last executing test programs: 16m33.637010796s ago: executing program 32 (id=116): getpid() prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x3) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) r0 = syz_open_dev$MSR(&(0x7f0000000300), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) r2 = openat$nvram(0xffffffffffffff9c, 0x0, 0x40, 0x0) r3 = socket$alg(0x26, 0x5, 0x0) ioctl$FS_IOC_READ_VERITY_METADATA(r2, 0xc0286687, 0x0) bind$alg(r3, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(des3_ede)\x00'}, 0x58) r4 = accept$alg(r3, 0x0, 0x0) write$binfmt_script(r4, 0x0, 0x0) recvmmsg(r4, &(0x7f0000003a80)=[{{0x0, 0x0, &(0x7f0000003980)=[{&(0x7f0000003780)=""/6, 0x6}], 0x1}, 0xffffffe9}], 0x1, 0x0, 0x0) ioctl$SNDCTL_DSP_SETFMT(r2, 0xc0045005, &(0x7f0000000040)=0x7fffffff) r5 = dup(r1) ioctl$TIOCL_SETSEL(r5, 0x541c, &(0x7f0000000100)={0x2, {0x2, 0x13d, 0x0, 0xd6e}}) socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x44045}, 0x10) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0xe) r6 = gettid() process_vm_writev(r6, &(0x7f0000000000)=[{&(0x7f00008f9f09)=""/247, 0xf7}], 0x1, &(0x7f0000121000)=[{&(0x7f0000217f28)=""/231, 0xffffff4e}], 0x23a, 0x0) mprotect(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x0) mbind(&(0x7f00005b4000/0x4000)=nil, 0x4000, 0x0, 0x0, 0x0, 0x2) 14m19.595073815s ago: executing program 33 (id=416): bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$PROG_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) sched_setscheduler(0x0, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) syz_clone(0x600, 0x0, 0x33, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) r1 = socket$inet6(0xa, 0x1, 0x0) connect$inet6(r1, &(0x7f0000000000)={0xa, 0x0, 0x0, @dev, 0x5}, 0x1c) setsockopt$inet6_IPV6_HOPOPTS(r1, 0x29, 0x36, &(0x7f0000001440)=ANY=[], 0xc0) r2 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r2, 0x0, 0x0) sendmmsg(r2, &(0x7f0000007fc0), 0x800001d, 0x0) 13m24.592221274s ago: executing program 34 (id=557): syz_open_procfs(0x0, &(0x7f0000001080)='smaps_rollup\x00') prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x3) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000032680)=""/102400, 0x19000) r1 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) write$uinput_user_dev(r1, &(0x7f0000000100)={'syz0\x00', {}, 0x7, [0x0, 0x0, 0x8000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x5], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff], [0x0, 0x0, 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1], [0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff]}, 0x45c) ioctl$UI_DEV_SETUP(r1, 0x5501, 0x0) readv(r1, &(0x7f0000001900)=[{0x0}], 0x1) write$input_event(r1, &(0x7f0000000000)={{0x77359400}, 0x15}, 0xfe4f) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x0, &(0x7f0000000080)}) fcntl$setflags(0xffffffffffffffff, 0x2, 0x0) 13m19.26401209s ago: executing program 35 (id=570): socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)) prctl$PR_SCHED_CORE(0x3e, 0x800000001, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x100008b}, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) r1 = socket$inet6(0xa, 0x80002, 0x0) setsockopt$inet6_udp_int(r1, 0x11, 0x67, &(0x7f0000000040)=0x91, 0x4) connect$inet6(r1, &(0x7f0000000000)={0xa, 0x0, 0xfffffffd, @mcast1, 0x2}, 0x1c) sendmmsg$inet6(r1, &(0x7f0000003cc0)=[{{0x0, 0x0, &(0x7f0000003980), 0x171}}], 0x400000000000172, 0x4001c00) 10m29.681070089s ago: executing program 36 (id=1048): socket$nl_generic(0x10, 0x3, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = shmget$private(0x0, 0x2000, 0x800, &(0x7f0000ffd000/0x2000)=nil) shmat(r3, &(0x7f0000000000/0x4000)=nil, 0xffffffffffffcfff) shmat(r3, &(0x7f00003e8000/0x1000)=nil, 0x4000) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000180)={'syzkaller0\x00', 0x7101}) syz_open_dev$loop(&(0x7f0000000180), 0x1, 0x400) ioctl$TIOCL_GETMOUSEREPORTING(0xffffffffffffffff, 0x5412, &(0x7f0000000040)=0xd) unshare(0x62040200) 10m5.723112488s ago: executing program 37 (id=1087): ioctl$vim2m_VIDIOC_S_FMT(0xffffffffffffffff, 0xc0d05605, &(0x7f0000000140)={0x2, @sliced={0xf9ac, [0xca, 0x0, 0x4, 0xfffd, 0x1c, 0x81, 0x1000, 0x2, 0x6000, 0x5, 0x6, 0xc9b7, 0x8, 0x2, 0x400, 0x401, 0x5, 0x2, 0x7f, 0x8, 0x833e, 0x6, 0x1, 0x2, 0x6, 0x400, 0x2, 0x8, 0x1, 0x10, 0x7fff, 0x180, 0xfff, 0x101, 0x3, 0x13, 0x9, 0x8, 0x4, 0x4, 0xf2, 0x8, 0x5, 0x8, 0x2, 0x7, 0x0, 0xf97b], 0x2}}) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000280)={'wlan0\x00'}) sendmsg$NL80211_CMD_CONTROL_PORT_FRAME(0xffffffffffffffff, 0x0, 0x8041) r0 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) futex(&(0x7f000000cffc)=0x1, 0x6, 0x0, 0x0, 0x0, 0x0) ioctl$VHOST_VSOCK_SET_GUEST_CID(0xffffffffffffffff, 0x4008af60, 0x0) listen(0xffffffffffffffff, 0x93) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) socket$inet6_sctp(0xa, 0x1, 0x84) 10m5.687807892s ago: executing program 38 (id=1089): sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={0x0, 0x2c}}, 0x0) socket$kcm(0x2, 0x1000000000000002, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x0, 0x0, &(0x7f0000000180)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f0000000780)=ANY=[@ANYBLOB="0500000004000000080000000b000000000000002917c3d98e95d16444f91701bd6c29728842938ffc56b3a7cd26764f530edceaaa433fb7ca030db3d8eaa8e3be3b6308a011cf469f7b55307e1505cddbb19493ced5679aa15bafceda1e2db760e79149308d9c840ec3113ac0e52daa8a10e4e00d301fcd7f4ccc0553a76134ec9cfb0bc29d88d5e05490d418afdc6b3090650771b700", @ANYBLOB='\x00'/20, @ANYRES32], 0x48) r0 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000240)={&(0x7f0000000080)='sched_switch\x00', r0, 0x0, 0x6}, 0x18) r1 = syz_open_dev$vim2m(&(0x7f0000000000), 0x7, 0x2) ioctl$vim2m_VIDIOC_S_FMT(r1, 0xc0d05605, &(0x7f00000005c0)={0x0, @raw_data="e9e107ddcad69981f5099ca2fcb9a9d51ac4faeeeeda6f50fa2e5ac801183c55ca3847f27366f92514aceca06c831f971d2045bba41c95f5311b011a835a4ad32294ced3d954c10ffb56c840412658a39d4aa6c92434c02bc5153243e0a768204180a1f50ffb8cecefa3a5430dd923046537e018565ddf256844fd59c2141ab8bca010553f83826abe70aa239b822d76602ca5fb9df9405be2dff6fd23e39760940eb27a9acf9950f32702ee7385b78255c2157c752a04769ec2fab50bfe8e59211c301ed17b550c"}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) r3 = syz_open_dev$radio(&(0x7f0000001180), 0x0, 0x2) r4 = socket(0xa, 0x3, 0x3a) setsockopt$MRT6_DEL_MIF(r4, 0x29, 0xc8, 0x0, 0xc000000) setsockopt$MRT6_ADD_MFC(r4, 0x29, 0xcc, &(0x7f0000000280)={{0xa, 0x0, 0x4, @loopback}, {0xa, 0x0, 0x5, @mcast2}, 0x0, {[0x40000000]}}, 0x5c) syz_io_uring_setup(0x239, &(0x7f0000000540)={0x0, 0xffffffff, 0x400, 0x0, 0x2000}, &(0x7f0000000080)=0x0, &(0x7f0000000280)=0x0) syz_io_uring_submit(r5, r6, &(0x7f0000000040)=@IORING_OP_POLL_ADD={0x6, 0x28, 0x0, @fd_index=0x3}) ioctl$VIDIOC_SUBSCRIBE_EVENT(r3, 0x4020565a, &(0x7f0000000300)={0x3, 0x403, 0x1}) r7 = syz_open_dev$vbi(&(0x7f0000000000), 0x1, 0x2) writev(r7, &(0x7f0000000080), 0x0) ioctl$VIDIOC_S_FMT(r7, 0xc0d05605, &(0x7f0000000400)={0x7, @win={{0x26, 0x8, 0x9, 0xa1}, 0x1, 0x5, 0x0, 0xeedb, 0x0, 0x6}}) socketpair(0x1, 0x3, 0x0, &(0x7f0000000100)) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x2, &(0x7f0000000040), 0x4) syz_io_uring_setup(0x48be, &(0x7f0000000980)={0x0, 0xcfdd, 0x0, 0x0, 0x25b, 0x0, r3}, &(0x7f0000000500), 0x0) 2m49.717372117s ago: executing program 8 (id=2236): r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f00000006c0)='net/route\x00') seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x0, 0x0}) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bd2) prlimit64(0x0, 0xe, &(0x7f00000000c0)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000032680)=""/102400, 0x19000) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) preadv(r0, &(0x7f00000025c0)=[{&(0x7f0000002500)=""/79, 0x4f}], 0x1, 0x10006c, 0x0) 2m39.066489353s ago: executing program 8 (id=2258): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000200)={0x24, 0x3d, 0x9, 0x0, 0x0, {0x1}, [@typed={0x4, 0x200}, @nested={0xc, 0x1, 0x0, 0x1, [@typed={0x8, 0x3, 0x0, 0x0, @uid}]}]}, 0x24}}, 0x0) 2m38.862361008s ago: executing program 8 (id=2260): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) rmdir(0x0) add_key$user(0x0, 0x0, &(0x7f00000000c0), 0x0, 0xfffffffffffffffd) mkdir(&(0x7f0000000440)='./file1\x00', 0x0) mount$fuse(0x0, 0x0, 0x0, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=0x0]) mount(0x0, &(0x7f0000000380)='./file1\x00', &(0x7f0000000100)='autofs\x00', 0x0, &(0x7f0000000400)) chdir(&(0x7f0000000700)='./file1\x00') r3 = openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) r4 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000840), 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(r4, 0xc0189378, &(0x7f0000000c00)={{0x1, 0x1, 0x18, r3, {r3}}, './file0\x00'}) 2m37.700921863s ago: executing program 8 (id=2262): r0 = socket$inet_udp(0x2, 0x2, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000880)=ANY=[@ANYBLOB='(\x00'], 0x28}, 0x1, 0x0, 0x0, 0x40010}, 0x0) bind$inet(r0, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10) connect$inet(r0, &(0x7f0000000480)={0x2, 0x0, @multicast1}, 0x10) sendmmsg(r0, &(0x7f0000000180), 0x400000000000077, 0x0) 2m36.217195021s ago: executing program 8 (id=2268): r0 = socket$netlink(0x10, 0x3, 0x0) bind$netlink(r0, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) sendmsg$TIPC_NL_LINK_GET(0xffffffffffffffff, 0x0, 0x0) r1 = socket(0x2a, 0x2, 0x0) getsockname$packet(r1, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000001480)=0x14) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000380)=@newqdisc={0x2c, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_drr={0x8}]}, 0x2c}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000014c0)=@newtfilter={0x34, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {0xfffa, 0xb}, {}, {0x1c, 0xfff9}}, [@filter_kind_options=@f_basic={{0xa}, {0x4}}]}, 0x34}}, 0x24000000) r3 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r3, &(0x7f00000002c0), 0x40000000000009f, 0x0) 2m35.905884062s ago: executing program 8 (id=2270): r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f00000006c0)='net/route\x00') seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x0, 0x0}) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bd2) prlimit64(0x0, 0xe, &(0x7f00000000c0)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000032680)=""/102400, 0x19000) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) preadv(r0, &(0x7f00000025c0)=[{&(0x7f0000002500)=""/79, 0x4f}], 0x1, 0x10006c, 0x0) 2m20.99373269s ago: executing program 0 (id=2314): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000200)={0x20, 0x3d, 0x9, 0x0, 0x0, {0x1}, [@typed={0x4, 0x200}, @typed={0x8, 0x2, 0x0, 0x0, @pid=0xffffffffffffffff}]}, 0x20}}, 0x0) 2m20.495481509s ago: executing program 39 (id=2270): r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f00000006c0)='net/route\x00') seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x0, 0x0}) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bd2) prlimit64(0x0, 0xe, &(0x7f00000000c0)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000032680)=""/102400, 0x19000) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) preadv(r0, &(0x7f00000025c0)=[{&(0x7f0000002500)=""/79, 0x4f}], 0x1, 0x10006c, 0x0) 2m20.327342601s ago: executing program 0 (id=2317): socket$inet6_udp(0xa, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r1 = dup(r0) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) r2 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) r3 = dup(r2) recvfrom$inet6(r1, &(0x7f0000000400)=""/4096, 0x1000, 0x40, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r3, 0x84, 0x9, 0x0, 0x0) r4 = gettid() r5 = epoll_create(0x400) r6 = eventfd(0x0) kcmp$KCMP_EPOLL_TFD(r4, r4, 0x7, r6, &(0x7f0000000080)={r5, r6}) r7 = syz_io_uring_setup(0x239, &(0x7f0000000380)={0x0, 0x1ffffe, 0x10100, 0x0, 0x0, 0x0, r1}, &(0x7f0000000180)=0x0, &(0x7f0000000100)=0x0) syz_io_uring_submit(r8, r9, &(0x7f0000000040)=@IORING_OP_POLL_ADD={0x6, 0x2, 0x0, @fd_index=0x4, 0x0, 0x0, 0x0, {}, 0x1}) io_uring_enter(r7, 0x2ded, 0x4000, 0x0, 0x0, 0x0) r10 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) sendmsg$IPSET_CMD_DESTROY(0xffffffffffffffff, 0x0, 0x20000044) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) socket$kcm(0x2, 0xa, 0x2) writev(0xffffffffffffffff, 0x0, 0x0) recvmmsg(r10, &(0x7f00000055c0), 0x400023c, 0x302, 0x0) 2m18.698950613s ago: executing program 0 (id=2321): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs={0x0, 0x0, 0x4e22}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r3}, 0x10) mkdir(&(0x7f0000000040)='./file0\x00', 0x0) mkdir(&(0x7f0000000400)='./file1\x00', 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) r4 = openat$dir(0xffffffffffffff9c, &(0x7f0000004280)='./file0\x00', 0x0, 0x0) symlinkat(&(0x7f0000000140)='./file0/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa/file0\x00', r4, &(0x7f0000000000)='./file0\x00') chdir(&(0x7f0000000140)='./bus\x00') link(&(0x7f0000000280)='./file0\x00', &(0x7f00000002c0)='./bus\x00') open(&(0x7f00000003c0)='./bus\x00', 0x2282, 0x80) 2m16.997645434s ago: executing program 0 (id=2324): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000400)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$devlink(&(0x7f0000000600), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RATE_GET(r3, &(0x7f0000000700)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)={0x14, r4, 0x303, 0x0, 0x25dfdbfd, {0x3d}}, 0x14}, 0x1, 0x0, 0x0, 0x880}, 0x0) 2m15.244635731s ago: executing program 0 (id=2325): socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) socket$nl_netfilter(0x10, 0x3, 0xc) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f0000001c40)=ANY=[@ANYBLOB], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000540)='rcu_utilization\x00', r1}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x0, 0x0) r2 = getpid() openat$binfmt_register(0xffffffffffffff9c, 0x0, 0x1, 0x0) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f0000000380)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_io_uring_setup(0x5169, &(0x7f0000000200)={0x0, 0x0, 0x10100}, 0x0, &(0x7f0000000000)) accept4$vsock_stream(0xffffffffffffffff, 0x0, 0x0, 0x0) sendmmsg$inet(r0, 0x0, 0x0, 0x0) r5 = syz_open_dev$tty1(0xc, 0x4, 0x1) r6 = dup(r5) write$UHID_INPUT(r6, &(0x7f00000009c0)={0xf, {"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", 0x1009}}, 0x1006) 2m14.301776451s ago: executing program 9 (id=2328): mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x1000003, 0x12, 0xffffffffffffffff, 0x29354000) r0 = syz_open_dev$dri(&(0x7f0000000180), 0x3ffffffffffffffd, 0x0) ioctl$KDFONTOP_SET_DEF(0xffffffffffffffff, 0x4b72, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, 0x0) r1 = syz_open_dev$dri(&(0x7f0000000040), 0x10000, 0x2001) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r1, 0xc04064a0, &(0x7f00000004c0)={0x0, &(0x7f00000000c0)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_GETCRTC(r1, 0xc06864a1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) ioctl$DRM_IOCTL_MODE_GETFB2(r1, 0xc06864ce, 0x0) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r0, 0xc00c642d, &(0x7f0000000200)) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r1, 0xc00c642e, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) r5 = socket(0x10, 0x3, 0x0) sendmsg$nl_generic(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=ANY=[@ANYBLOB="1400000016001d0a"], 0x14}}, 0x0) syz_genetlink_get_family_id$wireguard(&(0x7f0000000100), r5) remap_file_pages(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x0, 0x0, 0x0) 2m12.711514048s ago: executing program 4 (id=2329): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = openat$sndtimer(0xffffffffffffff9c, 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, 0x0) r1 = openat$sndseq(0xffffffffffffff9c, 0x0, 0x0) r2 = semget(0x3, 0x1, 0x214) semctl$SEM_STAT(r2, 0x0, 0x12, &(0x7f0000000000)=""/101) ioctl$SNDRV_TIMER_IOCTL_CONTINUE(r0, 0x54a2) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r1, 0xc08c5332, 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TIMER(r1, 0x40605346, &(0x7f0000000280)={0x0, 0x0, {0x3}}) getpid() r3 = epoll_create1(0x80000) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r6 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, r5, &(0x7f0000000100)={0x20000014}) epoll_ctl$EPOLL_CTL_ADD(r6, 0x1, r3, &(0x7f0000000000)={0xa0000001}) epoll_wait(r6, &(0x7f0000000380)=[{}], 0x2, 0x1000) 2m12.074831281s ago: executing program 9 (id=2330): r0 = syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) sendmsg$802154_raw(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)="711f0480c8b3cf4474834100000000", 0xf}}, 0x0) recvmmsg(r0, 0x0, 0x0, 0x142, 0x0) 2m11.511389937s ago: executing program 4 (id=2331): prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f00000000c0)) mlock2(&(0x7f0000ff8000/0x2000)=nil, 0x2000, 0x0) r0 = gettid() capget(&(0x7f0000000140)={0x19980330, r0}, 0x0) 2m11.432037237s ago: executing program 9 (id=2333): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000600)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(camellia)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5910fae9d6dcd3292ea54c7b6ef915d564c90c200", 0x18) r1 = accept4(r0, 0x0, 0x0, 0x0) syz_genetlink_get_family_id$tipc2(&(0x7f0000000440), r1) sendmsg$nl_route_sched_retired(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000001480)=@newchain={0xfdc, 0x64, 0x800, 0x70bd26, 0x25dfdbfd, {0x0, 0x0, 0x0, 0x0, {0x8, 0x4}, {0x1, 0xffe0}, {0x6, 0x9}}, [@f_rsvp={{0x9}, {0x2f8, 0x2, [@TCA_RSVP_PINFO={0x20, 0x4, {{0x80000000, 0x4dbd, 0xeeb}, {0x2, 0x8, 0xfffffffa}, 0xc1, 0x6a, 0x5}}, @TCA_RSVP_PINFO={0x20, 0x4, {{0xffffffff, 0xb, 0xa7}, {0x5, 0x5, 0x800}, 0x8, 0x7, 0x7}}, @TCA_RSVP_ACT={0x29c, 0x6, [@m_mpls={0x50, 0x2, 0x0, 0x0, {{0x9}, {0xc, 0x2, 0x0, 0x1, [@TCA_MPLS_TTL={0x5, 0x7, 0x3}]}, {0x19, 0x6, "8afa00b66cd46a3dd56b15e78c42c5591665aeb38c"}, {0xc}, {0xc, 0x8, {0x3, 0x2}}}}, @m_sample={0x120, 0xc, 0x0, 0x0, {{0xb}, {0x14, 0x2, 0x0, 0x1, [@TCA_SAMPLE_RATE={0x8, 0x3, 0x2}, @TCA_SAMPLE_TRUNC_SIZE={0x8, 0x4, 0xb}]}, {0xe1, 0x6, "e72064788474e9d9e37d10634c48137100cd94378d719d8bd7941dad82ddc6801abbaa8f647285f9824234165b9164bf9e07b059e8876d3b86f3d3eff123dba20c31009bf5356d4bfb902c879aadb96893919766360a75e3b6404b4ee350e5069892d8d53a532f0ab2991dacf5372f2793899ac294b8bdf081b1045fcb0642c3ec1f5fa35016be0346c5dfaf13cdf2231fcde134b75b4986efe4e1174e6c8dd6388bb51e53bded3dc1f39636729462668780eeb1beaecaa7e546ef2e208007bfead597ba9860ccd6ffd17cdda2608e6f2d712466d6de10742c6500e684"}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x2, 0x3}}}}, @m_vlan={0x128, 0xc, 0x0, 0x0, {{0x9}, {0x58, 0x2, 0x0, 0x1, [@TCA_VLAN_PARMS={0x1c, 0x2, {{0x1, 0x9, 0x6, 0x10000, 0x1ff}, 0x2}}, @TCA_VLAN_PUSH_VLAN_PROTOCOL={0x6, 0x4, 0x8100}, @TCA_VLAN_PUSH_VLAN_PROTOCOL={0x6, 0x4, 0x8100}, @TCA_VLAN_PUSH_VLAN_PRIORITY={0x5, 0x6, 0x4}, @TCA_VLAN_PUSH_VLAN_PRIORITY={0x5, 0x6, 0x5}, @TCA_VLAN_PUSH_VLAN_PROTOCOL={0x6, 0x4, 0x88a8}, @TCA_VLAN_PUSH_VLAN_ID={0x6, 0x3, 0xc8f}, @TCA_VLAN_PUSH_VLAN_PRIORITY={0x5, 0x6, 0x5}]}, {0xa5, 0x6, "97100804a6e83741ac91d00f97036bd5a059445798ae5f1d29ed13399a2b8ba89948bbbac461d5c532b687722214ca48aeadc12d3abc2c3309c14abe618318a684e865ac924bdf1ffa74cb1495a8e7fe212fdbcc5cfd00bccbc713c830853e544043950ef0d308e3fc4b92300a548ea899e6b08cdf47a8bbf4f700a6e28bae34b99ba69765535a9bbd1931a83e9e28328635d5a32b511580f1fdf62e8756ba567b"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x2, 0x3}}}}]}, @TCA_RSVP_CLASSID={0x8, 0x1, {0x1, 0xffff}}, @TCA_RSVP_SRC={0x8, 0x3, @rand_addr=0x64010101}, @TCA_RSVP_CLASSID={0x8, 0x1, {0x9, 0xe}}]}}, @f_rsvp={{0x9}, {0x944, 0x2, [@TCA_RSVP_DST={0x8, 0x2, @broadcast}, @TCA_RSVP_PINFO={0x20, 0x4, {{0xa, 0x7fffffff, 0x10000}, {0x9, 0x80000000, 0x19}, 0x3c58127146fc1915, 0x7e, 0x6}}, @TCA_RSVP_PINFO={0x20, 0x4, {{0x7, 0x0, 0x100}, {0xd7, 0x57, 0xff}, 0x2, 0x6, 0x7}}, @TCA_RSVP_CLASSID={0x8, 0x1, {0x0, 0xfff8}}, @TCA_RSVP_ACT={0x388, 0x6, [@m_tunnel_key={0xe0, 0x0, 0x0, 0x0, {{0xf}, {0x7c, 0x2, 0x0, 0x1, [@TCA_TUNNEL_KEY_ENC_KEY_ID={0x8, 0x7, 0x8}, @TCA_TUNNEL_KEY_ENC_IPV4_DST={0x8, 0x4, @rand_addr=0x64010101}, @TCA_TUNNEL_KEY_ENC_IPV4_DST={0x8, 0x4, @multicast2}, @TCA_TUNNEL_KEY_ENC_IPV6_DST={0x14, 0x6, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}, @TCA_TUNNEL_KEY_ENC_IPV6_DST={0x14, 0x6, @empty}, @TCA_TUNNEL_KEY_NO_CSUM={0x5}, @TCA_TUNNEL_KEY_ENC_KEY_ID={0x8, 0x7, 0x2}, @TCA_TUNNEL_KEY_ENC_IPV6_SRC={0x14, 0x5, @private2}, @TCA_TUNNEL_KEY_ENC_IPV6_SRC={0x14, 0x5, @empty}]}, {0x35, 0x6, "bb2cdd218e1932c60e25532848837b415d56e6744bf0b3f8aba66b0d2cad032b8cf911d07e8929550f9c5047de25564b34"}, {0xc}, {0xc, 0x8, {0x1, 0x1}}}}, @m_gact={0xec, 0x18, 0x0, 0x0, {{0x9}, {0x10, 0x2, 0x0, 0x1, [@TCA_GACT_PROB={0xc, 0x3, {0x1, 0x1cc5, 0x10000000}}]}, {0xb1, 0x6, "2f7e17336698956b6031823656f446206c288c15e63393ac0209c3aca831623d31c5979ed04ea05a6ad1ff34ad989f74edaa909e59500289321dae9b3dd180566cdf21e67e8004f70abffced08e6927c5360bfb787984ba5718d9060fde444b7589483febec75ceecb9874d03d4b9ac235a2e5105f5e4d101c7bb89d42552b5001e6f30636aa246f8a902586bd24150fa3103f039ef05cb2c0d2b249628b30fe700ce0cc2d1bcc9f84cb23539f"}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x2, 0x2}}}}, @m_ct={0x60, 0x6, 0x0, 0x0, {{0x7}, {0x20, 0x2, 0x0, 0x1, [@TCA_CT_NAT_IPV4_MIN={0x8, 0x9, @multicast2}, @TCA_CT_LABELS={0x14, 0x7, "f41fc0b35e938477d0bf68d3f3424a77"}]}, {0x19, 0x6, "c5ae7b164aca2eb1b650efe7025f54bc4b1f425664"}, {0xc}, {0xc, 0x8, {0x1, 0x1}}}}, @m_mpls={0x158, 0x15, 0x0, 0x0, {{0x9}, {0x54, 0x2, 0x0, 0x1, [@TCA_MPLS_TC={0x5, 0x6, 0x6}, @TCA_MPLS_PARMS={0x1c, 0x2, {{0x4, 0x6, 0x2, 0x1, 0x8}, 0x1}}, @TCA_MPLS_BOS={0x5}, @TCA_MPLS_LABEL={0x8, 0x5, 0xfceb}, @TCA_MPLS_PARMS={0x1c, 0x2, {{0xf, 0xfffffffe, 0x6, 0x5, 0xdb}, 0x1}}]}, {0xd9, 0x6, "324bf91de07124b9e54937a32ee33bcdaa62106a7caf5835fd0e696c43e2316f8772f9f823bba68a9c89f0ae20748880652a70e1805890363fa80d3dcf379a8acde00c97af04c9d138527c6c9f877e07d6ddafebce4ada28b72f21399dbf3555d32162f5d74e473ab593b947ebc3ec2fa87cc1e9e03f3eb9ceb45b75f908e8a69ff062c983cab8f637a576b62b6458ae5b999b20b4877654cc2a0af9ff333fa596c5a7e37a68fa7aa7e24ad28a58acdf1d3339fc34716c1a7ec899f913568001637d8638e773f205b76fcbe372a9e7ada20d485e8a"}, {0xc}, {0xc, 0x8, {0x3, 0x1}}}}]}, @TCA_RSVP_SRC={0x8, 0x3, @remote}, @TCA_RSVP_POLICE={0x418, 0x5, [@TCA_POLICE_RATE={0x404, 0x2, [0x4, 0x9, 0x0, 0xb3, 0x3, 0x8653, 0x2232, 0xe, 0x7, 0x4, 0x0, 0x7fff, 0x8, 0x9d, 0x632, 0x6, 0x5, 0x6, 0x5, 0x49cc, 0x2, 0x0, 0xde6a, 0xfffffffa, 0x4, 0x9, 0x8a, 0xd, 0x1ff, 0x30, 0x5, 0xfffffffd, 0x6, 0x7ff, 0x8, 0x3, 0x81, 0x4, 0x9, 0x9, 0x4, 0xffffffff, 0x6, 0x4, 0x2, 0x36e, 0x10000, 0x4, 0xd4, 0x1, 0x0, 0x5, 0xddc, 0x2, 0x0, 0x9, 0x80000000, 0x69, 0x80, 0x9, 0x8, 0x3, 0x400, 0x6, 0x0, 0x4, 0x9, 0x572, 0x8, 0x9, 0x4, 0x8a, 0xfffffffe, 0x1, 0x401, 0x6, 0x4c2645fd, 0x6, 0x3, 0x8611329, 0x3, 0x0, 0x2, 0x7, 0x5, 0xfff, 0x4, 0x8, 0x1, 0x80000001, 0x3, 0x39bd, 0x81, 0x5, 0x0, 0x24, 0x3, 0x0, 0xfffffff9, 0x9, 0x1fb4, 0x80000000, 0x9, 0x1, 0xffffffff, 0x7d, 0x4, 0x1000, 0x80000001, 0x0, 0x2a7, 0xc03, 0xfffff000, 0x1e8, 0x5, 0x6, 0x400, 0x528, 0x2, 0x88, 0x3d75, 0x9, 0xb8, 0xd6bb, 0x8, 0x5, 0x6, 0x4, 0x28, 0x9, 0x7, 0x0, 0xfffffffc, 0x6, 0xfffffffa, 0x1000, 0x8, 0x2, 0xa71, 0xfffffff7, 0x401, 0x7, 0xfffffff1, 0x40, 0x1000, 0xfffff000, 0x0, 0x6, 0x6b, 0xc, 0x8c1, 0x7, 0x3, 0x1, 0x2, 0x6, 0x3, 0xfad10b0c, 0x7f, 0x5, 0x2, 0x2b, 0x1ff, 0x9e, 0x80, 0x7, 0x2, 0x1, 0xefe, 0x5cbf198d, 0x3, 0x0, 0x8, 0xf, 0x5, 0x3ff, 0x1ff, 0x9e11, 0x4, 0x4, 0x8, 0x401, 0xfffffff9, 0xf90, 0x1b1, 0xc6, 0x6885, 0x660, 0x8, 0x10001, 0x1000, 0x6, 0x1ff, 0x2, 0x4, 0x7, 0x81, 0x1, 0x4, 0xfff, 0xfff, 0xa0000, 0x5, 0x10000, 0x401, 0x8772, 0xe, 0x400, 0x9, 0x5, 0xba8, 0xd, 0x1, 0x81, 0x8, 0x1, 0x2, 0x5, 0x5, 0xa3d, 0x5, 0x6, 0x7, 0x9, 0x2, 0x5e, 0x10, 0x800, 0x9, 0xfffffff1, 0x3, 0x6, 0x7, 0x10, 0x0, 0x0, 0x4, 0x1ff, 0xf779, 0x5, 0x0, 0xff, 0x8, 0x7abf, 0x2, 0x9, 0x7, 0x99, 0x4, 0x5dc05eee, 0x1, 0xfff, 0x9, 0x3, 0x9]}, @TCA_POLICE_RESULT={0x8, 0x5, 0x6}, @TCA_POLICE_RESULT={0x8, 0x5, 0x9}]}, @TCA_RSVP_SRC={0x8, 0x3, @broadcast}, @TCA_RSVP_ACT={0x140, 0x6, [@m_pedit={0x13c, 0x11, 0x0, 0x0, {{0xa}, {0xc4, 0x2, 0x0, 0x1, [@TCA_PEDIT_KEYS_EX={0xc0, 0x5, 0x0, 0x1, [{0x3c, 0x6, 0x0, 0x1, [@TCA_PEDIT_KEY_EX_CMD={0x6, 0x2, 0x1}, @TCA_PEDIT_KEY_EX_HTYPE={0x6}, @TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x3}, @TCA_PEDIT_KEY_EX_CMD={0x6}, @TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x3}, @TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x7}, @TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x4}]}, {0x54, 0x6, 0x0, 0x1, [@TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x3}, @TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x2}, @TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x5}, @TCA_PEDIT_KEY_EX_CMD={0x6, 0x2, 0x1}, @TCA_PEDIT_KEY_EX_CMD={0x6, 0x2, 0x1}, @TCA_PEDIT_KEY_EX_CMD={0x6, 0x2, 0x1}, @TCA_PEDIT_KEY_EX_CMD={0x6}, @TCA_PEDIT_KEY_EX_CMD={0x6}, @TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x4}, @TCA_PEDIT_KEY_EX_CMD={0x6}]}, {0x2c, 0x6, 0x0, 0x1, [@TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x5}, @TCA_PEDIT_KEY_EX_CMD={0x6}, @TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x2}, @TCA_PEDIT_KEY_EX_CMD={0x6, 0x2, 0x1}, @TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x1}]}]}]}, {0x4d, 0x6, "71a6d04508ff170cc51a31a334dd9c13a6f8dbcb50218378b331323f8b3b5580c5cc2f578a025646bfc5237b6808b383141e2b249dce8f6590795a8d7b29b73fd51a5fa3242b88e2e3"}, {0xc, 0x7, {0x1, 0x1}}, {0xc}}}]}]}}, @f_rsvp6={{0xa}, {0x358, 0x2, [@TCA_RSVP_ACT={0x354, 0x6, [@m_gact={0x178, 0x5, 0x0, 0x0, {{0x9}, {0x7c, 0x2, 0x0, 0x1, [@TCA_GACT_PARMS={0x18, 0x2, {0xfffffff8, 0xfee, 0x0, 0x1, 0xd}}, @TCA_GACT_PARMS={0x18, 0x2, {0x1, 0xa, 0x3, 0xf1, 0x8}}, @TCA_GACT_PARMS={0x18, 0x2, {0x0, 0x81, 0x1, 0x6, 0x1}}, @TCA_GACT_PARMS={0x18, 0x2, {0x9, 0x4, 0x1, 0x9, 0xd}}, @TCA_GACT_PROB={0xc, 0x3, {0x2, 0x18ce}}, @TCA_GACT_PROB={0xc, 0x3, {0x1, 0x1ecc, 0x2}}]}, {0xd1, 0x6, "3323c9692a4e88ccfe0567bce3eeb3ff8d9f12e00b2d96a2d88090115a6899248e6ceeaba6f4cd59a9c2cb865482d6b2967cbd66c07437bf35fe57962166dfa27ccf7d1e70ace06e41d9334c2f08fe8b6a51f66080099d73d9fd8abcc93897053df061a753bd6c324a7479e78260c8bf5aa16c64946518d259de0685325f157a9ed0239679a903d15e675d914803e8cd73df3d20c7269c58bbbfd7aaf15305e795d5ac257f0a0c205cca225f58b233d0cd140a8636434c32023d7d991599f8ff557027e590273449b4433b767e"}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x2, 0x1}}}}, @m_sample={0xd8, 0x5, 0x0, 0x0, {{0xb}, {0x14, 0x2, 0x0, 0x1, [@TCA_SAMPLE_PSAMPLE_GROUP={0x8}, @TCA_SAMPLE_RATE={0x8}]}, {0x9c, 