last executing test programs: 8m53.874264264s ago: executing program 0 (id=485): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="1801000000000000000000000000ea04850000005000000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000040)='sched_switch\x00', r0}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000280)=0x8) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) fstat(r0, 0x0) sched_setscheduler(r1, 0x2, &(0x7f0000000180)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_RX_RING(r4, 0x11b, 0x2, &(0x7f0000000000)=0x800, 0x4) stat(0x0, 0x0) mmap(&(0x7f0000002000/0x4000)=nil, 0x4000, 0x6, 0x8012, r4, 0x0) syz_clone(0x400a1400, 0x0, 0x0, 0x0, 0x0, 0x0) 8m53.596673136s ago: executing program 0 (id=487): socket$l2tp6(0xa, 0x2, 0x73) r0 = socket$can_bcm(0x1d, 0x2, 0x2) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100}, 0x0) r1 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) getsockopt$netrom_NETROM_N2(r1, 0x103, 0x3, 0x0, &(0x7f0000001bc0)=0xffffffffffffff65) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r2 = getpid() sched_setscheduler(r2, 0x1, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs={0x0, 0x0, 0xfffffffe}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, 0x0) connect$can_bcm(r0, 0x0, 0x0) syz_open_procfs(0x0, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000240), 0xffffffffffffffff) sendmsg$IPVS_CMD_GET_SERVICE(r5, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000640)={&(0x7f0000000000)={0x14, r6, 0x711, 0x70bd25, 0x25dfdbfb}, 0x14}, 0x1, 0x0, 0x0, 0x24004894}, 0x0) 8m49.079320487s ago: executing program 0 (id=494): syz_mount_image$hfs(&(0x7f0000000180), &(0x7f0000000100)='./file0\x00', 0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="71756965742c636f6465706167653d69736f383835392d31352c706172743d3078303030303030300000000000000000662c00a20000000700000000ede9debf530c3cc4d04b548919aca0c2937d4da1fc31dc42fc2e3e", @ANYRESDEC=0x0, @ANYRESOCT, @ANYRES16, @ANYRES16], 0x11, 0x2d2, &(0x7f0000000bc0)="$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") bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) mq_unlink(0x0) r2 = socket$netlink(0x10, 0x3, 0x0) syz_genetlink_get_family_id$net_dm(0x0, 0xffffffffffffffff) socket$vsock_stream(0x28, 0x1, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000080)={'bridge0\x00', 0x0}) sendmsg$nl_route(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000240)=@newlink={0x48, 0x10, 0xff05, 0x0, 0x0, {0x0, 0x0, 0x4a00}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @batadv={{0xb}, {0x4}}}, @IFLA_MASTER={0x8, 0xa, r3}, @IFLA_ADDRESS={0xa}]}, 0x48}, 0x1, 0x0, 0x0, 0x45844}, 0x0) 8m47.600768805s ago: executing program 0 (id=499): mknod$loop(&(0x7f0000000140)='./file0\x00', 0xfff, 0x1) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f00000001c0), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r0, &(0x7f0000006300)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r0, &(0x7f0000000040)={0x50, 0x0, r1, {0x7, 0x1f, 0x20000000, 0x4041}}, 0x50) socket$inet6_sctp(0xa, 0x1, 0x84) syz_fuse_handle_req(r0, &(0x7f00000021c0)="0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000300000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000800000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000dc4e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ba045abcd5dfc67d00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000081000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000230000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000050000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000090000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000dc000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000209bfd66eea210560000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000003dc150f4000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000030000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f50000000000000000000000000000000000000000000000000000000000000000000000000000000000c6d90000000000001354c4b6000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f8000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001a00", 0x2000, &(0x7f00000062c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000300)={0x20}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r2 = openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x80101, 0x0) r3 = syz_open_dev$loop(&(0x7f0000000000), 0x4, 0x2080) ioctl$LOOP_SET_FD(r3, 0x4c00, r2) ioctl$LOOP_SET_FD(r3, 0x4c00, r3) dup2(r2, r0) r4 = socket$inet6(0xa, 0x80002, 0x0) setsockopt$SO_ATTACH_FILTER(r4, 0x1, 0x33, 0x0, 0x0) r5 = openat$dsp(0xffffffffffffff9c, 0x0, 0x28241, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$MAP_UPDATE_BATCH(0x1a, 0x0, 0x0) write$dsp(r5, 0x0, 0x0) openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040), 0x801, 0x0) timer_create(0x1, &(0x7f00000004c0)={0x0, 0x30, 0x1}, &(0x7f0000000500)) 8m46.133730462s ago: executing program 0 (id=501): syz_mount_image$vfat(&(0x7f00000000c0), &(0x7f0000000700)='./file2\x00', 0x0, &(0x7f0000000740)=ANY=[], 0xfd, 0x11f3, &(0x7f0000001b80)="$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") prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f0000003900)=ANY=[@ANYBLOB="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"], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000540)='rcu_utilization\x00', r0}, 0x10) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = socket$inet6(0xa, 0x3, 0x7) connect$inet6(r4, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback}, 0x1c) sendmmsg(r4, &(0x7f0000000480), 0x2e9, 0xffd8) 8m44.228536014s ago: executing program 0 (id=506): r0 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000000), 0x41, 0x0) write$nbd(r0, &(0x7f0000000440)=ANY=[@ANYBLOB], 0x40) io_uring_register$IORING_REGISTER_PBUF_RING(r0, 0x16, &(0x7f0000000680)={&(0x7f0000001000)={[{0x0, 0x0, 0x2}, {&(0x7f0000000340)="ee0e6828c9a9dc657d64193171dcda9277153b6cee261b0cd1cf60f805f21721053bf9f92ecb108dbe05fb0da39ebb3ee363588f1c108bdd8902e112ca62946995806234f4da5568f5a7243503fff4c6c4b703fb61fac7ac24dcf0ccd97b4d59db2ee5b11aad1ffc5e92e399951c685565c50c97238ec65e714fb402072755fa0d", 0x81, 0x2}, {&(0x7f00000004c0)="b2d4362b81765ac72d81bb03fb1b868ef96f9c8b3513546d7c007f00db70e75eb4d45118b9c6c49111be76506327c65733e6aa771ee5f68154a0ffd506035d39597013a1dde8b96f28320e080fc09d7dd25d3ab38c06de86682de90da543434379c4ddbcbf4f3d63b7e36031e0977a44a277bc245d473739881fc6ca0f7b45004f2f5da5910dfd93fb135071878c2e8b94d0cd3911752776f5bcbd1b68d10e9ff0c16f3000ca699961edb1143274a009348cf308ae13c192896d93bce2d317d7ba786f", 0xc3, 0x2}, {&(0x7f00000005c0)="6c9a7d2791d022bc6b35867b84ae3736dce532330022405cae15", 0x1a, 0x3}, {0x0}]}, 0x5, 0x3}, 0x1) syz_open_procfs(0x0, &(0x7f0000002380)='net/ip_mr_cache\x00') mkdir(&(0x7f00000002c0)='./bus\x00', 0x21) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) mkdir(&(0x7f0000000000)='./file0\x00', 0x820009408200a5fe) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x1000000, &(0x7f0000000400)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './bus'}}]}) r1 = open(&(0x7f0000000140)='./file0\x00', 0x0, 0x150) mknodat$loop(r1, &(0x7f0000000040)='./file1\x00', 0x2000, 0x1) chdir(&(0x7f00000003c0)='./bus\x00') prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r2 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) ioctl$VHOST_SET_MEM_TABLE(0xffffffffffffffff, 0x8008af26, &(0x7f0000000680)) linkat(r1, &(0x7f0000000100)='./file1\x00', r1, &(0x7f0000000240)='./file0\x00', 0x0) unlink(&(0x7f0000000280)='./file1\x00') 8m42.667468569s ago: executing program 32 (id=506): r0 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000000), 0x41, 0x0) write$nbd(r0, &(0x7f0000000440)=ANY=[@ANYBLOB], 0x40) io_uring_register$IORING_REGISTER_PBUF_RING(r0, 0x16, &(0x7f0000000680)={&(0x7f0000001000)={[{0x0, 0x0, 0x2}, {&(0x7f0000000340)="ee0e6828c9a9dc657d64193171dcda9277153b6cee261b0cd1cf60f805f21721053bf9f92ecb108dbe05fb0da39ebb3ee363588f1c108bdd8902e112ca62946995806234f4da5568f5a7243503fff4c6c4b703fb61fac7ac24dcf0ccd97b4d59db2ee5b11aad1ffc5e92e399951c685565c50c97238ec65e714fb402072755fa0d", 0x81, 0x2}, {&(0x7f00000004c0)="b2d4362b81765ac72d81bb03fb1b868ef96f9c8b3513546d7c007f00db70e75eb4d45118b9c6c49111be76506327c65733e6aa771ee5f68154a0ffd506035d39597013a1dde8b96f28320e080fc09d7dd25d3ab38c06de86682de90da543434379c4ddbcbf4f3d63b7e36031e0977a44a277bc245d473739881fc6ca0f7b45004f2f5da5910dfd93fb135071878c2e8b94d0cd3911752776f5bcbd1b68d10e9ff0c16f3000ca699961edb1143274a009348cf308ae13c192896d93bce2d317d7ba786f", 0xc3, 0x2}, {&(0x7f00000005c0)="6c9a7d2791d022bc6b35867b84ae3736dce532330022405cae15", 0x1a, 0x3}, {0x0}]}, 0x5, 0x3}, 0x1) syz_open_procfs(0x0, &(0x7f0000002380)='net/ip_mr_cache\x00') mkdir(&(0x7f00000002c0)='./bus\x00', 0x21) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) mkdir(&(0x7f0000000000)='./file0\x00', 0x820009408200a5fe) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x1000000, &(0x7f0000000400)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './bus'}}]}) r1 = open(&(0x7f0000000140)='./file0\x00', 0x0, 0x150) mknodat$loop(r1, &(0x7f0000000040)='./file1\x00', 0x2000, 0x1) chdir(&(0x7f00000003c0)='./bus\x00') prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r2 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) ioctl$VHOST_SET_MEM_TABLE(0xffffffffffffffff, 0x8008af26, &(0x7f0000000680)) linkat(r1, &(0x7f0000000100)='./file1\x00', r1, &(0x7f0000000240)='./file0\x00', 0x0) unlink(&(0x7f0000000280)='./file1\x00') 6m34.601552506s ago: executing program 4 (id=701): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) bind$alg(0xffffffffffffffff, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, 0x0, 0x0) r0 = accept4(0xffffffffffffffff, 0x0, 0x0, 0x0) sendmmsg$alg(r0, 0x0, 0x0, 0x40800) recvmsg(r0, 0x0, 0x0) ioctl$vim2m_VIDIOC_S_FMT(0xffffffffffffffff, 0xc0d05605, &(0x7f0000000040)={0x1, @pix={0xc2, 0x80000001, 0x35315258, 0x5, 0xff, 0x8, 0x0, 0x6, 0x0, 0x0, 0x2}}) sched_setscheduler(0x0, 0x1, &(0x7f0000000400)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) setsockopt$IP_VS_SO_SET_ZERO(0xffffffffffffffff, 0x0, 0x48f, &(0x7f0000000380)={0x11, @local, 0x4e24, 0x3, 'ovf\x00', 0x16, 0xffff, 0x7b}, 0x2c) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r4 = add_key$keyring(&(0x7f0000000000), &(0x7f00000000c0)={'syz', 0x3}, 0x0, 0x0, 0xffffffffffffffff) r5 = add_key$user(&(0x7f0000000080), &(0x7f0000000040)={'syz', 0x0}, &(0x7f0000000540)="0706675823b8a37f19b37e0f9f120663b78a6a322f28cb301825eddc42c667fc68923d7df9f4c1843c5f11b63d2684fff43955079736fa4c80100487c31c09706b6bf145eb1baf416d2681491bd6a3098fe1a6741d65b085b4075db8419d9e6d17b1eec4dfb860a71d61af753459bcc5ea1f20d6c1c74afda3b0c08bf98886eaac01b08aa753b8727f25773c98cd6a78c06b758992b03b81e2e09cf103dc16a5658a3b58626b457ee4773d41b3548f2258a2e11cc22555da4ef9035cbfe8dc1e", 0xc0, r4) r6 = add_key$user(&(0x7f0000000180), &(0x7f0000000340)={'syz', 0x3}, &(0x7f0000000140)="04", 0x1, 0xfffffffffffffffe) keyctl$dh_compute(0x17, &(0x7f00000001c0)={r6, r5, r6}, &(0x7f0000000700)=""/259, 0x103, &(0x7f0000000400)={&(0x7f0000000100)={'streebog256-generic\x00'}}) 6m33.273636013s ago: executing program 4 (id=704): socket$inet6_mptcp(0xa, 0x1, 0x106) r0 = socket$inet6_sctp(0xa, 0x1, 0x84) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r2 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000100), 0x200, 0x0) ioctl$SNDCTL_DSP_SETFMT(r2, 0xc0045005, &(0x7f0000000640)=0x10) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x300000f, 0x11011, 0xffffffffffffffff, 0x0) syz_emit_ethernet(0x36, &(0x7f0000000080)={@random="e33110495bfd", @dev, @void, {@ipv6={0x86dd, @generic={0x0, 0x6, "a7751a", 0x0, 0x3a, 0x30d66df472e0f96c, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @mcast2}}}}, 0x0) r3 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) ioctl$IOCTL_VMCI_VERSION2(r3, 0x7a7, &(0x7f0000000040)=0x90000) ioctl$IOCTL_VMCI_INIT_CONTEXT(r3, 0x7a0, &(0x7f0000000240)={@hyper}) ioctl$DRM_IOCTL_GET_CLIENT(r0, 0xc0286405, 0x0) newfstatat(0xffffffffffffff9c, &(0x7f00000000c0)='.\x00', 0x0, 0x0) ioctl$IOCTL_VMCI_QUEUEPAIR_ALLOC(r3, 0x7a8, &(0x7f00000000c0)={{@host, 0x3}, @any, 0x0, 0x200000000000, 0x1, 0x6, 0x6c, 0x0, 0x6}) close(r3) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x0, 0x9, 0xfffffffffffffffd}, 0x0, 0x0, 0x0, 0x0) syz_mount_image$msdos(&(0x7f00000002c0), &(0x7f0000000280)='./bus\x00', 0x2000844, &(0x7f00000041c0)={[{@dots}, {@fat=@allow_utime={'allow_utime', 0x3d, 0x10}}, {@fat=@quiet}, {@fat=@allow_utime={'allow_utime', 0x3d, 0x8}}, {@dots}, {@dots}, {@nodots}, {@fat=@check_normal}, {@dots}, {@fat=@umask={'umask', 0x3d, 0x4}}, {@fat=@showexec}, {@dots}, {@fat=@sys_immutable}]}, 0x1, 0x24c, &(0x7f0000000500)="$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") 6m31.82482232s ago: executing program 4 (id=706): r0 = syz_open_dev$dri(&(0x7f00000000c0), 0x0, 0x0) r1 = syz_open_dev$dri(&(0x7f00000000c0), 0x1, 0x0) ioctl$DRM_IOCTL_WAIT_VBLANK(r1, 0xc018643a, &(0x7f0000000140)={0x4000000}) ioctl$DRM_IOCTL_WAIT_VBLANK(r1, 0xc018643a, &(0x7f0000000040)={0x4000000}) io_uring_setup(0x14897, &(0x7f0000000340)={0x0, 0xfcd3, 0x8000, 0x40001, 0xfffffffe}) connect$inet6(0xffffffffffffffff, &(0x7f0000000200)={0xa, 0x0, 0x0, @loopback}, 0x1c) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) bind$netlink(r2, &(0x7f0000000080)={0x10, 0x0, 0x0, 0xfffffffffffffffd}, 0xc) r3 = socket$inet6(0xa, 0x3, 0x1) connect$inet6(r3, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_IPV6_XFRM_POLICY(r3, 0x29, 0x23, &(0x7f0000000340)={{{@in6=@private0={0xfc, 0x0, '\x00', 0x1}, @in6=@mcast2, 0x0, 0x0, 0x0, 0x0, 0xa}, {0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc}, {}, 0x0, 0x0, 0x1}, {{@in=@dev={0xac, 0x14, 0x14, 0x33}, 0xfffffffd, 0x33}, 0x0, @in6=@dev={0xfe, 0x80, '\x00', 0x2}, 0x0, 0x0, 0x0, 0xfd, 0x0, 0x0, 0xfffffffe}}, 0xe8) sendmmsg(r3, &(0x7f0000000480), 0x21, 0x0) r4 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB="8400000012000501000000000000"], 0x84}, 0x1, 0x0, 0x0, 0x40}, 0x20040810) setsockopt$inet6_tcp_TCP_REPAIR(0xffffffffffffffff, 0x6, 0x13, &(0x7f0000000100)=0xffffffffffffffff, 0x4) socket$nl_generic(0x10, 0x3, 0x10) r5 = socket$inet6_udp(0xa, 0x2, 0x0) bind$inet6(r5, &(0x7f0000000000)={0xa, 0xe22, 0x0, @empty}, 0x1c) socket$pppl2tp(0x18, 0x1, 0x1) write$binfmt_script(0xffffffffffffffff, &(0x7f0000000240)={'#! ', './file0'}, 0xfc94) close_range(r0, 0xffffffffffffffff, 0x0) 6m31.348322388s ago: executing program 4 (id=708): socket$nl_generic(0x10, 0x3, 0x10) socket(0x10, 0x3, 0x0) epoll_create1(0x0) socket(0x1, 0x80802, 0x0) epoll_create1(0x0) socket$netlink(0x10, 0x3, 0x0) socket$inet6_sctp(0xa, 0x5, 0x84) socket$nl_generic(0x10, 0x3, 0x10) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(twofish)\x00'}, 0x58) accept4(r0, 0x0, 0x0, 0x800) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000940)={&(0x7f00000013c0)=ANY=[@ANYBLOB="640000001000030400"/20, @ANYRES32=0x0, @ANYBLOB="e5fda988000000002800128009000100766c616e000000001800", @ANYRES32=r1, @ANYBLOB='\b\x00\n\x00', @ANYRES32, @ANYBLOB="0a000100000070"], 0x64}, 0x1, 0x0, 0x0, 0x8811}, 0x0) 6m30.264909945s ago: executing program 4 (id=711): syz_open_dev$vim2m(0x0, 0x47b, 0x2) mknod$loop(&(0x7f0000000140)='./file0\x00', 0xfff, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x7) syz_mount_image$nilfs2(&(0x7f0000000380), &(0x7f0000000a40)='./file0\x00', 0x0, &(0x7f0000000200)={[{@order_relaxed}, {@errors_continue}, {@nodiscard}, {@nodiscard}, {@errors_remount_ro}, {@errors_remount_ro}]}, 0xf, 0xa02, &(0x7f0000001ec0)="$eJzs3U9sXEcdAOB5a68d16mzhgKmoYmBAqmgTrCtKrmkMZRrpN7KsQppiHBTlHBpVakpUsUNRap67IGqh1wQFeLSA1JEVUQvQZQ7CoVKVVGgFQipoNYo9sx6d+zH/rG99vp9n/Tz+L2ZfTPPu943fp6dCUBl1Va/Li7OFCG89PqLj/zkD698twghHG2WaLSUW9uqhxCKtsevuxUzPv7w2XObpUWYX/2atsPZ283HToYQrobZcCM0wsL7j829ubT08vWbj16efuH02zt0+gAAUCln3/jH7x94761vTP/nF0fOhPHm/tQ/b8TtydjvPxH793n/v2hJi5btZCwrNxIj//thJCs3mtUzWlJfPTtOvaTcWIf6Rlr2bXaeALAfrN/XK2pzbdu12tzc2nX/jlvjY8XcpYvLT1zZpYYCANvmXw+HEM4IIYQQokqxcmi3eyAAQNXl44U3uJqPLNia5tEOdFf/7aXa5o+HbTDo17/6h6v+V5/3jsP22a+vpnRe6fcojWPIxxGOZI/r9fe/lh1ntMd2lo0rHJbxhmXtzH+ue1VZ+3t9HndLWfvz8bB7VVn783G6e1VZ+8cH3I5+lbX/wIDb0a+y9k80v9uvV7jtcd/q1/V3iyNZfuv1M39PH5b3eACg3UfG/wkhhBCVi+d2uwMCAOw5+fw4K1HKz+fjyfPzeXjy/HxeoDx/vEP+gQ75AMBGC7+68PNrxfr/+bc6Hi6Nu7grppM9ticfrdFr/Vsd97TV+odl3BIA1fbUTxe/89aZpZG1+X/Xr2WfZPP/prl6r8XtNO7yYLbdnPt3tr2eWkm5gztxUgDA/5Wuv2Xz/94dt2dCvXji4vL5E3F7Kqa/G6+P39n/zQG3GwDoX7fz/8+E9vn/Dzb312ut/YJD6/uL1n5BI9s/X7J/IW5Px/T74xOr++fOPbX8ve0+eQCoqDe+dfC1D357Kazd/1///3e6/59u4zfiWLsPYoHUT0j3Bzbc/z/WXs9UWbkT7eUOlZU72V6ukZWrx8jn3cjHB05kj0vjFNK4h9TfSeMap8vak02QMZaVG41xd9aeqaw9G873RHt78nloUv2NbH8+7iGVmw4AsNGVp5/5wePLy+cv+8Y3vqngN8+FEDbL2u13JmCnHf/Rkz88fuXpZx68+OTjF85fOH9pYXH+1KmHFucXHzq+el//eOvdfQBgP1jv9O92SwAAAAAAAAAAAAAAgDKD+KTxbp8jANDu7w+HEM6ILEb2QBuEECk+2gNtEGKfxcpKvuIvAMBg9bre/lY1jxbn80/rHqT04IN/nL4Tqdjtpfb+kvWL2U6Dfv2rf7jqf/X57a2/ub5I1+9/tfYDzPZX761fnjzZWv+9o13Wn5//sf7q/3NW/9dCd/Wv/Cyrv8+pcd/J6r+ry/o3nP/J/ur/S6z/nrh97Mvd1t/+/Kf1dtJyOBPZ+UyW1P/Xevv5p7X9ej7/Az2cdIt34/kDQBXVdrsBOyT1ElI/OvVDWtfnCy3r7IWsfLf9/1p2nHy9vn6l46Z+0BfjdurupHUD8/UOe21/Wp9wKjtu0WW/tuz1Myz/VSpr/3Y9jzutrP35epB7VVn7xwbcjn6VtT//vdyrytrf559VA1fW/okBt2NYHY5p2fUwXX+mYl7abmTbk5s8F/u1bwEAw+7bp2/ef+3rozfy9fnTdT39GTgZ/6a+npXL+wsTWd+xyMp/KaY/jukrMf1NTN/Jjrez/20DgGp6z+f/hBBCiMpF1T//5/4CVVb113/Vz7/a7/6e/07S6yO/j5+Mdsivt+SPbJI/1uHx41l+/nwd6JB/T3bclSjlf6ZD/mc75H+uQ/5Mh/xDHfLv7ZB/uEP+FzrkH+mQf7RDPgDD6fMx9f4OANWRj/tz/QeA/S9NrOP6DwDV8amYll3/7+uQDwAMn0/H1PUdACqk2Hymx63O2wMMjzS/dPo9j8uBhPtj+pWYfjWmab2UPpdfAfaA//7713+7VqzP93c4y+92Pvmi1v7Ju3z9nwe6bE/++b1e57NvdFnPTtU/vcX6AQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABis2urXxcWZIoSXXn/xkX+e+tO7RQjhaLNEo6Xc2la9ZXu27TghvFaspR9/+Oy51vSTmBZhPhShaO4PZ283a5oMIVwNs+FGaISF9x+be3Np6eXrNx+9PP3C6bd38EcAAAAA+97/AgAA//87+jkE") r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee2, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0x210002, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = syz_open_dev$vbi(&(0x7f0000000000), 0x0, 0x2) ioctl$VIDIOC_S_INPUT(r3, 0xc0045627, &(0x7f0000000100)=0x3) madvise(&(0x7f0000000000/0x3000)=nil, 0x7fffffffffffffff, 0x3) r4 = openat$binder_debug(0xffffffffffffff9c, &(0x7f00000002c0)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) ioctl$VIDIOC_CREATE_BUFS(r4, 0xc100565c, 0x0) execve(&(0x7f0000000000)='./file0\x00', 0x0, &(0x7f0000000180)={[&(0x7f0000000300)=' wO\xd5\xce\x82\x89r\xa0\r\xc4Z\x15\xfds\x17g\n\xee\x9f\a0\xc3\x80\xbf\x80j$\xe6Z\xde\xf1pc\x96\x8f\xb5\x9d\xe3\x11m\x88~\xe3\xc7\xe3\t\xab\xbb@\xd9\xf8\xa2N\x03\xcf\xe4\xd6\x0ew\x10\xc2\xaa\x84bC\xc8\xd0\xe07\xa1\rIa\xb1^\xc5WG\xccV\xd3\x91\x84x\x9d\x8eg\x84\xeb\x9e;\x8f\xa1\xa3\xcf]@\x82\xcf\x01$;\xd5\xc0\xa8\xc8r\x0e_\xac\xef\xf5\r\xd5Q\v\b#E\xcf@a\xa2\xaa#\x13S\x04\x12$\xcb\xbeV!\x1d\xc7\x84_\\ \xc7oh$\xc9\x06m']}) 6m28.2287115s ago: executing program 4 (id=714): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) socketpair$unix(0x1, 0x5, 0x0, 0x0) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, &(0x7f0000000000)={0x0, &(0x7f0000000040)}, 0x10) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r0, 0x84, 0x6e, 0x0, 0x0) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000480)={0xffffffffffffffff, 0x0, 0x25, 0x2, @val=@uprobe_multi={0x0, 0x0, 0x0, 0x6, 0x0, 0x1}}, 0x40) r1 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r1, 0xaf01, 0x0) r2 = eventfd(0xc) ioctl$VHOST_SET_LOG_FD(r1, 0x4004af07, &(0x7f0000000240)=r2) ioctl$VHOST_SET_VRING_KICK(r1, 0x4008af20, &(0x7f0000000040)={0x1, r2}) ioctl$VHOST_SET_VRING_ADDR(r1, 0x4028af11, &(0x7f0000000140)={0x0, 0x0, 0x0, &(0x7f0000000500)=""/67, 0x0}) ioctl$VHOST_SET_VRING_ADDR(r1, 0x4028af11, &(0x7f0000000280)={0x1, 0x1, &(0x7f0000000380)=""/241, &(0x7f0000000840)=""/86, &(0x7f0000000480)=""/59, 0x100000}) ioctl$VHOST_SET_MEM_TABLE(r1, 0x4008af03, &(0x7f0000000a40)) waitid(0x0, 0x0, 0x0, 0x8, 0x0) setsockopt$inet6_MCAST_MSFILTER(0xffffffffffffffff, 0x29, 0x30, 0x0, 0x210) ioctl$VHOST_SET_VRING_ERR(r1, 0x4008af22, &(0x7f00000002c0)={0x1, r2}) ioctl$VHOST_VSOCK_SET_RUNNING(r1, 0x4004af61, &(0x7f0000000000)=0x1) unshare(0x64000600) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) syz_read_part_table(0x5d4, &(0x7f0000000000)="$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") 6m12.450207181s ago: executing program 33 (id=714): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) socketpair$unix(0x1, 0x5, 0x0, 0x0) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, &(0x7f0000000000)={0x0, &(0x7f0000000040)}, 0x10) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r0, 0x84, 0x6e, 0x0, 0x0) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000480)={0xffffffffffffffff, 0x0, 0x25, 0x2, @val=@uprobe_multi={0x0, 0x0, 0x0, 0x6, 0x0, 0x1}}, 0x40) r1 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r1, 0xaf01, 0x0) r2 = eventfd(0xc) ioctl$VHOST_SET_LOG_FD(r1, 0x4004af07, &(0x7f0000000240)=r2) ioctl$VHOST_SET_VRING_KICK(r1, 0x4008af20, &(0x7f0000000040)={0x1, r2}) ioctl$VHOST_SET_VRING_ADDR(r1, 0x4028af11, &(0x7f0000000140)={0x0, 0x0, 0x0, &(0x7f0000000500)=""/67, 0x0}) ioctl$VHOST_SET_VRING_ADDR(r1, 0x4028af11, &(0x7f0000000280)={0x1, 0x1, &(0x7f0000000380)=""/241, &(0x7f0000000840)=""/86, &(0x7f0000000480)=""/59, 0x100000}) ioctl$VHOST_SET_MEM_TABLE(r1, 0x4008af03, &(0x7f0000000a40)) waitid(0x0, 0x0, 0x0, 0x8, 0x0) setsockopt$inet6_MCAST_MSFILTER(0xffffffffffffffff, 0x29, 0x30, 0x0, 0x210) ioctl$VHOST_SET_VRING_ERR(r1, 0x4008af22, &(0x7f00000002c0)={0x1, r2}) ioctl$VHOST_VSOCK_SET_RUNNING(r1, 0x4004af61, &(0x7f0000000000)=0x1) unshare(0x64000600) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) syz_read_part_table(0x5d4, &(0x7f0000000000)="$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") 2m46.572987179s ago: executing program 6 (id=1052): syz_mount_image$hfs(&(0x7f0000000080), &(0x7f0000000200)='./file0\x00', 0x1a10084, &(0x7f00000000c0)=ANY=[@ANYRES64=0x0], 0x4, 0x340, &(0x7f0000001f80)="$eJzs3U9rE00cB/DvbDZN8rT02aftQ8FjteCptPWgeLFIEcE34EGKtU2hdK1gK9iCmHoW8SYIHr15Fn0LehHfgILQg3jSS/HgyszO7L/ObjZp2rT0+4Gmm838++3sZGdSmgURnVpX57+8vrArf0QVQAXAZcABdgC4AP7HeP3B+ubqpt9cLiqoAtShfoTOKfalWVpv2rLKfCqH5slnLoaS++hwBEEQfG2b6ueRtIX6R4Rjfx8HqOnRqV6vR68MHGHreq8VxnW6JHpY7GEPDzHcz+YQEVH/6eu/o68SQ3r+7jjApJ6HZ67/J05qfrPXv3YcC9H13wmfB0Ien3/VS/F6Ty3hZO87ZpVoK8t6TgTx4VYzRSfTAaLdqlK1xWmsrPrNqZYq4AmuaIlkY+pxGSYQJa+1es46YVmbFiiKvdigiqEqY5jNaf9oxzW+/44X9uoWPpZok/ggPokF4eEllqP5nxsIeXDU8fEyPRW2fzq/RBWlF6ZKRRmv3/9TlZwxPfDuTRxlI++41lGRbbGRpYha5vMBz7Tzec7SRO0eQTpbGN1MfnQq16g112z0/Lc111g2V2Ol6jenlu75hR+l9Ix1RSeeiZtiAj/wFvOJ+b8jU09i/8gUrTBBapQLlVKfGYXxuCplTj+mqAF8t6ORSco1a0fbXP9mtp7iDi5heGNre23R95v3S2246CBxpxtmqMR7gkOrq8RGeCLq01Hukb8TaVCXG1UAPav0TxDYQ3axte3gsEOuqlAvvopD3l5bNMP/YFWgFRVoXprLTwxgDoDeY94Ruqn9cZSrFhdYKvsv2dtqj/2cT79P9bwvdhJ7TFWpNBXUSg3GRhe133i0tuh380ZEJ03c6Ri/1e/GUD/IeZcI13+J9cq0eteRD17BaiRoV3iixJmcFdCIevyn3AouKjZ3njhoNtqsuc6eB85lanRgatzJFuvpduI4/lWy8z9liHl8xm1+/k9EREREREREREREREREREREREREdNJsbLkd/X9CN/9OkK5x9xR+8QYRERERERERERERERERERERERERERER0cEk7v8LVNQdYwbCb+KuH/39f/V3dHuVEvf/NfelIKKu/Q0AAP//PXde6g==") r0 = socket$tipc(0x1e, 0x2, 0x0) bind$tipc(r0, &(0x7f0000000040)=@nameseq={0x1e, 0x1, 0x0, {0x41}}, 0x10) bind$tipc(r0, &(0x7f0000000080)=@nameseq={0x1e, 0x1, 0x3, {0x41, 0x2, 0xfffffffd}}, 0x10) bind$tipc(r0, &(0x7f0000000100)=@name={0x1e, 0x2, 0x9d3354bba4295a8d, {{0x41}}}, 0x10) r1 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00'}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, r1, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) open(&(0x7f0000000080)='./bus\x00', 0x143142, 0x0) mount(&(0x7f0000000100), &(0x7f0000000280)='./bus\x00', &(0x7f00000002c0)='9p\x00', 0x2008440, 0x0) r5 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0, 0x0) getdents64(r5, &(0x7f0000000f80)=""/4096, 0x1000) r6 = socket$igmp6(0xa, 0x3, 0x2) setsockopt$IP6T_SO_SET_REPLACE(r6, 0x29, 0x40, &(0x7f0000000480)=@mangle={'mangle\x00', 0x8, 0x6, 0x678, 0x0, 0x370, 0x270, 0xd0, 0x488, 0x5a8, 0x5a8, 0x5a8, 0x5a8, 0x5a8, 0x6, 0x0, {[{{@uncond, 0x0, 0xa8, 0xd0, 0x0, {0x7a00000000000000}}, @HL={0x28}}, {{@ipv6={@dev, @private2, [], [], 