last executing test programs: 28m51.213555443s ago: executing program 32 (id=263): socket$inet6_sctp(0xa, 0x1, 0x84) r0 = syz_open_dev$evdev(&(0x7f0000001500), 0x0, 0x0) ioctl$EVIOCGBITSW(r0, 0x80404525, 0x0) ioctl$SCSI_IOCTL_SEND_COMMAND(0xffffffffffffffff, 0x1, 0x0) unshare(0x62040200) socket(0x1, 0x1, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = userfaultfd(0x801) ioctl$UFFDIO_API(r3, 0xc018aa3f, &(0x7f0000000040)) ioctl$UFFDIO_UNREGISTER(r3, 0x8010aa01, 0x0) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r4 = syz_io_uring_setup(0xbdc, &(0x7f0000000640)={0x0, 0xec25, 0x400, 0x1, 0x40000333}, &(0x7f00000006c0)=0x0, &(0x7f0000000240)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r5, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r5, r6, &(0x7f0000000200)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x4, 0x0, 0x0}) io_uring_enter(r4, 0x1a91, 0x9482, 0x2, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0600000004000000ff0f"], 0x48) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r7 = getpid() sched_setscheduler(r7, 0x2, &(0x7f0000000040)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r8, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r9, &(0x7f00000bd000), 0x318, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xf, 0x4008032, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x15) 17m51.45664579s ago: executing program 33 (id=1549): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000200)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) fsetxattr$security_capability(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x1) write$USERIO_CMD_SEND_INTERRUPT(0xffffffffffffffff, 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) process_mrelease(0xffffffffffffffff, 0x0) r2 = openat$sw_sync(0xffffffffffffff9c, 0x0, 0x0, 0x0) r3 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$DEVLINK_CMD_PORT_GET(r4, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)={0x3c, r3, 0x1, 0x0, 0x0, {0x54}, [{{@nsim={{0xe, 0x2}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8}}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x8001}, 0x0) ioctl$SW_SYNC_IOC_CREATE_FENCE(r2, 0xc0285700, &(0x7f0000000100)={0x1b, "5660359c3245d1c42317afad7d48ed51000000000000000100", 0xffffffffffffffff}) r6 = openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000040), 0x141100, 0x0) ioctl$SW_SYNC_IOC_CREATE_FENCE(r6, 0xc0285700, &(0x7f0000000140)={0x1000, "340b7832ceefd131b8e6498c25f58fad9987ffe93bbabd18cf501922de974a27", 0xffffffffffffffff}) ioctl$SYNC_IOC_MERGE(r5, 0xc0303e03, &(0x7f00000000c0)={"3c24139ed44aec57f2e2ad238a7b448ed886923c31d4b8affbf514fd00", r7, 0xffffffffffffffff}) ppoll(&(0x7f0000000000)=[{r8}], 0x1, 0x0, 0x0, 0x0) close_range(r2, r8, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000100), 0x16200, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'syzkaller0\x00', 0xca58c30f81b6079f}) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) creat(&(0x7f00000000c0)='./file0\x00', 0x2) 17m51.24406355s ago: executing program 34 (id=1550): openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x64040, 0xd0) r0 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000740), 0x2, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000300)=@abs={0x0, 0x0, 0x4e20}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(r2, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb49, 0x9, 0x8, 0x0, 0x200}, 0x0) r3 = socket(0x2, 0x5, 0x0) ioctl$sock_SIOCETHTOOL(r3, 0x8946, &(0x7f0000000280)={'syz_tun\x00', 0x0}) r4 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000040), 0x60240) ioctl$SNDRV_SEQ_IOCTL_SET_PORT_INFO(r4, 0xc0a85320, &(0x7f0000000180)={{0x80}, 'port0\x00', 0x7e, 0xa1c07, 0x6, 0x0, 0x100000}) epoll_create(0x101) r5 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@flushpolicy={0x40, 0x12, 0x105, 0x0, 0x25dfdbfe, "", [@proto={0x5, 0x19, 0xff}, @address_filter={0x28, 0x1a, {@in=@broadcast, @in=@private=0xa010102, 0xa, 0x6, 0x9}}]}, 0x40}, 0x1, 0x0, 0x0, 0x4000}, 0x20040810) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, 0x0) syz_open_dev$usbfs(0x0, 0x75, 0x40082) openat$fuse(0xffffffffffffff9c, 0x0, 0x2, 0x0) ioctl$IOCTL_VMCI_INIT_CONTEXT(r0, 0x7a0, &(0x7f0000000000)={@local}) openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r6 = syz_open_procfs(0x0, &(0x7f0000000200)='net/ipv6_route\x00') read$FUSE(r6, &(0x7f0000000240)={0x2020}, 0x2020) pread64(r6, &(0x7f000001a240)=""/102400, 0x19000, 0x100008) setsockopt$inet_sctp6_SCTP_PARTIAL_DELIVERY_POINT(0xffffffffffffffff, 0x84, 0x13, 0x0, 0x0) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) 11m54.556776509s ago: executing program 35 (id=2139): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r2 = socket$xdp(0x2c, 0x3, 0x0) r3 = syz_io_uring_setup(0x835, &(0x7f00000000c0)={0x0, 0x679a, 0x400, 0x2000006, 0x3ce}, &(0x7f0000000040)=0x0, &(0x7f0000000140)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r4, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r4, r5, &(0x7f00000002c0)=@IORING_OP_SEND={0x1a, 0x0, 0x0, r2, 0x0, 0x0, 0x0, 0x2400c0c7, 0x1}) io_uring_enter(r3, 0x3516, 0x0, 0x0, 0x0, 0x0) sendmsg(r1, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) sched_setattr(0x0, 0x0, 0x0) syz_open_dev$dri(&(0x7f0000000240), 0x6, 0x181100) r6 = socket$vsock_stream(0x28, 0x1, 0x0) sendmsg(r6, &(0x7f0000001500)={0x0, 0x0, &(0x7f00000001c0), 0x0, &(0x7f0000000400)}, 0x4000042) r7 = syz_open_dev$sndctrl(&(0x7f0000000000), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(r7, 0x40045532, &(0x7f00000000c0)=0x2) r8 = syz_open_dev$sndpcmp(&(0x7f0000000200), 0x0, 0xa2c65) ioctl$SNDCTL_DSP_GETOSPACE(0xffffffffffffffff, 0x8010500c, &(0x7f0000000040)) ioctl$SNDRV_PCM_IOCTL_HW_FREE(r8, 0x4112, 0x0) ioctl$SNDCTL_DSP_POST(0xffffffffffffffff, 0x5008, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) unshare(0x2c020400) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_OPENAT={0x12, 0x10, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000040)='./file0/file0\x00', 0x60, 0x185100}) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) 11m54.389876855s ago: executing program 36 (id=2143): fsopen(&(0x7f0000000100)='squashfs\x00', 0x1) r0 = socket$inet_mptcp(0x2, 0x1, 0x106) sendmsg$TIPC_NL_KEY_SET(0xffffffffffffffff, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) sched_setscheduler(0x0, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000001700)=0x4) ptrace$ARCH_SET_CPUID(0x1e, r1, 0x1, 0x1012) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e24, @multicast2}, 0x10) connect$inet(r0, &(0x7f00000009c0)={0x2, 0x4e24, @empty}, 0x10) writev(r0, &(0x7f0000000200)=[{&(0x7f00000000c0)='X', 0x8030000}], 0x1) 11m50.095172023s ago: executing program 37 (id=2154): futex_waitv(0x0, 0x0, 0x0, &(0x7f0000001100)={0x77359400}, 0x1) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8c}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000380)=0x6) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) r0 = syz_open_dev$video4linux(&(0x7f0000000080), 0x0, 0x0) ioctl$VIDIOC_QUERYMENU(r0, 0xc008561c, &(0x7f0000000000)={0x980900, 0x3, @name="51da06bc7338e17dfebb1580e15b95473b09f0d1fb8aa1e9959ef9dc00"}) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) statx(0xffffffffffffff9c, 0x0, 0x100, 0x800, 0x0) openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000001c0), 0x2, 0x0) r2 = openat$nullb(0xffffffffffffff9c, &(0x7f0000001000), 0x8082, 0x0) sendfile(r2, r2, 0x0, 0x400000000003f) 10m29.277478293s ago: executing program 4 (id=2304): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setscheduler(r1, 0x1, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r3, 0x0, 0x0, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="60000000020601040000000000000000070000001400078008001140000000000800124000040c8f0500010006000000050005000200000005000400000000000900020073797a310000000011000300686173683a6970"], 0x60}}, 0x20004000) 10m27.454700336s ago: executing program 4 (id=2309): bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) bpf$PROG_LOAD(0x5, 0x0, 0x0) socketpair$tipc(0x1e, 0x2, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x38, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x2) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000300)=ANY=[@ANYBLOB='\x00'/20], 0x48) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x800) syz_open_dev$usbmon(&(0x7f0000000480), 0xba, 0x280802) r1 = syz_open_procfs(0x0, 0x0) read$qrtrtun(r1, 0x0, 0x0) r2 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r2, &(0x7f0000000040)={0x2, 0x4e21, @local}, 0x47) setsockopt$inet_tcp_TCP_CONGESTION(r2, 0x6, 0xd, &(0x7f0000000080)='lp\x00', 