0x6, "2de4d412af6cc489a40706c9e66f8ed8cdb5c76f5dd5def0a04783ef5c0ae5de8f7a0657ae2e2cfad420035bba8453d8490d2955cfa8bb2fbda9dc31b500cf69a231888c130ff85c29b958695bd6d18b5d6f114877e8f1421ae81c961cd43b3232fc03310d14433054539612d04171ceec7cd0bcb462d03d27f85926bf073e6d4634651b26d6432a6f6556461708b6e5d868b46d63f69e3d"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x2, 0x1}}}}, @m_csum={0x100, 0x8, 0x0, 0x0, {{0x9}, {0x20, 0x2, 0x0, 0x1, [@TCA_CSUM_PARMS={0x1c, 0x1, {{0x9b, 0x4, 0x5, 0x8, 0x4}, 0x29}}]}, {0xb6, 0x6, "da0b5f1d9d892eaa435052deb1ca0c4383a749cfd08ae85f4ca3a7ea3342e2f4ad3386c81764ff5e29307b4e29f566ca4d9b87bfd84edd0a5493713189932597edb7c0ffd27207beb0b0b3a820c800c5b2ed3b8e1d58d9305c7a186bd1f02e54bddc811ad00caa03843b0159524f37cd2cb5f9de9589255b144f29278e96999e245a36cd5821d88dc8fd8eee3362323d61f59d95b4f2d6446bdef8d7f4ba170ad420e7f9e09f9c126f488ca44b0f32a5c4f6"}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x3, 0x3}}}}]}]}}]}, 0xfdc}, 0x1, 0x0, 0x0, 0x20000800}, 0x24008040) 2m11.385725803s ago: executing program 0 (id=2334): ioctl$vim2m_VIDIOC_ENUM_FRAMESIZES(0xffffffffffffffff, 0xc02c564a, 0x0) syz_usb_ep_write$ath9k_ep1(0xffffffffffffffff, 0x82, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x100008b}, 0x0) sched_setaffinity(0x0, 0x11, &(0x7f0000000180)=0x1400200bce) sched_setscheduler(0x0, 0x1, &(0x7f0000002200)=0x1) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000002700)=""/102392, 0x18ff8) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x9) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000180)) r1 = open(&(0x7f0000000140)='./file0\x00', 0x0, 0x185) mknodat$loop(r1, &(0x7f0000000200)='./file1\x00', 0xc000, 0x0) write$FUSE_INIT(0xffffffffffffffff, 0x0, 0x0) setxattr$security_ima(&(0x7f0000000180)='./bus\x00', &(0x7f0000000000), &(0x7f0000000380)=@ng={0x4, 0x14}, 0x2, 0x0) open(&(0x7f0000000080)='./bus\x00', 0x400141042, 0x0) syz_clone(0x1000, 0x0, 0x0, 0x0, 0x0, 0x0) 2m11.06931767s ago: executing program 4 (id=2336): ioctl$vim2m_VIDIOC_ENUM_FRAMESIZES(0xffffffffffffffff, 0xc02c564a, 0x0) syz_usb_ep_write$ath9k_ep1(0xffffffffffffffff, 0x82, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x100008b}, 0x0) sched_setaffinity(0x0, 0x11, &(0x7f0000000180)=0x1400200bce) sched_setscheduler(0x0, 0x1, &(0x7f0000002200)=0x1) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000002700)=""/102392, 0x18ff8) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x9) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000180)) r1 = open(&(0x7f0000000140)='./file0\x00', 0x0, 0x185) mknodat$loop(r1, &(0x7f0000000200)='./file1\x00', 0xc000, 0x0) write$FUSE_INIT(0xffffffffffffffff, 0x0, 0x0) open(&(0x7f0000000080)='./bus\x00', 0x400141042, 0x0) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) syz_clone(0x1000, 0x0, 0x0, 0x0, 0x0, 0x0) 2m8.680563965s ago: executing program 9 (id=2339): r0 = socket$packet(0x11, 0x2, 0x300) syz_mount_image$bfs(&(0x7f0000000000), &(0x7f0000000200)='./file4\x00', 0xc008, &(0x7f0000000100)=ANY=[@ANYRES64=0x0], 0xf, 0xab, &(0x7f0000010140)="$eJzs1zGKwkAYBeB/s7CbdptFsLBO4x08ilhqI1aK4A3Ei3gVj5DewiKtiCOYiIidRQT5vmLgzWPgtbM7brubIiKtIlLRme7T3Wy+GA8n9Rl8pCwifiMij4jeX50Pg7r7avqyWo7K6vv58c+69b0AAMDrsug/5nNqLk7NL/Aa/m993vI+AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAgHe7BAAA//+dfyiL") setsockopt$packet_int(r0, 0x107, 0x13, 0x0, 0x0) socket$packet(0x11, 0xa, 0x300) socket$packet(0x11, 0xa, 0x300) syz_open_procfs(0x0, &(0x7f0000000180)='net/kcm\x00') r1 = socket(0x15, 0x5, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x3) sched_setaffinity(0x0, 0x66, &(0x7f00000002c0)=0x400000bce) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) prlimit64(0x0, 0x0, 0x0, &(0x7f0000000280)) socket$nl_route(0x10, 0x3, 0x0) getsockopt(r1, 0x200000000114, 0x271b, &(0x7f0000000580)=""/102393, &(0x7f0000000040)=0x18ff9) syz_emit_ethernet(0x2a, &(0x7f0000000400)=ANY=[@ANYBLOB], 0x0) syz_mount_image$btrfs(&(0x7f0000000300), &(0x7f0000000380)='./bus\x00', 0x8, &(0x7f0000000240)={[{@check_int}, {@autodefrag}, {@ref_verify}, {@compress_algo={'compress', 0x3d, 'no'}}, {@clear_cache}, {@noacl}, {@max_inline={'max_inline', 0x3d, [0x30, 0x37, 0x34, 0x74]}}, {@barrier}, {@nospace_cache}]}, 0x1, 0x55ae, &(0x7f000000ac40)="$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") openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x2040, 0x0) ioctl$ifreq_SIOCGIFINDEX_wireguard(0xffffffffffffffff, 0x8933, &(0x7f0000000200)={'wg2\x00'}) 2m7.341884521s ago: executing program 4 (id=2341): ioperm(0x4, 0x3, 0x2) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x5, &(0x7f00000027c0)=ANY=[@ANYBLOB="180000000000000000000000ff000000850000000f000000850000005000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000400)='sys_exit\x00', r0}, 0x10) 2m7.025264312s ago: executing program 4 (id=2342): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f00000000c0), 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, 0x0) r1 = openat$sndseq(0xffffffffffffff9c, 0x0, 0x0) r2 = semget(0x3, 0x1, 0x214) semctl$SEM_STAT(r2, 0x0, 0x12, 0x0) ioctl$SNDRV_TIMER_IOCTL_CONTINUE(r0, 0x54a2) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r1, 0xc08c5332, 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TIMER(r1, 0x40605346, &(0x7f0000000280)={0x0, 0x0, {0x3}}) getpid() r3 = epoll_create1(0x80000) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r6 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, r5, &(0x7f0000000100)={0x20000014}) epoll_ctl$EPOLL_CTL_ADD(r6, 0x1, r3, &(0x7f0000000000)={0xa0000001}) epoll_wait(r6, &(0x7f0000000380)=[{}], 0x2, 0x1000) 2m6.028333014s ago: executing program 4 (id=2343): sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x200440c4) read$char_usb(0xffffffffffffffff, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) socketpair$unix(0x1, 0x1, 0x0, 0x0) r1 = mq_open(0x0, 0x40, 0x0, 0x0) fcntl$setlease(r1, 0x400, 0x1) mq_unlink(0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) r3 = socket(0x848000000015, 0x805, 0x0) sendto$inet6(r3, 0x0, 0x0, 0x0, &(0x7f0000000000)={0xa, 0x0, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x800}, 0x15) recvmmsg(r2, &(0x7f0000000400)=[{{0x0, 0xf5ffffff, 0x0, 0x0, 0x0, 0x4000000}}], 0xf00, 0x0, 0x0) shutdown(r2, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) 2m5.668722844s ago: executing program 9 (id=2344): r0 = syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) sendmsg$802154_raw(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)="711f0480c8b3cf4474834100000000", 0xf}}, 0x0) recvmmsg(r0, 0x0, 0x0, 0x142, 0x0) 2m5.072943663s ago: executing program 9 (id=2347): socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000200)) r0 = openat$cuse(0xffffffffffffff9c, 0x0, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x3) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) read$FUSE(r0, 0x0, 0x0) write$FUSE_BMAP(r0, &(0x7f0000000440)={0x18, 0xfffffffffffffffe, 0x0, {0x4223}}, 0x18) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x140, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) openat$vnet(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) syz_open_dev$tty1(0xc, 0x4, 0x1) r2 = add_key$fscrypt_provisioning(0x0, 0x0, 0x0, 0x0, 0x0) add_key$user(&(0x7f0000002740), &(0x7f0000002780)={'syz', 0x1}, &(0x7f00000027c0), 0x0, 0xffffffffffffffff) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, r2, &(0x7f0000000180)='cifs.idmap\x00', 0x0) r3 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f00000001c0), 0x8042, 0x0) write$vga_arbiter(r3, &(0x7f00000002c0)=ANY=[@ANYBLOB='lock io'], 0x8) openat$dsp1(0xffffff9c, &(0x7f00000004c0), 0x4c400, 0x0) syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') write$vga_arbiter(r3, &(0x7f0000000200)=ANY=[@ANYBLOB='unlock m'], 0xb) socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_route(0x10, 0x3, 0x0) 1m55.000628151s ago: executing program 40 (id=2334): ioctl$vim2m_VIDIOC_ENUM_FRAMESIZES(0xffffffffffffffff, 0xc02c564a, 0x0) syz_usb_ep_write$ath9k_ep1(0xffffffffffffffff, 0x82, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x100008b}, 0x0) sched_setaffinity(0x0, 0x11, &(0x7f0000000180)=0x1400200bce) sched_setscheduler(0x0, 0x1, &(0x7f0000002200)=0x1) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000002700)=""/102392, 0x18ff8) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x9) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000180)) r1 = open(&(0x7f0000000140)='./file0\x00', 0x0, 0x185) mknodat$loop(r1, &(0x7f0000000200)='./file1\x00', 0xc000, 0x0) write$FUSE_INIT(0xffffffffffffffff, 0x0, 0x0) setxattr$security_ima(&(0x7f0000000180)='./bus\x00', &(0x7f0000000000), &(0x7f0000000380)=@ng={0x4, 0x14}, 0x2, 0x0) open(&(0x7f0000000080)='./bus\x00', 0x400141042, 0x0) syz_clone(0x1000, 0x0, 0x0, 0x0, 0x0, 0x0) 1m49.87570341s ago: executing program 41 (id=2343): sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x200440c4) read$char_usb(0xffffffffffffffff, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) socketpair$unix(0x1, 0x1, 0x0, 0x0) r1 = mq_open(0x0, 0x40, 0x0, 0x0) fcntl$setlease(r1, 0x400, 0x1) mq_unlink(0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) r3 = socket(0x848000000015, 0x805, 0x0) sendto$inet6(r3, 0x0, 0x0, 0x0, &(0x7f0000000000)={0xa, 0x0, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x800}, 0x15) recvmmsg(r2, &(0x7f0000000400)=[{{0x0, 0xf5ffffff, 0x0, 0x0, 0x0, 0x4000000}}], 0xf00, 0x0, 0x0) shutdown(r2, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) 1m48.892811231s ago: executing program 42 (id=2347): socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000200)) r0 = openat$cuse(0xffffffffffffff9c, 0x0, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x3) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) read$FUSE(r0, 0x0, 0x0) write$FUSE_BMAP(r0, &(0x7f0000000440)={0x18, 0xfffffffffffffffe, 0x0, {0x4223}}, 0x18) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x140, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) openat$vnet(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) syz_open_dev$tty1(0xc, 0x4, 0x1) r2 = add_key$fscrypt_provisioning(0x0, 0x0, 0x0, 0x0, 0x0) add_key$user(&(0x7f0000002740), &(0x7f0000002780)={'syz', 0x1}, &(0x7f00000027c0), 0x0, 0xffffffffffffffff) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, r2, &(0x7f0000000180)='cifs.idmap\x00', 0x0) r3 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f00000001c0), 0x8042, 0x0) write$vga_arbiter(r3, &(0x7f00000002c0)=ANY=[@ANYBLOB='lock io'], 0x8) openat$dsp1(0xffffff9c, &(0x7f00000004c0), 0x4c400, 0x0) syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') write$vga_arbiter(r3, &(0x7f0000000200)=ANY=[@ANYBLOB='unlock m'], 0xb) socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_route(0x10, 0x3, 0x0) 24.419984176s ago: executing program 1 (id=2528): bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x11, 0x10, &(0x7f0000000580)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r0 = syz_open_dev$evdev(&(0x7f0000000040), 0x0, 0x0) syz_usb_disconnect(r0) syz_usb_connect(0x3, 0x1b, &(0x7f0000010140)={{0x12, 0x1, 0x0, 0x51, 0xce, 0x4e, 0x8, 0x403, 0xb8d8, 0x768e, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x9}}]}}, 0x0) ioctl$EVIOCRMFF(r0, 0x41015500, &(0x7f0000000400)=0x1d00) 22.312973984s ago: executing program 1 (id=2541): socket$netlink(0x10, 0x3, 0x400000000000004) setsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000000)={@multicast1, @local}, 0xc) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) bpf$MAP_DELETE_ELEM(0x3, 0x0, 0x0) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r3}, 0x10) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x0) mkdirat(0xffffffffffffff9c, 0x0, 0x0) r4 = landlock_create_ruleset(0x0, 0x0, 0x0) landlock_restrict_self(r4, 0x0) renameat2(0xffffffffffffff9c, &(0x7f0000002200)='./file0\x00', 0xffffffffffffff9c, &(0x7f00000021c0)='./file1/file3\x00', 0x2) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_DELETE(r5, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000003c0)={0x2c, 0x2, 0x1, 0x201, 0x0, 0x0, {0x3, 0x0, 0x7}, [@CTA_MARK={0x8, 0x8, 0x1, 0x0, 0x4}, @CTA_ZONE={0x6, 0x12, 0x1, 0x0, 0x1}, @CTA_STATUS={0x8, 0x3, 0x1, 0x0, 0x1000}]}, 0x2c}, 0x1, 0x0, 0x0, 0x24006018}, 0x40044) 20.397200355s ago: executing program 1 (id=2544): r0 = socket(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg(r1, &(0x7f0000003ac0)={0x0, 0x0, &(0x7f00000026c0)=[{&(0x7f0000000000)="4cb278", 0x3}], 0x1, &(0x7f0000002780)=[{0x10, 0x114, 0x3}, {0x10, 0x1, 0x2}], 0x20}, 0x20044840) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) getsockopt$inet_IP_IPSEC_POLICY(r0, 0x0, 0x10, &(0x7f0000000500)={{{@in6=@ipv4={""/10, ""/2, @initdev}, @in=@dev}}, {{@in6=@mcast2}, 0x0, @in6=@private1}}, &(0x7f0000000340)=0xf7) r3 = getpid() ioprio_set$pid(0x2, r3, 0x6007) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000080)=@newqdisc={0x60, 0x24, 0xd0f, 0x70bd2d, 0x0, {0x60, 0x0, 0x0, r4, {0x0, 0xa}, {0xffff, 0xffff}, {0x0, 0xffff}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x34, 0x2, [@TCA_TBF_PARMS={0x28, 0x1, {{0xea, 0x0, 0x0, 0x0, 0x9, 0x7fffffff}, {0x12, 0x2, 0x0, 0x401, 0x8001, 0x1400}, 0xa5, 0x5, 0x10000000}}, @TCA_TBF_BURST={0x8, 0x6, 0x8057}]}}]}, 0x60}}, 0x44080) sendmsg$nl_route_sched(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000002c0)=@newqdisc={0x34, 0x24, 0xd0f, 0x70bd29, 0x0, {0x60, 0x0, 0x0, r4, {}, {0xffe0, 0xa}, {0x1, 0x10}}, [@qdisc_kind_options=@q_codel={{0xa}, {0x4}}]}, 0x34}, 0x1, 0x0, 0x0, 0x55}, 0x4000) r5 = socket$inet6_sctp(0xa, 0x1, 0x84) sendto$inet6(r5, &(0x7f0000000180)="1a", 0x1, 0x40, &(0x7f0000000200)={0xa, 0x4e23, 0x2, @loopback}, 0x1c) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f00000003c0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020148100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000007000000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x62, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r7 = socket$netlink(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r7, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000001200)={&(0x7f0000001040)={0x38, 0x1403, 0x1, 0x0, 0x0, "", [{{0x9, 0x2, 'syz0\x00'}, {0x8, 0x41, 'rxe\x00'}, {0x14, 0x33, 'lo\x00'}}]}, 0x38}}, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18020000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000020850000007000000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) creat(&(0x7f0000000100)='./file0\x00', 0xd931d3864d39dcca) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f00000002c0)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) r8 = socket$packet(0x11, 0x2, 0x300) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r8, 0x8933, &(0x7f0000000180)={'batadv_slave_1\x00', 0x0}) setsockopt$packet_add_memb(r8, 0x107, 0x2, &(0x7f00000005c0)={r9, 0x1, 0x6, @local}, 0x10) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB], 0x80}}, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00'}, 0x10) llistxattr(&(0x7f0000000280)='./file0\x00', 0x0, 0x0) lsm_list_modules(0x0, 0x0, 0x0) syz_genetlink_get_family_id$ethtool(&(0x7f0000000000), r7) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000440)={&(0x7f00000004c0)='kfree\x00', r6}, 0x18) 14.410010592s ago: executing program 6 (id=2565): syz_usb_connect$uac1(0x6, 0x0, 0x0, 0x0) sendmsg$nl_xfrm(0xffffffffffffffff, 0x0, 0x0) syz_emit_vhci(&(0x7f0000000180)=ANY=[@ANYBLOB="040e041e0b20"], 0x7) 12.402226174s ago: executing program 6 (id=2573): socket$nl_generic(0x10, 0x3, 0x10) syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) setgroups(0x0, 0x0) setsockopt$packet_fanout_data(0xffffffffffffffff, 0x107, 0x16, 0x0, 0x0) mount(&(0x7f0000000100)=@nullb, &(0x7f0000000040)='./file1\x00', &(0x7f00000001c0)='gfs2\x00', 0x0, 0x0) socket(0x27, 0xa, 0x5) openat$dir(0xffffffffffffff9c, &(0x7f0000002a00)='./file0\x00', 0x241, 0x0) openat$fuse(0xffffffffffffff9c, &(0x7f00000018c0), 0x42, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)={{}, 0x2c, {'rootmode', 0x3d, 0x4000}}) write$FUSE_INIT(0xffffffffffffffff, &(0x7f0000004200)={0x50}, 0x50) syz_fuse_handle_req(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000006780)={0x90, 0x0, 0x0, {0x0, 0x0, 0x0, 0x2000000000000000}}, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_fuse_handle_req(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000580)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000006780)={0x90, 0x0, 0x0, {0x10000005, 0x0, 0xfffffffffffffffb, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000, 0x0, 0x0, 0x0, 0x10b}}}, 0x0, 0x0, 0x0, 0x0, 0x0}) r1 = open(0x0, 0x2, 0x0) syz_fuse_handle_req(r1, &(0x7f00000021c0)="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", 0x2000, &(0x7f0000000d00)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 9.459267909s ago: executing program 6 (id=2582): mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000100), 0x2, 0x141121) r1 = dup(r0) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) r2 = syz_io_uring_setup(0x38fe, &(0x7f0000000300)={0x0, 0x1fffff, 0x10100, 0x0, 0xe7}, &(0x7f0000000080)=0x0, &(0x7f00000001c0)=0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000140)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd=r0}) io_uring_enter(r2, 0x2def, 0x4000, 0x0, 0x0, 0x0) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r5, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x76dc) connect$inet6(r5, &(0x7f0000000100)={0xa, 0x0, 0xfffffff8, @empty, 0x5}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r5, 0x6, 0x1f, &(0x7f00000002c0), 0x4) setsockopt$inet6_tcp_TLS_TX(r5, 0x11a, 0x2, &(0x7f0000000300)=@gcm_256={{0x303}, "97e46e2921705cb9", "7eb560b5f7b2d2ab1b423d28b6417d7decab8a498df2072dce8cadadf5008f08", "270d3203", "035f8b690ff31ffd"}, 0x38) recvmsg(r5, &(0x7f0000000980)={0x0, 0x0, &(0x7f0000000880)=[{&(0x7f00000001c0)=""/87, 0x57}], 0x1}, 0x100) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) 9.319668283s ago: executing program 2 (id=2586): syz_usb_connect$uac1(0x6, 0x0, 0x0, 0x0) sendmsg$nl_xfrm(0xffffffffffffffff, 0x0, 0x0) 7.209222521s ago: executing program 3 (id=2589): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000600)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(camellia)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5910fae9d6dcd3292ea54c7b6ef915d564c90c200", 0x18) r1 = accept4(r0, 0x0, 0x0, 0x0) syz_genetlink_get_family_id$tipc2(&(0x7f0000000440), r1) sendmsg$nl_route_sched_retired(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000001480)=@newchain={0xfc8, 0x64, 0x800, 0x70bd26, 0x25dfdbfd, {0x0, 0x0, 0x0, 0x0, {0x8, 0x4}, {0x1, 0xffe0}, {0x6, 0x9}}, [@f_rsvp={{0x9}, {0x2f8, 0x2, [@TCA_RSVP_PINFO={0x20, 0x4, {{0x80000000, 0x4dbd, 0xeeb}, {0x2, 0x8, 0xfffffffa}, 0xc1, 0x6a, 0x5}}, @TCA_RSVP_PINFO={0x20, 0x4, {{0xffffffff, 0xb, 0xa7}, {0x5, 0x5, 0x800}, 0x8, 0x7, 0x7}}, @TCA_RSVP_ACT={0x29c, 0x6, [@m_mpls={0x50, 0x2, 0x0, 0x0, {{0x9}, {0xc, 0x2, 0x0, 0x1, [@TCA_MPLS_TTL={0x5, 0x7, 0x3}]}, {0x19, 0x6, "8afa00b66cd46a3dd56b15e78c42c5591665aeb38c"}, {0xc}, {0xc, 0x8, {0x3, 0x2}}}}, @m_sample={0x120, 0xc, 0x0, 0x0, {{0xb}, {0x14, 0x2, 0x0, 0x1, [@TCA_SAMPLE_RATE={0x8, 0x3, 0x2}, @TCA_SAMPLE_TRUNC_SIZE={0x8, 0x4, 0xb}]}, {0xe1, 0x6, "e72064788474e9d9e37d10634c48137100cd94378d719d8bd7941dad82ddc6801abbaa8f647285f9824234165b9164bf9e07b059e8876d3b86f3d3eff123dba20c31009bf5356d4bfb902c879aadb96893919766360a75e3b6404b4ee350e5069892d8d53a532f0ab2991dacf5372f2793899ac294b8bdf081b1045fcb0642c3ec1f5fa35016be0346c5dfaf13cdf2231fcde134b75b4986efe4e1174e6c8dd6388bb51e53bded3dc1f39636729462668780eeb1beaecaa7e546ef2e208007bfead597ba9860ccd6ffd17cdda2608e6f2d712466d6de10742c6500e684"}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x2, 0x3}}}}, @m_vlan={0x128, 0xc, 0x0, 0x0, {{0x9}, {0x58, 0x2, 0x0, 0x1, [@TCA_VLAN_PARMS={0x1c, 0x2, {{0x1, 0x9, 0x6, 0x10000, 0x1ff}, 0x2}}, @TCA_VLAN_PUSH_VLAN_PROTOCOL={0x6, 0x4, 0x8100}, @TCA_VLAN_PUSH_VLAN_PROTOCOL={0x6, 0x4, 0x8100}, @TCA_VLAN_PUSH_VLAN_PRIORITY={0x5, 0x6, 0x4}, @TCA_VLAN_PUSH_VLAN_PRIORITY={0x5, 0x6, 0x5}, @TCA_VLAN_PUSH_VLAN_PROTOCOL={0x6, 0x4, 0x88a8}, @TCA_VLAN_PUSH_VLAN_ID={0x6, 0x3, 0xc8f}, @TCA_VLAN_PUSH_VLAN_PRIORITY={0x5, 0x6, 0x5}]}, {0xa5, 0x6, "97100804a6e83741ac91d00f97036bd5a059445798ae5f1d29ed13399a2b8ba89948bbbac461d5c532b687722214ca48aeadc12d3abc2c3309c14abe618318a684e865ac924bdf1ffa74cb1495a8e7fe212fdbcc5cfd00bccbc713c830853e544043950ef0d308e3fc4b92300a548ea899e6b08cdf47a8bbf4f700a6e28bae34b99ba69765535a9bbd1931a83e9e28328635d5a32b511580f1fdf62e8756ba567b"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x2, 0x3}}}}]}, @TCA_RSVP_CLASSID={0x8, 0x1, {0x1, 0xffff}}, @TCA_RSVP_SRC={0x8, 0x3, @rand_addr=0x64010101}, @TCA_RSVP_CLASSID={0x8, 0x1, {0x9, 0xe}}]}}, @f_rsvp={{0x9}, {0x944, 0x2, [@TCA_RSVP_DST={0x8, 0x2, @broadcast}, @TCA_RSVP_PINFO={0x20, 0x4, {{0xa, 0x7fffffff, 0x10000}, {0x9, 0x80000000, 0x19}, 0x3c58127146fc1915, 0x7e, 0x6}}, @TCA_RSVP_PINFO={0x20, 0x4, {{0x7, 0x0, 0x100}, {0xd7, 0x57, 0xff}, 0x2, 0x6, 0x7}}, @TCA_RSVP_CLASSID={0x8, 0x1, {0x0, 0xfff8}}, @TCA_RSVP_ACT={0x388, 0x6, [@m_tunnel_key={0xe0, 0x0, 0x0, 0x0, {{0xf}, {0x7c, 0x2, 0x0, 0x1, [@TCA_TUNNEL_KEY_ENC_KEY_ID={0x8, 0x7, 0x8}, @TCA_TUNNEL_KEY_ENC_IPV4_DST={0x8, 0x4, @rand_addr=0x64010101}, @TCA_TUNNEL_KEY_ENC_IPV4_DST={0x8, 0x4, @multicast2}, @TCA_TUNNEL_KEY_ENC_IPV6_DST={0x14, 0x6, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}, @TCA_TUNNEL_KEY_ENC_IPV6_DST={0x14, 0x6, @empty}, @TCA_TUNNEL_KEY_NO_CSUM={0x5}, @TCA_TUNNEL_KEY_ENC_KEY_ID={0x8, 0x7, 0x2}, @TCA_TUNNEL_KEY_ENC_IPV6_SRC={0x14, 0x5, @private2}, @TCA_TUNNEL_KEY_ENC_IPV6_SRC={0x14, 0x5, @empty}]}, {0x35, 0x6, "bb2cdd218e1932c60e25532848837b415d56e6744bf0b3f8aba66b0d2cad032b8cf911d07e8929550f9c5047de25564b34"}, {0xc}, {0xc, 0x8, {0x1, 0x1}}}}, @m_gact={0xec, 0x18, 0x0, 0x0, {{0x9}, {0x10, 0x2, 0x0, 0x1, [@TCA_GACT_PROB={0xc, 0x3, {0x1, 0x1cc5, 0x10000000}}]}, {0xb1, 0x6, "2f7e17336698956b6031823656f446206c288c15e63393ac0209c3aca831623d31c5979ed04ea05a6ad1ff34ad989f74edaa909e59500289321dae9b3dd180566cdf21e67e8004f70abffced08e6927c5360bfb787984ba5718d9060fde444b7589483febec75ceecb9874d03d4b9ac235a2e5105f5e4d101c7bb89d42552b5001e6f30636aa246f8a902586bd24150fa3103f039ef05cb2c0d2b249628b30fe700ce0cc2d1bcc9f84cb23539f"}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x2, 0x2}}}}, @m_ct={0x60, 0x6, 0x0, 0x0, {{0x7}, {0x20, 0x2, 0x0, 0x1, [@TCA_CT_NAT_IPV4_MIN={0x8, 0x9, @multicast2}, @TCA_CT_LABELS={0x14, 0x7, "f41fc0b35e938477d0bf68d3f3424a77"}]}, {0x19, 0x6, "c5ae7b164aca2eb1b650efe7025f54bc4b1f425664"}, {0xc}, {0xc, 0x8, {0x1, 0x1}}}}, @m_mpls={0x158, 0x15, 0x0, 0x0, {{0x9}, {0x54, 0x2, 0x0, 0x1, [@TCA_MPLS_TC={0x5, 0x6, 0x6}, @TCA_MPLS_PARMS={0x1c, 0x2, {{0x4, 0x6, 0x2, 0x1, 0x8}, 0x1}}, @TCA_MPLS_BOS={0x5}, @TCA_MPLS_LABEL={0x8, 0x5, 0xfceb}, @TCA_MPLS_PARMS={0x1c, 0x2, {{0xf, 0xfffffffe, 0x6, 0x5, 0xdb}, 0x1}}]}, {0xd9, 0x6, "324bf91de07124b9e54937a32ee33bcdaa62106a7caf5835fd0e696c43e2316f8772f9f823bba68a9c89f0ae20748880652a70e1805890363fa80d3dcf379a8acde00c97af04c9d138527c6c9f877e07d6ddafebce4ada28b72f21399dbf3555d32162f5d74e473ab593b947ebc3ec2fa87cc1e9e03f3eb9ceb45b75f908e8a69ff062c983cab8f637a576b62b6458ae5b999b20b4877654cc2a0af9ff333fa596c5a7e37a68fa7aa7e24ad28a58acdf1d3339fc34716c1a7ec899f913568001637d8638e773f205b76fcbe372a9e7ada20d485e8a"}, {0xc}, {0xc, 0x8, {0x3, 0x1}}}}]}, @TCA_RSVP_SRC={0x8, 0x3, @remote}, @TCA_RSVP_POLICE={0x418, 0x5, [@TCA_POLICE_RATE={0x404, 0x2, [0x4, 0x9, 0x0, 0xb3, 0x3, 0x8653, 0x2232, 0xe, 0x7, 0x4, 0x0, 0x7fff, 0x8, 0x9d, 0x632, 0x6, 0x5, 0x6, 0x5, 0x49cc, 0x2, 0x0, 0xde6a, 0xfffffffa, 0x4, 0x9, 0x8a, 0xd, 0x1ff, 0x30, 0x5, 0xfffffffd, 0x6, 0x7ff, 0x8, 0x3, 0x81, 0x4, 0x9, 0x9, 0x4, 0xffffffff, 0x6, 0x4, 0x2, 0x36e, 0x10000, 0x4, 0xd4, 0x1, 0x0, 0x5, 0xddc, 0x2, 0x0, 0x9, 0x80000000, 0x69, 0x80, 0x9, 0x8, 0x3, 0x400, 0x6, 0x0, 0x4, 0x9, 0x572, 0x8, 0x9, 0x4, 0x8a, 0xfffffffe, 0x1, 0x401, 0x6, 0x4c2645fd, 0x6, 0x3, 0x8611329, 0x3, 0x0, 0x2, 0x7, 0x5, 0xfff, 0x4, 0x8, 0x1, 0x80000001, 0x3, 0x39bd, 0x81, 0x5, 0x0, 0x24, 0x3, 0x0, 0xfffffff9, 0x9, 0x1fb4, 0x80000000, 0x9, 0x1, 0xffffffff, 0x7d, 0x4, 0x1000, 0x80000001, 0x0, 0x2a7, 0xc03, 0xfffff000, 0x1e8, 0x5, 0x6, 0x400, 0x528, 0x2, 0x88, 0x3d75, 0x9, 0xb8, 0xd6bb, 0x8, 0x5, 0x6, 0x4, 0x28, 0x9, 0x7, 0x0, 0xfffffffc, 0x6, 0xfffffffa, 0x1000, 0x8, 0x2, 0xa71, 0xfffffff7, 0x401, 0x7, 0xfffffff1, 0x40, 0x1000, 0xfffff000, 0x0, 0x6, 0x6b, 0xc, 0x8c1, 0x7, 0x3, 0x1, 0x2, 0x6, 0x3, 0xfad10b0c, 0x7f, 0x5, 0x2, 0x2b, 0x1ff, 0x9e, 0x80, 0x7, 0x2, 0x1, 0xefe, 0x5cbf198d, 0x3, 0x0, 0x8, 0xf, 0x5, 0x3ff, 0x1ff, 0x9e11, 0x4, 0x4, 0x8, 0x401, 0xfffffff9, 0xf90, 0x1b1, 0xc6, 0x6885, 0x660, 0x8, 0x10001, 0x1000, 0x6, 0x1ff, 0x2, 0x4, 0x7, 0x81, 0x1, 0x4, 0xfff, 0xfff, 0xa0000, 0x5, 0x10000, 0x401, 0x8772, 0xe, 0x400, 0x9, 0x5, 0xba8, 0xd, 0x1, 0x81, 0x8, 0x1, 0x2, 0x5, 0x5, 0xa3d, 0x5, 0x6, 0x7, 0x9, 0x2, 0x5e, 0x10, 0x800, 0x9, 0xfffffff1, 0x3, 0x6, 0x7, 0x10, 0x0, 0x0, 0x4, 0x1ff, 0xf779, 0x5, 0x0, 0xff, 0x8, 0x7abf, 0x2, 0x9, 0x7, 0x99, 0x4, 0x5dc05eee, 0x1, 0xfff, 0x9, 0x3, 0x9]}, @TCA_POLICE_RESULT={0x8, 0x5, 0x6}, @TCA_POLICE_RESULT={0x8, 0x5, 0x9}]}, @TCA_RSVP_SRC={0x8, 0x3, @broadcast}, @TCA_RSVP_ACT={0x140, 0x6, [@m_pedit={0x13c, 0x11, 0x0, 0x0, {{0xa}, {0xc4, 0x2, 0x0, 0x1, [@TCA_PEDIT_KEYS_EX={0xc0, 0x5, 0x0, 0x1, [{0x3c, 0x6, 0x0, 0x1, [@TCA_PEDIT_KEY_EX_CMD={0x6, 0x2, 0x1}, @TCA_PEDIT_KEY_EX_HTYPE={0x6}, @TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x3}, @TCA_PEDIT_KEY_EX_CMD={0x6}, @TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x3}, @TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x7}, @TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x4}]}, {0x54, 0x6, 0x0, 0x1, [@TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x3}, @TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x2}, @TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x5}, @TCA_PEDIT_KEY_EX_CMD={0x6, 0x2, 0x1}, @TCA_PEDIT_KEY_EX_CMD={0x6, 0x2, 0x1}, @TCA_PEDIT_KEY_EX_CMD={0x6, 0x2, 0x1}, @TCA_PEDIT_KEY_EX_CMD={0x6}, @TCA_PEDIT_KEY_EX_CMD={0x6}, @TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x4}, @TCA_PEDIT_KEY_EX_CMD={0x6}]}, {0x2c, 0x6, 0x0, 0x1, [@TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x5}, @TCA_PEDIT_KEY_EX_CMD={0x6}, @TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x2}, @TCA_PEDIT_KEY_EX_CMD={0x6, 0x2, 0x1}, @TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x1}]}]}]}, {0x4d, 0x6, "71a6d04508ff170cc51a31a334dd9c13a6f8dbcb50218378b331323f8b3b5580c5cc2f578a025646bfc5237b6808b383141e2b249dce8f6590795a8d7b29b73fd51a5fa3242b88e2e3"}, {0xc, 0x7, {0x1, 0x1}}, {0xc}}}]}]}}, @f_rsvp6={{0xa}, {0x344, 0x2, [@TCA_RSVP_ACT={0x340, 