'pimreg0\x00', 'nicvf0\x00'}, 0x0, 0x178, 0x1a0, 0x0, {0x5002}, [@common=@unspec=@physdev={{0x68}, {'ipvlan0\x00', {}, 'netpci0\x00', {}, 0x0, 0x15}}, @common=@unspec=@physdev={{0x68}, {'veth1_to_bridge\x00', {}, 'gretap0\x00', {}, 0x0, 0x10}}]}, @common=@unspec=@CLASSIFY={0x28}}, {{@ipv6={@local, @rand_addr=' \x01\x00', [], [], 'veth1_to_batadv\x00', 'dvmrp1\x00'}, 0x0, 0xd8, 0x100, 0x0, {}, [@common=@inet=@dccp={{0x30}}]}, @unspec=@CHECKSUM={0x28}}, {{@uncond, 0x0, 0xd0, 0x118, 0x0, {}, [@inet=@rpfilter={{0x28}}]}, @DNPT={0x48, 'DNPT\x00', 0x0, {@ipv6=@dev, @ipv4=@loopback}}}, {{@uncond, 0x0, 0xf8, 0x120, 0x0, {}, [@inet=@rpfilter={{0x28}}, @common=@eui64={{0x28}}]}, @inet=@TOS={0x28}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x6d8) 2m42.838937879s ago: executing program 6 (id=1058): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x102}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs={0x0, 0x0, 0xfffffffe}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) openat$procfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) pread64(0xffffffffffffffff, &(0x7f0000002380)=""/253, 0xfd, 0x4eb) getsockopt$IP_SET_OP_GET_BYNAME(0xffffffffffffffff, 0x1, 0x53, &(0x7f0000000040)={0x6, 0x7, 'syz1\x00'}, &(0x7f0000000180)=0x28) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$ethtool(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_FEATURES_SET(r4, &(0x7f00000035c0)={0x0, 0x0, &(0x7f0000003580)={&(0x7f0000005f00)={0x44, r5, 0x1, 0x0, 0x0, {}, [@ETHTOOL_A_FEATURES_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'geneve1\x00'}]}, @ETHTOOL_A_FEATURES_WANTED={0x18, 0x3, 0x0, 0x1, [@ETHTOOL_A_BITSET_SIZE={0x8, 0x2, 0x6}, @ETHTOOL_A_BITSET_NOMASK={0x4}, @ETHTOOL_A_BITSET_VALUE={0x5, 0x4, '4'}]}]}, 0x44}}, 0x4004) 2m39.582828752s ago: executing program 6 (id=1067): bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) r3 = creat(&(0x7f0000000000)='./file0\x00', 0xd931d3864d39dcdb) r4 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r4}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) close(r3) r5 = open(&(0x7f0000000000)='./file0\x00', 0x0, 0x1a1) fcntl$setlease(r5, 0x400, 0x1) execve(&(0x7f00000000c0)='./file0\x00', 0x0, 0x0) 2m34.844637113s ago: executing program 6 (id=1071): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) r1 = dup(r0) bpf$MAP_CREATE(0x0, 0x0, 0x50) r2 = socket$inet6_mptcp(0xa, 0x1, 0x106) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r3 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r3, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) syz_open_dev$evdev(&(0x7f0000000000), 0x2, 0x8a2b01) r4 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) ioctl$IOCTL_VMCI_VERSION2(r4, 0x7a7, 0x0) mremap(&(0x7f0000ffa000/0x3000)=nil, 0x1000000000000, 0x2, 0x0, &(0x7f0000ffa000/0x4000)=nil) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r2, 0x6, 0x23, &(0x7f0000000280)={&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0) openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x0) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x0, 0x9, 0xfffffffffffffffd}, 0x0, &(0x7f00000002c0)={0x3fe, 0x5, 0x3, 0x9, 0x8, 0x45ff, 0x7ffffffc}, 0x0, 0x0) read$eventfd(r1, &(0x7f0000000100), 0x8) ioctl$TIOCVHANGUP(r0, 0x5437, 0x0) 2m31.990812753s ago: executing program 6 (id=1074): bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x40001e0, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = socket(0x40000000015, 0x5, 0x0) connect$inet(r3, &(0x7f0000000040)={0x2, 0x4e20, @loopback}, 0x10) bind$inet(r3, &(0x7f0000000340)={0x2, 0x4e20, @loopback}, 0x57) sendmsg$NL80211_CMD_JOIN_MESH(r3, &(0x7f00000001c0)={0x0, 0x3d, &(0x7f0000000180)={&(0x7f0000000240)=ANY=[], 0x1a000}}, 0x0) r4 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]}) close_range(r4, 0xffffffffffffffff, 0x0) unshare(0x24060400) r5 = socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$IP6T_SO_SET_REPLACE(r5, 0x29, 0x40, &(0x7f0000000840)=@raw={'raw\x00', 0x3c1, 0x3, 0x5d0, 0x0, 0x111, 0x4b4, 0x1c0, 0xd4feffff, 0x500, 0x20a, 0x278, 0x500, 0x278, 0x3, 0x0, {[{{@ipv6={@empty, @empty, [], [], 'ipvlan0\x00', 'team_slave_0\x00', {}, {}, 0x6}, 0x0, 0x198, 0x1c0, 0x0, {}, [@common=@inet=@tcp={{0x30}, {[], [], 0x0, 0x0, 0x2}}, @common=@unspec=@string={{0xc0}, {0x0, 0x0, 'bm\x00', "6d93eb04697dfa39de04767f46614613a407abbf4ed2e83a63b484dbb3bf6b2a850e79009e2905d2f98ba19f91f3c9faee6d3686e9bee067f4e77d9ad66238750c4100d7ee97ec7646259d90edece6e9787a97bc956c01754c34c5c9518c46178ed5f9194454980e579c80eca35a58dc47d1d5e4ff6e216c724e88c702448587", 0x28}}]}, @common=@inet=@TCPMSS={0x28}}, {{@ipv6={@loopback, @private1, [], [], 'veth1_to_hsr\x00', 'pim6reg1\x00'}, 0x0, 0x2d8, 0x340, 0x0, {}, [@common=@unspec=@bpf1={{0x230}, @pinned}]}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0x0, 0x0, 'pptp\x00', 'syz1\x00'}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x630) mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x1, 0x0, 0x0, 0x2) get_mempolicy(0x0, 0x0, 0x0, &(0x7f0000001000/0x4000)=nil, 0x3) 2m27.024112254s ago: executing program 6 (id=1079): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f0000001c40)=ANY=[@ANYBLOB="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"], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000000), 0x10}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000540)='rcu_utilization\x00', r0}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x6) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000380)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x2, &(0x7f0000000000)=[{0x800, 0x5, 0x5}, {0x1ff, 0xb, 0x1, 0x400007}]}) 2m11.150909063s ago: executing program 34 (id=1079): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f0000001c40)=ANY=[@ANYBLOB="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"], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000000), 0x10}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000540)='rcu_utilization\x00', r0}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x6) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000380)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x2, &(0x7f0000000000)=[{0x800, 0x5, 0x5}, {0x1ff, 0xb, 0x1, 0x400007}]}) 1m41.15168348s ago: executing program 7 (id=1101): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x1, 0x0, 0x0, 0x6, 0x0, 0x0, 0x41100, 0x2b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x37}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r3, 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000300)='./file1\x00', 0xc4042, 0x1ff) sendfile(r2, r3, 0x0, 0x16500000) mount(0x0, &(0x7f0000000080)='./file1\x00', &(0x7f0000000040)='binder\x00', 0x2800003, 0x0) mkdir(0x0, 0x16) bpf$PROG_LOAD(0x5, 0x0, 0x0) r4 = syz_open_dev$usbfs(&(0x7f0000000100), 0x76, 0x101301) ioctl$USBDEVFS_REAPURB(r4, 0x4004550c, &(0x7f00000000c0)) ioctl$USBDEVFS_FREE_STREAMS(r4, 0x802c550a, &(0x7f0000000000)=ANY=[]) 1m38.54358925s ago: executing program 7 (id=1139): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) r0 = openat$tcp_congestion(0xffffffffffffff9c, &(0x7f00000000c0), 0x1, 0x0) write$tcp_congestion(r0, 0x0, 0x0) clock_gettime(0x2, &(0x7f0000008100)) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) syz_io_uring_submit(0x0, 0x0, &(0x7f00000002c0)=@IORING_OP_RECV=@pass_buffer={0x1b, 0x20, 0x0, r2, 0x0, 0x0, 0x0, 0x40000002}) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) shutdown(r4, 0x1) setsockopt$inet6_tcp_TCP_MD5SIG(r4, 0x6, 0xe, &(0x7f0000000300)={@in6={{0xa, 0x4e20, 0x0, @loopback, 0x7}}, 0x0, 0x0, 0x47, 0x0, "09be2271b78506e6dd938d324c415acd403a4480fd1afa34432bcdfa64d957e93efafd27ad06a6f589bb643f167cf0fcd370239aaa93f6ded3c5032c96ead0cdc68474d402ab73e482db7ec1e0a57489"}, 0xd8) bind$inet6(r4, &(0x7f0000000040)={0xa, 0x4e20, 0xf, @loopback, 0x5}, 0x1c) setsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, 0x0, 0x0) connect$inet6(r4, &(0x7f0000000000)={0xa, 0x4e20, 0xfffffff1, @empty, 0x2}, 0x1c) connect$inet6(r4, &(0x7f00000000c0)={0xa, 0x4e20, 0x8, @empty, 0x9f}, 0x1c) 1m22.0329835s ago: executing program 35 (id=1139): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) r0 = openat$tcp_congestion(0xffffffffffffff9c, &(0x7f00000000c0), 0x1, 0x0) write$tcp_congestion(r0, 0x0, 0x0) clock_gettime(0x2, &(0x7f0000008100)) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) syz_io_uring_submit(0x0, 0x0, &(0x7f00000002c0)=@IORING_OP_RECV=@pass_buffer={0x1b, 0x20, 0x0, r2, 0x0, 0x0, 0x0, 0x40000002}) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) shutdown(r4, 0x1) setsockopt$inet6_tcp_TCP_MD5SIG(r4, 0x6, 0xe, &(0x7f0000000300)={@in6={{0xa, 0x4e20, 0x0, @loopback, 0x7}}, 0x0, 0x0, 0x47, 0x0, "09be2271b78506e6dd938d324c415acd403a4480fd1afa34432bcdfa64d957e93efafd27ad06a6f589bb643f167cf0fcd370239aaa93f6ded3c5032c96ead0cdc68474d402ab73e482db7ec1e0a57489"}, 0xd8) bind$inet6(r4, &(0x7f0000000040)={0xa, 0x4e20, 0xf, @loopback, 0x5}, 0x1c) setsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, 0x0, 0x0) connect$inet6(r4, &(0x7f0000000000)={0xa, 0x4e20, 0xfffffff1, @empty, 0x2}, 0x1c) connect$inet6(r4, &(0x7f00000000c0)={0xa, 0x4e20, 0x8, @empty, 0x9f}, 0x1c) 16.091929473s ago: executing program 1 (id=1256): openat$vcs(0xffffffffffffff9c, 0x0, 0x20000, 0x0) read$FUSE(0xffffffffffffffff, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x9, 0x88}, 0x0) bpf$ENABLE_STATS(0x20, 0x0, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002c80)={0x3, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB], 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000140)={r0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2f, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) sched_setscheduler(0x0, 0x1, &(0x7f0000000640)=0x7) r1 = getpid() sched_setscheduler(r1, 0x1, &(0x7f0000000200)=0x7) bpf$BPF_PROG_WITH_BTFID_LOAD(0x24, &(0x7f0000000100)=@bpf_lsm={0x1d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x1b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x536, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) socket$inet6_udp(0xa, 0x2, 0x0) ioctl$VIDIOC_QUERYBUF(0xffffffffffffffff, 0xc0585609, &(0x7f00000005c0)=@multiplanar_mmap={0x81, 0x4, 0x4, 0x2000, 0x80, {}, {0x2, 0x2, 0x4, 0x7, 0x2, 0x4, "4360c0ba"}, 0x3, 0x1, {0x0}, 0x9}) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff) r4 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) fchdir(r4) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x1f1) renameat2(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0xffffffffffffff9c, &(0x7f00000004c0)='./file0\x00', 0x0) 14.311771816s ago: executing program 3 (id=1259): recvmsg(0xffffffffffffffff, 0x0, 0x4100) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x11, 0x3, &(0x7f0000000200)=@framed, &(0x7f00000003c0)='GPL\x00'}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000140)='contention_end\x00', r0}, 0x10) gettid() timer_settime(0x0, 0x0, &(0x7f00000000c0)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000240)={0xffffffffffffffff}) recvmsg(r1, &(0x7f0000000900)={0x0, 0x0, &(0x7f0000000880)=[{&(0x7f0000000600)=""/203, 0xcb}], 0x1}, 0x0) r2 = syz_open_dev$evdev(&(0x7f0000000000), 0x2, 0x0) ioctl$KDGKBTYPE(0xffffffffffffffff, 0x4b33, 0x0) ioctl$EVIOCGMASK(r2, 0x80104592, 0x0) write$char_usb(0xffffffffffffffff, 0x0, 0x0) sendmsg$tipc(0xffffffffffffffff, 0x0, 0x0) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME_WAIT_CANCEL(0xffffffffffffffff, 0x0, 0x0) open(&(0x7f00000000c0)='.\x00', 0x10000, 0x0) r3 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/timer_list\x00', 0x0, 0x0) sendfile(0xffffffffffffffff, r3, 0x0, 0x20000023896) 12.576545136s ago: executing program 3 (id=1263): recvmsg(0xffffffffffffffff, 0x0, 0x4100) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x11, 0x3, &(0x7f0000000200)=@framed, &(0x7f00000003c0)='GPL\x00'}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000140)='contention_end\x00', r0}, 0x10) timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f00000000c0)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000240)={0xffffffffffffffff}) recvmsg(r1, &(0x7f0000000900)={0x0, 0x0, &(0x7f0000000880)=[{&(0x7f0000000600)=""/203, 0xcb}], 0x1}, 0x0) r2 = syz_open_dev$evdev(0x0, 0x2, 0x903d01) r3 = syz_open_dev$evdev(&(0x7f0000000000), 0x2, 0x0) ioctl$KDGKBTYPE(0xffffffffffffffff, 0x4b33, 0x0) ioctl$EVIOCGMASK(r3, 0x80104592, 0x0) write$char_usb(r2, 0x0, 0x0) sendmsg$tipc(0xffffffffffffffff, 0x0, 0x0) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME_WAIT_CANCEL(0xffffffffffffffff, 0x0, 0x0) open(&(0x7f00000000c0)='.\x00', 0x10000, 0x0) r4 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000001480), 0x42002, 0x0) r5 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/timer_list\x00', 0x0, 0x0) sendfile(r4, r5, 0x0, 0x20000023896) 10.879165503s ago: executing program 5 (id=1266): socket$inet6_sctp(0xa, 0x1, 0x84) r0 = syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x8002) ioctl$FS_IOC_READ_VERITY_METADATA(r0, 0x2284, &(0x7f00000000c0)={0x0, 0x2083, 0x0, 0x0}) ioctl$VIDIOC_SUBDEV_S_FMT(0xffffffffffffffff, 0xc0585605, &(0x7f0000000080)={0x0, 0x0, {0x0, 0x1, 0x0, 0x3, 0x0, 0x8, 0x1}}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000400)=@abs={0x0, 0x0, 0x4e22}, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r4}, 0x10) r5 = socket$alg(0x26, 0x5, 0x0) bind$alg(r5, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-twofish-3way\x00'}, 0x58) setsockopt$ALG_SET_KEY(r5, 0x117, 0x1, &(0x7f0000000280)="0800b685f75b000200fc00ff05ffdf00da8075392313db00", 0x18) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000000)={'batadv_slave_0\x00'}) r7 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) setsockopt$ax25_SO_BINDTODEVICE(0xffffffffffffffff, 0x101, 0x19, &(0x7f0000000000)=@bpq0, 0x10) ioctl$sock_netdev_private(r7, 0x8914, &(0x7f0000000000)) 10.843449116s ago: executing program 3 (id=1267): r0 = syz_io_uring_setup(0x27b, 0x0, &(0x7f0000000240), &(0x7f0000000200)) io_uring_enter(r0, 0x46f3, 0x0, 0x0, 0x0, 0x0) syz_genetlink_get_family_id$nfc(&(0x7f0000000100), 0xffffffffffffffff) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x9, 0xc, &(0x7f0000000380)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x78, '\x00', 0x0, @fallback=0x1b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000280)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f0000000680)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) add_key(&(0x7f0000000000)='big_key\x00', &(0x7f0000000280)={'syz', 0x1}, &(0x7f00000002c0)="1d", 0xfe3a, 0xfffffffffffffffe) keyctl$KEYCTL_PKEY_ENCRYPT(0x19, 0x0, &(0x7f0000000080)={'enc=', 'oaep', ' hash=', {'sha384-ssse3\x00'}}, 0x0, 0x0) syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x3) r2 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000001840), 0x2982, 0x0) openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/consoles\x00', 0x0, 0x0) ioctl$TIOCSERGETLSR(r2, 0x5459, &(0x7f0000000400)) mknod$loop(&(0x7f0000000340)='./file0\x00', 0x2480, 0x1) mount(&(0x7f0000000280)=@filename='./file0\x00', &(0x7f0000000100)='./file0\x00', &(0x7f0000000080)='ubifs\x00', 0x410040, 0x0) setsockopt$nfc_llcp_NFC_LLCP_MIUX(0xffffffffffffffff, 0x118, 0x1, &(0x7f0000000200)=0x368, 0x4) fsconfig$FSCONFIG_CMD_CREATE(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) r3 = fsmount(0xffffffffffffffff, 0x1, 0x0) openat$cgroup_ro(r3, 0x0, 0x275a, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000940)={0x0, 0x0, 0x0}, 0x0) 9.780262782s ago: executing program 2 (id=1268): socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x4048054) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_genetlink_get_family_id$batadv(0x0, 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_NEIGHBORS(0xffffffffffffffff, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) bpf$BPF_BTF_GET_FD_BY_ID(0x13, 0x0, 0x0) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r3 = socket$alg(0x26, 0x5, 0x0) bind$alg(r3, &(0x7f0000000200)={0x26, 'rng\x00', 0x0, 0x0, 'drbg_pr_sha384\x00'}, 0x58) setsockopt$ALG_SET_KEY(r3, 0x117, 0x1, 0x0, 0x0) r4 = accept4(r3, 0x0, 0x0, 0x0) read$alg(r4, &(0x7f0000000000)=""/35, 0x23) 9.696521438s ago: executing program 5 (id=1269): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f0000003900)=ANY=[@ANYBLOB="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"], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000540)='rcu_utilization\x00', r0}, 0x10) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x0, 0x0) open$dir(0x0, 0x2040, 0x140) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e24}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$SO_TIMESTAMPING(r4, 0x1, 0x25, &(0x7f0000000080)=0x474c, 0x4) bind$inet(r4, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10) connect$inet(r4, &(0x7f0000000480)={0x2, 0x0, @multicast2}, 0x10) sendmmsg(r4, &(0x7f0000007fc0), 0x800001d, 0x0) recvmmsg(r4, &(0x7f0000000040), 0x291962b, 0x45833af92e4b39ff, 0x0) 9.475382336s ago: executing program 1 (id=1270): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) getrandom(0x0, 0x0, 0x1) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) mknodat(0xffffffffffffff9c, &(0x7f00000000c0)='./file2\x00', 0x81c0, 0x0) symlink(&(0x7f0000002040)='./file0/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa/file0\x00', &(0x7f0000000000)='./file1\x00') symlink(0x0, &(0x7f0000000240)='./file0\x00') mmap(&(0x7f0000000000/0xa000)=nil, 0xa000, 0x2, 0x2172, 0xffffffffffffffff, 0x0) mremap(&(0x7f0000002000/0x1000)=nil, 0x1000, 0x2000, 0x3, &(0x7f0000ffb000/0x2000)=nil) syz_open_procfs(0x0, &(0x7f0000000440)='net/route\x00') r3 = socket(0x10, 0x3, 0x0) write(r3, &(0x7f0000000180)="2000000012005f0214f9f4070000fbe40a0000000000", 0x41d) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x1, 0x6, 0x6, 0x5, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x3}, 0x50) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, 0x0, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000600)={&(0x7f00000005c0)='sys_enter\x00', r4}, 0x10) syz_open_procfs$namespace(0x0, &(0x7f0000000040)='ns/time\x00') 7.222514038s ago: executing program 2 (id=1271): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$sock_inet6_tcp_SIOCOUTQ(r0, 0x5411, &(0x7f0000000100)) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20008b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x3) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000001a40)=""/102392, 0x18ff8) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000540)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4000000}, 0x40002) r3 = socket(0x2, 0x80805, 0x0) getsockopt$inet_pktinfo(r3, 0x0, 0x8, &(0x7f0000000000)={0x0, @rand_addr, @broadcast}, &(0x7f0000000040)=0xc) r4 = syz_open_procfs(0xffffffffffffffff, &(0x7f00000002c0)='children\x00') pread64(r4, &(0x7f0000001400)=""/4108, 0x100c, 0x7) r5 = openat(0xffffffffffffff9c, 0x0, 0x143042, 0x0) pwritev2(r5, 0x0, 0x0, 0x5412, 0x800, 0x12) dup2(r5, 0xffffffffffffffff) r6 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r6, &(0x7f0000000800)={0x0, 0x0, &(0x7f00008feff0)={&(0x7f0000000380)=ANY=[@ANYBLOB="020101090800000000170006ffffff00030006001000000002000000e0000009f9ff0f0005000000030005007217440502000000e0000001"], 0x40}}, 0x0) r7 = creat(&(0x7f00000002c0)='./file0\x00', 0x0) write$qrtrtun(r7, 0x0, 0x0) r8 = syz_open_procfs(0xffffffffffffffff, &(0x7f00000004c0)='setgroups\x00') writev(r8, &(0x7f0000003740)=[{&(0x7f0000001440)='de', 0x2}], 0x1) 7.164634902s ago: executing program 5 (id=1272): recvmsg(0xffffffffffffffff, 0x0, 0x4100) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x11, 0x3, &(0x7f0000000200)=@framed, &(0x7f00000003c0)='GPL\x00'}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000140)='contention_end\x00', r0}, 0x10) timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f00000000c0)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000240)={0xffffffffffffffff}) recvmsg(r1, &(0x7f0000000900)={0x0, 0x0, &(0x7f0000000880)=[{&(0x7f0000000600)=""/203, 0xcb}], 0x1}, 0x0) r2 = syz_open_dev$evdev(&(0x7f0000000000), 0x2, 0x0) ioctl$KDGKBTYPE(0xffffffffffffffff, 0x4b33, 0x0) ioctl$EVIOCGMASK(r2, 0x80104592, 0x0) write$char_usb(0xffffffffffffffff, 0x0, 0x0) sendmsg$tipc(0xffffffffffffffff, 0x0, 0x0) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME_WAIT_CANCEL(0xffffffffffffffff, 0x0, 0x0) open(&(0x7f00000000c0)='.\x00', 0x10000, 0x0) r3 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/timer_list\x00', 0x0, 0x0) sendfile(0xffffffffffffffff, r3, 0x0, 0x20000023896) 6.182685832s ago: executing program 1 (id=1273): socket$inet6_udplite(0xa, 0x2, 0x88) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB, @ANYRES32], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = fsopen(&(0x7f0000000280)='ceph\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r3, 0x1, &(0x7f0000000b40)='source', &(0x7f0000000040)='c:::\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r3, 0x6, 0x0, 0x0, 0x0) utimensat(0xffffffffffffff9c, &(0x7f00000003c0)='.\x00', 0x0, 0x0) r4 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$VT_RESIZEX(r4, 0x560a, &(0x7f00000006c0)={0x4, 0x0, 0x0, 0x0, 0x132, 0x3}) bind$bt_hci(0xffffffffffffffff, &(0x7f0000000040)={0x1f, 0x0, 0x1}, 0x6) mount(&(0x7f0000000040)=@nullb, &(0x7f0000000100)='.\x00', &(0x7f0000002280)='vxfs\x00', 0x1000080, 0x0) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x89f1, &(0x7f0000000340)={'ip6gre0\x00', 0x0}) 6.132128345s ago: executing program 3 (id=1274): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x102}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs={0x0, 0x0, 0xfffffffe}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) epoll_create(0x7) ioctl$SNDRV_SEQ_IOCTL_SET_PORT_INFO(0xffffffffffffffff, 0x40a85323, 0x0) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000180)={0x1b, 0x0, 0x0, 0x400, 0x0, 0xffffffffffffffff, 0x8, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x3, 0x1}, 0x50) memfd_create(&(0x7f0000000000)='\xa3\xcb\x04=\x827\xe7\x81S\bDVK| \x8b\xdb\xb1\x03\xd0\x9d2\x9es\x19_=#n_\xeb\xbdR\xea\xb9o\xdbM\x11ca\v\xeb#\xaf\xcf\xb5\xfd`U\xa7k\xd0\xd8\xd2\xc0\x91\xc1\x98#\r\xa7\x16\xfd@\xd7V*^\xcf\x9f\b1\xce3\vN\xa6\x01\xb5\xb5\xba\xdc\xc8\xda\xd2\apY\vu\x80\xa9\x14X\xcf!\xd3W\'\xb44#\xf6\x7fHS\xa6l\x17\x97\x80\xea\xc5+T\xe3\"\xda\x14\xfe,\xf3\\\xeb\x1cp\xd6\xc1\b\xec\xe1\x94\xdf\xdb\xa1\xf7=B\xb2\x94o\xd5{\xd2_\x93\xa1)\xdem\'H\\e\x8bu\xbcVw\xaeb\xa1b\xb1\xc1\f\x9f0\x93\x0f\x16,\xeb!Z\xa9\\\xf7B\xf8L\x05\xc7\xf7q\x9d_\xb4\xbb3i[t\xb6\xbc\x824\x7f\xd7\xb7 \xd4\x7fUE\xcb7\xe3\xb4\xb6\xa0\xd8\x1b\a8\xfe$\xa1\x12&\xb2\xfc\xfb\x12U\xb9u\xb4=\xc4\xc5q\x8bk\xf1\x9c\xc3\xa4w\xf9!^#\x8c', 0x4) r4 = socket(0x2, 0x80805, 0x0) getsockopt$inet_sctp6_SCTP_PARTIAL_DELIVERY_POINT(r4, 0x84, 0x13, &(0x7f0000001300)={0x0, 0x1}, &(0x7f0000001340)=0x8) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r4, 0x84, 0x6f, &(0x7f00000000c0)={r5, 0x30, &(0x7f00000013c0)=[@in={0x2, 0x4e24, @broadcast}, @in={0x2, 0x4e21, @rand_addr=0x64010101}, @in={0x2, 0x4e20, @empty}]}, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f00000010c0), r4) getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(r4, 0x84, 0x1d, 0x0, 0x0) getsockopt$bt_hci(r4, 0x84, 0x7f, 0x0, &(0x7f0000000000)) ioctl$I2C_RDWR(0xffffffffffffffff, 0x707, 0x0) 6.117955416s ago: executing program 2 (id=1275): io_setup(0x58, &(0x7f00000001c0)) write(0xffffffffffffffff, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x5, 0x89}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000100)=0x2) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f000001b000)=""/102400, 0x19000) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f00000002c0)={'syzkaller0\x00', 0x7101}) r2 = socket(0x400000000010, 0x3, 0x0) r3 = socket$unix(0x1, 0x1, 0x0) socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000009c0)=@gettfilter={0x24, 0x2e, 0x1, 0x70bd2c, 0x3, {0x0, 0x0, 0x0, r4, {0xc, 0xc}, {0xffe0, 0xfff1}, {0x6, 0x4}}}, 0x24}, 0x1, 0x0, 0x0, 0x1}, 0x4041080) r5 = socket$inet6_sctp(0xa, 0x1, 0x84) sendto$inet6(r5, &(0x7f0000000280)='g', 0x1, 0x4008891, &(0x7f000005ffe4)={0xa, 0x0, 0x0, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x2}, 0x1c) setsockopt$inet_sctp6_SCTP_EVENTS(r5, 0x84, 0xb, &(0x7f00000000c0)={0xb, 0x4, 0xfe, 0x2, 0x3, 0x0, 0x5, 0x0, 0x0, 0x0, 0xb, 0x0, 0x0, 0x5}, 0xe) setsockopt$sock_int(r5, 0x1, 0x28, 0x0, 0x0) shutdown(r5, 0x1) ioctl$TIOCGSID(0xffffffffffffffff, 0x5429, 0x0) 6.060496901s ago: executing program 5 (id=1276): recvmsg(0xffffffffffffffff, 0x0, 0x4100) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x11, 0x3, &(0x7f0000000200)=@framed, &(0x7f00000003c0)='GPL\x00'}, 0x90) r0 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f00000000c0)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000240)={0xffffffffffffffff}) recvmsg(r1, &(0x7f0000000900)={0x0, 0x0, &(0x7f0000000880)=[{&(0x7f0000000600)=""/203, 0xcb}], 0x1}, 0x0) r2 = syz_open_dev$evdev(0x0, 0x2, 0x903d01) r3 = syz_open_dev$evdev(&(0x7f0000000000), 0x2, 0x0) ioctl$KDGKBTYPE(0xffffffffffffffff, 0x4b33, 0x0) ioctl$EVIOCGMASK(r3, 0x80104592, 0x0) write$char_usb(r2, 0x0, 0x0) sendmsg$tipc(0xffffffffffffffff, 0x0, 0x0) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME_WAIT_CANCEL(0xffffffffffffffff, 0x0, 0x0) open(&(0x7f00000000c0)='.