0x3) setsockopt$inet_tcp_int(r2, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r2, 0x6, 0x14, &(0x7f0000000140)=0x2, 0x4) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r2, 0x6, 0x16, &(0x7f0000000340)=[@sack_perm, @window={0x3, 0x6, 0x7}, @mss={0x2, 0x7}, @window={0x3, 0x0, 0x4}, @window={0x3, 0x8, 0x6}, @timestamp, @window={0x3, 0xfffe}, @sack_perm], 0x200000000000005e) sendmmsg$inet(r2, &(0x7f0000000dc0)=[{{0x0, 0x0, &(0x7f0000000440)=[{&(0x7f0000000540)="86f02c2b1fd65cc55f6cd20ca40e9f671d415246f7ac04b7b9612df49608cc4758bebf84b3b875f4e3469dafb8456ca0855c46b29e1bad9a6227cb162e7ab938871e5a6cd782a5a27f03eaf5803928a18d12133a4865deaca29f2da9", 0x5c}], 0x1}}], 0x1, 0x20040010) 10m26.763709712s ago: executing program 4 (id=2312): syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) bpf$OBJ_GET_PROG(0x7, 0x0, 0x0) syz_open_dev$sndmidi(0x0, 0x2, 0x141102) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sendmsg$key(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000240)=ANY=[@ANYBLOB="021600000a0000000000000000000000080012000007a18208"], 0x50}}, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000004c00)=""/102392, 0x18ff8) syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x114, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) getdents64(0xffffffffffffffff, 0xffffffffffffffff, 0x18) getsockopt$sock_buf(0xffffffffffffffff, 0x1, 0xccd4453e7e835cf8, &(0x7f0000000040)=""/41, &(0x7f0000000080)=0x29) r1 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000340), 0x2, 0x0) write$RDMA_USER_CM_CMD_QUERY(r1, &(0x7f0000000040)={0x13, 0x10, 0xfa00, {&(0x7f0000000780)}}, 0x18) 10m22.14370278s ago: executing program 4 (id=2318): openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) ioctl$sock_FIOGETOWN(0xffffffffffffffff, 0x8903, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f00000003c0)='/proc/sysvipc/shm\x00', 0x0, 0x0) pselect6(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) read$FUSE(r1, &(0x7f0000002480)={0x2020}, 0x2020) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x1804) write$P9_RGETLOCK(0xffffffffffffffff, 0x0, 0x0) socket$alg(0x26, 0x5, 0x0) r3 = accept$alg(0xffffffffffffffff, 0x0, 0x0) write$binfmt_script(r3, &(0x7f0000000600), 0xfec8) epoll_pwait(0xffffffffffffffff, 0x0, 0x0, 0x5, &(0x7f0000000040)={[0x9]}, 0x8) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) r4 = open_tree(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x89901) move_mount(r4, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) r5 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r5, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000300)='./file0\x00', 0x0) 10m20.938560544s ago: executing program 4 (id=2320): socket$netlink(0x10, 0x3, 0x9) r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000440)=ANY=[@ANYBLOB="1c00000014000100000080000000000007000080080002"], 0x1c}], 0x1}, 0x0) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000a80)=@bpf_tracing={0x1a, 0x22, &(0x7f0000000640)=@framed={{0x18, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0xe2bd}, [@exit, @snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x7}}, @btf_id={0x18, 0x3, 0x3, 0x0, 0x1}, @exit, @alu={0x7, 0x0, 0xb, 0x5, 0x8, 0xffffffffffffffff, 0xffffffffffffffff}, @btf_id={0x18, 0x3, 0x3, 0x0, 0x3}, @jmp={0x5, 0x1, 0x0, 0x9, 0x3, 0x30, 0xffffffffffffffff}, @tail_call, @func={0x85, 0x0, 0x1, 0x0, 0x3}, @ringbuf_query]}, &(0x7f0000000580)='syzkaller\x00', 0x48980000, 0x98, &(0x7f0000000780)=""/152, 0x40f00, 0x12, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000940)={0x6, 0x5}, 0x8, 0x10, &(0x7f0000000980)={0x0, 0x10, 0x48, 0xaa00}, 0x10, 0x28c21, 0xffffffffffffffff, 0x6, &(0x7f00000009c0)=[0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff], &(0x7f0000000a00)=[{0x3, 0x2, 0x9, 0xc}, {0x1, 0x5, 0x2, 0x9}, {0x2, 0x1, 0xc, 0xc}, {0x2, 0x5, 0xe, 0x8}, {0x3, 0x2, 0xb, 0x2}, {0x3, 0x3, 0xb, 0x1}], 0x10, 0xffffffff}, 0x94) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'batadv_slave_0\x00'}) r2 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) setsockopt$ax25_SO_BINDTODEVICE(0xffffffffffffffff, 0x101, 0x19, &(0x7f0000000000)=@bpq0, 0x10) ioctl$sock_netdev_private(r2, 0x8914, &(0x7f0000000000)) socket$nl_netfilter(0x10, 0x3, 0xc) r3 = openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, 0x0) r4 = socket$unix(0x1, 0x1, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$BPF_GET_MAP_INFO(0xf, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000440)=@newqdisc={0x64, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x8000000, {0x0, 0x0, 0x0, r6, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x34, 0x2, {{0x100, 0x7, 0x6361, 0x5, 0xfffffffd, 0x6}, [@TCA_NETEM_LATENCY64={0xc, 0xa, 0x7}, @TCA_NETEM_RATE64={0xc, 0x8, 0x4526dd370cbcddac}]}}}]}, 0x64}, 0x1, 0x0, 0x0, 0x20000001}, 0x0) r7 = syz_init_net_socket$rose(0xb, 0x5, 0x0) ioctl$sock_rose_SIOCADDRT(r7, 0x890b, &(0x7f0000000380)={@remote={0xcc, 0xcc, 0xcc, 0xcc, 0x0}, 0x6, @null, @bpq0, 0x0, [@bcast, @bcast, @bcast, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @default, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @bcast, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}]}) r8 = syz_init_net_socket$rose(0xb, 0x5, 0x0) connect$rose(r8, &(0x7f0000000040)=@short={0xb, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, 0x1, @default}, 0x1c) connect$rose(r8, &(0x7f0000000100)=@full={0xb, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, 0x0, [@null, @null, @null, @default, @bcast, @default]}, 0x40) setsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, &(0x7f0000000200)={@dev={0xfe, 0x80, '\x00', 0x34}, 0x0, 0x1, 0x0, 0x4, 0xfa, 0x9b0}, 0x20) 10m19.459618185s ago: executing program 4 (id=2323): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r0, &(0x7f0000000080)=ANY=[@ANYBLOB], 0x15) socket(0xa, 0x3, 0x1003a) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, r1, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x8}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020700000000000002030207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000100850000002d00000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x7, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) capset(&(0x7f00000003c0)={0x19980330, r2}, &(0x7f0000000400)={0x4, 0x14, 0x9, 0x8, 0x2, 0xfffffff7}) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='sched_switch\x00', r5}, 0x10) bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x22) connect$unix(r3, &(0x7f0000000340)=@file={0x1, './file0\x00'}, 0x6e) r6 = socket$netlink(0x10, 0x3, 0x0) sendmsg$netlink(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000300)=ANY=[@ANYBLOB="1c0000005e00250e00000000000000000c000080080021007a87a1b50b1000"], 0x1c}], 0x1}, 0x0) 10m18.506475644s ago: executing program 38 (id=2323): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r0, &(0x7f0000000080)=ANY=[@ANYBLOB], 0x15) socket(0xa, 0x3, 0x1003a) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, r1, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x8}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020700000000000002030207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000100850000002d00000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x7, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) capset(&(0x7f00000003c0)={0x19980330, r2}, &(0x7f0000000400)={0x4, 0x14, 0x9, 0x8, 0x2, 0xfffffff7}) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='sched_switch\x00', r5}, 0x10) bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x22) connect$unix(r3, &(0x7f0000000340)=@file={0x1, './file0\x00'}, 0x6e) r6 = socket$netlink(0x10, 0x3, 0x0) sendmsg$netlink(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000300)=ANY=[@ANYBLOB="1c0000005e00250e00000000000000000c000080080021007a87a1b50b1000"], 0x1c}], 0x1}, 0x0) 5m48.703711976s ago: executing program 6 (id=2805): socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000005e00)) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000380)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0}, 0x94) r0 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r0, &(0x7f0000f5dfe4)={0xa, 0x4e20}, 0x1c) syz_emit_ethernet(0xbe, &(0x7f0000000000)={@local, @link_local, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0xb0, 0x0, 0x0, 0x0, 0x11, 0x0, @empty, @empty}, {0x0, 0x4e20, 0x9c, 0x0, @wg=@initiation={0x1, 0x0, "7b4b143b7461fd777b1c012bd14efb9f49fcdb8f080c26a04883ad5c8c82b8af", "584cbf2649a50f2dbc43efa8698dfa871c51852e4451b57d037ad3c045942824251d7d17b5191584cdd4fbe40a27424d", "bcfd56f1373669caaa2f19935e6996c7096ffe4f3a4745a8f762b964", {"9a3bfbc1f39cb307b3472eb9cdb042d2", "643fcbb2c5a57df67d544af6e8dafe09"}}}}}}}, 