ 505.062696][ T8949] bridge_slave_1: entered allmulticast mode [ 505.103384][ T8949] bridge_slave_1: entered promiscuous mode [ 506.427114][ T9059] loop6: detected capacity change from 0 to 128 [ 506.816889][ T9059] EXT4-fs (loop6): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 506.881062][ T9059] ext4 filesystem being mounted at /37/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 507.056916][ T8949] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 507.317666][ T8949] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 507.792963][ T29] audit: type=1800 audit(2000000198.049:29): pid=9059 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.6.628" name="file1" dev="loop6" ino=12 res=0 errno=0 [ 511.981021][ T11] hsr_slave_0: left promiscuous mode [ 511.993538][ T11] hsr_slave_1: left promiscuous mode [ 511.999599][ T11] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 512.007586][ T11] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 512.008726][ T7966] EXT4-fs (loop6): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 513.294986][ T11] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 513.307441][ T11] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 514.250394][ T11] veth1_macvtap: left promiscuous mode [ 514.500453][ T11] veth0_macvtap: left promiscuous mode [ 514.506552][ T11] veth1_vlan: left promiscuous mode [ 514.512174][ T11] veth0_vlan: left promiscuous mode [ 518.978585][ T5889] IPVS: starting estimator thread 0... [ 519.166944][ T9112] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 519.177181][ T9125] IPVS: using max 22 ests per chain, 52800 per kthread [ 521.829591][ T11] team0 (unregistering): Port device team_slave_1 removed [ 521.925152][ T11] team0 (unregistering): Port device team_slave_0 removed [ 522.992297][ T8949] team0: Port device team_slave_0 added [ 523.007261][ T8949] team0: Port device team_slave_1 added [ 523.678340][ T11] IPVS: stop unused estimator thread 0... [ 524.615143][ T8949] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 524.783527][ T8949] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 524.840019][ T8949] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 524.936243][ T8949] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 524.945105][ T8949] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 525.099719][ T8949] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 525.576401][ T5839] Bluetooth: hci0: command tx timeout [ 526.539626][ T5838] usb 7-1: new high-speed USB device number 3 using dummy_hcd [ 526.694071][ T5838] usb 7-1: Using ep0 maxpacket: 16 [ 526.703327][ T5838] usb 7-1: config 0 has no interfaces? [ 526.708928][ T5838] usb 7-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 526.719530][ T5838] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 527.030899][ T5838] usb 7-1: config 0 descriptor?? [ 528.963851][ T8407] usb 7-1: USB disconnect, device number 3 [ 529.143010][ T8949] hsr_slave_0: entered promiscuous mode [ 529.163118][ T8949] hsr_slave_1: entered promiscuous mode [ 529.224161][ T8949] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 529.674523][ T9208] loop5: detected capacity change from 0 to 256 [ 529.677489][ T9208] msdos: Unknown parameter 'ÿÿÿÿÿÿÿÿ1ø·~A6QÒä:dn›`’´·OÖ&”Æ'‡d¶ Õ¤wzbÅýו01s‘w¦T_ÕY „T‹J.¯DF­¹m–‰“HùàòÎÞæl5šß¾ùHù~Ë‘_•<˜vAµ\—ÌO8‚ßÂÕ‹Šà&w)ZÊBÍͧl°eÃÆ› ¤°*GUa¹Ý.RÙUÓ×iõFg.{"…;YqÁ1S]‡C§€í¼\<Ï´0¯dots' [ 529.710085][ T9208] loop5: detected capacity change from 0 to 16 [ 530.263795][ T9208] erofs (device loop5): invalid checksum 0xe62de0bb, 0xc6d5fae7 expected [ 530.307516][ T9205] CIFS mount error: No usable UNC path provided in device string! [ 530.307516][ T9205] [ 530.307792][ T9205] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string! [ 530.350605][ T8949] Cannot create hsr debugfs directory [ 530.775107][ T9207] tty tty30: ldisc open failed (-12), clearing slot 29 [ 530.808864][ T9218] loop6: detected capacity change from 0 to 512 [ 530.932654][ T9213] netlink: 16 bytes leftover after parsing attributes in process `syz.2.663'. [ 530.941774][ T9213] netlink: 52 bytes leftover after parsing attributes in process `syz.2.663'. [ 530.998866][ T9224] dccp_invalid_packet: P.type (CLOSE) not Data || [Data]Ack, while P.X == 0 [ 531.026424][ T9213] netlink: 12 bytes leftover after parsing attributes in process `syz.2.663'. [ 531.089732][ T9213] vlan0: entered allmulticast mode [ 531.095078][ T9213] veth0_vlan: entered allmulticast mode [ 531.135635][ T9218] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 531.149211][ T9218] ext4 filesystem being mounted at /44/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 536.104708][ T9254] netlink: 168 bytes leftover after parsing attributes in process `syz.5.669'. [ 536.135667][ T7966] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 536.840700][ T9284] netlink: del zone limit has 4 unknown bytes [ 540.162506][ T8949] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 540.614352][ T8949] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 540.991006][ T8949] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 541.334270][ T8949] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 542.143342][ T9330] loop5: detected capacity change from 0 to 128 [ 542.183532][ T8949] 8021q: adding VLAN 0 to HW filter on device bond0 [ 542.186057][ T9330] UDF-fs: error (device loop5): udf_read_tagged: read failed, block=256, location=256 [ 542.248568][ T9330] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 542.254660][ T8949] 8021q: adding VLAN 0 to HW filter on device team0 [ 542.299307][ T3014] bridge0: port 1(bridge_slave_0) entered blocking state [ 542.306472][ T3014] bridge0: port 1(bridge_slave_0) entered forwarding state [ 543.484481][ T256] bridge0: port 2(bridge_slave_1) entered blocking state [ 543.491672][ T256] bridge0: port 2(bridge_slave_1) entered forwarding state [ 544.765090][ T8949] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 544.851480][ T8949] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 547.181412][ T8949] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 552.005680][ T9415] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 552.016216][ T9415] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 552.026754][ T9415] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 553.116474][ T9425] loop6: detected capacity change from 0 to 4096 [ 553.262392][ T9415] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 553.316320][ T9415] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 553.325871][ T9415] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 553.515336][ T9431] loop5: detected capacity change from 0 to 164 [ 554.797020][ T9442] fuse: Bad value for 'fd' [ 555.683043][ T9415] Bluetooth: hci4: command tx timeout [ 558.083606][ T9415] Bluetooth: hci4: command tx timeout [ 560.340829][ T9415] Bluetooth: hci4: command tx timeout [ 560.530367][ T9409] chnl_net:caif_netlink_parms(): no params data found [ 561.622092][ T47] IPVS: starting estimator thread 0... [ 562.690533][ T9415] Bluetooth: hci4: command tx timeout [ 563.856349][ T9494] IPVS: using max 28 ests per chain, 67200 per kthread [ 565.225065][ T47] usb 4-1: new full-speed USB device number 6 using dummy_hcd [ 566.507883][ T47] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 566.518975][ T47] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 566.531990][ T47] usb 4-1: New USB device found, idVendor=04d8, idProduct=00dd, bcdDevice= 0.00 [ 566.541345][ T47] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 566.591906][ T47] usb 4-1: config 0 descriptor?? [ 567.853230][ T9531] netlink: 8 bytes leftover after parsing attributes in process `syz.2.714'. [ 568.676594][ T9409] bridge0: port 1(bridge_slave_0) entered blocking state [ 568.701085][ T9409] bridge0: port 1(bridge_slave_0) entered disabled state [ 568.858724][ T9409] bridge_slave_0: entered allmulticast mode [ 569.036177][ T9409] bridge_slave_0: entered promiscuous mode [ 569.450460][ T9409] bridge0: port 2(bridge_slave_1) entered blocking state [ 569.563227][ T47] usbhid 4-1:0.0: can't add hid device: -71 [ 569.575972][ T9409] bridge0: port 2(bridge_slave_1) entered disabled state [ 569.578255][ T47] usbhid 4-1:0.0: probe with driver usbhid failed with error -71 [ 569.583374][ T9409] bridge_slave_1: entered allmulticast mode [ 569.595107][ T47] usb 4-1: USB disconnect, device number 6 [ 569.663537][ T9409] bridge_slave_1: entered promiscuous mode [ 572.759960][ T9559] loop6: detected capacity change from 0 to 16 [ 572.767999][ T9549] loop5: detected capacity change from 0 to 4096 [ 572.798062][ T9559] erofs (device loop6): mounted with root inode @ nid 36. [ 572.857843][ T29] audit: type=1800 audit(2000000262.315:30): pid=9558 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.6.721" name="file0" dev="loop6" ino=49 res=0 errno=0 [ 572.919426][ T48] bridge_slave_1: left allmulticast mode [ 572.927372][ T48] bridge_slave_1: left promiscuous mode [ 572.933604][ T48] bridge0: port 2(bridge_slave_1) entered disabled state [ 573.077722][ T48] bridge_slave_0: left allmulticast mode [ 573.088172][ T48] bridge_slave_0: left promiscuous mode [ 573.101782][ T48] bridge0: port 1(bridge_slave_0) entered disabled state [ 573.344004][ T9564] loop6: detected capacity change from 0 to 2048 [ 573.410958][ T9564] NILFS (loop6): broken superblock, retrying with spare superblock (blocksize = 1024) [ 573.455463][ T8918] udevd[8918]: incorrect nilfs2 checksum on /dev/loop6 [ 573.574592][ T9565] NILFS (loop6): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 575.772752][ T48] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 575.854184][ T48] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 575.874782][ T48] bond0 (unregistering): Released all slaves [ 575.912042][ T9409] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 575.927502][ T9409] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 576.250935][ T9583] loop5: detected capacity change from 0 to 1024 [ 576.508677][ T9583] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 576.930230][ T48] hsr_slave_0: left promiscuous mode [ 576.948498][ T48] hsr_slave_1: left promiscuous mode [ 576.974557][ T48] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 577.038091][ T48] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 577.071552][ T6718] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 578.442386][ T9590] loop6: detected capacity change from 0 to 32768 [ 579.393477][ T9590] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop6 (7:6) scanned by syz.6.726 (9590) [ 579.736953][ T9590] BTRFS info (device loop6): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 579.759451][ T9590] BTRFS info (device loop6): using crc32c (crc32c-x86_64) checksum algorithm [ 579.771562][ T48] team0 (unregistering): Port device team_slave_1 removed [ 579.773551][ T9590] BTRFS info (device loop6): using free-space-tree [ 580.959668][ T9590] workqueue: Failed to create a rescuer kthread for wq "btrfs-worker": -EINTR [ 580.965067][ T9590] workqueue: Failed to create a rescuer kthread for wq "btrfs-delalloc": -EINTR [ 581.447594][ T9590] workqueue: Failed to create a rescuer kthread for wq "btrfs-flush_delalloc": -EINTR [ 581.762803][ T9590] workqueue: Failed to create a rescuer kthread for wq "btrfs-cache": -EINTR [ 581.773398][ T9590] workqueue: Failed to create a rescuer kthread for wq "btrfs-fixup": -EINTR [ 582.063077][ T9590] workqueue: Failed to create a rescuer kthread for wq "btrfs-endio": -EINTR [ 582.077905][ T48] team0 (unregistering): Port device team_slave_0 removed [ 582.108749][ T9590] workqueue: Failed to create a rescuer kthread for wq "btrfs-endio-meta": -EINTR [ 582.109248][ T9590] workqueue: Failed to create a rescuer kthread for wq "btrfs-rmw": -EINTR [ 582.757738][ T9590] workqueue: Failed to create a rescuer kthread for wq "btrfs-endio-write": -EINTR [ 582.821967][ T9590] workqueue: Failed to create a rescuer kthread for wq "btrfs-compressed-write": -EINTR [ 582.848541][ T9590] workqueue: Failed to create a rescuer kthread for wq "btrfs-freespace-write": -EINTR [ 582.891949][ T9590] workqueue: Failed to create a rescuer kthread for wq "btrfs-delayed-meta": -EINTR [ 582.983216][ T9590] workqueue: Failed to create a rescuer kthread for wq "btrfs-qgroup-rescan": -EINTR [ 583.110421][ T9590] BTRFS error (device loop6): open_ctree failed: -12 [ 585.131580][ T9663] loop6: detected capacity change from 0 to 256 [ 585.196010][ T9663] exfat: Deprecated parameter 'utf8' [ 585.359307][ T9663] exFAT-fs (loop6): failed to load upcase table (idx : 0x00010000, chksum : 0x36e00b20, utbl_chksum : 0xe619d30d) [ 585.824956][ T9670] Bluetooth: hci0: Frame reassembly failed (-84) [ 585.840931][ T9671] netlink: 120 bytes leftover after parsing attributes in process `syz.6.735'. [ 585.903185][ T35] Bluetooth: hci0: Frame reassembly failed (-84) [ 586.064674][ T29] audit: type=1800 audit(2000000274.681:31): pid=9663 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.6.735" name="file1" dev="loop6" ino=1048611 res=0 errno=0 [ 586.088039][ C0] vkms_vblank_simulate: vblank timer overrun [ 586.556372][ T9675] loop5: detected capacity change from 0 to 164 [ 586.747497][ T9409] team0: Port device team_slave_0 added [ 586.771122][ T9409] team0: Port device team_slave_1 added [ 588.113967][ T9415] Bluetooth: hci0: Entering manufacturer mode failed (-110) [ 588.707607][ T9687] loop6: detected capacity change from 0 to 512 [ 588.733186][ T9409] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 588.862990][ T9409] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 588.948500][ T9409] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 588.990956][ T9689] tipc: Enabling of bearer rejected, failed to enable media [ 589.106390][ T9409] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 589.117492][ T9409] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 589.168419][ T9687] EXT4-fs error (device loop6): ext4_orphan_get:1389: inode #17: comm syz.6.741: iget: bogus i_mode (0) [ 589.269548][ T9697] netlink: 68 bytes leftover after parsing attributes in process `syz.3.743'. [ 589.322563][ T9409] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 590.118068][ T9687] EXT4-fs error (device loop6): ext4_orphan_get:1394: comm syz.6.741: couldn't read orphan inode 17 (err -117) [ 590.191035][ T9687] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 590.315744][ T9685] Bluetooth: hci4: command 0x0405 tx timeout [ 590.903984][ T9708] netlink: 32 bytes leftover after parsing attributes in process `syz.2.746'. [ 591.529517][ T9694] EXT4-fs error (device loop6): ext4_validate_block_bitmap:432: comm ext4lazyinit: bg 0: block 7: invalid block bitmap [ 591.644528][ T9409] hsr_slave_0: entered promiscuous mode [ 591.746528][ T9409] hsr_slave_1: entered promiscuous mode [ 591.809392][ T7966] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 591.821284][ T9719] loop5: detected capacity change from 0 to 64 [ 591.833722][ T9719] hfs: Unknown parameter 'smackfsdef' [ 592.134037][ T9409] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 592.141788][ T9409] Cannot create hsr debugfs directory [ 593.207381][ T9730] vivid-003: kernel_thread() failed [ 597.070346][ T9750] loop6: detected capacity change from 0 to 512 [ 597.163659][ T9750] EXT4-fs (loop6): encrypted files will use data=ordered instead of data journaling mode [ 597.554323][ T9760] input: syz0 as /devices/virtual/input/input12 [ 597.657885][ T9750] EXT4-fs (loop6): 1 truncate cleaned up [ 597.802938][ T9750] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 599.372336][ T9775] netlink: 68 bytes leftover after parsing attributes in process `syz.3.757'. [ 600.001553][ T9774] EXT4-fs error (device loop6): ext4_find_dest_de:2079: inode #2: block 13: comm syz.6.752: bad entry in directory: rec_len is smaller than minimal - offset=24, inode=11, rec_len=8, size=1024 fake=0 [ 600.593148][ T7966] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 602.601380][ T9795] hub 6-0:1.0: USB hub found [ 602.616752][ T9795] hub 6-0:1.0: 1 port detected [ 607.269778][ T9409] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 607.727398][ T9833] netlink: 12 bytes leftover after parsing attributes in process `syz.5.764'. [ 608.472207][ T9409] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 608.587213][ T9835] netlink: 20 bytes leftover after parsing attributes in process `syz.6.767'. [ 609.068566][ T9409] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 609.284020][ T9409] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 609.661402][ T9846] netlink: 68 bytes leftover after parsing attributes in process `syz.2.769'. [ 613.331580][ T9861] loop6: detected capacity change from 0 to 128 [ 613.414261][ T9409] 8021q: adding VLAN 0 to HW filter on device bond0 [ 613.430527][ T9409] 8021q: adding VLAN 0 to HW filter on device team0 [ 613.528697][ T9861] VFS: Found a Xenix FS (block size = 512) on device loop6 [ 613.605964][ T9409] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 613.644454][ T9861] sysv_free_block: trying to free block not in datazone [ 613.675124][ T9409] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 614.747348][ T9861] sysv_free_inode: inode 0,1,2 or nonexistent inode [ 615.030043][ T62] bridge0: port 1(bridge_slave_0) entered blocking state [ 615.037219][ T62] bridge0: port 1(bridge_slave_0) entered forwarding state [ 615.047416][ T62] bridge0: port 2(bridge_slave_1) entered blocking state [ 615.054579][ T62] bridge0: port 2(bridge_slave_1) entered forwarding state [ 615.996252][ T976] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 616.028011][ T976] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 616.036465][ T976] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 616.044225][ T976] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 616.051891][ T976] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 616.059714][ T976] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 616.067333][ T976] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 616.074990][ T976] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 616.082666][ T976] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 616.090965][ T976] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 616.099257][ T976] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 616.412553][ T976] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 616.421144][ T976] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 616.428648][ T976] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 616.436151][ T976] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 616.443608][ T976] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 616.451006][ T976] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 616.626467][ T976] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 616.633923][ T976] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 616.642039][ T976] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 616.650387][ T976] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 616.658213][ T976] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 616.665630][ T976] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 616.673221][ T976] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 616.680899][ T976] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 616.688308][ T976] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 616.696066][ T976] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 616.703869][ T976] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 616.711490][ T976] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 616.718887][ T976] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 616.726347][ T976] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 616.733834][ T976] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 616.758185][ T976] hid-generic 0000:0000:0000.0001: hidraw0: HID vffffff.ff Device [syz0] on syz0 [ 617.555503][ T5842] Bluetooth: hci3: Opcode 0x206a failed: -110 [ 617.564071][ T5842] Bluetooth: hci3: command 0x0406 tx timeout [ 617.812448][ T9883] loop6: detected capacity change from 0 to 4096 [ 618.023205][ T9883] ntfs3(loop6): ino=18, mi_enum_attr [ 618.128952][ T9892] netlink: 20 bytes leftover after parsing attributes in process `syz.3.780'. [ 618.143508][ T9883] ntfs3(loop6): Mark volume as dirty due to NTFS errors [ 619.128419][ T9685] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 619.140934][ T9685] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 619.149201][ T9685] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 619.160302][ T9685] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 619.167880][ T9685] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 619.176890][ T9685] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 