\x00', 0x10000, 0x0) r4 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000001480), 0x42002, 0x0) r5 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/timer_list\x00', 0x0, 0x0) sendfile(r4, r5, 0x0, 0x20000023896) 4.391494856s ago: executing program 1 (id=1277): r0 = socket$nl_rdma(0x10, 0x3, 0x14) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) syz_emit_vhci(&(0x7f0000000140)=@HCI_EVENT_PKT={0x4, @hci_ev_cmd_status={{0xf, 0x4}, {0x79, 0x1, 0x401}}}, 0x7) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) symlinkat(0x0, 0xffffffffffffffff, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r4 = syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r4, 0x4010640d, &(0x7f0000000000)={0x3, 0x2}) r5 = syz_open_dev$dri(&(0x7f0000000140), 0x1, 0x0) write$dsp(0xffffffffffffffff, &(0x7f0000000600)="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", 0xc00) ioctl$DRM_IOCTL_MODE_ADDFB2(r5, 0xc06864b8, &(0x7f0000000580)={0x0, 0xc1, 0x80, 0x20203843, 0x0, [0x2], [0x80ffff]}) ioctl$DRM_IOCTL_MODE_GET_LEASE(r4, 0xc01064c8, 0x0) mq_open(0x0, 0x40, 0xf, &(0x7f00000002c0)={0x200, 0x1, 0x5, 0x5}) ioctl$DRM_IOCTL_MODE_ATOMIC(r4, 0xc03864bc, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000040), 0x0, 0x300}) sendmsg$RDMA_NLDEV_CMD_RES_CQ_GET(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="180000001a140100000000000000000008000100"], 0x18}}, 0x0) 4.350120779s ago: executing program 3 (id=1278): r0 = openat$kvm(0x0, &(0x7f00000002c0), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_CPUID2(r2, 0x4048aecb, &(0x7f0000000480)) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={0x0}, 0x18) r3 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r3}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) futex_waitv(&(0x7f0000001080)=[{0x3, &(0x7f0000001040)=0x3, 0x82}], 0x1, 0x0, &(0x7f0000001100)={0x77359400}, 0x1) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8c}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000380)=0x6) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8) mount$fuse(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000140), 0x0, &(0x7f0000002280)={{}, 0x2c, {'rootmode', 0x3d, 0x1002}}) statx(0xffffffffffffff9c, &(0x7f00000001c0)='./file0\x00', 0x100, 0x800, 0x0) openat$uinput(0xffffffffffffff9c, &(0x7f0000000040), 0x802, 0x0) ioctl$BTRFS_IOC_QUOTA_RESCAN_STATUS(0xffffffffffffffff, 0x8040942d, 0x0) read$FUSE(0xffffffffffffffff, &(0x7f0000006380)={0x2020, 0x0, 0x0, 0x0}, 0x2020) syz_fuse_handle_req(0xffffffffffffffff, &(0x7f0000002300)="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", 0x2000, &(0x7f0000000580)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000a00)={0x130, 0x0, 0x400, {0x0, 0x7, 0x0, '\x00', {0x7ff, 0x7, 0x4, 0x2, r5, 0xffffffffffffffff, 0xc000, '\x00', 0x1, 0x80000000, 0xb4e7, 0x2, {0x8003, 0x8}, {0x100000006, 0x10001}, {0x100000000, 0x7}, {0x9, 0xa80}, 0x8000, 0xb, 0x4, 0x5}}}}) write$FUSE_INIT(0xffffffffffffffff, 0x0, 0x0) socket$inet6_sctp(0xa, 0x1, 0x84) 4.103677819s ago: executing program 5 (id=1279): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) ioctl$TIOCGPKT(0xffffffffffffffff, 0x80045438, 0x0) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000240)={0xffffffffffffffff, 0x0, 0x0, 0x4}, 0x20) ioctl$SNDRV_CTL_IOCTL_ELEM_WRITE(0xffffffffffffffff, 0xc4c85513, 0x0) add_key(&(0x7f0000000000)='big_key\x00', &(0x7f0000000280)={'syz', 0x1}, &(0x7f00000002c0)="1d", 0xfe3a, 0xfffffffffffffffe) add_key(&(0x7f0000000000)='big_key\x00', &(0x7f0000000280)={'syz', 0x1}, &(0x7f00000002c0)="1d", 0xfe3a, 0xfffffffffffffffe) r3 = openat$comedi(0xffffff9c, &(0x7f0000000040)='/dev/comedi2\x00', 0xa400, 0x0) ioctl$COMEDI_DEVCONFIG(r3, 0x40946400, &(0x7f0000000140)={'mpc624\x00', [0x9e1, 0x2166, 0x0, 0xffffe, 0x188d8, 0x8e, 0x1, 0x10, 0x1002, 0xffffffff, 0x200, 0x40008, 0x344, 0x7, 0x7, 0x3, 0x8, 0x803, 0xb, 0xe, 0x4, 0x3, 0x7, 0x8000000a, 0x5, 0x0, 0x22c, 0x7df, 0x6, 0x400007, 0x1]}) r4 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000640)={'wlan0\x00'}) sendmsg$NL80211_CMD_CONNECT(r4, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x20000000}, 0x488c0) 3.900503885s ago: executing program 2 (id=1280): syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) mkdirat(0xffffffffffffff9c, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x5, &(0x7f0000000000)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket$inet(0x2, 0x801, 0x0) pipe2(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) listen(r3, 0x1000000) splice(r3, 0x0, r4, 0x0, 0x7ffff000, 0x0) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000780), r5) sendmsg$NLBL_MGMT_C_ADD(r5, &(0x7f0000000d80)={0x0, 0x0, &(0x7f0000000d40)={&(0x7f0000000040)={0x34, r6, 0x1, 0x400000, 0x0, {}, [@NLBL_MGMT_A_IPV4MASK={0x8, 0x8, @multicast2}, @NLBL_MGMT_A_IPV4ADDR={0x8, 0x7, @remote}, @NLBL_MGMT_A_DOMAIN={0x5, 0x1, '\x00'}, @NLBL_MGMT_A_PROTOCOL={0x8, 0x2, 0x5}]}, 0x34}, 0x1, 0x0, 0x0, 0x44000}, 0x0) r7 = openat$fb0(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) ioctl$FBIOPUT_VSCREENINFO(r7, 0x4601, 0x0) 3.010082497s ago: executing program 1 (id=1281): prctl$PR_SET_SECCOMP(0x16, 0x2, 0x0) syz_open_dev$ndb(0x0, 0x0, 0x0) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, 0x0, &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x46, '\x00', 0x0, 0x2}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee2, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) getsockopt$bt_BT_FLUSHABLE(0xffffffffffffffff, 0x112, 0x8, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000280)={0x0, &(0x7f0000000100)=""/223, 0x0, 0xdf, 0x1}, 0x28) r3 = syz_open_dev$sg(&(0x7f0000000040), 0x0, 0x800) ioctl$SG_GET_VERSION_NUM(r3, 0x2284, &(0x7f0000000080)) connect$inet6(0xffffffffffffffff, &(0x7f0000000100)={0xa, 0x0, 0x0, @private1, 0x200000}, 0x1c) getsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(0xffffffffffffffff, 0x84, 0x7c, &(0x7f00000000c0), &(0x7f0000000180)=0x8) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fedcb7907001175f37538e486dd6317ce220000000000"], 0xfdef) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) socket$tipc(0x1e, 0x2, 0x0) 3.001056728s ago: executing program 5 (id=1282): syz_open_dev$sndmidi(0x0, 0x2, 0x141101) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000280)={0x0}, 0x1, 0x0, 0x0, 0x804}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) r3 = socket$inet(0x2, 0x3, 0x2) setsockopt$inet_mreqsrc(r3, 0x0, 0x27, &(0x7f0000000040)={@multicast2, @local, @loopback}, 0xc) setsockopt$inet_msfilter(r3, 0x0, 0x29, &(0x7f0000000240)=ANY=[@ANYBLOB="e0000002ac1414aa01"], 0x18) syz_emit_ethernet(0x36, &(0x7f0000001800)=ANY=[@ANYBLOB], 0x0) ioctl$KVM_REINJECT_CONTROL(0xffffffffffffffff, 0xae71, 0x0) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) r4 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r4, &(0x7f0000000280)={0x0, 0x0, 0x0}, 0x0) sendmsg$kcm(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000001340)=[{&(0x7f0000000040)="2e00000010008188040f46ecdb4cb9cca7480ef410000000e3bd6efb010511000b000a000d0000", 0x27}], 0x1, 0x0, 0x0, 0xc9e}, 0x80) 1.509868028s ago: executing program 2 (id=1283): syz_open_dev$cec(0x0, 0x0, 0x40b80) ioctl$CEC_ADAP_S_LOG_ADDRS(0xffffffffffffffff, 0xc05c6104, &(0x7f0000000340)={"8171f879", 0x7, 0xb0, 0x0, 0x9, 0x5, "0080000000000080ffffffffffffff", "0c598b00", "0200", "01000800", ["dc001000", "0000000000ffe700005a00", "4a218302000000215c384d00", "790000a5a16706008c00edbf"]}) syz_genetlink_get_family_id$nl80211(&(0x7f0000000a00), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_WIPHY(0xffffffffffffffff, 0x0, 0x41) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = syz_io_uring_setup(0x110, &(0x7f00000000c0)={0x0, 0x10, 0x0, 0x3, 0x80}, &(0x7f0000000180)=0x0, &(0x7f0000000280)=0x0) io_uring_register$IORING_REGISTER_FILES(r3, 0x2, &(0x7f0000000300)=[0xffffffffffffffff], 0x1) syz_memcpy_off$IO_URING_METADATA_GENERIC(r4, 0x4, 0x0, 0x0, 0x4) ioctl$AUTOFS_IOC_EXPIRE_MULTI(r2, 0x40049366, &(0x7f00000003c0)=0x2) syz_io_uring_submit(r4, r5, &(0x7f00000002c0)=@IORING_OP_FILES_UPDATE={0x14, 0x0, 0x0, 0x0, 0xffffffffffffffff, &(0x7f0000000040), 0x1b}) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r6, &(0x7f0000000100)=ANY=[], 0x32600) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r6, 0x0) io_uring_enter(r3, 0x47f6, 0x0, 0x0, 0x0, 0x0) 1.282192586s ago: executing program 1 (id=1284): r0 = getpid() prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r1 = syz_open_dev$sg(&(0x7f00000001c0), 0x5, 0x543040) ioctl$TIOCGSID(0xffffffffffffffff, 0x5429, 0x0) ioctl$SG_BLKTRACESETUP(r1, 0xc0481273, 0x0) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mkdir(0x0, 0x0) r4 = socket(0x1d, 0x2, 0x6) ioctl$ifreq_SIOCGIFINDEX_vcan(r4, 0x8933, 0x0) bind$can_j1939(r4, 0x0, 0x0) r5 = syz_io_uring_setup(0x19d1, 0x0, &(0x7f0000000080), &(0x7f00000002c0)) io_uring_enter(r5, 0xa3d, 0x0, 0x0, 0x0, 0xff39) r6 = open(&(0x7f0000000140)='./file0\x00', 0x0, 0x0) mknodat$loop(r6, &(0x7f0000001600)='./file1\x00', 0x0, 0x0) clock_settime(0x0, &(0x7f0000000240)={0x77359400}) clock_adjtime(0x0, &(0x7f0000000640)={0x7, 0x9, 0x380000, 0x8, 0xfffffffffffffff9, 0xfffffffffffffff7, 0x9, 0x0, 0xae, 0x6, 0x7, 0x4, 0xfffffffffffff04f, 0x7, 0x80000000, 0xfffffffffffffff8, 0xffffffffffffffff, 0x6, 0x0, 0x100, 0x4, 0x2, 0x5, 0x3, 0x8, 0x8}) 232.517881ms ago: executing program 2 (id=1285): recvmsg(0xffffffffffffffff, 0x0, 0x4100) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x11, 0x3, &(0x7f0000000200)=@framed, &(0x7f00000003c0)='GPL\x00'}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000140)='contention_end\x00', r0}, 0x10) timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f00000000c0)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000240)={0xffffffffffffffff}) recvmsg(r1, &(0x7f0000000900)={0x0, 0x0, &(0x7f0000000880)=[{&(0x7f0000000600)=""/203, 0xcb}], 0x1}, 0x0) r2 = syz_open_dev$evdev(&(0x7f0000000000), 0x2, 0x0) ioctl$KDGKBTYPE(0xffffffffffffffff, 0x4b33, 0x0) ioctl$EVIOCGMASK(r2, 0x80104592, 0x0) write$char_usb(0xffffffffffffffff, 0x0, 0x0) sendmsg$tipc(0xffffffffffffffff, 0x0, 0x0) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME_WAIT_CANCEL(0xffffffffffffffff, 0x0, 0x0) open(&(0x7f00000000c0)='.\x00', 0x10000, 0x0) r3 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/timer_list\x00', 0x0, 0x0) sendfile(0xffffffffffffffff, r3, 0x0, 0x20000023896) 0s ago: executing program 3 (id=1286): r0 = openat$ttynull(0xffffffffffffff9c, 0x0, 0x200, 0x0) ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000080)=0x12) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x9a860675e5aa2a63, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r4 = socket$inet6_mptcp(0xa, 0x1, 0x106) ioctl$sock_SIOCETHTOOL(r4, 0x8946, &(0x7f0000000140)={'dummy0\x00', &(0x7f0000000280)=@ethtool_link_settings={0x48, 0x9f2, 0xe7, 0x3, 0x2, 0xb1, 0x8, 0x5, 0x4, 0xe, [0xfffffffe, 0x2, 0x6, 0x3, 0x6, 0x6, 0x200, 0xd]}}) timerfd_settime(0xffffffffffffffff, 0x0, 0x0, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r5 = openat(0xffffffffffffff9c, 0x0, 0x440, 0x55) getdents64(r5, 0x0, 0x0) openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000440), 0x0) getresgid(&(0x7f0000000c40), &(0x7f0000000140), 0x0) syz_mount_image$fuse(0x0, &(0x7f0000000000)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) renameat2(0xffffffffffffff9c, 0x0, 0xffffffffffffff9c, &(0x7f0000000100)='./bus\x00', 0x0) getdents64(0xffffffffffffffff, &(0x7f0000000080)=""/234, 0xea) kernel console output (not intermixed with test programs): nge from 0 to 256 [ 360.730907][ T26] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 360.774819][ T6386] exfat: Deprecated parameter 'utf8' [ 361.043003][ T26] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 361.146143][ T26] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 361.284684][ T26] usb 3-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 361.394240][ T26] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 361.453703][ T26] usb 3-1: SerialNumber: syz [ 361.611901][ T6390] lo speed is unknown, defaulting to 1000 [ 361.746761][ T6384] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 361.799230][ T6384] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 361.908103][ T26] usb 3-1: 0:2 : does not exist [ 361.937524][ T26] usb 3-1: unit 5 not found! [ 362.184894][ T6393] loop0: detected capacity change from 0 to 40427 [ 362.243442][ T6393] F2FS-fs (loop0): invalid crc value [ 362.314270][ T6393] F2FS-fs (loop0): Found nat_bits in checkpoint [ 362.352511][ T6393] F2FS-fs (loop0): Start checkpoint disabled! [ 362.393871][ T6393] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e6 [ 363.165617][ T26] usb 3-1: USB disconnect, device number 2 [ 363.183708][ T27] kauditd_printk_skb: 4 callbacks suppressed [ 363.183723][ T27] audit: type=1800 audit(1756523101.255:72): pid=6393 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.474" name="SYSV00000000" dev="hugetlbfs" ino=0 res=0 errno=0 [ 363.216200][ T4449] udevd[4449]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 363.479439][ T27] audit: type=1800 audit(1756523101.465:73): pid=6400 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.474" name="bus" dev="loop0" ino=14 res=0 errno=0 [ 363.625171][ T6400] syz.0.474: attempt to access beyond end of device [ 363.625171][ T6400] loop0: rw=10241, sector=45096, nr_sectors = 8 limit=40427 [ 366.060688][ T4375] kworker/u4:7: attempt to access beyond end of device [ 366.060688][ T4375] loop0: rw=1, sector=45104, nr_sectors = 56 limit=40427 [ 366.130854][ T4375] kworker/u4:7: attempt to access beyond end of device [ 366.130854][ T4375] loop0: rw=1, sector=45096, nr_sectors = 8 limit=40427 [ 366.294081][ T4375] kworker/u4:7: attempt to access beyond end of device [ 366.294081][ T4375] loop0: rw=2049, sector=45160, nr_sectors = 16 limit=40427 [ 366.550035][ T6419] loop3: detected capacity change from 0 to 64 [ 367.278765][ T6426] netlink: 20 bytes leftover after parsing attributes in process `syz.0.479'. [ 367.293609][ T6426] device vlan2 entered promiscuous mode [ 367.299601][ T6426] device team0 entered promiscuous mode [ 367.305394][ T6426] device team_slave_0 entered promiscuous mode [ 367.312392][ T6426] device team_slave_1 entered promiscuous mode [ 367.535906][ T6429] loop2: detected capacity change from 0 to 256 [ 367.549209][ T6429] exFAT-fs (loop2): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 367.560307][ T6429] exFAT-fs (loop2): Medium has reported failures. Some data may be lost. [ 367.580776][ T6429] exFAT-fs (loop2): failed to load upcase table (idx : 0x0000ff98, chksum : 0xc64c1d22, utbl_chksum : 0xe619d30d) [ 368.212023][ T6435] lo speed is unknown, defaulting to 1000 [ 369.496678][ T6446] loop2: detected capacity change from 0 to 256 [ 369.751798][ T6431] loop3: detected capacity change from 0 to 8192 [ 369.781855][ T6446] exfat: Deprecated parameter 'utf8' [ 369.861743][ T6431] FAT-fs (loop3): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 372.958061][ T6470] loop0: detected capacity change from 0 to 64 [ 373.072918][ T6474] loop1: detected capacity change from 0 to 16 [ 373.401360][ T6476] loop3: detected capacity change from 0 to 256 [ 373.465115][ T6476] exFAT-fs (loop3): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 373.476541][ T6476] exFAT-fs (loop3): Medium has reported failures. Some data may be lost. [ 373.529565][ T6476] exFAT-fs (loop3): failed to load upcase table (idx : 0x0000ff98, chksum : 0xc64c1d22, utbl_chksum : 0xe619d30d) [ 373.683671][ T6472] netlink: 12 bytes leftover after parsing attributes in process `syz.4.496'. [ 373.761241][ T6472] device vlan2 entered promiscuous mode [ 373.884375][ T6479] loop1: detected capacity change from 0 to 64 [ 376.826199][ T6495] BFS-fs: bfs_fill_super(): No BFS filesystem on nullb0 (magic=00000000) [ 377.716051][ T6505] loop2: detected capacity change from 0 to 512 [ 377.878102][ T6505] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 378.039335][ T6505] ext4 filesystem being mounted at /94/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 379.032700][ T4375] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 379.092304][ T4273] EXT4-fs (loop2): unmounting filesystem. [ 379.286544][ T4375] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 379.933770][ T6533] Error parsing options; rc = [-22] [ 380.032540][ T4375] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 380.052580][ T6522] netlink: 12 bytes leftover after parsing attributes in process `syz.2.509'. [ 380.068421][ T6522] device vlan2 entered promiscuous mode [ 380.074169][ T6522] device team0 entered promiscuous mode [ 380.079832][ T6522] device team_slave_0 entered promiscuous mode [ 380.099324][ T6522] device team_slave_1 entered promiscuous mode [ 380.473953][ T4375] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 380.563676][ T47] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 380.694262][ T47] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 380.709931][ T47] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 380.753223][ T47] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 380.791671][ T4280] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 380.812345][ T4280] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 381.212293][ T6546] loop1: detected capacity change from 0 to 256 [ 381.258906][ T6546] exfat: Deprecated parameter 'utf8' [ 381.383341][ T6539] lo speed is unknown, defaulting to 1000 [ 382.036350][ T6556] CIFS: No dialect specified on mount. Default has changed to a more secure dialect, SMB2.1 or later (e.g. SMB3.1.1), from CIFS (SMB1). To use the less secure SMB1 dialect to access old servers which do not support SMB3.1.1 (or even SMB3 or SMB2.1) specify vers=1.0 on mount. [ 382.062624][ T6556] CIFS mount error: No usable UNC path provided in device string! [ 382.062624][ T6556] [ 382.072948][ T6556] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string! [ 382.084548][ T6551] netlink: 4 bytes leftover after parsing attributes in process `syz.3.512'. [ 382.179087][ T6552] loop4: detected capacity change from 0 to 4096 [ 382.187059][ T6552] ntfs: (device loop4): parse_options(): Option utf8 is no longer supported, using option nls=utf8. Please use option nls=utf8 in the future and make sure utf8 is compiled either as a module or into the kernel. [ 382.209935][ T6552] ntfs: (device loop4): read_ntfs_boot_sector(): Primary boot sector is invalid. [ 382.223115][ T6552] ntfs: (device loop4): is_boot_sector_ntfs(): Invalid boot sector checksum. [ 382.232581][ T6552] ntfs: (device loop4): read_ntfs_boot_sector(): Hot-fix: Recovery of primary boot sector failed: Read-only mount. [ 382.244778][ T6552] ntfs: (device loop4): read_ntfs_boot_sector(): Using backup boot sector. [ 382.259438][ T6552] ntfs: (device loop4): ntfs_mapping_pairs_decompress(): Corrupt attribute. [ 382.268421][ T6552] ntfs: (device loop4): ntfs_read_block(): Failed to read from inode 0xa, attribute type 0x80, vcn 0x0, offset 0x0 because its location on disk could not be determined even after retrying (error code -5). [ 382.288654][ T6552] ntfs: (device loop4): ntfs_mapping_pairs_decompress(): Corrupt attribute. [ 382.297496][ T6552] ntfs: (device loop4): ntfs_read_block(): Failed to read from inode 0xa, attribute type 0x80, vcn 0x0, offset 0x200 because its location on disk could not be determined even after retrying (error code -5). [ 382.317689][ T6552] ntfs: (device loop4): ntfs_mapping_pairs_decompress(): Corrupt attribute. [ 382.332068][ T6552] ntfs: volume version 3.1. [ 382.488160][ T6560] loop2: detected capacity change from 0 to 256 [ 382.499912][ T6560] exfat: Deprecated parameter 'utf8' [ 382.923509][ T4280] Bluetooth: hci0: command 0x0409 tx timeout [ 383.176953][ T6562] loop3: detected capacity change from 0 to 8192 [ 383.670255][ T6562] FAT-fs (loop3): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 383.723479][ T1274] ieee802154 phy0 wpan0: encryption failed: -22 [ 383.729842][ T1274] ieee802154 phy1 wpan1: encryption failed: -22 [ 384.280520][ T6539] chnl_net:caif_netlink_parms(): no params data found [ 385.013732][ T4280] Bluetooth: hci0: command 0x041b tx timeout [ 385.481920][ T6539] bridge0: port 1(bridge_slave_0) entered blocking state [ 385.513253][ T6539] bridge0: port 1(bridge_slave_0) entered disabled state [ 385.521553][ T6539] device bridge_slave_0 entered promiscuous mode [ 385.664123][ T6539] bridge0: port 2(bridge_slave_1) entered blocking state [ 385.671283][ T6539] bridge0: port 2(bridge_slave_1) entered disabled state [ 385.730757][ T6539] device bridge_slave_1 entered promiscuous mode [ 386.592835][ T6593] netlink: 12 bytes leftover after parsing attributes in process `syz.4.521'. [ 386.856605][ T6539] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 386.880510][ T6539] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 387.271532][ T4280] Bluetooth: hci0: command 0x040f tx timeout [ 388.381651][ T6612] netlink: 'syz.4.524': attribute type 32 has an invalid length. [ 388.390999][ T6612] netlink: 8 bytes leftover after parsing attributes in process `syz.4.524'. [ 388.400565][ T6612] (unnamed net_device) (uninitialized): option coupled_control: invalid value (18) [ 388.606722][ T6539] team0: Port device team_slave_0 added [ 388.896748][ T6539] team0: Port device team_slave_1 added [ 389.313239][ T4280] Bluetooth: hci0: command 0x0419 tx timeout [ 390.397831][ T6539] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 390.429880][ T6539] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 390.508522][ T6539] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 391.427173][ T4375] bond0: (slave wlan1): Releasing backup interface [ 391.503752][ T6539] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 391.521857][ T6539] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 391.707650][ T6647] loop4: detected capacity change from 0 to 64 [ 391.723402][ T6539] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 393.206973][ T6539] device hsr_slave_0 entered promiscuous mode [ 393.244424][ T6539] device hsr_slave_1 entered promiscuous mode [ 393.251648][ T6539] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 393.266911][ T6539] Cannot create hsr debugfs directory [ 393.362307][ T6658] netlink: 12 bytes leftover after parsing attributes in process `syz.3.534'. [ 393.407239][ T6658] device vlan2 entered promiscuous mode [ 393.426973][ T6658] device team0 entered promiscuous mode [ 393.434326][ T6658] device team_slave_0 entered promiscuous mode [ 393.442512][ T6658] device team_slave_1 entered promiscuous mode [ 393.449984][ T6658] device vxlan0 entered promiscuous mode [ 395.519299][ T4375] device hsr_slave_0 left promiscuous mode [ 395.534024][ T4375] device hsr_slave_1 left promiscuous mode [ 395.836920][ T4375] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 396.041473][ T6679] loop1: detected capacity change from 0 to 256 [ 396.435320][ T6679] exFAT-fs (loop1): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 396.446142][ T6679] exFAT-fs (loop1): Medium has reported failures. Some data may be lost. [ 396.501068][ T6679] exFAT-fs (loop1): failed to load upcase table (idx : 0x0000ff98, chksum : 0xc64c1d22, utbl_chksum : 0xe619d30d) [ 396.660207][ T4375] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 397.131132][ T4375] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 397.173271][ T4375] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 397.213891][ T4375] device bridge_slave_1 left promiscuous mode [ 397.222381][ T4375] bridge0: port 2(bridge_slave_1) entered disabled state [ 397.261262][ T6685] loop2: detected capacity change from 0 to 4096 [ 397.289482][ T4375] device bridge_slave_0 left promiscuous mode [ 397.362588][ T4375] bridge0: port 1(bridge_slave_0) entered disabled state [ 397.568633][ T6687] loop1: detected capacity change from 0 to 8192 [ 397.729938][ T6687] FAT-fs (loop1): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 398.980756][ T4375] device veth1_macvtap left promiscuous mode [ 398.993926][ T4375] device veth0_macvtap left promiscuous mode [ 399.001217][ T4375] device veth1_vlan left promiscuous mode [ 405.055983][ T6714] loop2: detected capacity change from 0 to 64 [ 405.069854][ T6714] hfs: unable to parse mount options [ 405.589924][ T4375] device team_slave_1 left promiscuous mode [ 405.612662][ T4375] team0 (unregistering): Port device team_slave_1 removed [ 405.641518][ T4393] I/O error, dev loop2, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 405.693635][ T4375] device team_slave_0 left promiscuous mode [ 405.701296][ T4375] team0 (unregistering): Port device team_slave_0 removed [ 405.782088][ T4375] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 405.880106][ T4375] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 405.970493][ T6716] loop2: detected capacity change from 0 to 16 [ 406.195115][ T6716] loop2: detected capacity change from 0 to 64 [ 406.652336][ T4375] bond0 (unregistering): Released all slaves [ 406.840034][ T6707] netlink: 12 bytes leftover after parsing attributes in process `syz.4.547'. [ 407.735003][ T6729] loop3: detected capacity change from 0 to 256 [ 407.815571][ T6729] exFAT-fs (loop3): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 407.826544][ T6729] exFAT-fs (loop3): Medium has reported failures. Some data may be lost. [ 408.122582][ T6729] exFAT-fs (loop3): failed to load upcase table (idx : 0x0000ff98, chksum : 0xc64c1d22, utbl_chksum : 0xe619d30d) [ 408.467028][ T6726] loop4: detected capacity change from 0 to 8192 [ 408.640418][ T6726] FAT-fs (loop4): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 408.686133][ T6733] loop1: detected capacity change from 0 to 8192 [ 408.714397][ T6733] FAT-fs (loop1): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 409.640925][ T6742] netlink: 16 bytes leftover after parsing attributes in process `syz.3.556'. [ 410.011359][ T6742] loop3: detected capacity change from 0 to 512 [ 411.598251][ T6742] EXT4-fs (loop3): Test dummy encryption mode enabled [ 411.605142][ T6742] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 412.691405][ T6539] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 412.722807][ T6742] EXT4-fs (loop3): 1 truncate cleaned up [ 412.728687][ T6742] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none. [ 417.377388][ T6763] loop2: detected capacity change from 0 to 16 [ 417.466205][ T4265] EXT4-fs (loop3): unmounting filesystem. [ 417.605980][ T6539] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 417.702610][ T6539] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 417.791455][ T6773] netlink: 12 bytes leftover after parsing attributes in process `syz.1.562'. [ 417.806387][ T6773] device vlan2 entered promiscuous mode [ 417.820916][ T6539] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 418.128212][ T6785] loop1: detected capacity change from 0 to 64 [ 418.203295][ T4315] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 418.427611][ T6539] 8021q: adding VLAN 0 to HW filter on device bond0 [ 418.463977][ T6539] 8021q: adding VLAN 0 to HW filter on device team0 [ 418.471029][ T4346] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 419.178601][ T4315] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 419.199159][ T4315] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 419.219714][ T4315] usb 4-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 419.308219][ T4346] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 419.356638][ T4315] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 419.413305][ T4315] usb 4-1: SerialNumber: syz [ 419.657039][ T4346] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 419.671750][ T6776] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 419.705706][ T4346] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 419.707923][ T6776] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 419.727636][ T4346] bridge0: port 1(bridge_slave_0) entered blocking state [ 419.736220][ T4346] bridge0: port 1(bridge_slave_0) entered forwarding state [ 419.754105][ T4346] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 419.791838][ T4315] usb 4-1: 0:2 : does not exist [ 419.816079][ T4315] usb 4-1: unit 5 not found! [ 419.923580][ T4315] usb 4-1: USB disconnect, device number 2 [ 419.944933][ T4346] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 419.966513][ T4346] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 419.982075][ T4393] udevd[4393]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 420.023340][ T4346] bridge0: port 2(bridge_slave_1) entered blocking state [ 420.030609][ T4346] bridge0: port 2(bridge_slave_1) entered forwarding state [ 420.043327][ T4346] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 420.052505][ T4346] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 420.235717][ T4346] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 421.288106][ T4346] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 421.307163][ T4346] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 421.429713][ T4346] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 421.454352][ T4346] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 421.495301][ T4346] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 421.561282][ T6539] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 421.585671][ T6539] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 421.619118][ T4346] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 421.635538][ T4346] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 421.638321][ T6802] loop1: detected capacity change from 0 to 8192 [ 421.653970][ T4346] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 421.690372][ T6804] loop3: detected capacity change from 0 to 8192 [ 421.703947][ T6802] FAT-fs (loop1): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 421.763125][ T6804] FAT-fs (loop3): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 423.822598][ T6819] tmpfs: Bad value for 'nr_inodes' [ 424.583278][ T6819] loop2: detected capacity change from 0 to 256 [ 425.063619][ T6819] exFAT-fs (loop2): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 425.074406][ T6819] exFAT-fs (loop2): Medium has reported failures. Some data may be lost. [ 425.094485][ T6819] exFAT-fs (loop2): failed to load upcase table (idx : 0x0000ff98, chksum : 0xc64c1d22, utbl_chksum : 0xe619d30d) [ 426.204141][ T6830] netlink: 20 bytes leftover after parsing attributes in process `syz.1.572'. [ 427.149939][ T6837] loop4: detected capacity change from 0 to 64 [ 427.430076][ T6835] BFS-fs: bfs_fill_super(): No BFS filesystem on nullb0 (magic=00000000) [ 429.237538][ T6861] loop1: detected capacity change from 0 to 256 [ 429.332569][ T4476] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 429.345375][ T4476] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 429.440100][ T6861] exfat: Deprecated parameter 'utf8' [ 429.461116][ T6539] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 431.904747][ T6893] netlink: 20 bytes leftover after parsing attributes in process `syz.4.586'. [ 432.184889][ T6897] loop4: detected capacity change from 0 to 128 [ 433.666419][ T6906] loop4: detected capacity change from 0 to 64 [ 434.345694][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 434.563468][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 435.411286][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 435.437420][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 435.484107][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 435.520065][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 435.589759][ T6539] device veth0_vlan entered promiscuous mode [ 435.661972][ T6539] device veth1_vlan entered promiscuous mode [ 435.726751][ T4346] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 435.761745][ T4346] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 435.823984][ T6927] tmpfs: Bad value for 'nr_inodes' [ 435.858821][ T6927] loop4: detected capacity change from 0 to 256 [ 435.871871][ T6927] exFAT-fs (loop4): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 435.882713][ T6927] exFAT-fs (loop4): Medium has reported failures. Some data may be lost. [ 435.927540][ T6927] exFAT-fs (loop4): failed to load upcase table (idx : 0x0000ff98, chksum : 0xc64c1d22, utbl_chksum : 0xe619d30d) [ 436.142125][ T6539] device veth0_macvtap entered promiscuous mode [ 436.383661][ T6539] device veth1_macvtap entered promiscuous mode [ 436.462670][ T4346] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 436.517635][ T4346] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 436.597465][ T6539] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 436.650757][ T6539] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 436.656018][ T6932] loop4: detected capacity change from 0 to 256 [ 436.685751][ T6539] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 436.772142][ T4346] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 437.220765][ T6932] exfat: Deprecated parameter 'utf8' [ 437.247093][ T4346] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 437.486229][ T6539] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 437.714489][ T6539] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 437.805811][ T6539] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 437.862557][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 437.887595][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 438.589101][ T6539] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 438.598601][ T6539] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 438.607709][ T6539] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 438.617062][ T6539] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 440.684364][ T6952] netlink: 20 bytes leftover after parsing attributes in process `syz.2.596'. [ 441.136508][ T6958] loop1: detected capacity change from 0 to 64 [ 442.880981][ T6972] loop2: detected capacity change from 0 to 512 [ 443.464009][ T6972] EXT4-fs (loop2): revision level too high, forcing read-only mode [ 443.472812][ T6972] EXT4-fs (loop2): orphan cleanup on readonly fs [ 443.494618][ T6972] __quota_error: 18 callbacks suppressed [ 443.494636][ T6972] Quota error (device loop2): dq_insert_tree: Quota tree root isn't allocated! [ 443.509463][ T6972] Quota error (device loop2): qtree_write_dquot: Error -5 occurred while creating quota [ 443.519337][ T6972] EXT4-fs error (device loop2): ext4_acquire_dquot:6816: comm syz.2.601: Failed to acquire dquot type 1 [ 443.587649][ T6972] EXT4-fs error (device loop2): ext4_validate_block_bitmap:438: comm syz.2.601: bg 0: block 40: padding at end of block bitmap is not set [ 443.612363][ T6978] loop3: detected capacity change from 0 to 1024 [ 443.619108][ T6972] EXT4-fs error (device loop2) in ext4_mb_clear_bb:6165: Corrupt filesystem [ 443.638087][ T6972] EXT4-fs (loop2): 1 truncate cleaned up [ 443.666141][ T6972] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 443.800716][ T6978] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none. [ 443.943621][ T6978] ext4 filesystem being mounted at /123/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 443.965553][ T4273] EXT4-fs (loop2): unmounting filesystem. [ 444.818733][ T6993] EXT4-fs error (device loop3): ext4_map_blocks:745: inode #15: block 3: comm syz.3.602: lblock 3 mapped to illegal pblock 3 (length 3) [ 444.845812][ T6993] EXT4-fs (loop3): Delayed block allocation failed for inode 15 at logical offset 3 with max blocks 3 with error 117 [ 444.858308][ T6993] EXT4-fs (loop3): This should not happen!! Data will be lost [ 444.858308][ T6993] [ 445.610961][ T1274] ieee802154 phy0 wpan0: encryption failed: -22 [ 445.617380][ T1274] ieee802154 phy1 wpan1: encryption failed: -22 [ 445.813769][ T4414] EXT4-fs error (device loop3): ext4_map_blocks:745: inode #15: block 8: comm kworker/u4:9: lblock 8 mapped to illegal pblock 8 (length 8) [ 446.193287][ T4414] EXT4-fs (loop3): Delayed block allocation failed for inode 15 at logical offset 8 with max blocks 8 with error 117 [ 446.413123][ T4414] EXT4-fs (loop3): This should not happen!! Data will be lost [ 446.413123][ T4414] [ 446.462091][ T4265] EXT4-fs (loop3): unmounting filesystem. [ 446.781719][ T7011] xt_CT: You must specify a L4 protocol and not use inversions on it [ 447.349577][ T4414] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 447.903815][ T7021] tmpfs: Bad value for 'nr_inodes' [ 447.967905][ T7021] loop3: detected capacity change from 0 to 256 [ 447.999232][ T7021] exFAT-fs (loop3): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 448.010134][ T7021] exFAT-fs (loop3): Medium has reported failures. Some data may be lost. [ 448.032459][ T7021] exFAT-fs (loop3): failed to load upcase table (idx : 0x0000ff98, chksum : 0xc64c1d22, utbl_chksum : 0xe619d30d) [ 449.097912][ T4267] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 449.112185][ T47] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 449.122465][ T4267] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 449.173609][ T47] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 449.188716][ T47] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 449.199051][ T47] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 449.392714][ T4414] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 449.430059][ T7031] lo speed is unknown, defaulting to 1000 [ 449.836004][ T4414] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 450.702031][ T7043] loop4: detected capacity change from 0 to 512 [ 452.311889][ T7052] loop2: detected capacity change from 0 to 256 [ 452.321391][ T7052] exfat: Deprecated parameter 'utf8' [ 452.468062][ T4280] Bluetooth: hci0: command 0x0409 tx timeout [ 452.518702][ T7043] EXT4-fs: failed to create workqueue [ 452.526864][ T7043] EXT4-fs (loop4): mount failed [ 452.767870][ T4449] I/O error, dev loop2, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 455.698626][ T4280] Bluetooth: hci0: command 0x041b tx timeout [ 455.753981][ T4414] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 455.945684][ T7060] loop1: detected capacity change from 0 to 64 [ 455.977735][ T7070] IPVS: sync thread started: state = BACKUP, mcast_ifn = veth0_to_team, syncid = 0, id = 0 [ 456.291798][ T7069] loop2: detected capacity change from 0 to 8192 [ 456.355755][ T7069] FAT-fs (loop2): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 457.637114][ T7031] chnl_net:caif_netlink_parms(): no params data found [ 457.770223][ T4280] Bluetooth: hci0: command 0x040f tx timeout [ 459.671965][ T7031] bridge0: port 1(bridge_slave_0) entered blocking state [ 459.693564][ T7031] bridge0: port 1(bridge_slave_0) entered disabled state [ 459.712808][ T7031] device bridge_slave_0 entered promiscuous mode [ 459.794157][ T4280] Bluetooth: hci0: command 0x0419 tx timeout [ 459.811738][ C1] dccp_check_seqno: Step 6 failed for RESET packet, (LSWL(244398417724069) <= P.seqno(0) <= S.SWH(244398417724143)) and (P.ackno exists or LAWL(252536047301579) <= P.ackno(252536047301580) <= S.AWH(252536047301580), sending SYNC... [ 460.088027][ T7031] bridge0: port 2(bridge_slave_1) entered blocking state [ 460.098801][ T7103] loop1: detected capacity change from 0 to 16 [ 460.127989][ T7031] bridge0: port 2(bridge_slave_1) entered disabled state [ 460.208542][ T7104] overlayfs: failed to set xattr on upper [ 460.214916][ T7104] overlayfs: ...falling back to index=off,metacopy=off. [ 460.487537][ T7031] device bridge_slave_1 entered promiscuous mode [ 460.969801][ T4393] I/O error, dev loop1, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 461.457358][ T7103] loop1: detected capacity change from 0 to 64 [ 461.956158][ T7031] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 461.957385][ T7120] loop2: detected capacity change from 0 to 64 [ 461.985432][ T7031] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 462.856178][ T7031] team0: Port device team_slave_0 added [ 463.136188][ T7031] team0: Port device team_slave_1 added [ 463.556591][ T7137] overlayfs: missing 'lowerdir' [ 463.866859][ T7143] loop2: detected capacity change from 0 to 1024 [ 465.424761][ T7143] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 465.542817][ T7150] EXT4-fs (loop2): shut down requested (0) [ 466.601309][ T7158] 9pnet_fd: Insufficient options for proto=fd [ 467.203613][ T7031] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 467.210640][ T7031] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 467.276604][ T7031] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 468.041255][ T4273] EXT4-fs (loop2): unmounting filesystem. [ 468.753625][ T7031] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 468.760682][ T7031] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 468.952507][ T7031] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 469.106981][ T7177] loop4: detected capacity change from 0 to 8192 [ 469.174620][ T7177] FAT-fs (loop4): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 469.914602][ T7183] loop2: detected capacity change from 0 to 16 [ 470.500615][ T7192] loop2: detected capacity change from 0 to 64 [ 470.554967][ T7196] loop3: detected capacity change from 0 to 64 [ 471.168639][ T7202] tmpfs: Bad value for 'nr_inodes' [ 471.981909][ T7031] device hsr_slave_0 entered promiscuous mode [ 472.194694][ T7031] device hsr_slave_1 entered promiscuous mode [ 472.325025][ T7031] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 472.450662][ T7031] Cannot create hsr debugfs directory [ 472.547648][ T4414] device hsr_slave_0 left promiscuous mode [ 472.625934][ T4414] device hsr_slave_1 left promiscuous mode [ 472.653829][ T7207] loop4: detected capacity change from 0 to 256 [ 472.756740][ T4414] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 472.768382][ T7207] exfat: Deprecated parameter 'utf8' [ 472.862027][ T4414] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 472.895319][ T4414] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 472.902805][ T4414] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 473.039924][ T4414] device bridge_slave_1 left promiscuous mode [ 473.104044][ T4414] bridge0: port 2(bridge_slave_1) entered disabled state [ 473.179905][ T4414] device bridge_slave_0 left promiscuous mode [ 473.257136][ T4414] bridge0: port 1(bridge_slave_0) entered disabled state [ 474.294030][ T4414] device veth1_macvtap left promiscuous mode [ 474.310387][ T4414] device veth0_macvtap left promiscuous mode [ 474.330701][ T4414] device veth1_vlan left promiscuous mode [ 474.371364][ T4414] device veth0_vlan left promiscuous mode [ 474.409411][ T7219] loop4: detected capacity change from 0 to 8192 [ 474.430312][ T7219] FAT-fs (loop4): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 478.176402][ T7242] loop4: detected capacity change from 0 to 8192 [ 478.341725][ T7242] FAT-fs (loop4): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 480.390893][ T7257] loop4: detected capacity change from 0 to 64 [ 481.089670][ T4414] team0 (unregistering): Port device team_slave_1 removed [ 481.182722][ T4414] team0 (unregistering): Port device team_slave_0 removed [ 481.232429][ T4414] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 481.296144][ T4414] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 481.842663][ T4414] bond0 (unregistering): Released all slaves [ 481.922611][ T7212] netlink: 68 bytes leftover after parsing attributes in process `syz.3.647'. [ 481.932785][ T7253] netlink: 'syz.1.656': attribute type 10 has an invalid length. [ 481.943352][ T7253] device veth1_macvtap left promiscuous mode [ 481.952697][ T7253] bridge0: port 4(macsec0) entered blocking state [ 481.959449][ T7253] bridge0: port 4(macsec0) entered disabled state [ 481.967650][ T7253] device macsec0 entered promiscuous mode [ 482.916717][ T7274] loop2: detected capacity change from 0 to 16 [ 484.780118][ T4393] I/O error, dev loop2, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 485.281228][ T7289] loop2: detected capacity change from 0 to 64 [ 489.123878][ T7031] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 489.150725][ T7031] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 489.192777][ T7031] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 489.234041][ T7031] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 489.475351][ T7318] netlink: 68 bytes leftover after parsing attributes in process `syz.3.670'. [ 491.418929][ T7345] loop4: detected capacity change from 0 to 64 [ 491.599359][ T7031] 8021q: adding VLAN 0 to HW filter on device bond0 [ 491.625998][ T7031] 8021q: adding VLAN 0 to HW filter on device team0 [ 491.649994][ T4418] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 491.679777][ T4418] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 492.019794][ T4418] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 492.221257][ T4418] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 492.455878][ T4418] bridge0: port 1(bridge_slave_0) entered blocking state [ 492.463095][ T4418] bridge0: port 1(bridge_slave_0) entered forwarding state [ 492.505099][ T4418] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 492.549286][ T4418] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 492.612655][ T4418] bridge0: port 2(bridge_slave_1) entered blocking state [ 492.619982][ T4418] bridge0: port 2(bridge_slave_1) entered forwarding state [ 492.656099][ T4418] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 492.665265][ T4418] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 492.721001][ T4418] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 492.741901][ T4418] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 492.782551][ T4418] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 492.800014][ T4418] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 492.885459][ T7031] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 492.953161][ T7031] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 492.988619][ T4413] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 493.013591][ T4413] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 493.035284][ T4413] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 493.051389][ T4413] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 493.163175][ T4413] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 493.497015][ T4413] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 493.678377][ T4413] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 493.697880][ T7363] infiniband syz1: RDMA CMA: cma_listen_on_dev, error -98 [ 494.426161][ T7373] tmpfs: Bad value for 'nr_inodes' [ 494.452893][ T7373] loop1: detected capacity change from 0 to 256 [ 494.744654][ T7373] exFAT-fs (loop1): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 494.755592][ T7373] exFAT-fs (loop1): Medium has reported failures. Some data may be lost. [ 494.811523][ T7373] exFAT-fs (loop1): failed to load upcase table (idx : 0x0000ff98, chksum : 0xc64c1d22, utbl_chksum : 0xe619d30d) [ 495.255805][ T27] audit: type=1326 