0x0) setsockopt$inet_sctp6_SCTP_DISABLE_FRAGMENTS(0xffffffffffffffff, 0x84, 0x8, &(0x7f0000000080)=0x5, 0x4) r1 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00', 0x7}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r1, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) recvmmsg(r0, &(0x7f00000057c0)=[{{0x0, 0x0, 0x0}, 0x3}, {{0x0, 0x0, &(0x7f0000002cc0)=[{0x0}, {&(0x7f00000017c0)=""/130, 0x94}], 0x2}, 0xa1}], 0x2, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000100)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_open_dev$MSR(&(0x7f00000007c0), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) openat$vicodec1(0xffffffffffffff9c, 0x0, 0x2, 0x0) 5m47.514305863s ago: executing program 5 (id=2811): socket$inet6_udp(0xa, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000180)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0xf, &(0x7f0000000340)=@ringbuf={{}, {{0x18, 0x1, 0x1, 0x0, r3}}, {}, [], {{}, {}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000001dc0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @fallback=0x1c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r4 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000280)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x24, 0x24, 0x2, [@struct={0x0, 0x1, 0x0, 0x4, 0x0, 0x8, [{0x0, 0x2}]}, @restrict={0x0, 0x0, 0x0, 0x4}]}}, 0x0, 0x3e}, 0x28) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000017c0)=ANY=[@ANYBLOB="0200000004000000080000000100000080000000", @ANYRES32=0x1, @ANYBLOB='\x00\x00 \x00\x00 \x00'/20, @ANYRES32=0x0, @ANYRES32=r4, @ANYBLOB="000000000100"/28], 0x50) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="0700000004000000200100000102000028"], 0x50) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000900)={0x11, 0x8, &(0x7f0000000080)=ANY=[@ANYBLOB="18000000bc00551a000000000000000018120000", @ANYRES32=r5, @ANYBLOB="0000000000000000b703000000000000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x2d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kmem_cache_free\x00', r6}, 0x18) getresuid(&(0x7f0000000440), &(0x7f0000000480), &(0x7f00000004c0)) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_DELETE(r7, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000300)={0x14, 0x2, 0x1, 0x101, 0x0, 0x0, {0x0, 0x0, 0x2}}, 0x14}, 0x1, 0x0, 0x0, 0x8094}, 0x4) socket$netlink(0x10, 0x3, 0x0) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xe, 0xe, &(0x7f0000001300)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0x143}, 0x48) 5m44.77100214s ago: executing program 5 (id=2813): r0 = socket$rxrpc(0x21, 0x2, 0xa) setsockopt$RXRPC_SECURITY_KEY(r0, 0x110, 0x1, 0x0, 0x0) socket$inet6(0xa, 0x1, 0xff) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) r1 = socket$inet_mptcp(0x2, 0x1, 0x106) socket$nl_generic(0x10, 0x3, 0x10) setsockopt$inet_int(r1, 0x0, 0x13, &(0x7f0000000040), 0x4) syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x3) setresuid(0xee01, 0x0, 0x0) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0xb, 0x31, 0xffffffffffffffff, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) read$msr(0xffffffffffffffff, &(0x7f0000019680)=""/102392, 0x18ff8) r2 = syz_open_dev$I2C(&(0x7f0000000000), 0x0, 0x0) rseq(&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1}, 0x20, 0x1, 0x0) ioctl$IOMMU_IOAS_ALLOC(0xffffffffffffffff, 0x3b81, 0x0) fremovexattr(r2, &(0x7f0000000040)=@random={'security.', '/dev/cpu/#/msr\x00'}) bind$bt_l2cap(0xffffffffffffffff, &(0x7f0000000080)={0x1f, 0x2, @none}, 0xe) r3 = socket(0x1, 0x2, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f00000008c0)=ANY=[@ANYBLOB="b4050000fdff7f006110580000000000c60000000000000095000000000000009f33ef60916e6e713f1eeb0b725ad99b817fd98cd824498949714ffaac8a6f670600dcca55f21f3ca9e822d182054d54d53cd2b6db714e4beb5447000001000000008f2b9000f22425e4097ed62cbc891061017cfa6fa26fa7088c60897d4a6148a1c1e43f00001bde60beac671e8e8fdecb03588aa623fa71f31bf0f871ab5c2ff88afc60027f4e5b52710aeee835cf0d0000000098b51fe6b1b8d9dbe87dcff414ed000000000000000000000000000000000000000000000000000000b347abe6352a080f8140e5fd10747b6ecdb3540546bf63"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x94) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="0f000000040000000400000012"], 0x48) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000040)=ANY=[@ANYRES32=r5, @ANYRES32=r4, @ANYBLOB='&'], 0x10) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000140)={r5, &(0x7f0000000180), &(0x7f00000000c0)=@tcp6=r3}, 0x20) bind$unix(r3, &(0x7f00000001c0)=@abs={0x1, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r3, &(0x7f0000001680)=[{{&(0x7f0000000380)=@file={0x1, './file0\x00'}, 0x6e, 0x0}}], 0x1, 0x0) recvmmsg(r3, &(0x7f0000000d40)=[{{0x0, 0x4f, 0x0}, 0x8}, {{0x0, 0x0, &(0x7f0000000780)=[{&(0x7f0000000500)=""/65, 0x41}], 0x1}}], 0x2, 0x0, 0x0) 5m44.594630403s ago: executing program 6 (id=2815): socket$nl_route(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(0xffffffffffffffff, 0x10e, 0xc, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18060000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000003000000b703000000000000850000007300000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000080)='sched_switch\x00', r3}, 0x10) ppoll(&(0x7f0000000000), 0x0, &(0x7f0000000040)={0x0, 0x989680}, &(0x7f0000000180)={[0xffffffffffffff68]}, 0x8) socket$nl_generic(0x10, 0x3, 0x10) prctl$PR_SET_VMA(0x53564d41, 0x0, &(0x7f0000ffc000/0x4000)=nil, 0x5bbf91a1e7f99074, &(0x7f0000000000)) r4 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000280), 0x800, 0x0) ioctl$TCSETS2(r4, 0x402c542b, &(0x7f0000000300)={0x3, 0x19, 0xff7d, 0x4, 0x2, "501fe88fc2aa9677d426a819a92aaefe7d41cc", 0xb, 0x1}) madvise(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0xb) syz_genetlink_get_family_id$tipc2(&(0x7f0000000040), 0xffffffffffffffff) 5m43.784510393s ago: executing program 9 (id=2816): r0 = socket$inet6(0xa, 0x800000000000002, 0x0) setsockopt$inet_opts(r0, 0x0, 0xd, &(0x7f00000008c0)=';', 0x1) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x41, &(0x7f0000000200)=0x632a, 0x4) sendmmsg$inet6(r0, &(0x7f0000000e00)=[{{&(0x7f0000000080)={0xa, 0x4e23, 0x0, @ipv4={'\x00', '\xff\xff', @empty}}, 0x1c, 0x0}}], 0x1, 0x0) recvmmsg(r0, &(0x7f0000003880)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000440)=""/29, 0x1d}}], 0x1, 0x12141, 0x0) 5m43.211890502s ago: executing program 5 (id=2817): r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000001840), 0x2982, 0x0) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f00000001c0)='/proc/timer_list\x00', 0x0, 0x0) sendfile(r0, r1, 0x0, 0x20000023896) 5m41.543639415s ago: executing program 5 (id=2819): sendmsg$inet(0xffffffffffffffff, &(0x7f0000000280)={&(0x7f0000000140)={0x2, 0x4e23, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, &(0x7f0000000200)=[{&(0x7f0000000180)='W', 0x1}], 0x1}, 0x0) r0 = socket$kcm(0x2, 0x5, 0x84) sendmsg$inet(r0, &(0x7f0000000680)={&(0x7f0000000140)={0x2, 0x4e23, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, &(0x7f0000000200)=[{&(0x7f0000000180)='W', 0xfe8a}], 0x1}, 0x0) r1 = socket$kcm(0x10, 0x2, 0x4) recvmsg(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f00000006c0)=""/4071, 0xfe7}, {&(0x7f0000001f40)=""/4091, 0xffb}, {&(0x7f0000000440)=""/68, 0x44}], 0x3}, 0x2) sendmsg$inet(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000000)="5c00000014006b03000000d86e6c1d0002847ea622fb564500004e23e3f58e76110165f450e71b0075e3002500028d459e37000f0000000000bf9367b47e51f60a64c9f4d4938037e786a6d0bdd700"/92, 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0) 5m41.27065466s ago: executing program 9 (id=2820): socket$nl_route(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(0xffffffffffffffff, 0x10e, 0xc, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18060000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000003000000b703000000000000850000007300000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000080)='sched_switch\x00', r3}, 0x10) ppoll(&(0x7f0000000000), 0x0, &(0x7f0000000040)={0x0, 0x989680}, &(0x7f0000000180)={[0xffffffffffffff68]}, 0x8) r4 = socket$nl_generic(0x10, 0x3, 0x10) prctl$PR_SET_VMA(0x53564d41, 0x0, &(0x7f0000ffc000/0x4000)=nil, 0x5bbf91a1e7f99074, &(0x7f0000000000)) r5 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000280), 0x800, 0x0) ioctl$TCSETS2(r5, 0x402c542b, &(0x7f0000000300)={0x3, 0x19, 0xff7d, 0x4, 0x2, "501fe88fc2aa9677d426a819a92aaefe7d41cc", 0xb, 0x1}) r6 