0x6, [@m_gact={0x160, 0x5, 0x0, 0x0, {{0x9}, {0x64, 0x2, 0x0, 0x1, [@TCA_GACT_PARMS={0x18, 0x2, {0xfffffff8, 0xfee, 0x0, 0x1, 0xd}}, @TCA_GACT_PARMS={0x18, 0x2, {0x0, 0x81, 0x1, 0x6, 0x1}}, @TCA_GACT_PARMS={0x18, 0x2, {0x9, 0x4, 0x1, 0x9, 0xd}}, @TCA_GACT_PROB={0xc, 0x3, {0x2, 0x18ce}}, @TCA_GACT_PROB={0xc, 0x3, {0x1, 0x1ecc, 0x2}}]}, {0xd1, 0x6, "3323c9692a4e88ccfe0567bce3eeb3ff8d9f12e00b2d96a2d88090115a6899248e6ceeaba6f4cd59a9c2cb865482d6b2967cbd66c07437bf35fe57962166dfa27ccf7d1e70ace06e41d9334c2f08fe8b6a51f66080099d73d9fd8abcc93897053df061a753bd6c324a7479e78260c8bf5aa16c64946518d259de0685325f157a9ed0239679a903d15e675d914803e8cd73df3d20c7269c58bbbfd7aaf15305e795d5ac257f0a0c205cca225f58b233d0cd140a8636434c32023d7d991599f8ff557027e590273449b4433b767e"}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x2, 0x1}}}}, @m_sample={0xdc, 0x5, 0x0, 0x0, {{0xb}, {0x14, 0x2, 0x0, 0x1, [@TCA_SAMPLE_PSAMPLE_GROUP={0x8}, @TCA_SAMPLE_RATE={0x8}]}, {0x9d, 0x6, "2de4d412af6cc489a40706c9e66f8ed8cdb5c76f5dd5def0a04783ef5c0ae5de8f7a0657ae2e2cfad420035bba8453d8490d2955cfa8bb2fbda9dc31b500cf69a231888c130ff85c29b958695bd6d18b5d6f114877e8f1421ae81c961cd43b3232fc03310d14433054539612d04171ceec7cd0bcb462d03d27f85926bf073e6d4634651b26d6432a6f6556461708b6e5d868b46d63f69e3d28"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x2, 0x1}}}}, @m_csum={0x100, 0x8, 0x0, 0x0, {{0x9}, {0x20, 0x2, 0x0, 0x1, [@TCA_CSUM_PARMS={0x1c, 0x1, {{0x9b, 0x4, 0x5, 0x8, 0x4}, 0x29}}]}, {0xb6, 0x6, "da0b5f1d9d892eaa435052deb1ca0c4383a749cfd08ae85f4ca3a7ea3342e2f4ad3386c81764ff5e29307b4e29f566ca4d9b87bfd84edd0a5493713189932597edb7c0ffd27207beb0b0b3a820c800c5b2ed3b8e1d58d9305c7a186bd1f02e54bddc811ad00caa03843b0159524f37cd2cb5f9de9589255b144f29278e96999e245a36cd5821d88dc8fd8eee3362323d61f59d95b4f2d6446bdef8d7f4ba170ad420e7f9e09f9c126f488ca44b0f32a5c4f6"}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x3, 0x3}}}}]}]}}]}, 0xfc8}, 0x1, 0x0, 0x0, 0x20000800}, 0x24008040) 7.136131635s ago: executing program 2 (id=2590): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000600)=ANY=[@ANYBLOB="3c000000120097023dbd", @ANYRES32=0x0, @ANYBLOB="c2f2"], 0x3c}, 0x1, 0x0, 0x0, 0x11}, 0x10) recvmmsg(r0, &(0x7f0000002dc0)=[{{0x0, 0x0, 0x0}, 0x6}], 0x1, 0x40, 0x0) 6.248592486s ago: executing program 5 (id=2591): r0 = syz_open_dev$dri(&(0x7f0000000000), 0x1ff, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000200)={0xffff, 0x9, 0x4}) r1 = syz_open_dev$dri(&(0x7f0000000000), 0x1ff, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r1, 0xc04064a0, &(0x7f0000000700)={0x0, &(0x7f0000000640)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_CURSOR(r0, 0xc01c64a3, 0x0) 6.039697403s ago: executing program 7 (id=2592): socket$netlink(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs, 0x6e) madvise(&(0x7f0000000000/0x600000)=nil, 0x60005f, 0x19) madvise(&(0x7f0000000000/0x3000)=nil, 0x7fffffffffffffff, 0x14) 6.039175424s ago: executing program 2 (id=2593): r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_tx_ring(r0, 0x107, 0xd, &(0x7f0000000100)=@req3={0x10000, 0x100000001, 0x10000, 0x1, 0x7}, 0x1c) mmap(&(0x7f0000ff0000/0x10000)=nil, 0x10000, 0x7fa962bfffff, 0x13012, r0, 0x0) madvise(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x14) mknod$loop(0x0, 0x0, 0x0) 5.962892169s ago: executing program 3 (id=2594): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x9, 0x2, 0x7, 0x4, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x2e) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x15, &(0x7f0000000200)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000047b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000100850000000100000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f00000002c0)='kfree\x00', r2}, 0x10) r3 = syz_io_uring_setup(0x18d6, &(0x7f0000000040), &(0x7f0000ffe000), &(0x7f0000ffe000)) io_uring_register$IORING_REGISTER_IOWQ_MAX_WORKERS(r3, 0x2, &(0x7f0000000180), 0xfe) 5.882961601s ago: executing program 3 (id=2595): mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) mount$tmpfs(0x0, &(0x7f0000000000)='./file1\x00', &(0x7f0000000080), 0x0, &(0x7f00000000c0)={[{@quota}]}) 5.812967208s ago: executing program 3 (id=2596): mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r1 = dup(r0) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) syz_io_uring_submit(0x0, 0x0, 0x0) io_uring_enter(0xffffffffffffffff, 0x2df0, 0x9b50, 0x3, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$l2tp(&(0x7f0000000140), 0xffffffffffffffff) r2 = socket$inet6(0xa, 0x1, 0x84) add_key(&(0x7f0000000000)='pkcs7_test\x00', 0x0, 0x0, 0x0, 0xfffffffffffffffe) r3 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r3, 0x0, 0x0) bind$inet6(r2, 0x0, 0x0) socket$inet_icmp_raw(0x2, 0x3, 0x1) socket$inet_icmp_raw(0x2, 0x3, 0x1) r4 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) ioctl$FS_IOC_GETFSLABEL(r4, 0x800452d3, &(0x7f0000000100)) sched_setaffinity(0x0, 0x8, &(0x7f0000000080)) syz_emit_ethernet(0x38, &(0x7f0000000300)=ANY=[@ANYBLOB="0380c2000000bbbbbbbbbbbb00048042dfcca37b2a7a4d1d5307008f78b7fb2fc8fd2088b711cef34097b36e4e39cdf135456913f1d99eb377aee5e465fa7eb28f198748cdfef72736289d7983263c8cb044ba760c0a2bf243fca3e8b387ee55abc136b89bc103c22733e47b56c3ee3b520e8a18388526a3aedb4d5009fe2b28b721691b94e05550414a1293d316f21d52089b43ece92dcffd9d48592bcd20"], 0x0) setsockopt$sock_linger(r2, 0x1, 0xd, &(0x7f0000000040)={0x1, 0xffffffff}, 0x8) sendto$inet6(r2, &(0x7f0000000100)="bc", 0x1, 0x0, &(0x7f00000000c0)={0xa, 0x4e21, 0x1, @mcast2}, 0x1c) mount(&(0x7f0000000000)=@sr0, &(0x7f0000000140)='./file0\x00', &(0x7f00000190c0)='f2fs\x00', 0x0, 0x0) 5.653100749s ago: executing program 2 (id=2597): ioctl$AUTOFS_DEV_IOCTL_READY(0xffffffffffffffff, 0xc0189376, &(0x7f00000000c0)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0xf}}, './file0\x00'}) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000000)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_TID_CONFIG(r1, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000040)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="8b3700000000000000080500000008000300", @ANYRES32=r3, @ANYBLOB="0c0099000000000000000000"], 0x28}}, 0x0) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000140)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_MESH_CONFIG(r0, &(0x7f0000000200)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x40208041}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x24, r2, 0x300, 0x70bd2c, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r4}, @void}}, [@NL80211_ATTR_WIPHY={0x8, 0x1, 0x79}]}, 0x24}, 0x1, 0x0, 0x0, 0x20004011}, 0x4000000) openat$pidfd(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={0x0, 0x0, 0x4e, 0x0, 0x1, 0x0, 0x0, @void, @value}, 0x28) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kmem_cache_free\x00'}, 0x10) r5 = syz_open_dev$sndpcmc(&(0x7f0000000080), 0x0, 0x0) ioctl$SNDRV_PCM_IOCTL_CHANNEL_INFO(r5, 0xc0844123, &(0x7f0000000000)) socket$nl_netfilter(0x10, 0x3, 0xc) set_mempolicy(0x8006, 0x0, 0x5) r6 = syz_open_dev$sndctrl(&(0x7f0000000000), 0x1, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_WRITE(r6, 0xc1105511, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r7 = socket$packet(0x11, 0x2, 0x300) setsockopt$SO_TIMESTAMPING(r7, 0x1, 0x41, &(0x7f00000001c0)=0x299c, 0x4) socket$igmp(0x2, 0x3, 0x2) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, 0x0) setsockopt$SO_TIMESTAMP(r7, 0x1, 0x1d, &(0x7f0000000100)=0x38, 0x4) sendto$packet(r7, 0x0, 0x0, 0x0, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x20}, 0x14) setsockopt$sock_int(r7, 0x1, 0x29, &(0x7f0000000040)=0x92c, 0x4) recvfrom$packet(r7, 0x0, 0x0, 0x2000, 0x0, 0x0) msync(&(0x7f0000952000/0x2000)=nil, 0x87abbe8d1cc6ad9, 0x6) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) 5.548424871s ago: executing program 5 (id=2598): r0 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000940)={0x6, 0x4, &(0x7f0000013d40)=ANY=[], &(0x7f0000000140)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x26, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x5, @void, @value}, 0x94) r1 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'syz_tun\x00', 0x0}) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000040)={r0, r2, 0x25, 0x2, @void}, 0x10) syz_emit_ethernet(0x36, &(0x7f0000000000)={@local, @dev, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x28, 0x1400, 0x0, 0x0, 0x6, 0x0, @remote, @local}, {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x6, 0x5, 0xc2}}}}}}, 0x0) 5.420269401s ago: executing program 7 (id=2599): socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000200)) r0 = openat$cuse(0xffffffffffffff9c, 0x0, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x3) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) read$FUSE(r0, 0x0, 0x0) write$FUSE_BMAP(r0, &(0x7f0000000440)={0x18, 0xfffffffffffffffe, 0x0, {0x4223}}, 0x18) syz_open_dev$MSR(&(0x7f00000001c0), 0x140, 0x0) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) openat$vnet(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) syz_open_dev$tty1(0xc, 0x4, 0x1) add_key$fscrypt_provisioning(0x0, 0x0, 0x0, 0x0, 0x0) add_key$user(&(0x7f0000002740), &(0x7f0000002780)={'syz', 0x1}, &(0x7f00000027c0), 0x0, 0xffffffffffffffff) write$vga_arbiter(0xffffffffffffffff, &(0x7f00000002c0)=ANY=[@ANYBLOB='lock io'], 0x8) openat$dsp1(0xffffff9c, &(0x7f00000004c0), 0x4c400, 0x0) 4.91663512s ago: executing program 1 (id=2600): syz_open_dev$dri(&(0x7f0000000000), 0x3b94, 0x0) openat$proc_mixer(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/asound/card0/oss_mixer\x00', 0x22400, 0x0) r0 = socket$inet_smc(0x2b, 0x1, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000003c0)={0x18, 0x10, &(0x7f00000002c0)=ANY=[@ANYBLOB="1800"/11, @ANYRES64=0x0], &(0x7f0000000000)='GPL\x00', 0x8, 0xba, &(0x7f0000000140)=""/186, 0x41000, 0x3, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000200)={0x5, 0x4}, 0x8, 0x10, &(0x7f0000000240)={0x3, 0x4, 0x3, 0x6}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x1, @void, @value}, 0x94) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x6) syz_clone(0x800c000, &(0x7f0000001480), 0x0, 0x0, 0x0, &(0x7f00000015c0)="89ef1284c86555bfe69b541fc18b8f329814f57bd00b1b3a660bb38d58430a051059c1c370") sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) syz_open_dev$media(&(0x7f0000000080), 0x1, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0xfffffffffffffc33, &(0x7f0000000280)=0x2) r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r4 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000700), 0x0, 0x0) ioctl$PTP_SYS_OFFSET(r4, 0x43403d05, &(0x7f0000000740)={0xf}) write$UHID_CREATE2(0xffffffffffffffff, 0x0, 0x118) ioctl$TCSETS(r3, 0x89f2, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, "bb5dee00"}) readv(0xffffffffffffffff, &(0x7f0000000340)=[{&(0x7f0000000300)=""/27, 0x1b}], 0x1) getsockopt$EBT_SO_GET_INIT_ENTRIES(r0, 0x0, 0x83, &(0x7f00000001c0)={'nat\x00', 0x0, 0x0, 0x49, [0x600], 0x0, 0x0, 0x0}, &(0x7f0000000240)=0xe0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=@newlink={0x3c, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x32b}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @geneve={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_GENEVE_PORT={0x6, 0x5, 0x4e20}]}}}]}, 0x3c}}, 0x0) 4.783731793s ago: executing program 5 (id=2601): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f00000002c0)=ANY=[@ANYBLOB="180000001800ff0f0000000000000000850000006d000000850000002300000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000800)=@newsa={0xf0, 0x10, 0x1, 0x0, 0x0, {{@in6=@local, @in=@dev={0xac, 0x14, 0x14, 0x1c}}, {@in, 0x0, 0x3c}, @in6=@loopback, {0x6, 0x0, 0x40000000000}, {0x0, 0x8000000000, 0x0, 0x80000001}, {}, 0x0, 0x3502, 0x2, 0x0, 0x0, 0xaf}}, 0xf0}, 0x1, 0x0, 0x0, 0x8050}, 0x0) 4.725359161s ago: executing program 7 (id=2602): r0 = syz_open_procfs(0x0, &(0x7f0000000000)='comm\x00') fchown(r0, 0x0, 0xee01) syz_genetlink_get_family_id$ipvs(0x0, 0xffffffffffffffff) socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000096c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=@getchain={0x4c, 0x66, 0x1, 0x70bd28, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, {0x0, 0xb}, {0xffec, 0x7}, {0xffff, 0xb}}, [{0x8, 0xb, 0xfffffff8}, {0x8, 0xb, 0x3}, {0x8, 0xb, 0x3}, {0x8, 0xb, 0xffff1eca}, {0x8, 0xb, 0x41}]}, 0x4c}}, 0x1) mkdir(&(0x7f0000000440)='./file1\x00', 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) clock_gettime(0xfffffffffffffff1, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) sched_setaffinity(0x0, 0xfffffef7, &(0x7f0000000740)=0x410000002) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000180)={'wlan1\x00'}) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = socket$unix(0x1, 0x2, 0x0) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f0000000100)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_NEW_INTERFACE(r4, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000340)={0x50, r6, 0x1, 0x70bd28, 0x25dfdbfd, {{}, {@void, @val={0x8, 0x3, r7}, @val={0xc, 0x99, {0x7ff, 0x70}}}}, [@NL80211_ATTR_IFNAME={0x14, 0x4, 'syzkaller0\x00'}, @NL80211_ATTR_IFTYPE={0x8, 0x5, 0x7}, @NL80211_ATTR_MESH_ID={0xa}]}, 0x50}, 0x1, 0x0, 0x0, 0x91}, 0x24044884) r8 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r8) socket$inet_sctp(0x2, 0x1, 0x84) ioctl$SIOCSIFHWADDR(r8, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @link_local}) syz_80211_inject_frame(&(0x7f00000002c0)=@device_b, &(0x7f0000000000)=ANY=[@ANYBLOB="5000000008021100000108021100000008021100000000000000000000000000010301000006020202020202010072061003030303037107"], 0x3f) mmap$xdp(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x2, 0x42032, 0xffffffffffffffff, 0x0) mremap(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x1000, 0x0, &(0x7f00008b5000/0x1000)=nil) 4.61721468s ago: executing program 6 (id=2603): r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x8, 0x0, 0xb, 0x7fc00100}]}) r1 = socket$pppl2tp(0x18, 0x1, 0x1) r2 = socket$inet_udplite(0x2, 0x2, 0x88) connect$pppl2tp(r1, &(0x7f0000000040)=@pppol2tpv3={0x18, 0x1, {0x0, r2, {0x2, 0x4e21, @remote}, 0x3, 0x0, 0x2}}, 0x2e) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000ac0), r3) sendmsg$IEEE802154_LLSEC_SETPARAMS(r3, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000b40)={&(0x7f00000003c0)={0x14, r4, 0x5, 0x0, 0x0, {0x22}}, 0x14}}, 0x4000000) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x2004001) ppoll(&(0x7f0000000200)=[{r0, 0x2188}], 0x1, 0x0, 0x0, 0x0) mmap(&(0x7f00005a3000/0x1000)=nil, 0x1000, 0x300000d, 0x4008031, 0xffffffffffffffff, 0x10000) r5 = getpid() r6 = syz_open_dev$media(&(0x7f00000006c0), 0x2c29, 0x28004) ioctl$MEDIA_IOC_REQUEST_ALLOC(r6, 0x80047c05, &(0x7f0000000940)=0xffffffffffffffff) ioctl$BTRFS_IOC_INO_LOOKUP_USER(r7, 0x7c80, 0x0) r8 = syz_open_dev$cec(&(0x7f0000002340), 0x0, 0x0) r9 = syz_open_dev$cec(&(0x7f0000002340), 0x0, 0x0) ioctl$CEC_S_MODE(r9, 0x40046109, &(0x7f0000000100)=0x21) dup2(r8, r9) sched_setscheduler(r5, 0x2, &(0x7f0000000200)=0x4) kcmp$KCMP_EPOLL_TFD(0x0, r5, 0x7, r0, &(0x7f0000000080)={0xffffffffffffffff, r0, 0x80000000}) r10 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100), 0x161281, 0x0) r11 = socket$nl_generic(0x10, 0x3, 0x10) r12 = syz_genetlink_get_family_id$batadv(&(0x7f0000000080), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r11, 0x8933, &(0x7f0000000000)={'batadv0\x00', 0x0}) sendmsg$BATADV_CMD_GET_DAT_CACHE(r11, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000002c0)={0x1c, r12, 0x305, 0x0, 0x0, {0x7}, [@BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r13}]}, 0x1c}}, 0x20000000) ioctl$TCSETS(r10, 0x40045431, &(0x7f00000000c0)={0xfffffff8, 0x100002, 0x0, 0x1, 0x41, "a05c7b5d00008023e9c5bcf5ff7700"}) r14 = syz_open_pts(0xffffffffffffffff, 0x101000) r15 = dup3(r14, r10, 0x0) io_setup(0xbc, &(0x7f0000000280)=0x0) io_submit(r16, 0x1, &(0x7f0000000b80)=[&(0x7f0000000380)={0x503, 0x0, 0x0, 0x7, 0x0, r15, 0x0}]) 4.533455525s ago: executing program 3 (id=2604): r0 = syz_open_dev$cec(&(0x7f0000000340), 0x0, 0x8240) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000002c0)={0x11, 0x3, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000100000000000000000000095"], &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x400, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000004c0)='contention_begin\x00', r1}, 0x2f) ioctl$IOC_PR_PREEMPT(r0, 0x40046109, &(0x7f0000000040)={0xd0}) 4.448923642s ago: executing program 5 (id=2605): socket$netlink(0x10, 0x3, 0x400000000000004) setsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000000)={@multicast1, @local}, 0xc) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) bpf$MAP_DELETE_ELEM(0x3, 0x0, 0x0) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r3}, 0x10) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x0) mkdirat(0xffffffffffffff9c, 0x0, 0x0) r4 = landlock_create_ruleset(0x0, 0x0, 0x0) landlock_restrict_self(r4, 0x0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_DELETE(r5, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000003c0)={0x2c, 0x2, 0x1, 0x201, 0x0, 0x0, {0x3, 0x0, 0x7}, [@CTA_MARK={0x8, 0x8, 0x1, 0x0, 0x4}, @CTA_ZONE={0x6, 0x12, 0x1, 0x0, 0x1}, @CTA_STATUS={0x8, 0x3, 0x1, 0x0, 0x1000}]}, 0x2c}, 0x1, 0x0, 0x0, 0x24006018}, 0x40044) 3.801200951s ago: executing program 2 (id=2606): r0 = socket$nl_route(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(r0, 0x10e, 0xc, &(0x7f0000000000)=0x201, 0x4) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={0x0, r1}, 0x10) syz_emit_vhci(0x0, 0xff) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) syz_emit_vhci(&(0x7f0000000180)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x2, 0x3, 0x16}, @l2cap_cid_le_signaling={{0x12}, @l2cap_ecred_conn_rsp={{0x18, 0x0, 0xe}, {0x0, 0x7, 0x0, 0x20, [0x0, 0x1ff, 0x5]}}}}, 0x1b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) syz_emit_vhci(&(0x7f00000005c0)=@HCI_EVENT_PKT={0x4, @hci_ev_link_key_req={{0x17, 0x6}}}, 0x9) 3.80093683s ago: executing program 3 (id=2607): socket$inet_tcp(0x2, 0x1, 0x0) r0 = socket$xdp(0x2c, 0x3, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="0f0000000400000008000000da00000000000000", @ANYRES32=0x1, @ANYBLOB="0000000000000000090000000400080000000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/21], 0x48) r2 = socket$inet6(0xa, 0x1, 0x0) setsockopt$inet6_int(r2, 0x29, 0x10, &(0x7f0000000180), 0x4) connect$inet6(r2, 0x0, 0x0) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x400000, 0x3, &(0x7f0000000000/0x400000)=nil) r3 = io_uring_setup(0x3450, &(0x7f0000000380)={0x0, 0x0, 0x1, 0x0, 0x52}) io_uring_register$IORING_REGISTER_BUFFERS(r3, 0x0, &(0x7f00000002c0)=[{&(0x7f0000001700)=""/4095, 0x440000}], 0x100000000000011a) ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, &(0x7f0000000040)) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8) bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1, 0x0, 0x0, &(0x7f00002bf000)='syzkaller\x00', 0x4, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) syz_open_dev$sndctrl(0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r5 = openat$nullb(0xffffffffffffff9c, &(0x7f0000001000), 0x0, 0x0) r6 = dup(r5) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x6, 0x12, r6, 0x0) add_key(&(0x7f0000000000)='big_key\x00', &(0x7f0000000280)={'syz', 0x1}, &(0x7f00000002c0)="1d", 0xfe3a, 0xfffffffffffffffe) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) syz_open_dev$mouse(0x0, 0x0, 0x4800) r7 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000040), 0x1, 0x0) ioctl$BLKZEROOUT(r7, 0x127f, &(0x7f0000000240)={0x0, 0x1000000}) bpf$BPF_GET_MAP_INFO(0x3, &(0x7f0000000100)={r1, 0x58, &(0x7f0000000400)}, 0x10) setsockopt$XDP_UMEM_REG(r0, 0x11b, 0x4, &(0x7f0000000040)={&(0x7f0000000000)=""/5, 0x1c000, 0x800}, 0x20) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(0xffffffffffffffff, 0x8933, 0x0) syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) r8 = syz_open_procfs(0x0, &(0x7f0000000300)='mounts\x00') read$FUSE(r8, &(0x7f0000000340)={0x2020}, 0x2020) 2.893530023s ago: executing program 7 (id=2608): stat(&(0x7f0000000040)='./file0\x00', &(0x7f0000000680)={0x0, 0x0, 0x0, 0x0, 0x0}) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000080)='./file0\x00', 0x4000, &(0x7f0000000280)={[{@dax_never}, {@grpid}], [{@uid_lt={'uid<', r0}}, {@fscontext={'fscontext', 0x3d, 'system_u'}}]}, 0x1, 0x4c0, &(0x7f0000000700)="$eJzs3E2MU9UeAPD/7XQ+gMdjHg9RCGoRjRONDAwoLNxgNHGBiREXunAxYQaCDIxhxkQIkSExuDQk7o1Lty7cqjvjysSluDQxJMSwAVzV3PbeTj+ZDzot2N8vKXPO7bn3nH/vPben57QEMLBK6T9JxH8i4kZEbKtmGwuUqn/u3r588t7tyydjqVw+8VdSKXcnzWfy/bZkmYlCROGzpOmAVQsXL52dnpubvZDlJxfPfTS5cPHSS2fOTZ+ePT17furo0cOHDh55ZerltQfVpr40rju7P53fs+vN96+/dbKYbx/L/tbH0S2lKLVrSsVz3a6sz7bWpZNiHxvCmgxFRHq6hiNGbsS2GAonDwZFuVwuj3Z+eqnc7GrLFuCRlUS/WwD0R/5Gn37+zR89Gno8FG4dq34ASuO+mz2qzxSjkJUZbvp8201jEfHe0t9fpY/YoHkIAIB6PxzLR4LN479C7Kwr999sDWU8Iv4XEdsj4v8RsSMiHouolH08Ip5oOn4pIsr3qb/UlG8d/xRuPlCAK0jHf69ma1uN47989BfjQ1lua0Q+YJ49kL0mEzE8eurM3OzBxsP+Vp/58fVfv+hUf6lu/Jc+0vrzsWDWjpvFpgm6menF6QcKus6tqxG7i83xJ8WIpLYSkETErojYvYbjjtelz7zwzZ5aZrix3MrxV5TbrqN1Yami/HXE89XzvxQN53+5xuT+65OTYzE3e2AyvQoOtK3j51+uvd2p/hXj/+6P5l3eOPL9iQcNuyY9/5vrrv/I12+X4x9PIpLaeu3C2uu49vvnHT/TrO76v9KwT3r9jyTvVtIj2bZPphcXLxyMGEmOt26fWt43z+fl0/gn9rXv/9ub2ppexE9GxFMR8XTW9r0R8UxE7GsNLclfwZ9ee/bD9ce/sdL4Z9re/xrO//J6/cLxS2ejkqhtWSkxdHbvjXsdbh6rO/+HK6mJbEv7+1/ScItYbQO78BICAADAQ68Qle/+F/bX0oXC/v3VOaAdsbkwN7+w+OKp+Y/Pz1R/IzAew4V8pqs6Hzyc5POf43X5qab8oWze+MuhfDJzfm6mz7HDoNtS6fNJS/9P/TnU79YBG85PfmBwrdT/d17vUUOAnvP+D4Orrv8vdSiy5Jsy8O/U/v1/uOftAHqvXf+/so59gEdLWV+Ggab/w+Aqxju1dKGvLQF6zfs/DKTV/4p/PYnyaPunxqK1cIxtTDM2tamrL4l0ZNWDuj7I1m2Wt2xaz3Hy/02hY5korHScYsM1NhqtZYaiL+fi9M6uX/zl7Lvy3W7qt/fvp/lwfQNeqB7ehAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADbQPwEAAP//VNPS8g==") r1 = socket$nl_rdma(0x10, 0x3, 0x14) socket$nl_xfrm(0x10, 0x3, 0x6) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) socket$key(0xf, 0x3, 0x2) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) add_key$user(0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x3, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000fe05000000000000000000009500"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='sched_switch\x00', r5, 0x0, 0x3}, 0x18) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) write$binfmt_misc(0xffffffffffffffff, &(0x7f0000000000), 0xfffffecc) mount$9p_fd(0x0, &(0x7f0000000240)='./file0\x00', &(0x7f0000000300), 0x0, &(0x7f0000000440)={'trans=fd,', {}, 0x2c, {}, 0x2c, {[{@dfltuid={'dfltuid', 0x3d, r0}}, {@cachetag={'cachetag', 0x3d, 'GPL\x00'}}]}}) socket$nl_netfilter(0x10, 0x3, 0xc) r6 = fsopen(&(0x7f0000000340)='ceph\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r6, 0x1, &(0x7f0000000000)='source', &(0x7f0000000040)='c:::\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r6, 0x6, 0x0, 0x0, 0x0) fsmount(r6, 0x0, 0x0) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000002c0)=ANY=[@ANYBLOB="38000000031401002cbd7000fcdbdf250900020073797a32000000000800410073697700140033006c6f000000000000"], 0x38}, 0x1, 0x0, 0x0, 0x44}, 0x810) sendmsg$RDMA_NLDEV_CMD_SET(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000003c0)=ANY=[@ANYBLOB="480000000214010028bd7000fddbdf250900020073797a3100000000080001000000000008004400", @ANYRES32, @ANYBLOB="050054000100b2ac08000100000000000900020073"], 0x48}, 0x1, 0x0, 0x0, 0x4000801}, 0x0) 2.795482106s ago: executing program 5 (id=2609): socketpair(0x1, 0x80001, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f00000005c0)={'ip_vti0\x00', &(0x7f0000000040)={'syztnl0\x00', 0x0, 0x0, 0x7, 0x0, 0x0, {{0x5, 0x4, 0x0, 0x0, 0x14, 0x400, 0x0, 0x0, 0x4, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @broadcast}}}}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r1 = getpid() sched_setscheduler(r1, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18090000000000000000000000000000850000006d0000001801000020696c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r4}, 0x10) sendmmsg$inet(0xffffffffffffffff, &(0x7f0000000cc0)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000200)=[@ip_tos_int={{0x14, 0x0, 0x1, 0x4}}], 0x18}}], 0x1, 0x0) r5 = socket$inet_tcp(0x2, 0x1, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCBRDELBR(r6, 0x89a2, &(0x7f0000000200)='bridge0\x00') r7 = socket$kcm(0x11, 0x2, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x0, 0x1, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) socket$kcm(0x11, 0x200000000000002, 0x300) close(r7) socket$kcm(0x11, 0x2, 0x0) socket$kcm(0x11, 0x200000000000002, 0x300) ioctl$sock_SIOCBRDELBR(r5, 0x89a3, &(0x7f0000000200)='bridge0\x00') socket$alg(0x26, 0x5, 0x0) 623.435795ms ago: executing program 7 (id=2610): sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x1c1341, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xa, 0x4, 0xfff, 0x7, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYRES32=r0], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000380)={0x1b, 0x0, 0x0, 0x7, 0x0, r0, 0x5, '\x00', 0x0, 0xffffffffffffffff, 0x4, 0x4, 0x0, 0x0, @void, @value, @void, @value}, 0x50) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f0000000300)='sched_switch\x00', r1}, 0x10) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000005c0)=@newlink={0x44, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x45310, 0x2000}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x14, 0x2, 0x0, 0x1, [@IFLA_BR_MCAST_QUERIER={0x5}, @IFLA_BR_AGEING_TIME={0x8, 0x4, 0xc}]}}}]}, 0x44}}, 0x8080) syz_genetlink_get_family_id$nbd(&(0x7f00000000c0), 0xffffffffffffffff) 494.912552ms ago: executing program 1 (id=2611): r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, 0x0) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000000)=0xe) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x1, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r2 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000840), 0x1a01, 0x0) ioctl$EVIOCGPROP(r2, 0x40047438, &(0x7f0000000180)=""/246) ioctl$PPPIOCGFLAGS1(r2, 0x8004745a, &(0x7f00000002c0)) 494.373174ms ago: executing program 6 (id=2612): mkdir(&(0x7f0000000180)='./file1\x00', 0x0) mkdir(&(0x7f00000003c0)='./file0\x00', 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000200)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) chdir(&(0x7f0000000140)='./bus\x00') r0 = open(&(0x7f00000000c0)='./file0\x00', 0x4008040, 0x0) read$FUSE(r0, 0x0, 0x0) 361.049535ms ago: executing program 5 (id=2613): openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) socket$can_raw(0x1d, 0x3, 