audit(1756523233.335:74): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7352 comm="syz.3.676" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ffa13d8ebe9 code=0x7ffc0000 [ 495.377405][ T27] audit: type=1326 audit(1756523233.335:75): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7352 comm="syz.3.676" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ffa13d8ebe9 code=0x7ffc0000 [ 495.661562][ T7383] device bond_slave_0 entered promiscuous mode [ 495.668408][ T7383] device bond_slave_1 entered promiscuous mode [ 495.675387][ T7383] device macsec1 entered promiscuous mode [ 495.681247][ T7383] device bond0 entered promiscuous mode [ 496.569092][ T27] audit: type=1326 audit(1756523233.335:76): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7352 comm="syz.3.676" exe="/root/syz-executor" sig=0 arch=c000003e syscall=100 compat=0 ip=0x7ffa13d8ebe9 code=0x7ffc0000 [ 496.591543][ T27] audit: type=1326 audit(1756523233.335:77): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7352 comm="syz.3.676" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ffa13d8ebe9 code=0x7ffc0000 [ 496.653586][ T27] audit: type=1326 audit(1756523233.335:78): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7352 comm="syz.3.676" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ffa13d8ebe9 code=0x7ffc0000 [ 496.834364][ T27] audit: type=1326 audit(1756523234.725:79): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7352 comm="syz.3.676" exe="/root/syz-executor" sig=0 arch=c000003e syscall=186 compat=0 ip=0x7ffa13d8ebe9 code=0x7ffc0000 [ 496.985105][ T7393] bridge0: port 3(macsec0) entered blocking state [ 496.995657][ T27] audit: type=1326 audit(1756523234.725:80): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7352 comm="syz.3.676" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ffa13d8ebe9 code=0x7ffc0000 [ 497.237382][ T7395] tmpfs: Bad value for 'nr_inodes' [ 497.421639][ T7395] loop1: detected capacity change from 0 to 256 [ 497.888199][ T7395] exFAT-fs (loop1): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 497.899195][ T7395] exFAT-fs (loop1): Medium has reported failures. Some data may be lost. [ 497.907980][ T7393] bridge0: port 3(macsec0) entered disabled state [ 497.928564][ T7395] exFAT-fs (loop1): failed to load upcase table (idx : 0x0000ff98, chksum : 0xc64c1d22, utbl_chksum : 0xe619d30d) [ 497.973596][ T27] audit: type=1326 audit(1756523234.725:81): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7352 comm="syz.3.676" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ffa13d8ebe9 code=0x7ffc0000 [ 497.974356][ T7393] device macsec0 entered promiscuous mode [ 497.999133][ T27] audit: type=1326 audit(1756523234.805:82): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7352 comm="syz.3.676" exe="/root/syz-executor" sig=0 arch=c000003e syscall=223 compat=0 ip=0x7ffa13d8ebe9 code=0x7ffc0000 [ 498.033969][ T7393] bridge0: port 3(macsec0) entered blocking state [ 498.041042][ T7393] bridge0: port 3(macsec0) entered forwarding state [ 498.054942][ T27] audit: type=1326 audit(1756523234.805:83): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7352 comm="syz.3.676" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ffa13d8ebe9 code=0x7ffc0000 [ 498.198552][ T7401] IPVS: sync thread started: state = BACKUP, mcast_ifn = veth0_to_team, syncid = 0, id = 0 [ 498.399613][ T7404] loop1: detected capacity change from 0 to 16 [ 498.772738][ T7408] loop1: detected capacity change from 0 to 64 [ 498.875627][ T4413] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 498.893387][ T4413] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 498.943846][ T7031] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 499.317497][ T7415] loop3: detected capacity change from 0 to 64 [ 500.739956][ T7434] loop4: detected capacity change from 0 to 64 [ 501.114631][ T4416] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 501.180713][ T7438] overlayfs: missing 'lowerdir' [ 501.191727][ T4416] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 503.056580][ T7456] tmpfs: Bad value for 'nr_inodes' [ 503.083928][ T7456] loop3: detected capacity change from 0 to 256 [ 503.643849][ T7456] exFAT-fs (loop3): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 503.655055][ T7456] exFAT-fs (loop3): Medium has reported failures. Some data may be lost. [ 503.691849][ T7456] exFAT-fs (loop3): failed to load upcase table (idx : 0x0000ff98, chksum : 0xc64c1d22, utbl_chksum : 0xe619d30d) [ 504.098277][ T7464] loop2: detected capacity change from 0 to 2048 [ 504.108383][ T7465] loop4: detected capacity change from 0 to 1024 [ 504.178273][ T7464] NILFS (loop2): invalid segment: Magic number mismatch [ 504.185500][ T7464] NILFS (loop2): trying rollback from an earlier position [ 504.258267][ T7464] NILFS (loop2): recovery complete [ 504.314676][ T7467] NILFS (loop2): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 504.403744][ T7465] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 504.516272][ T7470] EXT4-fs (loop4): shut down requested (0) [ 505.202604][ T4271] EXT4-fs (loop4): unmounting filesystem. [ 506.384413][ T7488] loop4: detected capacity change from 0 to 256 [ 506.395869][ T7488] exfat: Deprecated parameter 'utf8' [ 506.614959][ T1274] ieee802154 phy0 wpan0: encryption failed: -22 [ 506.677704][ T1274] ieee802154 phy1 wpan1: encryption failed: -22 [ 507.325056][ T4280] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 507.339519][ T4280] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 507.359150][ T4280] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 507.370081][ T4280] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 507.380417][ T4280] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 507.388286][ T4280] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 507.708608][ T7490] lo speed is unknown, defaulting to 1000 [ 508.604574][ T7507] IPVS: sync thread started: state = BACKUP, mcast_ifn = veth0_to_team, syncid = 0, id = 0 [ 508.990348][ T7513] loop4: detected capacity change from 0 to 512 [ 509.175863][ T7513] FAT-fs (loop4): Invalid FSINFO signature: 0x41615252, 0x61000000 (sector = 1) [ 509.188004][ T7513] FAT-fs (loop4): error, fat_get_cluster: invalid start cluster (i_pos 1, start 00000001) [ 509.198149][ T7513] FAT-fs (loop4): Filesystem has been set read-only [ 509.483503][ T47] Bluetooth: hci0: command 0x0409 tx timeout [ 510.317742][ T7522] netlink: 116 bytes leftover after parsing attributes in process `syz.4.706'. [ 510.547636][ T7517] netlink: 8 bytes leftover after parsing attributes in process `syz.3.705'. [ 511.271037][ T7534] netlink: 28 bytes leftover after parsing attributes in process `syz.4.708'. [ 511.553256][ T47] Bluetooth: hci0: command 0x041b tx timeout [ 511.604619][ T7490] chnl_net:caif_netlink_parms(): no params data found [ 511.681465][ T7545] loop1: detected capacity change from 0 to 16 [ 511.946704][ T7551] loop4: detected capacity change from 0 to 2048 [ 512.476180][ T7551] NILFS (loop4): invalid segment: Magic number mismatch [ 512.483372][ T7551] NILFS (loop4): trying rollback from an earlier position [ 512.563914][ T7551] NILFS (loop4): recovery complete [ 512.582154][ T7554] loop3: detected capacity change from 0 to 64 [ 512.626578][ T7556] NILFS (loop4): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 512.718124][ T7557] loop1: detected capacity change from 0 to 64 [ 513.643999][ T47] Bluetooth: hci0: command 0x040f tx timeout [ 513.694214][ T7490] bridge0: port 1(bridge_slave_0) entered blocking state [ 513.701386][ T7490] bridge0: port 1(bridge_slave_0) entered disabled state [ 513.825226][ T7490] device bridge_slave_0 entered promiscuous mode [ 513.981304][ T7490] bridge0: port 2(bridge_slave_1) entered blocking state [ 514.052250][ T7490] bridge0: port 2(bridge_slave_1) entered disabled state [ 514.557585][ T7490] device bridge_slave_1 entered promiscuous mode [ 514.940069][ T7572] loop4: detected capacity change from 0 to 2048 [ 514.950230][ T7490] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 515.273577][ T7490] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 515.474947][ T7568] lo speed is unknown, defaulting to 1000 [ 515.572582][ T7490] team0: Port device team_slave_0 added [ 515.731012][ T47] Bluetooth: hci0: command 0x0419 tx timeout [ 516.169364][ T7490] team0: Port device team_slave_1 added [ 516.509036][ T7490] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 516.683246][ T7490] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 516.767600][ T7594] tmpfs: Bad value for 'nr_inodes' [ 516.796144][ T7594] loop2: detected capacity change from 0 to 256 [ 516.819091][ T7594] exFAT-fs (loop2): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 516.830093][ T7594] exFAT-fs (loop2): Medium has reported failures. Some data may be lost. [ 516.865373][ T7594] exFAT-fs (loop2): failed to load upcase table (idx : 0x0000ff98, chksum : 0xc64c1d22, utbl_chksum : 0xe619d30d) [ 516.942050][ T7490] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 517.592262][ T7490] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 517.624305][ T7490] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 517.682407][ T7597] loop2: detected capacity change from 0 to 64 [ 517.729718][ T7490] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 518.066831][ T7601] netlink: 28 bytes leftover after parsing attributes in process `syz.3.721'. [ 518.416741][ T7490] device hsr_slave_0 entered promiscuous mode [ 518.457737][ T7490] device hsr_slave_1 entered promiscuous mode [ 518.690481][ T7490] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 518.702173][ T7490] Cannot create hsr debugfs directory [ 519.783891][ T7625] loop2: detected capacity change from 0 to 1024 [ 519.921659][ T4418] device hsr_slave_0 left promiscuous mode [ 519.942294][ T4418] device hsr_slave_1 left promiscuous mode [ 519.951831][ T4418] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 519.972736][ T4418] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 520.053757][ T4418] device bridge_slave_1 left promiscuous mode [ 520.060455][ T4418] bridge0: port 2(bridge_slave_1) entered disabled state [ 520.069404][ T4418] device bridge_slave_0 left promiscuous mode [ 520.076035][ T4418] bridge0: port 1(bridge_slave_0) entered disabled state [ 520.814442][ T4375] hfsplus: b-tree write err: -5, ino 4 [ 523.265816][ T4418] team0 (unregistering): Port device team_slave_1 removed [ 523.394539][ T4418] team0 (unregistering): Port device team_slave_0 removed [ 523.594977][ T4418] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 523.732862][ T4418] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 523.936477][ T7647] tmpfs: Bad value for 'nr_inodes' [ 523.962304][ T7647] loop2: detected capacity change from 0 to 256 [ 524.609716][ T7647] exFAT-fs (loop2): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 524.620543][ T7647] exFAT-fs (loop2): Medium has reported failures. Some data may be lost. [ 524.656004][ T7647] exFAT-fs (loop2): failed to load upcase table (idx : 0x0000ff98, chksum : 0xc64c1d22, utbl_chksum : 0xe619d30d) [ 524.725213][ T7648] loop1: detected capacity change from 0 to 1024 [ 525.249451][ T7648] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none. [ 525.369456][ T7652] EXT4-fs (loop1): shut down requested (0) [ 525.754419][ T4266] EXT4-fs (loop1): unmounting filesystem. [ 527.034814][ T7663] loop2: detected capacity change from 0 to 64 [ 529.551516][ T7679] netlink: 16 bytes leftover after parsing attributes in process `syz.1.734'. [ 529.808688][ T7682] loop3: detected capacity change from 0 to 1024 [ 529.944132][ T7682] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 530.050752][ T47] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 530.067030][ T47] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 530.077633][ T47] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 530.100425][ T4267] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 530.115196][ T4267] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 530.122904][ T4267] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 530.924903][ T4418] bond0 (unregistering): Released all slaves [ 531.286117][ T7686] lo speed is unknown, defaulting to 1000 [ 531.714486][ T4265] EXT4-fs (loop3): unmounting filesystem. [ 532.009357][ T7490] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 532.057803][ T7490] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 532.108477][ T7490] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 532.146437][ T7490] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 532.170225][ T7686] chnl_net:caif_netlink_parms(): no params data found [ 532.195362][ T4280] Bluetooth: hci5: command 0x0409 tx timeout [ 532.434247][ T7686] bridge0: port 1(bridge_slave_0) entered blocking state [ 532.441563][ T7686] bridge0: port 1(bridge_slave_0) entered disabled state [ 532.450692][ T7686] device bridge_slave_0 entered promiscuous mode [ 532.461341][ T7686] bridge0: port 2(bridge_slave_1) entered blocking state [ 532.474631][ T7686] bridge0: port 2(bridge_slave_1) entered disabled state [ 532.486286][ T7686] device bridge_slave_1 entered promiscuous mode [ 532.562882][ T7686] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 532.586895][ T7490] 8021q: adding VLAN 0 to HW filter on device bond0 [ 532.625987][ T5622] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 532.644009][ T7686] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 532.684146][ T7490] 8021q: adding VLAN 0 to HW filter on device team0 [ 532.707072][ T4413] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 532.719414][ T4413] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 532.760017][ T5622] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 532.777125][ T7686] team0: Port device team_slave_0 added [ 532.796156][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 532.811271][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 532.820981][ T11] bridge0: port 1(bridge_slave_0) entered blocking state [ 532.828214][ T11] bridge0: port 1(bridge_slave_0) entered forwarding state [ 532.844027][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 532.858016][ T7686] team0: Port device team_slave_1 added [ 532.895604][ T5622] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 532.922155][ T4413] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 532.931790][ T4413] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 532.941370][ T4413] bridge0: port 2(bridge_slave_1) entered blocking state [ 532.948615][ T4413] bridge0: port 2(bridge_slave_1) entered forwarding state [ 532.969910][ T4414] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 533.021377][ T5622] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 533.044965][ T7686] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 533.051973][ T7686] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 533.080502][ T7686] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 533.093361][ T4413] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 533.116017][ T4414] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 533.131755][ T4414] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 533.140725][ T4414] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 533.153288][ T4414] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 533.171059][ T7490] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 533.183326][ T7490] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 533.197292][ T7686] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 533.205512][ T7686] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 533.231785][ T7686] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 533.249813][ T4414] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 533.258524][ T4414] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 533.267660][ T4414] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 533.277767][ T4414] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 533.287108][ T4414] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 533.340021][ T4414] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 533.443697][ T7686] device hsr_slave_0 entered promiscuous mode [ 533.463983][ T7686] device hsr_slave_1 entered promiscuous mode [ 533.470925][ T7686] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 533.493347][ T7686] Cannot create hsr debugfs directory [ 533.619358][ T5622] tipc: Disabling bearer [ 533.632248][ T5622] tipc: Left network mode [ 533.806798][ T4413] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 533.820260][ T4413] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 533.859374][ T7490] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 534.018289][ T7686] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 534.038539][ T7686] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 534.062251][ T7686] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 534.109794][ T7686] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 534.273340][ T4267] Bluetooth: hci5: command 0x041b tx timeout [ 534.493272][ T7686] 8021q: adding VLAN 0 to HW filter on device bond0 [ 534.509885][ T5622] IPVS: stopping backup sync thread 7401 ... [ 534.523948][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 534.552728][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 534.638714][ T7686] 8021q: adding VLAN 0 to HW filter on device team0 [ 534.655019][ T4418] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 534.664415][ T4418] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 534.675370][ T4418] bridge0: port 1(bridge_slave_0) entered blocking state [ 534.682496][ T4418] bridge0: port 1(bridge_slave_0) entered forwarding state [ 534.708403][ T4418] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 534.718463][ T4418] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 534.730409][ T4418] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 534.739768][ T4418] bridge0: port 2(bridge_slave_1) entered blocking state [ 534.746983][ T4418] bridge0: port 2(bridge_slave_1) entered forwarding state [ 534.756670][ T4418] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 534.767542][ T4418] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 534.776721][ T4418] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 534.873694][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 534.882797][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 534.895779][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 534.904758][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 534.917742][ T4418] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 534.928071][ T4418] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 534.982608][ T4418] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 534.998071][ T4418] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 535.008920][ T4418] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 535.021826][ T4418] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 535.032925][ T4418] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 535.049795][ T4418] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 535.074053][ T5622] device hsr_slave_0 left promiscuous mode [ 535.081111][ T5622] device hsr_slave_1 left promiscuous mode [ 535.106297][ T5622] bridge0: port 3(team0) entered disabled state [ 535.121917][ T5622] device bridge_slave_1 left promiscuous mode [ 535.128447][ T5622] bridge0: port 2(bridge_slave_1) entered disabled state [ 535.144578][ T5622] device bridge_slave_0 left promiscuous mode [ 535.150938][ T5622] bridge0: port 1(bridge_slave_0) entered disabled state [ 535.207845][ T5622] device veth1_macvtap left promiscuous mode [ 535.215026][ T5622] device veth0_macvtap left promiscuous mode [ 535.221202][ T5622] device veth1_vlan left promiscuous mode [ 535.232288][ T5622] device veth0_vlan left promiscuous mode [ 535.930219][ T5622] device team_slave_1 left promiscuous mode [ 535.940871][ T5622] team0 (unregistering): Port device team_slave_1 removed [ 535.989543][ T5622] device team_slave_0 left promiscuous mode [ 535.999407][ T5622] team0 (unregistering): Port device team_slave_0 removed [ 536.050872][ T5622] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 536.106426][ T5622] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 536.116868][ T7] infiniband syz1: ib_query_port failed (-19) [ 536.361134][ T4267] Bluetooth: hci5: command 0x040f tx timeout [ 536.660653][ T5622] bond0 (unregistering): Released all slaves [ 536.762425][ T7490] device veth0_vlan entered promiscuous mode [ 536.780249][ T4347] bond0 speed is unknown, defaulting to 1000 [ 536.807915][ T7686] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 536.833922][ T4414] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 536.842628][ T4414] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 536.860105][ T7490] device veth1_vlan entered promiscuous mode [ 536.946922][ T4346] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 536.957300][ T4346] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 536.978136][ T7490] device veth0_macvtap entered promiscuous mode [ 537.003321][ T7490] device veth1_macvtap entered promiscuous mode [ 537.067180][ T7490] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 537.096243][ T7490] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 537.117909][ T7490] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 537.130488][ T4346] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 537.144941][ T4346] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 537.162924][ T4346] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 537.174482][ T4346] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 537.186674][ T7490] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 537.198317][ T7490] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 537.218765][ T7490] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 537.240980][ T7490] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 537.260808][ T7490] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 537.270923][ T7490] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 537.280144][ T7490] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 537.292709][ T4346] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 537.307759][ T4346] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 537.459300][ T4418] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 537.475896][ T4418] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 537.509964][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 537.570972][ T9] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 537.583787][ T9] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 537.592673][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 537.601077][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 537.617357][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 537.632410][ T7686] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 538.516473][ T4267] Bluetooth: hci5: command 0x0419 tx timeout [ 538.580900][ T7801] loop5: detected capacity change from 0 to 4096 [ 538.750814][ T4393] I/O error, dev loop5, sector 3968 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 541.209386][ T7834] netlink: 28 bytes leftover after parsing attributes in process `syz.3.741'. [ 541.283702][ T7834] netlink: 8 bytes leftover after parsing attributes in process `syz.3.741'. [ 541.670739][ T7839] tmpfs: Bad value for 'nr_inodes' [ 543.108744][ T4418] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 543.131343][ T4418] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 544.258038][ T4416] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 544.304056][ T4416] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 544.391386][ T4416] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 544.424017][ T4416] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 544.466999][ T7686] device veth0_vlan entered promiscuous mode [ 545.017648][ T7862] IPVS: sync thread started: state = BACKUP, mcast_ifn = veth0_to_team, syncid = 