619.198220][ T9883] Bluetooth: MGMT ver 1.23 [ 619.972334][ T9917] netlink: 60 bytes leftover after parsing attributes in process `syz.3.784'. [ 621.500158][ T5842] Bluetooth: hci0: command tx timeout [ 621.836161][ T9928] loop6: detected capacity change from 0 to 1024 [ 622.799868][ T9901] chnl_net:caif_netlink_parms(): no params data found [ 622.972982][ T8999] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 622.997675][ T8999] hid-generic 0000:0000:0000.0002: hidraw0: HID v0.00 Device [syz1] on syz0 [ 623.618276][ T9957] netlink: 12 bytes leftover after parsing attributes in process `syz.3.789'. [ 623.670320][ T5842] Bluetooth: hci0: command tx timeout [ 623.793391][ T9901] bridge0: port 1(bridge_slave_0) entered blocking state [ 623.804275][ T9901] bridge0: port 1(bridge_slave_0) entered disabled state [ 623.813119][ T9901] bridge_slave_0: entered allmulticast mode [ 623.995714][ T9901] bridge_slave_0: entered promiscuous mode [ 624.020548][ T9901] bridge0: port 2(bridge_slave_1) entered blocking state [ 624.028227][ T9901] bridge0: port 2(bridge_slave_1) entered disabled state [ 624.035847][ T9901] bridge_slave_1: entered allmulticast mode [ 624.042820][ T9901] bridge_slave_1: entered promiscuous mode [ 625.680367][ T9901] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 625.905791][ T9685] Bluetooth: hci0: command tx timeout [ 625.984087][ T9901] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 626.119519][ T9901] team0: Port device team_slave_0 added [ 626.128129][ T9901] team0: Port device team_slave_1 added [ 626.221234][ T9901] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 626.233136][ T9901] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 626.299394][ T9901] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 626.329615][ T9901] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 626.344899][ T9901] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 626.370801][ C1] vkms_vblank_simulate: vblank timer overrun [ 626.385993][ T9901] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 626.500268][ T9994] loop6: detected capacity change from 0 to 164 [ 626.692264][ T9901] hsr_slave_0: entered promiscuous mode [ 626.731606][ T9901] hsr_slave_1: entered promiscuous mode [ 626.750146][ T9901] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 626.780603][ T9901] Cannot create hsr debugfs directory [ 627.009974][ T6367] bridge_slave_1: left allmulticast mode [ 627.109369][ T6367] bridge_slave_1: left promiscuous mode [ 627.115255][ T6367] bridge0: port 2(bridge_slave_1) entered disabled state [ 627.297365][ T5842] Bluetooth: hci4: Opcode 0x1003 failed: -110 [ 628.352852][ T5842] Bluetooth: hci0: command tx timeout [ 628.533420][ T6367] bridge_slave_0: left allmulticast mode [ 628.593527][ T6367] bridge_slave_0: left promiscuous mode [ 628.905953][ T6367] bridge0: port 1(bridge_slave_0) entered disabled state [ 629.317577][T10017] loop6: detected capacity change from 0 to 4096 [ 629.369526][T10017] ntfs3(loop6): Different NTFS sector size (4096) and media sector size (512). [ 631.982705][T10031] vivid-000: ================= START STATUS ================= [ 631.990525][T10031] vivid-000: Generate PTS: true [ 631.995682][T10031] vivid-000: Generate SCR: true [ 632.000638][T10031] tpg source WxH: 320x180 (Y'CbCr) [ 632.005760][T10031] tpg field: 1 [ 632.009186][T10031] tpg crop: 320x180@0x0 [ 632.013347][T10031] tpg compose: 320x180@0x0 [ 632.017767][T10031] tpg colorspace: 8 [ 632.021617][T10031] tpg transfer function: 0/0 [ 632.026212][T10031] tpg Y'CbCr encoding: 0/0 [ 632.030696][T10031] tpg quantization: 0/0 [ 632.034856][T10031] tpg RGB range: 0/2 [ 632.038760][T10031] vivid-000: ================== END STATUS ================== [ 632.168307][ T6367] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 632.186392][ T6367] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 632.352886][ T6367] bond0 (unregistering): Released all slaves [ 632.904249][ T6367] hsr_slave_0: left promiscuous mode [ 632.981028][ T6367] hsr_slave_1: left promiscuous mode [ 632.987057][ T6367] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 633.334199][ T6367] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 634.692271][ T29] audit: type=1326 audit(2000000319.992:32): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10039 comm="syz.5.803" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc53ed85d29 code=0x7ffc0000 [ 635.034332][ T29] audit: type=1326 audit(2000000319.992:33): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10039 comm="syz.5.803" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc53ed85d29 code=0x7ffc0000 [ 635.825863][ T29] audit: type=1326 audit(2000000319.992:34): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10039 comm="syz.5.803" exe="/root/syz-executor" sig=0 arch=c000003e syscall=97 compat=0 ip=0x7fc53ed85d29 code=0x7ffc0000 [ 635.848143][ T29] audit: type=1326 audit(2000000319.992:35): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10039 comm="syz.5.803" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc53ed85d29 code=0x7ffc0000 [ 635.870454][ T29] audit: type=1326 audit(2000000319.992:36): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10039 comm="syz.5.803" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc53ed85d29 code=0x7ffc0000 [ 635.892751][ T29] audit: type=1326 audit(2000000319.992:37): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10039 comm="syz.5.803" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fc53ed85d29 code=0x7ffc0000 [ 635.914887][ C1] vkms_vblank_simulate: vblank timer overrun [ 635.921825][ T29] audit: type=1326 audit(2000000319.992:38): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10039 comm="syz.5.803" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc53ed85d29 code=0x7ffc0000 [ 635.944258][ T29] audit: type=1326 audit(2000000319.992:39): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10039 comm="syz.5.803" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc53ed85d29 code=0x7ffc0000 [ 635.966543][ T29] audit: type=1326 audit(2000000319.992:40): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10039 comm="syz.5.803" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fc53ed85d29 code=0x7ffc0000 [ 635.988678][ C1] vkms_vblank_simulate: vblank timer overrun [ 635.995129][ T29] audit: type=1326 audit(2000000319.992:41): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10039 comm="syz.5.803" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc53ed85d29 code=0x7ffc0000 [ 638.520248][ T5891] usb 7-1: new high-speed USB device number 4 using dummy_hcd [ 638.701523][ T5891] usb 7-1: Using ep0 maxpacket: 32 [ 638.721273][ T5891] usb 7-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 638.754823][ T5891] usb 7-1: config 1 has 0 interfaces, different from the descriptor's value: 2 [ 638.777505][ T5891] usb 7-1: New USB device found, idVendor=0e25, idProduct=a400, bcdDevice= 0.40 [ 638.789269][ T5891] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 638.797306][ T5891] usb 7-1: Product: syz [ 638.819067][ T5891] usb 7-1: Manufacturer: syz [ 638.827399][ T5891] usb 7-1: SerialNumber: syz [ 638.842185][ T6367] team0 (unregistering): Port device team_slave_1 removed [ 638.984702][T10073] loop6: detected capacity change from 0 to 524287999 [ 639.043757][ C0] blk_print_req_error: 40 callbacks suppressed [ 639.043792][ C0] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 32 prio class 0 [ 639.126538][ C0] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 639.135849][ C0] buffer_io_error: 39 callbacks suppressed [ 639.135864][ C0] Buffer I/O error on dev loop6, logical block 0, async page read [ 639.155267][ C0] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 639.164530][ C0] Buffer I/O error on dev loop6, logical block 0, async page read [ 639.670868][ T6367] team0 (unregistering): Port device team_slave_0 removed [ 639.748672][T10073] syz.2.809 (10073) used greatest stack depth: 17976 bytes left [ 641.054735][ T9685] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 641.073371][ T9685] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 641.083591][ T9685] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 641.309519][T10086] overlayfs: "xino" feature enabled using 2 upper inode bits. [ 641.647243][T10088] devtmpfs: Unknown parameter 'posixacl' [ 641.895753][ T9685] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 641.907530][ T9685] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 642.030287][ T9685] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 642.603363][ T976] usb 3-1: new high-speed USB device number 4 using dummy_hcd [ 642.618675][T10061] netlink: 8 bytes leftover after parsing attributes in process `syz.6.807'. [ 643.375375][ T8999] usb 7-1: USB disconnect, device number 4 [ 643.513707][ T976] usb 3-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 643.522377][ T976] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 643.671693][ T976] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 643.684463][ T976] usb 3-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 644.292074][ T9685] Bluetooth: hci4: command tx timeout [ 644.350552][ T976] usb 3-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 644.624588][ T976] usb 3-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 644.677591][ T976] usb 3-1: Product: syz [ 644.681814][ T976] usb 3-1: Manufacturer: syz [ 645.180203][ T976] cdc_wdm 3-1:1.0: probe with driver cdc_wdm failed with error -22 [ 645.425361][T10115] netlink: 28 bytes leftover after parsing attributes in process `syz.6.818'. [ 645.435052][T10115] netlink: 472 bytes leftover after parsing attributes in process `syz.6.818'. [ 646.033983][ T976] usb 3-1: USB disconnect, device number 4 [ 647.395841][ T9685] Bluetooth: hci4: command tx timeout [ 648.820691][T10081] chnl_net:caif_netlink_parms(): no params data found [ 649.345599][T10147] netlink: 4 bytes leftover after parsing attributes in process `syz.6.822'. [ 649.778090][ T9685] Bluetooth: hci4: command tx timeout [ 650.996858][T10160] netlink: 72 bytes leftover after parsing attributes in process `syz.5.821'. [ 652.057189][ T9685] Bluetooth: hci4: command tx timeout [ 652.354257][T10157] sctp: failed to load transform for md5: -2 [ 656.115463][T10199] netlink: del zone limit has 4 unknown bytes [ 657.264247][T10081] bridge0: port 1(bridge_slave_0) entered blocking state [ 