0x1) r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x6, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18050000000000990000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r0, @ANYBLOB="0000000000000000b704000008000000850000009500000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r1, 0xfffff000, 0x0, 0x27, 0x0, 0x0, 0x0, 0x7000000, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) socket$kcm(0x10, 0x3, 0x10) socket$nl_netfilter(0x10, 0x3, 0xc) socket$l2tp(0x2, 0x2, 0x73) r2 = socket(0x400000000010, 0x3, 0x0) socket$inet6_mptcp(0xa, 0x1, 0x106) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x60005f, 0x19) sendmsg$IPSET_CMD_ADD(r2, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x2c, 0x9, 0x6, 0x0, 0x0, 0x0, {0x3, 0x0, 0x8}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}]}, 0x2c}, 0x1, 0x0, 0x0, 0x20008085}, 0x800) mlock(&(0x7f0000001000/0x1000)=nil, 0x1000) socket$netlink(0x10, 0x3, 0x8000000004) socket$netlink(0x10, 0x3, 0x0) socket$netlink(0x10, 0x3, 0x0) unshare(0x60400) socket(0x1, 0xa, 0x0) socket$netlink(0x10, 0x3, 0xc) socket$nl_netfilter(0x10, 0x3, 0xc) socket(0x10, 0x803, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000001c0)=ANY=[], 0x3c}, 0x1, 0x8000a0ffffffff, 0x0, 0x20008804}, 0x45) 360.62153ms ago: executing program 1 (id=2614): r0 = syz_io_uring_setup(0x10d, &(0x7f0000000200)={0x0, 0xfffffffc, 0x0, 0x1}, &(0x7f0000000340)=0x0, &(0x7f0000000280)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000080), 0x0, 0x4) syz_io_uring_submit(r1, r2, &(0x7f0000000040)=@IORING_OP_WRITE={0x17, 0x10, 0x4007, @fd_index=0x8000000, 0x2, 0x0}) io_uring_enter(r0, 0x3f70, 0x0, 0x0, 0x0, 0x0) 259.459892ms ago: executing program 2 (id=2615): r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r1 = dup(r0) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) r2 = syz_io_uring_setup(0x239, &(0x7f00000002c0)={0x0, 0x4533, 0x10100, 0x0, 0x0, 0x0, r1}, &(0x7f0000000180)=0x0, &(0x7f0000000340)=0x0) r5 = syz_open_dev$sndctrl(&(0x7f0000001440), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_RAWMIDI_NEXT_DEVICE(r5, 0xc0045540, &(0x7f0000000000)=0xd69) r6 = openat$procfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) lseek(r6, 0x9, 0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000040)=@IORING_OP_POLL_ADD={0x6, 0x2, 0x0, @fd_index=0x4, 0x0, 0x0, 0x0, {}, 0x1}) io_uring_enter(r2, 0x2ded, 0x4000, 0x0, 0x0, 0x0) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(0xffffffffffffffff, 0x6, 0x14, &(0x7f0000000280)=0x1, 0x4) connect$inet6(0xffffffffffffffff, &(0x7f0000000080)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @remote}}, 0x1c) capget(&(0x7f0000001140)={0x19980330}, &(0x7f0000001180)={0x4, 0x2, 0x3, 0x3, 0x482, 0x8}) recvmsg(0xffffffffffffffff, &(0x7f0000000a40)={0x0, 0x0, &(0x7f0000000400)=[{&(0x7f00000063c0)=""/4097, 0x1001}], 0x1}, 0x102) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x840, 0x0, 0x0) 1.374764ms ago: executing program 6 (id=2616): openat$nvme_fabrics(0xffffff9c, &(0x7f0000000040), 0x4000, 0x0) 0s ago: executing program 7 (id=2617): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f00000002c0)=ANY=[@ANYBLOB="180000001800ff0f0000000000000000850000006d000000850000002300000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000800)=@newsa={0xf0, 0x10, 0x1, 0x0, 0x0, {{@in6=@local, @in=@dev={0xac, 0x14, 0x14, 0x1c}}, {@in, 0x0, 0x3c}, @in6=@loopback, {0x6, 0x0, 0x40000000000}, {0x0, 0x8000000000, 0x0, 0x80000001}, {}, 0x0, 0x3502, 0x2, 0x0, 0x0, 0xaf}}, 0xf0}, 0x1, 0x0, 0x0, 0x8050}, 0x0) kernel console output (not intermixed with test programs): "syz.4.1691" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f6912d84690 code=0x7ffc0000 [ 762.582778][ T29] audit: type=1326 audit(1734912876.257:1212): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13207 comm="syz.4.1691" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f6912d8592b code=0x7ffc0000 [ 762.605807][ T29] audit: type=1326 audit(1734912876.257:1213): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13207 comm="syz.4.1691" exe="/root/syz-executor" sig=0 arch=c000003e syscall=3 compat=0 ip=0x7f6912d8498a code=0x7ffc0000 [ 763.728011][T13240] x_tables: ip_tables: TPROXY target: used from hooks FORWARD, but only usable from PREROUTING [ 764.235932][T13249] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 766.790268][T13277] bridge0: port 3(vlan2) entered blocking state [ 766.869856][T13277] bridge0: port 3(vlan2) entered disabled state [ 767.181684][T13277] vlan2: entered allmulticast mode [ 767.187166][T13277] team0: entered allmulticast mode [ 767.192307][T13277] team_slave_0: entered allmulticast mode [ 767.219674][T13277] team_slave_1: entered allmulticast mode [ 767.256893][T13277] vlan2: entered promiscuous mode [ 767.617524][T13277] team0: entered promiscuous mode [ 767.622681][T13277] team_slave_0: entered promiscuous mode [ 767.685034][T13277] team_slave_1: entered promiscuous mode [ 767.691427][T13277] bridge0: port 3(vlan2) entered blocking state [ 767.697804][T13277] bridge0: port 3(vlan2) entered forwarding state [ 771.298764][ T29] kauditd_printk_skb: 17 callbacks suppressed [ 771.298788][ T29] audit: type=1326 audit(1734912885.137:1231): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13299 comm="syz.2.1711" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4ee1585d29 code=0x7ffc0000 [ 771.355117][ T29] audit: type=1326 audit(1734912885.137:1232): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13299 comm="syz.2.1711" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4ee1585d29 code=0x7ffc0000 [ 771.448980][ T29] audit: type=1326 audit(1734912885.137:1233): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13299 comm="syz.2.1711" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f4ee1585d29 code=0x7ffc0000 [ 771.538915][ T29] audit: type=1326 audit(1734912885.137:1234): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13299 comm="syz.2.1711" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4ee1585d29 code=0x7ffc0000 [ 772.481358][ T29] audit: type=1326 audit(1734912885.137:1235): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13299 comm="syz.2.1711" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4ee1585d29 code=0x7ffc0000 [ 772.517830][ T29] audit: type=1326 audit(1734912885.137:1236): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13299 comm="syz.2.1711" exe="/root/syz-executor" sig=0 arch=c000003e syscall=46 compat=0 ip=0x7f4ee1585d29 code=0x7ffc0000 [ 772.540702][ T29] audit: type=1326 audit(1734912885.137:1237): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13299 comm="syz.2.1711" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4ee1585d29 code=0x7ffc0000 [ 772.563445][ T29] audit: type=1326 audit(1734912885.137:1238): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13299 comm="syz.2.1711" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4ee1585d29 code=0x7ffc0000 [ 772.586282][ T29] audit: type=1326 audit(1734912885.137:1239): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13299 comm="syz.2.1711" exe="/root/syz-executor" sig=0 arch=c000003e syscall=319 compat=0 ip=0x7f4ee1585d29 code=0x7ffc0000 [ 772.613958][ T29] audit: type=1326 audit(1734912885.137:1240): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13299 comm="syz.2.1711" exe="/root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7f4ee1585d63 code=0x7ffc0000 [ 772.636392][ C1] vkms_vblank_simulate: vblank timer overrun [ 774.363935][ T58] usb 5-1: new high-speed USB device number 3 using dummy_hcd [ 774.523748][ T58] usb 5-1: Using ep0 maxpacket: 8 [ 774.577322][ T58] usb 5-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 774.592805][ T58] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 774.648259][ T58] usb 5-1: Product: syz [ 774.875980][ T58] usb 5-1: Manufacturer: syz [ 774.880647][ T58] usb 5-1: SerialNumber: syz [ 775.154592][ T58] usb 5-1: config 0 descriptor?? [ 775.422993][T13351] x_tables: ip_tables: TPROXY target: used from hooks FORWARD, but only usable from PREROUTING [ 775.773505][ T58] usb 5-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 777.534657][ C0] raw-gadget.0 gadget.4: ignoring, device is not running [ 777.542085][ C0] raw-gadget.0 gadget.4: ignoring, device is not running [ 777.550156][ T58] dvb_usb_rtl28xxu 5-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -32 [ 777.569894][ T58] usb 5-1: USB disconnect, device number 3 [ 780.637174][T13404] block device autoloading is deprecated and will be removed. [ 781.060594][T13396] wg2: entered promiscuous mode [ 781.103750][T13396] wg2: entered allmulticast mode [ 781.459764][T13422] loop4: detected capacity change from 0 to 512 [ 783.898358][T13422] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 784.337661][T13422] workqueue: Failed to create a rescuer kthread for wq "ext4-rsv-conversion": -EINTR [ 784.340138][T13422] EXT4-fs: failed to create workqueue [ 784.405500][T13422] EXT4-fs (loop4): mount failed [ 788.813880][T13484] x_tables: ip_tables: TPROXY target: used from hooks FORWARD, but only usable from PREROUTING [ 788.950799][T13485] loop0: detected capacity change from 0 to 8 [ 789.044734][T13485] SQUASHFS error: lzo decompression failed, data probably corrupt [ 789.054497][T13485] SQUASHFS error: Failed to read block 0x91: -5 [ 789.060828][T13485] SQUASHFS error: Unable to read metadata cache entry [8f] [ 789.068357][T13485] SQUASHFS error: Unable to read inode 0x11f [ 790.099062][T13506] loop4: detected capacity change from 0 to 512 [ 790.288987][T13506] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 790.299194][ T25] usb 2-1: new high-speed USB device number 4 using dummy_hcd [ 790.623694][T13506] EXT4-fs (loop4): 1 truncate cleaned up [ 790.630509][T13506] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 791.584767][ T25] usb 2-1: Using ep0 maxpacket: 8 [ 791.874330][ T25] usb 2-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 791.875737][T10347] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 791.884176][ T25] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 791.900947][ T25] usb 2-1: Product: syz [ 791.943748][ T25] usb 2-1: Manufacturer: syz [ 792.117588][ T25] usb 2-1: SerialNumber: syz [ 792.167926][ T25] usb 2-1: config 0 descriptor?? [ 792.787611][ T25] usb 2-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 795.002778][ T25] dvb_usb_rtl28xxu 2-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -71 [ 795.018288][ T25] usb 2-1: USB disconnect, device number 4 [ 797.019239][T13586] loop9: detected capacity change from 0 to 256 [ 797.105809][ T29] kauditd_printk_skb: 20 callbacks suppressed [ 797.105871][ T29] audit: type=1326 audit(1734912910.847:1261): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13581 comm="syz.9.1779" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa1c8985d29 code=0x7ffc0000 [ 797.333734][ T29] audit: type=1326 audit(1734912910.857:1262): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13581 comm="syz.9.1779" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa1c8985d29 code=0x7ffc0000 [ 797.368287][ T29] audit: type=1326 audit(1734912910.857:1263): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13581 comm="syz.9.1779" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7fa1c8985d29 code=0x7ffc0000 [ 797.392230][ T29] audit: type=1326 audit(1734912910.857:1264): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13581 comm="syz.9.1779" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa1c8985d29 code=0x7ffc0000 [ 797.415508][ T29] audit: type=1326 audit(1734912910.857:1265): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13581 comm="syz.9.1779" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa1c8985d29 code=0x7ffc0000 [ 797.438384][ T29] audit: type=1326 audit(1734912910.857:1266): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13581 comm="syz.9.1779" exe="/root/syz-executor" sig=0 arch=c000003e syscall=46 compat=0 ip=0x7fa1c8985d29 code=0x7ffc0000 [ 797.461459][ T29] audit: type=1326 audit(1734912910.857:1267): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13581 comm="syz.9.1779" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa1c8985d29 code=0x7ffc0000 [ 797.484789][ T29] audit: type=1326 audit(1734912910.857:1268): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13581 comm="syz.9.1779" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa1c8985d29 code=0x7ffc0000 [ 797.513370][ T29] audit: type=1326 audit(1734912910.857:1269): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13581 comm="syz.9.1779" exe="/root/syz-executor" sig=0 arch=c000003e syscall=319 compat=0 ip=0x7fa1c8985d29 code=0x7ffc0000 [ 797.536271][ T29] audit: type=1326 audit(1734912910.867:1270): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13581 comm="syz.9.1779" exe="/root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7fa1c8985d63 code=0x7ffc0000 [ 801.300548][ T5891] usb 2-1: new high-speed USB device number 5 using dummy_hcd [ 804.524127][ T5891] usb 2-1: Using ep0 maxpacket: 8 [ 804.611270][ T5891] usb 2-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 804.621223][ T5891] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 804.629318][ T5891] usb 2-1: Product: syz [ 804.633513][ T5891] usb 2-1: Manufacturer: syz [ 804.638621][ T5891] usb 2-1: SerialNumber: syz [ 805.245392][ T5891] usb 2-1: config 0 descriptor?? [ 805.443451][ T5891] usb 2-1: can't set config #0, error -71 [ 806.496077][ T5891] usb 2-1: USB disconnect, device number 5 [ 808.262037][ T1289] ieee802154 phy0 wpan0: encryption failed: -22 [ 810.028684][T13703] netlink: 'syz.9.1807': attribute type 6 has an invalid length. [ 812.413828][ T58] usb 5-1: new high-speed USB device number 4 using dummy_hcd [ 812.655420][ T58] usb 5-1: Using ep0 maxpacket: 8 [ 816.518695][ T58] usb 5-1: string descriptor 0 read error: -71 [ 816.553832][ T58] usb 5-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 816.772017][ T58] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 816.787195][ T58] usb 5-1: config 0 descriptor?? [ 816.905023][ T58] usb 5-1: can't set config #0, error -71 [ 817.094215][ T58] usb 5-1: USB disconnect, device number 4 [ 819.603824][T13800] loop9: detected capacity change from 0 to 2048 [ 819.799481][T13800] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 820.279177][T13822] netlink: 'syz.1.1836': attribute type 12 has an invalid length. [ 820.371702][ T6579] EXT4-fs error (device loop9): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 25 vs 281 free clusters [ 820.402109][ T6579] EXT4-fs (loop9): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 1 with error 28 [ 820.435135][ T6579] EXT4-fs (loop9): This should not happen!! Data will be lost [ 820.435135][ T6579] [ 820.450848][T13826] x_tables: ip_tables: TPROXY target: used from hooks FORWARD, but only usable from PREROUTING [ 820.459060][ T6579] EXT4-fs (loop9): Total free blocks count 0 [ 820.492244][ T6579] EXT4-fs (loop9): Free/Dirty block details [ 820.507116][ T6579] EXT4-fs (loop9): free_blocks=4096 [ 820.520257][ T6579] EXT4-fs (loop9): dirty_blocks=0 [ 820.534142][ T6579] EXT4-fs (loop9): Block reservation details [ 820.546251][ T6579] EXT4-fs (loop9): i_reserved_data_blocks=0 [ 820.759912][ T8358] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 820.787934][T13831] loop4: detected capacity change from 0 to 512 [ 820.825615][T13831] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 820.882127][T13831] EXT4-fs (loop4): 1 truncate cleaned up [ 820.921362][T13831] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 821.055998][T10347] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 827.003931][T13916] loop4: detected capacity change from 0 to 512 [ 827.022490][T13916] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 827.214648][T13916] EXT4-fs (loop4): 1 truncate cleaned up [ 827.927840][T13916] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 828.788958][T10347] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 832.866948][T13983] infiniband syz2: set active [ 832.871943][T13983] infiniband syz2: added team_slave_1 [ 832.894548][T13983] syz2: rxe_create_cq: returned err = -12 [ 832.900718][T13983] infiniband syz2: Couldn't create ib_mad CQ [ 832.924229][T13983] infiniband syz2: Couldn't open port 1 [ 832.995287][T13983] RDS/IB: syz2: added [ 832.999736][T13983] smc: adding ib device syz2 with port count 1 [ 833.006172][T13983] smc: ib device syz2 port 1 has pnetid [ 833.517687][T13990] hub 2-0:1.0: USB hub found [ 833.524846][T13990] hub 2-0:1.0: 1 port detected [ 834.369582][ T5842] Bluetooth: hci2: command 0x0c1a tx timeout [ 836.057358][T14005] loop9: detected capacity change from 0 to 128 [ 836.868402][T13940] kworker/u8:17: attempt to access beyond end of device [ 836.868402][T13940] loop9: rw=1, sector=145, nr_sectors = 896 limit=128 [ 839.117702][T14045] hub 2-0:1.0: USB hub found [ 839.122851][T14045] hub 2-0:1.0: 1 port detected [ 840.878808][T14041] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 841.016595][ T29] kauditd_printk_skb: 27 callbacks suppressed [ 841.016618][ T29] audit: type=1326 audit(1734912953.007:1298): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14038 comm="syz.1.1891" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f693f585d29 code=0x0 [ 842.925961][ T29] audit: type=1326 audit(1734912956.787:1299): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14066 comm="syz.8.1898" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1fd9f85d29 code=0x7ffc0000 [ 844.159813][ T29] audit: type=1326 audit(1734912956.787:1300): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14066 comm="syz.8.1898" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f1fd9f85d29 code=0x7ffc0000 [ 844.466458][ T29] audit: type=1326 audit(1734912956.787:1301): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14066 comm="syz.8.1898" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1fd9f85d29 code=0x7ffc0000 [ 844.536544][ T29] audit: type=1326 audit(1734912956.787:1302): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14066 comm="syz.8.1898" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1fd9f85d29 code=0x7ffc0000 [ 844.791134][ T29] audit: type=1326 audit(1734912956.787:1303): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14066 comm="syz.8.1898" exe="/root/syz-executor" sig=0 arch=c000003e syscall=65 compat=0 ip=0x7f1fd9f85d29 code=0x7ffc0000 [ 844.843849][ T29] audit: type=1326 audit(1734912956.787:1304): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14066 comm="syz.8.1898" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1fd9f85d29 code=0x7ffc0000 [ 844.873679][ T29] audit: type=1326 audit(1734912956.787:1305): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14066 comm="syz.8.1898" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1fd9f85d29 code=0x7ffc0000 [ 857.641149][T14174] block device autoloading is deprecated and will be removed. [ 857.670828][T14171] Driver unsupported XDP return value 0 on prog (id 422) dev N/A, expect packet loss! [ 857.804928][T14177] loop0: detected capacity change from 0 to 4096 [ 858.059763][T14189] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 858.191374][T14177] NILFS error (device loop0): nilfs_bmap_lookup_contig: broken bmap (inode number=12) [ 858.379867][T14167] loop9: detected capacity change from 0 to 256 [ 859.014355][T14177] Remounting filesystem read-only [ 859.957983][T14212] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 865.557711][T14269] loop4: detected capacity change from 0 to 256 [ 866.477791][T14263] loop2: detected capacity change from 0 to 32768 [ 866.496083][T14263] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop2 (7:2) scanned by syz.2.1947 (14263) [ 866.553868][T14263] BTRFS info (device loop2): first mount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 866.593025][T14263] BTRFS info (device loop2): using sha256 (sha256-ni) checksum algorithm [ 866.829171][T14263] BTRFS info (device loop2): rebuilding free space tree [ 867.108366][T14263] BTRFS info (device loop2): disabling free space tree [ 867.128832][T14263] BTRFS info (device loop2): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1) [ 867.150904][T14263] BTRFS info (device loop2): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2) [ 868.808108][ T29] audit: type=1800 audit(1734912982.117:1306): pid=14263 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.1947" name="file1" dev="loop2" ino=260 res=0 errno=0 [ 869.679223][ T1289] ieee802154 phy0 wpan0: encryption failed: -22 [ 870.734591][ T5828] BTRFS info (device loop2): last unmount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 871.845794][T14353] loop9: detected capacity change from 0 to 40427 [ 872.356470][T14353] F2FS-fs (loop9): build fault injection attr: rate: 771, type: 0x1fffff [ 872.367416][T14353] F2FS-fs (loop9): invalid crc value [ 872.408324][T14353] F2FS-fs (loop9): Found nat_bits in checkpoint [ 872.483962][T14353] F2FS-fs (loop9): Mounted with checkpoint version = 48b305e5 [ 873.716723][ T8358] syz-executor: attempt to access beyond end of device [ 873.716723][ T8358] loop9: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 873.825524][ T8358] F2FS-fs (loop9): Stopped filesystem due to reason: 3 [ 875.304470][ T5893] usb 2-1: new high-speed USB device number 6 using dummy_hcd [ 876.285380][ T5893] usb 2-1: New USB device found, idVendor=0c45, idProduct=8001, bcdDevice=90.0a [ 876.318137][ T5893] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 876.389602][ T5893] usb 2-1: config 0 descriptor?? [ 876.423204][ T5893] gspca_main: sn9c2028-2.14.0 probing 0c45:8001 [ 876.663873][ T5893] gspca_sn9c2028: read1 error -32 [ 876.904261][T14425] ./file0: Can't lookup blockdev [ 876.925804][T14425] : entered promiscuous mode [ 877.956454][ T5893] gspca_sn9c2028: read1 error -32 [ 879.195349][T14431] usb 2-1: USB disconnect, device number 6 [ 880.296652][T14433] hub 2-0:1.0: USB hub found [ 880.302519][T14433] hub 2-0:1.0: 1 port detected [ 881.545585][T14438] loop9: detected capacity change from 0 to 40427 [ 881.607390][T14438] F2FS-fs (loop9): build fault injection attr: rate: 771, type: 0x1fffff [ 881.619708][T14438] F2FS-fs (loop9): invalid crc value [ 881.639607][T14438] F2FS-fs (loop9): Found nat_bits in checkpoint [ 881.707213][T14438] F2FS-fs (loop9): Mounted with checkpoint version = 48b305e5 [ 882.608337][T14443] loop2: detected capacity change from 0 to 2048 [ 882.904452][ T8358] syz-executor: attempt to access beyond end of device [ 882.904452][ T8358] loop9: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 882.935527][T14443] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 883.344480][ T8358] F2FS-fs (loop9): Stopped filesystem due to reason: 3 [ 887.276468][T14514] tipc: Started in network mode [ 887.281434][T14514] tipc: Node identity ac14140f, cluster identity 4711 [ 887.290549][T14514] tipc: New replicast peer: 255.255.255.255 [ 887.299444][T14514] tipc: Enabled bearer , priority 10 [ 888.418817][T14539] autofs: Unknown parameter 'fd0x0000000000000000' [ 889.092006][ T970] tipc: Node number set to 2886997007 [ 889.107099][T14537] fuse: Bad value for 'fd' [ 889.746818][T14549] random: crng reseeded on system resumption [ 892.814732][T14601] autofs: Unknown parameter 'fd0x0000000000000000' [ 895.369692][T14622] IPVS: sync thread started: state = MASTER, mcast_ifn = geneve0, syncid = 0, id = 0 [ 895.385128][T14624] IPVS: sync thread started: state = MASTER, mcast_ifn = geneve0, syncid = 0, id = 1 [ 895.395364][T14626] IPVS: sync thread started: state = MASTER, mcast_ifn = geneve0, syncid = 0, id = 2 [ 895.410733][T14628] IPVS: sync thread started: state = MASTER, mcast_ifn = geneve0, syncid = 0, id = 3 [ 896.632979][T14640] loop2: detected capacity change from 0 to 512 [ 896.722669][T14642] loop0: detected capacity change from 0 to 128 [ 897.290401][T14642] EXT4-fs (loop0): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 897.659806][T14642] ext4 filesystem being mounted at /111/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 897.741808][T14640] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 897.754894][T14640] ext4 filesystem being mounted at /383/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 898.006813][T14655] autofs: Unknown parameter 'fd0x0000000000000000' [ 899.281734][ T5828] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 900.398621][ T5893] usb 10-1: new high-speed USB device number 6 using dummy_hcd [ 900.626458][ T5893] usb 10-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 900.646583][ T5893] usb 10-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 900.667086][ T5893] usb 10-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 900.691447][ T5893] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 900.726090][T14668] raw-gadget.0 gadget.9: fail, usb_ep_enable returned -22 [ 900.757457][ T5893] usb 10-1: Quirk or no altset; falling back to MIDI 1.0 [ 900.963782][ T51] usb 2-1: new high-speed USB device number 7 using dummy_hcd [ 900.975324][T11251] EXT4-fs (loop0): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 901.066335][ T5893] usb 10-1: USB disconnect, device number 6 [ 901.145710][ T51] usb 2-1: Using ep0 maxpacket: 16 [ 901.166759][ T51] usb 2-1: config 4 has an invalid interface number: 138 but max is 0 [ 901.356208][ T51] usb 2-1: config 4 has no interface number 0 [ 901.367812][ T51] usb 2-1: New USB device found, idVendor=07b0, idProduct=0007, bcdDevice=1d.d8 [ 901.391203][ T51] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 901.463917][T14686] overlayfs: missing 'lowerdir' [ 901.494335][ T51] usb 2-1: Product: syz [ 901.541290][ T51] usb 2-1: Manufacturer: syz [ 901.582880][ T51] usb 2-1: SerialNumber: syz [ 902.034098][ T51] HFC-S_USB 2-1:4.138: probe with driver HFC-S_USB failed with error -5 [ 902.318868][ T51] usb 2-1: USB disconnect, device number 7 [ 903.290226][T14703] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 903.813921][ T5945] usb 9-1: new high-speed USB device number 5 using dummy_hcd [ 903.999950][ T5945] usb 9-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 904.032417][ T5945] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 904.646665][ T5945] usb 9-1: config 0 descriptor?? [ 904.685079][ T5945] cp210x 9-1:0.0: cp210x converter detected [ 904.808930][T14726] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2057'. [ 905.189772][ T5945] usb 9-1: cp210x converter now attached to ttyUSB0 [ 905.854507][ T5945] usb 9-1: USB disconnect, device number 5 [ 905.879561][ T5945] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 906.026269][ T5945] cp210x 9-1:0.0: device