0, id = 0 [ 545.034411][ T7686] device veth1_vlan entered promiscuous mode [ 545.114067][ T4414] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 545.153683][ T4414] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 545.196767][ T7686] device veth0_macvtap entered promiscuous mode [ 545.230261][ T7686] device veth1_macvtap entered promiscuous mode [ 545.293343][ T5016] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 545.328260][ T5016] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 545.352247][ T7686] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 545.389521][ T7686] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 545.421061][ T7686] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 545.454323][ T7686] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 545.490676][ T7686] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 545.519894][ T5622] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 545.547840][ T5622] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 545.578053][ T7686] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 545.611157][ T7686] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 545.643892][ T7686] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 545.676836][ T7686] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 547.465583][ C0] IPv4: Oversized IP packet from 127.0.0.1 [ 547.514407][ T7686] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 547.527604][ T5016] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 547.566659][ T5016] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 547.601959][ T7686] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 547.632416][ T7686] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 547.647760][ T7686] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 547.734630][ T7686] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 548.457977][ T4416] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 548.473126][ T4416] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 548.508674][ T4346] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 548.872143][ T5016] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 548.984944][ T5016] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 549.084773][ T5622] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 552.526301][ T7889] loop3: detected capacity change from 0 to 4096 [ 552.754225][ T4393] I/O error, dev loop3, sector 3968 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 553.665387][ T7919] loop6: detected capacity change from 0 to 256 [ 553.680601][ T7910] 9pnet_fd: p9_fd_create_tcp (7910): problem connecting socket to 127.0.0.1 [ 553.693898][ T7919] exfat: Deprecated parameter 'utf8' [ 556.308505][ T7945] No such timeout policy "syz1" [ 556.460687][ T7946] loop6: detected capacity change from 0 to 2048 [ 556.630839][ T7946] EXT4-fs (loop6): mounted filesystem without journal. Quota mode: none. [ 556.653867][ T7946] ext4 filesystem being mounted at /3/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 557.017202][ T7946] overlayfs: Failed to create volatile/dirty file. [ 557.256282][ T7953] overlayfs: failed to set xattr on upper [ 557.262078][ T7953] overlayfs: ...falling back to index=off,metacopy=off. [ 560.160413][ T7978] DRBG: could not allocate CTR cipher TFM handle: ctr(aes) [ 561.423253][ T7995] device bond_slave_0 entered promiscuous mode [ 561.431143][ T7995] device bond_slave_1 entered promiscuous mode [ 561.437629][ T7995] device wlan1 entered promiscuous mode [ 561.446163][ T7995] device macsec1 entered promiscuous mode [ 561.452441][ T7995] device bond0 entered promiscuous mode [ 563.182676][ T8007] loop5: detected capacity change from 0 to 512 [ 563.207537][ T7686] EXT4-fs (loop6): unmounting filesystem. [ 563.228713][ T8007] EXT4-fs (loop5): orphan cleanup on readonly fs [ 563.364739][ T8007] EXT4-fs error (device loop5): ext4_do_update_inode:5254: inode #16: comm syz.5.775: corrupted inode contents [ 563.420222][ T8007] EXT4-fs error (device loop5): ext4_dirty_inode:6119: inode #16: comm syz.5.775: mark_inode_dirty error [ 563.449470][ T8007] EXT4-fs error (device loop5): ext4_do_update_inode:5254: inode #16: comm syz.5.775: corrupted inode contents [ 563.477517][ T8007] EXT4-fs error (device loop5): __ext4_ext_dirty:202: inode #16: comm syz.5.775: mark_inode_dirty error [ 563.949635][ T8007] EXT4-fs error (device loop5): ext4_do_update_inode:5254: inode #16: comm syz.5.775: corrupted inode contents [ 564.189267][ T8007] EXT4-fs error (device loop5) in ext4_orphan_del:305: Corrupt filesystem [ 564.271193][ T8007] EXT4-fs error (device loop5): ext4_do_update_inode:5254: inode #16: comm syz.5.775: corrupted inode contents [ 564.329762][ T8007] EXT4-fs error (device loop5): ext4_truncate:4312: inode #16: comm syz.5.775: mark_inode_dirty error [ 564.356063][ T8007] EXT4-fs error (device loop5) in ext4_process_orphan:347: Corrupt filesystem [ 564.415062][ T8007] EXT4-fs (loop5): 1 truncate cleaned up [ 564.434876][ T9] __quota_error: 5 callbacks suppressed [ 564.434894][ T9] Quota error (device loop5): do_check_range: Getting dqdh_entries 15 out of range 0-14 [ 566.546597][ T9] EXT4-fs error (device loop5): ext4_release_dquot:6852: comm kworker/u4:0: Failed to release dquot type 1 [ 566.643588][ T8007] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: writeback. [ 566.996378][ T8040] loop1: detected capacity change from 0 to 1024 [ 568.068825][ T1274] ieee802154 phy0 wpan0: encryption failed: -22 [ 568.075516][ T1274] ieee802154 phy1 wpan1: encryption failed: -22 [ 568.188629][ T7490] EXT4-fs (loop5): unmounting filesystem. [ 568.246493][ T8037] DRBG: could not allocate CTR cipher TFM handle: ctr(aes) [ 568.322752][ T8040] EXT4-fs (loop1): revision level too high, forcing read-only mode [ 568.331943][ T8040] EXT4-fs (loop1): orphan cleanup on readonly fs [ 568.346543][ T8040] Quota error (device loop1): v2_read_file_info: Can't read info structure [ 568.356771][ T8040] EXT4-fs warning (device loop1): ext4_enable_quotas:7068: Failed to enable quota tracking (type=0, err=-5, ino=3). Please run e2fsck to fix. [ 568.371371][ T8040] EXT4-fs (loop1): Cannot turn on quotas: error -5 [ 568.440608][ T8040] EXT4-fs (loop1): 1 truncate cleaned up [ 568.446563][ T8040] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 568.929992][ T4266] EXT4-fs (loop1): unmounting filesystem. [ 570.151817][ T6308] kernel write not supported for file bpf-prog (pid: 6308 comm: kworker/0:10) [ 572.384479][ T8102] loop5: detected capacity change from 0 to 64 [ 572.529505][ T8098] 9pnet_fd: p9_fd_create_tcp (8098): problem connecting socket to 127.0.0.1 [ 572.620561][ T8100] loop1: detected capacity change from 0 to 4096 [ 573.522231][ T4449] I/O error, dev loop1, sector 3968 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 575.069356][ T8124] loop5: detected capacity change from 0 to 1024 [ 575.220893][ T8124] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: none. [ 575.329422][ T8130] EXT4-fs (loop5): shut down requested (0) [ 577.830153][ T7490] EXT4-fs (loop5): unmounting filesystem. [ 580.013586][ T33] Bluetooth: hci2: Frame reassembly failed (-84) [ 580.273250][ T4280] Bluetooth: hci2: Opcode 0x1003 failed: -110 [ 580.509209][ T4280] Bluetooth: hci5: link tx timeout [ 580.515174][ T4280] Bluetooth: hci5: killing stalled connection 11:aa:aa:aa:aa:aa [ 580.573419][ T4280] Bluetooth: hci5: link tx timeout [ 580.578709][ T4280] Bluetooth: hci5: killing stalled connection 11:aa:aa:aa:aa:aa [ 580.587539][ T4280] Bluetooth: hci5: link tx timeout [ 580.592798][ T4280] Bluetooth: hci5: killing stalled connection 11:aa:aa:aa:aa:aa [ 580.601932][ T4280] Bluetooth: hci5: link tx timeout [ 580.607381][ T4280] Bluetooth: hci5: killing stalled connection 11:aa:aa:aa:aa:aa [ 580.616039][ T4280] Bluetooth: hci5: link tx timeout [ 580.631299][ T4280] Bluetooth: hci5: killing stalled connection 11:aa:aa:aa:aa:aa [ 580.664719][ T4280] Bluetooth: hci5: link tx timeout [ 580.671935][ T4280] Bluetooth: hci5: killing stalled connection 11:aa:aa:aa:aa:aa [ 581.369621][ T8163] loop1: detected capacity change from 0 to 1024 [ 581.434106][ T4393] I/O error, dev loop1, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 582.462724][ T8177] ceph: No source [ 582.593025][ T4280] Bluetooth: hci5: command 0x0406 tx timeout [ 583.008685][ T8179] device bond_slave_0 entered promiscuous mode [ 583.014982][ T8179] device bond_slave_1 entered promiscuous mode [ 583.021573][ T8179] device macsec1 entered promiscuous mode [ 583.027999][ T8179] device bond0 entered promiscuous mode [ 585.102574][ T8196] overlayfs: failed to clone upperpath [ 585.832237][ T8204] loop6: detected capacity change from 0 to 16 [ 585.984245][ T8204] erofs: (device loop6): mounted with root inode @ nid 36. [ 586.077383][ T4267] erofs: (device loop6): z_erofs_lz4_decompress_mem: failed to decompress -26 in[46, 4050] out[9000] [ 586.201029][ T8204] erofs: (device loop6): z_erofs_lz4_decompress_mem: failed to decompress -26 in[46, 4050] out[8192] [ 586.258234][ T27] audit: type=1800 audit(1756523324.295:89): pid=8204 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.6.814" name="file2" dev="loop6" ino=89 res=0 errno=0 [ 587.669257][ T8041] Bluetooth: hci2: Frame reassembly failed (-84) [ 588.581371][ T8231] No such timeout policy "syz1" [ 589.714707][ T4280] Bluetooth: hci2: command 0x1003 tx timeout [ 589.743510][ T4267] Bluetooth: hci2: Opcode 0x1003 failed: -110 [ 591.451599][ T8250] device bond_slave_0 entered promiscuous mode [ 591.457884][ T8250] device bond_slave_1 entered promiscuous mode [ 591.464137][ T8250] device wlan1 entered promiscuous mode [ 591.470516][ T8250] device macsec1 entered promiscuous mode [ 591.476413][ T8250] device bond0 entered promiscuous mode [ 593.545803][ T8276] tmpfs: Bad value for 'nr_inodes' [ 593.573754][ T8276] loop5: detected capacity change from 0 to 256 [ 594.766166][ T8276] exFAT-fs (loop5): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 594.776921][ T8276] exFAT-fs (loop5): Medium has reported failures. Some data may be lost. [ 594.808316][ T8276] exFAT-fs (loop5): failed to load upcase table (idx : 0x0000ff98, chksum : 0xc64c1d22, utbl_chksum : 0xe619d30d) [ 596.158359][ T8290] loop5: detected capacity change from 0 to 1024 [ 596.203992][ T8287] loop6: detected capacity change from 0 to 4096 [ 597.261807][ T4449] I/O error, dev loop6, sector 3968 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 598.080277][ T8308] rdma_op ffff8880538781f0 conn xmit_rdma 0000000000000000 [ 598.695185][ T8310] loop1: detected capacity change from 0 to 256 [ 599.025093][ T8314] overlayfs: failed to resolve './file2': -2 [ 599.113140][ T8315] overlayfs: failed to resolve './file1': -2 [ 600.562198][ T8331] ceph: No source [ 603.218992][ T8350] tmpfs: Bad value for 'nr_inodes' [ 603.230687][ T8350] loop5: detected capacity change from 0 to 256 [ 603.463463][ T8350] exFAT-fs (loop5): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 603.474410][ T8350] exFAT-fs (loop5): Medium has reported failures. Some data may be lost. [ 603.488895][ T8350] exFAT-fs (loop5): failed to load upcase table (idx : 0x0000ff98, chksum : 0xc64c1d22, utbl_chksum : 0xe619d30d) [ 605.621043][ T8369] loop6: detected capacity change from 0 to 4096 [ 607.634773][ T8383] tipc: Enabled bearer , priority 0 [ 610.449641][ T8407] tipc: Can't bind to reserved service type 0 [ 611.097913][ T8412] loop1: detected capacity change from 0 to 8 [ 611.105197][ T8412] MTD: Attempt to mount non-MTD device "/dev/loop1" [ 611.133695][ T8412] cramfs: Error -5 while decompressing! [ 611.139720][ T8412] cramfs: ffffffff96d751a8(26)->ffff88804b6e0000(4096) [ 611.146728][ T8412] cramfs: Error -3 while decompressing! [ 611.152362][ T8412] cramfs: ffffffff96d751c2(26)->ffff88804b6e1000(4096) [ 611.159312][ T8412] cramfs: Error -3 while decompressing! [ 611.164944][ T8412] cramfs: ffffffff96d751dc(16)->ffff88804c322000(4096) [ 611.171937][ T8412] cramfs: Error -5 while decompressing! [ 611.177563][ T8412] cramfs: ffffffff96d751a8(26)->ffff88804b6e0000(4096) [ 611.255778][ T4449] udevd[4449]: incorrect cramfs checksum on /dev/loop1 [ 612.300137][ T4393] udevd[4393]: incorrect cramfs checksum on /dev/loop1 [ 613.546767][ T8430] bridge0: port 3(gretap0) entered blocking state [ 613.554318][ T8430] bridge0: port 3(gretap0) entered disabled state [ 613.561721][ T8430] device gretap0 entered promiscuous mode [ 613.569203][ T8430] bridge0: port 3(gretap0) entered blocking state [ 613.575702][ T8430] bridge0: port 3(gretap0) entered forwarding state [ 613.836473][ T8436] loop1: detected capacity change from 0 to 256 [ 613.865663][ T8436] exfat: Deprecated parameter 'utf8' [ 613.904836][ T4393] I/O error, dev loop1, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 615.124503][ T8453] loop6: detected capacity change from 0 to 256 [ 615.287973][ T8453] exfat: Deprecated parameter 'utf8' [ 615.472653][ T8449] loop3: detected capacity change from 0 to 4096 [ 615.538616][ T8462] tmpfs: Bad value for 'nr_inodes' [ 616.696796][ T4450] I/O error, dev loop3, sector 3968 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 618.550089][ T8484] loop3: detected capacity change from 0 to 8192 [ 618.933690][ T8484] FAT-fs (loop3): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 618.959110][ T8492] loop6: detected capacity change from 0 to 64 [ 618.971974][ T8492] hfs: unable to parse mount options [ 620.870723][ T8499] loop1: detected capacity change from 0 to 256 [ 620.926680][ T8499] exfat: Deprecated parameter 'utf8' [ 620.986447][ T4449] I/O error, dev loop1, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 621.905881][ T7] usb 7-1: new high-speed USB device number 2 using dummy_hcd [ 622.095262][ T7] usb 7-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 622.137151][ T7] usb 7-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 622.180308][ T7] usb 7-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 622.210153][ T7] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 622.450299][ T7] usb 7-1: Product: syz [ 622.793481][ T8518] tmpfs: Bad value for 'nr_inodes' [ 622.816835][ T8518] loop5: detected capacity change from 0 to 256 [ 622.950866][ T8518] exFAT-fs (loop5): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 622.962074][ T8518] exFAT-fs (loop5): Medium has reported failures. Some data may be lost. [ 622.979678][ T8518] exFAT-fs (loop5): failed to load upcase table (idx : 0x0000ff98, chksum : 0xc64c1d22, utbl_chksum : 0xe619d30d) [ 623.011357][ T7] usb 7-1: Manufacturer: syz [ 623.016646][ T7] usb 7-1: SerialNumber: syz [ 623.046124][ T8514] netlink: 20 bytes leftover after parsing attributes in process `syz.3.881'. [ 623.494649][ T8522] tmpfs: Bad value for 'nr_inodes' [ 623.519917][ T8522] loop1: detected capacity change from 0 to 256 [ 623.742321][ T8524] netlink: 24 bytes leftover after parsing attributes in process `syz.6.877'. [ 623.772599][ T8522] exFAT-fs (loop1): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 623.783523][ T8522] exFAT-fs (loop1): Medium has reported failures. Some data may be lost. [ 623.828228][ T8522] exFAT-fs (loop1): failed to load upcase table (idx : 0x0000ff98, chksum : 0xc64c1d22, utbl_chksum : 0xe619d30d) [ 624.124592][ T7] usb 7-1: USB disconnect, device number 2 [ 624.349926][ T8526] loop5: detected capacity change from 0 to 4096 [ 624.381330][ T8530] loop1: detected capacity change from 0 to 2048 [ 624.573067][ T8530] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 625.216870][ T8535] loop3: detected capacity change from 0 to 1764 [ 625.476589][ T4450] I/O error, dev loop3, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 628.775543][ T8563] loop1: detected capacity change from 0 to 8 [ 630.167941][ T8562] SQUASHFS error: zlib decompression failed, data probably corrupt [ 630.176774][ T8562] SQUASHFS error: Failed to read block 0x13e: -5 [ 630.183550][ T8562] SQUASHFS error: Unable to read metadata cache entry [13c] [ 630.190858][ T8562] SQUASHFS error: Unable to read directory block [13c:26] [ 630.519541][ T1274] ieee802154 phy0 wpan0: encryption failed: -22 [ 630.533054][ T1274] ieee802154 phy1 wpan1: encryption failed: -22 [ 630.962383][ T8559] loop6: detected capacity change from 0 to 8192 [ 631.081387][ T8577] tmpfs: Bad value for 'nr_inodes' [ 631.116154][ T8577] loop5: detected capacity change from 0 to 256 [ 631.418331][ T8577] exFAT-fs (loop5): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 631.429254][ T8577] exFAT-fs (loop5): Medium has reported failures. Some data may be lost. [ 631.484248][ T8577] exFAT-fs (loop5): failed to load upcase table (idx : 0x0000ff98, chksum : 0xc64c1d22, utbl_chksum : 0xe619d30d) [ 631.872449][ T8583] tmpfs: Bad value for 'nr_inodes' [ 632.518531][ T8587] loop1: detected capacity change from 0 to 1764 [ 632.656126][ T4267] Bluetooth: hci0: command 0x0406 tx timeout [ 634.156156][ T8606] loop3: detected capacity change from 0 to 64 [ 635.105263][ T8609] netlink: 12 bytes leftover after parsing attributes in process `syz.5.900'. [ 635.723820][ T8617] netlink: 48 bytes leftover after parsing attributes in process `syz.2.902'. [ 635.843671][ T8617] netlink: 34 bytes leftover after parsing attributes in process `syz.2.902'. [ 635.856200][ T8617] netlink: 12 bytes leftover after parsing attributes in process `syz.2.902'. [ 638.327871][ T8649] loop1: detected capacity change from 0 to 64 [ 638.743846][ T8653] tmpfs: Unknown parameter 'GPL' [ 639.138864][ T8647] loop3: detected capacity change from 0 to 256 [ 639.168887][ T8647] exFAT-fs (loop3): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 639.180245][ T8647] exFAT-fs (loop3): Medium has reported failures. Some data may be lost. [ 639.209106][ T8647] exFAT-fs (loop3): failed to load upcase table (idx : 0x0000ff98, chksum : 0xc64c1d22, utbl_chksum : 0xe619d30d) [ 647.266636][ T8701] sctp: [Deprecated]: syz.6.919 (pid 8701) Use of int in maxseg socket option. [ 647.266636][ T8701] Use struct sctp_assoc_value instead [ 647.331748][ T8708] loop1: detected capacity change from 0 to 256 [ 649.036542][ T8708] exfat: Deprecated parameter 'utf8' [ 649.332260][ T8721] lo speed is unknown, defaulting to 1000 [ 650.485338][ T8730] loop1: detected capacity change from 0 to 8192 [ 651.894297][ T8730] FAT-fs (loop1): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 655.997927][ T8754] loop5: detected capacity change from 0 to 16 [ 656.204862][ T8751] syz.3.928 (8751) used greatest stack depth: 18176 bytes left [ 656.363446][ T4449] I/O error, dev loop5, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 657.141581][ T8762] loop5: detected capacity change from 0 to 64 [ 657.604512][ T8779] netlink: 168 bytes leftover after parsing attributes in process `syz.3.932'. [ 658.920415][ T8790] loop1: detected capacity change from 0 to 64 [ 661.979681][ T11] kworker/u4:1: attempt to access beyond end of device [ 661.979681][ T11] loop1: rw=1, sector=268435468, nr_sectors = 2 limit=64 [ 662.967378][ T11] Buffer I/O error on dev loop1, logical block 134217734, lost async page write [ 664.486465][ T8834] loop3: detected capacity change from 0 to 2048 [ 664.946209][ T8846] loop6: detected capacity change from 0 to 128 [ 665.955758][ T8834] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none. [ 666.000754][ T8849] loop1: detected capacity change from 0 to 64 [ 666.254733][ T8834] ext4 filesystem being mounted at /201/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 667.261821][ T8856] device geneve2 entered promiscuous mode [ 667.369443][ T8857] EXT4-fs error (device loop3): __ext4_new_inode:1075: comm syz.3.945: reserved inode found cleared - inode=1 [ 668.087972][ T4265] EXT4-fs (loop3): unmounting filesystem. [ 668.846387][ T8864] loop3: detected capacity change from 0 to 64 [ 670.349770][ T8871] loop1: detected capacity change from 0 to 128 [ 671.837700][ T8873] loop6: detected capacity change from 0 to 256 [ 671.871433][ T8873] exfat: Deprecated parameter 'utf8' [ 671.908716][ T8873] exfat: Deprecated parameter 'utf8' [ 671.929273][ T8873] exfat: Deprecated parameter 'namecase' [ 672.003716][ T8873] exFAT-fs (loop6): failed to load upcase table (idx : 0x00010000, chksum : 0x205ad3fc, utbl_chksum : 0xe619d30d) [ 672.804182][ T8885] loop1: detected capacity change from 0 to 2048 [ 674.146797][ T8885] NILFS (loop1): invalid segment: Inconsistency found [ 674.173051][ T8885] NILFS (loop1): trying rollback from an earlier position [ 674.242357][ T8885] NILFS (loop1): recovery complete [ 674.328283][ T8902] NILFS (loop1): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 678.331757][ T8934] loop6: detected capacity change from 0 to 1024 [ 678.377155][ T8934] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 678.877185][ T8934] EXT4-fs (loop6): mounted filesystem without journal. Quota mode: none. [ 680.778641][ T7686] EXT4-fs (loop6): unmounting filesystem. [ 681.364660][ T8969] tmpfs: Bad value for 'nr_inodes' [ 686.703407][ T8988] sctp: failed to load transform for md5: -2 [ 689.715352][ T9020] loop3: detected capacity change from 0 to 64 [ 691.628697][ T1274] ieee802154 phy0 wpan0: encryption failed: -22 [ 691.635150][ T1274] ieee802154 phy1 wpan1: encryption failed: -22 [ 691.847308][ T9025] syz.6.983 uses obsolete (PF_INET,SOCK_PACKET) [ 692.650566][ T9039] tmpfs: Bad value for 'nr_inodes' [ 692.720073][ T9037] loop1: detected capacity change from 0 to 256 [ 693.247138][ T9037] exFAT-fs (loop1): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 693.258274][ T9037] exFAT-fs (loop1): Medium has reported failures. Some data may be lost. [ 693.274804][ T9037] exFAT-fs (loop1): failed to load upcase table (idx : 0x0000ff98, chksum : 0xc64c1d22, utbl_chksum : 0xe619d30d) [ 694.003350][ T9047] loop3: detected capacity change from 0 to 4096 [ 695.967701][ T9125] NILFS (loop3): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 701.095063][ T9169] tmpfs: Bad value for 'nr_inodes' [ 701.194595][ T9169] loop6: detected capacity change from 0 to 256 [ 701.440973][ T9169] exFAT-fs (loop6): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 701.451929][ T9169] exFAT-fs (loop6): Medium has reported failures. Some data may be lost. [ 701.531290][ T9169] exFAT-fs (loop6): failed to load upcase table (idx : 0x0000ff98, chksum : 0xc64c1d22, utbl_chksum : 0xe619d30d) [ 701.889393][ T9170] netlink: 8 bytes leftover after parsing attributes in process `syz.5.998'. [ 702.409636][ T9170] loop5: detected capacity change from 0 to 128 [ 703.233070][ T4267] Bluetooth: hci5: command 0x0406 tx timeout [ 705.163955][ T9194] loop6: detected capacity change from 0 to 16 [ 705.171208][ T9194] MTD: Attempt to mount non-MTD device "/dev/loop6" [ 705.528052][ T9175] overlayfs: upper fs is r/o, try multi-lower layers mount [ 705.878963][ T4267] Bluetooth: Frame is too long (len 18, expected len 4) [ 708.195714][ T9222] lo speed is unknown, defaulting to 1000 [ 708.269103][ T9223] tmpfs: Bad value for 'nr_inodes' [ 708.427660][ T9223] loop3: detected capacity change from 0 to 256 [ 711.257398][ T9223] exFAT-fs (loop3): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 711.269518][ T9223] exFAT-fs (loop3): Medium has reported failures. Some data may be lost. [ 711.310321][ T9223] exFAT-fs (loop3): failed to load upcase table (idx : 0x0000ff98, chksum : 0xc64c1d22, utbl_chksum : 0xe619d30d) [ 715.840474][ T9259] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 715.897696][ T9259] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 715.910519][ T9259] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 718.190960][ T9292] loop5: detected capacity change from 0 to 2048 [ 718.537066][ T4267] Bluetooth: hci5: command 0x0405 tx timeout [ 719.248002][ T9292] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: none. [ 719.321419][ T9292] ext4 filesystem being mounted at /60/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 719.760621][ T9314] xt_SECMARK: only valid in 'mangle' or 'security' table, not 'filter' [ 719.772674][ T9314] ubi31: attaching mtd0 [ 719.779877][ T9314] ubi31: scanning is finished [ 719.785016][ T9314] ubi31: empty MTD device detected [ 719.935164][ T9315] device geneve2 entered promiscuous mode [ 720.410767][ T9314] ubi31 error: ubi_attach_mtd_dev: cannot spawn "ubi_bgt31d", error -4 [ 720.428472][ T9315] EXT4-fs error (device loop5): __ext4_new_inode:1075: comm syz.5.1028: reserved inode found cleared - inode=1 [ 720.699903][ T7490] EXT4-fs (loop5): unmounting filesystem. [ 720.751813][ T9324] loop3: detected capacity change from 0 to 512 [ 720.913117][ T9324] EXT4-fs (loop3): ext4_check_descriptors: Checksum for group 0 failed (57259!