last executing test programs: 10m47.677859274s ago: executing program 0 (id=326): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./bus\x00', 0x1004404, &(0x7f0000000180)={[], [{@subj_user={'subj_user', 0x3d, '/,/'}}]}, 0x23, 0x44d, &(0x7f0000000980)="$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") creat(&(0x7f0000000100)='./bus\x00', 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f00000000c0)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$IPT_SO_SET_REPLACE(r3, 0x9003000000000000, 0x40, 0x0, 0x0) bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000000680)=ANY=[], 0x20) r4 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000540), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r4, &(0x7f0000000480)={0x0, 0x18, 0xfa00, {0x0, &(0x7f00000002c0)={0xffffffffffffffff}, 0x13f}}, 0x20) write$RDMA_USER_CM_CMD_SET_OPTION(r4, &(0x7f0000000380)={0xe, 0x18, 0xfa00, @id_resuseaddr={&(0x7f0000000340)=0x1, r5, 0x0, 0x1, 0x4}}, 0x20) r6 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000540), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r6, &(0x7f0000000480)={0x0, 0x18, 0xfa00, {0x0, &(0x7f00000002c0), 0x13f}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r4, 0x0, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) 10m46.296951103s ago: executing program 0 (id=327): io_uring_setup(0x6503, 0x0) socket$netlink(0x10, 0x3, 0x0) syz_usb_connect$hid(0x0, 0x0, 0x0, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$can_raw(0x1d, 0x3, 0x1) ioctl$ifreq_SIOCGIFINDEX_team(r1, 0x8933, &(0x7f0000000040)) sendmsg$nl_route_sched(r0, 0x0, 0x0) 10m45.593984918s ago: executing program 0 (id=329): r0 = bpf$MAP_CREATE_RINGBUF(0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, 0x0, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x32, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) faccessat(0xffffffffffffffff, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x7, 0x17, &(0x7f00000007c0)=@ringbuf={{}, {{0x18, 0x1, 0x1, 0x0, r0}, {}, {}, {0x85, 0x0, 0x0, 0x5}}, {{0x6, 0x0, 0xb, 0x9, 0x0, 0x1, 0xa00}, {0x65, 0x0, 0x5}}, [@printk={@llx, {0x3, 0x3, 0x3, 0xa, 0x9}, {0x5, 0x1, 0xc, 0x1, 0x9}, {0x7, 0x0, 0x3}, {}, {}, {0x15}}], {{0x4, 0x1, 0x3, 0x3}, {0x5, 0x0, 0xb, 0x3}, {0x85, 0x0, 0x0, 0x76}}}, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) syz_mount_image$msdos(&(0x7f00000001c0), &(0x7f0000000040)='./file0\x00', 0x0, &(0x7f00000009c0)={[{@dots}, {@dots}, {@dots}, {@fat=@flush}, {@fat=@time_offset={'time_offset', 0x3d, 0x2db}}, {@nodots}, {@dots}, {@nodots}, {@nodots}, {@fat=@errors_remount}, {@dots}, {@nodots}, {@nodots}, {@dots}, {@fat=@sys_immutable}, {@fat=@dmask={'dmask', 0x3d, 0x6}}, {@dots}, {@fat=@check_strict}, {@nodots}, {@fat=@usefree}, {@fat=@errors_remount}, {@nodots}]}, 0xfd, 0x207, &(0x7f0000000780)="$eJzs3b2OElEUAOADsjAYi+1MTEzGWGi1UZ9gjVkTI4nJGgrtTLSSamlgm93H8BV8JSsLKyuzFY25Bmf4EVlcSWB09/sKODPnXu69MzDQcCZF4cvND5Fltajvx36MarEb9Zg4DQDgMhmlFN9SYbrzc6VTAgA2bOn3/1Q2fvhewbQAgA16+er188edzsFhnmcRZ6eD7qBbPBf5p886Bw/yn3Znvc4Gg+61af5hvvjbYZzfietl/lHRP5+mmxHRbcb9u0V+nHvyopP/2r8Vbze8dgAAAAAAAAAAAAAAAAAAAAAAqMrtyCeW1vfZ21vMt8t8sTVXH2ihfk8jbjXKzVl5oHSyjUUBAAAAAAAAAAAAAAAAAADAf6Y/PH7/ptd7dzQLWhExv6expM35Qa184Qs1rj6of/pazPcvu7fLZa4xaK08RJtdYHv5yb1IEI1/5eysG+RbGKu98vCmNA7mPwVp+m6ZlMU4t3szIlaPfu9w3cmPUkq9j3eO+sNIKxvPrhGt7V2OAAAAAAAAAAAAAAAAAADgSusPa5N/ff8mq2JCAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAFCB/vC4vP//GsFJRNyIPzaejLUTWbWLBQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA4NL6EQAA//+0XiJG") r4 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$UI_SET_LEDBIT(r4, 0x40045569, 0x1) setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x1, &(0x7f0000000000)=0x51, 0x4) ioctl$UI_DEV_SETUP(r4, 0x405c5503, &(0x7f0000000100)={{}, 'syz0\x00'}) ioctl$UI_DEV_CREATE(r4, 0x5501) ioctl$UI_DEV_DESTROY(r4, 0x5502) 10m43.638408678s ago: executing program 0 (id=332): syz_mount_image$ext4(&(0x7f0000000440)='ext4\x00', &(0x7f0000000140)='./file0\x00', 0x0, &(0x7f0000000080)={[{@noblock_validity}, {@dioread_nolock}, {@noinit_itable}, {@acl}, {@jqfmt_vfsv0}, {@usrjquota, 0x2e}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x6}}], [], 0x2c}, 0xc4, 0x452, &(0x7f0000000480)="$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") prlimit64(0x0, 0xe, 0x0, 0x0) mount$bind(&(0x7f00000002c0)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) mount(0x0, &(0x7f0000000040)='./file0/../file0\x00', 0x0, 0x20, &(0x7f0000000140)='usrjquota=') 10m41.338320282s ago: executing program 0 (id=338): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./bus\x00', 0x1004404, &(0x7f0000000180)={[], [{@subj_user={'subj_user', 0x3d, '/,/'}}]}, 0x23, 0x44d, &(0x7f0000000980)="$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") creat(&(0x7f0000000100)='./bus\x00', 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f00000000c0)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$IPT_SO_SET_REPLACE(r3, 0x9003000000000000, 0x40, 0x0, 0x0) bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000000680)=ANY=[], 0x20) r4 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000540), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r4, &(0x7f0000000480)={0x0, 0x18, 0xfa00, {0x0, &(0x7f00000002c0)={0xffffffffffffffff}, 0x13f}}, 0x20) write$RDMA_USER_CM_CMD_SET_OPTION(r4, &(0x7f0000000380)={0xe, 0x18, 0xfa00, @id_resuseaddr={&(0x7f0000000340)=0x1, r5, 0x0, 0x1, 0x4}}, 0x20) r6 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000540), 0x2, 0x0) write$RDMA_USER_CM_CMD_SET_OPTION(r6, &(0x7f0000000380)={0xe, 0x18, 0xfa00, @id_resuseaddr={0x0}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r4, 0x0, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) 10m40.369618412s ago: executing program 0 (id=341): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) clock_settime(0x0, &(0x7f0000000a80)) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000540)={0x6, 0x0, 0x0, 0x0, 0x40, 0x2d, &(0x7f0000000280)=""/45, 0x41100, 0xa, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, &(0x7f00000002c0)={0x9, 0x2}, 0x8, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xa9, @void, @value}, 0x94) 10m40.06159478s ago: executing program 32 (id=341): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) clock_settime(0x0, &(0x7f0000000a80)) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000540)={0x6, 0x0, 0x0, 0x0, 0x40, 0x2d, &(0x7f0000000280)=""/45, 0x41100, 0xa, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, &(0x7f00000002c0)={0x9, 0x2}, 0x8, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xa9, @void, @value}, 0x94) 4m21.203114616s ago: executing program 2 (id=485): ioctl$TCSETS(0xffffffffffffffff, 0x40045431, &(0x7f00000002c0)={0x5, 0x0, 0x200000, 0x0, 0x4, "a05c7b5d00008023e9c5bcf5ff7700"}) bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x48) bpf$PROG_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f00000000c0)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) syz_clone(0x0, 0x0, 0xfffffe11, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r2, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x4) ioctl$VT_RESIZEX(0xffffffffffffffff, 0x4b71, &(0x7f00000003c0)={0x0, 0x2, 0x400, 0x3, 0x1a}) connect$inet6(r2, &(0x7f0000000180)={0xa, 0x1, 0xfffffff8, @loopback}, 0x1c) pselect6(0x40, &(0x7f0000000600)={0x8}, 0x0, 0x0, 0x0, 0x0) sendto$inet6(r2, 0x0, 0x0, 0x840, 0x0, 0x0) sendto$inet6(r2, 0x0, 0x0, 0x2000c850, 0x0, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) dup3(r2, r3, 0x0) setsockopt$bt_BT_DEFER_SETUP(0xffffffffffffffff, 0x112, 0x7, &(0x7f0000000000), 0x4) r4 = semget(0x1, 0x3, 0x204) semctl$IPC_RMID(r4, 0x0, 0x0) 3m32.308406887s ago: executing program 2 (id=485): ioctl$TCSETS(0xffffffffffffffff, 0x40045431, &(0x7f00000002c0)={0x5, 0x0, 0x200000, 0x0, 0x4, "a05c7b5d00008023e9c5bcf5ff7700"}) bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x48) bpf$PROG_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f00000000c0)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) syz_clone(0x0, 0x0, 0xfffffe11, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r2, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x4) ioctl$VT_RESIZEX(0xffffffffffffffff, 0x4b71, &(0x7f00000003c0)={0x0, 0x2, 0x400, 0x3, 0x1a}) connect$inet6(r2, &(0x7f0000000180)={0xa, 0x1, 0xfffffff8, @loopback}, 0x1c) pselect6(0x40, &(0x7f0000000600)={0x8}, 0x0, 0x0, 0x0, 0x0) sendto$inet6(r2, 0x0, 0x0, 0x840, 0x0, 0x0) sendto$inet6(r2, 0x0, 0x0, 0x2000c850, 0x0, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) dup3(r2, r3, 0x0) setsockopt$bt_BT_DEFER_SETUP(0xffffffffffffffff, 0x112, 0x7, &(0x7f0000000000), 0x4) r4 = semget(0x1, 0x3, 0x204) semctl$IPC_RMID(r4, 0x0, 0x0) 3m10.878071694s ago: executing program 1 (id=1209): madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e) socket(0x2b, 0x1, 0xfffffffe) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x6) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) prlimit64(r0, 0x6, 0x0, &(0x7f00000000c0)) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) r3 = socket$inet6(0xa, 0x80002, 0x0) setsockopt$inet6_udp_int(r3, 0x11, 0x67, &(0x7f0000000040)=0x91, 0x4) connect$inet6(r3, &(0x7f00000001c0)={0xa, 0x4e23, 0x0, @ipv4={'\x00', '\xff\xff', @dev}}, 0x1c) syz_open_procfs(r0, &(0x7f0000000080)='net/rt6_stats\x00') socket$key(0xf, 0x3, 0x2) r4 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r4, 0x0, 0x40, &(0x7f0000000000)=@filter={'filter\x00', 0x42, 0x4, 0x338, 0xffffffff, 0x0, 0x1a8, 0xb0, 0xffffffff, 0xffffffff, 0x2a0, 0x2a0, 0x2a0, 0xffffffff, 0x5, 0x0, {[{{@ip={@multicast2, @dev, 0x0, 0x0, 'wg1\x00', 'nr0\x00'}, 0x0, 0x70, 0xb0, 0x1ba, {0x46010000, 0x2c000000000000}}, @common=@inet=@LOG={0x40, 'LOG\x00', 0x0, {0x0, 0x0, "6bc128419cfb67daad5b4809088400ed0000006c00000000000100040500"}}}, {{@uncond, 0x287, 0xd0, 0xf8, 0x0, {}, [@common=@unspec=@cpu={{0x28}}, @common=@unspec=@statistic={{0x38}}]}, @REJECT={0x28}}, {{@uncond, 0x0, 0x98, 0xf8, 0x0, {}, [@common=@inet=@set1={{0x28}}]}, @common=@SET={0x60, 'SET\x00', 0x0, {{0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x2]}}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x398) 3m8.737203106s ago: executing program 1 (id=1210): syz_mount_image$btrfs(&(0x7f0000005100), &(0x7f0000005140)='./file0\x00', 0x16, &(0x7f0000000200), 0x1, 0x50ed, &(0x7f000000a2c0)="$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") prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, 0x0, 0x0, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f00000001c0), 0x4) r4 = open(&(0x7f0000000000)='./bus\x00', 0x60142, 0x0) open(&(0x7f00000001c0)='./bus\x00', 0x101000, 0x0) fallocate(r4, 0x0, 0x0, 0x3df1) copy_file_range(0xffffffffffffffff, 0x0, r4, &(0x7f0000000300)=0x9, 0x9, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x3, &(0x7f00000004c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x11, '\x00', 0x0, @fallback=0x1c, r3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r4, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) accept$alg(0xffffffffffffffff, 0x0, 0x0) getpid() setuid(0x0) r5 = socket$l2tp6(0xa, 0x2, 0x73) bind$l2tp6(r5, 0x0, 0x0) setsockopt$inet6_int(r5, 0x29, 0x4a, &(0x7f0000000280)=0x20, 0x4) syz_emit_ethernet(0x46, &(0x7f0000000440)=ANY=[@ANYBLOB="aaaaaaaaaaaaffffffffffff86dd60f91e2e00107300fc0400"/35], 0x0) recvmmsg$unix(r5, &(0x7f00000002c0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000440)={0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) r6 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r6, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000ac0)=ANY=[@ANYBLOB="1400000024000900000000000000000009"], 0x14}}, 0x4) lsetxattr$security_capability(&(0x7f0000000040)='./file0\x00', &(0x7f0000000080), 0x0, 0x0, 0x0) 3m2.913914007s ago: executing program 1 (id=1224): r0 = dup(0xffffffffffffffff) write$6lowpan_enable(r0, &(0x7f0000000000)='0', 0xfffffd2c) r1 = syz_io_uring_setup(0x239, &(0x7f0000000380)={0x0, 0xec79, 0x10100, 0xfffffffe, 0xe0, 0x0, r0}, &(0x7f0000000180)=0x0, &(0x7f0000000080)=0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000040)=@IORING_OP_POLL_ADD={0x6, 0x2, 0x0, @fd_index=0x4, 0x0, 0x0, 0x0, {}, 0x1}) io_uring_enter(r1, 0x2ded, 0x4000, 0x0, 0x0, 0x0) futex_waitv(&(0x7f0000001080)=[{0x3, 0x0, 0x82}], 0x1, 0x0, 0x0, 0x1) 3m1.78650741s ago: executing program 1 (id=1225): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./bus\x00', 0x1004404, &(0x7f0000000180)={[], [{@subj_user={'subj_user', 0x3d, '/,/'}}]}, 0x23, 0x44d, &(0x7f0000000980)="$eJzs28tvG0UYAPBv7SR9k1CVRx9AoCDKK2nSUnpAQiCQOICEBIdyDElalboNaoJEq4oWhMoRVeLEBXFE4i/gBBcEnJC4wh1VqlAvLZyM1t5NbMd2HnXsUP9+0jozu2PPfN6d9exONoC+NZq+JBE7I+KPiBiuZusLjFb/3L55afqfm5emkyiX3/47qZS7dfPSdF40f9+OPDMQUfgsif1N6p2/cPHMVKk0ez7Ljy+c/WB8/sLF506fnTo1e2r23OTx40ePTLxwbPL5jsSZxnVr38dzB/a+/u61N6dPXHvvl++SPP6GODpktN3GJ8rlDlfXW7tq0slADxvCmhSr3TQGK/1/OIqxtPOG47VPe9o4YEOVy+Xy/a03XykDd7Gkcg4ovxS9bgjQZfkPfXr9my9dGnpsCjderl4ApXHfzpbqloEoZGUGG65vO2k0Ik5c+ffrdImNuQ8BAFDnh3T882yz8V8hau8L3ZPNoYxExL0RsTsijkXEnoi4L6JS9oGIeHCN9TdOkiwf/xSuryuwVUrHfy9mc1v147989BcjxSy3qxL/YHLydGn2cPadHIrBLWl+ok0dP776+xetttWO/9IlrT8fC2btuD6wpf49M1MLU3cSc60bn0TsG2gWf7I4E5BExN6I2LfOOk4//e2BVttWjr+NDswzlb+JeLK6/69EQ/y5pP385PjWKM0eHs+PiuV+/e3qW63qv6P4OyDd/9ubHv+L8Y8ktfO182v59K+eSl+v/vl5y2ua9R7/Q8k7des+mlpYOD8RMZS8UW107frJhnKTS+XT+A8dbN7/d8fSN7E/ItKD+KGIeDgiHsna/mhEPBYRB9t8Cz+/8vj7649/Y6Xxz6xp/y8lhqJxTfNE8cxP39dVOrL04avb/0crqUPZmtWc/1bTrrUezQAAAPB/VYiInZEUxhbThcLYWPV/+PfE9kJpbn7hmZNzH56bqT4jMBKDhfxO13DN/dCJ7J5Lnp9syB/J7ht/WdxWyY9Nz5Vmeh089LkdLfp/6q9ir1sHbDjPa0H/0v+hf+n/0L/0f+hfTfr/tl60A+i+Zr//l1d+29aNaAvQXQ3937Qf9BHX/9C/1tP/nTPg7tC2Lw91rx1AV81vi5UfkpeQWJaIwqZoxiZKXN4czehQotdnJgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAgM74LwAA//8cB+YG") creat(&(0x7f0000000100)='./bus\x00', 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f00000000c0)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x651, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$IPT_SO_SET_REPLACE(r1, 0x9003000000000000, 0x40, 0x0, 0x0) bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000000680)=ANY=[], 0x20) r2 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000540), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r2, &(0x7f0000000480)={0x0, 0x18, 0xfa00, {0x0, &(0x7f00000002c0)={0xffffffffffffffff}, 0x13f}}, 0x20) write$RDMA_USER_CM_CMD_SET_OPTION(r2, &(0x7f0000000380)={0xe, 0x18, 0xfa00, @id_resuseaddr={&(0x7f0000000340)=0x1, r3, 0x0, 0x1, 0x4}}, 0x20) write$RDMA_USER_CM_CMD_SET_OPTION(0xffffffffffffffff, &(0x7f0000000380)={0xe, 0x18, 0xfa00, @id_resuseaddr={0x0}}, 0x20) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) 3m1.147076473s ago: executing program 1 (id=1228): ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000040)=0x1) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x11, 0x4, &(0x7f00000002c0)=ANY=[], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) ioctl$I2C_RDWR(0xffffffffffffffff, 0x707, &(0x7f0000000280)={&(0x7f0000000240)=[{0x8000, 0x1411, 0x2f, &(0x7f0000000040)="3dedc26ecd786bea44f73dccf219f72d055f162127e036273404898ef93be720b05f00e8c76d2abb0758f4002f420f"}], 0x1}) sendmsg$TIPC_NL_MEDIA_GET(0xffffffffffffffff, 0x0, 0x0) socket$kcm(0x10, 0x3, 0x10) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) dup(r0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) mlock(&(0x7f0000002000/0x2000)=nil, 0x2000) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) 3m0.016591765s ago: executing program 1 (id=1231): socket$inet6(0xa, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x100008b}, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x1) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) ioctl$USBDEVFS_CONTROL(0xffffffffffffffff, 0xc0185500, 0x0) ptrace$PTRACE_SECCOMP_GET_METADATA(0x420d, 0x0, 0x10, &(0x7f0000000240)={0xd8}) syz_io_uring_setup(0x110, &(0x7f0000000140)={0x0, 0x6d89, 0x0, 0x1}, 0x0, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000080)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) clock_settime(0x0, &(0x7f0000003c80)={0x77359400}) listen(0xffffffffffffffff, 0x0) socket$pppl2tp(0x18, 0x1, 0x1) r1 = socket$pppl2tp(0x18, 0x1, 0x1) r2 = socket$inet_udp(0x2, 0x2, 0x0) connect$pppl2tp(r1, &(0x7f0000000980)=@pppol2tpin6={0x18, 0x1, {0x0, r2, 0x1, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @local}}}, 0x32) 2m47.764831238s ago: executing program 2 (id=485): ioctl$TCSETS(0xffffffffffffffff, 0x40045431, &(0x7f00000002c0)={0x5, 0x0, 0x200000, 0x0, 0x4, "a05c7b5d00008023e9c5bcf5ff7700"}) bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x48) bpf$PROG_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f00000000c0)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) syz_clone(0x0, 0x0, 0xfffffe11, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r2, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x4) ioctl$VT_RESIZEX(0xffffffffffffffff, 0x4b71, &(0x7f00000003c0)={0x0, 0x2, 0x400, 0x3, 0x1a}) connect$inet6(r2, &(0x7f0000000180)={0xa, 0x1, 0xfffffff8, @loopback}, 0x1c) pselect6(0x40, &(0x7f0000000600)={0x8}, 0x0, 0x0, 0x0, 0x0) sendto$inet6(r2, 0x0, 0x0, 0x840, 0x0, 0x0) sendto$inet6(r2, 0x0, 0x0, 0x2000c850, 0x0, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) dup3(r2, r3, 0x0) setsockopt$bt_BT_DEFER_SETUP(0xffffffffffffffff, 0x112, 0x7, &(0x7f0000000000), 0x4) r4 = semget(0x1, 0x3, 0x204) semctl$IPC_RMID(r4, 0x0, 0x0) 2m44.795938188s ago: executing program 33 (id=1231): socket$inet6(0xa, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x100008b}, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x1) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) ioctl$USBDEVFS_CONTROL(0xffffffffffffffff, 0xc0185500, 0x0) ptrace$PTRACE_SECCOMP_GET_METADATA(0x420d, 0x0, 0x10, &(0x7f0000000240)={0xd8}) syz_io_uring_setup(0x110, &(0x7f0000000140)={0x0, 0x6d89, 0x0, 0x1}, 0x0, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000080)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) clock_settime(0x0, &(0x7f0000003c80)={0x77359400}) listen(0xffffffffffffffff, 0x0) socket$pppl2tp(0x18, 0x1, 0x1) r1 = socket$pppl2tp(0x18, 0x1, 0x1) r2 = socket$inet_udp(0x2, 0x2, 0x0) connect$pppl2tp(r1, &(0x7f0000000980)=@pppol2tpin6={0x18, 0x1, {0x0, r2, 0x1, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @local}}}, 0x32) 1m58.565371147s ago: executing program 2 (id=485): ioctl$TCSETS(0xffffffffffffffff, 0x40045431, &(0x7f00000002c0)={0x5, 0x0, 0x200000, 0x0, 0x4, "a05c7b5d00008023e9c5bcf5ff7700"}) bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x48) bpf$PROG_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f00000000c0)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) syz_clone(0x0, 0x0, 0xfffffe11, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r2, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x4) ioctl$VT_RESIZEX(0xffffffffffffffff, 0x4b71, &(0x7f00000003c0)={0x0, 0x2, 0x400, 0x3, 0x1a}) connect$inet6(r2, &(0x7f0000000180)={0xa, 0x1, 0xfffffff8, @loopback}, 0x1c) pselect6(0x40, &(0x7f0000000600)={0x8}, 0x0, 0x0, 0x0, 0x0) sendto$inet6(r2, 0x0, 0x0, 0x840, 0x0, 0x0) sendto$inet6(r2, 0x0, 0x0, 0x2000c850, 0x0, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) dup3(r2, r3, 0x0) setsockopt$bt_BT_DEFER_SETUP(0xffffffffffffffff, 0x112, 0x7, &(0x7f0000000000), 0x4) r4 = semget(0x1, 0x3, 0x204) semctl$IPC_RMID(r4, 0x0, 0x0) 1m27.322422519s ago: executing program 2 (id=485): ioctl$TCSETS(0xffffffffffffffff, 0x40045431, &(0x7f00000002c0)={0x5, 0x0, 0x200000, 0x0, 0x4, "a05c7b5d00008023e9c5bcf5ff7700"}) bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x48) bpf$PROG_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f00000000c0)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) syz_clone(0x0, 0x0, 0xfffffe11, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r2, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x4) ioctl$VT_RESIZEX(0xffffffffffffffff, 0x4b71, &(0x7f00000003c0)={0x0, 0x2, 0x400, 0x3, 0x1a}) connect$inet6(r2, &(0x7f0000000180)={0xa, 0x1, 0xfffffff8, @loopback}, 0x1c) pselect6(0x40, &(0x7f0000000600)={0x8}, 0x0, 0x0, 0x0, 0x0) sendto$inet6(r2, 0x0, 0x0, 0x840, 0x0, 0x0) sendto$inet6(r2, 0x0, 0x0, 0x2000c850, 0x0, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) dup3(r2, r3, 0x0) setsockopt$bt_BT_DEFER_SETUP(0xffffffffffffffff, 0x112, 0x7, &(0x7f0000000000), 0x4) r4 = semget(0x1, 0x3, 0x204) semctl$IPC_RMID(r4, 0x0, 0x0) 1m25.56303342s ago: executing program 3 (id=1420): r0 = socket$alg(0x26, 0x5, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, 0x0, 0x0) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'xfrm0\x00'}) io_uring_setup(0x1a79, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x4}) openat$sndseq(0xffffffffffffff9c, &(0x7f0000000100), 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f00000001c0), 0x881, 0x0) accept4(r0, 0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0xe, 0x16, &(0x7f0000001900)=ANY=[@ANYBLOB="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"/1582], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) 1m23.498452769s ago: executing program 3 (id=1425): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) connect$unix(r1, &(0x7f0000002540)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0xfffffffffffffc33, &(0x7f0000000280)=0x2) move_mount(0xffffffffffffffff, 0x0, 0xffffffffffffff9c, 0x0, 0x0) r3 = syz_io_uring_setup(0x110, &(0x7f0000000140)={0x0, 0x9d87, 0xa83}, &(0x7f0000000240)=0x0, &(0x7f00000002c0)=0x0) syz_io_uring_submit(r4, r5, &(0x7f0000000200)=@IORING_OP_FADVISE={0x18, 0x0, 0x0, @fd, 0x0, 0x0, 0x40000, 0x2}) io_uring_enter(r3, 0x47f6, 0x0, 0x0, 0x0, 0x0) r6 = socket$alg(0x26, 0x5, 0x0) bind$alg(r6, &(0x7f0000000480)={0x26, 'hash\x00', 0x0, 0x0, 'nhpoly1305-sse2\x00'}, 0x58) accept4(r6, 0x0, 0x0, 0x0) mkdir(&(0x7f0000000400)='./file1\x00', 0x0) mount(0x0, &(0x7f0000000080)='./file1\x00', &(0x7f00000000c0)='pstore\x00', 