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$TIPC_NL_MEDIA_GET(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000000200)=ANY=[@ANYBLOB='l\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="01002bbd700100000000030000005800018044000400200001000a00000000000000fe800000000000000000000000000010f8000000200002000a00000000000005ff64c100000000000000000000000001000000000d0001007564703a73"], 0x6c}}, 0x0) 5m39.790158144s ago: executing program 9 (id=2821): r0 = creat(0x0, 0x0) gettid() ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81e8943c, 0x0) listen(0xffffffffffffffff, 0x1ad72f7) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x5, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000100)=0x2) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bd2) socket$l2tp(0x2, 0x2, 0x73) syz_emit_ethernet(0x74, &(0x7f0000000000)={@link_local, @empty, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x24, 0x0, 0x0, 0x0, 0x73, 0x0, @private=0x300, @multicast1}, {0x0, 0x0, 0xfffffe9a, 0x0, @gue={{0x2}}}}}}}, 0x0) fcntl$setsig(0xffffffffffffffff, 0xa, 0x26) getsockopt$sock_buf(r0, 0x1, 0x3d, &(0x7f0000000180)=""/35, &(0x7f0000000240)=0x23) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000002000)=""/102400, 0x19000) socket$inet6_mptcp(0xa, 0x1, 0x106) ioctl$VIDIOC_TRY_DECODER_CMD(0xffffffffffffffff, 0xc0585605, &(0x7f00000005c0)={0x0, 0x0, @raw_data=[0xb, 0x400008, 0x3007, 0x1, 0x8, 0x7f, 0xff, 0x6, 0x7, 0x8, 0x5, 0xd60, 0x80000004, 0x4, 0x1, 0xeb]}) sendmsg$RDMA_NLDEV_CMD_RES_CM_ID_GET(r0, 0x0, 0x14) lseek(0xffffffffffffffff, 0x401, 0x3) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="60000000020601040000000000000000070000001400078008001140000000000800124000040c8f0500010006000000050005000200000005000400000000000900020073797a310000000011000300686173683a69702c706f7274"], 0x60}}, 0x20004000) 5m39.376133895s ago: executing program 5 (id=2822): r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) fcntl$dupfd(r0, 0x406, r0) r1 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000003f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x20}, 0x15) socket$inet_tcp(0x2, 0x1, 0x0) open$dir(&(0x7f00000000c0)='./file0\x00', 0x40041, 0x100) clock_gettime(0x0, 0x0) r2 = socket$pppl2tp(0x18, 0x1, 0x1) r3 = socket$inet6_udp(0xa, 0x2, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x41}, 0x24040840) connect$pppl2tp(r2, &(0x7f0000000000)=@pppol2tp={0x18, 0x1, {0x0, r3, {0x2, 0x4e22, @broadcast}, 0x2, 0x0, 0x3}}, 0x26) r4 = syz_open_dev$sndmidi(0x0, 0x2, 0x141101) dup(r4) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r5 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r6 = dup(r5) write$6lowpan_enable(r6, &(0x7f0000000000)='0', 0xfffffd2c) r7 = syz_io_uring_setup(0x239, &(0x7f0000000740)={0x0, 0x1c2a, 0x10100, 0x0, 0x0, 0x0, r6}, &(0x7f0000000180)=0x0, &(0x7f00000001c0)=0x0) syz_io_uring_submit(r8, r9, &(0x7f0000000040)=@IORING_OP_POLL_ADD={0x6, 0x2, 0x0, @fd=r5, 0x0, 0x0, 0x0, {}, 0x1}) io_uring_enter(r7, 0x2ded, 0x4000, 0x0, 0x0, 0x0) r10 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) sendmmsg$sock(r10, &(0x7f0000000cc0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x48094) 5m39.215412982s ago: executing program 9 (id=2823): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setscheduler(r1, 0x1, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="60000000020601040000000000000000070000001400078008001140000000000800124000040c8f0500010006000000050005000200000005000400000000000900020073797a310000000011000300686173683a69"], 0x60}}, 0x20004000) 5m38.18232467s ago: executing program 9 (id=2824): r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000080), 0x42202) r1 = syz_io_uring_setup(0x88f, &(0x7f0000000300)={0x0, 0xaee2, 0x80, 0x2, 0xbfdffffc}, &(0x7f0000000000)=0x0, &(0x7f0000000040)=0x0) syz_io_uring_submit(r2, r3, &(0x7f00000002c0)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3}) io_uring_enter(r1, 0x75fa, 0xe475, 0x0, 0x0, 0x0) write$sndseq(r0, 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_POOL(r0, 0x4058534c, &(0x7f00000000c0)={0x80, 0x5, 0x7fff, 0x9, 0xbffff4f1, 0x2}) 5m38.003664011s ago: executing program 5 (id=2825): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0xfffffffe}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = syz_open_dev$vim2m(&(0x7f0000000580), 0x0, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r3, 0xc0145608, &(0x7f0000000100)={0x410001, 0x2, 0x4}) ioctl$vim2m_VIDIOC_STREAMOFF(r3, 0x40045612, &(0x7f0000000140)=0x2) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={0x0}, 0x18) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000100)={0x6, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="18020000fdffffee0000000000000000850000002c00000095"], &(0x7f0000000040)='GPL\x00', 0x5}, 0x94) 5m37.602054365s ago: executing program 9 (id=2828): prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x2, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = memfd_create(&(0x7f0000000640)='C\x13\xfc2\x95WD\xaa\xba^\x90\xfd\x8d\xc2\xb1[\x81\xda\xda\xd6\x8c\xc99\xec\x0e*||\xe4\xb3\xc4\xb6\v\xaa\x15\x86,\xac\x8d\x89cu\x10\xdc\x93\x9b\xb4\x93\xafE*:\xe4\xdd\xa5\xa75\xb8\x1e;7\xb7.V\xdcrw[\r\x98\x93j\x9c\xf6\xf8\x99\xefF_\xcd\xdf!b\xc5\xec\ntb\xff\b\xaaF?!\x9f\a\x1a\x03\f\xe94\x1deU\x06zS\xc9\xb4\xa7@\xa1\\B\xc2@\r_b\x9a\xeb\b\xa4(V\xd6/N\xc5\xc6f\xb1\x95Z\xe5w^\xd8\xe7J\x80\xf7\xae\xafuv\x84\x9eG\xd1\xe7\x9b\xf0_9\xc2\x9b\xfd\xc3\xf3\xe4\x95P\xf1m\xcf\xc2\xe1\xe6\xa6\x8c\x11\xfb\xb8S\x8b\x92\\\asW-Ee\x02\x00\x00\x00\xd0;Q\xc1~\x89\xec\xc8\x9b\x88\a\xf2\x93\x82(\x8b\x00\xd8\xb4T\x80\x95\x93i|\xc0\x00\x04\x00\x00\x00\x00\x00\x00v\xef\xee+\xab\x9c\x00^R\xb2n?i=\xbe\xfd\x89\xbf\xe3\xcdB\xed\xe14\xe8\xd0\xb7\xff\xfeQ\x1c\x85n8\x1b\xc1\b\x00\x00\x00\x00\x00\x00\x00\x17\x94\xdfW\x92z\xbe\xb2R)\xf1K\xd7\xaf\x99\xf6d\xe8\xec\xb7\xbd+T3\xa6\xa9\xfaY-1qs\x82\xefn*\x96\xc9\x1e\xf4\xd1\x02Dt\xc0\x19\xf7\x89\x96.D [F\xeeYW\x95\x13\xc7;\xb5\x13^\x13\xcb\xf0C\x9c\xabf\x1daCS2\x02\xb0\xef\xc7\x8c\x9e\xed\a\n0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x3fffffffffffcb5, 0x2, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) fstat(0xffffffffffffffff, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000006c0)=ANY=[@ANYBLOB="170000000000000004000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000700)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000a00)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x23, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r5 = signalfd(r2, &(0x7f0000000280)={[0x1]}, 0x8) getsockopt$inet_int(r5, 0x0, 0x15, &(0x7f00000001c0), &(0x7f0000000200)=0x4) mknod(&(0x7f0000000040)='./file0\x00', 0x8001420, 0x0) open$dir(&(0x7f0000000100)='./file0\x00', 0x149800, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r4}, 0x10) getsockopt$CAN_RAW_LOOPBACK(r5, 0x65, 0x3, &(0x7f00000002c0), &(0x7f00000003c0)=0x4) syz_mount_image$exfat(&(0x7f0000000040), &(0x7f0000000180)='\xe9\x1fq\x89Y\x1e\x923aK\x00', 0x10, &(0x7f00000003c0)=ANY=[], 0x1, 0x1507, &(0x7f0000001b00)="$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") r6 = getuid() syz_mount_image$msdos(&(0x7f0000000140), &(0x7f0000000040)='./file0\x00', 0x0, &(0x7f0000000100)=ANY=[@ANYRES64=r6, @ANYRESDEC, @ANYRESHEX], 0x1, 0x536, &(0x7f0000000400)="$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") mkdir(&(0x7f0000000000)='./file0\x00', 0x40) openat$dir(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x0, 0x0) 5m30.808792558s ago: executing program 6 (id=2834): socket$qrtr(0x2a, 0x2, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) socket$nl_xfrm(0x10, 0x3, 0x6) socket$inet6(0xa, 0x2, 0x0) socket$inet(0x2, 0x2, 0x1) socket(0x10, 0x803, 0x0) socket(0x2, 0x80805, 0x0) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) r0 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000180)={'syz_tun\x00', 0x0}) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x80}, 0x50) close(0x3) bpf$MAP_CREATE(0x0, &(0x7f0000000500)=@base={0x5, 0x4, 0x4, 0x5, 0x0, 0xffffffffffffffff, 0xfffffffd}, 0x50) bpf$PROG_LOAD(0x5, 0x0, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x50) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000001c0)=@base={0xe, 0x4, 0x8, 0x1}, 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0x10, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b702000002000000850000008600000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bca2000000000000a6020000f8ffffffb703000008000000b704000000000000850000003300000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000580)='memory.events\x00', 0x100002, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000400)={{r3}, &(0x7f0000000240), &(0x7f00000003c0)=r5}, 0x20) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000000)={r4, r1, 0x25, 0x2, @void}, 0x10) syz_emit_ethernet(0x22, &(0x7f0000000300)={@multicast, @multicast, @val={@void, {0x8100, 0x0, 0x1, 0x4}}, {@can={0xc, {{0x3}, 0x8, 0x3, 0x0, 0x0, "fa2b25fc66189827"}}}}, 0x0) 5m30.523198437s ago: executing program 6 (id=2836): prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x2, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = memfd_create(&(0x7f0000000640)='C\x13\xfc2\x95WD\xaa\xba^\x90\xfd\x8d\xc2\xb1[\x81\xda\xda\xd6\x8c\xc99\xec\x0e*||\xe4\xb3\xc4\xb6\v\xaa\x15\x86,\xac\x8d\x89cu\x10\xdc\x93\x9b\xb4\x93\xafE*:\xe4\xdd\xa5\xa75\xb8\x1e;7\xb7.V\xdcrw[\r\x98\x93j\x9c\xf6\xf8\x99\xefF_\xcd\xdf!b\xc5\xec\ntb\xff\b\xaaF?!