=33349) [ 720.989382][ T9324] EXT4-fs (loop3): orphan cleanup on readonly fs [ 721.015162][ T9324] EXT4-fs error (device loop3): ext4_read_block_bitmap_nowait:511: comm syz.3.1032: Block bitmap for bg 0 marked uninitialized [ 721.124436][ T47] Bluetooth: hci5: Unknown advertising packet type: 0xffff [ 721.124532][ T47] Bluetooth: hci5: adv larger than maximum supported [ 721.132237][ T47] Bluetooth: hci5: Malformed LE Event: 0x0d [ 721.346047][ T9324] EXT4-fs error (device loop3) in ext4_mb_clear_bb:6165: Corrupt filesystem [ 724.668123][ T9324] EXT4-fs (loop3): 1 orphan inode deleted [ 724.826439][ T9324] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none. [ 725.498712][ T4265] EXT4-fs (loop3): unmounting filesystem. [ 729.526779][ T9370] loop1: detected capacity change from 0 to 32768 [ 730.176142][ T9370] (syz.1.1042,9370,0):ocfs2_load_local_alloc:338 ERROR: inconsistent detected, clean journal with unrecovered local alloc, please run fsck.ocfs2! [ 730.176142][ T9370] found = 0, set = 0, taken = 0, off = 1280 [ 730.198083][ T9370] (syz.1.1042,9370,0):ocfs2_load_local_alloc:355 ERROR: status = -22 [ 730.207058][ T9370] (syz.1.1042,9370,0):ocfs2_check_volume:2461 ERROR: status = -22 [ 730.215332][ T9370] (syz.1.1042,9370,0):ocfs2_check_volume:2489 ERROR: status = -22 [ 730.223369][ T9370] (syz.1.1042,9370,0):ocfs2_mount_volume:1821 ERROR: status = -22 [ 730.335867][ T9370] (syz.1.1042,9370,0):ocfs2_fill_super:1176 ERROR: status = -22 [ 733.064451][ T9402] loop3: detected capacity change from 0 to 16 [ 733.331874][ T9404] No such timeout policy "syz1" [ 734.217486][ T9408] loop3: detected capacity change from 0 to 64 [ 736.543909][ T9418] sctp: failed to load transform for md5: -2 [ 736.658797][ T9430] loop6: detected capacity change from 0 to 64 [ 737.975357][ T9438] 9pnet_virtio: no channels available for device [ 737.989721][ T9438] hfs: request for non-existent node 131072 in B*Tree [ 737.997088][ T9438] hfs: request for non-existent node 131072 in B*Tree [ 738.212622][ T9438] xt_physdev: --physdev-out and --physdev-is-out only supported in the FORWARD and POSTROUTING chains with bridged traffic [ 738.597615][ T9446] loop1: detected capacity change from 0 to 512 [ 739.341743][ T9446] EXT4-fs (loop1): orphan cleanup on readonly fs [ 740.744904][ T9446] EXT4-fs error (device loop1): ext4_do_update_inode:5254: inode #16: comm syz.1.1055: corrupted inode contents [ 740.952141][ T9446] EXT4-fs error (device loop1): ext4_dirty_inode:6119: inode #16: comm syz.1.1055: mark_inode_dirty error [ 740.995261][ T9446] EXT4-fs error (device loop1): ext4_do_update_inode:5254: inode #16: comm syz.1.1055: corrupted inode contents [ 741.024085][ T9446] EXT4-fs error (device loop1): __ext4_ext_dirty:202: inode #16: comm syz.1.1055: mark_inode_dirty error [ 741.148340][ T9446] EXT4-fs error (device loop1): ext4_do_update_inode:5254: inode #16: comm syz.1.1055: corrupted inode contents [ 741.314509][ T9446] EXT4-fs error (device loop1) in ext4_orphan_del:305: Corrupt filesystem [ 741.359250][ T9446] EXT4-fs error (device loop1): ext4_do_update_inode:5254: inode #16: comm syz.1.1055: corrupted inode contents [ 742.247269][ T9446] EXT4-fs error (device loop1): ext4_truncate:4312: inode #16: comm syz.1.1055: mark_inode_dirty error [ 742.290898][ T9446] EXT4-fs error (device loop1) in ext4_process_orphan:347: Corrupt filesystem [ 742.436841][ T9472] loop5: detected capacity change from 0 to 4096 [ 742.499474][ T9446] EXT4-fs (loop1): 1 truncate cleaned up [ 743.753956][ T9097] Quota error (device loop1): do_check_range: Getting dqdh_entries 15 out of range 0-14 [ 743.768165][ T9097] EXT4-fs error (device loop1): ext4_release_dquot:6852: comm kworker/u4:22: Failed to release dquot type 1 [ 743.780914][ T9446] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 745.523603][ T4266] EXT4-fs (loop1): unmounting filesystem. [ 752.608743][ T1274] ieee802154 phy0 wpan0: encryption failed: -22 [ 752.618394][ T1274] ieee802154 phy1 wpan1: encryption failed: -22 [ 756.217661][ T9562] loop1: detected capacity change from 0 to 16 [ 756.354290][ T4393] I/O error, dev loop1, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 756.631553][ T9566] loop1: detected capacity change from 0 to 64 [ 758.761663][ T9583] overlayfs: failed to clone upperpath [ 767.371671][ T9638] loop3: detected capacity change from 0 to 256 [ 767.695314][ T4393] I/O error, dev loop3, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 770.609918][ T9656] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 771.702060][ T4267] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 771.717925][ T4280] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 771.728094][ T4280] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 771.737173][ T4280] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 771.756647][ T4280] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 771.765074][ T4280] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 772.971062][ T9665] lo speed is unknown, defaulting to 1000 [ 773.270125][ T9681] xt_SECMARK: only valid in 'mangle' or 'security' table, not 'filter' [ 773.284276][ T9681] ubi31: attaching mtd0 [ 773.301052][ T9681] ubi31: scanning is finished [ 773.872269][ T47] Bluetooth: hci2: command 0x0409 tx timeout [ 773.896439][ T9681] ubi31 error: ubi_attach_mtd_dev: cannot spawn "ubi_bgt31d", error -4 [ 774.057932][ T9103] netdevsim netdevsim6 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 775.184714][ T9103] netdevsim netdevsim6 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 775.964638][ T47] Bluetooth: hci2: command 0x041b tx timeout [ 776.535356][ T4280] Bluetooth: hci4: link tx timeout [ 776.541574][ T4280] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 776.556489][ T9103] netdevsim netdevsim6 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 778.137142][ T9721] loop5: detected capacity change from 0 to 32768 [ 778.140071][ T4280] Bluetooth: hci2: command 0x040f tx timeout [ 778.238914][ T9103] netdevsim netdevsim6 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 778.261317][ T9721] (syz.5.1111,9721,0):ocfs2_load_local_alloc:338 ERROR: inconsistent detected, clean journal with unrecovered local alloc, please run fsck.ocfs2! [ 778.261317][ T9721] found = 0, set = 0, taken = 0, off = 1280 [ 778.282407][ T9721] (syz.5.1111,9721,0):ocfs2_load_local_alloc:355 ERROR: status = -22 [ 778.290588][ T9721] (syz.5.1111,9721,0):ocfs2_check_volume:2461 ERROR: status = -22 [ 778.298450][ T9721] (syz.5.1111,9721,0):ocfs2_check_volume:2489 ERROR: status = -22 [ 778.306305][ T9721] (syz.5.1111,9721,0):ocfs2_mount_volume:1821 ERROR: status = -22 [ 778.325810][ T9721] (syz.5.1111,9721,0):ocfs2_fill_super:1176 ERROR: status = -22 [ 778.593055][ T4280] Bluetooth: hci4: command 0x0406 tx timeout [ 779.554853][ T9665] chnl_net:caif_netlink_parms(): no params data found [ 780.302140][ T4280] Bluetooth: hci2: command 0x0419 tx timeout [ 780.534054][ T9665] bridge0: port 1(bridge_slave_0) entered blocking state [ 780.541419][ T9665] bridge0: port 1(bridge_slave_0) entered disabled state [ 780.550051][ T9665] device bridge_slave_0 entered promiscuous mode [ 780.561604][ T9665] bridge0: port 2(bridge_slave_1) entered blocking state [ 780.569323][ T9665] bridge0: port 2(bridge_slave_1) entered disabled state [ 780.586314][ T9665] device bridge_slave_1 entered promiscuous mode [ 780.859723][ T9665] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 782.065937][ T9760] loop1: detected capacity change from 0 to 256 [ 782.984011][ T4449] I/O error, dev loop1, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 784.285864][ T9770] netlink: 48 bytes leftover after parsing attributes in process `syz.1.1121'. [ 784.325999][ T9665] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 784.893065][ T9770] netlink: 34 bytes leftover after parsing attributes in process `syz.1.1121'. [ 784.930527][ T9770] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1121'. [ 785.434758][ T9665] team0: Port device team_slave_0 added [ 785.723927][ T9665] team0: Port device team_slave_1 added [ 786.976070][ T9665] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 786.996161][ T9665] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 787.969730][ T9665] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 788.487211][ T9665] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 788.522256][ T9665] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 788.753014][ T9807] loop3: detected capacity change from 0 to 64 [ 788.811505][ T9665] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 789.975936][ T9665] device hsr_slave_0 entered promiscuous mode [ 790.070562][ T9665] device hsr_slave_1 entered promiscuous mode [ 794.450478][ T9839] loop5: detected capacity change from 0 to 128 [ 794.704055][ T9839] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: none. [ 794.734935][ T9839] ext4 filesystem being mounted at /82/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 795.575873][ T9845] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 796.122301][ T9665] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 796.297618][ T9665] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 796.418826][ T9665] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 796.639916][ T9665] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 796.669596][ T7490] EXT4-fs (loop5): unmounting filesystem. [ 796.776905][ T9103] device hsr_slave_0 left promiscuous mode [ 796.788056][ T9103] device hsr_slave_1 left promiscuous mode [ 796.798794][ T9103] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 796.808021][ T9103] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 796.817202][ T9103] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 796.829080][ T9103] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 796.837465][ T9103] device bridge_slave_1 left promiscuous mode [ 796.844904][ T9103] bridge0: port 2(bridge_slave_1) entered disabled state [ 796.856390][ T9103] device bridge_slave_0 left promiscuous mode [ 796.862693][ T9103] bridge0: port 1(bridge_slave_0) entered disabled state [ 796.901759][ T9103] device bond0 left promiscuous mode [ 796.909275][ T9103] device bond_slave_0 left promiscuous mode [ 796.915850][ T9103] device bond_slave_1 left promiscuous mode [ 796.937896][ T9103] device veth1_macvtap left promiscuous mode [ 796.949288][ T9103] device veth0_macvtap left promiscuous mode [ 796.956516][ T9103] device veth1_vlan left promiscuous mode [ 796.962395][ T9103] device veth0_vlan left promiscuous mode [ 797.732300][ T9103] team0 (unregistering): Port device team_slave_1 removed [ 797.795675][ T9103] team0 (unregistering): Port device team_slave_0 removed [ 797.856376][ T9103] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 797.917569][ T9103] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 798.546265][ T9103] bond0 (unregistering): Released all slaves [ 798.739531][ T9665] 8021q: adding VLAN 0 to HW filter on device bond0 [ 798.782496][ T9665] 8021q: adding VLAN 0 to HW filter on device team0 [ 798.791260][ T9119] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 798.800187][ T9119] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 798.819702][ T9119] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 798.829298][ T9119] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 798.839036][ T9119] bridge0: port 1(bridge_slave_0) entered blocking state [ 798.846232][ T9119] bridge0: port 1(bridge_slave_0) entered forwarding state [ 798.855629][ T9119] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 798.866399][ T9119] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 798.879356][ T9119] bridge0: port 2(bridge_slave_1) entered blocking state [ 798.886555][ T9119] bridge0: port 2(bridge_slave_1) entered forwarding state [ 798.901194][ T9119] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 798.912734][ T9119] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 798.944727][ T9119] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 798.967988][ T9119] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 798.995320][ T9119] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 799.004934][ T9119] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 799.031695][ T8807] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 799.043861][ T8807] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 799.059208][ T8807] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 799.068925][ T8807] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 799.098346][ T9665] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 799.116683][ T9665] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 799.128832][ T9119] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 799.138186][ T9119] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 799.484053][ T9119] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 799.491599][ T9119] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 799.501427][ T9665] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 799.985308][ T9119] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 799.995776][ T9119] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 800.021881][ T9119] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 800.030615][ T9119] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 800.051908][ T9665] device veth0_vlan entered promiscuous mode [ 800.061608][ T9119] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 800.075519][ T9119] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 800.092657][ T9665] device veth1_vlan entered promiscuous mode [ 800.120764][ T4346] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 800.130252][ T4346] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 800.140542][ T4346] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 800.150246][ T4346] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 800.162130][ T9665] device veth0_macvtap entered promiscuous mode [ 800.179131][ T9665] device veth1_macvtap entered promiscuous mode [ 800.207903][ T9665] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 800.224572][ T9665] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 800.238265][ T9665] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 800.251418][ T9665] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 800.268675][ T9665] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 800.279254][ T9116] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 800.291592][ T9116] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 800.300555][ T9116] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 800.314903][ T9116] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 800.329891][ T9665] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 800.341565][ T9665] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 800.358449][ T9665] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 800.370014][ T9665] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 800.390565][ T9665] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 800.401143][ T9103] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 800.414701][ T9103] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 800.430177][ T9665] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 800.439908][ T9665] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 800.448927][ T9665] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 800.458927][ T9665] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 800.551811][ T9103] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 800.581972][ T9103] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 800.582228][ T9119] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 800.618378][ T9116] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 800.623463][ T9119] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 800.640285][ T9116] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 801.044974][ T9920] loop1: detected capacity change from 0 to 256 [ 801.082522][ T9920] exFAT-fs (loop1): failed to load upcase table (idx : 0x0000fd4f, chksum : 0x3963664b, utbl_chksum : 0xe619d30d) [ 803.612638][ T9947] xt_SECMARK: only valid in 'mangle' or 'security' table, not 'filter' [ 804.446763][ T9954] loop5: detected capacity change from 0 to 64 [ 811.598572][ T9996] xt_SECMARK: only valid in 'mangle' or 'security' table, not 'filter' [ 813.339450][T10007] xt_SECMARK: only valid in 'mangle' or 'security' table, not 'filter' [ 814.118976][ T1274] ieee802154 phy0 wpan0: encryption failed: -22 [ 814.125364][ T1274] ieee802154 phy1 wpan1: encryption failed: -22 [ 814.597661][T10020] loop1: detected capacity change from 0 to 1764 [ 815.220480][T10023] can0: slcan on ttyS3. [ 816.021664][ T9917] I/O error, dev loop1, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 816.745153][T10023] can0 (unregistered): slcan off ttyS3. [ 816.898825][ T27] audit: type=1326 audit(1756523554.975:90): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10021 comm="syz.5.1162" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f159958ebe9 code=0x7ffc0000 [ 816.922593][ T27] audit: type=1326 audit(1756523554.975:91): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10021 comm="syz.5.1162" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f159958ebe9 code=0x7ffc0000 [ 816.922644][ T27] audit: type=1326 audit(1756523554.995:92): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10021 comm="syz.5.1162" exe="/root/syz-executor" sig=0 arch=c000003e syscall=83 compat=0 ip=0x7f159958ebe9 code=0x7ffc0000 [ 816.922679][ T27] audit: type=1326 audit(1756523554.995:93): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10021 comm="syz.5.1162" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f159958ebe9 code=0x7ffc0000 [ 816.926350][ T27] audit: type=1326 audit(1756523555.005:94): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10021 comm="syz.5.1162" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f159958ebe9 code=0x7ffc0000 [ 817.296931][T10037] loop3: detected capacity change from 0 to 128 [ 817.621597][T10037] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none. [ 817.685090][T10037] ext4 filesystem being mounted at /245/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 818.824291][T10049] tipc: Started in network mode [ 818.829244][T10049] tipc: Node identity e63ab525320a, cluster identity 4711 [ 819.476490][T10049] tipc: Enabled bearer , priority 0 [ 819.623503][T10055] device syzkaller0 entered promiscuous mode [ 820.530176][ T26] tipc: Node number set to 3559961893 [ 821.293501][ T47] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 821.305976][ T47] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 821.339156][T10055] tipc: Resetting bearer [ 821.349407][ T4265] EXT4-fs (loop3): unmounting filesystem. [ 821.393186][ T47] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 821.503106][ T47] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 821.513486][ T47] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 821.526364][ T47] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 821.974440][T10044] tipc: Resetting bearer [ 822.413684][T10044] tipc: Disabling bearer [ 824.035647][ T47] Bluetooth: hci5: command 0x0409 tx timeout [ 825.073091][T10066] lo speed is unknown, defaulting to 1000 [ 826.738899][ T47] Bluetooth: hci5: command 0x041b tx timeout [ 827.370569][T10112] xt_TCPMSS: path-MTU clamping only supported in FORWARD, OUTPUT and POSTROUTING hooks [ 827.460661][T10109] loop3: detected capacity change from 0 to 2048 [ 827.912163][ T9113] netdevsim netdevsim7 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 828.765428][ T47] Bluetooth: hci5: command 0x040f tx timeout [ 828.982609][T10114] loop5: detected capacity change from 0 to 40427 [ 829.036124][T10114] F2FS-fs (loop5): Insane cp_payload (553648128 >= 504) [ 829.044422][T10114] F2FS-fs (loop5): Can't find valid F2FS filesystem in 1th superblock [ 829.089665][T10114] F2FS-fs (loop5): invalid crc value [ 829.136898][T10114] F2FS-fs (loop5): Found nat_bits in checkpoint [ 829.357895][T10127] loop1: detected capacity change from 0 to 1024 [ 829.379212][T10127] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 829.438555][T10128] xt_SECMARK: only valid in 'mangle' or 'security' table, not 'filter' [ 830.136640][T10114] F2FS-fs (loop5): Try to recover 1th superblock, ret: 0 [ 830.143850][T10114] F2FS-fs (loop5): Mounted with checkpoint version = 48b305e5 [ 830.863302][ T47] Bluetooth: hci5: command 0x0419 tx timeout [ 830.949299][T10127] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none. [ 831.085099][ T9113] netdevsim netdevsim7 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 832.506300][ T4266] EXT4-fs (loop1): unmounting filesystem. [ 832.696592][ T9113] netdevsim netdevsim7 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 835.952194][T10151] tipc: Enabled bearer , priority 0 [ 839.489270][ T9113] netdevsim netdevsim7 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 839.913347][T10066] chnl_net:caif_netlink_parms(): no params data found [ 840.166194][T10176] loop1: detected capacity change from 0 to 512 [ 840.173361][T10177] netlink: 48 bytes leftover after parsing attributes in process `syz.3.1190'. [ 840.184228][T10176] EXT4-fs: EXT4-fs: inode_readahead_blks must be 0 or a power of 2 smaller than 2^31 [ 840.391364][T10027] I/O error, dev loop1, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 841.839735][T10188] netlink: 34 bytes leftover after parsing attributes in process `syz.3.1190'. [ 843.299375][T10066] bridge0: port 1(bridge_slave_0) entered blocking state [ 843.331601][T10066] bridge0: port 1(bridge_slave_0) entered disabled state [ 843.426216][T10066] device bridge_slave_0 entered promiscuous mode [ 843.893612][T10066] bridge0: port 2(bridge_slave_1) entered blocking state [ 843.900785][T10066] bridge0: port 2(bridge_slave_1) entered disabled state [ 843.954665][T10066] device bridge_slave_1 entered promiscuous mode [ 844.410073][T10203] xt_SECMARK: only valid in 'mangle' or 'security' table, not 'filter' [ 845.075352][T10066] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 845.196445][T10066] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 848.245075][T10224] netlink: 'syz.3.1199': attribute type 6 has an invalid length. [ 849.182035][T10066] team0: Port device team_slave_0 added [ 849.464407][T10246] loop3: detected capacity change from 0 to 256 [ 849.492491][T10246] exFAT-fs (loop3): failed to load upcase table (idx : 0x0000fd4f, chksum : 0x3963664b, utbl_chksum : 0xe619d30d) [ 850.404092][T10066] team0: Port device team_slave_1 added [ 851.733587][T10066] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 851.740683][T10066] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 854.163521][T10267] slcan: can't register candev [ 854.168653][T10267] Falling back ldisc for ttyS3. [ 854.781403][T10066] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 855.907972][T10287] loop3: detected capacity change from 0 to 40427 [ 856.291315][T10287] F2FS-fs (loop3): invalid crc value [ 856.342056][T10287] F2FS-fs (loop3): Found nat_bits in checkpoint [ 856.383954][T10287] F2FS-fs (loop3): Start checkpoint disabled! [ 856.408060][T10287] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e6 [ 856.436167][T10066] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 856.446857][T10066] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 