657.325847][T10081] bridge0: port 1(bridge_slave_0) entered disabled state [ 657.363877][T10081] bridge_slave_0: entered allmulticast mode [ 657.386194][T10081] bridge_slave_0: entered promiscuous mode [ 657.429278][T10081] bridge0: port 2(bridge_slave_1) entered blocking state [ 657.465666][T10081] bridge0: port 2(bridge_slave_1) entered disabled state [ 657.473336][T10207] xt_CT: No such helper "syz0" [ 657.485394][T10081] bridge_slave_1: entered allmulticast mode [ 657.752617][T10081] bridge_slave_1: entered promiscuous mode [ 658.279764][T10081] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 658.525448][T10081] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 658.730520][ T9901] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 659.270174][T10225] netlink: 4 bytes leftover after parsing attributes in process `syz.5.833'. [ 659.920529][T10081] team0: Port device team_slave_0 added [ 659.969024][ T9901] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 659.988895][ T9901] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 660.015982][T10081] team0: Port device team_slave_1 added [ 660.193768][ T9901] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 660.397178][T10240] loop6: detected capacity change from 0 to 1024 [ 663.630014][T10081] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 663.632671][ T11] hfsplus: b-tree write err: -5, ino 4 [ 663.648575][T10081] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 663.738857][T10081] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 663.815788][T10081] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 663.840561][T10081] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 663.918563][T10081] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 664.055739][T10270] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 664.522088][T10267] loop6: detected capacity change from 0 to 32768 [ 664.700272][T10081] hsr_slave_0: entered promiscuous mode [ 664.707403][T10081] hsr_slave_1: entered promiscuous mode [ 664.731924][T10081] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 664.761642][T10081] Cannot create hsr debugfs directory [ 664.968797][ T9901] 8021q: adding VLAN 0 to HW filter on device bond0 [ 664.984889][ T9901] 8021q: adding VLAN 0 to HW filter on device team0 [ 665.020082][ T9901] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 665.031139][ T9901] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 665.054055][ T2988] bridge0: port 1(bridge_slave_0) entered blocking state [ 665.061258][ T2988] bridge0: port 1(bridge_slave_0) entered forwarding state [ 665.070736][ T2988] bridge0: port 2(bridge_slave_1) entered blocking state [ 665.077872][ T2988] bridge0: port 2(bridge_slave_1) entered forwarding state [ 665.103363][T10267] gfs2: fsid=syz:syz: Trying to join cluster "lock_nolock", "syz:syz" [ 665.113679][T10267] gfs2: fsid=syz:syz: Now mounting FS (format 1801)... [ 665.399673][T10267] gfs2: fsid=syz:syz.0: journal 0 mapped with 16 extents in 0ms [ 665.924673][ T976] gfs2: fsid=syz:syz.0: jid=0, already locked for use [ 665.932063][ T976] gfs2: fsid=syz:syz.0: jid=0: Looking at journal... [ 667.094093][T10278] IPVS: Error connecting to the multicast addr [ 667.138731][ T976] gfs2: fsid=syz:syz.0: jid=0: Journal head lookup took 1128ms [ 667.170931][ T976] gfs2: fsid=syz:syz.0: jid=0: Done [ 667.217114][T10267] gfs2: fsid=syz:syz.0: first mount done, others may mount [ 668.681273][ T9901] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 669.000656][T10081] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 669.213295][T10081] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 669.880370][T10081] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 670.075217][T10315] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 670.083524][T10315] batadv_slave_0: entered promiscuous mode [ 670.101675][T10081] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 671.242330][ T9901] veth0_vlan: entered promiscuous mode [ 671.271242][ T9901] veth1_vlan: entered promiscuous mode [ 671.287726][T10081] 8021q: adding VLAN 0 to HW filter on device bond0 [ 671.319826][ T9901] veth0_macvtap: entered promiscuous mode [ 671.328697][T10081] 8021q: adding VLAN 0 to HW filter on device team0 [ 671.342642][ T9901] veth1_macvtap: entered promiscuous mode [ 672.608363][ T256] bridge0: port 1(bridge_slave_0) entered blocking state [ 672.615603][ T256] bridge0: port 1(bridge_slave_0) entered forwarding state [ 672.845806][ T9901] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 672.856598][ T9901] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 672.867081][ T9901] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 672.877781][ T9901] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 672.887877][ T9901] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 672.898406][ T9901] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 672.908664][ T9901] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 672.919546][ T9901] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 672.930740][ T9901] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 673.003333][T10081] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 673.014139][T10081] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 674.009305][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 674.016468][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 674.259861][ T9901] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 674.291376][ T9901] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 674.342857][ T9901] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 674.515902][ T9901] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 675.462718][ T9901] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 676.524886][ T9901] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 676.535297][ T9901] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 676.545870][ T9901] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 676.556168][ T9901] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 676.567784][ T9901] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 676.589130][ T9901] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 676.890249][ T9901] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 676.907865][ T9901] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 676.947650][ T9901] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 676.959147][ T9901] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 677.177218][T10081] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 678.042831][T10345] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 678.062564][T10345] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 678.094320][ T4373] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 678.114667][ T4373] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 678.246006][ T5889] usb 3-1: new high-speed USB device number 5 using dummy_hcd [ 679.742483][T10395] loop4: detected capacity change from 0 to 1024 [ 679.867821][T10396] do_dccp_setsockopt: sockopt(PACKET_SIZE) is deprecated: fix your app [ 680.101557][ T5889] usb 3-1: Using ep0 maxpacket: 32 [ 680.350062][T10395] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=f04cc01c, mo2=0002] [ 680.363053][T10395] System zones: 0-1, 3-36 [ 680.368561][T10395] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 680.443338][T10394] EXT4-fs (loop4): re-mounted 00000000-0000-0000-0000-000000000000 ro. Quota mode: writeback. [ 680.692905][ T9901] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 680.789282][ T5889] usb 3-1: device descriptor read/all, error -71 [ 682.454294][T10081] veth0_vlan: entered promiscuous mode [ 682.464115][T10081] veth1_vlan: entered promiscuous mode [ 682.485064][T10081] veth0_macvtap: entered promiscuous mode [ 682.518151][T10081] veth1_macvtap: entered promiscuous mode [ 682.533553][T10081] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 682.546412][T10081] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 682.556466][T10081] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 682.567235][T10081] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 682.577220][T10081] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 682.587831][T10081] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 682.597914][T10081] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 682.608556][T10081] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 682.618555][T10081] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 682.629182][T10081] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 682.640526][T10081] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 682.651795][T10081] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 682.662468][T10081] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 682.672370][T10081] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 682.683153][T10081] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 682.693188][T10081] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 682.703893][T10081] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 682.713770][T10081] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 682.724308][T10081] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 682.734224][T10081] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 682.744833][T10081] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 682.754775][T10081] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 682.766045][T10081] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 682.777715][T10081] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 682.787608][T10081] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 682.796588][T10081] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 682.805494][T10081] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 682.814305][T10081] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 683.253013][ T5932] IPVS: starting estimator thread 0... [ 684.305142][T10434] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 685.041084][T10429] IPVS: using max 21 ests per chain, 50400 per kthread [ 685.184966][T10435] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 685.192538][T10435] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 685.198809][T10435] Bluetooth: hci5: Opcode 0x0c1a failed: -4 [ 685.204838][T10435] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 