\x9f\a\x1a\x03\f\xe94\x1deU\x06zS\xc9\xb4\xa7@\xa1\\B\xc2@\r_b\x9a\xeb\b\xa4(V\xd6/N\xc5\xc6f\xb1\x95Z\xe5w^\xd8\xe7J\x80\xf7\xae\xafuv\x84\x9eG\xd1\xe7\x9b\xf0_9\xc2\x9b\xfd\xc3\xf3\xe4\x95P\xf1m\xcf\xc2\xe1\xe6\xa6\x8c\x11\xfb\xb8S\x8b\x92\\\asW-Ee\x02\x00\x00\x00\xd0;Q\xc1~\x89\xec\xc8\x9b\x88\a\xf2\x93\x82(\x8b\x00\xd8\xb4T\x80\x95\x93i|\xc0\x00\x04\x00\x00\x00\x00\x00\x00v\xef\xee+\xab\x9c\x00^R\xb2n?i=\xbe\xfd\x89\xbf\xe3\xcdB\xed\xe14\xe8\xd0\xb7\xff\xfeQ\x1c\x85n8\x1b\xc1\b\x00\x00\x00\x00\x00\x00\x00\x17\x94\xdfW\x92z\xbe\xb2R)\xf1K\xd7\xaf\x99\xf6d\xe8\xec\xb7\xbd+T3\xa6\xa9\xfaY-1qs\x82\xefn*\x96\xc9\x1e\xf4\xd1\x02Dt\xc0\x19\xf7\x89\x96.D [F\xeeYW\x95\x13\xc7;\xb5\x13^\x13\xcb\xf0C\x9c\xabf\x1daCS2\x02\xb0\xef\xc7\x8c\x9e\xed\a\n0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0xfffffffe}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = syz_open_dev$vim2m(&(0x7f0000000580), 0x0, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r3, 0xc0145608, &(0x7f0000000100)={0x410001, 0x2, 0x4}) ioctl$vim2m_VIDIOC_STREAMOFF(r3, 0x40045612, &(0x7f0000000140)=0x2) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={0x0}, 0x18) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000100)={0x6, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="18020000fdffffee0000000000000000850000002c00000095"], &(0x7f0000000040)='GPL\x00', 0x5}, 0x94) 5m20.957253741s ago: executing program 40 (id=2828): prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x2, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = memfd_create(&(0x7f0000000640)='C\x13\xfc2\x95WD\xaa\xba^\x90\xfd\x8d\xc2\xb1[\x81\xda\xda\xd6\x8c\xc99\xec\x0e*||\xe4\xb3\xc4\xb6\v\xaa\x15\x86,\xac\x8d\x89cu\x10\xdc\x93\x9b\xb4\x93\xafE*:\xe4\xdd\xa5\xa75\xb8\x1e;7\xb7.V\xdcrw[\r\x98\x93j\x9c\xf6\xf8\x99\xefF_\xcd\xdf!b\xc5\xec\ntb\xff\b\xaaF?!\x9f\a\x1a\x03\f\xe94\x1deU\x06zS\xc9\xb4\xa7@\xa1\\B\xc2@\r_b\x9a\xeb\b\xa4(V\xd6/N\xc5\xc6f\xb1\x95Z\xe5w^\xd8\xe7J\x80\xf7\xae\xafuv\x84\x9eG\xd1\xe7\x9b\xf0_9\xc2\x9b\xfd\xc3\xf3\xe4\x95P\xf1m\xcf\xc2\xe1\xe6\xa6\x8c\x11\xfb\xb8S\x8b\x92\\\asW-Ee\x02\x00\x00\x00\xd0;Q\xc1~\x89\xec\xc8\x9b\x88\a\xf2\x93\x82(\x8b\x00\xd8\xb4T\x80\x95\x93i|\xc0\x00\x04\x00\x00\x00\x00\x00\x00v\xef\xee+\xab\x9c\x00^R\xb2n?i=\xbe\xfd\x89\xbf\xe3\xcdB\xed\xe14\xe8\xd0\xb7\xff\xfeQ\x1c\x85n8\x1b\xc1\b\x00\x00\x00\x00\x00\x00\x00\x17\x94\xdfW\x92z\xbe\xb2R)\xf1K\xd7\xaf\x99\xf6d\xe8\xec\xb7\xbd+T3\xa6\xa9\xfaY-1qs\x82\xefn*\x96\xc9\x1e\xf4\xd1\x02Dt\xc0\x19\xf7\x89\x96.D [F\xeeYW\x95\x13\xc7;\xb5\x13^\x13\xcb\xf0C\x9c\xabf\x1daCS2\x02\xb0\xef\xc7\x8c\x9e\xed\a\n0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = memfd_create(&(0x7f0000000640)='C\x13\xfc2\x95WD\xaa\xba^\x90\xfd\x8d\xc2\xb1[\x81\xda\xda\xd6\x8c\xc99\xec\x0e*||\xe4\xb3\xc4\xb6\v\xaa\x15\x86,\xac\x8d\x89cu\x10\xdc\x93\x9b\xb4\x93\xafE*:\xe4\xdd\xa5\xa75\xb8\x1e;7\xb7.V\xdcrw[\r\x98\x93j\x9c\xf6\xf8\x99\xefF_\xcd\xdf!b\xc5\xec\ntb\xff\b\xaaF?!\x9f\a\x1a\x03\f\xe94\x1deU\x06zS\xc9\xb4\xa7@\xa1\\B\xc2@\r_b\x9a\xeb\b\xa4(V\xd6/N\xc5\xc6f\xb1\x95Z\xe5w^\xd8\xe7J\x80\xf7\xae\xafuv\x84\x9eG\xd1\xe7\x9b\xf0_9\xc2\x9b\xfd\xc3\xf3\xe4\x95P\xf1m\xcf\xc2\xe1\xe6\xa6\x8c\x11\xfb\xb8S\x8b\x92\\\asW-Ee\x02\x00\x00\x00\xd0;Q\xc1~\x89\xec\xc8\x9b\x88\a\xf2\x93\x82(\x8b\x00\xd8\xb4T\x80\x95\x93i|\xc0\x00\x04\x00\x00\x00\x00\x00\x00v\xef\xee+\xab\x9c\x00^R\xb2n?i=\xbe\xfd\x89\xbf\xe3\xcdB\xed\xe14\xe8\xd0\xb7\xff\xfeQ\x1c\x85n8\x1b\xc1\b\x00\x00\x00\x00\x00\x00\x00\x17\x94\xdfW\x92z\xbe\xb2R)\xf1K\xd7\xaf\x99\xf6d\xe8\xec\xb7\xbd+T3\xa6\xa9\xfaY-1qs\x82\xefn*\x96\xc9\x1e\xf4\xd1\x02Dt\xc0\x19\xf7\x89\x96.D [F\xeeYW\x95\x13\xc7;\xb5\x13^\x13\xcb\xf0C\x9c\xabf\x1daCS2\x02\xb0\xef\xc7\x8c\x9e\xed\a\n0x0}) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x50) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000001c0)=@base={0xe, 0x4, 0x8, 0x1}, 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0x10, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b702000002000000850000008600000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bca2000000000000a6020000f8ffffffb703000008000000b704000000000000850000003300000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000580)='memory.events\x00', 0x100002, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000000)={r4, r1, 0x25, 0x2, @void}, 0x10) syz_emit_ethernet(0x22, &(0x7f0000000300)={@multicast, @multicast, @val={@void, {0x8100, 0x0, 0x1, 0x4}}, {@can={0xc, {{0x3}, 0x8, 0x3, 0x0, 0x0, "fa2b25fc66189827"}}}}, 0x0) 2m48.710478075s ago: executing program 2 (id=3093): socket$qrtr(0x2a, 0x2, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) socket$nl_xfrm(0x10, 0x3, 0x6) socket$inet6(0xa, 0x2, 0x0) socket$inet(0x2, 0x2, 0x1) socket(0x10, 0x803, 0x0) socket(0x2, 0x80805, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="060000000400000004"], 0x48) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x80}, 0x50) bpf$MAP_CREATE(0x0, &(0x7f0000000500)=@base={0x5, 0x4, 0x4, 0x5, 0x0, 0xffffffffffffffff, 0xfffffffd}, 0x50) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x50) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000001c0)=@base={0xe, 0x4, 0x8, 0x1}, 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0x10, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000002000000850000008600000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bca2000000000000a6020000f8ffffffb703000008000000b704000000000000850000003300000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000580)='memory.events\x00', 0x100002, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000400)={{r1}, &(0x7f0000000240), &(0x7f00000003c0)=r3}, 0x20) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000000)={r2, 0x0, 0x25, 0x2, @void}, 0x10) syz_emit_ethernet(0x22, &(0x7f0000000300)={@multicast, @multicast, @val={@void, {0x8100, 0x0, 0x1, 0x4}}, {@can={0xc, {{0x3}, 0x8, 0x3, 0x0, 0x0, "fa2b25fc66189827"}}}}, 0x0) 2m48.351035634s ago: executing program 2 (id=3095): r0 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) socket$rxrpc(0x21, 0x2, 0x2) socket$inet6_udp(0xa, 0x2, 0x0) r1 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) ioctl$sock_netdev_private(0xffffffffffffffff, 0x8914, &(0x7f0000000000)) r2 = socket(0x28, 0x5, 0x0) sendmmsg(r2, 0x0, 0x0, 0x24008094) bind$pptp(r2, 0x0, 0x0) ioctl$sock_netrom_SIOCADDRT(r1, 0x890b, 0x0) ioctl$sock_netrom_SIOCADDRT(r1, 0x890b, 0x0) ioctl$sock_netrom_SIOCADDRT(r0, 0x890b, &(0x7f0000000280)={0x1, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @bpq0, 0x10000, 'syz0\x00', @default, 0xfffffdb6, 0x2, [@default, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @default, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @default, @default, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}]}) ioctl$sock_netrom_SIOCADDRT(r0, 0x890b, &(0x7f0000000000)={0x1, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @bpq0, 0x10001, 'syz1\x00', @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, 0x1, 0x0, [@null, @default, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @bcast, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @default, @default]}) 2m48.079478847s ago: executing program 2 (id=3096): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) arch_prctl$ARCH_MAP_VDSO_32(0x2002, 0x58b2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_io_uring_setup(0x489, &(0x7f0000000600)={0x0, 0x3f73, 0x10, 0x0, 0x1a}, &(0x7f00000005c0)=0x0, &(0x7f0000000240)=0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$tipc2(&(0x7f0000000300), 0xffffffffffffffff) sendmsg$TIPC_NL_NET_GET(r5, 0x0, 0x8004) io_uring_register$IORING_REGISTER_PBUF_RING(r2, 0x16, &(0x7f0000000040)={&(0x7f0000001000)={[{0x0, 0xffffffffffffff3a, 0x3, 0xf4}]}, 0x1, 0x1}, 0x1) r6 = socket$inet_mptcp(0x2, 0x1, 0x106) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x4010, 0xffffffffffffffff, 0x0) r7 = openat$mixer(0xffffffffffffff9c, &(0x7f0000003fc0), 0x20000, 