0x0, 0x0) mkdir(&(0x7f0000000580)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f0000000180)='./bus\x00', &(0x7f0000000100), 0x0, &(0x7f0000000000)={[{@xino_auto}, {@lowerdir={'lowerdir', 0x3d, './file1'}, 0x3a}], [], 0x2f}) r7 = syz_open_procfs(0x0, &(0x7f00000001c0)='mountinfo\x00') read$FUSE(r7, &(0x7f0000003480)={0x2020}, 0x2020) 1m21.162234307s ago: executing program 3 (id=1427): syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000dc0)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0xfc5, 0xb080, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x3}}}}]}}]}}, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x11, 0x3, &(0x7f0000000200)=@framed, &(0x7f00000003c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='contention_end\x00', r0}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000040), 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x18, 0xf, &(0x7f0000000080)=@framed={{0x18, 0x8}, [@func={0x85, 0x0, 0x1, 0x0, 0x6}, @map_fd, @generic={0x2c}, @initr0={0x18, 0x0, 0x0, 0x0, 0x9}, @exit, @tail_call]}, &(0x7f0000000000)='GPL\x00', 0x2, 0xde, &(0x7f0000000340)=""/222, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) ioctl$SNDRV_TIMER_IOCTL_SELECT(r4, 0x40345410, &(0x7f0000000000)={{0x3}}) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000001740)={&(0x7f0000001600)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x24, 0x24, 0x4, [@struct={0x0, 0x0, 0x0, 0x4, 0x0, 0x43000000}, @union={0x0, 0x1, 0x0, 0x5, 0x0, 0x0, [{0x2, 0x1}]}]}, {0x0, [0x0, 0x2e]}}, 0x0, 0x40, 0x0, 0x1, 0x0, 0x0, @void, @value}, 0x28) ioctl$SNDRV_TIMER_IOCTL_STATUS64(r4, 0x80e85411, &(0x7f00000022c0)) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="500000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="0000000000008000280012800a00010076786c616e00000018000280140003"], 0x50}}, 0x0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) syz_usb_connect(0x6, 0x2d, 0x0, 0x0) sched_setaffinity(0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r6 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r6, &(0x7f0000019680)=""/102392, 0x18ff8) socket$netlink(0x10, 0x3, 0x9) sendmsg$IPSET_CMD_CREATE(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000700)=ANY=[@ANYBLOB="640000000206010800000000000000000000000014000780080012400003000008001140000000000500010006000000050005000200000005000400000000000900020073797a310000000015000300686173683a6970"], 0x64}}, 0x0) 1m19.982121042s ago: executing program 4 (id=1430): memfd_create(0x0, 0x3) bind$alg(0xffffffffffffffff, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000040)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x108ec2fd) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000700)={0x0, 0x18, 0xfa00, {0x0, 0x0, 0x2, 0x9}}, 0x20) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000b40)={&(0x7f0000000400)=ANY=[@ANYRES32=0x0, @ANYRES32=0x0], 0x1fc}}, 0x0) r1 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r1, &(0x7f0000000000)=[{&(0x7f0000000080)="580000001400192340834b80040d8c560a0677bc45ff810500000000000058000b480400945f64009400050028925a01000000000000008000f0fffeffe809000000fff5dd000000100001000d081000418e00000c04", 0x56}], 0x1) set_mempolicy(0x3, &(0x7f0000000040)=0x3, 0x6) sendmsg$NL80211_CMD_SET_PMKSA(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000340)={0x0}}, 0x0) syz_emit_vhci(&(0x7f0000000000)=ANY=[@ANYBLOB="043e"], 0x24) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x5, &(0x7f0000000000)=ANY=[@ANYRES8], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) socket$vsock_stream(0x28, 0x1, 0x0) setsockopt$packet_fanout(0xffffffffffffffff, 0x107, 0x12, 0x0, 0xffffffffffffffcc) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) sendto$inet6(r2, &(0x7f0000000180), 0x0, 0x40184, &(0x7f0000000000)={0xa, 0x0, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}, 0x1c) sched_setaffinity(0x0, 0x8, &(0x7f0000000040)=0x10001) r3 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) preadv(r3, &(0x7f0000000240)=[{&(0x7f0000033a80)=""/102386, 0xfffffd6e}], 0x1, 0x0, 0x0) syz_io_uring_setup(0xd2, 0x0, &(0x7f0000000040)=0x0, &(0x7f0000000080)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r4, 0x4, 0x0, 0x0, 0x4) syz_io_uring_submit(r4, r5, &(0x7f0000000200)=@IORING_OP_WRITEV={0x2, 0x0, 0x0, @fd_index=0x4, 0x0, 0x0}) 1m17.098171573s ago: executing program 3 (id=1433): socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) r1 = socket(0x28, 0x5, 0x0) bind$vsock_stream(r1, &(0x7f0000000040)={0x28, 0x0, 0x0, @local}, 0x10) listen(r1, 0x0) r2 = socket(0x28, 0x5, 0x0) connect$vsock_stream(r2, &(0x7f0000000080), 0x10) sendmmsg(r2, 0x0, 0x0, 0x24008094) close_range(r0, 0xffffffffffffffff, 0x0) 1m17.097630467s ago: executing program 4 (id=1434): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) sched_setaffinity(0x0, 0x0, 0x0) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) getxattr(&(0x7f0000000000)='./file0\x00', &(0x7f0000000180)=@known='user.incfs.id\x00', &(0x7f00000001c0)=""/17, 0x11) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000240)=ANY=[@ANYBLOB="180000000008002b000000000000000018040000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000002000000b704000000000000850000004300000095"], 0x0, 0x0, 0x11, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$TOKEN_CREATE(0x24, &(0x7f0000000600)={0x0, r3}, 0x8) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x11, 0xc, &(0x7f0000000040)=ANY=[@ANYRES32=r0], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x4e, '\x00', 0x0, @fallback=0x1e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000400)={&(0x7f00000003c0)='sched_switch\x00', r4}, 0x10) r5 = socket$vsock_stream(0x28, 0x1, 0x0) bind$vsock_stream(r5, &(0x7f0000000440), 0x10) listen(r5, 0x0) r6 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r6, &(0x7f0000000100)={0x28, 0x0, 0x0, @local}, 0x10) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000006c0)={0x11, 0x0, &(0x7f0000000000), 0x0, 0x40, 0xed, &(0x7f0000000500)=""/237, 0x41000, 0x21, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000200)={0x8, 0x5}, 0x8, 0x10, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, &(0x7f0000000680)=[{0x1, 0x4, 0x4, 0x5}], 0x10, 0xfffffff9, @void, @value}, 0x94) writev(r4, &(0x7f0000000640)=[{&(0x7f0000000840)="76f056103028386df8914875ee3302b83a83244c609c1e0b130e2df03f84432c18813fd7fa12572265cb2d875549735be8dbc0dd3c98df5fe57a5e0bbd9c700216ac41ceceb924eea3ce4de5171073e679b5af268b6cd0a84a011af2214c5756749b74405e2ee832d63f84f3a313d879a99d262e5ef587803241dedddf2dcab91cb2dc44f02b75cd9b7e2f21b1cd22c79a0c992f0b3b81a6b764bd98a93e9276d10f8687dd2a7ebb36117d437f78f2fca726378473ee487416fd1d62c897cd7afe8f100ab89d8f6e4cb944223dfbf78839b2a5d2dd9f8ed1bb8c6bdfd6a4", 0xde}, {&(0x7f0000000300)="f936e0ce2c5e6478009e4e8722e04054677c3d3d61e293cda0eea9e877d5e79df6303224a6454249b0a6c43880517e9a84e805f4c3a33b4cab0f4c33f86eced31fe35e8c9e634c48ee93eb92", 0x4c}], 0x2) r7 = accept4$unix(r5, 0x0, 0x0, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000001680)=[{{0x0, 0x0, 0x0}, 0x3}], 0x1, 0x2, 0x0) recvmsg(r7, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)=[{&(0x7f0000000480)=""/68, 0x44}], 0x1}, 0x4c2103a0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x2a0b42, 0x0) socket$inet_udp(0x2, 0x2, 0x0) mknod(&(0x7f00000000c0)='./file0\x00', 0x8001420, 0x0) mount$afs(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0), 0x300, &(0x7f0000000400)={[{@dyn}]}) 1m15.950188539s ago: executing program 4 (id=1435): r0 = socket$alg(0x26, 0x5, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, 0x0, 0x0) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'xfrm0\x00'}) io_uring_setup(0x1a79, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x4}) openat$sndseq(0xffffffffffffff9c, &(0x7f0000000100), 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f00000001c0), 0x881, 0x0) accept4(r0, 0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0xe, 0x16, &(0x7f0000001900)=ANY=[@ANYBLOB="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"/1582], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) 1m15.798041537s ago: executing program 3 (id=1436): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x6) r0 = getpid() sched_setscheduler(r0, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) connect$unix(r1, &(0x7f0000002540)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0xfffffffffffffc33, &(0x7f0000000280)=0x2) move_mount(0xffffffffffffffff, 0x0, 0xffffffffffffff9c, 0x0, 0x0) r3 = syz_io_uring_setup(0x110, &(0x7f0000000140)={0x0, 0x9d87, 0xa83}, &(0x7f0000000240)=0x0, &(0x7f00000002c0)=0x0) syz_io_uring_submit(r4, r5, &(0x7f0000000200)=@IORING_OP_FADVISE={0x18, 0x0, 0x0, @fd, 0x0, 0x0, 0x40000, 0x2}) io_uring_enter(r3, 0x47f6, 0x0, 0x0, 0x0, 0x0) r6 = socket$alg(0x26, 0x5, 0x0) bind$alg(r6, &(0x7f0000000480)={0x26, 'hash\x00', 0x0, 0x0, 'nhpoly1305-sse2\x00'}, 0x58) accept4(r6, 0x0, 0x0, 0x0) creat(0x0, 0x0) mkdir(&(0x7f0000000400)='./file1\x00', 0x0) mount(0x0, &(0x7f0000000080)='./file1\x00', &(0x7f00000000c0)='pstore\x00', 0x0, 0x0) mkdir(&(0x7f0000000580)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f0000000180)='./bus\x00', &(0x7f0000000100), 0x0, &(0x7f0000000000)={[{@xino_auto}, {@lowerdir={'lowerdir', 0x3d, './file1'}, 0x3a}], [], 0x2f}) r7 = syz_open_procfs(0x0, &(0x7f00000001c0)='mountinfo\x00') read$FUSE(r7, &(0x7f0000003480)={0x2020}, 0x2020) 1m15.00154035s ago: executing program 4 (id=1437): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x6) r0 = getpid() sched_setscheduler(r0, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) connect$unix(r1, &(0x7f0000002540)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0xfffffffffffffc33, &(0x7f0000000280)=0x2) move_mount(0xffffffffffffffff, 0x0, 0xffffffffffffff9c, 0x0, 0x0) r3 = syz_io_uring_setup(0x110, &(0x7f0000000140)={0x0, 0x9d87, 0xa83}, &(0x7f0000000240)=0x0, &(0x7f00000002c0)=0x0) syz_io_uring_submit(r4, r5, &(0x7f0000000200)=@IORING_OP_FADVISE={0x18, 0x0, 0x0, @fd, 0x0, 0x0, 0x40000, 0x2}) io_uring_enter(r3, 0x47f6, 0x0, 0x0, 0x0, 0x0) r6 = socket$alg(0x26, 0x5, 0x0) bind$alg(r6, &(0x7f0000000480)={0x26, 'hash\x00', 0x0, 0x0, 'nhpoly1305-sse2\x00'}, 0x58) accept4(r6, 0x0, 0x0, 0x0) mkdir(&(0x7f0000000400)='./file1\x00', 0x0) mount(0x0, &(0x7f0000000080)='./file1\x00', &(0x7f00000000c0)='pstore\x00', 0x0, 0x0) mkdir(&(0x7f0000000580)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f0000000180)='./bus\x00', &(0x7f0000000100), 0x0, &(0x7f0000000000)={[{@xino_auto}, {@lowerdir={'lowerdir', 0x3d, './file1'}, 0x3a}], [], 0x2f}) r7 = syz_open_procfs(0x0, &(0x7f00000001c0)='mountinfo\x00') read$FUSE(r7, &(0x7f0000003480)={0x2020}, 0x2020) 1m13.559676489s ago: executing program 3 (id=1438): sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=@newlink={0x20, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x40, 0x1400}}, 0x20}}, 0x0) r0 = socket$inet6(0xa, 0x1, 0x8010000000000084) sendmsg$IPSET_CMD_DESTROY(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)=ANY=[@ANYBLOB="1c000000000500010007"], 0x1c}}, 0x0) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4e21, 0x0, @empty}, 0x1c) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x100008b}, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000400)=0x200002) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) r2 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) r3 = openat$proc_mixer(0xffffffffffffff9c, &(0x7f0000000000)='/proc/asound/card0/oss_mixer\x00', 0x82, 0x0) r4 = fcntl$dupfd(r3, 0x2, 0xffffffffffffffff) splice(r2, 0x0, r4, 0x0, 0x2000, 0x0) setsockopt$inet6_IPV6_HOPOPTS(r0, 0x29, 0x36, &(0x7f0000000100)=ANY=[@ANYBLOB="0003"], 0x20) connect$inet6(r0, &(0x7f0000000040)={0xa, 0x4e21, 0x0, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x3d}}}, 0x1c) 1m13.064523548s ago: executing program 4 (id=1440): sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x6) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) connect$unix(r1, &(0x7f0000002540)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0xfffffffffffffc33, &(0x7f0000000280)=0x2) move_mount(0xffffffffffffffff, 0x0, 0xffffffffffffff9c, 0x0, 0x0) r3 = syz_io_uring_setup(0x110, &(0x7f0000000140)={0x0, 0x9d87, 0xa83}, &(0x7f0000000240)=0x0, &(0x7f00000002c0)=0x0) syz_io_uring_submit(r4, r5, &(0x7f0000000200)=@IORING_OP_FADVISE={0x18, 0x0, 0x0, @fd, 0x0, 0x0, 0x40000, 0x2}) io_uring_enter(r3, 0x47f6, 0x0, 0x0, 0x0, 0x0) r6 = socket$alg(0x26, 0x5, 0x0) bind$alg(r6, &(0x7f0000000480)={0x26, 'hash\x00', 0x0, 0x0, 'nhpoly1305-sse2\x00'}, 0x58) accept4(r6, 0x0, 0x0, 0x0) creat(0x0, 0x0) mkdir(&(0x7f0000000400)='./file1\x00', 0x0) mkdir(&(0x7f0000000580)='./bus\x00', 0x0) r7 = syz_open_procfs(0x0, &(0x7f00000001c0)='mountinfo\x00') read$FUSE(r7, &(0x7f0000003480)={0x2020}, 0x2020) 1m8.415726632s ago: executing program 4 (id=1449): sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=@newlink={0x20, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x40, 0x1400}}, 0x20}}, 0x0) r0 = socket$inet6(0xa, 0x1, 0x8010000000000084) sendmsg$IPSET_CMD_DESTROY(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)=ANY=[@ANYBLOB="1c000000000500010007"], 0x1c}}, 0x0) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4e21, 0x0, @empty}, 0x1c) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x100008b}, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000400)=0x200002) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) r2 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) r3 = openat$proc_mixer(0xffffffffffffff9c, &(0x7f0000000000)='/proc/asound/card0/oss_mixer\x00', 0x82, 0x0) r4 = fcntl$dupfd(r3, 0x2, 0xffffffffffffffff) splice(r2, 0x0, r4, 0x0, 0x2000, 0x0) setsockopt$inet6_IPV6_HOPOPTS(r0, 0x29, 0x36, &(0x7f0000000100)=ANY=[@ANYBLOB="0003"], 0x20) connect$inet6(r0, &(0x7f0000000040)={0xa, 0x4e21, 0x0, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x3d}}}, 0x1c) 58.285080696s ago: executing program 34 (id=1438): sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=@newlink={0x20, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x40, 0x1400}}, 0x20}}, 0x0) r0 = socket$inet6(0xa, 0x1, 0x8010000000000084) sendmsg$IPSET_CMD_DESTROY(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)=ANY=[@ANYBLOB="1c000000000500010007"], 0x1c}}, 0x0) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4e21, 0x0, @empty}, 0x1c) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x100008b}, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000400)=0x200002) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) r2 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) r3 = openat$proc_mixer(0xffffffffffffff9c, &(0x7f0000000000)='/proc/asound/card0/oss_mixer\x00', 0x82, 0x0) r4 = fcntl$dupfd(r3, 0x2, 0xffffffffffffffff) splice(r2, 0x0, r4, 0x0, 0x2000, 0x0) setsockopt$inet6_IPV6_HOPOPTS(r0, 0x29, 0x36, &(0x7f0000000100)=ANY=[@ANYBLOB="0003"], 0x20) connect$inet6(r0, &(0x7f0000000040)={0xa, 0x4e21, 0x0, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x3d}}}, 0x1c) 53.268779289s ago: executing program 35 (id=1449): sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=@newlink={0x20, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x40, 0x1400}}, 0x20}}, 0x0) r0 = socket$inet6(0xa, 0x1, 0x8010000000000084) sendmsg$IPSET_CMD_DESTROY(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)=ANY=[@ANYBLOB="1c000000000500010007"], 0x1c}}, 0x0) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4e21, 0x0, @empty}, 0x1c) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x100008b}, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000400)=0x200002) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) r2 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) r3 = openat$proc_mixer(0xffffffffffffff9c, &(0x7f0000000000)='/proc/asound/card0/oss_mixer\x00', 0x82, 0x0) r4 = fcntl$dupfd(r3, 0x2, 0xffffffffffffffff) splice(r2, 0x0, r4, 0x0, 0x2000, 0x0) setsockopt$inet6_IPV6_HOPOPTS(r0, 0x29, 0x36, &(0x7f0000000100)=ANY=[@ANYBLOB="0003"], 0x20) connect$inet6(r0, &(0x7f0000000040)={0xa, 0x4e21, 0x0, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x3d}}}, 0x1c) 50.970233123s ago: executing program 2 (id=485): ioctl$TCSETS(0xffffffffffffffff, 0x40045431, &(0x7f00000002c0)={0x5, 0x0, 0x200000, 0x0, 0x4, "a05c7b5d00008023e9c5bcf5ff7700"}) bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x48) bpf$PROG_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f00000000c0)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) syz_clone(0x0, 0x0, 0xfffffe11, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r2, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x4) ioctl$VT_RESIZEX(0xffffffffffffffff, 0x4b71, &(0x7f00000003c0)={0x0, 0x2, 0x400, 0x3, 0x1a}) connect$inet6(r2, &(0x7f0000000180)={0xa, 0x1, 0xfffffff8, @loopback}, 0x1c) pselect6(0x40, &(0x7f0000000600)={0x8}, 0x0, 0x0, 0x0, 0x0) sendto$inet6(r2, 0x0, 0x0, 0x840, 0x0, 0x0) sendto$inet6(r2, 0x0, 0x0, 0x2000c850, 0x0, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) dup3(r2, r3, 0x0) setsockopt$bt_BT_DEFER_SETUP(0xffffffffffffffff, 0x112, 0x7, &(0x7f0000000000), 0x4) r4 = semget(0x1, 0x3, 0x204) semctl$IPC_RMID(r4, 0x0, 0x0) 9.431424821s ago: executing program 7 (id=1460): r0 = socket$alg(0x26, 0x5, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, 0x0, 0x0, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'xfrm0\x00'}) io_uring_setup(0x1a79, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x4}) openat$sndseq(0xffffffffffffff9c, &(0x7f0000000100), 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f00000001c0), 0x881, 0x0) accept4(r0, 0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0xe, 0x16, &(0x7f0000001900)=ANY=[@ANYBLOB="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"/1582], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) 8.137236456s ago: executing program 6 (id=1533): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x6, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="18020000000000800000000000000000850000004100000085000000d000000095"], &(0x7f0000000140)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x9, 0x6, 0x8, 0x1, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) close(r1) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x19, 0x4, 0x4, 0x5, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000d40)=ANY=[@ANYBLOB="180000000000e3ff000000000000000018110000", @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000001000000850000000700000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000600)={&(0x7f00000005c0)='sys_enter\x00', r2}, 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000003c0)={{r1}, &(0x7f0000000000), &(0x7f0000000380)=r2}, 0x20) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x50) 8.060620827s ago: executing program 7 (id=1534): openat(0xffffffffffffff9c, 0x0, 0x2040, 0x0) socket$nl_route(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) ftruncate(0xffffffffffffffff, 0x8001) r3 = socket$inet_tcp(0x2, 0x1, 0x0) dup(0xffffffffffffffff) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r4) r5 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r4, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty}, 0x1c) listen(r5, 0x4000000) r6 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r6, &(0x7f0000000000)={0x2, 0x4e22, @local}, 0x10) r7 = accept(r4, 0x0, 0x0) sendmsg$TEAM_CMD_OPTIONS_SET(r7, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)=ANY=[], 0xfffffdef}}, 0x0) recvfrom(r6, &(0x7f0000000180)=""/60, 0xfffffffffffffecb, 0x0, 0x0, 0x0) bind$inet(r3, 0x0, 0x0) connect$inet(r3, 0x0, 0x0) 7.263496946s ago: executing program 5 (id=1535): socket(0x18, 0x800, 0xfa) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x57}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$inet_smc(0x2b, 0x1, 0x0) r3 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) r4 = syz_open_dev$dri(&(0x7f00000008c0), 0xd21, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r4, 0xc04064a0, &(0x7f00000001c0)={0x0, &(0x7f00000000c0)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_GETCRTC(r4, 0xc06864a1, &(0x7f0000000240)={0x0, 0x0, r5, 0x0}) ioctl$DRM_IOCTL_MODE_GETFB2(r4, 0xc06864ce, &(0x7f0000000440)={r6, 0x0, 0x0, 0x0, 0x0, [0x0]}) openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x10000, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r3, 0xc02064b2, &(0x7f0000000140)={0x3ff, 0x4, 0xb5}) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r3, 0xc00c642d, &(0x7f0000000080)={r7, 0x0, 0xffffffffffffffff}) socket(0x10, 0x3, 0x0) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r4, 0xc00c642e, &(0x7f0000000300)={0x0, 0x0, r8}) write$UHID_CREATE2(0xffffffffffffffff, 0x0, 0x118) r9 = syz_open_dev$tty1(0xc, 0x4, 0x4) r10 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) connect$bt_l2cap(r10, &(0x7f0000000080)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x7ff}, 0xe) r11 = syz_init_net_socket$bt_hidp(0x1f, 0x3, 0x6) ioctl$sock_bt_hidp_HIDPCONNADD(r11, 0x400448c8, &(0x7f0000000340)={r10, r10, 0x8, 0x0, 0x0, 0xb, 0x1, 0x4f3, 0xfff9, 0x3, 0x0, 0x8, 'syz0\x00'}) ioctl$sock_bt_hidp_HIDPGETCONNLIST(r11, 0x800448d2, &(0x7f0000000200)={0x3c, &(0x7f0000000140)=[{}]}) ioctl$TIOCGSID(r9, 0x5429, 0x0) 7.203690541s ago: executing program 6 (id=1536): madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e) socket(0x2b, 0x1, 0xfffffffe) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x6) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket$inet6(0xa, 0x80002, 0x0) setsockopt$inet6_udp_int(r3, 0x11, 0x67, &(0x7f0000000040)=0x91, 0x4) connect$inet6(r3, &(0x7f00000001c0)={0xa, 0x4e23, 0x0, @ipv4={'\x00', '\xff\xff', @dev}}, 0x1c) sendmmsg$inet6(r3, &(0x7f0000003cc0)=[{{0x0, 0x0, &(0x7f0000003980), 0x171}}], 0x400000000000172, 0x4001c00) 5.50864726s ago: executing program 