disconnected [ 906.233861][ T58] usb 3-1: new high-speed USB device number 7 using dummy_hcd [ 906.393682][ T58] usb 3-1: Using ep0 maxpacket: 32 [ 906.404443][ T58] usb 3-1: New USB device found, idVendor=174f, idProduct=6a31, bcdDevice=26.3f [ 906.423411][ T58] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 906.456636][ T58] usb 3-1: Product: syz [ 906.562479][ T58] usb 3-1: Manufacturer: syz [ 906.567519][ T58] usb 3-1: SerialNumber: syz [ 906.654675][ T58] gspca_main: stk1135-2.14.0 probing 174f:6a31 [ 906.854964][T14721] loop0: detected capacity change from 0 to 32768 [ 907.062653][T14721] XFS (loop0): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 907.541997][T14721] XFS (loop0): Ending clean mount [ 908.402467][ T58] gspca_stk1135: reg_w 0x7 err -110 [ 908.408900][ T58] gspca_stk1135: serial bus timeout: status=0x00 [ 908.415829][ T58] gspca_stk1135: Sensor write failed [ 908.421219][ T58] gspca_stk1135: serial bus timeout: status=0x00 [ 908.427677][ T58] gspca_stk1135: Sensor write failed [ 908.433062][ T58] gspca_stk1135: serial bus timeout: status=0x00 [ 908.439633][ T58] gspca_stk1135: Sensor read failed [ 908.444988][ T58] gspca_stk1135: serial bus timeout: status=0x00 [ 908.451389][ T58] gspca_stk1135: Sensor read failed [ 908.456837][ T58] gspca_stk1135: Detected sensor type unknown (0x0) [ 908.463543][ T58] gspca_stk1135: serial bus timeout: status=0x00 [ 908.470030][ T58] gspca_stk1135: Sensor read failed [ 908.475398][ T58] gspca_stk1135: serial bus timeout: status=0x00 [ 908.482626][ T58] gspca_stk1135: Sensor read failed [ 908.488690][ T58] gspca_stk1135: serial bus timeout: status=0x00 [ 908.495153][ T58] gspca_stk1135: Sensor write failed [ 908.500547][ T58] gspca_stk1135: serial bus timeout: status=0x00 [ 908.515008][ T58] gspca_stk1135: Sensor write failed [ 908.520362][ T58] stk1135 3-1:64.0: probe with driver stk1135 failed with error -110 [ 908.676082][ T58] usb 3-1: USB disconnect, device number 7 [ 908.737368][T14721] XFS (loop0): Quotacheck needed: Please wait. [ 910.883108][T14721] XFS (loop0): Quotacheck: Done. [ 911.900576][T11251] XFS (loop0): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 912.022722][T14818] netlink: 'syz.9.2081': attribute type 8 has an invalid length. [ 912.031075][T14818] netlink: 16 bytes leftover after parsing attributes in process `syz.9.2081'. [ 913.273744][ T5842] Bluetooth: hci2: unexpected event for opcode 0x1004 [ 913.284160][T14830] loop2: detected capacity change from 0 to 2048 [ 914.474812][ T5199] loop2: p1 < > p4 [ 914.627935][ T5199] loop2: p4 size 8388608 extends beyond EOD, truncated [ 914.822754][T14028] udevd[14028]: inotify_add_watch(7, /dev/loop2p4, 10) failed: No such file or directory [ 914.853896][T14027] udevd[14027]: inotify_add_watch(7, /dev/loop2p1, 10) failed: No such file or directory [ 916.616155][T14799] usb 10-1: new high-speed USB device number 7 using dummy_hcd [ 917.180015][T14870] new mount options do not match the existing superblock, will be ignored [ 917.754700][T14799] usb 10-1: device not accepting address 7, error -71 [ 917.809828][T14873] dvmrp1: entered allmulticast mode [ 920.063775][T14799] usb 10-1: new high-speed USB device number 8 using dummy_hcd [ 920.981135][T14799] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 920.992529][T14799] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 921.003449][T14799] usb 10-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 921.013023][T14799] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 921.032672][T14799] usb 10-1: config 0 descriptor?? [ 922.401335][ T51] usb 9-1: new high-speed USB device number 6 using dummy_hcd [ 922.653075][ T51] usb 9-1: Using ep0 maxpacket: 32 [ 922.891862][ T51] usb 9-1: New USB device found, idVendor=0ac8, idProduct=0321, bcdDevice=6f.be [ 922.902740][ T51] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 922.937385][ T51] usb 9-1: config 0 descriptor?? [ 922.981306][ T51] gspca_main: vc032x-2.14.0 probing 0ac8:0321 [ 923.019559][T14927] loop0: detected capacity change from 0 to 64 [ 923.351611][T14799] uclogic 0003:256C:006D.0002: v1 frame probing failed: -71 [ 923.387349][T14799] uclogic 0003:256C:006D.0002: failed probing parameters: -71 [ 923.449358][T14799] uclogic 0003:256C:006D.0002: probe with driver uclogic failed with error -71 [ 923.827935][ T51] gspca_vc032x: reg_w err -71 [ 923.848767][ T51] gspca_vc032x: I2c Bus Busy Wait 00 [ 923.876419][ T51] gspca_vc032x: I2c Bus Busy Wait 00 [ 923.883199][ T51] gspca_vc032x: I2c Bus Busy Wait 00 [ 923.905122][ T51] gspca_vc032x: I2c Bus Busy Wait 00 [ 923.910569][ T51] gspca_vc032x: I2c Bus Busy Wait 00 [ 923.921264][T14799] usb 10-1: USB disconnect, device number 8 [ 923.927242][ T51] gspca_vc032x: I2c Bus Busy Wait 00 [ 923.927260][ T51] gspca_vc032x: I2c Bus Busy Wait 00 [ 923.927322][ T51] gspca_vc032x: I2c Bus Busy Wait 00 [ 923.927372][ T51] gspca_vc032x: I2c Bus Busy Wait 00 [ 923.927387][ T51] gspca_vc032x: I2c Bus Busy Wait 00 [ 923.927439][ T51] gspca_vc032x: I2c Bus Busy Wait 00 [ 923.927523][ T51] gspca_vc032x: I2c Bus Busy Wait 00 [ 923.927575][ T51] gspca_vc032x: I2c Bus Busy Wait 00 [ 923.927657][ T51] gspca_vc032x: I2c Bus Busy Wait 00 [ 924.089148][ T51] gspca_vc032x: I2c Bus Busy Wait 00 [ 924.094878][ T51] gspca_vc032x: I2c Bus Busy Wait 00 [ 924.100188][ T51] gspca_vc032x: I2c Bus Busy Wait 00 [ 924.105798][ T51] gspca_vc032x: I2c Bus Busy Wait 00 [ 924.111120][ T51] gspca_vc032x: Unknown sensor... [ 924.116354][ T51] vc032x 9-1:0.0: probe with driver vc032x failed with error -22 [ 924.393862][ T51] usb 9-1: USB disconnect, device number 6 [ 926.250708][T14959] netlink: 28 bytes leftover after parsing attributes in process `syz.1.2116'. [ 926.261400][T14959] netlink: 'syz.1.2116': attribute type 12 has an invalid length. [ 927.325350][ T51] usb 3-1: new high-speed USB device number 8 using dummy_hcd [ 927.513749][ T51] usb 3-1: Using ep0 maxpacket: 8 [ 927.628956][ T51] usb 3-1: device descriptor read/all, error -71 [ 927.829410][T14974] loop0: detected capacity change from 0 to 256 [ 928.442794][T14974] exFAT-fs (loop0): failed to load upcase table (idx : 0x00010000, chksum : 0x205ad3fc, utbl_chksum : 0xe619d30d) [ 931.081216][T14998] lo speed is unknown, defaulting to 1000 [ 931.087206][T14998] lo speed is unknown, defaulting to 1000 [ 931.094195][T14998] lo speed is unknown, defaulting to 1000 [ 931.101965][T14998] iwpm_register_pid: Unable to send a nlmsg (client = 2) [ 931.115645][T14998] infiniband syz0: RDMA CMA: cma_listen_on_dev, error -98 [ 931.154121][ T1289] ieee802154 phy0 wpan0: encryption failed: -22 [ 932.258380][T14998] lo speed is unknown, defaulting to 1000 [ 932.265295][T14998] lo speed is unknown, defaulting to 1000 [ 932.271866][T14998] lo speed is unknown, defaulting to 1000 [ 932.278490][T14998] lo speed is unknown, defaulting to 1000 [ 932.285140][T14998] lo speed is unknown, defaulting to 1000 [ 932.291663][T14998] lo speed is unknown, defaulting to 1000 [ 932.299997][T14998] lo speed is unknown, defaulting to 1000 [ 932.306630][T14998] lo speed is unknown, defaulting to 1000 [ 932.313127][T14998] lo speed is unknown, defaulting to 1000 [ 932.547108][T15015] loop2: detected capacity change from 0 to 16 [ 932.700370][T15015] erofs (device loop2): mounted with root inode @ nid 36. [ 936.140667][T15064] No control pipe specified [ 938.194280][T15079] loop4: detected capacity change from 0 to 2048 [ 938.252355][T15079] CPU: 0 UID: 0 PID: 15079 Comm: syz.4.2149 Not tainted 6.13.0-rc3-syzkaller-00301-gbcde95ce32b6 #0 [ 938.263632][T15079] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 938.273731][T15079] Call Trace: [ 938.277028][T15079] [ 938.279980][T15079] dump_stack_lvl+0x241/0x360 [ 938.284712][T15079] ? __pfx_dump_stack_lvl+0x10/0x10 [ 938.289966][T15079] ? srso_alias_return_thunk+0x5/0xfbef5 [ 938.295645][T15079] ? rcu_is_watching+0x15/0xb0 [ 938.300457][T15079] ? srso_alias_return_thunk+0x5/0xfbef5 [ 938.306147][T15079] ? srso_alias_return_thunk+0x5/0xfbef5 [ 938.311809][T15079] ? kmem_cache_alloc_noprof+0x22d/0x380 [ 938.317493][T15079] nilfs_btree_last_key+0x5ac/0x720 [ 938.322750][T15079] nilfs_bmap_last_key+0x77/0x120 [ 938.327817][T15079] nilfs_truncate_bmap+0x129/0x3d0 [ 938.332971][T15079] ? srso_alias_return_thunk+0x5/0xfbef5 [ 938.338630][T15079] ? rcu_is_watching+0x15/0xb0 [ 938.343433][T15079] ? __pfx_nilfs_truncate_bmap+0x10/0x10 [ 938.349107][T15079] ? block_truncate_page+0x15c/0x800 [ 938.354436][T15079] ? srso_alias_return_thunk+0x5/0xfbef5 [ 938.360192][T15079] ? nilfs_transaction_begin+0x4fd/0x6e0 [ 938.365867][T15079] ? __pfx_nilfs_get_block+0x10/0x10 [ 938.371270][T15079] nilfs_truncate+0x28f/0x500 [ 938.375966][T15079] ? __pfx_nilfs_truncate+0x10/0x10 [ 938.381175][T15079] ? srso_alias_return_thunk+0x5/0xfbef5 [ 938.386817][T15079] ? truncate_setsize+0xcf/0xf0 [ 938.391699][T15079] nilfs_setattr+0x20e/0x2c0 [ 938.396331][T15079] ? __pfx_nilfs_setattr+0x10/0x10 [ 938.401485][T15079] ? evm_inode_setattr+0x1b2/0x7d0 [ 938.406640][T15079] ? srso_alias_return_thunk+0x5/0xfbef5 [ 938.412298][T15079] ? srso_alias_return_thunk+0x5/0xfbef5 [ 938.417955][T15079] ? __pfx_nilfs_setattr+0x10/0x10 [ 938.423111][T15079] notify_change+0xbcc/0xe90 [ 938.427755][T15079] do_truncate+0x220/0x310 [ 938.432208][T15079] ? __pfx_do_truncate+0x10/0x10 [ 938.437444][T15079] ? apparmor_file_truncate+0x297/0x350 [ 938.443062][T15079] path_openat+0x2e1e/0x3590 [ 938.447720][T15079] ? __pfx_path_openat+0x10/0x10 [ 938.452700][T15079] ? srso_alias_return_thunk+0x5/0xfbef5 [ 938.458386][T15079] do_filp_open+0x27f/0x4e0 [ 938.462936][T15079] ? __pfx_do_filp_open+0x10/0x10 [ 938.467994][T15079] ? do_raw_spin_lock+0x14f/0x370 [ 938.473098][T15079] do_sys_openat2+0x13e/0x1d0 [ 938.477834][T15079] ? __pfx_do_futex+0x10/0x10 [ 938.478884][T15085] NILFS (loop4): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 938.482525][T15079] ? __pfx_do_sys_openat2+0x10/0x10 [ 938.498275][T15079] __x64_sys_creat+0x123/0x170 [ 938.503096][T15079] ? __pfx___x64_sys_creat+0x10/0x10 [ 938.508437][T15079] ? do_syscall_64+0x100/0x230 [ 938.513263][T15079] ? do_syscall_64+0xb6/0x230 [ 938.517993][T15079] do_syscall_64+0xf3/0x230 [ 938.522548][T15079] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 938.528483][T15079] RIP: 0033:0x7f6912d85d29 [ 938.532921][T15079] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 938.552562][T15079] RSP: 002b:00007f6913b04038 EFLAGS: 00000246 ORIG_RAX: 0000000000000055 [ 938.561023][T15079] RAX: ffffffffffffffda RBX: 00007f6912f75fa0 RCX: 00007f6912d85d29 [ 938.569027][T15079] RDX: 0000000000000000 RSI: 0000000000000002 RDI: 0000000020000040 [ 938.577035][T15079] RBP: 00007f6912e01aa8 R08: 0000000000000000 R09: 0000000000000000 [ 938.585036][T15079] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 938.593032][T15079] R13: 0000000000000000 R14: 00007f6912f75fa0 R15: 00007ffce6f56758 [ 938.601058][T15079] [ 938.606619][T15079] NILFS (loop4): btree level mismatch (ino=16): 1 != 7 [ 938.613681][T15079] NILFS error (device loop4): nilfs_bmap_last_key: broken bmap (inode number=16) [ 938.674966][T15079] Remounting filesystem read-only [ 938.680070][T15079] NILFS (loop4): error -5 truncating bmap (ino=16) [ 938.732367][T15094] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2147'. [ 939.046669][T10347] NILFS (loop4): disposed unprocessed dirty file(s) when detaching log writer [ 939.279711][T15103] No control pipe specified [ 940.163136][T15089] loop9: detected capacity change from 0 to 32768 [ 940.685312][T15089] ocfs2: Slot 0 on device (7,9) was already allocated to this node! [ 940.942924][T15089] ocfs2: Mounting device (7,9) on (node local, slot 0) with ordered data mode. [ 941.285528][T15089] syz.9.2153 (15089) used greatest stack depth: 17464 bytes left [ 941.743892][ T8358] ocfs2: Unmounting device (7,9) on (node local) [ 942.480185][T15158] No control pipe specified [ 944.674394][ T58] usb 2-1: new high-speed USB device number 8 using dummy_hcd [ 944.707401][T15170] loop4: detected capacity change from 0 to 32768 [ 944.729851][T15170] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop4 (7:4) scanned by syz.4.2176 (15170) [ 944.792299][T15170] BTRFS info (device loop4): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 944.802878][T15170] BTRFS info (device loop4): using sha256 (sha256-ni) checksum algorithm [ 944.811468][T15170] BTRFS info (device loop4): using free-space-tree [ 944.884195][ T58] usb 2-1: Using ep0 maxpacket: 32 [ 944.892956][T11394] netdevsim netdevsim6 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 944.895443][ T58] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 944.951334][ T58] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 945.006065][ T58] usb 2-1: config 1 interface 0 altsetting 1 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 945.109957][ T58] usb 2-1: config 1 interface 0 has no altsetting 0 [ 945.148085][ T58] usb 2-1: New USB device found, idVendor=0e25, idProduct=a400, bcdDevice= 0.40 [ 945.169211][ T58] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 945.202462][ T58] usb 2-1: Product: syz [ 945.207542][ T58] usb 2-1: Manufacturer: syz [ 945.207697][T10347] BTRFS info (device loop4): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 945.212393][ T58] usb 2-1: SerialNumber: syz [ 945.235501][T11394] netdevsim netdevsim6 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 945.519343][ T58] cdc_mbim 2-1:1.0: probe with driver cdc_mbim failed with error -71 [ 945.536961][T11394] netdevsim netdevsim6 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 945.591302][ T58] usb 2-1: USB disconnect, device number 8 [ 945.711725][T15214] loop9: detected capacity change from 0 to 64 [ 945.833688][T15214] hfs: keylen 9474 too large [ 945.850935][T11394] netdevsim netdevsim6 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 945.858846][T15214] hfs: inconsistency in B*Tree (1,0,1,0,3) [ 945.919038][T15214] hfs: get root inode failed [ 946.528476][T11394] vlan2: left allmulticast mode [ 946.533393][T11394] gretap0: left allmulticast mode [ 946.538726][T11394] vlan2: left promiscuous mode [ 946.543522][T11394] gretap0: left promiscuous mode [ 946.696751][T11394] bridge0: port 3(vlan2) entered disabled state [ 947.222751][T11394] bridge_slave_1: left allmulticast mode [ 947.239377][T11394] bridge_slave_1: left promiscuous mode [ 947.303808][T11394] bridge0: port 2(bridge_slave_1) entered disabled state [ 947.541072][T11394] bridge_slave_0: left allmulticast mode [ 947.556592][T11394] bridge_slave_0: left promiscuous mode [ 948.277228][T11394] bridge0: port 1(bridge_slave_0) entered disabled state [ 948.904547][T15253] netlink: 12 bytes leftover after parsing attributes in process `syz.9.2189'. [ 949.072789][T15249] loop0: detected capacity change from 0 to 4096 [ 949.161698][T15249] ntfs3(loop0): Different NTFS sector size (4096) and media sector size (512). [ 950.150367][T15249] ntfs3(loop0): Mark volume as dirty due to NTFS errors [ 950.992084][T15273] loop4: detected capacity change from 0 to 2048 [ 951.240696][ T5842] Bluetooth: hci5: unexpected event for opcode 0x1004 [ 951.310426][T15271] loop0: detected capacity change from 0 to 32768 [ 951.355273][T15271] BTRFS: device fsid 14d642db-7b15-43e4-81e6-4b8fac6a25f8 devid 1 transid 8 /dev/loop0 (7:0) scanned by syz.0.2199 (15271) [ 951.358169][T15273] loop4: p1 < > p4 [ 951.377104][T15273] loop4: p4 size 8388608 extends beyond EOD, truncated [ 951.538606][T14031] udevd[14031]: inotify_add_watch(7, /dev/loop4p4, 10) failed: No such file or directory [ 951.560561][T15271] BTRFS info (device loop0): first mount of filesystem 14d642db-7b15-43e4-81e6-4b8fac6a25f8 [ 951.605082][T14028] udevd[14028]: inotify_add_watch(7, /dev/loop4p1, 10) failed: No such file or directory [ 951.613932][T15271] BTRFS info (device loop0): using blake2b (blake2b-256-generic) checksum algorithm [ 951.633817][T15271] BTRFS info (device loop0): using free-space-tree [ 953.561782][T15271] workqueue: Failed to create a rescuer kthread for wq "btrfs-flush_delalloc": -EINTR [ 953.563763][T15271] workqueue: Failed to create a rescuer kthread for wq "btrfs-cache": -EINTR [ 953.614650][T15271] workqueue: Failed to create a rescuer kthread for wq "btrfs-fixup": -EINTR [ 953.644128][T15271] workqueue: Failed to create a rescuer kthread for wq "btrfs-endio": -EINTR [ 953.663943][T15271] workqueue: Failed to create a rescuer kthread for wq "btrfs-endio-meta": -EINTR [ 953.698937][T15271] workqueue: Failed to create a rescuer kthread for wq "btrfs-rmw": -EINTR [ 953.734168][T15271] workqueue: Failed to create a rescuer kthread for wq "btrfs-endio-write": -EINTR [ 953.764145][T15271] workqueue: Failed to create a rescuer kthread for wq "btrfs-compressed-write": -EINTR [ 953.794040][T15271] workqueue: Failed to create a rescuer kthread for wq "btrfs-freespace-write": -EINTR [ 953.823980][T15271] workqueue: Failed to create a rescuer kthread for wq "btrfs-delayed-meta": -EINTR [ 953.846751][T15271] workqueue: Failed to create a rescuer kthread for wq "btrfs-qgroup-rescan": -EINTR [ 954.568478][T15295] loop4: detected capacity change from 0 to 32768 [ 954.743304][T15271] BTRFS error (device loop0): open_ctree failed [ 955.137239][T15295] bcachefs (loop4): starting version 1.7: mi_btree_bitmap opts=errors=continue,metadata_checksum=none,data_checksum=none,compression=lz4,nojournal_transaction_names [ 955.159714][T15295] bcachefs (loop4): initializing new filesystem [ 955.922909][T15319] llcp: nfc_llcp_send_ui_frame: Could not allocate PDU (error=-512) [ 956.103904][T15295] bcachefs (loop4): going read-write [ 956.216379][T15295] bcachefs (loop4): marking superblocks [ 956.321273][T15295] bcachefs (loop4): initializing freespace [ 956.334642][T15295] bcachefs (loop4): done initializing freespace [ 956.365159][T15295] bcachefs (loop4): reading snapshots table [ 956.373495][T15295] bcachefs (loop4): reading snapshots done [ 956.376690][T11394] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 956.439865][T11394] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 956.490812][T15295] bcachefs (loop4): done starting filesystem [ 956.556636][T11394] bond0 (unregistering): Released all slaves [ 958.442576][T15295] syz.4.2204 (15295) used greatest stack depth: 14000 bytes left [ 958.973748][T15356] overlayfs: missing 'lowerdir' [ 959.282107][T10347] bcachefs (loop4): shutting down [ 959.289771][T10347] bcachefs (loop4): going read-only [ 959.303774][T15352] mmap: syz.1.2214 (15352) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 959.603728][T10347] bcachefs (loop4): finished waiting for writes to stop [ 959.703444][T10347] bcachefs (loop4): flushing journal and stopping allocators, journal seq 4 [ 961.537541][T10347] bcachefs (loop4): flushing journal and stopping allocators complete, journal seq 13 [ 961.646428][T10347] bcachefs (loop4): shutdown complete, journal seq 14 [ 961.727379][T10347] bcachefs (loop4): marking filesystem clean [ 961.931770][T10347] bcachefs (loop4): shutdown complete [ 962.036543][T15382] hub 2-0:1.0: USB hub found [ 962.044493][T15382] hub 2-0:1.0: 1 port detected [ 962.498783][ T29] audit: type=1326 audit(1734913075.977:1307): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15372 comm="syz.9.2219" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fa1c8985d29 code=0x0 [ 963.305596][T15387] bridge0: port 3(vlan2) entered blocking state [ 963.623447][T15387] bridge0: port 3(vlan2) entered disabled state [ 964.062919][T15398] loop2: detected capacity change from 0 to 128 [ 964.074006][T15398] EXT4-fs (loop2): Test dummy encryption mode enabled [ 964.087406][T15387] vlan2: entered allmulticast mode [ 964.092573][T15387] dummy0: entered allmulticast mode [ 964.122051][T15398] EXT4-fs (loop2): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 964.125225][T15387] vlan2: entered promiscuous mode [ 964.143705][T15387] dummy0: entered promiscuous mode [ 964.149468][T15387] bridge0: port 3(vlan2) entered blocking state [ 964.155885][T15387] bridge0: port 3(vlan2) entered forwarding state [ 964.219777][T15398] ext4 filesystem being mounted at /412/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 964.458392][T11394] hsr_slave_0: left promiscuous mode [ 964.484833][T11394] hsr_slave_1: left promiscuous mode [ 964.970528][T11394] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 965.241936][T11394] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 965.887838][T11394] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 965.900770][T11394] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 965.926361][T15398] fscrypt: AES-256-CBC-CTS using implementation "cts-cbc-aes-aesni" [ 966.042378][T11394] veth1_macvtap: left promiscuous mode [ 966.593960][T11394] veth0_macvtap: left promiscuous mode [ 966.872252][T11394] veth1_vlan: left promiscuous mode [ 966.941171][T11394] veth0_vlan: left promiscuous mode [ 967.171359][ T5828] EXT4-fs (loop2): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 970.193947][T11394] team0 (unregistering): Port device team_slave_1 removed [ 970.785290][T11394] team0 (unregistering): Port device team_slave_0 removed [ 972.498196][T15427] tc_dump_action: action bad kind [ 975.740489][ T5849] Bluetooth: hci2: unexpected event for opcode 0x0c57 [ 977.085329][T15498] loop4: detected capacity change from 0 to 1024 [ 977.135911][T15498] EXT4-fs: Ignoring removed nobh option [ 977.143778][T15498] EXT4-fs: Ignoring removed bh option [ 977.370934][T15498] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 977.458045][T15498] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 980.063297][T15540] openvswitch: netlink: Flow actions attr not present in new flow. [ 983.513923][T14799] usb 2-1: new high-speed USB device number 9 using dummy_hcd [ 983.683989][T14799] usb 2-1: Using ep0 maxpacket: 32 [ 983.693497][T14799] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 983.714937][T14799] usb 2-1: New USB device found, idVendor=08ca, idProduct=2060, bcdDevice=c6.58 [ 983.724275][T14799] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 983.743737][T14799] usb 2-1: Product: syz [ 983.748588][T14799] usb 2-1: Manufacturer: syz [ 983.753903][T14799] usb 2-1: SerialNumber: syz [ 983.763915][T14799] usb 2-1: config 0 descriptor?? [ 983.773992][T14799] gspca_main: sunplus-2.14.0 probing 08ca:2060 [ 983.911375][T15592] openvswitch: netlink: Flow actions attr not present in new flow. [ 986.423775][T14799] gspca_sunplus: reg_w_1 err -71 [ 986.428935][T14799] sunplus 2-1:0.0: probe with driver sunplus failed with error -71 [ 986.533835][T14799] usb 2-1: USB disconnect, device number 9 [ 986.923821][ T5891] usb 10-1: new high-speed USB device number 9 using dummy_hcd [ 987.101127][ T5891] usb 10-1: Using ep0 maxpacket: 8 [ 987.121247][ T5891] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 987.416491][ T5891] usb 10-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 987.625622][ T5891] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 987.695802][ T5891] usb 10-1: config 0 descriptor?? [ 987.918131][ T5891] iowarrior 10-1:0.0: IOWarrior product=0x1512, serial= interface=0 now attached to iowarrior0 [ 989.047954][ T970] usb 10-1: USB disconnect, device number 9 [ 989.273985][T15641] openvswitch: netlink: Flow key attr not present in new flow. [ 990.925484][T15656] overlay: Unknown parameter './bus' [ 991.290515][T15660] netlink: 28 bytes leftover after parsing attributes in process `syz.2.2291'. [ 991.330303][T15660] netlink: 28 bytes leftover after parsing attributes in process `syz.2.2291'. [ 992.497736][ T1289] ieee802154 phy0 wpan0: encryption failed: -22 [ 994.067300][T15694] openvswitch: netlink: Flow key attr not present in new flow. [ 994.131817][T15696] loop9: detected capacity change from 0 to 1024 [ 994.603836][T15696] EXT4-fs (loop9): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 995.508027][T15696] EXT4-fs (loop9): revision level too high, forcing read-only mode [ 995.530162][T15696] EXT4-fs (loop9): too many log groups per flexible block group [ 995.538367][T15696] EXT4-fs (loop9): failed to initialize mballoc (-12) [ 995.545630][T15696] EXT4-fs (loop9): mount failed [ 996.489885][ T51] usb 2-1: new high-speed USB device number 10 using dummy_hcd [ 996.547183][T15727] overlayfs: missing 'lowerdir' [ 996.921220][ T51] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 996.936057][ T51] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 997.281400][ T51] usb 2-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 997.305418][ T51] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 997.356640][ T51] usb 2-1: config 0 descriptor?? [ 998.142848][T15748] openvswitch: netlink: Flow key attr not present in new flow. [ 998.928232][ T51] input: HID 256c:006d Pen as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/0003:256C:006D.0003/input/input9 [ 999.008424][ T51] input: HID 256c:006d Pad as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/0003:256C:006D.0003/input/input10 [ 999.044780][ T5835] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 999.059898][ T5835] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 999.070375][ T5835] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 999.083714][ T5835] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 999.094845][ T5835] Bluetooth: hci6: unexpected cc 0x0c25 length: 249 > 3 [ 999.103157][ T5835] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 999.181472][ T51] input: HID 256c:006d Touch Strip as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/0003:256C:006D.0003/input/input11 [ 999.339006][ T51] input: HID 256c:006d Dial as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/0003:256C:006D.0003/input/input12 [ 999.373983][ T51] uclogic 0003:256C:006D.0003: input,hidraw0: USB HID v0.00 Keypad [HID 256c:006d] on usb-dummy_hcd.1-1/input0 [ 999.908055][T15780] loop4: detected capacity change from 0 to 64 [ 1000.753858][T15764] lo speed is unknown, defaulting to 1000 [ 1001.937668][ T5849] Bluetooth: hci6: command tx timeout [ 1002.572196][T15622] usb 2-1: USB disconnect, device number 10 [ 1004.014158][ T5849] Bluetooth: hci6: command tx timeout [ 1004.241677][T15764] chnl_net:caif_netlink_parms(): no params data found [ 1006.094245][T15821] netlink: 4 bytes leftover after parsing attributes in process `syz.9.2328'. [ 1006.213687][ T5849] Bluetooth: hci6: command tx timeout [ 1007.787062][ T2903] netdevsim netdevsim8 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1008.959917][ T5849] Bluetooth: hci6: command tx timeout [ 