856.721871][T10293] xt_SECMARK: only valid in 'mangle' or 'security' table, not 'filter' [ 857.753346][T10066] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 857.843339][T10301] loop5: detected capacity change from 0 to 1024 [ 857.863822][T10301] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 858.000522][T10301] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: none. [ 859.374377][T10066] device hsr_slave_0 entered promiscuous mode [ 859.567176][T10066] device hsr_slave_1 entered promiscuous mode [ 859.568507][ T7490] EXT4-fs (loop5): unmounting filesystem. [ 859.637091][T10066] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 859.652566][T10066] Cannot create hsr debugfs directory [ 860.145851][T10316] loop1: detected capacity change from 0 to 256 [ 860.156288][T10316] exfat: Deprecated parameter 'utf8' [ 860.161805][T10316] exfat: Deprecated parameter 'namecase' [ 860.167703][T10316] exfat: Deprecated parameter 'utf8' [ 860.883668][T10316] exFAT-fs (loop1): failed to load upcase table (idx : 0x00010000, chksum : 0xb89b369d, utbl_chksum : 0xe619d30d) [ 860.935604][T10313] syz.1.1218: attempt to access beyond end of device [ 860.935604][T10313] loop1: rw=524288, sector=34359738488, nr_sectors = 8 limit=256 [ 860.952085][T10313] syz.1.1218: attempt to access beyond end of device [ 860.952085][T10313] loop1: rw=0, sector=34359738488, nr_sectors = 8 limit=256 [ 860.966509][ T27] audit: type=1800 audit(1756523599.045:95): pid=10313 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.1218" name="file1" dev="loop1" ino=1048710 res=0 errno=0 [ 860.999996][T10313] exFAT-fs (loop1): error, tried to truncate zeroed cluster. [ 861.031237][T10313] exFAT-fs (loop1): hint_cluster is invalid (1) [ 861.047689][T10313] exFAT-fs (loop1): error, invalid access to exfat cache (entry 0x00000000) [ 861.057538][T10313] exFAT-fs (loop1): error, failed to bmap (inode : ffff888071fac260 iblock : 9, err : -5) [ 861.081025][T10313] exFAT-fs (loop1): error, tried to truncate zeroed cluster. [ 861.088624][T10313] exFAT-fs (loop1): error, tried to truncate zeroed cluster. [ 861.176666][ T9097] kworker/u4:22: attempt to access beyond end of device [ 861.176666][ T9097] loop3: rw=2049, sector=40960, nr_sectors = 8 limit=40427 [ 861.358061][ T5622] kworker/u4:17: attempt to access beyond end of device [ 861.358061][ T5622] loop1: rw=1, sector=34359738494, nr_sectors = 1 limit=256 [ 862.331178][ T5622] Buffer I/O error on dev loop1, logical block 34359738494, lost async page write [ 862.332315][T10328] slcan: can't register candev [ 862.342105][ T5622] kworker/u4:17: attempt to access beyond end of device [ 862.342105][ T5622] loop1: rw=1, sector=34359738495, nr_sectors = 1 limit=256 [ 862.346007][T10328] Falling back ldisc for ttyS3. [ 862.484231][ T5622] Buffer I/O error on dev loop1, logical block 34359738495, lost async page write [ 862.911608][T10341] xt_SECMARK: only valid in 'mangle' or 'security' table, not 'filter' [ 862.928462][T10341] ubi31: attaching mtd0 [ 862.954078][T10341] ubi31: scanning is finished [ 863.669669][T10341] ubi31 error: ubi_attach_mtd_dev: cannot spawn "ubi_bgt31d", error -4 [ 867.395316][T10367] loop3: detected capacity change from 0 to 1024 [ 867.467360][T10367] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 869.083339][T10367] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none. [ 870.471304][T10354] netlink: 'syz.2.1227': attribute type 16 has an invalid length. [ 870.479289][T10354] netlink: 'syz.2.1227': attribute type 17 has an invalid length. [ 870.494902][T10354] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 870.502311][T10354] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 870.705956][ T4265] EXT4-fs (loop3): unmounting filesystem. [ 870.917404][ T9113] device hsr_slave_0 left promiscuous mode [ 871.006597][ T9113] device hsr_slave_1 left promiscuous mode [ 872.005833][ T9113] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 872.067404][ T9113] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 872.166045][ T9113] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 872.189736][ T9113] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 872.284324][ T9113] device bridge_slave_1 left promiscuous mode [ 872.371767][ T9113] bridge0: port 2(bridge_slave_1) entered disabled state [ 872.381672][ T9113] device bridge_slave_0 left promiscuous mode [ 872.388644][ T9113] bridge0: port 1(bridge_slave_0) entered disabled state [ 872.486729][T10387] block device autoloading is deprecated and will be removed. [ 872.523157][ T9988] usb 4-1: new high-speed USB device number 3 using dummy_hcd [ 872.532689][ T9113] device veth1_macvtap left promiscuous mode [ 872.545779][ T9113] device veth0_macvtap left promiscuous mode [ 872.562409][ T9113] device veth1_vlan left promiscuous mode [ 872.582660][ T9113] device veth0_vlan left promiscuous mode [ 872.784754][ T9988] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 872.860565][T10403] xt_SECMARK: only valid in 'mangle' or 'security' table, not 'filter' [ 872.872102][T10403] ubi31: attaching mtd0 [ 872.881714][T10403] ubi31: scanning is finished [ 873.483157][ T9988] usb 4-1: New USB device found, idVendor=046d, idProduct=c71f, bcdDevice= 0.00 [ 873.498852][ T9988] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 873.516462][T10403] ubi31 error: ubi_attach_mtd_dev: cannot spawn "ubi_bgt31d", error -4 [ 873.614560][ T9988] usb 4-1: config 0 descriptor?? [ 873.827098][ T9988] usbhid 4-1:0.0: can't add hid device: -22 [ 873.860526][ T9988] usbhid: probe of 4-1:0.0 failed with error -22 [ 874.535100][ T4720] usb 4-1: USB disconnect, device number 3 [ 875.481311][ T1274] ieee802154 phy0 wpan0: encryption failed: -22 [ 875.487747][ T1274] ieee802154 phy1 wpan1: encryption failed: -22 [ 879.310129][T10450] loop1: detected capacity change from 0 to 64 [ 880.705103][T10462] ptrace attach of "./syz-executor exec"[4273] was attempted by ""[10462] [ 881.401439][ T47] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 881.432215][ T47] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 881.548708][ T47] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 881.559399][ T4267] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 881.569653][ T4267] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 881.577173][ T4267] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 882.566805][ T9113] team0 (unregistering): Port device team_slave_1 removed [ 882.600160][T10476] loop1: detected capacity change from 0 to 64 [ 882.668977][ T9113] team0 (unregistering): Port device team_slave_0 removed [ 882.761620][ T9113] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 882.876094][ T9113] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 883.632955][ T4280] Bluetooth: hci2: command 0x0409 tx timeout [ 884.053996][T10482] loop1: detected capacity change from 0 to 1024 [ 884.628603][ T4476] hfsplus: b-tree write err: -5, ino 4 [ 884.978491][ T9113] bond0 (unregistering): Released all slaves [ 885.153398][T10489] xt_CT: You must specify a L4 protocol and not use inversions on it [ 885.782868][ T4280] Bluetooth: hci2: command 0x041b tx timeout [ 885.857162][T10466] lo speed is unknown, defaulting to 1000 [ 886.115322][T10496] loop5: detected capacity change from 0 to 64 [ 887.873173][ T4280] Bluetooth: hci2: command 0x040f tx timeout [ 888.025907][T10516] loop5: detected capacity change from 0 to 64 [ 889.691457][T10466] chnl_net:caif_netlink_parms(): no params data found [ 889.953073][ T4280] Bluetooth: hci2: command 0x0419 tx timeout [ 890.105245][T10549] atomic_op ffff88807cb49198 conn xmit_atomic 0000000000000000 [ 890.977728][T10466] bridge0: port 1(bridge_slave_0) entered blocking state [ 891.063147][T10466] bridge0: port 1(bridge_slave_0) entered disabled state [ 891.086746][T10466] device bridge_slave_0 entered promiscuous mode [ 891.100401][T10466] bridge0: port 2(bridge_slave_1) entered blocking state [ 891.119278][T10466] bridge0: port 2(bridge_slave_1) entered disabled state [ 891.130980][T10466] device bridge_slave_1 entered promiscuous mode [ 892.028713][T10563] UBIFS error (pid: 10563): cannot open "./file0", error -22 [ 892.249352][T10466] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 894.123022][T10572] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 894.870804][T10466] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 895.899431][T10466] team0: Port device team_slave_0 added [ 895.965157][T10466] team0: Port device team_slave_1 added [ 897.018807][T10599] vxfs: WRONG superblock magic 00000000 at 1 [ 897.019429][T10599] vxfs: WRONG superblock magic 00000000 at 8 [ 897.019447][T10599] vxfs: can't find superblock. [ 897.516829][T10466] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 897.529149][T10466] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 897.643177][T10466] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 897.679193][T10466] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 897.696490][T10466] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 897.725380][T10466] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 897.818877][T10466] device hsr_slave_0 entered promiscuous mode [ 897.871014][T10466] device hsr_slave_1 entered promiscuous mode [ 1008.236878][ C0] rcu: INFO: rcu_preempt detected stalls on CPUs/tasks: [ 1008.243904][ C0] rcu: 1-...!: (1 GPs behind) idle=c6bc/1/0x4000000000000000 softirq=40137/40138 fqs=0 [ 1008.255560][ C0] rcu: Tasks blocked on level-0 rcu_node (CPUs 0-1): P9110/2:b..l [ 1008.263506][ C0] (detected by 0, t=10502 jiffies, g=45109, q=58 ncpus=2) [ 1008.270815][ C0] Sending NMI from CPU 0 to CPUs 1: [ 1008.276054][ C1] NMI backtrace for cpu 1 [ 1008.276155][ C1] CPU: 1 PID: 10653 Comm: syz.3.1286 Not tainted syzkaller #0 [ 1008.276172][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 1008.276186][ C1] RIP: 0010:__lock_acquire+0xe92/0x7c50 [ 1008.276215][ C1] Code: 00 74 12 4c 89 f7 e8 7d e7 6d 00 49 b8 00 00 00 00 00 fc ff df 4d 89 2e 48 8b 44 24 70 42 0f b6 04 00 84 c0 0f 85 dd 5a 00 00 <4d> 8d b7 e0 0a 00 00 48 8b 44 24 40 8b 18 48 85 db 4c 8b 7c 24 18 [ 1008.276233][ C1] RSP: 0018:ffffc900001e08e0 EFLAGS: 00000046 [ 1008.276247][ C1] RAX: 0000000000000000 RBX: ffff888019e7e410 RCX: ffffffff816304c6 [ 1008.276259][ C1] RDX: 0000000000000000 RSI: 0000000000000008 RDI: ffffffff90ae1240 [ 1008.276270][ C1] RBP: ffffc900001e0b30 R08: dffffc0000000000 R09: fffffbfff215c249 [ 1008.276282][ C1] R10: fffffbfff215c249 R11: 1ffffffff215c248 R12: ffff888019e7d940 [ 1008.276295][ C1] R13: 704185f5a13f4fd9 R14: ffff888019e7e448 R15: ffff888019e7d940 [ 1008.276307][ C1] FS: 00007ffa11fd56c0(0000) GS:ffff8880b8f00000(0000) knlGS:0000000000000000 [ 1008.276322][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 1008.276333][ C1] CR2: 00007ffa1176ed58 CR3: 0000000062b77000 CR4: 00000000003506e0 [ 1008.276347][ C1] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 1008.276362][ C1] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 1008.276373][ C1] Call Trace: [ 1008.276380][ C1] [ 1008.276398][ C1] ? verify_lock_unused+0x140/0x140 [ 1008.276422][ C1] ? verify_lock_unused+0x140/0x140 [ 1008.276442][ C1] ? mark_lock+0x94/0x320 [ 1008.276465][ C1] ? rcu_is_watching+0x11/0xa0 [ 1008.276495][ C1] lock_acquire+0x1b4/0x490 [ 1008.276516][ C1] ? advance_sched+0x6cc/0x970 [ 1008.276535][ C1] ? __lock_acquire+0x7c50/0x7c50 [ 1008.276556][ C1] ? do_raw_spin_lock+0x11d/0x280 [ 1008.276580][ C1] ? read_lock_is_recursive+0x10/0x10 [ 1008.276602][ C1] ? __rwlock_init+0x140/0x140 [ 1008.276624][ C1] ? _raw_spin_lock_irqsave+0xb0/0xf0 [ 1008.276649][ C1] ? do_raw_spin_unlock+0x11d/0x230 [ 1008.276673][ C1] ? advance_sched+0x6cc/0x970 [ 1008.276690][ C1] advance_sched+0x6e8/0x970 [ 1008.276705][ C1] ? advance_sched+0x6cc/0x970 [ 1008.276726][ C1] __hrtimer_run_queues+0x554/0xd60 [ 1008.276743][ C1] ? ktime_get_update_offsets_now+0x95/0x3e0 [ 1008.276762][ C1] ? ktime_get_update_offsets_now+0x95/0x3e0 [ 1008.276786][ C1] ? taprio_free_sched_cb+0x190/0x190 [ 1008.276806][ C1] ? hrtimer_interrupt+0x9c0/0x9c0 [ 1008.276826][ C1] hrtimer_interrupt+0x3c5/0x9c0 [ 1008.276853][ C1] __sysvec_apic_timer_interrupt+0x153/0x5a0 [ 1008.276879][ C1] sysvec_apic_timer_interrupt+0x9b/0xc0 [ 1008.276902][ C1] [ 1008.276906][ C1] [ 1008.276911][ C1] asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 1008.276928][ C1] RIP: 0010:__sanitizer_cov_trace_pc+0x32/0x60 [ 1008.276945][ C1] Code: 14 9f 81 7e 65 8b 15 15 9f 81 7e 81 e2 00 01 ff 00 74 11 81 fa 00 01 00 00 75 35 83 b9 1c 16 00 00 00 74 2c 8b 91 f8 15 00 00 <83> fa 02 75 21 48 8b 91 00 16 00 00 48 8b 32 48 8d 7e 01 8b 89 fc [ 1008.276959][ C1] RSP: 0018:ffffc90003e07660 EFLAGS: 00000246 [ 1008.276972][ C1] RAX: ffffffff881f537c RBX: ffff8880515ff800 RCX: ffff888019e7d940 [ 1008.276985][ C1] RDX: 0000000000000002 RSI: ffff8880515ff9b8 RDI: ffff8880515ff800 [ 1008.276996][ C1] RBP: ffffc90003e078d0 R08: ffffc90003e07870 R09: ffffc90003e07820 [ 1008.277009][ C1] R10: fffffbfff1c3ee26 R11: 1ffffffff1c3ee25 R12: dffffc0000000000 [ 1008.277021][ C1] R13: ffff8880515ff9b8 R14: ffffc90003e07820 R15: ffff8880515ff800 [ 1008.277037][ C1] ? __skb_try_recv_datagram+0x4c/0x4d0 [ 1008.277067][ C1] __skb_try_recv_datagram+0x4c/0x4d0 [ 1008.277094][ C1] ? skb_copy_datagram_iter+0x290/0x290 [ 1008.277118][ C1] __unix_dgram_recvmsg+0x2d1/0xd70 [ 1008.277148][ C1] ? unix_unhash+0x10/0x10 [ 1008.277172][ C1] ? __schedule+0x10f4/0x40b0 [ 1008.277190][ C1] ? mark_lock+0x94/0x320 [ 1008.277213][ C1] ? unix_dgram_recvmsg+0xa9/0xd0 [ 1008.277239][ C1] ? unix_dgram_sendmsg+0x16c0/0x16c0 [ 1008.277265][ C1] ____sys_recvmsg+0x292/0x580 [ 1008.277292][ C1] ? __sys_recvmsg_sock+0x40/0x40 [ 1008.277319][ C1] ? import_iovec+0x6f/0xa0 [ 1008.277345][ C1] ___sys_recvmsg+0x1b2/0x510 [ 1008.277373][ C1] ? __sys_recvmsg+0x270/0x270 [ 1008.277402][ C1] ? __lock_acquire+0x7c50/0x7c50 [ 1008.277424][ C1] ? lock_acquire+0x248/0x490 [ 1008.277446][ C1] ? __might_fault+0xc2/0x120 [ 1008.277470][ C1] ? __might_fault+0xa6/0x120 [ 1008.277496][ C1] do_recvmmsg+0x359/0x7d0 [ 1008.277519][ C1] ? __sys_recvmmsg+0x280/0x280 [ 1008.277540][ C1] ? do_futex+0x310/0x320 [ 1008.277568][ C1] ? __lock_acquire+0x7c50/0x7c50 [ 1008.277588][ C1] ? rcu_read_lock_sched_held+0x86/0xf0 [ 1008.277609][ C1] ? __se_sys_futex+0x14a/0x440 [ 1008.277636][ C1] __x64_sys_recvmmsg+0x18d/0x240 [ 1008.277658][ C1] ? do_recvmmsg+0x7d0/0x7d0 [ 1008.277680][ C1] ? lockdep_hardirqs_on+0x94/0x140 [ 1008.277703][ C1] do_syscall_64+0x4c/0xa0 [ 1008.277719][ C1] ? clear_bhb_loop+0x60/0xb0 [ 1008.277734][ C1] ? clear_bhb_loop+0x60/0xb0 [ 1008.277751][ C1] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1008.277776][ C1] RIP: 0033:0x7ffa13d8ebe9 [ 1008.277794][ C1] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1008.277808][ C1] RSP: 002b:00007ffa11fd5038 EFLAGS: 00000246 ORIG_RAX: 000000000000012b [ 1008.277823][ C1] RAX: ffffffffffffffda RBX: 00007ffa13fc6090 RCX: 00007ffa13d8ebe9 [ 1008.277835][ C1] RDX: 0000000000010106 RSI: 00002000000000c0 RDI: 0000000000000003 [ 1008.277845][ C1] RBP: 00007ffa13e11e19 R08: 0000000000000000 R09: 0000000000000000 [ 1008.277855][ C1] R10: 0000000000000002 R11: 0000000000000246 R12: 0000000000000000 [ 1008.277864][ C1] R13: 00007ffa13fc6128 R14: 00007ffa13fc6090 R15: 00007ffd48f61658 [ 1008.277883][ C1] [ 1008.278048][ C0] task:kworker/u4:28 state:R running task stack:22320 pid:9110 ppid:2 flags:0x00004000 [ 1008.858215][ C0] Workqueue: phy8 ieee80211_iface_work [ 1008.863716][ C0] Call Trace: [ 1008.867022][ C0] [ 1008.869983][ C0] __schedule+0x10ec/0x40b0 [ 1008.874537][ C0] ? release_firmware_map_entry+0x18a/0x18a [ 1008.880474][ C0] ? lock_chain_count+0x20/0x20 [ 1008.885373][ C0] ? verify_lock_unused+0x140/0x140 [ 1008.890606][ C0] ? preempt_schedule_irq+0xa6/0x150 [ 1008.895927][ C0] preempt_schedule_irq+0xb1/0x150 [ 1008.901071][ C0] ? preempt_schedule_notrace+0x110/0x110 [ 1008.906829][ C0] ? rcu_is_watching+0x11/0xa0 [ 1008.911631][ C0] ? rcu_irq_exit_check_preempt+0xdb/0x210 [ 1008.917484][ C0] irqentry_exit+0x63/0x70 [ 1008.921936][ C0] asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 1008.927950][ C0] RIP: 0010:ieee80211_vif_get_shift+0x13b/0x290 [ 1008.934237][ C0] Code: e8 8a 9a e2 f7 4d 85 f6 74 50 e8 80 9a e2 f7 49 83 c6 08 4c 89 f0 48 c1 e8 03 42 0f b6 04 38 84 c0 0f 85 2f 01 00 00 41 8b 2e 07 00 00 00 89 ee e8 b9 9d e2 f7 45 31 f6 83 fd 07 41 0f 94 c6 [ 1008.953893][ C0] RSP: 0018:ffffc90004dcf810 EFLAGS: 00000246 [ 1008.960006][ C0] RAX: 0000000000000000 RBX: ffffffff899e349a RCX: ffff8880629fd940 [ 1008.968003][ C0] RDX: 0000000000000000 RSI: 0000000000000001 RDI: 0000000000000000 [ 1008.976001][ C0] RBP: 0000000000000000 R08: dffffc0000000000 R09: fffffbfff215c249 [ 1008.983997][ C0] R10: fffffbfff215c249 R11: 1ffffffff215c248 R12: dffffc0000000000 [ 1008.991991][ C0] R13: ffff88807dd96800 R14: ffff888027e98760 R15: dffffc0000000000 [ 1009.000000][ C0] ? ieee80211_vif_get_shift+0x1a/0x290 [ 1009.005598][ C0] ieee80211_sta_get_rates+0xf5/0x6b0 [ 1009.011081][ C0] ? sta_info_get+0x4b/0x2a0 [ 1009.015701][ C0] ? sta_info_get+0x4b/0x2a0 [ 1009.020316][ C0] ? sta_info_get+0x4b/0x2a0 [ 1009.024933][ C0] ? sta_info_get+0x289/0x2a0 [ 1009.029638][ C0] ieee80211_ibss_rx_queued_mgmt+0xff9/0x2b10 [ 1009.035758][ C0] ? ieee80211_ibss_rx_queued_mgmt+0xdad/0x2b10 [ 1009.042027][ C0] ? ieee80211_ibss_rx_no_sta+0x770/0x770 [ 1009.047772][ C0] ? mark_lock+0x94/0x320 [ 1009.052151][ C0] ? mark_lock+0x94/0x320 [ 1009.056511][ C0] ? lockdep_hardirqs_on_prepare+0x3fc/0x760 [ 1009.062527][ C0] ? lock_chain_count+0x20/0x20 [ 1009.067423][ C0] ? __rwlock_init+0x140/0x140 [ 1009.072222][ C0] ? lockdep_hardirqs_on+0x94/0x140 [ 1009.077464][ C0] ? skb_dequeue+0x10a/0x140 [ 1009.082090][ C0] ieee80211_iface_work+0x726/0xc80 [ 1009.087423][ C0] ? _raw_spin_unlock_irq+0x1f/0x40 [ 1009.092671][ C0] ? process_one_work+0x7a1/0x1160 [ 1009.097823][ C0] process_one_work+0x898/0x1160 [ 1009.102812][ C0] ? worker_detach_from_pool+0x240/0x240 [ 1009.108486][ C0] ? _raw_spin_lock_irq+0xab/0xe0 [ 1009.113553][ C0] ? _raw_spin_lock_irqsave+0xf0/0xf0 [ 1009.118960][ C0] ? kthread_data+0x4b/0xc0 [ 1009.123503][ C0] worker_thread+0xaa2/0x1250 [ 1009.128236][ C0] kthread+0x29d/0x330 [ 1009.132343][ C0] ? worker_clr_flags+0x1a0/0x1a0 [ 1009.137418][ C0] ? kthread_blkcg+0xd0/0xd0 [ 1009.142044][ C0] ret_from_fork+0x1f/0x30 [ 1009.146505][ C0] [ 1009.149548][ C0] rcu: rcu_preempt kthread starved for 10502 jiffies! g45109 f0x0 RCU_GP_WAIT_FQS(5) ->state=0x0 ->cpu=0 [ 1009.160768][ C0] rcu: Unless rcu_preempt kthread gets sufficient CPU time, OOM is now expected behavior. [ 1009.170759][ C0] rcu: RCU grace-period kthread stack dump: [ 1009.176659][ C0] task:rcu_preempt state:R running task stack:27840 pid:16 ppid:2 flags:0x00004000 [ 1009.187470][ C0] Call Trace: [ 1009.190773][ C0] [ 1009.193729][ C0] __schedule+0x10ec/0x40b0 [ 1009.198299][ C0] ? release_firmware_map_entry+0x18a/0x18a [ 1009.204232][ C0] schedule+0xb9/0x180 [ 1009.208339][ C0] schedule_timeout+0x15c/0x280 [ 1009.213281][ C0] ? console_conditional_schedule+0x40/0x40 [ 1009.219203][ C0] ? lockdep_hardirqs_on_prepare+0x3fc/0x760 [ 1009.225218][ C0] ? update_process_times+0x1b0/0x1b0 [ 1009.230641][ C0] ? prepare_to_swait_event+0x335/0x350 [ 1009.236225][ C0] rcu_gp_fqs_loop+0x2f2/0x1310 [ 1009.241113][ C0] ? rcu_gp_kthread+0x380/0x380 [ 1009.245986][ C0] ? lockdep_hardirqs_on_prepare+0x3fc/0x760 [ 1009.252002][ C0] ? rcu_gp_init+0x14b0/0x14b0 [ 1009.256805][ C0] ? rcu_gp_cleanup+0xb4c/0xca0 [ 1009.261706][ C0] ? _raw_spin_unlock_irq+0x1f/0x40 [ 1009.266966][ C0] ? lockdep_hardirqs_on+0x94/0x140 [ 1009.272203][ C0] rcu_gp_kthread+0x95/0x380 [ 1009.276826][ C0] ? rcu_report_qs_rsp+0x1a0/0x1a0 [ 1009.281966][ C0] ? _raw_spin_unlock_irqrestore+0xaa/0x100 [ 1009.287899][ C0] ? __kthread_parkme+0x162/0x1c0 [ 1009.292961][ C0] kthread+0x29d/0x330 [ 1009.297067][ C0] ? rcu_report_qs_rsp+0x1a0/0x1a0 [ 1009.302203][ C0] ? kthread_blkcg+0xd0/0xd0 [ 1009.306842][ C0] ret_from_fork+0x1f/0x30 [ 1009.311307][ C0] [ 1009.314356][ C0] rcu: Stack dump where RCU GP kthread last ran: [ 1009.320711][ C0] CPU: 0 PID: 10647 Comm: syz.2.1285 Not tainted syzkaller #0 [ 1009.328210][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 1009.338316][ C0] RIP: 0010:smp_call_function_many_cond+0xe7b/0x1270 [ 1009.345029][ C0] Code: 00 00 00 41 8b 1f 89 de 83 e6 01 31 ff e8 5d d9 0a 00 83 e3 01 48 bb 00 00 00 00 00 fc ff df 75 07 e8 e9 d5 0a 00 eb 37 f3 90 <41> 0f b6 04 1c 84 c0 75 10 41 f7 07 01 00 00 00 74 1e e8 ce d5 0a [ 1009.364669][ C0] RSP: 0018:ffffc90003cc7960 EFLAGS: 00000293 [ 1009.370770][ C0] RAX: ffffffff8175fa52 RBX: dffffc0000000000 RCX: ffff88801afbd940 [ 1009.378768][ C0] RDX: 0000000000000000 RSI: 0000000000000001 RDI: 0000000000000000 [ 1009.386790][ C0] RBP: ffffc90003cc7ac0 R08: dffffc0000000000 R09: fffffbfff215c249 [ 1009.394802][ C0] R10: fffffbfff215c249 R11: 1ffffffff215c248 R12: 1ffff110171e81c1 [ 1009.402804][ C0] R13: ffff8880b8e3bb40 R14: 0000000000000001 R15: ffff8880b8f40e08 [ 1009.410801][ C0] FS: 0000555580b9d500(0000) GS:ffff8880b8e00000(0000) knlGS:0000000000000000 [ 1009.419756][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 1009.426360][ C0] CR2: 000000110c3d9fea CR3: 000000005e631000 CR4: 00000000003506f0 [ 1009.434373][ C0] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 1009.442386][ C0] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 1009.450393][ C0] Call Trace: [ 1009.453704][ C0] [ 1009.456668][ C0] ? text_poke_sync+0x20/0x20 [ 1009.461399][ C0] ? smp_call_function_many+0x30/0x30 [ 1009.466808][ C0] ? rt_mutex_slowlock+0x2ce/0x710 [ 1009.471966][ C0] ? text_poke+0x90/0x90 [ 1009.476243][ C0] ? trace_raw_output_contention_end+0xd0/0xd0 [ 1009.482426][ C0] ? text_poke_loc_init+0x349/0x570 [ 1009.487662][ C0] ? text_poke_sync+0x20/0x20 [ 1009.492372][ C0] on_each_cpu_cond_mask+0x3b/0x80 [ 1009.497597][ C0] ? rt_mutex_slowlock+0x2ce/0x710 [ 1009.502738][ C0] text_poke_bp_batch+0x2b0/0x7d0 [ 1009.507807][ C0] ? arch_jump_label_transform_apply+0xe/0x20 [ 1009.513900][ C0] ? text_poke_loc_init+0x570/0x570 [ 1009.519138][ C0] ? arch_jump_label_transform_queue+0x76/0xd0 [ 1009.525318][ C0] ? __jump_label_update+0x36c/0x390 [ 1009.530628][ C0] ? __bpf_trace_contention_begin+0x10/0x10 [ 1009.536547][ C0] text_poke_finish+0x16/0x30 [ 1009.541272][ C0] arch_jump_label_transform_apply+0x13/0x20 [ 1009.547276][ C0] static_key_disable_cpuslocked+0xc1/0x1a0 [ 1009.553207][ C0] static_key_disable+0x16/0x20 [ 1009.558097][ C0] tracepoint_probe_unregister+0x6a9/0x930 [ 1009.563950][ C0] bpf_raw_tp_link_release+0x5f/0x80 [ 1009.569269][ C0] bpf_link_put+0x22a/0x2c0 [ 1009.573802][ C0] ? idr_preload_end+0x200/0x200 [ 1009.578766][ C0] bpf_link_release+0x37/0x40 [ 1009.583470][ C0] __fput+0x22c/0x920 [ 1009.587498][ C0] task_work_run+0x1ca/0x250 [ 1009.592295][ C0] ? task_work_cancel+0x230/0x230 [ 1009.597346][ C0] ? __close_range+0x1c5/0x730 [ 1009.602147][ C0] ? exit_to_user_mode_loop+0x3b/0x110 [ 1009.607639][ C0] exit_to_user_mode_loop+0xe6/0x110 [ 1009.612972][ C0] exit_to_user_mode_prepare+0xb1/0x140 [ 1009.618547][ C0] syscall_exit_to_user_mode+0x16/0x40 [ 1009.624042][ C0] do_syscall_64+0x58/0xa0 [ 1009.628484][ C0] ? clear_bhb_loop+0x60/0xb0 [ 1009.633184][ C0] ? clear_bhb_loop+0x60/0xb0 [ 1009.637915][ C0] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1009.643851][ C0] RIP: 0033:0x7f3a2778ebe9 [ 1009.648292][ C0] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1009.668010][ C0] RSP: 002b:00007fffee6fc488 EFLAGS: 00000246 ORIG_RAX: 00000000000001b4 [ 1009.676450][ C0] RAX: 0000000000000000 RBX: 00007f3a279c7da0 RCX: 00007f3a2778ebe9 [ 1009.684447][ C0] RDX: 0000000000000000 RSI: 000000000000001e RDI: 0000000000000003 [ 1009.692437][ C0] RBP: 00007f3a279c7da0 R08: 00000000000004ac R09: 00000011ee6fc77f [ 1009.700449][ C0] R10: 00007f3a279c7cb0 R11: 0000000000000246 R12: 00000000000dc533 [ 1009.708470][ C0] R13: 00007f3a279c6090 R14: ffffffffffffffff R15: 00007fffee6fc5a0 [ 1009.716491][ C0]