6 (id=1537): r0 = syz_open_dev$dri(&(0x7f00000000c0), 0x1ff, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r0, 0xc04064a0, &(0x7f00000003c0)={0x0, &(0x7f0000000300)=[0x0], 0x0, 0x0, 0x0, 0x1}) r1 = syz_open_dev$dri(&(0x7f00000008c0), 0xd21, 0x0) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r1, 0xc00c643c, &(0x7f0000000300)={0x0, 0x300, r1}) 5.071919168s ago: executing program 5 (id=1538): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x6) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$devlink(&(0x7f0000000640), 0xffffffffffffffff) epoll_create1(0x0) openat$drirender128(0xffffffffffffff9c, &(0x7f0000000000), 0x10000, 0x0) mount(&(0x7f0000000100)=@nullb, &(0x7f0000000080)='./file0\x00', &(0x7f0000000040)='zonefs\x00', 0x0, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x10, 0x4, 0x8, 0x8, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r5 = syz_open_dev$dri(&(0x7f0000000180), 0x0, 0x0) ioctl$DRM_IOCTL_SET_VERSION(r5, 0xc0106407, &(0x7f0000000000)={0xffffffff, 0x0, 0xffffffff}) ioctl$DRM_IOCTL_SYNCOBJ_FD_TO_HANDLE_SYNC_FILE(r5, 0xc01064c2, &(0x7f0000000280)) ioctl$DRM_IOCTL_SYNCOBJ_TIMELINE_WAIT(r5, 0xc03064ca, &(0x7f0000000380)={&(0x7f0000000300), 0x0, 0x6, 0x0, 0x6}) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0x10, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b70200000000000085000000a000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bca2000000000000a6020000f8ffffffb703000008000000b7040000000000008500000033000000"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000500)={r6}, 0xc) 4.938195288s ago: executing program 6 (id=1539): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x6) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000002540)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0xfffffffffffffc33, &(0x7f0000000280)=0x2) ioctl$UFFDIO_API(0xffffffffffffffff, 0xc018aa3f, 0x0) r3 = syz_init_net_socket$ax25(0x3, 0x2, 0x0) bind$ax25(r3, 0x0, 0x0) mbind(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x8001, &(0x7f0000000000)=0x6, 0x8, 0x0) mount$9p_virtio(&(0x7f0000000000), 0x0, &(0x7f00000000c0), 0x0, &(0x7f0000002380)=ANY=[]) r4 = socket$inet6(0xa, 0x3, 0x84) connect$inet6(r4, &(0x7f0000000000)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @dev}}, 0x1c) openat$vnet(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) syz_emit_ethernet(0x4e, &(0x7f0000000000)={@local, @broadcast, @void, {@ipv6={0x86dd, @udp={0x0, 0x6, "1600", 0x18, 0x2b, 0x0, @private1, @local, {[@hopopts={0x87}], {0x0, 0x0, 0x10, 0x0, @gue={{0x2}}}}}}}}, 0x0) 4.010436316s ago: executing program 5 (id=1540): r0 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000001040), 0x300, 0x0) preadv(r0, &(0x7f0000003640)=[{&(0x7f00000025c0)=""/54, 0x36}], 0x1, 0xffffffff, 0x0) 3.459598394s ago: executing program 5 (id=1541): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000180)={0xc, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) socket$kcm(0x29, 0x5, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) setsockopt$WPAN_WANTACK(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000000), 0x4) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) r4 = openat$vimc1(0xffffff9c, &(0x7f0000000000), 0x2, 0x0) syz_open_dev$vbi(0x0, 0x1, 0x2) ioctl$VIDIOC_TRY_DECODER_CMD(r4, 0xc0485661, &(0x7f0000000080)={0x3, 0x1, @start={0x7, 0x1}}) 3.25376538s ago: executing program 6 (id=1542): r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_mount_image$udf(&(0x7f0000000080), &(0x7f0000000180)='./file1\x00', 0x4000, &(0x7f0000000740)=ANY=[@ANYBLOB='lastblock=00000000000000000000,umask=00000000000000000000002,dmode=00000000000000000077777,novrs,shortad,shortad,undelete,iocharset=cp437,shortad,umask=00000000000000000000006,dmode=00000000000000000000011,fileset=00000000000000000011,uid=', @ANYRESDEC, @ANYBLOB=',session=0000\x00000000000000005,\x00'], 0x12, 0xc38, &(0x7f0000001080)="$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") socket$nl_route(0x10, 0x3, 0x0) setrlimit(0x1, 0x0) socket$inet_sctp(0x2, 0x1, 0x84) syz_mount_image$udf(&(0x7f0000000c40), &(0x7f0000000000)='./file0\x00', 0x0, &(0x7f0000001a40)=ANY=[@ANYBLOB="009917593d44d685cf8176521846a9e90205b4b89c0ed49b3e1201fa4a79b0b9651316a89d7e4038e94e54fdffa25c529d1cb4e43bf7e12bd2a555681300b85d6621470c304d6ba5731161f3f1da1193a85525e8c9a5a95798070ca48fa7edcf62e37626480f673141bee1ea2522f8b61aac12f984c1216683ae80e6146169cfb7aa7c50dd4c52259faaee2fedc1077bda4c3e65d7005d0ab71db65617abeb3c51b056d955f1285ed9d26d7c910bf3291f6b349ce7eee33a31a484c31993effe39fcfa55e722a20bf90b2f43ffbfd19afaeb1d6e9683ce09f4c8eb9591f0772a12"], 0x1, 0xc3c, &(0x7f0000000d00)="$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") r1 = creat(&(0x7f0000000100)='./bus\x00', 0x0) open(&(0x7f0000000100)='./bus\x00', 0x40542, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e23}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r5 = socket$inet(0x2, 0x80003, 0x2) setsockopt$EBT_SO_SET_ENTRIES(r5, 0x0, 0x80, &(0x7f0000000140)=@broute={'broute\x00', 0x20, 0x2, 0x330, [0x0, 0x0, 0x0, 0x0, 0x0, 0x20000580], 0x0, 0x0, &(0x7f0000000580)=ANY=[@ANYBLOB="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"]}, 0x210) pwritev(0xffffffffffffffff, 0x0, 0x0, 0x3, 0x1) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TIMER(r1, 0x40605346, 0x0) ioctl$VIDIOC_S_STD(0xffffffffffffffff, 0x40085618, &(0x7f0000000040)=0x10000) r6 = open(&(0x7f0000000140)='./bus\x00', 0x0, 0x0) sendfile(r1, r6, 0x0, 0x8400fffffffa) open(&(0x7f0000000040)='./file1\x00', 0x100002, 0x0) syz_genetlink_get_family_id$wireguard(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$WG_CMD_SET_DEVICE(r0, 0x0, 0x20000000) landlock_add_rule$LANDLOCK_RULE_PATH_BENEATH(0xffffffffffffffff, 0x1, &(0x7f00000000c0)={0x1, r0}, 0x0) 3.253527647s ago: executing program 7 (id=1543): r0 = socket$alg(0x26, 0x5, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, 0x0, 0x0, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'xfrm0\x00'}) io_uring_setup(0x1a79, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x4}) openat$sndseq(0xffffffffffffff9c, &(0x7f0000000100), 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f00000001c0), 0x881, 0x0) accept4(r0, 0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0xe, 0x16, &(0x7f0000001900)=ANY=[@ANYBLOB="61103400000000006113380000000000bfa00000000000000700000008ffffffd50301001874004095000600000000006916000000000000bf67000000000000360607000fff07201706000020190000160300000ee60060bf050000000000007b650000000000006507f9ff01000000070700004ddfffff1e75000000000000bf54000000000000070400000400f9ffad4301000000000095000000000000001500000000000000950000000000000032ed3c12dc8c27df8ecf264e0f84f9f17d3c30e32f17540faf80250aa20c669a5e12814cb1cea5d4601d295c45a6a0b9bdb7dd399703cac4f6f3be4b369289aa6812b8e007e733a9a4f1b0af3dda82ee45a010fb94fe9de57b9d8a814261bdb94a05000400c6c60bf70d742a81762bab8395fa64810b5b40d893ea8fe0185473d51b546cad3f1d5ab2af27546e7c955ccefa1f6ab689b555202da2e0ec2871b4a7e65836429a527dc47ebe84a423b6c8d345dc8da3085b0ab71ca1b901627b562ed04ae76002d4519af619e3cca4d69e0dee5eb106774a8f3e6916dfec88158f0200000000c8fb730a5c1bf2b2bb71a629361997a75fd552bdc206438b8ef4901fd03c16dfda44221b235c8ac86d8a297dff0445a15f21dce431e56723888fb126a163f16f920ae2fb494059bba8e3b680324a188076eb685d55c4e9b2ad9bc1172ba7cbebe174aba210d739a018f9bbec63222d20cecac4d03723f1c932b3a6aa57f1ad2e99e0e67ab93716d20000009f0f53acbb40b4f8e2738270b31562ed834f2af97787f696649a462e7ee4bcf8b07a10fd7ed6735154beb4000000000000000000000000004000bc00f6746a9709e7e78f4ddc211bc3ebe6bd9d2aca0140a7afaab43176e65ec1118d50d1e827f3472f4445d253887a5ad103649afa17690884f800031e03a651bb96589a7e2e509bcc1d161347623cb5e7ac4629c8ab04871bc47287cd31cc43ea0ffb567b40407d000000210000000000000000005f37d8703f37ca364a601ae899a56715a0a62a34c1d926a0f6a5480a55c22fe3a5ac00000000000000000000000500002000000000fb79ea00000000000000000000e4007be511fe32fbc90e2364a55e9bb66ac64423d2d00fea2594e14d90deae46e26c596f84eba90000000000000000fffb0000000082fb0d3cc3aa39ee4b1386bab561cda886fa642994cacd473b543ccb5f0d7b63924f17c67b13631d22a11dc3c693962895496d4f6e9cc54db6c7205a6b06ff7f0000000000007f31d7c8cc5d325c5379b0363ce8bd1f61b007e1ff5f1be1969a1ba791ad46d800000000c7f26a0337302f3b41eae59809fd05d12f6106f117b062df67d3a6473265dd1410eea68208a3f26b2989b832d8b34a34a4f08b34b3042065acaa10856e858d27adee7daf32903d3fc78700d429a2d4c8b6d803eb83eecfe4c7ff9e6ab5a52e83d089e0b1c23c0f3cdad7a8710e0254f1b11cced7bc3c8da0c44d2ebf9f6f3ff3be4d1458077c2253b0c7c7a0a9fdd63bf910dc20e5cb2a88e59febc47f1212a21f631d22bad050e9856b48ae3a03a497c37758537650fe6db89da3c437dc3d78e046f6160e1741299e8dc29906870e6431ed1eab5d067a183f064b060a8ec12725d42e3a74863d66bee966b1574f8e01b3f34a267ff0af1cb3f1f815f8989d78854ca4d3116dbc7e2bf2402a75fd7a55733360040855ed5d1c0d634fc5fb38f84d9d87b27f8a5d91217b728f13e3ee20e69e0ffb2780b1a7af137ff7b4ff139604faf0453bedf0c5d744b5272b44c23488b2bdbff947c4dfa108cbb88202eeb81f428a5b3c29984864961a57ff52f657a67463d7dbf85ae9321fc28206c812439ab129ae818837ee15620789c524b3baf49a0be9bb7d958d5e87c6c09bf71a894bad62934782cc308e936d7637e07c4a2b4dc87b0da20000d9ef418df19e7a8c4c328be0ce91798adc2dca87ddd9d064e081383409ed2912c811ae63f03212a5331c2a4ead000000000000000000000000000000000000000000000000001386866b311bd144bc32e059658c9f8342c90c1ade31b78072841b8b5a943d62a44cea6b050c42e3c205fad6a23fb43c93da0f49d911877265e6ee443e37397ecf89021e7f579e8d3a74c12b52938d91e9de07fc8eeeb9505f4a9c26266bf5449484ccc1317c747664e9f7478f8200"/1582], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) 2.452021483s ago: executing program 5 (id=1544): mkdirat(0xffffffffffffff9c, 0x0, 0x0) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0xb, 0x31, 0xffffffffffffffff, 0x0) socket$netlink(0x10, 0x3, 0x10) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000003c0)={0x18, 0x10, &(0x7f00000000c0)=ANY=[], &(0x7f0000000100)='GPL\x00', 0x8, 0x0, 0x0, 0x41100, 0x3, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x1, @void, @value}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x6) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0xfffffffffffffc33, &(0x7f0000000280)=0x2) ioctl$I2C_SMBUS(0xffffffffffffffff, 0x720, &(0x7f0000003080)={0x1, 0x0, 0x6, &(0x7f0000003040)={0x0, "b4e1a230be8f46463fb1a5f1b44f44eaa65e485b747aa95d83ffffa407677d18bc"}}) write$UHID_CREATE2(0xffffffffffffffff, &(0x7f00000005c0)={0xb, {'syz1\x00', 'syz1\x00', 'syz0\x00', 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, "80"}}, 0x119) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$inet6(0xa, 0x1, 0x0) bind$inet6(r4, &(0x7f0000f65000)={0xa, 0x4e21, 0x0, @loopback}, 0x1c) r5 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000300)={0x38, 0x1403, 0x1, 0x70bd27, 0x25dfdbfe, "", [{{0x9, 0x2, 'syz0\x00'}, {0x8, 0x41, 'rxe\x00'}, {0x14, 0x33, 'ip_vti0\x00'}}]}, 0x38}, 0x1, 0x0, 0x0, 0x800}, 0x0) sendto$inet6(r4, 0x0, 0x0, 0x20000002, &(0x7f00000001c0)={0xa, 0x4e21, 0x0, @loopback}, 0x1c) getsockopt$inet6_buf(r4, 0x29, 0x6, 0x0, &(0x7f0000000080)) ioctl$KVM_CAP_MAX_VCPU_ID(0xffffffffffffffff, 0x4068aea3, &(0x7f0000000040)={0x80, 0x0, 0x8000000000000001}) ioctl$BTRFS_IOC_SCRUB(r3, 0xc400941b, &(0x7f0000001700)={0x0, 0x3, 0x3}) sendmsg$nl_route(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000580)=@newlink={0x20, 0x10, 0x44b, 0x70bd27, 0x0, {0x7a}}, 0x20}}, 0x20000000) ioctl$LOOP_SET_CAPACITY(0xffffffffffffffff, 0x4c07) 363.912749ms ago: executing program 7 (id=1545): syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) openat$ttyS3(0xffffffffffffff9c, 0x0, 0x0, 0x0) r0 = syz_open_dev$amidi(&(0x7f0000000480), 0x2, 0x80042) r1 = dup(r0) syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') r2 = io_uring_setup(0x4e8f, &(0x7f00000004c0)={0x0, 0x3b, 0x800, 0x3, 0x14, 0x0, r1}) close(r2) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) socket$nl_netfilter(0x10, 0x3, 0xc) r4 = openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000380)={0xffffffffffffffff, &(0x7f00000002c0)="d86ef10f163bb208748dbe5203034520d44df480848d340dc3fa2df6fa23f6ec9a64bc1ab7e2dee7106045aa9a0ea0362adfc9a99393d8635a1ec723fc98a2e80b72a3a1cd8f71731d029fe72a42094c84ee860ef5067f6bd01ba329d4aea04d62c1e969c61939482062c46fe8f3c50f3524c7866fd384b24c6a029bbb652fa202a709fcd7563b55235e958534cbbcba7d12225fa45494aba7"}, 0x20) ioctl$VIDIOC_G_EXT_CTRLS(r4, 0xc0205647, &(0x7f0000000140)={0xfffffff, 0x0, 0xffffffff, 0xffffffffffffffff, 0x0, 0x0}) write(0xffffffffffffffff, 0x0, 0x0) openat$nullb(0xffffffffffffff9c, &(0x7f0000001000), 0x169802, 0x0) setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x19, 0x0, 0x0) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN_FLAGS(0xffffffffffffffff, 0x3ba0, &(0x7f0000000200)={0x48, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}) r6 = syz_open_dev$usbfs(&(0x7f0000000040), 0x80000000003, 0x101301) setreuid(0xee00, 0x0) syz_emit_ethernet(0x2a, &(0x7f0000000000)=ANY=[@ANYBLOB="c5c3442e25f3aaaaaabaaaaa08004500001c"], 0x0) ioctl$USBDEVFS_FREE_STREAMS(r6, 0x802c550a, &(0x7f0000000000)=ANY=[@ANYBLOB="0200a006002a17006000000002000020"]) capset(&(0x7f0000000000)={0x20080522}, 0x0) ioctl$USBDEVFS_REAPURBNDELAY(r6, 0x4004550c, 0x0) r7 = openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000080), 0x80000, 0x0) ioctl$IOMMU_HWPT_GET_DIRTY_BITMAP(r7, 0x3b8c, &(0x7f00000000c0)={0x30, r5, 0x0, 0x0, 0x0, 0x5, 0x6, &(0x7f00000003c0)=""/80}) 217.798695ms ago: executing program 6 (id=1546): madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e) socket(0x2b, 0x1, 0xfffffffe) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x6) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket$inet6(0xa, 0x80002, 0x0) setsockopt$inet6_udp_int(r3, 0x11, 0x67, &(0x7f0000000040)=0x91, 0x4) connect$inet6(r3, &(0x7f00000001c0)={0xa, 0x4e23, 0x0, @ipv4={'\x00', '\xff\xff', @dev}}, 0x1c) sendmmsg$inet6(r3, &(0x7f0000003cc0)=[{{0x0, 0x0, &(0x7f0000003980), 0x171}}], 0x400000000000172, 0x4001c00) 0s ago: executing program 5 (id=1547): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000380)=ANY=[@ANYBLOB="b702000000000000bfa30000000000000703000000feffff7a0af0ffc40bffff79a4f0ff00000000b7060000ffffffff2d6405000000000065060400210000000404000001000000b7050000220000006a0a00fe00000000850000000b000000b7000000592000009500000000000000a3028cb5af6c8f5d76781dcb7729f0170720596bb3b4d821d976f5843061cc2e3afbae82d7932d192321fa3b3042f100"/172], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r0, 0xa002a0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) kernel console output (not intermixed with test programs): 76.392258][T10501] workqueue: Failed to create a rescuer kthread for wq "btrfs-endio-write": -EINTR [ 576.405194][T10501] workqueue: Failed to create a rescuer kthread for wq "btrfs-compressed-write": -EINTR [ 576.415628][T10540] syz.1.960: attempt to access beyond end of device [ 576.415628][T10540] loop1: rw=0, sector=8, nr_sectors = 16 limit=16 [ 576.416038][T10540] erofs: (device loop1): z_erofs_read_folio: read error -5 @ 8200 of nid 36 [ 576.581527][T10501] workqueue: Failed to create a rescuer kthread for wq "btrfs-freespace-write": -EINTR [ 576.581869][T10501] workqueue: Failed to create a rescuer kthread for wq "btrfs-delayed-meta": -EINTR [ 576.582131][T10501] workqueue: Failed to create a rescuer kthread for wq "btrfs-qgroup-rescan": -EINTR [ 577.049557][T10501] BTRFS error (device loop4): open_ctree failed [ 577.396504][ T5941] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 578.719862][ T5941] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 579.816171][T10570] loop5: detected capacity change from 0 to 4096 [ 579.870310][ T5850] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 579.884473][ T5850] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 579.903061][ T5850] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 579.924290][ T5850] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 579.933970][ T5850] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 579.942061][ T5850] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 580.147453][ T5941] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 580.182527][T10572] ip_vti0 speed is unknown, defaulting to 1000 [ 580.282781][ T5941] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 581.315909][ T5941] bridge_slave_1: left allmulticast mode [ 581.348163][ T5941] bridge_slave_1: left promiscuous mode [ 581.355348][ T5941] bridge0: port 2(bridge_slave_1) entered disabled state [ 581.370140][ T5941] bridge_slave_0: left allmulticast mode [ 581.371108][T10590] loop1: detected capacity change from 0 to 512 [ 581.375826][ T5941] bridge_slave_0: left promiscuous mode [ 581.376046][ T5941] bridge0: port 1(bridge_slave_0) entered disabled state [ 581.415625][T10587] vhci_hcd vhci_hcd.0: pdev(5) rhport(0) sockfd(9) [ 581.422239][T10587] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 581.431573][T10587] vhci_hcd vhci_hcd.0: Device attached [ 581.432590][T10590] ext4: Unknown parameter 'subj_user' [ 581.551543][T10594] vhci_hcd: connection closed [ 581.588879][ T8284] vhci_hcd: stop threads [ 581.598260][ T8284] vhci_hcd: release socket [ 581.616786][ T8284] vhci_hcd: disconnect device [ 582.163896][ T5850] Bluetooth: hci1: command tx timeout [ 582.679870][T10617] input: syz0 as /devices/virtual/input/input28 [ 583.546323][T10625] netlink: 'syz.4.971': attribute type 2 has an invalid length. [ 583.554145][T10625] netlink: 244 bytes leftover after parsing attributes in process `syz.4.971'. [ 584.292710][ T5850] Bluetooth: hci1: command tx timeout [ 584.748828][ T5941] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 584.797526][ T5941] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 584.847700][ T5941] bond0 (unregistering): Released all slaves [ 585.771637][T10642] libceph: resolve ' [ 585.771637][T10642] -&õÌ×fÍY¹Ç²a×ïÅ2iˆ [ 585.771637][T10642] .ÖúÕ?Çý&*»§&' (ret=-3): failed [ 586.323291][ T5850] Bluetooth: hci1: command tx timeout [ 587.850016][T10572] chnl_net:caif_netlink_parms(): no params data found [ 588.645606][T10682] vivid-007: kernel_thread() failed [ 588.811404][ T5850] Bluetooth: hci1: command tx timeout [ 590.295249][T10572] bridge0: port 1(bridge_slave_0) entered blocking state [ 590.965543][T10572] bridge0: port 1(bridge_slave_0) entered disabled state [ 590.980968][T10572] bridge_slave_0: entered allmulticast mode [ 591.050966][T10572] bridge_slave_0: entered promiscuous mode [ 591.086212][T10572] bridge0: port 2(bridge_slave_1) entered blocking state [ 591.294810][T10572] bridge0: port 2(bridge_slave_1) entered disabled state [ 591.310884][T10572] bridge_slave_1: entered allmulticast mode [ 591.318457][T10572] bridge_slave_1: entered promiscuous mode [ 592.197019][ T5941] hsr_slave_0: left promiscuous mode [ 592.203447][ T5941] hsr_slave_1: left promiscuous mode [ 592.210956][ T5941] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 592.235587][ T5941] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 592.320856][ T5941] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 592.328379][ T5941] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 592.373256][ T5941] veth1_macvtap: left promiscuous mode [ 592.379083][ T5941] veth0_macvtap: left promiscuous mode [ 592.384947][ T5941] veth1_vlan: left promiscuous mode [ 592.391762][ T5941] veth0_vlan: left promiscuous mode [ 592.558779][ T25] usb 4-1: new high-speed USB device number 4 using dummy_hcd [ 592.898805][ T25] usb 4-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 592.908302][ T25] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 593.523113][T10737] vivid-007: kernel_thread() failed [ 593.720951][ T25] usb 4-1: Product: syz [ 593.875087][ T25] usb 4-1: Manufacturer: syz [ 593.925817][ T25] usb 4-1: SerialNumber: syz [ 593.987386][ T25] usb 4-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 594.473344][ T5840] usb 4-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 595.894890][ T5840] ath9k_htc 4-1:1.0: ath9k_htc: Target is unresponsive [ 595.917333][ T5840] ath9k_htc: Failed to initialize the device [ 596.066531][ T5840] usb 4-1: ath9k_htc: USB layer deinitialized [ 596.944878][ T5941] team0 (unregistering): Port device team_slave_1 removed [ 597.707704][ T5941] team0 (unregistering): Port device team_slave_0 removed [ 597.775286][T10750] usb 4-1: USB disconnect, device number 4 [ 597.886501][T10770] usb usb1: usbfs: interface 0 claimed by hub while 'syz.4.1007' sets config #1 [ 599.706397][T10778] sctp: failed to load transform for md5: -2 [ 603.821287][T10807] syz.3.1014: attempt to access beyond end of device [ 603.821287][T10807] nbd3: rw=0, sector=2, nr_sectors = 2 limit=0 [ 603.836103][T10807] vxfs: unable to read disk superblock at 1 [ 603.963380][T10807] syz.3.1014: attempt to access beyond end of device [ 603.963380][T10807] nbd3: rw=0, sector=16, nr_sectors = 2 limit=0 [ 604.083554][T10807] vxfs: unable to read disk superblock at 8 [ 604.108912][T10807] vxfs: can't find superblock. [ 605.891852][T10572] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 606.491603][T10572] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 606.717271][T10572] team0: Port device team_slave_0 added [ 606.749142][T10572] team0: Port device team_slave_1 added [ 607.454915][T10572] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 607.788952][T10844] input: syz0 as /devices/virtual/input/input29 [ 607.843973][T10572] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 608.418940][T10572] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 608.475722][T10572] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 608.568857][T10572] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 608.723488][T10572] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 610.254961][T10572] hsr_slave_0: entered promiscuous mode [ 610.269962][T10572] hsr_slave_1: entered promiscuous mode [ 610.295452][T10572] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 