0x0) ioctl$SOUND_MIXER_READ_DEVMASK(r7, 0xc0044dff, &(0x7f0000004000)) mbind(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x2, &(0x7f0000000000)=0x9, 0x8, 0x0) setsockopt$packet_rx_ring(0xffffffffffffffff, 0x107, 0x5, &(0x7f00000001c0)=@req3={0x9, 0x0, 0x400, 0x6, 0xfff, 0x3ff, 0x40}, 0x1c) r8 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000002100)='numa_maps\x00') getsockopt$bt_hci(r6, 0x0, 0x1, &(0x7f0000000140)=""/56, &(0x7f0000000180)=0x38) read$FUSE(r8, &(0x7f0000004180)={0x2020}, 0x2020) r9 = socket$inet6(0xa, 0x80002, 0x0) setsockopt$inet6_udp_int(r9, 0x11, 0x65, 0x0, 0x0) connect$inet6(r9, &(0x7f0000000000)={0xa, 0x4e2a, 0xffffffff, @mcast2, 0x9}, 0x1c) sendmmsg$inet6(r9, 0x0, 0x0, 0x4001c00) connect$inet(r6, &(0x7f0000000000)={0x2, 0x4e21, @empty}, 0x10) syz_io_uring_submit(r3, r4, &(0x7f00000002c0)=@IORING_OP_RECV=@use_registered_buffer={0x1b, 0x20, 0x10, r6, 0x0, 0x0, 0x0, 0x262, 0x0, {0x1}}) io_uring_enter(r2, 0x3516, 0xf400, 0x0, 0x0, 0x0) 2m44.299345703s ago: executing program 3 (id=3103): socket$inet_icmp_raw(0x2, 0x3, 0x1) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) close(0x4) syz_open_procfs$namespace(0x0, &(0x7f0000000200)='ns/pid_for_children\x00') unshare(0x6a040000) r0 = socket(0x8, 0x3, 0x0) openat$tun(0xffffffffffffff9c, 0x0, 0x48241, 0x0) accept$alg(r0, 0x0, 0x0) 2m43.770076084s ago: executing program 2 (id=3104): r0 = socket$nl_generic(0x10, 0x3, 0x10) recvmmsg(r0, &(0x7f0000000240)=[{{0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000004740)=""/4090, 0xffa}, {&(0x7f00000001c0)=""/91, 0x5b}], 0x2}}, {{0x0, 0x0, 0x0}, 0x4}, {{0x0, 0x0, &(0x7f0000000780)=[{&(0x7f0000001740)=""/4096, 0x1000}, {&(0x7f0000003740)=""/4083, 0xff3}], 0x2}, 0x8}], 0x3, 0x2, 0x0) 2m35.802029539s ago: executing program 3 (id=3120): r0 = socket$netlink(0x10, 0x3, 0x0) writev(r0, &(0x7f00000003c0)=[{&(0x7f0000000180)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000190004000400000007fd17e5ffff0800040000000000000000", 0x39}], 0x1) writev(r0, &(0x7f0000000300)=[{&(0x7f00000001c0)="390000001300034700bb5be1c3e4feff06000000010000004500000025000000190004000400ad000d00000000000006040000000000f93132", 0x39}], 0x1) 2m34.250319692s ago: executing program 3 (id=3123): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="1400000015000103000000001c0000000a"], 0x14}, 0x1, 0x0, 0x0, 0x4}, 0x0) syz_genetlink_get_family_id$devlink(&(0x7f0000000100), r0) 2m33.330544976s ago: executing program 3 (id=3127): syz_mount_image$ext4(&(0x7f0000000240)='ext4\x00', &(0x7f0000000280)='./mnt\x00', 0x840, &(0x7f0000000180)={[{@test_dummy_encryption_v1}, {@nolazytime}]}, 0x1, 0x241, &(0x7f00000020c0)="$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") r0 = open(&(0x7f0000000180)='./bus\x00', 0x14927e, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) setsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000000180)={r2, 0xee01}, 0xc) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file1\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000700)=ANY=[@ANYBLOB="0100000004000000e27f000001"], 0x50) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000004c0), &(0x7f0000000380), 0x9, r5}, 0x38) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r5}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x30, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r6}, 0x10) copy_file_range(r0, 0x0, r0, &(0x7f0000000080)=0x87d, 0xd, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000740)='./file1\x00', 0x183042, 0x15) 2m28.331519307s ago: executing program 3 (id=3137): bpf$MAP_CREATE(0x0, &(0x7f0000000a40)=ANY=[], 0x48) syz_mount_image$vfat(&(0x7f00000000c0), &(0x7f0000000240)='./file0\x00', 0x2000082, &(0x7f0000000a40)=ANY=[@ANYBLOB="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"], 0x25, 0x358, &(0x7f0000000480)="$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") prlimit64(0x0, 0xe, &(0x7f0000000140)={0x9, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b7030000ddffffff850000002d00000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000300)='sched_switch\x00', r3}, 0x10) sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @empty}, 0x10) timer_create(0x0, 0x0, 0x0) r4 = socket$unix(0x1, 0x1, 0x0) bind$unix(r4, &(0x7f0000003000)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x11, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socket$packet(0x11, 0x2, 0x300) mkdirat(0xffffffffffffff9c, &(0x7f0000002000)='./file0\x00', 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', 0x0, 0x1, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) read$FUSE(0xffffffffffffffff, &(0x7f00000102c0)={0x2020}, 0xfffffe5d) 2m23.48207943s ago: executing program 3 (id=3143): sendmmsg(0xffffffffffffffff, 0x0, 0x0, 0x9200000000000000) bpf$MAP_CREATE(0x0, 0x0, 0x48) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000040)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f0000000000)=0x5) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000001700)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './bus\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x3fffffffffffcb5, 0x2, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="170000000000000004000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0}, 0x90) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000840)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000058"], 0x0}, 0x94) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r4}, 0x10) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000780)='./bus\x00', 0x41, &(0x7f0000000c00)={[{@bsdgroups}, {@resgid}, {@noblock_validity}, {@grpjquota}, {@grpjquota}, {@resuid}, {@auto_da_alloc}, {@noload}, {@jqfmt_vfsv1}]}, 0x64, 0x50a, &(0x7f0000000200)="$eJzs3VFrHFsdAPD/bHZr06Y3ueqDXvB6tZW0aHeTxrbBh1pB9Kmg1vcak00I2WRDdtM2oWiKH0AQUcEnffFF8AMIUvDFRxEK+qyoKKKtPvigncvuTtI03U227TabZn8/mMw5Z2b2f86GmZ0zc5gJYGC9FxHXI+JJmqYXImI0K89lU2y1psZ6jx/dm21MSaTpzX8mkWRl25+VZPPT2WYnI+JrX474ZvJ83NrG5tJMpVJey/Kl+vJqqbaxeXFxeWahvFBemZqavDJ9dfry9ERP2nkmIq598a8/+O7PvnTtV5+586dbfz//rUa1RrLlu9vxgvL7LWw1vdD8LnZvsPaSwY6ifLOFmeF2aww9V3L/NdcJAID2Guf4H4yIT0bEhRiNof1PZwEAAIA3UPr5kfhfEpG2d6JDOQAAAPAGyTXHwCa5YjYWYCRyuWKxNYb3w3EqV6nW6p+er66vzLXGyo5FITe/WClPZGOFx6KQNPKTzfTT/KU9+amIeDsivj863MwXZ6uVuX5f/AAAAIABcXpP//8/o63+PwAAAHDMjPW7AgAAAMBrp/8PAAAAx5/+PwAAABxrX7lxozGl2++/nru9sb5UvX1xrlxbKi6vzxZnq2urxYVqdaH5zL7lgz6vUq2ufjZW1u+W6uVavVTb2Ly1XF1fqd9afOYV2AAAAMAhevvjD/6QRMTW54abU8OJ7jbtcjXgqMrvpJJs3ma3/uNbrflfDqlSwKEY6ncFgL7J97sCQN8U+l0BoO+SA5Z3HLzz22z+id7WBwAA6L3xj3a+/5/bd8ut/RcDR56dGAaX+/8wuJr3/7sdyetkAY6VgjMAGHivfP//QGn6QhUCAAB6bqQ5JblidnlvJHK5YjHiTPO1AIVkfrFSnoiItyLi96OFDzTyk80tkwP7DAAAAAAAAAAAAAAAAAAAAAAAAABAS5omkQIAAADHWkTub8mvW8/yHx89N7L3+sCJ5L+jkb0i9M6Pb/7w7ky9vjbZKP/XTnn9R1n5pX5cwQAAAICB8EIv8N/up2/34wEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACglx4/uje7PR1m3H98ISLG2sXPx8nm/GQUIuLUv5PI79ouiYihHsQfbvz5SLv4SaNaOyHbxR/uQfyt+/vGj7HsW2gX/3QP4sMge9A4/lxvt//l4r3mvP3+l494Jv+yOh//Yuf4N9Rh/z/TZYx3Hv6i1DH+/Yh38u2PP9vxkw7xz3YZ/xtf39zstCz9ScR429+f5JlYpfryaqm2sXlxcXlmobxQXpmamrwyfXX68vREaX6xUs7+to3xvY/98sl+7T/VIf7YAe0/12X7///w7qMPtZKFdvHPn20T/zc/zdZ4Pn4u++37VJZuLB/fTm+10ru9+/Pfvbtf++c6tP+g///5Ltt/4avf+XOXqwIAh6C2sbk0U6mU145totFLPwLVkDiCiW/39APTNE0b+9QrfE4SR+FraSb6fWQCAAB67elJf79rAgAAAAAAAAAAAAAAAAAAAIPrMB4ntjfm1k4q6cUjtAEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAeuL9AAAA//+GAdlV") socket(0x80000000000000a, 0x2, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0a00000001010000ff7f", @ANYRES32, @ANYBLOB="fdffffff00"/20, @ANYRES32, @ANYBLOB="0000000000000000000000000000f00f0000000000f9ffff2000"], 0x50) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) getsockopt$sock_cred(r5, 0x1, 0x11, &(0x7f0000000200), &(0x7f00000013c0)=0xfcbf) sendmmsg$unix(r7, &(0x7f00000014c0), 0x0, 0x4) write$binfmt_elf64(r7, &(0x7f0000000500)=ANY=[], 0x78) splice(r6, 0x0, 0xffffffffffffffff, 0x0, 0x39000, 0x0) 2m8.03616925s ago: executing program 42 (id=3143): sendmmsg(0xffffffffffffffff, 0x0, 0x0, 0x9200000000000000) bpf$MAP_CREATE(0x0, 0x0, 0x48) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000040)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f0000000000)=0x5) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000001700)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './bus\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x3fffffffffffcb5, 0x2, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="170000000000000004000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0}, 0x90) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000840)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000058"], 0x0}, 