685.210867][T10435] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 685.228539][T10435] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 685.240251][T10435] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 685.246225][T10435] Bluetooth: hci4: Opcode 0x0406 failed: -4 [ 685.256425][T10435] Bluetooth: hci4: Opcode 0x0406 failed: -4 [ 685.557297][T10440] loop6: detected capacity change from 0 to 512 [ 685.591841][ T4373] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 685.599707][ T4373] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 685.615875][T10440] EXT4-fs (loop6): encrypted files will use data=ordered instead of data journaling mode [ 685.621942][ T256] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 685.812927][ T256] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 686.190837][T10440] EXT4-fs (loop6): 1 truncate cleaned up [ 686.224839][T10447] loop4: detected capacity change from 0 to 1024 [ 686.232960][T10440] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 687.436188][ T5842] Bluetooth: hci0: command 0x0c1a tx timeout [ 687.448573][ T5842] Bluetooth: hci5: command 0x0419 tx timeout [ 687.459095][ T5842] Bluetooth: hci1: command 0x080f tx timeout [ 687.466130][ T5842] Bluetooth: hci3: command 0x0406 tx timeout [ 687.472652][ T5842] Bluetooth: hci4: command 0x0c1a tx timeout [ 687.689714][T10460] sd 0:0:1:0: ioctl_internal_command: ILLEGAL REQUEST asc=0x20 ascq=0x0 [ 689.696990][ T5842] Bluetooth: hci4: command 0x0c1a tx timeout [ 689.697073][ T9685] Bluetooth: hci0: command 0x0c1a tx timeout [ 690.946912][ T35] hfsplus: b-tree write err: -5, ino 8 [ 690.954416][ T7966] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 691.680729][T10472] netlink: 32 bytes leftover after parsing attributes in process `syz.2.871'. [ 691.740145][ T5956] IPVS: starting estimator thread 0... [ 691.951987][ T9685] Bluetooth: hci0: command 0x0c1a tx timeout [ 691.952036][ T5842] Bluetooth: hci4: command 0x0c1a tx timeout [ 691.990241][T10479] loop4: detected capacity change from 0 to 128 [ 692.014947][T10476] IPVS: using max 31 ests per chain, 74400 per kthread [ 692.595740][T10479] EXT4-fs (loop4): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 692.616805][T10479] ext4 filesystem being mounted at /4/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 693.932684][T10496] loop6: detected capacity change from 0 to 40427 [ 693.940537][T10496] F2FS-fs (loop6): Invalid Fs Meta Ino: node(1) meta(2) root(0) [ 693.948600][T10496] F2FS-fs (loop6): Can't find valid F2FS filesystem in 1th superblock [ 693.957996][T10496] F2FS-fs (loop6): Unrecognized mount option "extenNÇæžãÛÙ“kt_cache" or missing value [ 693.961693][T10492] netlink: 4 bytes leftover after parsing attributes in process `syz.5.878'. [ 695.240939][T10506] loop6: detected capacity change from 0 to 512 [ 695.367404][T10506] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 695.605855][T10506] ext4 filesystem being mounted at /98/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 697.771972][ T9901] EXT4-fs (loop4): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 697.783982][ T7966] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 700.316525][T10539] tty tty4: ldisc open failed (-12), clearing slot 3 [ 701.420850][T10552] syz.6.884: attempt to access beyond end of device [ 701.420850][T10552] nbd6: rw=0, sector=0, nr_sectors = 2 limit=0 [ 703.066835][T10562] xfrm0: entered allmulticast mode [ 703.151954][T10562] loop4: detected capacity change from 0 to 2048 [ 703.165946][T10557] tipc: Enabled bearer , priority 23 [ 703.742906][T10568] NILFS (loop4): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 704.012371][T10560] 9pnet_virtio: no channels available for device syz [ 704.191779][T10569] block device autoloading is deprecated and will be removed. [ 704.203373][T10569] syz.6.892: attempt to access beyond end of device [ 704.203373][T10569] md0: rw=2048, sector=0, nr_sectors = 8 limit=0 [ 705.672486][T10582] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 706.860660][T10592] loop4: detected capacity change from 0 to 256 [ 707.064301][T10592] exfat: Unknown parameter 'ÿÿ' [ 708.340224][T10599] netlink: 4 bytes leftover after parsing attributes in process `syz.6.897'. [ 708.349607][T10599] netlink: 16 bytes leftover after parsing attributes in process `syz.6.897'. [ 708.720509][T10601] 9pnet_virtio: no channels available for device [ 709.890031][T10599] netdevsim netdevsim6 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 709.899097][T10599] netdevsim netdevsim6 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 709.909067][T10599] netdevsim netdevsim6 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 709.918252][T10599] netdevsim netdevsim6 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 709.928983][T10599] vxlan0: entered promiscuous mode [ 710.347023][T10605] netlink: 44 bytes leftover after parsing attributes in process `syz.4.900'. [ 710.661007][T10605] loop4: detected capacity change from 0 to 24 [ 712.693052][T10632] loop7: detected capacity change from 0 to 8 [ 712.751134][T10632] unable to read fragment index table [ 713.099875][T10625] workqueue: Failed to create a rescuer kthread for wq "nfc2_nci_tx_wq": -EINTR [ 714.474920][ T9685] Bluetooth: hci4: command 0x0c1a tx timeout [ 714.705182][T10644] input: syz0 as /devices/virtual/input/input14 [ 715.281795][T10650] workqueue: Failed to create a rescuer kthread for wq "nfc2_nci_cmd_wq": -EINTR [ 715.598867][ T5889] usb 7-1: new high-speed USB device number 5 using dummy_hcd [ 716.668710][ T5889] usb 7-1: device descriptor read/all, error -71 [ 721.959296][ T5842] Bluetooth: hci5: ACL packet for unknown connection handle 201 [ 722.309779][T10694] loop7: detected capacity change from 0 to 16 [ 722.487806][T10694] erofs (device loop7): mounted with root inode @ nid 36. [ 731.782050][T10751] mkiss: ax0: crc mode is auto. [ 731.797337][T10751] misc userio: Invalid payload size [ 731.804123][T10751] misc userio: No port type given on /dev/userio [ 731.904230][T10752] misc userio: The device must be registered before sending interrupts [ 732.443628][T10754] loop6: detected capacity change from 0 to 1024 [ 733.770832][T10754] EXT4-fs (loop6): Test dummy encryption mode enabled [ 735.150136][T10754] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 736.680556][T10784] ERROR: device name not specified. [ 737.533696][ T7966] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 737.805406][T10789] 9pnet_fd: Insufficient options for proto=fd [ 739.121821][T10798] loop6: detected capacity change from 0 to 16 [ 739.164266][T10798] erofs (device loop6): mounted with root inode @ nid 36. [ 739.179008][T10798] syz.6.939: attempt to access beyond end of device [ 739.179008][T10798] loop6: rw=524288, sector=16, nr_sectors = 16 limit=16 [ 739.193013][T10798] syz.6.939: attempt to access beyond end of device [ 739.193013][T10798] loop6: rw=524288, sector=8, nr_sectors = 16 limit=16 [ 739.211623][T10798] syz.6.939: attempt to access beyond end of device [ 739.211623][T10798] loop6: rw=0, sector=8, nr_sectors = 16 limit=16 [ 739.226023][T10798] erofs (device loop6): read error -5 @ 8200 of nid 36 [ 739.278537][T10798] syz.6.939: attempt to access beyond end of device [ 739.278537][T10798] loop6: rw=0, sector=8, nr_sectors = 16 limit=16 [ 739.293787][T10798] erofs (device loop6): read error -5 @ 8200 of nid 36 [ 739.317203][T10798] syz.6.939: attempt to access beyond end of device [ 739.317203][T10798] loop6: rw=0, sector=8, nr_sectors = 16 limit=16 [ 739.330344][T10798] erofs (device loop6): read error -5 @ 8200 of nid 36 [ 739.351811][T10798] syz.6.939: attempt to access beyond end of device [ 739.351811][T10798] loop6: rw=0, sector=8, nr_sectors = 16 limit=16 [ 739.365484][T10798] erofs (device loop6): read error -5 @ 8200 of nid 36 [ 739.392825][ T5842] Bluetooth: hci4: unexpected event for opcode 0x2042 [ 743.725865][ T5842] Bluetooth: hci4: Controller not accepting commands anymore: ncmd = 0 [ 743.735269][ T5842] Bluetooth: hci4: Injecting HCI hardware error event [ 743.746211][ T5839] Bluetooth: hci4: hardware error 0x00 [ 745.416105][T10833] No buffer was provided with the request [ 746.211590][ T5956] IPVS: starting estimator thread 0... [ 746.255819][ T5839] Bluetooth: hci4: Opcode 0x0c03 failed: -110 [ 746.662504][T10835] IPVS: using max 24 ests per chain, 57600 per kthread [ 747.324537][T10845] trusted_key: syz.2.951 sent an empty control message without MSG_MORE. [ 750.547229][T10857] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 754.543576][ T5838] usb 3-1: new high-speed USB device number 7 using dummy_hcd [ 755.754906][T10884] block device autoloading is deprecated and will be removed. [ 756.535317][T10906] overlayfs: missing 'lowerdir' [ 760.244794][T10922] netlink: 36 bytes leftover after parsing attributes in process `syz.7.968'. [ 760.254761][T10922] netlink: 16 bytes leftover after parsing attributes in process `syz.7.968'. [ 760.304367][T10925] loop6: detected capacity change from 0 to 764 [ 760.336929][T10925] rock: directory entry would overflow storage [ 760.376869][T10925] rock: sig=0x4654, size=5, remaining=4 [ 761.284265][T10922] netlink: 36 bytes leftover after parsing attributes in process `syz.7.968'. [ 763.604527][T10922] netlink: 36 bytes leftover after parsing attributes in process `syz.7.968'. [ 767.150499][T10968] netlink: 20 bytes leftover after parsing attributes in process `syz.5.978'. [ 770.131689][ T976] usb 5-1: new high-speed USB device number 3 using dummy_hcd [ 770.746483][T10991] netlink: 'syz.7.987': attribute type 3 has an invalid length. [ 770.754244][T10991] netlink: 3 bytes leftover after parsing attributes in process `syz.7.987'. [ 770.834064][ T29] kauditd_printk_skb: 13 callbacks suppressed [ 770.834082][ T29] audit: type=1326 audit(2000000447.515:55): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10992 comm="syz.6.986" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0e07b85d29 code=0x7ffc0000 [ 770.893792][ T29] audit: type=1326 audit(2000000447.553:56): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10992 comm="syz.6.986" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0e07b85d29 code=0x7ffc0000 [ 770.954922][ T29] audit: type=1326 audit(2000000447.553:57): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10992 comm="syz.6.986" exe="/root/syz-executor" sig=0 arch=c000003e syscall=81 compat=0 ip=0x7f0e07b85d29 