610.556574][T10862] loop4: detected capacity change from 0 to 32768 [ 610.569106][T10572] Cannot create hsr debugfs directory [ 610.609093][T10862] BTRFS: device fsid 14d642db-7b15-43e4-81e6-4b8fac6a25f8 devid 1 transid 8 /dev/loop4 (7:4) scanned by syz.4.1030 (10862) [ 610.644633][T10862] BTRFS info (device loop4): first mount of filesystem 14d642db-7b15-43e4-81e6-4b8fac6a25f8 [ 610.822035][T10862] BTRFS info (device loop4): using blake2b (blake2b-256-generic) checksum algorithm [ 610.832216][T10862] BTRFS info (device loop4): using free-space-tree [ 612.940436][ T30] audit: type=1800 audit(2000000005.900:95): pid=10862 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.1030" name="file1" dev="loop4" ino=260 res=0 errno=0 [ 613.265180][ T5838] BTRFS info (device loop4): last unmount of filesystem 14d642db-7b15-43e4-81e6-4b8fac6a25f8 [ 614.608295][T10923] loop3: detected capacity change from 0 to 512 [ 614.680470][T10923] ext4: Unknown parameter 'subj_user' [ 615.242019][ T8] libceph: connect (1)[c::]:6789 error -101 [ 615.261390][T10929] ceph: No mds server is up or the cluster is laggy [ 615.270118][ T8] libceph: mon0 (1)[c::]:6789 connect error [ 616.090924][T10947] pci 0000:00:05.0: vgaarb: VGA decodes changed: olddecodes=none,decodes=none:owns=io+mem [ 616.483746][T10953] loop4: detected capacity change from 0 to 512 [ 616.520947][T10953] ext4: Unknown parameter 'subj_user' [ 616.717720][T10572] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 617.192559][T10572] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 617.342208][T10572] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 617.388502][T10572] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 617.802355][T10572] 8021q: adding VLAN 0 to HW filter on device bond0 [ 617.884845][T10572] 8021q: adding VLAN 0 to HW filter on device team0 [ 617.938204][ T11] bridge0: port 1(bridge_slave_0) entered blocking state [ 617.945383][ T11] bridge0: port 1(bridge_slave_0) entered forwarding state [ 618.041039][ T11] bridge0: port 2(bridge_slave_1) entered blocking state [ 618.048252][ T11] bridge0: port 2(bridge_slave_1) entered forwarding state [ 618.322063][T10977] serio: Serial port ptm0 [ 619.530992][T10572] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 619.722163][T10572] veth0_vlan: entered promiscuous mode [ 619.764861][T10572] veth1_vlan: entered promiscuous mode [ 619.935710][T10572] veth0_macvtap: entered promiscuous mode [ 619.984355][T10973] loop4: detected capacity change from 0 to 32768 [ 619.989841][T10572] veth1_macvtap: entered promiscuous mode [ 620.114664][T10572] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 620.146935][T10973] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop4 (7:4) scanned by syz.4.1051 (10973) [ 620.175748][T10572] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 620.203521][T10572] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 620.234741][T10572] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 620.277311][T10973] BTRFS info (device loop4): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 620.293845][T10572] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 620.328725][T10973] BTRFS info (device loop4): using crc32c (crc32c-intel) checksum algorithm [ 620.347807][T10572] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 620.374437][T10973] BTRFS info (device loop4): using free-space-tree [ 620.384164][T10572] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 620.417725][T10572] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 620.556501][T10572] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 620.645951][T10572] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 620.716722][T10572] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 620.786833][T10572] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 620.832149][T10572] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 620.848848][T10572] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 620.859869][T10572] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 620.870744][T10572] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 620.888742][T10572] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 620.914652][T10572] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 620.986933][T10572] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 621.016936][T10572] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 621.037601][T10572] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 621.069145][T10572] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 621.084916][ T5838] BTRFS info (device loop4): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 621.420607][ T52] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 621.449290][ T52] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 622.228937][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 622.236903][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 623.150070][ T30] audit: type=1326 audit(2000000016.110:96): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11051 comm="syz.3.1061" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f56fb57e719 code=0x7ffc0000 [ 623.205620][ T30] audit: type=1326 audit(2000000016.110:97): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11051 comm="syz.3.1061" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f56fb57e719 code=0x7ffc0000 [ 623.228322][ T30] audit: type=1326 audit(2000000016.110:98): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11051 comm="syz.3.1061" exe="/root/syz-executor" sig=0 arch=c000003e syscall=445 compat=0 ip=0x7f56fb57e719 code=0x7ffc0000 [ 623.251595][ T30] audit: type=1326 audit(2000000016.110:99): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11051 comm="syz.3.1061" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f56fb57e719 code=0x7ffc0000 [ 623.273966][ T30] audit: type=1326 audit(2000000016.110:100): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11051 comm="syz.3.1061" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f56fb57e719 code=0x7ffc0000 [ 623.363460][T11064] loop1: detected capacity change from 0 to 512 [ 623.370932][T11064] ext4: Unknown parameter 'subj_user' [ 624.205764][T11062] pci 0000:00:05.0: vgaarb: VGA decodes changed: olddecodes=none,decodes=none:owns=io+mem [ 624.726447][ T1291] ieee802154 phy0 wpan0: encryption failed: -22 [ 624.733147][ T1291] ieee802154 phy1 wpan1: encryption failed: -22 [ 625.050599][ T3024] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 625.277939][ T3024] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 625.473792][ T3024] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 625.716774][ T3024] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 626.191305][T11078] loop5: detected capacity change from 0 to 32768 [ 626.250029][T11078] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop5 (7:5) scanned by syz.5.1069 (11078) [ 626.525913][T11078] BTRFS info (device loop5): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 626.634920][T11078] BTRFS info (device loop5): using crc32c (crc32c-intel) checksum algorithm [ 626.718718][T11078] BTRFS info (device loop5): using free-space-tree [ 626.871874][ T3024] bridge_slave_1: left allmulticast mode [ 627.029128][ T3024] bridge_slave_1: left promiscuous mode [ 627.039217][ T3024] bridge0: port 2(bridge_slave_1) entered disabled state [ 627.107910][ T3024] bridge_slave_0: left allmulticast mode [ 627.124433][ T3024] bridge_slave_0: left promiscuous mode [ 627.132924][ T3024] bridge0: port 1(bridge_slave_0) entered disabled state [ 627.160077][ T5850] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 627.176398][ T5850] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 627.186867][ T5850] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 627.199423][ T5850] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 627.208049][ T5850] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 627.218811][ T5850] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 628.036797][T11126] loop1: detected capacity change from 0 to 512 [ 628.089770][T11126] ext4: Unknown parameter 'subj_user' [ 628.700687][ T7436] BTRFS info (device loop5): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 629.296626][ T5850] Bluetooth: hci1: command tx timeout [ 629.669038][T11138] zonefs (nullb0) ERROR: Not a zoned block device [ 631.399021][ T5850] Bluetooth: hci1: command tx timeout [ 631.906664][T11155] loop4: detected capacity change from 0 to 512 [ 631.941882][T11155] ext4: Unknown parameter 'subj_user' [ 632.384938][ T3024] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 632.430902][ T3024] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 632.480890][ T3024] bond0 (unregistering): Released all slaves [ 632.564649][T11099] ip_vti0 speed is unknown, defaulting to 1000 [ 633.519239][ T5850] Bluetooth: hci1: command tx timeout [ 634.963210][ T8] usb 6-1: new high-speed USB device number 4 using dummy_hcd [ 635.207237][ T8] usb 6-1: New USB device found, idVendor=0c45, idProduct=628f, bcdDevice=1f.44 [ 635.236852][ T8] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 635.289867][ T8] usb 6-1: config 0 descriptor?? [ 635.387841][ T8] gspca_main: gspca_sn9c20x-2.14.0 probing 0c45:628f [ 635.608858][ T5850] Bluetooth: hci1: command tx timeout [ 635.706022][ T3024] hsr_slave_0: left promiscuous mode [ 635.714869][ T3024] hsr_slave_1: left promiscuous mode [ 635.759140][ T8] gspca_sn9c20x: Write register 1001 failed -71 [ 635.765479][ T8] gspca_sn9c20x: Device initialization failed [ 635.806751][ T8] gspca_sn9c20x 6-1:0.0: probe with driver gspca_sn9c20x failed with error -71 [ 635.818935][ T3024] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 635.839818][ T3024] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 635.862232][ T3024] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 635.877051][ T3024] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 635.884462][ T8] usb 6-1: USB disconnect, device number 4 [ 635.969316][T11206] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 636.026942][ T3024] veth1_macvtap: left promiscuous mode [ 636.047552][ T3024] veth0_macvtap: left promiscuous mode [ 636.075724][ T3024] veth1_vlan: left promiscuous mode [ 636.101359][ T3024] veth0_vlan: left promiscuous mode [ 637.271703][T11216] loop4: detected capacity change from 0 to 16 [ 637.354151][T11216] erofs: (device loop4): mounted with root inode @ nid 36. [ 638.908454][T11229] evm: overlay not supported [ 639.462731][T11230] syz.4.1097: attempt to access beyond end of device [ 639.462731][T11230] loop4: rw=0, sector=8, nr_sectors = 16 limit=16 [ 639.476765][T11230] erofs: (device loop4): z_erofs_read_folio: read error -5 @ 8200 of nid 36 [ 639.835616][T11235] syz.5.1101: attempt to access beyond end of device [ 639.835616][T11235] nbd5: rw=0, sector=2, nr_sectors = 2 limit=0 [ 640.009460][T11235] vxfs: unable to read disk superblock at 1 [ 640.026620][T11235] syz.5.1101: attempt to access beyond end of device [ 640.026620][T11235] nbd5: rw=0, sector=16, nr_sectors = 2 limit=0 [ 640.043514][T11235] vxfs: unable to read disk superblock at 8 [ 640.222026][T11239] Invalid ELF header magic: != ELF [ 640.799038][T11235] vxfs: can't find superblock. [ 642.040813][ T3024] team0 (unregistering): Port device team_slave_1 removed [ 642.474804][ T3024] team0 (unregistering): Port device team_slave_0 removed [ 643.292591][T11258] sctp: failed to load transform for md5: -2 [ 643.464027][T11262] syz.3.1108: attempt to access beyond end of device [ 643.464027][T11262] nbd3: rw=0, sector=2, nr_sectors = 2 limit=0 [ 643.478682][T11262] vxfs: unable to read disk superblock at 1 [ 643.489058][T11262] syz.3.1108: attempt to access beyond end of device [ 643.489058][T11262] nbd3: rw=0, sector=16, nr_sectors = 2 limit=0 [ 643.504070][T11262] vxfs: unable to read disk superblock at 8 [ 643.510744][T11262] vxfs: can't find superblock. [ 644.656300][T11276] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 645.977053][T11099] chnl_net:caif_netlink_parms(): no params data found [ 646.907971][T11099] bridge0: port 1(bridge_slave_0) entered blocking state [ 646.925453][T11099] bridge0: port 1(bridge_slave_0) entered disabled state [ 646.956920][T11099] bridge_slave_0: entered allmulticast mode [ 647.006060][T11099] bridge_slave_0: entered promiscuous mode [ 647.058213][T11099] bridge0: port 2(bridge_slave_1) entered blocking state [ 647.076864][T11099] bridge0: port 2(bridge_slave_1) entered disabled state [ 647.097451][T11099] bridge_slave_1: entered allmulticast mode [ 647.132773][T11099] bridge_slave_1: entered promiscuous mode [ 647.362291][T11312] syz.4.1115: attempt to access beyond end of device [ 647.362291][T11312] nbd4: rw=0, sector=2, nr_sectors = 2 limit=0 [ 647.376285][T11312] vxfs: unable to read disk superblock at 1 [ 647.383453][T11312] syz.4.1115: attempt to access beyond end of device [ 647.383453][T11312] nbd4: rw=0, sector=16, nr_sectors = 2 limit=0 [ 647.396666][T11312] vxfs: unable to read disk superblock at 8 [ 647.402988][T11312] vxfs: can't find superblock. [ 647.992639][T11099] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 648.049800][T11099] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 648.085103][T11318] loop1: detected capacity change from 0 to 16 [ 648.170820][T11318] erofs: (device loop1): mounted with root inode @ nid 36. [ 648.368316][T11099] team0: Port device team_slave_0 added [ 648.408458][T11099] team0: Port device team_slave_1 added [ 648.535191][T11099] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 648.551703][T11099] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 648.581815][T11099] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 648.596191][T11099] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 648.603410][T11099] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 648.902467][T11099] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 649.010237][T11330] netlink: 'syz.4.1119': attribute type 2 has an invalid length. [ 649.018147][T11330] netlink: 244 bytes leftover after parsing attributes in process `syz.4.1119'. [ 651.647258][T11333] sctp: failed to load transform for md5: -2 [ 652.440791][T11099] hsr_slave_0: entered promiscuous mode [ 652.447283][T11099] hsr_slave_1: entered promiscuous mode [ 652.478485][T11099] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 652.501827][T11099] Cannot create hsr debugfs directory [ 653.584714][T11364] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 654.686396][T11387] loop3: detected capacity change from 0 to 16 [ 654.712559][T11387] erofs: (device loop3): mounted with root inode @ nid 36. [ 655.954281][T11413] syz.3.1131: attempt to access beyond end of device [ 655.954281][T11413] loop3: rw=0, sector=8, nr_sectors = 16 limit=16 [ 656.263375][T11413] erofs: (device loop3): z_erofs_read_folio: read error -5 @ 8200 of nid 36 [ 657.384631][T11099] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 657.409981][T11099] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 657.436324][T11099] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 657.463623][T11099] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 658.276651][T11099] 8021q: adding VLAN 0 to HW filter on device bond0 [ 658.313720][T11432] serio: Serial port ptm0 [ 658.337259][T11099] 8021q: adding VLAN 0 to HW filter on device team0 [ 658.411196][ T5941] bridge0: port 1(bridge_slave_0) entered blocking state [ 658.418409][ T5941] bridge0: port 1(bridge_slave_0) entered forwarding state [ 658.454928][ T5941] bridge0: port 2(bridge_slave_1) entered blocking state [ 658.462174][ T5941] bridge0: port 2(bridge_slave_1) entered forwarding state [ 659.812198][T11099] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 659.879322][T11099] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 661.273103][T11462] Invalid ELF header magic: != ELF [ 661.558343][T11099] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 662.224105][T11099] veth0_vlan: entered promiscuous mode [ 662.697532][T11099] veth1_vlan: entered promiscuous mode [ 663.824637][T11099] veth0_macvtap: entered promiscuous mode [ 663.835073][T11099] veth1_macvtap: entered promiscuous mode [ 663.854861][T11099] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 663.868753][T11099] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 663.878740][T11099] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 663.889247][T11099] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 663.899194][T11099] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 663.911129][T11099] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 663.921476][T11099] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 664.058759][T11099] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 664.119627][T11099] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 664.202179][T11490] zonefs (nullb0) ERROR: Not a zoned block device [ 664.891438][T11099] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 664.938726][T11099] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 664.951403][T11099] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 664.970994][T11495] loop5: detected capacity change from 0 to 16 [ 664.988950][T11099] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 665.033687][T11495] erofs: (device loop5): mounted with root inode @ nid 36. [ 665.041592][T11099] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 665.111089][T11099] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 665.159819][T11099] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 665.170532][T11099] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 665.366740][T11099] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 665.461259][T11099] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 665.533194][T11099] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 665.589239][T11099] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 665.598002][T11099] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 665.871410][ T193] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 665.908696][ T193] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 666.025354][ T3024] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 666.036115][ T3024] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 666.261100][T11513] syz.5.1154: attempt to access beyond end of device [ 666.261100][T11513] loop5: rw=0, sector=8, nr_sectors = 16 limit=16 [ 666.274363][T11513] erofs: (device loop5): z_erofs_read_folio: read error -5 @ 8200 of nid 36 [ 669.870706][T11545] rdma_rxe: rxe_newlink: failed to add team_slave_1 [ 673.778054][T11571] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 675.264727][T11588] loop3: detected capacity change from 0 to 16 [ 675.315276][T11588] erofs: (device loop3): mounted with root inode @ nid 36. [ 675.338297][ T12] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 675.816385][ T12] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 676.340942][ T12] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 677.315945][ T54] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 677.415981][ T54] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 677.426736][ T54] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 677.440621][ T54] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 677.450918][ T54] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 677.460217][ T54] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 678.000229][ T12] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 678.661705][T11613] ip_vti0 speed is unknown, defaulting to 1000 [ 679.799160][ T54] Bluetooth: hci1: command tx timeout [ 680.020341][ T12] bridge_slave_1: left allmulticast mode [ 680.026078][ T12] bridge_slave_1: left promiscuous mode [ 680.202482][ T12] bridge0: port 2(bridge_slave_1) entered disabled state [ 680.474514][T11641] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 680.846723][T11647] loop4: detected capacity change from 0 to 512 [ 680.903030][ T12] bridge_slave_0: left allmulticast mode [ 680.911414][T11647] ext4: Unknown parameter 'subj_user' [ 680.937336][ T12] bridge_slave_0: left promiscuous mode [ 680.999025][ T12] bridge0: port 1(bridge_slave_0) entered disabled state [ 681.859360][ T54] Bluetooth: hci1: command tx timeout [ 682.284692][T11665] loop1: detected capacity change from 0 to 32768 [ 682.310040][T11665] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop1 (7:1) scanned by syz.1.1181 (11665) [ 682.332441][T11665] BTRFS info (device loop1): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 682.343412][T11665] BTRFS info (device loop1): using crc32c (crc32c-intel) checksum algorithm [ 682.352909][T11665] BTRFS info (device loop1): using free-space-tree [ 682.988935][ T12] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 683.059949][ T12] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 683.124523][ T12] bond0 (unregistering): Released all slaves [ 683.170975][ T30] audit: type=1804 audit(2000000004.890:101): pid=11683 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.1.1181" name="/newroot/280/file0/bus" dev="loop1" ino=263 res=1 errno=0 [ 683.926040][ T54] Bluetooth: hci1: command tx timeout [ 683.993214][ T5844] BTRFS info (device loop1): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 684.713019][T11708] loop4: detected capacity change from 0 to 16 [ 684.749014][T11708] erofs: (device loop4): mounted with root inode @ nid 36. [ 685.331854][T11613] chnl_net:caif_netlink_parms(): no params data found [ 686.057357][ T54] Bluetooth: hci1: command tx timeout [ 686.116849][ T12] hsr_slave_0: left promiscuous mode [ 686.229291][ T1291] ieee802154 phy0 wpan0: encryption failed: -22 [ 686.235655][ T1291] ieee802154 phy1 wpan1: encryption failed: -22 [ 686.468862][ T12] hsr_slave_1: left promiscuous mode [ 686.989341][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 687.104509][ T12] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 687.173269][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 687.192886][ T12] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 687.749011][ T12] veth1_macvtap: left promiscuous mode [ 687.754621][ T12] veth0_macvtap: left promiscuous mode [ 687.760504][ T12] veth1_vlan: left promiscuous mode [ 687.766007][ T12] veth0_vlan: left promiscuous mode [ 689.173052][T11754] loop4: detected capacity change from 0 to 32768 [ 689.210076][T11754] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop4 (7:4) scanned by syz.4.1194 (11754) [ 689.254323][T11754] BTRFS info (device loop4): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 689.279048][T11754] BTRFS info (device loop4): using crc32c (crc32c-intel) checksum algorithm [ 689.306226][T11754] BTRFS info (device loop4): using free-space-tree [ 689.854305][ T30] audit: type=1804 audit(2000000005.710:102): pid=11774 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.4.1194" name="/newroot/262/file0/bus" dev="loop4" ino=263 res=1 errno=0 [ 690.073544][ T12] team0 (unregistering): Port device team_slave_1 removed [ 690.205352][ T12] team0 (unregistering): Port device team_slave_0 removed [ 690.884516][T11783] loop5: detected capacity change from 0 to 512 [ 690.891768][T11783] ext4: Unknown parameter 'subj_user' [ 691.676803][T11613] bridge0: port 1(bridge_slave_0) entered blocking state [ 691.705448][ T5838] BTRFS info (device loop4): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 691.725334][T11613] bridge0: port 1(bridge_slave_0) entered disabled state [ 691.754379][T11613] bridge_slave_0: entered allmulticast mode [ 691.769969][T11613] bridge_slave_0: entered promiscuous mode [ 691.821200][T11613] bridge0: port 2(bridge_slave_1) entered blocking state [ 691.847283][T11613] bridge0: port 2(bridge_slave_1) entered disabled state [ 691.923882][T11613] bridge_slave_1: entered allmulticast mode [ 691.960351][T11613] bridge_slave_1: entered promiscuous mode [ 692.179371][T11613] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 692.305569][T11613] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 693.402064][T11823] loop5: detected capacity change from 0 to 16 [ 693.435425][T11823] erofs: (device loop5): mounted with root inode @ nid 36. [ 693.525406][T11613] team0: Port device team_slave_0 added [ 693.542208][T11613] team0: Port device team_slave_1 added [ 693.926739][T11833] syz.5.1204: attempt to access beyond end of device [ 693.926739][T11833] loop5: rw=0, sector=8, nr_sectors = 16 limit=16 [ 693.940395][T11833] erofs: (device loop5): z_erofs_read_folio: read error -5 @ 8200 of nid 36 [ 694.472964][T11831] syz.4.1206: attempt to access beyond end of device [ 694.472964][T11831] nbd4: rw=0, sector=2, nr_sectors = 2 limit=0 [ 694.488919][T11831] vxfs: unable to read disk superblock at 1 [ 694.503499][T11831] syz.4.1206: attempt to access beyond end of device [ 694.503499][T11831] nbd4: rw=0, sector=16, nr_sectors = 2 limit=0 [ 694.519586][T11831] vxfs: unable to read disk superblock at 8 [ 694.529605][T11831] vxfs: can't find superblock. [ 694.891303][T11613] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 694.898447][T11613] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 695.103593][T11613] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 696.048363][T11847] SET target dimension over the limit! [ 697.259027][T11613] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 697.266059][T11613] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 697.294146][T11613] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 697.694104][T11856] loop3: detected capacity change from 0 to 512 [ 697.701419][T11856] ext4: Unknown parameter 'subj_user' [ 697.948938][T11613] hsr_slave_0: entered promiscuous mode [ 698.056475][T11613] hsr_slave_1: entered promiscuous mode [ 698.326761][T11613] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 698.648910][T11613] Cannot create hsr debugfs directory [ 699.515483][T11872] loop4: detected capacity change from 0 to 16 [ 699.724654][T11872] erofs: (device loop4): mounted with root inode @ nid 36. [ 699.726929][T11849] loop1: detected capacity change from 0 to 32768 [ 699.913138][T11849] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop1 (7:1) scanned by syz.1.1210 (11849) [ 700.739248][T11880] syz.4.1217: attempt to access beyond end of device [ 700.739248][T11880] loop4: rw=0, sector=8, nr_sectors = 16 limit=16 [ 700.752894][T11880] erofs: (device loop4): z_erofs_read_folio: read error -5 @ 8200 of nid 36 [ 701.048801][T11849] BTRFS info (device loop1): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 701.268910][T11849] BTRFS info (device loop1): using crc32c (crc32c-intel) checksum algorithm [ 701.277791][T11849] BTRFS info (device loop1): using free-space-tree [ 701.300518][T11849] workqueue: Failed to create a rescuer kthread for wq "btrfs-worker": -EINTR [ 701.300846][T11849] workqueue: Failed to create a rescuer kthread for wq "btrfs-delalloc": -EINTR [ 701.310959][T11849] workqueue: Failed to create a rescuer kthread for wq "btrfs-flush_delalloc": -EINTR [ 701.321669][T11849] workqueue: Failed to create a rescuer kthread for wq "btrfs-cache": -EINTR [ 701.336084][T11849] workqueue: Failed to create a rescuer kthread for wq "btrfs-fixup": -EINTR [ 701.345569][T11849] workqueue: Failed to create a rescuer kthread for wq "btrfs-endio": -EINTR [ 701.354982][T11849] workqueue: Failed to create a rescuer kthread for wq "btrfs-endio-meta": -EINTR [ 701.364413][T11849] workqueue: Failed to create a rescuer kthread for wq "btrfs-rmw": -EINTR [ 701.374265][T11849] workqueue: Failed to create a rescuer kthread for wq "btrfs-endio-write": -EINTR [ 701.383377][T11849] workqueue: Failed to create a rescuer kthread for wq "btrfs-compressed-write": -EINTR [ 701.393312][T11849] workqueue: Failed to create a rescuer kthread for wq "btrfs-freespace-write": -EINTR [ 701.403585][T11849] workqueue: Failed to create a rescuer kthread for wq "btrfs-delayed-meta": -EINTR [ 701.413806][T11849] workqueue: Failed to create a rescuer kthread for wq "btrfs-qgroup-rescan": -EINTR [ 701.554342][T11849] BTRFS error (device loop1): open_ctree failed [ 706.139296][T11955] loop5: detected capacity change from 0 to 16 [ 706.171617][T11955] erofs: (device loop5): mounted with root inode @ nid 36. [ 706.853744][T11964] syz.5.1230: attempt to access beyond end of device [ 706.853744][T11964] loop5: rw=0, sector=8, nr_sectors = 16 limit=16 [ 706.867480][T11964] erofs: (device loop5): z_erofs_read_folio: read error -5 @ 8200 of nid 36 [ 707.587980][T11965] syz.3.1232: attempt to access beyond end of device [ 707.587980][T11965] nbd3: rw=0, sector=2, nr_sectors = 2 limit=0 [ 707.601584][T11965] vxfs: unable to read disk superblock at 1 [ 707.608766][T11965] syz.3.1232: attempt to access beyond end of device [ 707.608766][T11965] nbd3: rw=0, sector=16, nr_sectors = 2 limit=0 [ 707.622115][T11965] vxfs: unable to read disk superblock at 8 [ 707.628165][T11965] vxfs: can't find superblock. [ 708.589698][T11613] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 708.988087][T11613] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 709.014901][T11613] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 709.304010][T11613] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 710.886176][T11993] loop5: detected capacity change from 0 to 512 [ 710.893461][T11993] ext4: Unknown parameter 'subj_user' [ 710.999645][T11613] 8021q: adding VLAN 0 to HW filter on device bond0 [ 711.016346][T11613] 8021q: adding VLAN 0 to HW filter on device team0 [ 711.044853][T11613] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 711.055322][T11613] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 711.080702][ T11] bridge0: port 1(bridge_slave_0) entered blocking state [ 711.087901][ T11] bridge0: port 1(bridge_slave_0) entered forwarding state [ 711.097409][ T11] bridge0: port 2(bridge_slave_1) entered blocking state [ 711.104578][ T11] bridge0: port 2(bridge_slave_1) entered forwarding state [ 712.587289][T11613] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 712.741601][T11613] veth0_vlan: entered promiscuous mode [ 712.768194][T11613] veth1_vlan: entered promiscuous mode [ 712.906551][T11613] veth0_macvtap: entered promiscuous mode [ 712.927295][T12021] loop5: detected capacity change from 0 to 16 [ 712.974097][T11613] veth1_macvtap: entered promiscuous mode [ 713.016170][T12021] erofs: (device loop5): mounted with root inode @ nid 36. [ 713.117328][T11613] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 713.267013][T12028] syz.4.1246: attempt to access beyond end of device [ 713.267013][T12028] nbd4: rw=0, sector=2, nr_sectors = 2 limit=0 [ 713.288851][T12028] vxfs: unable to read disk superblock at 1 [ 713.325847][T12028] syz.4.1246: attempt to access beyond end of device [ 713.325847][T12028] nbd4: rw=0, sector=16, nr_sectors = 2 limit=0 [ 713.363427][T12028] vxfs: unable to read disk superblock at 8 [ 713.382199][T12028] vxfs: can't find superblock. [ 713.737934][T11613] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 714.016811][T12031] syz.5.1244: attempt to access beyond end of device [ 714.016811][T12031] loop5: rw=0, sector=8, nr_sectors = 16 limit=16 [ 714.030455][T12031] erofs: (device loop5): z_erofs_read_folio: read error -5 @ 8200 of nid 36 [ 714.439821][T11613] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 714.474838][T11613] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 714.508695][T11613] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 714.562665][T11613] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 714.625449][T11613] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 714.636300][T11613] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 714.647788][T11613] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 714.657740][T11613] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 714.668656][T11613] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 714.678550][T11613] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 714.689300][T11613] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 714.699387][T11613] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 714.710032][T11613] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 714.719938][T11613] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 714.730774][T11613] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 714.742006][T11613] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 714.752499][T11613] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 714.761379][T11613] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 714.770186][T11613] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 714.779015][T11613] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 716.169107][ T5942] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 716.209945][ T5942] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 716.307301][ T5942] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 716.399546][ T5942] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 717.379953][T12058] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=2758444543 (5516889086 ns) > initial count (4205064 ns). Using initial count to start timer. [ 717.777597][T12074] rdma_rxe: rxe_newlink: failed to add team_slave_1 [ 718.781467][ T5942] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 718.800172][T12077] loop4: detected capacity change from 0 to 512 [ 718.810814][T12077] ext4: Unknown parameter 'subj_user' [ 719.454104][ T5942] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 719.664712][ T5942] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 720.488258][ T5850] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 720.499864][ T5850] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 720.524945][ T5850] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 720.558396][ T5850] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 720.597369][ T5850] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 720.608472][ T5850] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 720.619677][ T5942] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 720.767738][T12097] ip_vti0 speed is unknown, defaulting to 1000 [ 720.781971][ T5942] bridge_slave_1: left allmulticast mode [ 720.787798][ T5942] bridge_slave_1: left promiscuous mode [ 720.793901][ T5942] bridge0: port 2(bridge_slave_1) entered disabled state [ 720.844568][ T5942] bridge_slave_0: left allmulticast mode [ 720.853567][ T5942] bridge_slave_0: left promiscuous mode [ 720.860416][ T5942] bridge0: port 1(bridge_slave_0) entered disabled state [ 720.921204][T12109] loop5: detected capacity change from 0 to 16 [ 720.964253][T12109] erofs: (device loop5): mounted with root inode @ nid 36. [ 721.348926][T12113] syz.5.1257: attempt to access beyond end of device [ 721.348926][T12113] loop5: rw=0, sector=8, nr_sectors = 16 limit=16 [ 721.363042][T12113] erofs: (device loop5): z_erofs_read_folio: read error -5 @ 8200 of nid 36 [ 722.386302][ T54] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 722.413200][ T54] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 722.439023][ T54] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 722.447335][ T54] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 722.454965][ T54] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 722.462816][ T54] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 722.538785][ T8] usb 6-1: new high-speed USB device number 5 using dummy_hcd [ 722.721495][ T54] Bluetooth: hci1: command tx timeout [ 722.740061][ T8] usb 6-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 722.753844][ T8] usb 6-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 722.767940][ T8] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 722.781783][ T8] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 52, changing to 9 [ 722.793033][ T8] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8241, setting to 1024 [ 722.808144][ T8] usb 6-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 722.818014][ T8] usb 6-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 722.826538][ T8] usb 6-1: Product: syz [ 722.831298][ T8] usb 6-1: Manufacturer: syz [ 722.887443][ T8] cdc_wdm 6-1:1.0: skipping garbage [ 722.898397][ T8] cdc_wdm 6-1:1.0: skipping garbage [ 722.964135][ T8] cdc_wdm 6-1:1.0: cdc-wdm0: USB WDM device [ 722.976173][ T8] cdc_wdm 6-1:1.0: Unknown control protocol [ 723.056166][ T5942] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 723.076857][ T5942] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 723.092377][ T5942] bond0 (unregistering): Released all slaves [ 723.097349][ C0] cdc_wdm 6-1:1.0: wdm_int_callback - 7 bytes [ 723.247567][T12122] ip_vti0 speed is unknown, defaulting to 1000 [ 723.486633][ T5882] usb 6-1: USB disconnect, device number 5 [ 723.676117][T12134] loop3: detected capacity change from 0 to 512 [ 723.701452][T12134] ext4: Unknown parameter 'subj_user' [ 724.570785][ T54] Bluetooth: hci5: command tx timeout [ 724.798696][ T54] Bluetooth: hci1: command tx timeout [ 725.537979][T12154] loop3: detected capacity change from 0 to 2048 [ 725.559493][T12154] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 726.122772][T12159] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 726.246860][T12163] loop5: detected capacity change from 0 to 16 [ 726.324393][T12163] erofs: (device loop5): mounted with root inode @ nid 36. [ 726.566014][ T30] audit: type=1804 audit(2000000018.100:103): pid=12161 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.3.1267" name="/newroot/311/file1/bus" dev="loop3" ino=1367 res=1 errno=0 [ 726.672760][ T54] Bluetooth: hci5: command tx timeout [ 726.877760][T12170] syz.5.1269: attempt to access beyond end of device [ 726.877760][T12170] loop5: rw=0, sector=8, nr_sectors = 16 limit=16 [ 726.891366][T12170] erofs: (device loop5): z_erofs_read_folio: read error -5 @ 8200 of nid 36 [ 726.908737][ T54] Bluetooth: hci1: command tx timeout [ 727.127801][T12097] chnl_net:caif_netlink_parms(): no params data found [ 728.359608][T12197] kAFS: unparsable volume name [ 728.765790][ T54] Bluetooth: hci5: command tx timeout [ 728.968889][ T54] Bluetooth: hci1: command tx timeout [ 728.986016][ T5942] hsr_slave_0: left promiscuous mode [ 728.992476][ T5942] hsr_slave_1: left promiscuous mode [ 729.066400][ T5942] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 729.094476][ T5942] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 729.198325][ T5942] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 729.206199][ T5942] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 729.353996][ T5942] veth1_macvtap: left promiscuous mode [ 729.406186][ T5942] veth0_macvtap: left promiscuous mode [ 729.416423][ T5942] veth1_vlan: left promiscuous mode [ 729.460025][ T5942] veth0_vlan: left promiscuous mode [ 730.799114][ T54] Bluetooth: hci5: command tx timeout [ 730.816459][T12216] loop4: detected capacity change from 0 to 16 [ 730.869787][T12216] erofs: (device loop4): mounted with root inode @ nid 36. [ 730.935727][T12217] zonefs (nullb0) ERROR: Not a zoned block device [ 731.905235][T12225] syz.4.1279: attempt to access beyond end of device [ 731.905235][T12225] loop4: rw=0, sector=8, nr_sectors = 16 limit=16 [ 731.948931][T12225] erofs: (device loop4): z_erofs_read_folio: read error -5 @ 8200 of nid 36 [ 732.595755][ T5942] team0 (unregistering): Port device team_slave_1 removed [ 732.685497][ T5942] team0 (unregistering): Port device team_slave_0 removed [ 734.034651][T12122] chnl_net:caif_netlink_parms(): no params data found [ 734.229630][T12244] kAFS: unparsable volume name [ 736.142182][T12097] bridge0: port 1(bridge_slave_0) entered blocking state [ 736.197206][T12097] bridge0: port 1(bridge_slave_0) entered disabled state [ 736.279330][T12097] bridge_slave_0: entered allmulticast mode [ 736.316133][T12097] bridge_slave_0: entered promiscuous mode [ 736.324208][T12097] bridge0: port 2(bridge_slave_1) entered blocking state [ 736.331456][T12097] bridge0: port 2(bridge_slave_1) entered disabled state [ 736.338758][T12097] bridge_slave_1: entered allmulticast mode [ 736.345756][T12097] bridge_slave_1: entered promiscuous mode [ 736.724336][T12122] bridge0: port 1(bridge_slave_0) entered blocking state [ 736.778101][T12122] bridge0: port 1(bridge_slave_0) entered disabled state [ 736.826750][T12122] bridge_slave_0: entered allmulticast mode [ 736.884227][T12122] bridge_slave_0: entered promiscuous mode [ 736.952627][T12122] bridge0: port 2(bridge_slave_1) entered blocking state [ 736.998496][T12122] bridge0: port 2(bridge_slave_1) entered disabled state [ 737.046136][T12122] bridge_slave_1: entered allmulticast mode [ 737.107446][T12122] bridge_slave_1: entered promiscuous mode [ 737.312883][T12122] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 737.358236][T12122] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 737.577728][T12261] loop4: detected capacity change from 0 to 512 [ 737.585206][T12261] ext4: Unknown parameter 'subj_user' [ 737.902071][T12122] team0: Port device team_slave_0 added [ 737.911188][T12252] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 737.954092][T12097] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 737.989585][T12122] team0: Port device team_slave_1 added [ 738.061817][T12097] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 738.115054][T12269] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 738.217355][T12097] team0: Port device team_slave_0 added [ 738.241042][T12122] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 738.248059][T12122] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 738.315135][T12122] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 738.359174][T12122] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 738.376316][T12122] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 738.447512][T12122] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 738.491648][T12097] team0: Port device team_slave_1 added [ 738.685164][T12122] hsr_slave_0: entered promiscuous mode [ 738.745235][T12122] hsr_slave_1: entered promiscuous mode [ 738.773924][T12122] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 738.794185][T12122] Cannot create hsr debugfs directory [ 738.826474][T12097] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 738.858768][T12097] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 738.948733][T12097] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 738.990101][T12097] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 738.997413][T12097] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 739.065903][T12097] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 739.165401][ T5942] netdevsim netdevsim1 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 739.196715][ T5942] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 739.423882][ T5942] netdevsim netdevsim1 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 739.452875][ T5942] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 740.743971][ T5942] netdevsim netdevsim1 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 740.915973][ T5942] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 741.632758][T12097] hsr_slave_0: entered promiscuous mode [ 741.655335][T12097] hsr_slave_1: entered promiscuous mode [ 741.672115][T12097] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 741.685099][T12097] Cannot create hsr debugfs directory [ 742.414813][ T5942] netdevsim netdevsim1 