0x94) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r4}, 0x10) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000780)='./bus\x00', 0x41, &(0x7f0000000c00)={[{@bsdgroups}, {@resgid}, {@noblock_validity}, {@grpjquota}, {@grpjquota}, {@resuid}, {@auto_da_alloc}, {@noload}, {@jqfmt_vfsv1}]}, 0x64, 0x50a, &(0x7f0000000200)="$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") socket(0x80000000000000a, 0x2, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0a00000001010000ff7f", @ANYRES32, @ANYBLOB="fdffffff00"/20, @ANYRES32, @ANYBLOB="0000000000000000000000000000f00f0000000000f9ffff2000"], 0x50) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) getsockopt$sock_cred(r5, 0x1, 0x11, &(0x7f0000000200), &(0x7f00000013c0)=0xfcbf) sendmmsg$unix(r7, &(0x7f00000014c0), 0x0, 0x4) write$binfmt_elf64(r7, &(0x7f0000000500)=ANY=[], 0x78) splice(r6, 0x0, 0xffffffffffffffff, 0x0, 0x39000, 0x0) 13.516941965s ago: executing program 1 (id=3421): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f00000003c0)='/proc/sysvipc/shm\x00', 0x0, 0x0) pselect6(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) read$FUSE(r1, &(0x7f0000002480)={0x2020}, 0x2020) socket$nl_xfrm(0x10, 0x3, 0x6) socket$alg(0x26, 0x5, 0x0) accept$alg(0xffffffffffffffff, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) move_mount(0xffffffffffffffff, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) move_mount(0xffffffffffffffff, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000300)='./file0\x00', 0x0) pivot_root(&(0x7f00000000c0)='./file0/../file0/../file0/../file0\x00', &(0x7f0000000080)='./file0/../file0/../file0/../file0/file0\x00') 11.918922893s ago: executing program 8 (id=3425): setsockopt$XDP_TX_RING(0xffffffffffffffff, 0x11b, 0x3, &(0x7f00000002c0)=0x1000, 0x4) bind$inet6(0xffffffffffffffff, 0x0, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000002a80), 0x0, 0x2002, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$batadv(&(0x7f0000000400), 0xffffffffffffffff) connect$inet6(0xffffffffffffffff, &(0x7f0000000080)={0xa, 0x0, 0x380000, @loopback}, 0x1c) sendmsg$BATADV_CMD_SET_MESH(r0, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000000)={0x24, r1, 0x1, 0x70bd28, 0x1, {}, [@BATADV_ATTR_MESH_IFINDEX={0x8}, @BATADV_ATTR_GW_MODE={0x5, 0x33, 0x1}]}, 0x24}}, 0x80) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r2, 0x8933, &(0x7f0000000140)={'batadv0\x00', 0x0}) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000300)=@newtfilter={0x24, 0x11, 0x1, 0x691522eb, 0x0, {0x0, 0x0, 0x74, r3, {0x10, 0x4}, {}, {0x5}}}, 0x24}, 0x1, 0xf0ffffffffffff}, 0x0) 11.859234945s ago: executing program 1 (id=3426): sendmsg$NL802154_CMD_NEW_SEC_KEY(0xffffffffffffffff, 0x0, 0x0) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000b40), r0) ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, &(0x7f0000000b80)={'wpan0\x00', 0x0}) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL802154_CMD_DEL_SEC_DEV(r3, &(0x7f0000000c80)={0x0, 0x0, &(0x7f0000000c40)={&(0x7f0000000000)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="09012abd7000fcdbdf251b00000008000300", @ANYRES32=r2, @ANYBLOB="10002e"], 0x2c}, 0x1, 0x0, 0x0, 0x50}, 0x44) 11.591102016s ago: executing program 1 (id=3427): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) arch_prctl$ARCH_MAP_VDSO_32(0x2002, 0x58b2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_io_uring_setup(0x489, &(0x7f0000000600)={0x0, 0x3f73, 0x10, 0x0, 0x1a}, &(0x7f00000005c0)=0x0, &(0x7f0000000240)=0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$tipc2(&(0x7f0000000300), 0xffffffffffffffff) sendmsg$TIPC_NL_NET_GET(r5, 0x0, 0x8004) io_uring_register$IORING_REGISTER_PBUF_RING(r2, 0x16, &(0x7f0000000040)={&(0x7f0000001000)={[{0x0, 0xffffffffffffff3a, 0x3, 0xf4}]}, 0x1, 0x1}, 0x1) r6 = socket$inet_mptcp(0x2, 0x1, 0x106) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x4010, 0xffffffffffffffff, 0x0) ioctl$SOUND_MIXER_READ_DEVMASK(0xffffffffffffffff, 0xc0044dff, &(0x7f0000004000)) mbind(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x2, &(0x7f0000000000)=0x9, 0x8, 0x0) r7 = accept4$packet(0xffffffffffffffff, &(0x7f00000000c0), &(0x7f0000000100)=0x14, 0x80000) setsockopt$packet_rx_ring(r7, 0x107, 0x5, &(0x7f00000001c0)=@req3={0x9, 0x0, 0x400, 0x6, 0xfff, 0x3ff, 0x40}, 0x1c) r8 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000002100)='numa_maps\x00') getsockopt$bt_hci(r6, 0x0, 0x1, &(0x7f0000000140)=""/56, &(0x7f0000000180)=0x38) read$FUSE(r8, &(0x7f0000004180)={0x2020}, 0x2020) r9 = socket$inet6(0xa, 0x80002, 0x0) setsockopt$inet6_udp_int(r9, 0x11, 0x65, 0x0, 0x0) connect$inet6(r9, &(0x7f0000000000)={0xa, 0x4e2a, 0xffffffff, @mcast2, 0x9}, 0x1c) sendmmsg$inet6(r9, 0x0, 0x0, 0x4001c00) connect$inet(r6, &(0x7f0000000000)={0x2, 0x4e21, @empty}, 0x10) syz_io_uring_submit(r3, r4, &(0x7f00000002c0)=@IORING_OP_RECV=@use_registered_buffer={0x1b, 0x20, 0x10, r6, 0x0, 0x0, 0x0, 0x262, 0x0, {0x1}}) io_uring_enter(r2, 0x3516, 0xf400, 0x0, 0x0, 0x0) 11.503186736s ago: executing program 8 (id=3429): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) accept4(0xffffffffffffffff, 0x0, 0x0, 0x800) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="14000000100001"], 0x7c}}, 0x0) connect$qrtr(0xffffffffffffffff, 0x0, 0x0) writev(0xffffffffffffffff, 0x0, 0x0) socket$kcm(0x2, 0xa, 0x2) write$tun(0xffffffffffffffff, 0x0, 0xfce) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x20008004) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a03000000000000000000010000000900010073797a30000000006c000000160a01020000000000000000010000000900010073797a30000000000900020073797a3000000000400003802c00038004000100766c616e31000000000000000000000014000100776c616e3100000000000000000000000800014000000000080002"], 0xfc}}, 0x0) write$tun(r0, &(0x7f00000003c0)=ANY=[@ANYBLOB="12008864"], 0xfce) 7.92379589s ago: executing program 0 (id=3432): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) pipe2$9p(&(0x7f0000000240), 0x0) socket(0xa, 0x3, 0x1003a) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, r0, 0x0) socket$netlink(0x10, 0x3, 0x8) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x8}, 0x6e) sendmmsg$unix(r3, 0x0, 0x0, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000", @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffff"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = socket$netlink(0x10, 0x3, 0x0) sendmsg$netlink(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000300)=ANY=[@ANYBLOB="1c0000005e00250e00000000000000000c000080080021007a87a1b50b1000"], 0x1c}], 0x1}, 0x0) arch_prctl$ARCH_SHSTK_LOCK(0x5003, 0x2) 7.469744935s ago: executing program 7 (id=3433): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) connect$unix(0xffffffffffffffff, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r1 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x20, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18050000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r1, @ANYBLOB="0000000000000000b704000008000000850000007800000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x73cea2d47785b264, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000580)=ANY=[], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x40, &(0x7f0000000140)=@raw={'raw\x00', 0x8, 0x3, 0x498, 0x320, 0xa, 0x148, 0x368, 0x60, 0x400, 0x2a8, 0x2a8, 0x400, 0x2a8, 0x7fffffe, 0x0, {[{{@ip={@multicast2, @multicast2, 0x0, 0x0, 'bridge0\x00', 'rose0\x00'}, 0x0, 0x2f8, 0x368, 0x0, {0x200003ae, 0x7f00}, [@common=@inet=@hashlimit1={{0x58}, {'veth1_to_team\x00', {0x0, 0x0, 0x2, 0x0, 0x0, 0xffffffff, 0x7}}}, @common=@unspec=@bpf1={{0x230, 'bpf\x00', 0x0}, @pinned={0x1, 0x8601, 0x6, './file0\x00'}}]}, @common=@unspec=@NFLOG={0x70, 'NFLOG\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, "f2f7b9f28413d9d8ad470ad2b60c45cb4ea6e7bf902bdc2ff8a9304d9f655c746adc0bdc773506378bc2d27efd6abb05175089830cc46186074d7de46d5af300"}}}, {{@ip={@empty, @empty, 0x0, 0x0, 'syzkaller0\x00', 'veth0_to_team\x00'}, 0x0, 0x70, 0x98}, @common=@unspec=@MARK={0x28}}], {{'\x00', 0xc8, 0x70, 0x98}, {0x28}}}}, 0x4f8) syz_open_dev$tty1(0xc, 0x4, 0x1) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x11, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000021000000000000004bc311ec8500000075000000a70000000800000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f00000000c0)='percpu_alloc_percpu\x00', r2}, 0x10) syz_io_uring_setup(0x111, &(0x7f0000000340)={0x0, 0x11, 0x2}, 0x0, 0x0) 7.403694619s ago: executing program 8 (id=3434): r0 = socket$netlink(0x10, 0x3, 0x0) bind$netlink(r0, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) sendmsg$TIPC_NL_LINK_GET(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000280)={0x0, 