code=0x7ffc0000 [ 770.955414][ T976] usb 5-1: Using ep0 maxpacket: 8 [ 770.977785][ T29] audit: type=1326 audit(2000000447.553:58): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10992 comm="syz.6.986" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0e07b85d29 code=0x7ffc0000 [ 771.006137][ T29] audit: type=1326 audit(2000000447.553:59): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10992 comm="syz.6.986" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0e07b85d29 code=0x7ffc0000 [ 771.031738][ T29] audit: type=1326 audit(2000000447.553:60): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10992 comm="syz.6.986" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f0e07b85d29 code=0x7ffc0000 [ 771.058644][ T976] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x6 has invalid wMaxPacketSize 0 [ 772.106356][ T976] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 772.116455][ T976] usb 5-1: New USB device found, idVendor=2294, idProduct=425b, bcdDevice=56.ef [ 772.125783][ T976] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 772.137641][ T976] usb 5-1: config 0 descriptor?? [ 772.150390][ T976] usb 5-1: ucan: probing device on interface #0 [ 772.156805][ T976] usb 5-1: ucan: invalid endpoint configuration [ 772.163088][ T976] usb 5-1: ucan: probe failed; try to update the device firmware [ 772.375555][ T29] audit: type=1326 audit(2000000447.553:61): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10992 comm="syz.6.986" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0e07b85d29 code=0x7ffc0000 [ 772.410312][ T29] audit: type=1326 audit(2000000447.553:62): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10992 comm="syz.6.986" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0e07b85d29 code=0x7ffc0000 [ 772.433124][ T29] audit: type=1326 audit(2000000447.553:63): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10992 comm="syz.6.986" exe="/root/syz-executor" sig=0 arch=c000003e syscall=49 compat=0 ip=0x7f0e07b85d29 code=0x7ffc0000 [ 772.456087][ T29] audit: type=1326 audit(2000000447.553:64): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10992 comm="syz.6.986" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0e07b85d29 code=0x7ffc0000 [ 775.269035][ T5956] usb 5-1: USB disconnect, device number 3 [ 776.692856][T11033] netlink: 20 bytes leftover after parsing attributes in process `syz.4.995'. [ 777.901441][T11031] loop6: detected capacity change from 0 to 1024 [ 779.248561][T11052] CIFS: Unable to determine destination address [ 780.048968][T11055] sd 0:0:1:0: ioctl_internal_command: ILLEGAL REQUEST asc=0x20 ascq=0x0 [ 781.586107][T11059] netlink: 'syz.7.1003': attribute type 10 has an invalid length. [ 781.898062][T11059] macvlan0: entered allmulticast mode [ 782.435973][T11059] veth1_vlan: entered allmulticast mode [ 782.642939][T11059] bond0: (slave macvlan0): Enslaving as an active interface with an up link [ 782.668971][T11060] netdevsim netdevsim7: Direct firmware load for €ìY¬¼¡ failed with error -2 [ 782.825608][T11060] netdevsim netdevsim7: Falling back to sysfs fallback for: €ìY¬¼¡ [ 784.761452][ T29] kauditd_printk_skb: 8 callbacks suppressed [ 784.761471][ T29] audit: type=1326 audit(2000000459.741:73): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11072 comm="syz.6.1006" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0e07b85d29 code=0x7ffc0000 [ 784.893619][ T29] audit: type=1326 audit(2000000459.741:74): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11072 comm="syz.6.1006" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0e07b85d29 code=0x7ffc0000 [ 785.104411][ T29] audit: type=1326 audit(2000000459.741:75): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11072 comm="syz.6.1006" exe="/root/syz-executor" sig=0 arch=c000003e syscall=302 compat=0 ip=0x7f0e07b85d29 code=0x7ffc0000 [ 785.127241][ T29] audit: type=1326 audit(2000000459.741:76): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11072 comm="syz.6.1006" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0e07b85d29 code=0x7ffc0000 [ 785.150255][ T29] audit: type=1326 audit(2000000459.741:77): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11072 comm="syz.6.1006" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0e07b85d29 code=0x7ffc0000 [ 785.172863][ T29] audit: type=1326 audit(2000000459.741:78): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11072 comm="syz.6.1006" exe="/root/syz-executor" sig=0 arch=c000003e syscall=151 compat=0 ip=0x7f0e07b85d29 code=0x7ffc0000 [ 785.397967][ T29] audit: type=1326 audit(2000000459.778:79): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11072 comm="syz.6.1006" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0e07b85d29 code=0x7ffc0000 [ 785.996502][ T29] audit: type=1326 audit(2000000459.778:80): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11072 comm="syz.6.1006" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0e07b85d29 code=0x7ffc0000 [ 786.127897][ T29] audit: type=1326 audit(2000000459.900:81): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11072 comm="syz.6.1006" exe="/root/syz-executor" sig=0 arch=c000003e syscall=281 compat=0 ip=0x7f0e07b85d29 code=0x7ffc0000 [ 786.177869][T11093] loop6: detected capacity change from 0 to 64 [ 786.285307][ T29] audit: type=1326 audit(2000000459.900:82): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11072 comm="syz.6.1006" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0e07b85d29 code=0x7ffc0000 [ 788.699294][T11111] netlink: del zone limit has 4 unknown bytes [ 788.756788][T11114] loop7: detected capacity change from 0 to 1024 [ 790.537477][T11114] EXT4-fs (loop7): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 790.773338][T11114] EXT4-fs (loop7): revision level too high, forcing read-only mode [ 790.781689][T11114] EXT4-fs (loop7): orphan cleanup on readonly fs [ 790.790693][T11114] __quota_error: 1 callbacks suppressed [ 790.790710][T11114] Quota error (device loop7): v2_read_file_info: Can't read info structure [ 790.805560][T11114] EXT4-fs warning (device loop7): ext4_enable_quotas:7145: Failed to enable quota tracking (type=0, err=-5, ino=3). Please run e2fsck to fix. [ 790.806204][T11116] loop6: detected capacity change from 0 to 4096 [ 790.821019][T11114] EXT4-fs (loop7): Cannot turn on quotas: error -5 [ 790.835300][T11116] NILFS (loop6): broken superblock, retrying with spare superblock (blocksize = 1024) [ 790.850826][T11114] EXT4-fs (loop7): 1 truncate cleaned up [ 790.858243][T11114] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 790.931030][T10953] udevd[10953]: incorrect nilfs2 checksum on /dev/loop6 [ 790.976536][T11116] NILFS (loop6): broken superblock, retrying with spare superblock (blocksize = 4096) [ 791.325122][T10081] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 791.781689][T11123] NILFS (loop6): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 791.831222][T11116] NILFS error (device loop6): nilfs_bmap_lookup_at_level: broken bmap (inode number=6) [ 791.961942][T11116] Remounting filesystem read-only [ 793.948468][ T29] audit: type=1804 audit(2000000469.029:84): pid=11134 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.5.1021" name="/newroot/165/file0" dev="fuse" ino=1 res=1 errno=0 [ 794.399372][T11148] ecryptfs: Unknown parameter 'l' [ 797.114923][ T30] INFO: task kworker/u8:4:62 blocked for more than 143 seconds. [ 797.122582][ T30] Not tainted 6.13.0-rc6-next-20250107-syzkaller #0 [ 797.776338][ T30] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 797.788299][ T30] task:kworker/u8:4 state:D stack:18872 pid:62 tgid:62 ppid:2 flags:0x00004000 [ 797.798519][ T30] Workqueue: events_unbound netfs_write_collection_worker [ 797.946274][ T30] Call Trace: [ 797.950089][ T30] [ 797.953054][ T30] __schedule+0x18f6/0x4cd0 [ 797.957687][ T30] ? __pfx___schedule+0x10/0x10 [ 797.963025][ T30] ? __pfx_lock_release+0x10/0x10 [ 797.968083][ T30] ? schedule+0x90/0x320 [ 797.972417][ T30] ? wq_worker_sleeping+0x66/0x240 [ 797.977549][ T30] ? schedule+0x90/0x320 [ 797.986456][ T30] schedule+0x14b/0x320 [ 797.990660][ T30] bit_wait+0x12/0xd0 [ 797.994777][ T30] __wait_on_bit+0xb0/0x2f0 [ 797.999301][ T30] ? __pfx_bit_wait+0x10/0x10 [ 798.004314][ T30] out_of_line_wait_on_bit+0x1d5/0x260 [ 798.010013][ T30] ? __pfx_bit_wait+0x10/0x10 [ 798.974899][ T30] ? __pfx_out_of_line_wait_on_bit+0x10/0x10 [ 798.981597][ T30] ? __pfx_wake_bit_function+0x10/0x10 [ 799.043429][ T30] netfs_retry_writes+0x16e/0x19b0 [ 799.255839][ T30] ? __pfx_validate_chain+0x10/0x10 [ 799.268588][ T30] ? stack_trace_save+0x118/0x1d0 [ 799.275151][ T30] ? __pfx_netfs_retry_writes+0x10/0x10 [ 799.280721][ T30] ? lockdep_unlock+0x16a/0x300 [ 799.295787][ T30] netfs_write_collection_worker+0x2f90/0x3bb0 [ 799.302052][ T30] ? process_scheduled_works+0x976/0x1840 [ 799.658746][ T30] process_scheduled_works+0xa66/0x1840 [ 799.665150][ T30] ? __pfx_process_scheduled_works+0x10/0x10 [ 799.671494][ T30] ? assign_work+0x364/0x3d0 [ 799.679243][ T30] worker_thread+0x870/0xd30 [ 799.684036][ T30] ? __kthread_parkme+0x169/0x1d0 [ 799.689247][ T30] ? __pfx_worker_thread+0x10/0x10 [ 799.694492][ T30] kthread+0x7a9/0x920 [ 799.699101][ T30] ? __pfx_kthread+0x10/0x10 [ 799.703985][ T30] ? __pfx_worker_thread+0x10/0x10 [ 799.709118][ T30] ? __pfx_kthread+0x10/0x10 [ 799.713850][ T30] ? __pfx_kthread+0x10/0x10 [ 799.718466][ T30] ? __pfx_kthread+0x10/0x10 [ 799.723079][ T30] ? _raw_spin_unlock_irq+0x23/0x50 [ 799.728381][ T30] ? lockdep_hardirqs_on+0x99/0x150 [ 799.733596][ T30] ? __pfx_kthread+0x10/0x10 [ 799.738339][ T30] ret_from_fork+0x4b/0x80 [ 799.742765][ T30] ? __pfx_kthread+0x10/0x10 [ 799.747490][ T30] ret_from_fork_asm+0x1a/0x30 [ 799.752324][ T30] [ 799.756177][ T30] INFO: task syz.3.789:9941 blocked for more than 146 seconds. [ 799.763746][ T30] Not tainted 6.13.0-rc6-next-20250107-syzkaller #0 [ 799.771132][ T30] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 799.780044][ T30] task:syz.3.789 state:D stack:23632 pid:9941 tgid:9936 ppid:5841 flags:0x00004006 [ 799.790534][ T30] Call Trace: [ 799.794096][ T30] [ 799.797055][ T30] __schedule+0x18f6/0x4cd0 [ 799.801769][ T30] ? __pfx___schedule+0x10/0x10 [ 799.806877][ T30] ? __pfx_lock_release+0x10/0x10 [ 799.812343][ T30] ? _raw_spin_unlock_irqrestore+0x8f/0x140 [ 799.818299][ T30] ? _raw_spin_unlock_irqrestore+0xdd/0x140 [ 799.824341][ T30] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 