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 742.528794][ T5942] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 742.941812][T12304] kAFS: unparsable volume name [ 743.549031][T12122] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 743.795453][T12122] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 743.951287][T12122] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 744.855003][T12329] loop4: detected capacity change from 0 to 512 [ 744.862353][T12329] ext4: Unknown parameter 'subj_user' [ 745.154067][T12122] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 745.366804][T12122] 8021q: adding VLAN 0 to HW filter on device bond0 [ 745.384563][T12122] 8021q: adding VLAN 0 to HW filter on device team0 [ 745.423136][T12122] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 745.433669][T12122] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 745.480399][ T80] bridge0: port 1(bridge_slave_0) entered blocking state [ 745.487780][ T80] bridge0: port 1(bridge_slave_0) entered forwarding state [ 745.499519][ T80] bridge0: port 2(bridge_slave_1) entered blocking state [ 745.506739][ T80] bridge0: port 2(bridge_slave_1) entered forwarding state [ 745.658030][T12341] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 745.715458][T12342] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 745.815255][ T5942] bridge_slave_1: left allmulticast mode [ 745.822898][ T5942] bridge_slave_1: left promiscuous mode [ 745.828875][ T5942] bridge0: port 2(bridge_slave_1) entered disabled state [ 745.877922][ T5942] bridge_slave_0: left allmulticast mode [ 745.903080][ T5942] bridge_slave_0: left promiscuous mode [ 745.922606][ T5942] bridge0: port 1(bridge_slave_0) entered disabled state [ 747.635340][ T1291] ieee802154 phy0 wpan0: encryption failed: -22 [ 747.643070][ T1291] ieee802154 phy1 wpan1: encryption failed: -22 [ 747.962466][ T5942] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 747.975030][ T5942] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 747.986090][ T5942] bond0 (unregistering): Released all slaves [ 748.001512][ T5942] bond1 (unregistering): Released all slaves [ 748.076338][T12122] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 750.970085][T12097] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 752.071442][T12097] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 752.121454][T12097] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 752.168758][T12397] loop5: detected capacity change from 0 to 512 [ 752.179812][T12397] ext4: Unknown parameter 'subj_user' [ 753.468769][T12097] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 753.610957][T12122] veth0_vlan: entered promiscuous mode [ 753.622503][T12122] veth1_vlan: entered promiscuous mode [ 753.645185][T12122] veth0_macvtap: entered promiscuous mode [ 753.659514][T12122] veth1_macvtap: entered promiscuous mode [ 753.676206][T12122] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 753.688925][T12122] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 753.701709][T12122] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 753.712329][T12122] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 753.722307][T12122] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 753.732848][T12122] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 753.742752][T12122] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 753.753318][T12122] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 753.764473][T12122] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 753.840669][T12097] 8021q: adding VLAN 0 to HW filter on device bond0 [ 753.860409][T12097] 8021q: adding VLAN 0 to HW filter on device team0 [ 753.894555][T12097] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 753.905177][T12097] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 753.923462][T12122] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 753.934203][T12122] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 753.944171][T12122] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 753.954704][T12122] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 753.964748][T12122] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 753.975313][T12122] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 753.985329][T12122] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 753.995881][T12122] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 754.007498][T12122] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 754.017786][T12122] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 754.026761][T12122] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 754.035580][T12122] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 754.044419][T12122] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 754.272466][T10741] bridge0: port 1(bridge_slave_0) entered blocking state [ 754.279692][T10741] bridge0: port 1(bridge_slave_0) entered forwarding state [ 754.384849][T10741] bridge0: port 2(bridge_slave_1) entered blocking state [ 754.392104][T10741] bridge0: port 2(bridge_slave_1) entered forwarding state [ 754.576780][ T5942] hsr_slave_0: left promiscuous mode [ 754.593404][ T5942] hsr_slave_1: left promiscuous mode [ 754.608025][ T5942] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 754.632988][ T5942] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 754.675262][ T5942] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 754.682845][ T5942] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 754.723771][ T5942] veth1_macvtap: left promiscuous mode [ 754.730368][ T5942] veth0_macvtap: left promiscuous mode [ 754.736256][ T5942] veth1_vlan: left promiscuous mode [ 754.742243][ T5942] veth0_vlan: left promiscuous mode [ 756.518128][ T5884] usb 6-1: new high-speed USB device number 6 using dummy_hcd [ 756.698949][ T5884] usb 6-1: Using ep0 maxpacket: 8 [ 756.709354][T12443] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 756.739643][ T5884] usb 6-1: config 179 has an invalid interface number: 65 but max is 0 [ 756.748010][ T5884] usb 6-1: config 179 has no interface number 0 [ 756.780197][ T5884] usb 6-1: config 179 interface 65 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 7 [ 756.826996][ T5884] usb 6-1: config 179 interface 65 altsetting 0 endpoint 0xF has invalid maxpacket 1025, setting to 1024 [ 756.871565][ T5884] usb 6-1: config 179 interface 65 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 756.907303][T12445] syz.4.1325: attempt to access beyond end of device [ 756.907303][T12445] nbd4: rw=0, sector=2, nr_sectors = 2 limit=0 [ 756.920177][T12445] vxfs: unable to read disk superblock at 1 [ 756.926228][T12445] syz.4.1325: attempt to access beyond end of device [ 756.926228][T12445] nbd4: rw=0, sector=16, nr_sectors = 2 limit=0 [ 756.939413][T12445] vxfs: unable to read disk superblock at 8 [ 756.945453][T12445] vxfs: can't find superblock. [ 756.950997][ T5884] usb 6-1: config 179 interface 65 altsetting 0 endpoint 0x83 has invalid maxpacket 41728, setting to 1024 [ 756.989703][ T5884] usb 6-1: config 179 interface 65 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 757.003260][ T5884] usb 6-1: New USB device found, idVendor=12ab, idProduct=90a3, bcdDevice=1e.eb [ 757.014221][ T5884] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 757.084949][T12436] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 757.086550][T12447] loop4: detected capacity change from 0 to 512 [ 757.137482][T12447] ext4: Unknown parameter 'subj_user' [ 757.144295][ T5942] team0 (unregistering): Port device team_slave_1 removed [ 757.397808][ C1] xpad 6-1:179.65: xpad_irq_in - usb_submit_urb failed with result -19 [ 757.406180][ C1] xpad 6-1:179.65: xpad_irq_out - usb_submit_urb failed with result -19 [ 757.516323][ T5884] usb 6-1: USB disconnect, device number 6 [ 757.670782][ T5942] team0 (unregistering): Port device team_slave_0 removed [ 759.571862][T12460] sctp: failed to load transform for md5: -2 [ 760.480181][T12473] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 760.978041][T12097] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 760.999036][ T8284] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 761.006932][ T8284] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 761.407992][T12480] loop4: detected capacity change from 0 to 64 [ 761.904755][T10741] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 762.058752][T10741] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 762.072949][T12097] veth0_vlan: entered promiscuous mode [ 762.220757][T12097] veth1_vlan: entered promiscuous mode [ 762.534090][T12097] veth0_macvtap: entered promiscuous mode [ 762.544010][T12097] veth1_macvtap: entered promiscuous mode [ 762.561083][T12097] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 762.571854][T12097] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 762.582005][T12097] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 762.592626][T12097] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 762.602647][T12097] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 762.613243][T12097] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 762.623283][T12097] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 762.634309][T12097] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 762.646041][T12097] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 762.656207][T12097] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 762.666967][T12097] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 762.676983][T12097] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 762.687584][T12097] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 762.697660][T12097] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 762.708327][T12097] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 762.718396][T12097] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 762.729159][T12097] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 762.741660][T12097] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 762.763004][T12097] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 762.772326][T12097] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 762.786667][T12097] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 762.804447][T12097] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 763.545368][T12503] loop5: detected capacity change from 0 to 512 [ 763.620629][T12503] ext4: Unknown parameter 'subj_user' [ 765.728814][T12524] netlink: 'syz.6.1341': attribute type 7 has an invalid length. [ 765.755543][T10741] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 765.983971][T10741] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 766.488493][T12528] syz.5.1342: attempt to access beyond end of device [ 766.488493][T12528] nbd5: rw=0, sector=2, nr_sectors = 2 limit=0 [ 766.501365][T12528] vxfs: unable to read disk superblock at 1 [ 766.507389][T12528] syz.5.1342: attempt to access beyond end of device [ 766.507389][T12528] nbd5: rw=0, sector=16, nr_sectors = 2 limit=0 [ 766.520521][T12528] vxfs: unable to read disk superblock at 8 [ 766.526447][T12528] vxfs: can't find superblock. [ 766.595304][T10741] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 766.607947][T10741] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 767.917277][T12549] Cannot find add_set index 0 as target [ 768.033141][ T52] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 768.176946][ T52] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 768.314692][ T52] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 768.421352][ T52] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 768.737988][ T52] bridge_slave_1: left allmulticast mode [ 768.766362][ T52] bridge_slave_1: left promiscuous mode [ 768.782453][ T52] bridge0: port 2(bridge_slave_1) entered disabled state [ 768.859536][ T52] bridge_slave_0: left allmulticast mode [ 768.870196][ T52] bridge_slave_0: left promiscuous mode [ 768.876599][ T52] bridge0: port 1(bridge_slave_0) entered disabled state [ 769.365884][T12572] loop6: detected capacity change from 0 to 512 [ 769.404128][T12572] ext4: Unknown parameter 'subj_user' [ 770.549378][ T5850] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 770.852321][ T5850] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 770.862087][ T5850] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 770.872458][ T5850] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 770.881794][ T5850] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 771.733741][ T5850] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 772.969623][T12601] syz.3.1355: attempt to access beyond end of device [ 772.969623][T12601] nbd3: rw=0, sector=2, nr_sectors = 2 limit=0 [ 772.982933][T12601] vxfs: unable to read disk superblock at 1 [ 772.989069][T12601] syz.3.1355: attempt to access beyond end of device [ 772.989069][T12601] nbd3: rw=0, sector=16, nr_sectors = 2 limit=0 [ 773.001971][T12601] vxfs: unable to read disk superblock at 8 [ 773.007898][T12601] vxfs: can't find superblock. [ 773.839615][T12589] Bluetooth: hci1: command tx timeout [ 773.988948][ T52] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 774.014762][ T52] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 774.100751][ T52] bond0 (unregistering): Released all slaves [ 774.136879][T12595] netlink: 'syz.6.1353': attribute type 7 has an invalid length. [ 774.181600][T12605] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1357'. [ 774.231265][T12579] ip_vti0 speed is unknown, defaulting to 1000 [ 774.406383][T12622] Cannot find add_set index 0 as target [ 775.543215][T12629] loop5: detected capacity change from 0 to 512 [ 775.550515][T12629] ext4: Unknown parameter 'subj_user' [ 776.009005][T12589] Bluetooth: hci1: command tx timeout [ 776.382366][T12637] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 778.112295][ T8775] Bluetooth: hci1: command tx timeout [ 779.481239][T12579] chnl_net:caif_netlink_parms(): no params data found [ 780.166455][ T8775] Bluetooth: hci1: command tx timeout [ 780.217856][T12681] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1372'. [ 780.439786][T12579] bridge0: port 1(bridge_slave_0) entered blocking state [ 780.650704][T12579] bridge0: port 1(bridge_slave_0) entered disabled state [ 780.698440][T12579] bridge_slave_0: entered allmulticast mode [ 780.850130][T12579] bridge_slave_0: entered promiscuous mode [ 780.904325][T12579] bridge0: port 2(bridge_slave_1) entered blocking state [ 780.927554][T12579] bridge0: port 2(bridge_slave_1) entered disabled state [ 780.948342][T12579] bridge_slave_1: entered allmulticast mode [ 781.448888][T12579] bridge_slave_1: entered promiscuous mode [ 781.533971][T12695] syz.3.1374: attempt to access beyond end of device [ 781.533971][T12695] nbd3: rw=0, sector=2, nr_sectors = 2 limit=0 [ 781.547074][T12695] vxfs: unable to read disk superblock at 1 [ 781.563193][T12695] syz.3.1374: attempt to access beyond end of device [ 781.563193][T12695] nbd3: rw=0, sector=16, nr_sectors = 2 limit=0 [ 781.577343][T12695] vxfs: unable to read disk superblock at 8 [ 781.583633][T12695] vxfs: can't find superblock. [ 782.167564][T12699] loop4: detected capacity change from 0 to 512 [ 782.226602][T12699] ext4: Unknown parameter 'subj_user' [ 782.606156][T12706] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 783.713194][ T52] hsr_slave_0: left promiscuous mode [ 783.749523][ T52] hsr_slave_1: left promiscuous mode [ 783.776375][ T52] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 783.790063][ T52] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 783.800624][ T52] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 783.884323][T12716] syz.3.1379: attempt to access beyond end of device [ 783.884323][T12716] nbd3: rw=0, sector=2, nr_sectors = 2 limit=0 [ 783.897761][T12716] vxfs: unable to read disk superblock at 1 [ 783.907556][T12716] syz.3.1379: attempt to access beyond end of device [ 783.907556][T12716] nbd3: rw=0, sector=16, nr_sectors = 2 limit=0 [ 783.922603][T12716] vxfs: unable to read disk superblock at 8 [ 783.929509][T12716] vxfs: can't find superblock. [ 784.103791][ T52] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 784.485065][ T52] veth1_macvtap: left promiscuous mode [ 784.533879][ T52] veth0_macvtap: left promiscuous mode [ 784.544878][ T52] veth1_vlan: left promiscuous mode [ 784.580020][ T52] veth0_vlan: left promiscuous mode [ 784.858736][ T9] usb 5-1: new high-speed USB device number 7 using dummy_hcd [ 785.062243][ T9] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 785.100644][ T9] usb 5-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 785.134877][ T9] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 785.154700][ T9] usb 5-1: config 0 descriptor?? [ 785.181750][ T9] pwc: Askey VC010 type 2 USB webcam detected. [ 785.384809][ T9] pwc: send_video_command error -71 [ 785.404972][ T9] pwc: Failed to set video mode CIF@30 fps; return code = -71 [ 785.476126][ T9] Philips webcam 5-1:0.0: probe with driver Philips webcam failed with error -71 [ 785.515122][ T9] usb 5-1: USB disconnect, device number 7 [ 786.071703][ T9] usb 5-1: new high-speed USB device number 8 using dummy_hcd [ 786.316502][ T9] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 786.375292][ T9] usb 5-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 786.460909][ T9] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 786.577121][ T9] usb 5-1: config 0 descriptor?? [ 786.594936][ T9] pwc: Askey VC010 type 2 USB webcam detected. [ 786.694375][ T52] team0 (unregistering): Port device team_slave_1 removed [ 786.788380][ T52] team0 (unregistering): Port device team_slave_0 removed [ 787.017964][ T9] pwc: recv_control_msg error -32 req 02 val 2b00 [ 787.027378][ T9] pwc: recv_control_msg error -32 req 02 val 2700 [ 787.056429][ T9] pwc: recv_control_msg error -32 req 02 val 2c00 [ 787.064555][ T9] pwc: recv_control_msg error -32 req 04 val 1000 [ 787.109165][ T9] pwc: recv_control_msg error -32 req 04 val 1300 [ 787.125584][ T9] pwc: recv_control_msg error -32 req 04 val 1400 [ 787.163190][ T9] pwc: recv_control_msg error -32 req 02 val 2000 [ 787.392407][ T9] pwc: recv_control_msg error -71 req 04 val 1500 [ 787.401141][ T9] pwc: recv_control_msg error -71 req 02 val 2500 [ 787.408178][ T9] pwc: recv_control_msg error -71 req 02 val 2400 [ 787.432777][ T9] pwc: recv_control_msg error -71 req 02 val 2600 [ 787.443022][ T9] pwc: recv_control_msg error -71 req 02 val 2900 [ 787.463461][ T9] pwc: recv_control_msg error -71 req 02 val 2800 [ 787.470588][ T9] pwc: recv_control_msg error -71 req 04 val 1100 [ 787.493727][ T9] pwc: recv_control_msg error -71 req 04 val 1200 [ 787.523245][ T9] pwc: Registered as video103. [ 787.543106][ T9] input: PWC snapshot button as /devices/platform/dummy_hcd.4/usb5/5-1/input/input30 [ 787.585077][ T9] usb 5-1: USB disconnect, device number 8 [ 787.888732][T12579] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 787.923801][T12724] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1383'. [ 787.933445][T12728] netlink: 'syz.6.1384': attribute type 7 has an invalid length. [ 788.012369][T12579] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 788.229807][T12579] team0: Port device team_slave_0 added [ 788.340021][T12739] Cannot find add_set index 0 as target [ 789.269518][T12579] team0: Port device team_slave_1 added [ 789.613353][T12748] loop3: detected capacity change from 0 to 512 [ 789.664610][T12748] ext4: Unknown parameter 'subj_user' [ 789.710224][T12579] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 789.717325][T12579] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 789.873028][T12579] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 789.957665][T12579] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 789.996435][T12579] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 790.032175][T12579] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 790.108758][ T5886] usb 6-1: new high-speed USB device number 7 using dummy_hcd [ 790.151901][T12579] hsr_slave_0: entered promiscuous mode [ 790.166065][T12579] hsr_slave_1: entered promiscuous mode [ 790.174922][T12579] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 790.187613][T12579] Cannot create hsr debugfs directory [ 790.258682][ T5886] usb 6-1: Using ep0 maxpacket: 32 [ 790.279202][ T5886] usb 6-1: config 0 has an invalid interface number: 136 but max is 0 [ 790.303860][ T5886] usb 6-1: config 0 has no interface number 0 [ 790.328792][ T5886] usb 6-1: config 0 interface 136 altsetting 0 has an endpoint descriptor with address 0xB6, changing to 0x86 [ 790.357056][ T5886] usb 6-1: config 0 interface 136 altsetting 0 endpoint 0x86 has invalid wMaxPacketSize 0 [ 790.388444][ T5886] usb 6-1: config 0 interface 136 altsetting 0 endpoint 0x1 has invalid maxpacket 1024, setting to 64 [ 790.408651][ T5886] usb 6-1: config 0 interface 136 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 790.430192][ T5886] usb 6-1: New USB device found, idVendor=0763, idProduct=1021, bcdDevice=8e.c0 [ 790.551817][ T5886] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 790.595537][ T5886] usb 6-1: config 0 descriptor?? [ 790.644486][ T5886] usb 6-1: Quirk or no altset; falling back to MIDI 1.0 [ 791.856837][ T5886] usb 6-1: USB disconnect, device number 7 [ 791.911991][T10105] udevd[10105]: error opening ATTR{/sys/devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.136/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 793.162707][T12793] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1397'. [ 793.281666][T12579] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 793.307609][T12799] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 793.345943][T12579] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 