1009.584503][T15849] overlayfs: missing 'lowerdir' [ 1009.724549][T15858] overlayfs: missing 'lowerdir' [ 1010.449862][T15866] loop9: detected capacity change from 0 to 64 [ 1010.921334][T15764] bridge0: port 1(bridge_slave_0) entered blocking state [ 1010.933094][T15764] bridge0: port 1(bridge_slave_0) entered disabled state [ 1010.961785][T15764] bridge_slave_0: entered allmulticast mode [ 1011.545895][T15764] bridge_slave_0: entered promiscuous mode [ 1011.583482][T15764] bridge0: port 2(bridge_slave_1) entered blocking state [ 1011.630534][T15764] bridge0: port 2(bridge_slave_1) entered disabled state [ 1011.667914][T15764] bridge_slave_1: entered allmulticast mode [ 1011.721007][T15764] bridge_slave_1: entered promiscuous mode [ 1012.226231][ T2903] netdevsim netdevsim8 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1012.412549][ T2903] netdevsim netdevsim8 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1012.587730][ T2903] netdevsim netdevsim8 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1013.077391][T15764] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1013.276658][T15764] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1013.764352][T15764] team0: Port device team_slave_0 added [ 1013.798317][T15764] team0: Port device team_slave_1 added [ 1013.929935][T15874] loop2: detected capacity change from 0 to 65536 [ 1013.937523][T15874] XFS: noikeep mount option is deprecated. [ 1014.186665][T15874] XFS (loop2): Mounting V5 Filesystem 9b7348e5-2fa0-41a5-9526-c53a678b01f3 [ 1014.257344][ T2903] bridge_slave_1: left allmulticast mode [ 1014.265339][ T2903] bridge_slave_1: left promiscuous mode [ 1014.273855][ T2903] bridge0: port 2(bridge_slave_1) entered disabled state [ 1014.337027][ T2903] bridge_slave_0: left allmulticast mode [ 1014.357598][ T2903] bridge_slave_0: left promiscuous mode [ 1014.382001][ T2903] bridge0: port 1(bridge_slave_0) entered disabled state [ 1014.394580][T15874] XFS (loop2): Ending clean mount [ 1014.405096][T15874] XFS (loop2): Quotacheck needed: Please wait. [ 1014.481180][T15874] XFS (loop2): Quotacheck: Done. [ 1015.378095][T15902] Falling back ldisc for ptm0. [ 1016.343693][ T2903] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1016.418552][ T2903] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1016.456365][ T2903] bond0 (unregistering): Released all slaves [ 1016.573871][T15764] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1016.608465][T15764] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1016.679127][ T2903] IPVS: stopping master sync thread 14628 ... [ 1016.709733][ T2903] IPVS: stopping master sync thread 14626 ... [ 1016.730648][ T2903] IPVS: stopping master sync thread 14624 ... [ 1016.749825][ T2903] IPVS: stopping master sync thread 14622 ... [ 1016.786041][T15764] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1016.852125][T15764] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1016.859086][T15764] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1016.942666][T15764] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1017.224584][ T5828] XFS (loop2): Unmounting Filesystem 9b7348e5-2fa0-41a5-9526-c53a678b01f3 [ 1017.368069][T15764] hsr_slave_0: entered promiscuous mode [ 1017.471576][T15764] hsr_slave_1: entered promiscuous mode [ 1017.493062][T15764] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1017.529667][T15764] Cannot create hsr debugfs directory [ 1020.250613][ T2903] hsr_slave_0: left promiscuous mode [ 1020.262397][ T2903] hsr_slave_1: left promiscuous mode [ 1020.294142][ T2903] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1020.319487][ T2903] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1020.364314][ T2903] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1020.427680][ T2903] veth1_macvtap: left promiscuous mode [ 1020.456195][ T2903] veth0_macvtap: left promiscuous mode [ 1020.473061][ T2903] veth1_vlan: left promiscuous mode [ 1020.493952][ T2903] veth0_vlan: left promiscuous mode [ 1024.239062][ T5849] Bluetooth: hci2: unexpected event for opcode 0x203c [ 1025.073222][T15957] loop2: detected capacity change from 0 to 2048 [ 1025.135880][ T5835] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 1025.147223][ T5835] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 1025.163804][ T5835] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 1025.172306][ T5835] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 1025.180036][ T5835] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 1025.189965][ T5835] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 1025.222658][T15960] NILFS (loop2): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 1025.262682][ T2903] team0 (unregistering): Port device team_slave_1 removed [ 1025.343450][T15957] NILFS error (device loop2): nilfs_bmap_lookup_contig: broken bmap (inode number=16) [ 1025.383465][T15961] overlay: ./file2 is not a directory [ 1025.431108][T15957] Remounting filesystem read-only [ 1025.450884][ T2903] team0 (unregistering): Port device team_slave_0 removed [ 1025.471840][T15957] NILFS error (device loop2): nilfs_bmap_lookup_contig: broken bmap (inode number=16) [ 1025.515229][T15957] NILFS error (device loop2): nilfs_bmap_lookup_contig: broken bmap (inode number=16) [ 1025.561694][T15957] NILFS error (device loop2): nilfs_bmap_lookup_contig: broken bmap (inode number=16) [ 1025.613086][T15957] NILFS error (device loop2): nilfs_bmap_lookup_contig: broken bmap (inode number=16) [ 1025.658466][T15957] NILFS error (device loop2): nilfs_bmap_lookup_contig: broken bmap (inode number=16) [ 1025.713141][T15957] NILFS error (device loop2): nilfs_bmap_lookup_contig: broken bmap (inode number=16) [ 1025.753198][T15957] NILFS error (device loop2): nilfs_bmap_lookup_contig: broken bmap (inode number=16) [ 1025.804269][ T29] audit: type=1800 audit(1734913138.993:1308): pid=15957 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.2357" name="file3" dev="loop2" ino=16 res=0 errno=0 [ 1026.818013][ T5891] lo speed is unknown, defaulting to 1000 [ 1027.358890][ T5849] Bluetooth: hci0: command tx timeout [ 1029.988844][ T5849] Bluetooth: hci0: command tx timeout [ 1030.563400][ T5835] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 1030.573227][ T5835] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 1030.584248][ T5835] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 1030.592224][ T5835] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 1030.600179][ T5835] Bluetooth: hci7: unexpected cc 0x0c25 length: 249 > 3 [ 1030.611137][ T5835] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 1030.983144][T16003] Bluetooth: hci8: unexpected cc 0x0c03 length: 249 > 1 [ 1030.992638][T16003] Bluetooth: hci8: unexpected cc 0x1003 length: 249 > 9 [ 1031.000764][T16003] Bluetooth: hci8: unexpected cc 0x1001 length: 249 > 9 [ 1031.010330][T16003] Bluetooth: hci8: unexpected cc 0x0c23 length: 249 > 4 [ 1031.017802][T16003] Bluetooth: hci8: unexpected cc 0x0c25 length: 249 > 3 [ 1031.025120][T16003] Bluetooth: hci8: unexpected cc 0x0c38 length: 249 > 2 [ 1032.722789][ T5835] Bluetooth: hci0: command tx timeout [ 1032.892885][T15991] chnl_net:caif_netlink_parms(): no params data found [ 1033.003473][ T5835] Bluetooth: hci7: command tx timeout [ 1033.260006][ T5835] Bluetooth: hci8: command tx timeout [ 1034.807842][T15958] chnl_net:caif_netlink_parms(): no params data found [ 1034.885475][T16003] Bluetooth: hci0: command tx timeout [ 1035.229425][T16003] Bluetooth: hci7: command tx timeout [ 1035.648244][T16003] Bluetooth: hci8: command tx timeout [ 1036.941299][T16003] Bluetooth: hci4: command 0x0406 tx timeout [ 1036.988307][T15991] bridge0: port 1(bridge_slave_0) entered blocking state [ 1036.999416][T15991] bridge0: port 1(bridge_slave_0) entered disabled state [ 1037.008097][T15991] bridge_slave_0: entered allmulticast mode [ 1037.015483][T15991] bridge_slave_0: entered promiscuous mode [ 1037.023735][T15991] bridge0: port 2(bridge_slave_1) entered blocking state [ 1037.030971][T15991] bridge0: port 2(bridge_slave_1) entered disabled state [ 1037.039717][T15991] bridge_slave_1: entered allmulticast mode [ 1037.051511][T15991] bridge_slave_1: entered promiscuous mode [ 1037.067954][T16055] loop2: detected capacity change from 0 to 512 [ 1037.267210][T16055] Quota error (device loop2): do_check_range: Getting dqdh_prev_free 1536 out of range 0-5 [ 1037.356254][T16055] Quota error (device loop2): qtree_write_dquot: Error -117 occurred while creating quota [ 1037.376199][T16055] EXT4-fs error (device loop2): ext4_acquire_dquot:6938: comm syz.2.2376: Failed to acquire dquot type 1 [ 1037.406422][T16055] EXT4-fs (loop2): 1 truncate cleaned up [ 1037.451750][ T5835] Bluetooth: hci7: command tx timeout [ 1037.585964][T15991] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1037.738125][T16055] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1037.884661][ T5835] Bluetooth: hci8: command tx timeout [ 1037.973406][T16055] ext4 filesystem being mounted at /449/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 1038.041549][T15991] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1038.292748][T15958] bridge0: port 1(bridge_slave_0) entered blocking state [ 1038.314725][T15958] bridge0: port 1(bridge_slave_0) entered disabled state [ 1038.558616][T15958] bridge_slave_0: entered allmulticast mode [ 1038.669758][T15958] bridge_slave_0: entered promiscuous mode [ 1038.707733][T15958] bridge0: port 2(bridge_slave_1) entered blocking state [ 1038.734826][T15958] bridge0: port 2(bridge_slave_1) entered disabled state [ 1038.763766][T15958] bridge_slave_1: entered allmulticast mode [ 1038.795931][T15958] bridge_slave_1: entered promiscuous mode [ 1038.839955][T15991] team0: Port device team_slave_0 added [ 1038.859142][T15991] team0: Port device team_slave_1 added [ 1039.016437][ T5828] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1039.120337][T15958] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1039.174203][T15991] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1039.197394][T15991] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1039.256919][T16085] overlayfs: statfs failed on './file0' [ 1039.283896][T15991] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1039.325094][T15991] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1039.340710][T15991] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1039.382485][T15991] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1039.464564][T15958] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1039.641341][T15958] team0: Port device team_slave_0 added [ 1039.674957][ T5835] Bluetooth: hci7: command tx timeout [ 1039.682400][T15958] team0: Port device team_slave_1 added [ 1040.097839][T15991] hsr_slave_0: entered promiscuous mode [ 1040.104844][ T5835] Bluetooth: hci8: command tx timeout [ 1040.187215][T15991] hsr_slave_1: entered promiscuous mode [ 1041.192517][T15991] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1041.200109][T15991] Cannot create hsr debugfs directory [ 1041.279771][T15996] chnl_net:caif_netlink_parms(): no params data found [ 1041.311973][T15958] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1041.327716][T15958] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1041.376226][T15958] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1042.388674][T15958] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1042.396340][T15958] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1042.454712][T15958] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1042.473388][T16111] input: syz1 as /devices/virtual/input/input13 [ 1043.032622][T15958] hsr_slave_0: entered promiscuous mode [ 1043.085041][T15958] hsr_slave_1: entered promiscuous mode [ 1043.140368][T15958] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1043.147994][T15958] Cannot create hsr debugfs directory [ 1044.646678][T15996] bridge0: port 1(bridge_slave_0) entered blocking state [ 1044.667468][T15996] bridge0: port 1(bridge_slave_0) entered disabled state [ 1044.903368][T15996] bridge_slave_0: entered allmulticast mode [ 1044.913916][T15996] bridge_slave_0: entered promiscuous mode [ 1046.098080][T15996] bridge0: port 2(bridge_slave_1) entered blocking state [ 1046.126485][T15996] bridge0: port 2(bridge_slave_1) entered disabled state [ 1046.189687][T15996] bridge_slave_1: entered allmulticast mode [ 1046.219381][T15996] bridge_slave_1: entered promiscuous mode [ 1046.713148][T11394] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1046.828755][T15996] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1046.910815][T11394] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1046.980443][T15996] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1048.097974][T11394] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1048.527008][T15996] team0: Port device team_slave_0 added [ 1048.724255][T11394] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1048.848642][T15996] team0: Port device team_slave_1 added [ 1049.076749][T16177] syz.2.2399: attempt to access beyond end of device [ 1049.076749][T16177] nbd2: rw=0, sector=64, nr_sectors = 1 limit=0 [ 1049.107368][T16177] syz.2.2399: attempt to access beyond end of device [ 1049.107368][T16177] nbd2: rw=0, sector=256, nr_sectors = 1 limit=0 [ 1049.179588][T16177] UDF-fs: error (device nbd2): udf_read_tagged: read failed, block=256, location=256 [ 1049.511426][T15996] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1049.518617][T15996] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1049.545060][T16177] getblk(): invalid block size 512 requested [ 1049.716802][T16181] block nbd2: shutting down sockets [ 1049.741217][T15996] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1049.755675][T16183] nbd2: detected capacity change from 0 to 67108884 [ 1049.799649][T16177] logical block size: 1024 [ 1049.804096][T16177] CPU: 0 UID: 0 PID: 16177 Comm: syz.2.2399 Not tainted 6.13.0-rc3-syzkaller-00301-gbcde95ce32b6 #0 [ 1049.814893][T16177] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 1049.824947][T16177] Call Trace: [ 1049.828220][T16177] [ 1049.831148][T16177] dump_stack_lvl+0x241/0x360 [ 1049.835924][T16177] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1049.841130][T16177] ? __pfx__printk+0x10/0x10 [ 1049.845754][T16177] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1049.851384][T16177] ? _udf_err+0x13b/0x190 [ 1049.855720][T16177] bdev_getblk+0x59c/0x670 [ 1049.860140][T16177] ? kmem_cache_free+0x30e/0x410 [ 1049.865172][T16177] ? __bread_gfp+0x23c/0x400 [ 1049.869942][T16177] __bread_gfp+0x86/0x400 [ 1049.874278][T16177] udf_read_tagged+0xa6/0xe00 [ 1049.878963][T16177] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1049.884625][T16177] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1049.890269][T16177] ? __pfx_call_rcu+0x10/0x10 [ 1049.895650][T16177] udf_check_anchor_block+0xba/0x550 [ 1049.900935][T16177] ? __phys_addr+0xba/0x170 [ 1049.905438][T16177] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1049.911065][T16177] ? udf_get_last_block+0x2e7/0x3b0 [ 1049.916305][T16177] ? __pfx_udf_check_anchor_block+0x10/0x10 [ 1049.922241][T16177] ? __bread_gfp+0x23c/0x400 [ 1049.926844][T16177] udf_load_vrs+0xc3d/0x1130 [ 1049.931457][T16177] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1049.937097][T16177] ? __pfx_udf_load_vrs+0x10/0x10 [ 1049.942142][T16177] ? udf_get_last_session+0x121/0x2d0 [ 1049.947518][T16177] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1049.953151][T16177] ? __raw_spin_lock_init+0x45/0x100 [ 1049.958452][T16177] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1049.964097][T16177] udf_fill_super+0x5eb/0x1ed0 [ 1049.968877][T16177] ? __pfx_udf_fill_super+0x10/0x10 [ 1049.974102][T16177] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1049.979736][T16177] ? set_blocksize+0x1fc/0x360 [ 1049.984506][T16177] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1049.990138][T16177] ? sb_set_blocksize+0x98/0xf0 [ 1049.994996][T16177] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1050.000633][T16177] ? setup_bdev_super+0x4e6/0x5d0 [ 1050.005674][T16177] get_tree_bdev_flags+0x48e/0x5c0 [ 1050.010880][T16177] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1050.016521][T16177] ? __pfx_udf_fill_super+0x10/0x10 [ 1050.021724][T16177] ? __pfx_get_tree_bdev_flags+0x10/0x10 [ 1050.027359][T16177] ? apparmor_capable+0x13b/0x1b0 [ 1050.032393][T16177] vfs_get_tree+0x92/0x2b0 [ 1050.036817][T16177] do_new_mount+0x2be/0xb40 [ 1050.041324][T16177] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1050.046960][T16177] ? __pfx_do_new_mount+0x10/0x10 [ 1050.052000][T16177] __se_sys_mount+0x2d6/0x3c0 [ 1050.056683][T16177] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 1050.062666][T16177] ? __pfx___se_sys_mount+0x10/0x10 [ 1050.067870][T16177] ? do_syscall_64+0x100/0x230 [ 1050.072641][T16177] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1050.078272][T16177] ? __x64_sys_mount+0x20/0xc0 [ 1050.083047][T16177] do_syscall_64+0xf3/0x230 [ 1050.087565][T16177] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1050.093465][T16177] RIP: 0033:0x7f4ee1585d29 [ 1050.097877][T16177] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1050.117497][T16177] RSP: 002b:00007f4ee2352038 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 1050.126365][T16177] RAX: ffffffffffffffda RBX: 00007f4ee1775fa0 RCX: 00007f4ee1585d29 [ 1050.134606][T16177] RDX: 0000000020000040 RSI: 0000000020004a00 RDI: 0000000020000000 [ 1050.142579][T16177] RBP: 00007f4ee1601aa8 R08: 0000000000000000 R09: 0000000000000000 [ 1050.150551][T16177] R10: 0000000000008007 R11: 0000000000000246 R12: 0000000000000000 [ 1050.158525][T16177] R13: 0000000000000000 R14: 00007f4ee1775fa0 R15: 00007fff90b2f868 [ 1050.166523][T16177] [ 1050.200110][T15764] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 1050.292615][T16177] UDF-fs: error (device nbd2): udf_read_tagged: read failed, block=512, location=512 [ 1050.399783][ T10] I/O error, dev nbd2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 4 prio class 0 [ 1050.410044][ T10] Buffer I/O error on dev nbd2, logical block 0, async page read [ 1050.417993][ T10] Buffer I/O error on dev nbd2, logical block 1, async page read [ 1050.428035][ T10] Buffer I/O error on dev nbd2, logical block 2, async page read [ 1050.437965][ T10] Buffer I/O error on dev nbd2, logical block 3, async page read [ 1050.449506][ T10] I/O error, dev nbd2, sector 64 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 1050.455023][T14027] I/O error, dev nbd2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 1050.472375][T16177] I/O error, dev nbd2, sector 512 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 1050.482130][T16177] UDF-fs: error (device nbd2): udf_read_tagged: read failed, block=256, location=256 [ 1050.504359][T14027] Buffer I/O error on dev nbd2, logical block 0, async page read [ 1050.512565][T14027] I/O error, dev nbd2, sector 2 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 1050.611287][T16177] I/O error, dev nbd2, sector 67108882 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 1050.621333][T16177] UDF-fs: error (device nbd2): udf_read_tagged: read failed, block=33554441, location=33554441 [ 1050.632457][T14027] Buffer I/O error on dev nbd2, logical block 1, async page read [ 1050.662670][T16177] I/O error, dev nbd2, sector 67108370 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 1050.664870][T14027] I/O error, dev nbd2, sector 4 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 1050.692170][T15996] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1050.702702][T14027] Buffer I/O error on dev nbd2, logical block 2, async page read [ 1050.718017][T15996] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1050.745753][T16177] UDF-fs: error (device nbd2): udf_read_tagged: read failed, block=33554185, location=33554185 [ 1050.750016][T14027] I/O error, dev nbd2, sector 6 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 1050.788906][T14027] Buffer I/O error on dev nbd2, logical block 3, async page read [ 1050.804142][T15996] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1050.809082][T14027] I/O error, dev nbd2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 1050.834908][T16177] UDF-fs: error (device nbd2): udf_read_tagged: read failed, block=33554440, location=33554440 [ 1050.845395][T14027] Buffer I/O error on dev nbd2, logical block 0, async page read [ 1050.845583][T14027] Buffer I/O error on dev nbd2, logical block 1, async page read [ 1050.848832][T14027] ldm_validate_partition_table(): Disk read failed. [ 1050.887408][T14027] Dev nbd2: unable to read RDB block 0 [ 1050.901945][T14027] nbd2: unable to read partition table [ 1050.908956][T16177] UDF-fs: error (device nbd2): udf_read_tagged: read failed, block=33554184, location=33554184 [ 1050.957832][T14027] ldm_validate_partition_table(): Disk read failed. [ 1050.975723][T14027] Dev nbd2: unable to read RDB block 0 [ 1050.982601][T16177] UDF-fs: error (device nbd2): udf_read_tagged: read failed, block=33554439, location=33554439 [ 1050.991265][T14027] nbd2: unable to read partition table [ 1051.009412][T14027] ldm_validate_partition_table(): Disk read failed. [ 1051.019218][T14027] Dev nbd2: unable to read RDB block 0 [ 1051.026260][T14027] nbd2: unable to read partition table [ 1051.060972][T14027] ldm_validate_partition_table(): Disk read failed. [ 1051.070165][T14027] Dev nbd2: unable to read RDB block 0 [ 1051.089405][T14027] nbd2: unable to read partition table [ 1051.100080][T16177] UDF-fs: error (device nbd2): udf_read_tagged: read failed, block=33554183, location=33554183 [ 1051.111984][T16177] UDF-fs: error (device nbd2): udf_read_tagged: read failed, block=33554291, location=33554291 [ 1051.127958][T15764] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 1051.139851][T16177] UDF-fs: error (device nbd2): udf_read_tagged: read failed, block=33554035, location=33554035 [ 1051.156174][T14799] usb 2-1: new high-speed USB device number 11 using dummy_hcd [ 1051.164898][T15764] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 1051.174895][T16177] UDF-fs: error (device nbd2): udf_read_tagged: read failed, block=33554289, location=33554289 [ 1051.192664][T16177] UDF-fs: error (device nbd2): udf_read_tagged: read failed, block=33554033, location=33554033 [ 1051.208436][T15764] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 1051.242469][T16177] UDF-fs: error (device nbd2): udf_read_tagged: read failed, block=512, location=512 [ 1051.292630][T16177] UDF-fs: error (device nbd2): udf_read_tagged: read failed, block=256, location=256 [ 1051.339678][T14799] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1051.353708][T14799] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1051.365730][T16177] UDF-fs: error (device nbd2): udf_read_tagged: read failed, block=16777220, location=16777220 [ 1051.386554][T14799] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 1051.410915][T14799] usb 2-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 1051.432638][T14799] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1051.442760][T16177] UDF-fs: error (device nbd2): udf_read_tagged: read failed, block=16776964, location=16776964 [ 1051.461644][T14799] usb 2-1: config 0 descriptor?? [ 1051.481213][T15996] hsr_slave_0: entered promiscuous mode [ 1051.496030][T16177] UDF-fs: error (device nbd2): udf_read_tagged: read failed, block=16777219, location=16777219 [ 1051.507934][T15996] hsr_slave_1: entered promiscuous mode [ 1051.515023][T15996] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1051.523474][T15996] Cannot create hsr debugfs directory [ 1051.573452][T16177] UDF-fs: error (device nbd2): udf_read_tagged: read failed, block=16776963, location=16776963 [ 1051.626547][T16177] UDF-fs: error (device nbd2): udf_read_tagged: read failed, block=16777218, location=16777218 [ 1051.675595][T16177] UDF-fs: error (device nbd2): udf_read_tagged: read failed, block=16776962, location=16776962 [ 1051.698204][T16177] UDF-fs: error (device nbd2): udf_read_tagged: read failed, block=16777070, location=16777070 [ 1051.711748][T11394] vlan2: left allmulticast mode [ 1051.717228][T11394] batadv0: left allmulticast mode [ 1051.722359][T11394] vlan2: left promiscuous mode [ 1051.727293][T11394] batadv0: left promiscuous mode [ 1051.732516][T11394] bridge0: port 3(vlan2) entered disabled state [ 1051.761270][T16177] UDF-fs: error (device nbd2): udf_read_tagged: read failed, block=16776814, location=16776814 [ 1051.780323][T11394] bridge_slave_1: left allmulticast mode [ 1051.786065][T11394] bridge_slave_1: left promiscuous mode [ 1051.794249][T16177] UDF-fs: error (device nbd2): udf_read_tagged: read failed, block=16777068, location=16777068 [ 1051.805021][T11394] bridge0: port 2(bridge_slave_1) entered disabled state [ 1051.812788][T16177] UDF-fs: error (device nbd2): udf_read_tagged: read failed, block=16776812, location=16776812 [ 1051.825521][T11394] bridge_slave_0: left allmulticast mode [ 1051.831312][T11394] bridge_slave_0: left promiscuous mode [ 1051.837082][T11394] bridge0: port 1(bridge_slave_0) entered disabled state [ 1051.845353][T16177] UDF-fs: error (device nbd2): udf_read_tagged: read failed, block=512, location=512 [ 1051.860521][T16177] UDF-fs: error (device nbd2): udf_read_tagged: read failed, block=256, location=256 [ 1051.892102][T16177] UDF-fs: error (device nbd2): udf_read_tagged: read failed, block=8388609, location=8388609 [ 1051.935981][T16177] UDF-fs: error (device nbd2): udf_read_tagged: read failed, block=8388353, location=8388353 [ 1051.977257][T14799] plantronics 0003:047F:FFFF.0004: unknown main item tag 0x0 [ 1051.986541][T16177] UDF-fs: error (device nbd2): udf_read_tagged: read failed, block=8388608, location=8388608 [ 1051.998641][T14799] plantronics 0003:047F:FFFF.0004: No inputs registered, leaving [ 1052.042906][T16177] UDF-fs: error (device nbd2): udf_read_tagged: read failed, block=8388352, location=8388352 [ 1052.083323][T16177] UDF-fs: error (device nbd2): udf_read_tagged: read failed, block=8388607, location=8388607 [ 1052.095590][T14799] plantronics 0003:047F:FFFF.0004: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.1-1/input0 [ 1052.174021][T16177] UDF-fs: error (device nbd2): udf_read_tagged: read failed, block=8388351, location=8388351 [ 1052.245887][T16177] UDF-fs: error (device nbd2): udf_read_tagged: read failed, block=8388459, location=8388459 [ 1052.271050][T16177] UDF-fs: error (device nbd2): udf_read_tagged: read failed, block=8388203, location=8388203 [ 1052.284086][T16177] UDF-fs: error (device nbd2): udf_read_tagged: read failed, block=8388457, location=8388457 [ 1052.297173][T16177] UDF-fs: error (device nbd2): udf_read_tagged: read failed, block=8388201, location=8388201 [ 1052.308017][T16177] UDF-fs: error (device nbd2): udf_read_tagged: read failed, block=512, location=512 [ 1052.325135][T16177] UDF-fs: warning (device nbd2): udf_fill_super: No partition found (1) [ 1053.731721][T11394] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1053.770875][T11394] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1053.797955][T11394] bond0 (unregistering): Released all slaves [ 1053.957396][T11394] tipc: Disabling bearer [ 1053.985309][T11394] tipc: Left network mode [ 1054.642196][T16203] loop2: detected capacity change from 0 to 2048 [ 1054.700877][T16203] loop2: p1 < > p4 [ 1054.712167][T16203] loop2: p4 size 8388608 extends beyond EOD, truncated [ 1054.841999][ T5199] loop2: p1 < > p4 [ 1054.855459][ T5199] loop2: p4 size 8388608 extends beyond EOD, truncated [ 1055.058586][ T5893] usb 2-1: USB disconnect, device number 11 [ 1056.594261][T15764] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1056.612039][ T1289] ieee802154 phy0 wpan0: encryption failed: -22 [ 1056.655830][T11394] hsr_slave_0: left promiscuous mode [ 1056.663524][T11394] hsr_slave_1: left promiscuous mode [ 1056.678653][T11394] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1056.688251][T11394] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1056.701556][T11394] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1056.709961][T11394] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1056.738195][T11394] veth1_macvtap: left promiscuous mode [ 1056.744116][T11394] veth0_macvtap: left promiscuous mode [ 1056.749868][T11394] veth1_vlan: left promiscuous mode [ 1056.755280][T11394] veth0_vlan: left promiscuous mode [ 1056.857558][T13250] usb 3-1: new high-speed USB device number 10 using dummy_hcd [ 1057.046964][T13250] usb 3-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 1057.061555][T13250] usb 3-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 1057.086402][T13250] usb 3-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 1057.095627][T13250] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1057.135287][T16225] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 1057.158676][T13250] usb 3-1: Quirk or no altset; falling back to MIDI 1.0 [ 1057.394063][T13250] usb 3-1: USB disconnect, device number 10 [ 1057.503131][T11394] team0 (unregistering): Port device team_slave_1 removed [ 1057.568660][T11394] team0 (unregistering): Port device team_slave_0 removed [ 1058.055778][T16228] loop2: detected capacity change from 0 to 64 [ 1058.825071][T15764] 8021q: adding VLAN 0 to HW filter on device team0 [ 1058.909266][ T6641] bridge0: port 1(bridge_slave_0) entered blocking state [ 1058.916441][ T6641] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1059.015584][T16241] loop2: detected capacity change from 0 to 256 [ 1059.140718][ T80] bridge0: port 2(bridge_slave_1) entered blocking state [ 1059.147878][ T80] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1059.771145][T15996] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1059.820508][T15958] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 1059.868810][T15958] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 1060.021202][T15996] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1060.059610][T15958] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 1060.099700][T15764] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1060.202570][T15996] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1060.281758][T15958] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 1060.307355][T16268] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1060.402597][T15996] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1060.557452][T11394] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1060.617279][ T58] usb 2-1: new high-speed USB device number 12 using dummy_hcd [ 1060.676301][T11394] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1060.800896][ T58] usb 2-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 1060.825509][ T58] usb 2-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 1060.837999][ T58] usb 2-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 1060.847425][ T58] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1060.858899][T11394] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1060.861543][T16271] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 1060.891196][ T58] usb 2-1: Quirk or no altset; falling back to MIDI 1.0 [ 1061.036366][T11394] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1061.113786][T15991] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 1061.135659][ T5945] usb 2-1: USB disconnect, device number 12 [ 1061.168401][T15958] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1061.212508][T15991] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 1061.231681][T15991] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 1061.265218][T15764] veth0_vlan: entered promiscuous mode [ 1061.338648][T15991] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 1061.379315][T15764] veth1_vlan: entered promiscuous mode [ 1061.456140][T15958] 8021q: adding VLAN 0 to HW filter on device team0 [ 1061.488108][T13760] udevd[13760]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:27.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1061.540791][T15996] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 1061.641439][ T3026] bridge0: port 1(bridge_slave_0) entered blocking state [ 1061.648736][ T3026] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1061.659204][T15996] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 1061.733720][T15996] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 1061.762255][T15996] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 1061.860969][T15991] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1061.880468][T15991] 8021q: adding VLAN 0 to HW filter on device team0 [ 1062.339060][T11394] netdevsim netdevsim9 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1062.416883][ T80] bridge0: port 2(bridge_slave_1) entered blocking state [ 1062.424089][ T80] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1062.487280][ T80] bridge0: port 1(bridge_slave_0) entered blocking state [ 1062.494513][ T80] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1062.551441][ T80] bridge0: port 2(bridge_slave_1) entered blocking state [ 1062.558635][ T80] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1062.686020][T15958] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 1062.723887][T15958] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 1062.758639][T16003] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 1062.771056][T16003] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 1062.780875][T16003] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 1062.790573][T16003] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 1062.801316][T16003] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 1062.809405][T16003] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 1063.176225][T16287] loop2: detected capacity change from 0 to 2048 [ 1063.196003][T16003] Bluetooth: hci2: unexpected event for opcode 0x1004 [ 1063.436214][T16287] loop2: p1 < > p4 [ 1063.471957][T16287] loop2: p4 size 8388608 extends beyond EOD, truncated [ 1063.515789][T11394] netdevsim netdevsim9 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1063.628910][T15991] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 1063.657510][T15991] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 1063.786944][T11394] netdevsim netdevsim9 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1064.073099][T11394] netdevsim netdevsim9 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1064.236968][T15958] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1064.502059][T15991] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1064.623652][T15996] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1064.804447][T15996] 8021q: adding VLAN 0 to HW filter on device team0 [ 1064.853892][T11394] bridge_slave_1: left allmulticast mode [ 1064.859735][T11394] bridge_slave_1: left promiscuous mode [ 1064.865709][T11394] bridge0: port 2(bridge_slave_1) entered disabled state [ 1064.887526][T11394] bridge_slave_0: left allmulticast mode [ 1064.893234][T11394] bridge_slave_0: left promiscuous mode [ 1064.915362][T11394] bridge0: port 1(bridge_slave_0) entered disabled state [ 1064.937194][T11394] vlan2: left allmulticast mode [ 1064.942090][T11394] dummy0: left allmulticast mode [ 1064.957763][T11394] vlan2: left promiscuous mode [ 1064.962593][T11394] dummy0: left promiscuous mode [ 1064.967713][T11394] bridge0: port 3(vlan2) entered disabled state [ 1064.990550][T16003] Bluetooth: hci1: command tx timeout [ 1065.000161][T11394] bridge_slave_1: left allmulticast mode [ 1065.006639][T11394] bridge_slave_1: left promiscuous mode [ 1065.012798][T11394] bridge0: port 2(bridge_slave_1) entered disabled state [ 1065.022160][T11394] bridge_slave_0: left allmulticast mode [ 1065.028339][T11394] bridge_slave_0: left promiscuous mode [ 1065.034346][T11394] bridge0: port 1(bridge_slave_0) entered disabled state [ 1066.700739][ T5893] usb 3-1: new high-speed USB device number 11 using dummy_hcd [ 1066.880647][ T5893] usb 3-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 1066.891722][ T5893] usb 3-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 1066.902091][ T5893] usb 3-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 1066.912291][ T5893] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1066.937769][T16318] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 1066.961206][ T5893] usb 3-1: Quirk or no altset; falling back to MIDI 1.0 [ 1067.012437][T11394] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1067.024135][T11394] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1067.035373][T11394] bond0 (unregistering): Released all slaves [ 1067.207305][T13250] usb 3-1: USB disconnect, device number 11 [ 1067.213686][T16003] Bluetooth: hci1: command tx timeout [ 1067.232783][T11394] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1067.278917][T11394] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1067.300073][T11394] bond0 (unregistering): Released all slaves [ 1067.426438][ T7471] bridge0: port 1(bridge_slave_0) entered blocking state [ 1067.433638][ T7471] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1067.462468][ T7471] bridge0: port 2(bridge_slave_1) entered blocking state [ 1067.469634][ T7471] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1067.529667][T11394] IPVS: stopping master sync thread 10848 ... [ 1067.629533][T16284] chnl_net:caif_netlink_parms(): no params data found [ 1067.878128][T15991] veth0_vlan: entered promiscuous mode [ 1069.586862][T16003] Bluetooth: hci1: command tx timeout [ 1069.870353][T15991] veth1_vlan: entered promiscuous mode [ 1070.069675][T16284] bridge0: port 1(bridge_slave_0) entered blocking state [ 1070.076821][T16284] bridge0: port 1(bridge_slave_0) entered disabled state [ 1070.121489][T16284] bridge_slave_0: entered allmulticast mode [ 1070.143809][T16284] bridge_slave_0: entered promiscuous mode [ 1070.228356][T15958] veth0_vlan: entered promiscuous mode [ 1070.434599][T16284] bridge0: port 2(bridge_slave_1) entered blocking state [ 1070.452895][T16284] bridge0: port 2(bridge_slave_1) entered disabled state [ 1070.460325][T16284] bridge_slave_1: entered allmulticast mode [ 1070.500609][T16284] bridge_slave_1: entered promiscuous mode [ 1070.627693][T16284] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1070.655920][T15991] veth0_macvtap: entered promiscuous mode [ 1070.953885][T15991] veth1_macvtap: entered promiscuous mode [ 1071.357024][T16284] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1071.622578][T16284] team0: Port device team_slave_0 added [ 1071.642850][T15958] veth1_vlan: entered promiscuous mode [ 1071.719007][T16284] team0: Port device team_slave_1 added [ 1071.747692][T16003] Bluetooth: hci1: command tx timeout [ 1071.885670][T16354] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2436'. [ 1071.945135][T15991] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1071.961358][T15991] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1071.989656][T15991] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1072.001231][T15991] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1072.013056][T15991] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1072.024052][T15991] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1072.033908][T15991] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1072.178071][T15991] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1072.254555][T15991] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1072.351028][T15991] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1072.425700][T15991] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1072.514106][T15991] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1072.649713][T15991] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1072.877393][T15958] veth0_macvtap: entered promiscuous mode [ 1072.910131][T15991] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1072.946858][T15991] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1072.961634][T15991] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1072.972720][T15991] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1072.989034][T15991] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1072.999826][T15991] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1073.039960][T15991] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1073.072592][T15991] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1073.083421][T15991] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1073.094916][T15991] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1073.106135][T15991] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1073.117882][T15991] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1073.129454][T15991] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1073.138997][T16284] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1073.145966][T16284] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1073.250623][T16284] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1073.309973][T16284] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1073.328053][T16284] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1073.373011][T16284] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1073.398104][T15958] veth1_macvtap: entered promiscuous mode [ 1073.493914][T15958] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1073.506021][T15958] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1073.527043][T15958] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1073.545751][T15958] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1073.556601][T15958] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1073.567187][ T5895] usb 3-1: new high-speed USB device number 12 using dummy_hcd [ 1073.575316][T15958] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1073.586629][T15958] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1073.597631][T15958] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1073.609141][T15958] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1073.619738][T15958] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1073.630188][T15958] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1073.641432][T15958] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1073.651346][T15958] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1073.662586][T15958] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1073.673997][T15958] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1073.688889][T15991] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1073.697927][T15991] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1073.706850][T15991] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1073.719044][T15991] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1073.752731][ T5895] usb 3-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 1073.768897][ T5895] usb 3-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 1073.768948][T11394] hsr_slave_0: left promiscuous mode [ 1073.784616][ T5895] usb 3-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 1073.794641][ T5895] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1073.804642][T11394] hsr_slave_1: left promiscuous mode [ 1073.819384][T16363] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 1073.827512][T11394] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1073.833885][ T5895] usb 3-1: Quirk or no altset; falling back to MIDI 1.0 [ 1073.841508][T11394] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1073.859122][T11394] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1073.877521][T11394] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1073.908023][T11394] hsr_slave_0: left promiscuous mode [ 1073.921729][T11394] hsr_slave_1: left promiscuous mode [ 1073.928987][T11394] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1073.936458][T11394] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1073.945389][T11394] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1073.953899][T11394] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1073.994422][T11394] veth1_macvtap: left promiscuous mode [ 1073.999996][T11394] veth0_macvtap: left promiscuous mode [ 1074.006000][T11394] veth1_vlan: left promiscuous mode [ 1074.011283][T11394] veth0_vlan: left promiscuous mode [ 1074.018367][T11394] veth1_macvtap: left promiscuous mode [ 1074.024891][T11394] veth0_macvtap: left promiscuous mode [ 1074.030636][T11394] veth1_vlan: left promiscuous mode [ 1074.036072][T11394] veth0_vlan: left promiscuous mode [ 1074.081538][ T5893] usb 3-1: USB disconnect, device number 12 [ 1074.600246][T11394] team0 (unregistering): Port device team_slave_1 removed [ 1074.690459][T11394] team0 (unregistering): Port device team_slave_0 removed [ 1076.617659][T11394] team0 (unregistering): Port device team_slave_1 removed [ 1076.697262][T11394] team0 (unregistering): Port device team_slave_0 removed [ 1077.179543][T16375] overlayfs: missing 'lowerdir' [ 1077.954381][T15996] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1078.036363][T16284] hsr_slave_0: entered promiscuous mode [ 1078.054942][T16284] hsr_slave_1: entered promiscuous mode [ 1078.084765][T15958] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1078.096605][T15958] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1078.106462][T15958] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1078.117231][T15958] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1078.130633][T15958] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1078.147766][T15958] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1078.159631][T15958] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1078.172417][T15958] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1078.182399][T15958] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1078.192936][T15958] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1078.206281][T15958] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1078.219759][T15958] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1078.229755][T15958] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1078.239656][T15958] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1078.249506][T15958] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1078.606455][T16381] input: syz1 as /devices/virtual/input/input15 [ 1078.914399][ T35] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1078.935884][ T35] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1079.150674][T11587] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1079.194622][T11587] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1079.983067][T15996] veth0_vlan: entered promiscuous mode [ 1079.994715][ T6641] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1080.020290][ T6641] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1081.167966][T15996] veth1_vlan: entered promiscuous mode [ 1081.195419][T15996] veth0_macvtap: entered promiscuous mode [ 1081.212487][T11587] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1081.242031][T11587] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1081.429620][T15996] veth1_macvtap: entered promiscuous mode [ 1081.582321][T16402] overlayfs: missing 'lowerdir' [ 1082.906174][T15996] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1082.916845][T15996] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1083.132529][T15996] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1083.162193][T15996] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1083.240759][T15996] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1083.327452][T15996] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1083.380187][T15996] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1083.418666][T15996] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1083.428738][T15996] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1083.439338][T15996] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1083.449402][T15996] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1083.460036][T15996] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1083.486996][T15996] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1083.737163][T15996] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1083.867662][T15996] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1083.942529][T15996] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1084.040526][T15996] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1084.050578][T15996] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1084.061147][T15996] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1084.071340][T15996] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1084.081908][T15996] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1084.091838][T15996] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1084.102441][T15996] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1084.112342][T15996] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1084.122945][T15996] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1084.134012][T15996] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1084.145896][T15996] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1084.155421][T15996] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1084.164646][T15996] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1084.173429][T15996] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1084.341133][T16284] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 1084.401428][T11394] bridge_slave_1: left allmulticast mode [ 1084.409078][T11394] bridge_slave_1: left promiscuous mode [ 1084.414959][T11394] bridge0: port 2(bridge_slave_1) entered disabled state [ 1084.681440][T16424] overlayfs: missing 'lowerdir' [ 1085.035341][T11394] bridge_slave_0: left allmulticast mode [ 1085.045345][T11394] bridge_slave_0: left promiscuous mode [ 1085.053535][T11394] bridge0: port 1(bridge_slave_0) entered disabled state [ 1085.494238][T16434] netlink: 4 bytes leftover after parsing attributes in process `syz.6.2454'. [ 1086.298620][T11394] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1086.328639][T11394] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1086.354162][T11394] bond0 (unregistering): Released all slaves [ 1086.371710][T16284] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 1086.384614][T16284] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 1086.435072][T16284] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 1086.696733][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1086.726428][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1086.845440][ T3026] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1086.853659][ T3026] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1088.053447][T11394] hsr_slave_0: left promiscuous mode [ 1088.355364][T11394] hsr_slave_1: left promiscuous mode [ 1088.883448][T11394] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1088.903087][T11394] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1088.921822][T11394] veth1_vlan: left promiscuous mode [ 1088.921925][T11394] veth0_vlan: left promiscuous mode [ 1090.417638][T11394] team0 (unregistering): Port device team_slave_1 removed [ 1090.594217][T11394] team0 (unregistering): Port device team_slave_0 removed [ 1092.893170][T16488] netlink: 32 bytes leftover after parsing attributes in process `syz.3.2468'. [ 1092.951497][T16284] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1093.278097][T16284] 8021q: adding VLAN 0 to HW filter on device team0 [ 1093.392989][ T3026] bridge0: port 1(bridge_slave_0) entered blocking state [ 1093.400406][ T3026] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1093.547297][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 1093.554444][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1094.594407][T16284] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1095.502630][T16284] veth0_vlan: entered promiscuous mode [ 1096.273305][T16503] vhci_hcd vhci_hcd.0: pdev(5) rhport(0) sockfd(4) [ 1096.280438][T16503] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 1096.368152][T16284] veth1_vlan: entered promiscuous mode [ 1096.739840][T16548] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1096.975460][T16503] vhci_hcd vhci_hcd.0: Device attached [ 1097.042438][T16284] veth0_macvtap: entered promiscuous mode [ 1097.052110][T16284] veth1_macvtap: entered promiscuous mode [ 1097.091414][T16284] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1097.101980][T16284] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1097.111902][T16284] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1097.125668][T16284] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1097.135737][T16284] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1097.153396][T16284] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1097.196795][T16284] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1097.213934][ T29] audit: type=1326 audit(1734913205.790:1309): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16501 comm="syz.5.2475" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f919dd85d29 code=0x0 [ 1097.232731][T16284] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1097.256064][T16284] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1097.288920][T16284] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1097.288947][T16284] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1097.288969][T16284] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1097.288994][T16284] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1097.289013][T16284] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1097.290257][T16284] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1097.299849][ T5945] usb 44-1: SetAddress Request (2) to port 0 [ 1097.299948][ T5945] usb 44-1: new SuperSpeed USB device number 2 using vhci_hcd [ 1097.320630][T16284] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1097.320661][T16284] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1097.320676][T16284] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1097.320692][T16284] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1097.320706][T16284] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1097.320723][T16284] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1097.320742][T16284] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1097.320759][T16284] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1097.320778][T16284] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1097.320794][T16284] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1097.320808][T16284] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1097.320825][T16284] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1097.320842][T16284] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1097.320858][T16284] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1097.340136][T16284] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1097.349889][T16284] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1097.350007][T16284] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1097.639114][T16536] vhci_hcd: connection reset by peer [ 1097.655487][T11394] vhci_hcd: stop threads [ 1097.675114][T16284] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1097.684460][T16284] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1097.692308][T11394] vhci_hcd: release socket [ 1097.756397][T11394] vhci_hcd: disconnect device [ 1097.779047][T16562] netlink: 16 bytes leftover after parsing attributes in process `syz.3.2483'. [ 1098.969477][ T3026] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1098.977511][ T3026] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1098.986480][ T3026] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1098.994458][ T3026] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1100.490017][T16586] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2488'. [ 1102.520195][T16613] netlink: 24 bytes leftover after parsing attributes in process `syz.3.2493'. [ 1103.997517][ T5945] usb 44-1: device descriptor read/8, error -110 [ 1104.037266][T16621] fuse: Bad value for 'fd' [ 1104.649787][T16623] netlink: 16 bytes leftover after parsing attributes in process `syz.3.2497'. [ 1104.899193][T16627] overlayfs: missing 'lowerdir' [ 1105.631835][ T5945] usb usb44-port1: attempt power cycle [ 1106.760220][ T5945] usb usb44-port1: unable to enumerate USB device [ 1110.486704][T16675] fuse: Bad value for 'fd' [ 1111.240515][T16681] netlink: 16 bytes leftover after parsing attributes in process `syz.3.2511'. [ 1111.573675][ T5891] IPVS: starting estimator thread 0... [ 1112.071266][T16688] IPVS: using max 20 ests per chain, 48000 per kthread [ 1112.246084][ T970] usb 3-1: new high-speed USB device number 13 using dummy_hcd [ 1112.511450][ T970] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1112.522636][ T970] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1112.544562][T16714] fuse: Bad value for 'rootmode' [ 1112.593415][ T970] usb 3-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 1112.640409][ T970] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1112.675360][ T970] usb 3-1: config 0 descriptor?? [ 1113.851493][ T970] usbhid 3-1:0.0: can't add hid device: -32 [ 1113.860835][ T970] usbhid 3-1:0.0: probe with driver usbhid failed with error -32 [ 1114.081337][T16737] fuse: Bad value for 'fd' [ 1114.653974][T16740] bridge0: port 3(gretap0) entered blocking state [ 1114.661175][T16740] bridge0: port 3(gretap0) entered disabled state [ 1114.667840][T16740] gretap0: entered allmulticast mode [ 1114.674288][T16740] gretap0: entered promiscuous mode [ 1114.680114][T16740] bridge0: port 3(gretap0) entered blocking state [ 1114.688304][T16740] bridge0: port 3(gretap0) entered forwarding state [ 1115.176391][ T5945] usb 3-1: USB disconnect, device number 13 [ 1115.365462][ T5891] usb 2-1: new high-speed USB device number 13 using dummy_hcd [ 1115.567405][ T5891] usb 2-1: Using ep0 maxpacket: 8 [ 1115.589577][ T5891] usb 2-1: config 0 has no interfaces? [ 1115.597356][ T5891] usb 2-1: New USB device found, idVendor=0403, idProduct=b8d8, bcdDevice=76.8e [ 1115.642306][ T5891] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1115.650368][ T5891] usb 2-1: Product: syz [ 1115.695800][ T5891] usb 2-1: Manufacturer: syz [ 1115.722330][ T5891] usb 2-1: SerialNumber: syz [ 1115.755650][ T5891] usb 2-1: config 0 descriptor?? [ 1115.863350][T16777] fuse: Bad value for 'fd' [ 1115.989091][ T5893] usb 2-1: USB disconnect, device number 13 [ 1116.090863][ T5891] usb 6-1: new high-speed USB device number 8 using dummy_hcd [ 1116.272705][ T5891] usb 6-1: Using ep0 maxpacket: 8 [ 1116.289584][ T5891] usb 6-1: no configurations [ 1116.304585][ T5891] usb 6-1: can't read configurations, error -22 [ 1116.518521][ T5891] usb 6-1: new high-speed USB device number 9 using dummy_hcd [ 1116.631790][T16794] fuse: Bad value for 'fd' [ 1116.722643][ T5891] usb 6-1: Using ep0 maxpacket: 8 [ 1117.534126][ T5891] usb 6-1: no configurations [ 1117.539916][ T5891] usb 6-1: can't read configurations, error -22 [ 1117.552958][ T5891] usb usb6-port1: attempt power cycle [ 1117.674587][T16801] input: syz1 as /devices/virtual/input/input16 [ 1118.565621][ T5891] usb 6-1: new high-speed USB device number 10 using dummy_hcd [ 1118.613535][ T5891] usb 6-1: Using ep0 maxpacket: 8 [ 1118.667281][ T5891] usb 6-1: no configurations [ 1118.672020][ T5891] usb 6-1: can't read configurations, error -22 [ 1118.700335][T16817] sch_tbf: peakrate 5120 is lower than or equals to rate 2147483647 ! [ 1118.797611][T16817] lo speed is unknown, defaulting to 1000 [ 1118.805807][T16817] lo speed is unknown, defaulting to 1000 [ 1118.832189][T16817] lo speed is unknown, defaulting to 1000 [ 1118.884909][ T29] audit: type=1326 audit(1734913226.060:1310): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16816 comm="syz.1.2544" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f693f585d29 code=0x7ffc0000 [ 1118.908368][ T5891] usb 6-1: new high-speed USB device number 11 using dummy_hcd [ 1118.945221][ T5891] usb 6-1: Using ep0 maxpacket: 8 [ 1118.966667][ T5891] usb 6-1: no configurations [ 1118.971386][ T5891] usb 6-1: can't read configurations, error -22 [ 1118.979687][ T29] audit: type=1326 audit(1734913226.060:1311): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16816 comm="syz.1.2544" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f693f585d29 code=0x7ffc0000 [ 1119.020977][ T5891] usb usb6-port1: unable to enumerate USB device [ 1119.035311][ T58] usb 8-1: new high-speed USB device number 2 using dummy_hcd [ 1119.115664][ T29] audit: type=1326 audit(1734913226.060:1312): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16816 comm="syz.1.2544" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f693f585d29 code=0x7ffc0000 [ 1119.249421][ T29] audit: type=1326 audit(1734913226.060:1313): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16816 comm="syz.1.2544" exe="/root/syz-executor" sig=0 arch=c000003e syscall=85 compat=0 ip=0x7f693f585d29 code=0x7ffc0000 [ 1119.308791][ T58] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1119.362313][ T58] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1119.388781][ T29] audit: type=1326 audit(1734913226.060:1314): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16816 comm="syz.1.2544" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f693f585d29 code=0x7ffc0000 [ 1119.411286][ C1] vkms_vblank_simulate: vblank timer overrun [ 1119.429690][T16385] lo speed is unknown, defaulting to 1000 [ 1119.456693][ T29] audit: type=1326 audit(1734913226.060:1315): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16816 comm="syz.1.2544" exe="/root/syz-executor" sig=0 arch=c000003e syscall=157 compat=0 ip=0x7f693f585d29 code=0x7ffc0000 [ 1119.460422][T16817] infiniband syz0: set active [ 1119.479369][ C1] vkms_vblank_simulate: vblank timer overrun [ 1119.624020][T16846] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2550'. [ 1120.390989][ T58] usb 8-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 1120.442045][ T58] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1120.455300][ T58] usb 8-1: config 0 descriptor?? [ 1120.538326][ T29] audit: type=1326 audit(1734913226.060:1316): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16816 comm="syz.1.2544" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f693f585d29 code=0x7ffc0000 [ 1120.569734][T16817] infiniband syz0: added lo [ 1120.628007][ T29] audit: type=1326 audit(1734913226.060:1317): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16816 comm="syz.1.2544" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f693f585d29 code=0x7ffc0000 [ 1120.693674][ T29] audit: type=1326 audit(1734913226.060:1318): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16816 comm="syz.1.2544" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f693f585d29 code=0x7ffc0000 [ 1120.730557][ T29] audit: type=1326 audit(1734913226.060:1319): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16816 comm="syz.1.2544" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f693f585d29 code=0x7ffc0000 [ 1120.782290][T16817] RDS/IB: syz0: added [ 1120.793658][T16817] smc: adding ib device syz0 with port count 1 [ 1120.834566][T16817] smc: ib device syz0 port 1 has pnetid [ 1120.856281][T16385] lo speed is unknown, defaulting to 1000 [ 1120.875786][T16817] lo speed is unknown, defaulting to 1000 [ 1121.129065][T16860] fuse: Bad value for 'fd' [ 1122.346149][ T1289] ieee802154 phy0 wpan0: encryption failed: -22 [ 1122.686983][ T58] usbhid 8-1:0.0: can't add hid device: -71 [ 1122.697776][ T58] usbhid 8-1:0.0: probe with driver usbhid failed with error -71 [ 1122.744663][ T58] usb 8-1: USB disconnect, device number 2 [ 1123.842738][T16884] input: syz1 as /devices/virtual/input/input17 [ 1124.906278][T16817] lo speed is unknown, defaulting to 1000 [ 1125.066503][T16899] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2566'. [ 1127.072561][T16920] fuse: Bad value for 'fd' [ 1127.256268][T16817] lo speed is unknown, defaulting to 1000 [ 1129.759496][T16817] lo speed is unknown, defaulting to 1000 [ 1131.723079][T16817] lo speed is unknown, defaulting to 1000 [ 1132.792786][T16980] netlink: 28 bytes leftover after parsing attributes in process `syz.2.2590'. [ 1132.818276][T16980] netlink: 28 bytes leftover after parsing attributes in process `syz.2.2590'. [ 1132.928077][T16817] lo speed is unknown, defaulting to 1000 [ 1133.052304][T16817] lo speed is unknown, defaulting to 1000 [ 1133.164328][T16817] lo speed is unknown, defaulting to 1000 [ 1133.802994][T17008] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 1134.745953][T17033] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1136.197337][T17048] loop7: detected capacity change from 0 to 512 [ 1136.204560][T17048] ext4: Unknown parameter 'uid<00000000000000000000' [ 1136.335825][T16003] Bluetooth: hci2: ACL packet for unknown connection handle 201 [ 1136.712277][T17058] 9pnet_fd: Insufficient options for proto=fd [ 1136.943128][T17060] siw: device registration error -23 [ 1137.418618][T17063] bridge0: port 3(gretap0) entered blocking state [ 1137.425573][T17063] bridge0: port 3(gretap0) entered disabled state [ 1137.433379][T17063] gretap0: entered allmulticast mode [ 1138.244316][T17058] workqueue: Failed to create a rescuer kthread for wq "ceph-completion": -EINTR [ 1138.258668][T17063] gretap0: entered promiscuous mode [ 1138.275392][T17063] bridge0: port 3(gretap0) entered blocking state [ 1138.281928][T17063] bridge0: port 3(gretap0) entered forwarding state [ 1138.366127][T17065] gretap0: left allmulticast mode [ 1138.371420][T17065] gretap0: left promiscuous mode [ 1138.376655][T17065] bridge0: port 3(gretap0) entered disabled state [ 1139.122701][T17067] [ 1139.125080][T17067] ====================================================== [ 1139.132104][T17067] WARNING: possible circular locking dependency detected [ 1139.139302][T17067] 6.13.0-rc3-syzkaller-00301-gbcde95ce32b6 #0 Not tainted [ 1139.146419][T17067] ------------------------------------------------------ [ 1139.153450][T17067] syz.3.2607/17067 is trying to acquire lock: [ 1139.159613][T17067] ffff8880234d2040 (mapping.invalidate_lock#2){++++}-{4:4}, at: page_cache_ra_unbounded+0x142/0x720 [ 1139.170493][T17067] [ 1139.170493][T17067] but task is already holding lock: [ 1139.177868][T17067] ffff8880586d6d20 (&mm->mmap_lock){++++}-{4:4}, at: xdp_umem_create+0x92c/0xf30 [ 1139.187063][T17067] [ 1139.187063][T17067] which lock already depends on the new lock. [ 1139.187063][T17067] [ 1139.197490][T17067] [ 1139.197490][T17067] the existing dependency chain (in reverse order) is: [ 1139.206786][T17067] [ 1139.206786][T17067] -> #5 (&mm->mmap_lock){++++}-{4:4}: [ 1139.214393][T17067] lock_acquire+0x1ed/0x550 [ 1139.219455][T17067] __might_fault+0xc6/0x120 [ 1139.224498][T17067] _copy_from_user+0x2a/0xc0 [ 1139.229641][T17067] blk_trace_ioctl+0x1ad/0x9a0 [ 1139.234947][T17067] blkdev_ioctl+0x40c/0x6a0 [ 1139.239991][T17067] __se_sys_ioctl+0xf7/0x170 [ 1139.245210][T17067] do_syscall_64+0xf3/0x230 [ 1139.250276][T17067] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1139.256754][T17067] [ 1139.256754][T17067] -> #4 (&q->debugfs_mutex){+.+.}-{4:4}: [ 1139.264627][T17067] lock_acquire+0x1ed/0x550 [ 1139.269682][T17067] __mutex_lock+0x1ac/0xee0 [ 1139.274745][T17067] blk_mq_init_sched+0x3fa/0x830 [ 1139.280226][T17067] elevator_init_mq+0x20e/0x320 [ 1139.285624][T17067] add_disk_fwnode+0x10d/0xf80 [ 1139.290933][T17067] sd_probe+0xba6/0x1100 [ 1139.295733][T17067] really_probe+0x2ba/0xad0 [ 1139.300783][T17067] __driver_probe_device+0x1a2/0x390 [ 1139.306611][T17067] driver_probe_device+0x50/0x430 [ 1139.312180][T17067] __device_attach_driver+0x2d6/0x530 [ 1139.318103][T17067] bus_for_each_drv+0x250/0x2e0 [ 1139.323511][T17067] __device_attach_async_helper+0x22d/0x300 [ 1139.330038][T17067] async_run_entry_fn+0xaa/0x420 [ 1139.335517][T17067] process_scheduled_works+0xa68/0x1840 [ 1139.341606][T17067] worker_thread+0x870/0xd30 [ 1139.346738][T17067] kthread+0x2f2/0x390 [ 1139.351350][T17067] ret_from_fork+0x4d/0x80 [ 1139.356308][T17067] ret_from_fork_asm+0x1a/0x30 [ 1139.361612][T17067] [ 1139.361612][T17067] -> #3 (&q->q_usage_counter(queue)#50){++++}-{0:0}: [ 1139.370530][T17067] lock_acquire+0x1ed/0x550 [ 1139.375577][T17067] blk_queue_enter+0xe1/0x600 [ 1139.380814][T17067] blk_mq_alloc_request+0x4fa/0xaa0 [ 1139.386567][T17067] scsi_execute_cmd+0x177/0x1090 [ 1139.392048][T17067] read_capacity_16+0x2b4/0x1450 [ 1139.397541][T17067] sd_revalidate_disk+0x1013/0xbce0 [ 1139.403294][T17067] sd_probe+0x9fa/0x1100 [ 1139.408085][T17067] really_probe+0x2ba/0xad0 [ 1139.413131][T17067] __driver_probe_device+0x1a2/0x390 [ 1139.418962][T17067] driver_probe_device+0x50/0x430 [ 1139.424531][T17067] __device_attach_driver+0x2d6/0x530 [ 1139.430451][T17067] bus_for_each_drv+0x250/0x2e0 [ 1139.435852][T17067] __device_attach_async_helper+0x22d/0x300 [ 1139.442290][T17067] async_run_entry_fn+0xaa/0x420 [ 1139.447761][T17067] process_scheduled_works+0xa68/0x1840 [ 1139.453842][T17067] worker_thread+0x870/0xd30 [ 1139.458976][T17067] kthread+0x2f2/0x390 [ 1139.463594][T17067] ret_from_fork+0x4d/0x80 [ 1139.468554][T17067] ret_from_fork_asm+0x1a/0x30 [ 1139.474028][T17067] [ 1139.474028][T17067] -> #2 (&q->limits_lock){+.+.}-{4:4}: [ 1139.481710][T17067] lock_acquire+0x1ed/0x550 [ 1139.486762][T17067] __mutex_lock+0x1ac/0xee0 [ 1139.491823][T17067] nbd_set_size+0x2e0/0x8f0 [ 1139.496881][T17067] nbd_ioctl+0x5dc/0xf40 [ 1139.501847][T17067] blkdev_ioctl+0x57f/0x6a0 [ 1139.506890][T17067] __se_sys_ioctl+0xf7/0x170 [ 1139.512025][T17067] do_syscall_64+0xf3/0x230 [ 1139.517083][T17067] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1139.523529][T17067] [ 1139.523529][T17067] -> #1 (&q->q_usage_counter(io)#51){++++}-{0:0}: [ 1139.532269][T17067] lock_acquire+0x1ed/0x550 [ 1139.537313][T17067] blk_mq_submit_bio+0x1536/0x2390 [ 1139.542974][T17067] __submit_bio+0x2c6/0x560 [ 1139.548025][T17067] submit_bio_noacct_nocheck+0x4d3/0xe30 [ 1139.554199][T17067] mpage_readahead+0x630/0x780 [ 1139.559524][T17067] read_pages+0x178/0x750 [ 1139.564402][T17067] page_cache_ra_unbounded+0x606/0x720 [ 1139.570430][T17067] page_cache_sync_ra+0x3c5/0xad0 [ 1139.576007][T17067] filemap_get_pages+0x605/0x2080 [ 1139.581576][T17067] filemap_read+0x452/0xf50 [ 1139.586618][T17067] blkdev_read_iter+0x2d8/0x430 [ 1139.592023][T17067] vfs_read+0x993/0xb70 [ 1139.596987][T17067] ksys_read+0x18f/0x2b0 [ 1139.601778][T17067] do_syscall_64+0xf3/0x230 [ 1139.606846][T17067] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1139.613381][T17067] [ 1139.613381][T17067] -> #0 (mapping.invalidate_lock#2){++++}-{4:4}: [ 1139.621963][T17067] validate_chain+0x18ef/0x5920 [ 1139.627368][T17067] __lock_acquire+0x1397/0x2100 [ 1139.632860][T17067] lock_acquire+0x1ed/0x550 [ 1139.637910][T17067] down_read+0xb1/0xa40 [ 1139.642608][T17067] page_cache_ra_unbounded+0x142/0x720 [ 1139.648620][T17067] do_sync_mmap_readahead+0x499/0x970 [ 1139.654536][T17067] filemap_fault+0x8a9/0x1490 [ 1139.659752][T17067] __do_fault+0x137/0x390 [ 1139.664622][T17067] handle_pte_fault+0xcab/0x5ed0 [ 1139.670102][T17067] handle_mm_fault+0x1106/0x1bb0 [ 1139.675595][T17067] __get_user_pages+0x1c82/0x49e0 [ 1139.681171][T17067] __gup_longterm_locked+0x49a/0x17f0 [ 1139.687086][T17067] pin_user_pages+0x137/0x1f0 [ 1139.692304][T17067] xdp_umem_create+0x978/0xf30 [ 1139.697615][T17067] xsk_setsockopt+0x732/0x950 [ 1139.702833][T17067] do_sock_setsockopt+0x3b1/0x720 [ 1139.708404][T17067] __x64_sys_setsockopt+0x1ee/0x280 [ 1139.714153][T17067] do_syscall_64+0xf3/0x230 [ 1139.719211][T17067] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1139.725656][T17067] [ 1139.725656][T17067] other info that might help us debug this: [ 1139.725656][T17067] [ 1139.735894][T17067] Chain exists of: [ 1139.735894][T17067] mapping.invalidate_lock#2 --> &q->debugfs_mutex --> &mm->mmap_lock [ 1139.735894][T17067] [ 1139.749956][T17067] Possible unsafe locking scenario: [ 1139.749956][T17067] [ 1139.757414][T17067] CPU0 CPU1 [ 1139.762804][T17067] ---- ---- [ 1139.768182][T17067] rlock(&mm->mmap_lock); [ 1139.772669][T17067] lock(&q->debugfs_mutex); [ 1139.779804][T17067] lock(&mm->mmap_lock); [ 1139.786851][T17067] rlock(mapping.invalidate_lock#2); [ 1139.792260][T17067] [ 1139.792260][T17067] *** DEADLOCK *** [ 1139.792260][T17067] [ 1139.800412][T17067] 2 locks held by syz.3.2607/17067: [ 1139.805630][T17067] #0: ffff88807cbd26f0 (&xs->mutex){+.+.}-{4:4}, at: xsk_setsockopt+0x6b2/0x950 [ 1139.815011][T17067] #1: ffff8880586d6d20 (&mm->mmap_lock){++++}-{4:4}, at: xdp_umem_create+0x92c/0xf30 [ 1139.824658][T17067] [ 1139.824658][T17067] stack backtrace: [ 1139.830579][T17067] CPU: 0 UID: 0 PID: 17067 Comm: syz.3.2607 Not tainted 6.13.0-rc3-syzkaller-00301-gbcde95ce32b6 #0 [ 1139.841375][T17067] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 1139.851457][T17067] Call Trace: [ 1139.854758][T17067] [ 1139.857709][T17067] dump_stack_lvl+0x241/0x360 [ 1139.862433][T17067] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1139.867676][T17067] ? __pfx__printk+0x10/0x10 [ 1139.872308][T17067] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1139.877968][T17067] print_circular_bug+0x13a/0x1b0 [ 1139.883032][T17067] check_noncircular+0x36a/0x4a0 [ 1139.888013][T17067] ? __pfx_validate_chain+0x10/0x10 [ 1139.893256][T17067] ? __pfx_check_noncircular+0x10/0x10 [ 1139.898759][T17067] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1139.904412][T17067] ? lockdep_lock+0x123/0x2b0 [ 1139.909116][T17067] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1139.914858][T17067] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1139.920516][T17067] validate_chain+0x18ef/0x5920 [ 1139.925397][T17067] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1139.931053][T17067] ? __lock_acquire+0x1397/0x2100 [ 1139.936282][T17067] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1139.941945][T17067] ? __pfx_validate_chain+0x10/0x10 [ 1139.947185][T17067] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1139.952845][T17067] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1139.958591][T17067] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1139.964258][T17067] ? mark_lock+0x9a/0x360 [ 1139.968622][T17067] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1139.974284][T17067] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 1139.980298][T17067] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1139.985953][T17067] ? mark_lock+0x9a/0x360 [ 1139.990309][T17067] ? do_raw_spin_unlock+0x13c/0x8b0 [ 1139.995532][T17067] __lock_acquire+0x1397/0x2100 [ 1140.000418][T17067] lock_acquire+0x1ed/0x550 [ 1140.004946][T17067] ? page_cache_ra_unbounded+0x142/0x720 [ 1140.010625][T17067] ? __pfx_lock_acquire+0x10/0x10 [ 1140.015690][T17067] ? __pfx___might_resched+0x10/0x10 [ 1140.021000][T17067] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1140.026664][T17067] ? mark_lock+0x9a/0x360 [ 1140.031025][T17067] ? __pfx___schedule+0x10/0x10 [ 1140.035908][T17067] ? __lock_acquire+0x1397/0x2100 [ 1140.040967][T17067] down_read+0xb1/0xa40 [ 1140.045147][T17067] ? page_cache_ra_unbounded+0x142/0x720 [ 1140.050823][T17067] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1140.056482][T17067] ? __lock_acquire+0x1397/0x2100 [ 1140.061543][T17067] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1140.067208][T17067] ? cgroup_rstat_updated+0x13b/0xc30 [ 1140.072619][T17067] ? __pfx_down_read+0x10/0x10 [ 1140.077413][T17067] ? __pfx_cgroup_rstat_updated+0x10/0x10 [ 1140.083177][T17067] page_cache_ra_unbounded+0x142/0x720 [ 1140.088687][T17067] ? __pfx_lock_release+0x10/0x10 [ 1140.093745][T17067] do_sync_mmap_readahead+0x499/0x970 [ 1140.099159][T17067] ? __pfx_do_sync_mmap_readahead+0x10/0x10 [ 1140.105081][T17067] ? count_memcg_event_mm+0x90/0x420 [ 1140.110401][T17067] ? __filemap_get_folio+0x848/0x940 [ 1140.115716][T17067] filemap_fault+0x8a9/0x1490 [ 1140.120426][T17067] ? __pfx_filemap_fault+0x10/0x10 [ 1140.125562][T17067] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1140.131231][T17067] ? blk_cgroup_congested+0x1b/0x200 [ 1140.136641][T17067] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1140.142303][T17067] ? blk_cgroup_congested+0x1f0/0x200 [ 1140.147705][T17067] __do_fault+0x137/0x390 [ 1140.152067][T17067] handle_pte_fault+0xcab/0x5ed0 [ 1140.157039][T17067] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1140.162696][T17067] ? __lock_acquire+0x1397/0x2100 [ 1140.167753][T17067] ? __pfx_handle_pte_fault+0x10/0x10 [ 1140.173152][T17067] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1140.178809][T17067] ? __lock_acquire+0x1397/0x2100 [ 1140.183875][T17067] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1140.189540][T17067] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1140.195209][T17067] ? __pfx_lock_acquire+0x10/0x10 [ 1140.200269][T17067] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1140.205928][T17067] ? do_raw_spin_lock+0x14f/0x370 [ 1140.210974][T17067] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1140.216639][T17067] handle_mm_fault+0x1106/0x1bb0 [ 1140.221652][T17067] ? __pfx_handle_mm_fault+0x10/0x10 [ 1140.226995][T17067] __get_user_pages+0x1c82/0x49e0 [ 1140.232063][T17067] ? 0xffffffffa0000810 [ 1140.236240][T17067] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1140.241914][T17067] ? __pfx___get_user_pages+0x10/0x10 [ 1140.247340][T17067] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1140.253005][T17067] __gup_longterm_locked+0x49a/0x17f0 [ 1140.258404][T17067] ? __pfx___might_resched+0x10/0x10 [ 1140.263732][T17067] ? __pfx___gup_longterm_locked+0x10/0x10 [ 1140.269573][T17067] ? down_read+0x82b/0xa40 [ 1140.274013][T17067] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1140.279688][T17067] ? is_valid_gup_args+0x124/0x200 [ 1140.284839][T17067] pin_user_pages+0x137/0x1f0 [ 1140.289543][T17067] ? __pfx_pin_user_pages+0x10/0x10 [ 1140.294765][T17067] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1140.300425][T17067] xdp_umem_create+0x978/0xf30 [ 1140.305227][T17067] xsk_setsockopt+0x732/0x950 [ 1140.309933][T17067] ? __pfx_xsk_setsockopt+0x10/0x10 [ 1140.315167][T17067] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1140.320821][T17067] ? aa_sock_opt_perm+0x79/0x120 [ 1140.325787][T17067] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1140.331445][T17067] ? __pfx_xsk_setsockopt+0x10/0x10 [ 1140.336671][T17067] do_sock_setsockopt+0x3b1/0x720 [ 1140.341732][T17067] ? __pfx_do_sock_setsockopt+0x10/0x10 [ 1140.347306][T17067] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1140.352963][T17067] ? __fget_files+0x395/0x410 [ 1140.357764][T17067] ? __fget_files+0x2a/0x410 [ 1140.362477][T17067] __x64_sys_setsockopt+0x1ee/0x280 [ 1140.367709][T17067] do_syscall_64+0xf3/0x230 [ 1140.372420][T17067] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1140.378351][T17067] RIP: 0033:0x7f31e0f85d29 [ 1140.382794][T17067] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1140.402591][T17067] RSP: 002b:00007f31e1cd6038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 1140.411027][T17067] RAX: ffffffffffffffda RBX: 00007f31e1176080 RCX: 00007f31e0f85d29 [ 1140.419014][T17067] RDX: 0000000000000004 RSI: 000000000000011b RDI: 0000000000000004 [ 1140.427007][T17067] RBP: 00007f31e1001aa8 R08: 0000000000000020 R09: 0000000000000000 [ 1140.435000][T17067] R10: 0000000020000040 R11: 0000000000000246 R12: 0000000000000000 [ 1140.442989][T17067] R13: 0000000000000000 R14: 00007f31e1176080 R15: 00007ffdff571b18 [ 1140.450990][T17067]