799.830951][ T30] ? schedule+0x90/0x320 [ 799.835282][ T30] schedule+0x14b/0x320 [ 799.839486][ T30] schedule_preempt_disabled+0x13/0x30 [ 799.845080][ T30] __mutex_lock+0x817/0x1010 [ 799.849716][ T30] ? __mutex_lock+0x602/0x1010 [ 799.854714][ T30] ? netfs_writepages+0x12b/0x9e0 [ 799.859764][ T30] ? __pfx___mutex_lock+0x10/0x10 [ 799.864915][ T30] netfs_writepages+0x12b/0x9e0 [ 799.869853][ T30] ? mark_lock+0x9a/0x360 [ 799.874283][ T30] ? __pfx_lock_release+0x10/0x10 [ 799.879395][ T30] ? __lock_acquire+0x1397/0x2100 [ 799.884585][ T30] ? __pfx_netfs_writepages+0x10/0x10 [ 799.890142][ T30] ? __pfx_netfs_writepages+0x10/0x10 [ 799.895937][ T30] do_writepages+0x35f/0x880 [ 799.900578][ T30] ? __pfx_do_writepages+0x10/0x10 [ 799.906068][ T30] ? filemap_fdatawrite+0x1e8/0x2a0 [ 799.912034][ T30] ? do_raw_spin_lock+0x14f/0x370 [ 799.917818][ T30] ? __pfx_lock_release+0x10/0x10 [ 799.922952][ T30] ? do_raw_spin_unlock+0x13c/0x8b0 [ 799.928377][ T30] ? wbc_attach_and_unlock_inode+0x561/0x580 [ 799.934388][ T30] filemap_fdatawrite+0x1f3/0x2a0 [ 799.939668][ T30] ? __pfx_filemap_fdatawrite+0x10/0x10 [ 799.945237][ T30] ? kasan_record_aux_stack+0xaa/0xc0 [ 799.950855][ T30] ? __pfx_ima_file_free+0x10/0x10 [ 799.955994][ T30] v9fs_dir_release+0x151/0x560 [ 799.960963][ T30] ? __pfx___might_resched+0x10/0x10 [ 799.966269][ T30] ? __pfx_v9fs_dir_release+0x10/0x10 [ 799.971757][ T30] ? __pfx_call_rcu+0x10/0x10 [ 799.976456][ T30] ? evm_file_release+0x105/0x1e0 [ 799.981582][ T30] ? __pfx_v9fs_dir_release+0x10/0x10 [ 799.986981][ T30] __fput+0x3e9/0x9f0 [ 799.991187][ T30] task_work_run+0x24f/0x310 [ 799.995817][ T30] ? __pfx_task_work_run+0x10/0x10 [ 800.001141][ T30] ? task_work_add+0x2d8/0x450 [ 800.006437][ T30] get_signal+0x15f7/0x1750 [ 800.010987][ T30] ? fput+0x1fa/0x290 [ 800.015158][ T30] ? __pfx_get_signal+0x10/0x10 [ 800.020037][ T30] arch_do_signal_or_restart+0x96/0x860 [ 800.026054][ T30] ? __pfx_arch_do_signal_or_restart+0x10/0x10 [ 800.032229][ T30] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 800.038607][ T30] ? syscall_exit_to_user_mode+0xa3/0x340 [ 800.044417][ T30] syscall_exit_to_user_mode+0xce/0x340 [ 800.049988][ T30] do_syscall_64+0x100/0x230 [ 800.054720][ T30] ? clear_bhb_loop+0x35/0x90 [ 800.059421][ T30] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 800.065398][ T30] RIP: 0033:0x7fa538d85d29 [ 800.069834][ T30] RSP: 002b:00007fa539baa038 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 800.078359][ T30] RAX: 0000000000250000 RBX: 00007fa538f75fa0 RCX: 00007fa538d85d29 [ 800.086354][ T30] RDX: 0000000000000000 RSI: 000000000000000b RDI: 000000000000000a [ 800.094458][ T30] RBP: 00007fa538e01b08 R08: 0000000000000000 R09: 0000000000000000 [ 800.102540][ T30] R10: 000000007ffff000 R11: 0000000000000246 R12: 0000000000000000 [ 800.110918][ T30] R13: 0000000000000000 R14: 00007fa538f75fa0 R15: 00007ffd5894c558 [ 800.119303][ T30] [ 800.122384][ T30] INFO: task syz.3.789:9950 blocked for more than 146 seconds. [ 800.130120][ T30] Not tainted 6.13.0-rc6-next-20250107-syzkaller #0 [ 800.137772][ T30] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 800.146576][ T30] task:syz.3.789 state:D stack:26520 pid:9950 tgid:9936 ppid:5841 flags:0x00004004 [ 800.156905][ T30] Call Trace: [ 800.160203][ T30] [ 800.163407][ T30] __schedule+0x18f6/0x4cd0 [ 800.167965][ T30] ? __pfx___schedule+0x10/0x10 [ 800.173054][ T30] ? __pfx_lock_release+0x10/0x10 [ 800.178102][ T30] ? _raw_spin_unlock_irqrestore+0x8f/0x140 [ 800.184271][ T30] ? _raw_spin_unlock_irqrestore+0xdd/0x140 [ 800.192665][ T30] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 800.199323][ T30] ? schedule+0x90/0x320 [ 800.203678][ T30] schedule+0x14b/0x320 [ 800.207915][ T30] schedule_preempt_disabled+0x13/0x30 [ 800.213393][ T30] __mutex_lock+0x817/0x1010 [ 800.218201][ T30] ? mark_lock+0x9a/0x360 [ 800.222826][ T30] ? __mutex_lock+0x602/0x1010 [ 800.227694][ T30] ? netfs_writepages+0x12b/0x9e0 [ 800.232750][ T30] ? __pfx___mutex_lock+0x10/0x10 [ 800.237891][ T30] ? validate_chain+0x11e/0x5920 [ 800.242868][ T30] netfs_writepages+0x12b/0x9e0 [ 800.248080][ T30] ? mark_lock+0x9a/0x360 [ 800.252451][ T30] ? __pfx_validate_chain+0x10/0x10 [ 800.258048][ T30] ? __lock_acquire+0x1397/0x2100 [ 800.263104][ T30] ? __pfx_netfs_writepages+0x10/0x10 [ 800.268613][ T30] ? __pfx_netfs_writepages+0x10/0x10 [ 800.274000][ T30] do_writepages+0x35f/0x880 [ 800.278604][ T30] ? __pfx_do_writepages+0x10/0x10 [ 800.283911][ T30] ? filemap_fdatawrite+0x1e8/0x2a0 [ 800.289132][ T30] ? do_raw_spin_lock+0x14f/0x370 [ 800.294247][ T30] ? __pfx_lock_release+0x10/0x10 [ 800.299310][ T30] ? do_raw_spin_unlock+0x13c/0x8b0 [ 800.304575][ T30] ? wbc_attach_and_unlock_inode+0x561/0x580 [ 800.310572][ T30] filemap_fdatawrite+0x1f3/0x2a0 [ 800.315698][ T30] ? __pfx_filemap_fdatawrite+0x10/0x10 [ 800.321281][ T30] ? v9fs_fid_lookup+0x1b2/0xf30 [ 800.326330][ T30] v9fs_vfs_setattr+0x7e5/0xe20 [ 800.331630][ T30] ? __pfx_v9fs_vfs_setattr+0x10/0x10 [ 800.337159][ T30] ? security_inode_setattr+0xdb/0x350 [ 800.342647][ T30] ? __pfx_v9fs_vfs_setattr+0x10/0x10 [ 800.348122][ T30] notify_change+0xbca/0xe90 [ 800.352738][ T30] vfs_utimes+0x4b5/0x770 [ 800.357390][ T30] ? __pfx_vfs_utimes+0x10/0x10 [ 800.362266][ T30] ? user_path_at+0x44/0x60 [ 800.367465][ T30] ? kmem_cache_free+0x195/0x410 [ 800.372418][ T30] ? user_path_at+0x44/0x60 [ 800.377061][ T30] __se_sys_utimes+0x194/0x380 [ 800.381843][ T30] ? __pfx___se_sys_utimes+0x10/0x10 [ 800.387210][ T30] ? do_syscall_64+0x100/0x230 [ 800.392002][ T30] ? do_syscall_64+0xb6/0x230 [ 800.396785][ T30] do_syscall_64+0xf3/0x230 [ 800.401314][ T30] ? clear_bhb_loop+0x35/0x90 [ 800.406076][ T30] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 800.412135][ T30] RIP: 0033:0x7fa538d85d29 [ 800.416690][ T30] RSP: 002b:00007fa539b68038 EFLAGS: 00000246 ORIG_RAX: 00000000000000eb [ 800.425975][ T30] RAX: ffffffffffffffda RBX: 00007fa538f76160 RCX: 00007fa538d85d29 [ 800.434130][ T30] RDX: 0000000000000000 RSI: 0000000020000340 RDI: 0000000020000180 [ 800.443501][ T30] RBP: 00007fa538e01b08 R08: 0000000000000000 R09: 0000000000000000 [ 800.451731][ T30] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 800.459740][ T30] R13: 0000000000000000 R14: 00007fa538f76160 R15: 00007ffd5894c558 [ 800.468365][ T30] [ 800.472507][ T30] [ 800.472507][ T30] Showing all locks held in the system: [ 800.486385][ T30] 2 locks held by kworker/u8:1/12: [ 800.491639][ T30] #0: ffff8881446aa148 ((wq_completion)iou_exit){+.+.}-{0:0}, at: process_scheduled_works+0x93b/0x1840 [ 800.504322][ T30] #1: ffffc90000117c60 ((work_completion)(&ctx->exit_work)){+.+.}-{0:0}, at: process_scheduled_works+0x976/0x1840 [ 800.516686][ T30] 1 lock held by khungtaskd/30: [ 800.521547][ T30] #0: ffffffff8e937ee0 (rcu_read_lock){....}-{1:3}, at: debug_show_all_locks+0x55/0x2a0 [ 800.531449][ T30] 2 locks held by kworker/u8:4/62: [ 800.538814][ T30] #0: ffff88801ac89148 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_scheduled_works+0x93b/0x1840 [ 800.551458][ T30] #1: ffffc9000153fc60 ((work_completion)(&rreq->work)){+.+.}-{0:0}, at: process_scheduled_works+0x976/0x1840 [ 800.563538][ T30] 3 locks held by kworker/u8:6/2988: [ 800.568939][ T30] #0: ffff88801ac89148 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_scheduled_works+0x93b/0x1840 [ 800.581153][ T30] #1: ffffc9000c357c60 ((linkwatch_work).work){+.+.}-{0:0}, at: process_scheduled_works+0x976/0x1840 [ 800.592271][ T30] #2: ffffffff8fcbb6c8 (rtnl_mutex){+.+.}-{4:4}, at: linkwatch_event+0xe/0x60 [ 800.604667][ T30] 5 locks held by kworker/u8:9/4512: [ 800.609985][ T30] 2 locks held by getty/5593: [ 800.614770][ T30] #0: ffff88814d2f10a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x25/0x70 [ 800.624738][ T30] #1: ffffc90002fde2f0 (&ldata->atomic_read_lock){+.+.}-{4:4}, at: n_tty_read+0x6a6/0x1e00 [ 800.635044][ T30] 3 locks held by kworker/1:6/5956: [ 800.640254][ T30] #0: ffff88801ac80d48 ((wq_completion)events){+.+.}-{0:0}, at: process_scheduled_works+0x93b/0x1840 [ 800.651308][ T30] #1: ffffc900043dfc60 (deferred_process_work){+.+.}-{0:0}, at: process_scheduled_works+0x976/0x1840 [ 800.662638][ T30] #2: ffffffff8fcbb6c8 (rtnl_mutex){+.+.}-{4:4}, at: switchdev_deferred_process_work+0xe/0x20 [ 800.673128][ T30] 2 locks held by kworker/u8:11/6368: [ 800.678556][ T30] #0: ffff8881446aa148 ((wq_completion)iou_exit){+.+.}-{0:0}, at: process_scheduled_works+0x93b/0x1840 [ 800.690306][ T30] #1: ffffc900042dfc60 ((work_completion)(&ctx->exit_work)){+.+.}-{0:0}, at: process_scheduled_works+0x976/0x1840 [ 800.702524][ T30] 2 locks held by syz-executor/7966: [ 800.707956][ T30] #0: ffffffff8fcbb6c8 (rtnl_mutex){+.+.}-{4:4}, at: tun_chr_close+0x3b/0x1b0 [ 800.716969][ T30] #1: ffffffff8e93d3b8 (rcu_state.exp_mutex){+.+.}-{4:4}, at: synchronize_rcu_expedited+0x381/0x830 [ 800.727931][ T30] 1 lock held by syz.3.789/9941: [ 800.732915][ T30] #0: ffff888056cf8500 (&ctx->wb_lock){+.+.}-{4:4}, at: netfs_writepages+0x12b/0x9e0 [ 800.742594][ T30] 1 lock held by syz.3.789/9948: [ 800.747529][ T30] #0: ffff888056cf8500 (&ctx->wb_lock){+.+.}-{4:4}, at: netfs_writepages+0xcf/0x9e0 [ 800.757202][ T30] 3 locks held by syz.3.789/9950: [ 800.762300][ T30] #0: ffff88807cfdc420 (sb_writers#31){.+.+}-{0:0}, at: mnt_want_write+0x3f/0x90 [ 800.772007][ T30] #1: ffff888056cf8148 (&sb->s_type->i_mutex_key#40){++++}-{4:4}, at: vfs_utimes+0x44d/0x770 [ 800.782392][ T30] #2: ffff888056cf8500 (&ctx->wb_lock){+.+.}-{4:4}, at: netfs_writepages+0x12b/0x9e0 [ 800.792589][ T30] 1 lock held by syz.2.1020/11151: [ 800.797724][ T30] #0: ffffffff8fcbb6c8 (rtnl_mutex){+.+.