793.418044][T12579] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 793.469116][T12579] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 793.778061][T12579] 8021q: adding VLAN 0 to HW filter on device bond0 [ 793.884421][T12579] 8021q: adding VLAN 0 to HW filter on device team0 [ 793.957437][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 793.964656][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 794.026573][ T11] bridge0: port 2(bridge_slave_1) entered blocking state [ 794.033789][ T11] bridge0: port 2(bridge_slave_1) entered forwarding state [ 794.229383][T12579] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 794.274788][T12579] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 794.564375][T12827] loop4: detected capacity change from 0 to 512 [ 794.592253][T12827] ext4: Unknown parameter 'subj_user' [ 795.526098][T12579] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 795.760096][T12579] veth0_vlan: entered promiscuous mode [ 795.819712][T12579] veth1_vlan: entered promiscuous mode [ 795.996959][T12579] veth0_macvtap: entered promiscuous mode [ 796.055337][T12579] veth1_macvtap: entered promiscuous mode [ 796.123855][T12579] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 796.144155][T12579] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 796.156506][T12579] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 796.196914][T12579] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 796.223446][T12579] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 796.257103][T12579] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 796.288626][T12579] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 796.317646][T12579] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 796.369811][T12579] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 796.391395][T12579] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 796.454200][T12579] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 796.498663][T12579] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 796.538975][T12579] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 796.563597][T12579] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 796.593819][T12579] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 796.682893][T12579] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 796.734389][T12579] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 796.770721][T12579] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 796.794223][T12865] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1409'. [ 796.841406][T12579] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 796.856915][T12870] Cannot find add_set index 0 as target [ 796.857288][T12579] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 796.872767][T12579] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 796.881678][T12579] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 797.132749][T12877] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 797.310160][T10741] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 797.318059][T10741] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 797.491271][ T5942] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 797.519598][ T5942] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 798.003402][T12886] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 798.370017][T12890] loop5: detected capacity change from 0 to 164 [ 798.544952][T12890] syz.5.1414 calls setitimer() with new_value NULL pointer. Misfeature support will be removed [ 798.798695][T12896] loop6: detected capacity change from 0 to 512 [ 798.846078][T12896] ext4: Unknown parameter 'subj_user' [ 799.102603][ T5942] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 799.378449][ T5942] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 799.603139][ T5942] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 799.787401][ T5942] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 800.045867][ T5942] bridge_slave_1: left allmulticast mode [ 800.058730][ T5942] bridge_slave_1: left promiscuous mode [ 800.064556][ T5942] bridge0: port 2(bridge_slave_1) entered disabled state [ 800.105465][ T5942] bridge_slave_0: left allmulticast mode [ 800.121638][ T5942] bridge_slave_0: left promiscuous mode [ 800.127593][ T5942] bridge0: port 1(bridge_slave_0) entered disabled state [ 800.809013][T12936] loop6: detected capacity change from 0 to 64 [ 802.347269][T12589] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 802.509090][T12589] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 802.550781][T12589] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 802.602211][T12589] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 802.612067][T12589] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 802.632715][T12589] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 803.763383][T12970] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 804.105016][T12972] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 804.502385][ T5942] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 804.536978][ T5942] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 804.564282][ T5942] bond0 (unregistering): Released all slaves [ 804.698029][T12948] ip_vti0 speed is unknown, defaulting to 1000 [ 804.798765][ T8775] Bluetooth: hci1: command tx timeout [ 805.024096][T12975] loop6: detected capacity change from 0 to 164 [ 805.280120][ T5886] usb 4-1: new high-speed USB device number 5 using dummy_hcd [ 805.441683][ T5886] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 805.489575][ T5886] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 805.557737][ T5886] usb 4-1: New USB device found, idVendor=0fc5, idProduct=b080, bcdDevice= 0.00 [ 805.590377][ T5886] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 805.613001][T12983] loop5: detected capacity change from 0 to 512 [ 805.625731][ T5886] usb 4-1: config 0 descriptor?? [ 805.629318][T12983] ext4: Unknown parameter 'subj_user' [ 807.861100][ T8775] Bluetooth: hci1: command tx timeout [ 808.246105][ T5942] hsr_slave_0: left promiscuous mode [ 808.299304][ T5942] hsr_slave_1: left promiscuous mode [ 808.428953][ T5942] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 808.436675][ T5942] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 808.505884][ T5942] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 808.521531][ T5942] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 808.966102][ T5942] veth1_macvtap: left promiscuous mode [ 808.976459][ T5942] veth0_macvtap: left promiscuous mode [ 808.982252][ T5942] veth1_vlan: left promiscuous mode [ 808.987614][ T5942] veth0_vlan: left promiscuous mode [ 809.073645][ T5886] usbhid 4-1:0.0: can't add hid device: -71 [ 809.079900][ T5886] usbhid 4-1:0.0: probe with driver usbhid failed with error -71 [ 809.205363][ T5886] usb 4-1: USB disconnect, device number 5 [ 809.213261][ T1291] ieee802154 phy0 wpan0: encryption failed: -22 [ 809.219870][ T1291] ieee802154 phy1 wpan1: encryption failed: -22 [ 809.946495][ T8775] Bluetooth: hci1: command tx timeout [ 810.929564][T13031] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 811.482069][T13035] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 812.018901][ T8775] Bluetooth: hci1: command tx timeout [ 812.844917][ T5942] team0 (unregistering): Port device team_slave_1 removed [ 813.120425][ T5942] team0 (unregistering): Port device team_slave_0 removed [ 814.541451][T12948] chnl_net:caif_netlink_parms(): no params data found [ 814.619378][T13049] netlink: 12 bytes leftover after parsing attributes in process `syz.6.1443'. [ 815.606499][T12948] bridge0: port 1(bridge_slave_0) entered blocking state [ 815.640303][T12948] bridge0: port 1(bridge_slave_0) entered disabled state [ 815.704744][T12948] bridge_slave_0: entered allmulticast mode [ 815.739530][T12948] bridge_slave_0: entered promiscuous mode [ 815.762587][T13064] loop5: detected capacity change from 0 to 512 [ 815.787531][T12948] bridge0: port 2(bridge_slave_1) entered blocking state [ 815.789463][T13064] ext4: Unknown parameter 'subj_user' [ 815.856494][T12948] bridge0: port 2(bridge_slave_1) entered disabled state [ 815.888953][T12948] bridge_slave_1: entered allmulticast mode [ 815.931846][T12948] bridge_slave_1: entered promiscuous mode [ 817.098470][T12948] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 817.541478][T12948] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 817.897801][T12948] team0: Port device team_slave_0 added [ 817.909403][T12948] team0: Port device team_slave_1 added [ 817.965392][T12948] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 817.980116][T12948] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 818.079909][T12948] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 818.116370][T12948] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 818.132929][T12948] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 818.217463][T12948] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 818.372653][T12948] hsr_slave_0: entered promiscuous mode [ 818.382732][T12948] hsr_slave_1: entered promiscuous mode [ 818.396101][T12948] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 818.404298][T12948] Cannot create hsr debugfs directory [ 818.847932][T13094] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 819.596664][T13093] loop5: detected capacity change from 0 to 32768 [ 819.634308][T13093] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop5 (7:5) scanned by syz.5.1450 (13093) [ 819.718071][T12948] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 819.765788][T13093] BTRFS info (device loop5): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 819.807140][T13093] BTRFS info (device loop5): using crc32c (crc32c-intel) checksum algorithm [ 819.843771][T13093] BTRFS info (device loop5): using free-space-tree [ 819.885086][T12948] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 819.910857][T12948] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 820.011670][T12948] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 820.202377][T12948] 8021q: adding VLAN 0 to HW filter on device bond0 [ 820.220571][T12948] 8021q: adding VLAN 0 to HW filter on device team0 [ 820.254990][T12948] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 820.265470][T12948] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 820.281564][ T8284] bridge0: port 1(bridge_slave_0) entered blocking state [ 820.288783][ T8284] bridge0: port 1(bridge_slave_0) entered forwarding state [ 820.301466][ T8284] bridge0: port 2(bridge_slave_1) entered blocking state [ 820.308675][ T8284] bridge0: port 2(bridge_slave_1) entered forwarding state [ 822.054603][T12948] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 822.071328][ T7436] BTRFS info (device loop5): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 822.301226][T12948] veth0_vlan: entered promiscuous mode [ 822.322779][T13149] netlink: 12 bytes leftover after parsing attributes in process `syz.6.1454'. [ 822.389747][T12948] veth1_vlan: entered promiscuous mode [ 822.595595][T12948] veth0_macvtap: entered promiscuous mode [ 822.648320][T12948] veth1_macvtap: entered promiscuous mode [ 822.727545][T12948] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 822.772284][T12948] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 822.811610][T12948] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 822.858811][T12948] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 822.908891][T12948] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 822.960174][T12948] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 822.997710][T12948] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 823.068766][T12948] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 823.173343][T12948] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 823.191297][T12948] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 823.208594][T12948] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 823.230511][T12948] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 823.231144][T13167] loop5: detected capacity change from 0 to 512 [ 823.241156][T12948] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 823.241189][T12948] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 823.241209][T12948] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 823.241227][T12948] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 823.241244][T12948] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 823.242703][T12948] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 823.349107][T13167] EXT4-fs (loop5): blocks per group (71) and clusters per group (20800) inconsistent [ 823.447210][T12948] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 823.456289][T12948] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 823.465338][T12948] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 823.474168][T12948] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 823.556459][T13170] loop6: detected capacity change from 0 to 512 [ 823.669893][T13170] ext4: Unknown parameter 'subj_user' [ 825.317425][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 825.335894][ T80] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 825.434986][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 825.446765][ T80] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 826.051813][T13178] PKCS7: Unknown OID: [4] 2.19.13055.170809666(bad) [ 826.128724][T13178] PKCS7: Only support pkcs7_signedData type [ 828.596265][T12589] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 828.607134][T12589] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 828.619069][T12589] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 828.629167][T12589] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 828.636962][T12589] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 828.644635][T12589] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 829.341862][T13246] ip_vti0 speed is unknown, defaulting to 1000 [ 829.965635][ T5941] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 830.220575][ T5941] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 830.297269][T13262] bond1: entered promiscuous mode [ 830.567523][ T5941] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 830.571260][T13260] loop5: detected capacity change from 0 to 32768 [ 830.616319][T13260] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop5 (7:5) scanned by syz.5.1464 (13260) [ 830.691067][T13260] BTRFS info (device loop5): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 830.712194][T13260] BTRFS info (device loop5): using crc32c (crc32c-intel) checksum algorithm [ 830.725072][T13260] BTRFS info (device loop5): using free-space-tree [ 830.746663][ T8775] Bluetooth: hci1: command tx timeout [ 831.152231][ T5941] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 831.644192][T13295] loop6: detected capacity change from 0 to 512 [ 831.749890][T13295] ext4: Unknown parameter 'subj_user' [ 831.999726][ T7436] BTRFS info (device loop5): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 832.031001][T13246] chnl_net:caif_netlink_parms(): no params data found [ 832.495040][T13246] bridge0: port 1(bridge_slave_0) entered blocking state [ 832.507238][T13246] bridge0: port 1(bridge_slave_0) entered disabled state [ 832.532959][T13246] bridge_slave_0: entered allmulticast mode [ 832.544427][T13246] bridge_slave_0: entered promiscuous mode [ 832.611568][T13246] bridge0: port 2(bridge_slave_1) entered blocking state [ 832.626257][T13246] bridge0: port 2(bridge_slave_1) entered disabled state [ 832.656798][T13246] bridge_slave_1: entered allmulticast mode [ 832.668237][T13246] bridge_slave_1: entered promiscuous mode [ 832.809107][ T8775] Bluetooth: hci1: command tx timeout [ 832.999856][T13309] netlink: 20 bytes leftover after parsing attributes in process `syz.5.1469'. [ 834.360721][T12589] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 834.372746][T12589] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 834.384285][T12589] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 834.401395][T12589] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 834.424707][T12589] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 834.434119][T12589] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 834.538686][T13315] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1469'. [ 834.645322][T13246] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 834.693977][T13246] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 834.940743][ T8775] Bluetooth: hci1: command tx timeout [ 835.824753][T13318] ip_vti0 speed is unknown, defaulting to 1000 [ 835.837182][T13246] team0: Port device team_slave_0 added [ 836.224467][T13246] team0: Port device team_slave_1 added [ 836.350742][ T5941] bridge_slave_1: left allmulticast mode [ 836.412154][ T5941] bridge_slave_1: left promiscuous mode [ 836.538890][ T5941] bridge0: port 2(bridge_slave_1) entered disabled state [ 836.665417][ T5941] bridge_slave_0: left allmulticast mode [ 836.699154][ T5941] bridge_slave_0: left promiscuous mode [ 836.705073][ T5941] bridge0: port 1(bridge_slave_0) entered disabled state [ 836.718757][ T8775] Bluetooth: hci2: command tx timeout [ 836.976352][ T8775] Bluetooth: hci1: command tx timeout [ 837.490488][ T5941] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 837.503772][ T5941] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 837.519621][ T5941] bond0 (unregistering): Released all slaves [ 837.601217][T13246] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 837.608272][T13246] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 837.637352][T13246] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 837.670118][T13246] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 837.677178][T13246] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 837.755593][T13246] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 838.185008][T13246] hsr_slave_0: entered promiscuous mode [ 838.209892][T13246] hsr_slave_1: entered promiscuous mode [ 838.225472][T13246] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 838.251422][T13246] Cannot create hsr debugfs directory [ 838.331749][T13347] netlink: 8 bytes leftover after parsing attributes in process `syz.6.1478'. [ 838.720591][T12589] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 838.734246][T12589] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 838.745406][T12589] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 838.754713][T12589] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 838.798731][T12589] Bluetooth: hci2: command tx timeout [ 838.920213][T12589] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 838.930269][T12589] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 839.737054][T13359] ip_vti0 speed is unknown, defaulting to 1000 [ 840.449314][ T5941] hsr_slave_0: left promiscuous mode [ 840.500773][ T5941] hsr_slave_1: left promiscuous mode [ 840.517581][ T5941] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 840.529456][ T5941] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 840.549612][ T5941] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 840.557329][ T5941] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 840.615471][ T5941] veth1_macvtap: left promiscuous mode [ 840.625345][ T5941] veth0_macvtap: left promiscuous mode [ 840.631641][ T5941] veth1_vlan: left promiscuous mode [ 840.637083][ T5941] veth0_vlan: left promiscuous mode [ 840.878908][T12589] Bluetooth: hci2: command tx timeout [ 841.138716][T12589] Bluetooth: hci3: command tx timeout [ 841.617260][ T5941] team0 (unregistering): Port device team_slave_1 removed [ 841.759564][ T5941] team0 (unregistering): Port device team_slave_0 removed [ 842.765572][T13381] netlink: 'syz.6.1481': attribute type 21 has an invalid length. [ 842.775309][T13381] netlink: 156 bytes leftover after parsing attributes in process `syz.6.1481'. [ 842.978612][T12589] Bluetooth: hci2: command tx timeout [ 843.187691][T13246] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 843.212618][T13246] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 843.215470][T12589] Bluetooth: hci3: command tx timeout [ 843.381905][T13246] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 843.670125][T13246] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 844.104582][T13318] chnl_net:caif_netlink_parms(): no params data found [ 845.279487][T12589] Bluetooth: hci3: command tx timeout [ 845.358068][T13318] bridge0: port 1(bridge_slave_0) entered blocking state [ 845.365937][T13318] bridge0: port 1(bridge_slave_0) entered disabled state [ 845.375339][T13318] bridge_slave_0: entered allmulticast mode [ 845.382939][T13318] bridge_slave_0: entered promiscuous mode [ 845.445302][T13318] bridge0: port 2(bridge_slave_1) entered blocking state [ 845.455066][T13318] bridge0: port 2(bridge_slave_1) entered disabled state [ 845.466933][T13318] bridge_slave_1: entered allmulticast mode [ 845.479905][T13318] bridge_slave_1: entered promiscuous mode [ 845.587242][T13318] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 845.673294][T13359] chnl_net:caif_netlink_parms(): no params data found [ 845.922050][ T5941] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 845.959689][T13318] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 846.815564][ T5941] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 846.876028][T13318] team0: Port device team_slave_0 added [ 846.932035][T13246] 8021q: adding VLAN 0 to HW filter on device bond0 [ 846.950850][T13246] 8021q: adding VLAN 0 to HW filter on device team0 [ 846.984239][T13318] team0: Port device team_slave_1 added [ 847.038761][ T8775] Bluetooth: hci5: command 0x0406 tx timeout [ 847.088966][ T5941] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 