}-{4:4}, at: tun_chr_close+0x3b/0x1b0 [ 800.806862][ T30] [ 800.809200][ T30] ============================================= [ 800.809200][ T30] [ 800.817773][ T30] NMI backtrace for cpu 1 [ 800.817795][ T30] CPU: 1 UID: 0 PID: 30 Comm: khungtaskd Not tainted 6.13.0-rc6-next-20250107-syzkaller #0 [ 800.817812][ T30] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 800.817821][ T30] Call Trace: [ 800.817827][ T30] [ 800.817832][ T30] dump_stack_lvl+0x241/0x360 [ 800.817854][ T30] ? __pfx_dump_stack_lvl+0x10/0x10 [ 800.817868][ T30] ? __pfx__printk+0x10/0x10 [ 800.817896][ T30] nmi_cpu_backtrace+0x49c/0x4d0 [ 800.817923][ T30] ? __pfx_nmi_cpu_backtrace+0x10/0x10 [ 800.817942][ T30] ? _printk+0xd5/0x120 [ 800.817962][ T30] ? __pfx__printk+0x10/0x10 [ 800.817982][ T30] ? __wake_up_klogd+0xcc/0x110 [ 800.818000][ T30] ? __pfx__printk+0x10/0x10 [ 800.818020][ T30] ? __rcu_read_unlock+0xa1/0x110 [ 800.818040][ T30] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 800.818058][ T30] nmi_trigger_cpumask_backtrace+0x198/0x320 [ 800.818082][ T30] watchdog+0xff6/0x1040 [ 800.818100][ T30] ? watchdog+0x1ea/0x1040 [ 800.818122][ T30] ? __pfx_watchdog+0x10/0x10 [ 800.818139][ T30] kthread+0x7a9/0x920 [ 800.818156][ T30] ? __pfx_kthread+0x10/0x10 [ 800.818175][ T30] ? __pfx_watchdog+0x10/0x10 [ 800.818193][ T30] ? __pfx_kthread+0x10/0x10 [ 800.818210][ T30] ? __pfx_kthread+0x10/0x10 [ 800.818230][ T30] ? __pfx_kthread+0x10/0x10 [ 800.818248][ T30] ? _raw_spin_unlock_irq+0x23/0x50 [ 800.818269][ T30] ? lockdep_hardirqs_on+0x99/0x150 [ 800.818284][ T30] ? __pfx_kthread+0x10/0x10 [ 800.818304][ T30] ret_from_fork+0x4b/0x80 [ 800.818322][ T30] ? __pfx_kthread+0x10/0x10 [ 800.818341][ T30] ret_from_fork_asm+0x1a/0x30 [ 800.818367][ T30] [ 800.818373][ T30] Sending NMI from CPU 1 to CPUs 0: [ 800.987954][ C0] NMI backtrace for cpu 0 [ 800.987968][ C0] CPU: 0 UID: 0 PID: 3014 Comm: kworker/u8:7 Not tainted 6.13.0-rc6-next-20250107-syzkaller #0 [ 800.987985][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 800.987995][ C0] Workqueue: bat_events batadv_nc_worker [ 800.988020][ C0] RIP: 0010:unwind_next_frame+0x6df/0x22d0 [ 800.988044][ C0] Code: 48 01 c8 48 83 e0 fe 49 8d 1c 46 48 89 d8 48 c1 e8 03 48 b9 00 00 00 00 00 fc ff df 0f b6 04 08 84 c0 75 27 48 63 03 48 01 d8 <48> 8d 4b 04 4c 39 f8 4c 0f 46 f1 48 8d 43 fc 48 0f 47 e8 4c 0f 46 [ 800.988056][ C0] RSP: 0018:ffffc900000072f0 EFLAGS: 00000283 [ 800.988069][ C0] RAX: ffffffff81ac9698 RBX: ffffffff9030b264 RCX: dffffc0000000000 [ 800.988080][ C0] RDX: 00000000000af644 RSI: ffffffff90a900b0 RDI: 0000000000000001 [ 800.988090][ C0] RBP: ffffffff9030b264 R08: 0000000000000001 R09: ffffc900000074b0 [ 800.988100][ C0] R10: ffffc90000007410 R11: ffffffff81aafb60 R12: ffffffff9030b264 [ 800.988111][ C0] R13: ffffffff9030b264 R14: ffffffff9030b264 R15: ffffffff81ac9c2a [ 800.988123][ C0] FS: 0000000000000000(0000) GS:ffff8880b8600000(0000) knlGS:0000000000000000 [ 800.988135][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 800.988145][ C0] CR2: 0000561fa2845588 CR3: 000000007efd0000 CR4: 00000000003526f0 [ 800.988158][ C0] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 800.988167][ C0] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 800.988176][ C0] Call Trace: [ 800.988181][ C0] [ 800.988187][ C0] ? nmi_cpu_backtrace+0x3c2/0x4d0 [ 800.988209][ C0] ? __pfx_lock_acquire+0x10/0x10 [ 800.988229][ C0] ? __pfx_nmi_cpu_backtrace+0x10/0x10 [ 800.988250][ C0] ? nmi_handle+0x2a/0x5a0 [ 800.988277][ C0] ? nmi_cpu_backtrace_handler+0xc/0x20 [ 800.988293][ C0] ? nmi_handle+0x14f/0x5a0 [ 800.988313][ C0] ? nmi_handle+0x2a/0x5a0 [ 800.988334][ C0] ? unwind_next_frame+0x6df/0x22d0 [ 800.988353][ C0] ? default_do_nmi+0x63/0x160 [ 800.988373][ C0] ? exc_nmi+0x123/0x1f0 [ 800.988391][ C0] ? end_repeat_nmi+0xf/0x53 [ 800.988411][ C0] ? __hrtimer_run_queues+0x59a/0xd30 [ 800.988437][ C0] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 800.988466][ C0] ? __hrtimer_run_queues+0x8/0xd30 [ 800.988489][ C0] ? unwind_next_frame+0x6df/0x22d0 [ 800.988508][ C0] ? unwind_next_frame+0x6df/0x22d0 [ 800.988529][ C0] ? unwind_next_frame+0x6df/0x22d0 [ 800.988548][ C0] [ 800.988553][ C0] [ 800.988562][ C0] ? __hrtimer_run_queues+0x59b/0xd30 [ 800.988584][ C0] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 800.988600][ C0] arch_stack_walk+0x11c/0x150 [ 800.988624][ C0] ? __hrtimer_run_queues+0x59b/0xd30 [ 800.988648][ C0] stack_trace_save+0x118/0x1d0 [ 800.988664][ C0] ? __pfx_stack_trace_save+0x10/0x10 [ 800.988685][ C0] kasan_save_track+0x3f/0x80 [ 800.988704][ C0] ? kasan_save_track+0x3f/0x80 [ 800.988721][ C0] ? __kasan_slab_alloc+0x66/0x80 [ 800.988739][ C0] ? kmem_cache_alloc_node_noprof+0x1d9/0x380 [ 800.988754][ C0] ? kmalloc_reserve+0xa8/0x2a0 [ 800.988768][ C0] ? __alloc_skb+0x1f3/0x440 [ 800.988781][ C0] ? __netdev_alloc_skb+0x103/0xa00 [ 800.988794][ C0] ? __ieee80211_beacon_get+0x998/0x15c0 [ 800.988812][ C0] ? ieee80211_beacon_get_tim+0xb4/0x320 [ 800.988828][ C0] ? mac80211_hwsim_beacon_tx+0x39d/0x850 [ 800.988850][ C0] ? __iterate_interfaces+0x297/0x570 [ 800.988864][ C0] ? ieee80211_iterate_active_interfaces_atomic+0xd8/0x170 [ 800.988887][ C0] ? mac80211_hwsim_beacon+0xd4/0x1f0 [ 800.988904][ C0] ? __hrtimer_run_queues+0x59b/0xd30 [ 800.988943][ C0] __kasan_slab_alloc+0x66/0x80 [ 800.988963][ C0] kmem_cache_alloc_node_noprof+0x1d9/0x380 [ 800.988978][ C0] ? kmalloc_reserve+0xa8/0x2a0 [ 800.988994][ C0] kmalloc_reserve+0xa8/0x2a0 [ 800.989009][ C0] __alloc_skb+0x1f3/0x440 [ 800.989025][ C0] ? __pfx___alloc_skb+0x10/0x10 [ 800.989041][ C0] ? __pfx_lock_acquire+0x10/0x10 [ 800.989060][ C0] __netdev_alloc_skb+0x103/0xa00 [ 800.989076][ C0] ? __pfx___netdev_alloc_skb+0x10/0x10 [ 800.989090][ C0] ? mark_lock+0x9a/0x360 [ 800.989113][ C0] __ieee80211_beacon_get+0x998/0x15c0 [ 800.989129][ C0] ? __ieee80211_beacon_get+0x36/0x15c0 [ 800.989151][ C0] ieee80211_beacon_get_tim+0xb4/0x320 [ 800.989170][ C0] ? __pfx_ieee80211_beacon_get_tim+0x10/0x10 [ 800.989192][ C0] mac80211_hwsim_beacon_tx+0x39d/0x850 [ 800.989216][ C0] __iterate_interfaces+0x297/0x570 [ 800.989232][ C0] ? __pfx_mac80211_hwsim_beacon_tx+0x10/0x10 [ 800.989254][ C0] ? __pfx_mac80211_hwsim_beacon_tx+0x10/0x10 [ 800.989275][ C0] ? ieee80211_iterate_active_interfaces_atomic+0x2a/0x170 [ 800.989293][ C0] ieee80211_iterate_active_interfaces_atomic+0xd8/0x170 [ 800.989311][ C0] mac80211_hwsim_beacon+0xd4/0x1f0 [ 800.989329][ C0] ? __pfx_mac80211_hwsim_beacon+0x10/0x10 [ 800.989347][ C0] __hrtimer_run_queues+0x59b/0xd30 [ 800.989368][ C0] ? ktime_get_update_offsets_now+0x2d/0x3b0 [ 800.989394][ C0] ? __pfx___hrtimer_run_queues+0x10/0x10 [ 800.989415][ C0] ? read_tsc+0x9/0x20 [ 800.989430][ C0] ? ktime_get_update_offsets_now+0x38e/0x3b0 [ 800.989451][ C0] hrtimer_run_softirq+0x19a/0x2c0 [ 800.989474][ C0] handle_softirqs+0x2d4/0x9b0 [ 800.989493][ C0] ? __irq_exit_rcu+0xf7/0x220 [ 800.989508][ C0] ? __pfx_handle_softirqs+0x10/0x10 [ 800.989524][ C0] ? irqtime_account_irq+0xd4/0x1e0 [ 800.989545][ C0] __irq_exit_rcu+0xf7/0x220 [ 800.989559][ C0] ? __pfx___irq_exit_rcu+0x10/0x10 [ 800.989578][ C0] irq_exit_rcu+0x9/0x30 [ 800.989591][ C0] sysvec_apic_timer_interrupt+0xa6/0xc0 [ 800.989605][ C0] [ 800.989610][ C0] [ 800.989615][ C0] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 800.989635][ C0] RIP: 0010:lock_acquire+0x264/0x550 [ 800.989653][ C0] Code: 2b 00 74 08 4c 89 f7 e8 8a e6 8a 00 f6 44 24 61 02 0f 85 85 01 00 00 41 f7 c7 00 02 00 00 74 01 fb 48 c7 44 24 40 0e 36 e0 45 <4b> c7 44 25 00 00 00 00 00 43 c7 44 25 09 00 00 00 00 43 c7 44 25 [ 800.989665][ C0] RSP: 0018:ffffc9000c467940 EFLAGS: 00000206 [ 800.989677][ C0] RAX: 0000000000000001 RBX: 1ffff9200188cf34 RCX: ffff8880305764e8 [ 800.989688][ C0] RDX: dffffc0000000000 RSI: ffffffff8c0aad40 RDI: ffffffff8c600460 [ 800.989699][ C0] RBP: ffffc9000c467aa0 R08: ffffffff942db847 R09: 1ffffffff285b708 [ 800.989710][ C0] R10: dffffc0000000000 R11: fffffbfff285b709 R12: 1ffff9200188cf30 [ 800.989721][ C0] R13: dffffc0000000000 R14: ffffc9000c4679a0 R15: 0000000000000246 [ 800.989742][ C0] ? __pfx_lock_acquire+0x10/0x10 [ 800.989761][ C0] ? batadv_nc_worker+0xcb/0x610 [ 800.989780][ C0] ? __pfx_lock_release+0x10/0x10 [ 800.989800][ C0] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 800.989822][ C0] batadv_nc_worker+0xec/0x610 [ 800.989840][ C0] ? batadv_nc_worker+0xcb/0x610 [ 800.989858][ C0] ? batadv_nc_worker+0xcb/0x610 [ 800.989881][ C0] ? process_scheduled_works+0x976/0x1840 [ 800.989898][ C0] process_scheduled_works+0xa66/0x1840 [ 800.989926][ C0] ? __pfx_process_scheduled_works+0x10/0x10 [ 800.989946][ C0] ? assign_work+0x364/0x3d0 [ 800.989964][ C0] worker_thread+0x870/0xd30 [ 800.989983][ C0] ? _raw_spin_unlock_irqrestore+0xdd/0x140 [ 800.990007][ C0] ? __kthread_parkme+0x169/0x1d0 [ 800.990026][ C0] ? __pfx_worker_thread+0x10/0x10 [ 800.990042][ C0] kthread+0x7a9/0x920 [ 800.990059][ C0] ? __pfx_kthread+0x10/0x10 [ 800.990078][ C0] ? __pfx_worker_thread+0x10/0x10 [ 800.990095][ C0] ? __pfx_kthread+0x10/0x10 [ 800.990112][ C0] ? __pfx_kthread+0x10/0x10 [ 800.990132][ C0] ? __pfx_kthread+0x10/0x10 [ 800.990150][ C0] ? _raw_spin_unlock_irq+0x23/0x50 [ 800.990170][ C0] ? lockdep_hardirqs_on+0x99/0x150 [ 800.990185][ C0] ? __pfx_kthread+0x10/0x10 [ 800.990203][ C0] ret_from_fork+0x4b/0x80 [ 800.990220][ C0] ? __pfx_kthread+0x10/0x10 [ 800.990239][ C0] ret_from_fork_asm+0x1a/0x30 [ 800.990262][ C0] [ 801.006428][ T30] Kernel panic - not syncing: hung_task: blocked tasks [ 801.006447][ T30] CPU: 1 UID: 0 PID: 30 Comm: khungtaskd Not tainted 6.13.0-rc6-next-20250107-syzkaller #0 [ 801.006466][ T30] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 801.006476][ T30] Call Trace: [ 801.006483][ T30] [ 801.006491][ T30] dump_stack_lvl+0x241/0x360 [ 801.006515][ T30] ? __pfx_dump_stack_lvl+0x10/0x10 [ 801.006533][ T30] ? __pfx__printk+0x10/0x10 [ 801.006553][ T30] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 801.006581][ T30] ? vscnprintf+0x5d/0x90 [ 801.006604][ T30] panic+0x349/0x880 [ 801.006636][ T30] ? nmi_trigger_cpumask_backtrace+0x244/0x320 [ 801.006661][ T30] ? __pfx_panic+0x10/0x10 [ 801.006687][ T30] ? preempt_schedule_thunk+0x1a/0x30 [ 801.006708][ T30] ? nmi_trigger_cpumask_backtrace+0x244/0x320 [ 801.006729][ T30] ? nmi_trigger_cpumask_backtrace+0x2d4/0x320 [ 801.006758][ T30] ? nmi_trigger_cpumask_backtrace+0x2d9/0x320 [ 801.006782][ T30] watchdog+0x1035/0x1040 [ 801.006803][ T30] ? watchdog+0x1ea/0x1040 [ 801.006827][ T30] ? __pfx_watchdog+0x10/0x10 [ 801.006847][ T30] kthread+0x7a9/0x920 [ 801.006866][ T30] ? __pfx_kthread+0x10/0x10 [ 801.006887][ T30] ? __pfx_watchdog+0x10/0x10 [ 801.006906][ T30] ? __pfx_kthread+0x10/0x10 [ 801.006925][ T30] ? __pfx_kthread+0x10/0x10 [ 801.006947][ T30] ? __pfx_kthread+0x10/0x10 [ 801.006966][ T30] ? _raw_spin_unlock_irq+0x23/0x50 [ 801.006988][ T30] ? lockdep_hardirqs_on+0x99/0x150 [ 801.007004][ T30] ? __pfx_kthread+0x10/0x10 [ 801.007025][ T30] ret_from_fork+0x4b/0x80 [ 801.007044][ T30] ? __pfx_kthread+0x10/0x10 [ 801.007064][ T30] ret_from_fork_asm+0x1a/0x30 [ 801.007093][ T30] [ 801.922477][ T30] Kernel Offset: disabled [ 801.926793][ T30] Rebooting in 86400 seconds..