847.131478][ T52] bridge0: port 1(bridge_slave_0) entered blocking state [ 847.138705][ T52] bridge0: port 1(bridge_slave_0) entered forwarding state [ 847.165338][ T52] bridge0: port 2(bridge_slave_1) entered blocking state [ 847.172744][ T52] bridge0: port 2(bridge_slave_1) entered forwarding state [ 847.200592][T13246] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 847.214198][T13246] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 847.315225][ T5941] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 847.359264][ T8775] Bluetooth: hci3: command tx timeout [ 847.382656][T13318] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 847.524960][T13318] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 847.834743][T13318] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 848.254634][T13359] bridge0: port 1(bridge_slave_0) entered blocking state [ 848.298805][T13359] bridge0: port 1(bridge_slave_0) entered disabled state [ 848.319305][T13359] bridge_slave_0: entered allmulticast mode [ 848.343375][T13359] bridge_slave_0: entered promiscuous mode [ 848.390354][T13318] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 848.421100][T13318] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 848.578896][T13318] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 848.614342][T13359] bridge0: port 2(bridge_slave_1) entered blocking state [ 848.737606][T13359] bridge0: port 2(bridge_slave_1) entered disabled state [ 848.799321][T13359] bridge_slave_1: entered allmulticast mode [ 848.806494][T13359] bridge_slave_1: entered promiscuous mode [ 849.122172][T13359] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 849.242612][T13359] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 849.381771][T13318] hsr_slave_0: entered promiscuous mode [ 849.408308][T13318] hsr_slave_1: entered promiscuous mode [ 849.438954][T13318] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 849.446590][T13318] Cannot create hsr debugfs directory [ 849.487970][T13359] team0: Port device team_slave_0 added [ 849.585291][T13359] team0: Port device team_slave_1 added [ 850.167924][ T5941] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 850.984801][T13246] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 851.019636][T13359] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 851.048696][T13359] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 851.090740][T13359] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 851.139867][ T5941] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 851.207953][T13359] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 851.227030][T13359] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 851.274886][T13359] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 851.346732][ T5941] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 852.030217][ T5941] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 852.256916][T13359] hsr_slave_0: entered promiscuous mode [ 852.294557][T13359] hsr_slave_1: entered promiscuous mode [ 852.332982][T13359] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 852.363963][T13359] Cannot create hsr debugfs directory [ 853.480364][T13246] veth0_vlan: entered promiscuous mode [ 853.774925][T13246] veth1_vlan: entered promiscuous mode [ 853.953431][ T5941] bridge_slave_1: left allmulticast mode [ 853.979590][T13531] netlink: 'syz.6.1504': attribute type 2 has an invalid length. [ 853.987502][ T5941] bridge_slave_1: left promiscuous mode [ 854.016415][ T5941] bridge0: port 2(bridge_slave_1) entered disabled state [ 854.024192][T13531] netlink: 244 bytes leftover after parsing attributes in process `syz.6.1504'. [ 854.059493][ T5941] bridge_slave_0: left allmulticast mode [ 854.065229][ T5941] bridge_slave_0: left promiscuous mode [ 854.076000][ T5941] bridge0: port 1(bridge_slave_0) entered disabled state [ 854.091329][ T5941] bridge_slave_1: left allmulticast mode [ 854.097050][ T5941] bridge_slave_1: left promiscuous mode [ 854.109189][ T5941] bridge0: port 2(bridge_slave_1) entered disabled state [ 854.128253][ T5941] bridge_slave_0: left allmulticast mode [ 854.135230][ T5941] bridge_slave_0: left promiscuous mode [ 854.148945][ T5941] bridge0: port 1(bridge_slave_0) entered disabled state [ 857.015501][ T5941] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 857.035959][ T5941] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 857.065337][ T30] audit: type=1326 audit(2000000148.600:104): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13548 comm="syz.5.1508" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f377cb7e719 code=0x0 [ 857.099916][ T5941] bond0 (unregistering): Released all slaves [ 857.220496][T13549] netlink: 161700 bytes leftover after parsing attributes in process `syz.5.1508'. [ 857.458419][ T5941] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 857.471645][ T5941] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 857.484872][ T5941] bond0 (unregistering): Released all slaves [ 857.564902][T13542] workqueue: Failed to create a rescuer kthread for wq "bond3": -EINTR [ 857.628281][T13318] netdevsim netdevsim8 netdevsim0: renamed from eth0 [ 857.715337][T13318] netdevsim netdevsim8 netdevsim1: renamed from eth1 [ 859.223314][T13318] netdevsim netdevsim8 netdevsim2: renamed from eth2 [ 859.259981][T13318] netdevsim netdevsim8 netdevsim3: renamed from eth3 [ 859.277699][T13246] veth0_macvtap: entered promiscuous mode [ 859.351798][T13246] veth1_macvtap: entered promiscuous mode [ 861.336815][T13246] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 861.361691][T13246] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 861.392367][T13246] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 861.410680][T13246] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 861.422676][T13246] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 861.433789][T13246] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 861.457440][T13246] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 861.474591][T13246] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 861.622086][T13246] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 862.316805][T13605] netlink: 4 bytes leftover after parsing attributes in process `syz.6.1514'. [ 862.476519][T13246] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 862.497712][T13246] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 862.507729][T13246] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 862.518476][T13246] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 862.528459][T13246] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 862.539020][T13246] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 862.549271][T13246] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 862.559960][T13246] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 862.571731][T13246] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 862.742794][T13318] 8021q: adding VLAN 0 to HW filter on device bond0 [ 862.757012][T13246] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 862.776533][T13246] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 862.786894][T13246] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 862.798210][T13246] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 862.883880][T13621] bond3: entered promiscuous mode [ 863.326430][T13318] 8021q: adding VLAN 0 to HW filter on device team0 [ 863.352599][T13359] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 863.393706][T13359] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 863.625083][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 863.632439][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 864.538914][T13359] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 864.596750][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 864.604005][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 864.740026][T13359] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 865.866299][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 865.874562][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 865.934510][T13318] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 865.964954][T13318] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 866.129869][ T5941] hsr_slave_0: left promiscuous mode [ 866.137344][ T5941] hsr_slave_1: left promiscuous mode [ 866.144369][ T5941] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 866.159008][ T5941] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 866.186345][ T5941] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 866.266164][ T5941] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 866.301728][ T5941] hsr_slave_0: left promiscuous mode [ 866.327982][ T5941] hsr_slave_1: left promiscuous mode [ 866.507733][ T5941] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 866.526489][ T5941] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 866.536179][ T5941] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 866.544253][ T5941] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 866.601940][ T5941] veth1_macvtap: left promiscuous mode [ 866.607849][ T5941] veth0_macvtap: left promiscuous mode [ 866.672904][ T5941] veth1_vlan: left promiscuous mode [ 866.680986][ T5941] veth0_vlan: left promiscuous mode [ 866.727673][ T5941] veth1_macvtap: left promiscuous mode [ 866.758472][ T5941] veth0_macvtap: left promiscuous mode [ 866.810655][ T5941] veth1_vlan: left promiscuous mode [ 866.851587][ T5941] veth0_vlan: left promiscuous mode [ 869.667283][ T5941] team0 (unregistering): Port device team_slave_1 removed [ 869.765533][ T5941] team0 (unregistering): Port device team_slave_0 removed [ 870.329491][ T9] usb 7-1: new high-speed USB device number 2 using dummy_hcd [ 870.494619][ T1291] ieee802154 phy0 wpan0: encryption failed: -22 [ 870.502196][ T1291] ieee802154 phy1 wpan1: encryption failed: -22 [ 870.539509][ T9] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 870.550722][ T9] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 870.572341][ T9] usb 7-1: New USB device found, idVendor=1038, idProduct=12b6, bcdDevice= 0.00 [ 870.585015][ T9] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 870.601160][ T9] usb 7-1: config 0 descriptor?? [ 872.178964][ T9] hid (null): global environment stack underflow [ 872.192862][ T9] steelseries 0003:1038:12B6.0005: global environment stack underflow [ 872.215068][ T9] steelseries 0003:1038:12B6.0005: item 0 4 1 11 parsing failed [ 872.253860][ T9] steelseries 0003:1038:12B6.0005: probe with driver steelseries failed with error -22 [ 872.681916][ T5941] team0 (unregistering): Port device team_slave_1 removed [ 872.771834][T13679] usb usb1: usbfs: interface 0 claimed by hub while 'syz.5.1526' sets config #1 [ 873.084018][ T5941] team0 (unregistering): Port device team_slave_0 removed [ 874.274174][ T3024] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 874.327141][ T3024] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 874.433914][T13592] usb 7-1: USB disconnect, device number 2 [ 876.096818][T13359] 8021q: adding VLAN 0 to HW filter on device bond0 [ 876.530752][T13318] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 876.622589][T13359] 8021q: adding VLAN 0 to HW filter on device team0 [ 876.725212][ T3024] bridge0: port 1(bridge_slave_0) entered blocking state [ 876.732543][ T3024] bridge0: port 1(bridge_slave_0) entered forwarding state [ 876.758334][ T3024] bridge0: port 2(bridge_slave_1) entered blocking state [ 876.765719][ T3024] bridge0: port 2(bridge_slave_1) entered forwarding state [ 878.055552][T13724] syz0: rxe_newlink: already configured on ip_vti0 [ 880.095083][T13746] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci3/hci3:200/input31 [ 880.862578][T13359] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 881.154553][T13318] veth0_vlan: entered promiscuous mode [ 881.305584][T13318] veth1_vlan: entered promiscuous mode [ 881.620513][T13359] veth0_vlan: entered promiscuous mode [ 882.614900][T13359] veth1_vlan: entered promiscuous mode [ 882.745734][T13318] veth0_macvtap: entered promiscuous mode [ 882.842481][T13359] veth0_macvtap: entered promiscuous mode [ 882.853017][T13359] veth1_macvtap: entered promiscuous mode [ 882.870387][T13359] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 882.881462][T13359] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 882.886186][T13773] loop6: detected capacity change from 0 to 2048 [ 882.891724][T13359] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 882.908640][T13359] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 882.918735][T13359] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 882.929591][T13359] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 882.943153][T13359] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 882.957139][T13359] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 882.996786][T13773] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 883.009056][T13359] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 883.027924][T13359] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 883.057040][T13359] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 883.074150][T13359] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 883.099212][T13359] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 883.117552][T13359] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 883.189673][T13318] veth1_macvtap: entered promiscuous mode [ 883.247740][T13359] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 883.289060][T13359] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 883.297996][T13359] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 883.307007][T13359] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 883.340918][T13318] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 883.351846][T13318] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 883.363115][T13318] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 883.381271][T13318] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 883.391379][T13318] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 883.402237][T13318] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 883.412423][T13318] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 883.423238][T13318] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 883.435264][T13318] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 883.640866][T13318] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 883.653405][T13318] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 884.049432][ T30] audit: type=1804 audit(2000000175.550:105): pid=13789 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.6.1542" name="/newroot/81/file1/bus" dev="loop6" ino=1367 res=1 errno=0 [ 884.617134][T13318] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 884.638789][T13318] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 884.652733][T13318] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 884.663408][T13318] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 885.099216][T13318] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 885.110301][T13318] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 885.663545][ T30] audit: type=1800 audit(2000000176.650:106): pid=13789 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.6.1542" name="file1" dev="loop6" ino=1346 res=0 errno=0 [ 885.744098][T13318] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 886.054559][T13318] netdevsim netdevsim8 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 886.081827][T13318] netdevsim netdevsim8 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 886.145668][T13318] netdevsim netdevsim8 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 886.615807][T13318] netdevsim netdevsim8 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 886.643087][ T3374] ------------[ cut here ]------------ [ 886.649581][ T3374] WARNING: CPU: 1 PID: 3374 at io_uring/io_uring.c:3188 io_ring_exit_work+0x3e1/0x8a0 [ 886.659361][ T3374] Modules linked in: [ 886.663593][ T3374] CPU: 1 UID: 0 PID: 3374 Comm: kworker/u8:8 Not tainted 6.12.0-rc6-next-20241108-syzkaller #0 [ 886.674086][ T3374] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/30/2024 [ 886.684437][ T3374] Workqueue: iou_exit io_ring_exit_work [ 886.690119][ T3374] RIP: 0010:io_ring_exit_work+0x3e1/0x8a0 [ 886.695904][ T3374] Code: 23 e8 b3 d5 96 00 48 8b 7c 24 38 48 8b 74 24 10 e8 f4 c1 bc 0a 48 85 c0 75 3d e8 9a d5 96 00 e9 5c fd ff ff e8 90 d5 96 00 90 <0f> 0b 90 b8 70 17 00 00 48 89 44 24 10 eb cd 44 89 f9 80 e1 07 80 [ 886.715665][ T3374] RSP: 0018:ffffc9000d06fa40 EFLAGS: 00010293 [ 886.722507][ T3374] RAX: ffffffff8108a680 RBX: 000000010000e450 RCX: ffff88803159da00 [ 886.730767][ T3374] RDX: 0000000000000000 RSI: ffffffffffffffdf RDI: 0000000000000000 [ 886.739070][ T3374] RBP: ffffc9000d06fbb0 R08: ffffffff8108a653 R09: 1ffff92001a0df38 [ 886.747092][ T3374] R10: dffffc0000000000 R11: fffff52001a0df39 R12: 000000010000e42f [ 886.755424][ T3374] R13: ffff888030cd02c8 R14: ffff888030cd0450 R15: ffff888030cd0000 [ 886.763511][ T3374] FS: 0000000000000000(0000) GS:ffff8880b8700000(0000) knlGS:0000000000000000 [ 886.772578][ T3374] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 886.779238][ T3374] CR2: 0000000020025000 CR3: 0000000029b66000 CR4: 00000000003526f0 [ 886.787260][ T3374] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 886.795343][ T3374] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 886.803446][ T3374] Call Trace: [ 886.806775][ T3374] [ 886.809815][ T3374] ? __warn+0x168/0x4e0 [ 886.814014][ T3374] ? io_ring_exit_work+0x3e1/0x8a0 [ 886.819232][ T3374] ? report_bug+0x2b3/0x500 [ 886.823778][ T3374] ? io_ring_exit_work+0x3e1/0x8a0 [ 886.829017][ T3374] ? handle_bug+0x60/0x90 [ 886.833394][ T3374] ? exc_invalid_op+0x1a/0x50 [ 886.838120][ T3374] ? asm_exc_invalid_op+0x1a/0x20 [ 886.843514][ T3374] ? io_ring_exit_work+0x3b3/0x8a0 [ 886.848962][ T3374] ? io_ring_exit_work+0x3e0/0x8a0 [ 886.854129][ T3374] ? io_ring_exit_work+0x3e1/0x8a0 [ 886.859365][ T3374] ? __pfx_io_ring_exit_work+0x10/0x10 [ 886.864906][ T3374] ? process_scheduled_works+0x976/0x1850 [ 886.870777][ T3374] process_scheduled_works+0xa63/0x1850 [ 886.876411][ T3374] ? __pfx_process_scheduled_works+0x10/0x10 [ 886.882548][ T3374] ? assign_work+0x364/0x3d0 [ 886.887198][ T3374] worker_thread+0x870/0xd30 [ 886.891959][ T3374] ? _raw_spin_unlock_irqrestore+0xdd/0x140 [ 886.897920][ T3374] ? __kthread_parkme+0x169/0x1d0 [ 886.903055][ T3374] ? __pfx_worker_thread+0x10/0x10 [ 886.908207][ T3374] kthread+0x2f0/0x390 [ 886.912383][ T3374] ? __pfx_worker_thread+0x10/0x10 [ 886.917537][ T3374] ? __pfx_kthread+0x10/0x10 [ 886.922255][ T3374] ret_from_fork+0x4b/0x80 [ 886.926748][ T3374] ? __pfx_kthread+0x10/0x10 [ 886.931455][ T3374] ret_from_fork_asm+0x1a/0x30 [ 886.936299][ T3374] [ 886.939445][ T3374] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 886.946769][ T3374] CPU: 1 UID: 0 PID: 3374 Comm: kworker/u8:8 Not tainted 6.12.0-rc6-next-20241108-syzkaller #0 [ 886.957229][ T3374] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/30/2024 [ 886.967322][ T3374] Workqueue: iou_exit io_ring_exit_work [ 886.973097][ T3374] Call Trace: [ 886.976403][ T3374] [ 886.979372][ T3374] dump_stack_lvl+0x241/0x360 [ 886.984091][ T3374] ? __pfx_dump_stack_lvl+0x10/0x10 [ 886.989342][ T3374] ? __pfx__printk+0x10/0x10 [ 886.994066][ T3374] ? vscnprintf+0x5d/0x90 [ 886.998445][ T3374] panic+0x349/0x880 [ 887.002461][ T3374] ? __warn+0x177/0x4e0 [ 887.006658][ T3374] ? __pfx_panic+0x10/0x10 [ 887.011131][ T3374] ? ret_from_fork_asm+0x1a/0x30 [ 887.016114][ T3374] __warn+0x34b/0x4e0 [ 887.020146][ T3374] ? io_ring_exit_work+0x3e1/0x8a0 [ 887.025298][ T3374] report_bug+0x2b3/0x500 [ 887.029661][ T3374] ? io_ring_exit_work+0x3e1/0x8a0 [ 887.034811][ T3374] handle_bug+0x60/0x90 [ 887.039012][ T3374] exc_invalid_op+0x1a/0x50 [ 887.043549][ T3374] asm_exc_invalid_op+0x1a/0x20 [ 887.048444][ T3374] RIP: 0010:io_ring_exit_work+0x3e1/0x8a0 [ 887.054212][ T3374] Code: 23 e8 b3 d5 96 00 48 8b 7c 24 38 48 8b 74 24 10 e8 f4 c1 bc 0a 48 85 c0 75 3d e8 9a d5 96 00 e9 5c fd ff ff e8 90 d5 96 00 90 <0f> 0b 90 b8 70 17 00 00 48 89 44 24 10 eb cd 44 89 f9 80 e1 07 80 [ 887.073857][ T3374] RSP: 0018:ffffc9000d06fa40 EFLAGS: 00010293 [ 887.079968][ T3374] RAX: ffffffff8108a680 RBX: 000000010000e450 RCX: ffff88803159da00 [ 887.087966][ T3374] RDX: 0000000000000000 RSI: ffffffffffffffdf RDI: 0000000000000000 [ 887.095970][ T3374] RBP: ffffc9000d06fbb0 R08: ffffffff8108a653 R09: 1ffff92001a0df38 [ 887.104003][ T3374] R10: dffffc0000000000 R11: fffff52001a0df39 R12: 000000010000e42f [ 887.112007][ T3374] R13: ffff888030cd02c8 R14: ffff888030cd0450 R15: ffff888030cd0000 [ 887.120119][ T3374] ? io_ring_exit_work+0x3b3/0x8a0 [ 887.125266][ T3374] ? io_ring_exit_work+0x3e0/0x8a0 [ 887.130443][ T3374] ? __pfx_io_ring_exit_work+0x10/0x10 [ 887.135974][ T3374] ? process_scheduled_works+0x976/0x1850 [ 887.141845][ T3374] process_scheduled_works+0xa63/0x1850 [ 887.147483][ T3374] ? __pfx_process_scheduled_works+0x10/0x10 [ 887.153525][ T3374] ? assign_work+0x364/0x3d0 [ 887.158254][ T3374] worker_thread+0x870/0xd30 [ 887.162898][ T3374] ? _raw_spin_unlock_irqrestore+0xdd/0x140 [ 887.168933][ T3374] ? __kthread_parkme+0x169/0x1d0 [ 887.174079][ T3374] ? __pfx_worker_thread+0x10/0x10 [ 887.179239][ T3374] kthread+0x2f0/0x390 [ 887.183347][ T3374] ? __pfx_worker_thread+0x10/0x10 [ 887.188572][ T3374] ? __pfx_kthread+0x10/0x10 [ 887.193203][ T3374] ret_from_fork+0x4b/0x80 [ 887.197649][ T3374] ? __pfx_kthread+0x10/0x10 [ 887.202278][ T3374] ret_from_fork_asm+0x1a/0x30 [ 887.207102][ T3374] [ 887.210449][ T3374] Kernel Offset: disabled [ 887.214898][ T3374] Rebooting in 86400 seconds..