0x24}}, 0x0) socket(0x2a, 0x2, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000380)=@newqdisc={0x24, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {}, {0xffff, 0xffff}}}, 0x24}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000080)=@newtfilter={0x44, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {0xfffa, 0x2}, {}, {0x1c, 0xfff9}}, [@filter_kind_options=@f_flower={{0xb}, {0x14, 0x2, [@TCA_FLOWER_KEY_ETH_TYPE={0x6, 0x8, 0x800}, @TCA_FLOWER_KEY_IP_PROTO={0x5, 0x9, 0x84}]}}]}, 0x44}}, 0x24004000) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x6}]}, 0x10) r1 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r1, &(0x7f00000002c0), 0x40000000000009f, 0x0) 7.241724761s ago: executing program 8 (id=3435): madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) r0 = syz_open_dev$evdev(&(0x7f0000000000), 0x2, 0x0) ioctl$EVIOCGREP(r0, 0x80084503, &(0x7f0000001900)=""/94) r1 = socket$netlink(0x10, 0x3, 0xb) r2 = socket$inet6_mptcp(0xa, 0x1, 0x106) setsockopt$inet6_tcp_TCP_CONGESTION(r2, 0x6, 0xd, 0x0, 0x0) bind$inet6(r2, &(0x7f0000000000)={0xa, 0x3, 0x0, @loopback}, 0x1c) connect$inet6(r2, &(0x7f0000000040)={0xa, 0x3, 0x0, @loopback}, 0x1c) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r6 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000180)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0}, 0x48) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0xf, &(0x7f0000000340)=@ringbuf={{}, {{0x18, 0x1, 0x1, 0x0, r6}}, {}, [], {{}, {}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000001dc0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r7}, 0x2d) bind$netlink(r1, &(0x7f0000514ff4)={0x10, 0x0, 0x25dfdbfc, 0x8000000}, 0xc) openat$dsp(0xffffffffffffff9c, &(0x7f0000000000), 0x28241, 0x0) 5.104827221s ago: executing program 0 (id=3436): socket$netlink(0x10, 0x3, 0x9) syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000a80)=@bpf_tracing={0x1a, 0x22, &(0x7f0000000640)=@framed={{0x18, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0xe2bd}, [@exit, @snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x7}}, @btf_id={0x18, 0x3, 0x3, 0x0, 0x1}, @exit, @alu={0x7, 0x0, 0xb, 0x5, 0x8, 0xffffffffffffffff, 0xffffffffffffffff}, @btf_id={0x18, 0x3, 0x3, 0x0, 0x3}, @jmp={0x5, 0x1, 0x0, 0x9, 0x3, 0x30, 0xffffffffffffffff}, @tail_call, @func={0x85, 0x0, 0x1, 0x0, 0x3}, @ringbuf_query]}, &(0x7f0000000580)='syzkaller\x00', 0x48980000, 0x98, &(0x7f0000000780)=""/152, 0x40f00, 0x12, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000940)={0x6, 0x5}, 0x8, 0x10, 0x0, 0x0, 0x28c21, 0xffffffffffffffff, 0x6, &(0x7f00000009c0)=[0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff], &(0x7f0000000a00)=[{0x3, 0x2, 0x9, 0xc}, {0x1, 0x5, 0x2, 0x9}, {0x2, 0x1, 0xc, 0xc}, {0x2, 0x5, 0xe, 0x8}, {0x3, 0x2, 0xb, 0x2}, {0x3, 0x3, 0xb, 0x1}], 0x10, 0xffffffff}, 0x94) r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) setsockopt$ax25_SO_BINDTODEVICE(0xffffffffffffffff, 0x101, 0x19, &(0x7f0000000000)=@bpq0, 0x10) ioctl$sock_netdev_private(r0, 0x8914, &(0x7f0000000000)) 5.103339273s ago: executing program 7 (id=3437): socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$BINDER_SET_CONTEXT_MGR_EXT(0xffffffffffffffff, 0x4018620d, &(0x7f0000000100)) r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000140)='./binderfs/binder0\x00', 0x0, 0x0) r1 = dup3(r0, 0xffffffffffffffff, 0x0) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r2, 0x4018620d, &(0x7f0000004a80)={0x73622a85, 0x100, 0x1}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000004c0)={0x8, 0x0, &(0x7f0000000000)=[@acquire], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000001c0)={0x4c, 0x0, &(0x7f0000000fc0)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x5, 0x8b}, 0x0) arch_prctl$ARCH_SHSTK_UNLOCK(0x5004, 0x2) sched_setscheduler(0x0, 0x1, &(0x7f0000000280)=0x1) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000000)=0x2) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000032680)=""/102392, 0x18ff8) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x50, 0x0, &(0x7f0000000580)="b3185d7bb56f70f003360fa8bf71ac3086aedebf6fff904f92849a7a07395ee7f0e4cb1d78001c08a0ab73ffcf5ad07693727980eea946e6cba1723e81bfa5c3688803c8a124dcb27df7938e7ddfdd52"}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000004a40)={0x44, 0x0, &(0x7f00000049c0)=[@transaction={0x40406301, {0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) 5.102124173s ago: executing program 8 (id=3438): r0 = socket(0x2000000000000021, 0x2, 0x10000000000002) connect$rxrpc(r0, &(0x7f0000000140)=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x8, @multicast2}}, 0x24) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) sendmmsg(r0, &(0x7f0000000180)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="18000000000000001001000001"], 0x18, 0xe000}, 0x5}], 0x1, 0x0) recvmmsg(r0, &(0x7f0000000d00), 0xf000, 0x10002, 0x0) 4.225589229s ago: executing program 7 (id=3439): setsockopt$XDP_TX_RING(0xffffffffffffffff, 0x11b, 0x3, &(0x7f00000002c0)=0x1000, 0x4) bind$inet6(0xffffffffffffffff, 0x0, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000002a80), 0x0, 0x2002, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$batadv(&(0x7f0000000400), 0xffffffffffffffff) connect$inet6(0xffffffffffffffff, &(0x7f0000000080)={0xa, 0x0, 0x380000, @loopback}, 0x1c) sendmsg$BATADV_CMD_SET_MESH(r0, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000000)={0x24, r1, 0x1, 0x70bd28, 0x1, {}, [@BATADV_ATTR_MESH_IFINDEX={0x8}, @BATADV_ATTR_GW_MODE={0x5, 0x33, 0x1}]}, 0x24}}, 0x80) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r2, 0x8933, &(0x7f0000000140)={'batadv0\x00', 0x0}) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000300)=@newtfilter={0x24, 0x11, 0x1, 0x691522eb, 0x0, {0x0, 0x0, 0x74, r3, {0x10, 0x4}, {}, {0x5}}}, 0x24}, 0x1, 0xf0ffffffffffff}, 0x0) 4.212680321s ago: executing program 0 (id=3440): mmap$IORING_OFF_SQ_RING(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x2, 0x11, 0xffffffffffffffff, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x102}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs={0x0, 0x0, 0xfffffffe}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f00000018c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=ANY=[@ANYBLOB="280000001e0001ffffff"], 0x28}}, 0x0) 3.109887498s ago: executing program 0 (id=3441): vmsplice(0xffffffffffffffff, &(0x7f0000002440)=[{&(0x7f00000002c0)="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", 0x1ef}], 0x1, 0x9) r0 = syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f0000000640)={&(0x7f0000000540)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000600)={&(0x7f00000007c0)={0x188, r0, 0x200, 0x70bd25, 0x25dfdbfb, {{}, {@void, @void}}, [@NL80211_ATTR_DONT_WAIT_FOR_ACK={0x4}, @NL80211_ATTR_DONT_WAIT_FOR_ACK={0x4}, @NL80211_ATTR_CSA_C_OFFSETS_TX={0x10, 0xcd, [0x1, 0x8, 0x3, 0x8, 0x0, 0x6]}, @NL80211_ATTR_CSA_C_OFFSETS_TX={0xe, 0xcd, [0x7, 0x7ff, 0x6, 0x8000, 0xfffb]}, @NL80211_ATTR_OFFCHANNEL_TX_OK={0x4}, @NL80211_ATTR_OFFCHANNEL_TX_OK={0x4}, @NL80211_ATTR_FRAME={0x110, 0x33, @assoc_resp={{{0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1}, {0x1}, @device_b, @device_b, @random="2fb907acb2da", {0x1, 0x40}}, 0x2408, 0x11, @default, @val={0x1, 0x2, [{0x63}, {0x6, 0x1}]}, @void, [{0xdd, 0x82, "ec6c71f5c3310f8bf7ac992ace3e8ab17de29beab96c39410e4ef0bdef6d00ec058bb730cf22023b5028a1d767d1207cadcbc240f16416c552db494a88c4182f55bc5759b28991ccb53886f12bd2e22ca2de56f7fc98f4f4e6281b37c8761dd9b1eccbf0ff9dce46713c995e814a60ab952547fc46fe0de2878a84f1b595591e3fc1"}, {0xdd, 0x18, "1fd9eaea337102a596c8ff5fce8c259a1b70955a623fe408"}, {0xdd, 0x4a, "eb7fc1690af34de8a4c757d27a876f46f30e29cab0903e351d66d6bb3170c4a76019a3fce6f8c68ee2c626a87676644f9c70c9679374f113f6bbd3dc64eb30520d2c9de3f5b1dd3cee15"}]}}, @chandef_params=[@NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0xf}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x1a}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0xd}, @NL80211_ATTR_WIPHY_FREQ={0x8}, @NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x4}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0xf}], @NL80211_ATTR_DONT_WAIT_FOR_ACK={0x4}]}, 0x188}, 0x1, 0x0, 0x0, 0x800}, 0x24000048) r1 = socket$nl_generic(0x10, 0x3, 0x10) bpf$TOKEN_CREATE(0x24, &(0x7f0000000340), 0x8) r2 = socket$alg(0x26, 0x5, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f00000000c0)={'syztnl0\x00', 0x0}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)=@newtaction={0x48, 0x30, 0x53b, 0x0, 0x0, {0x9}, [{0x34, 0x1, [@m_sample={0x30, 0x1, 0x0, 0x0, {{0xb}, {0x4}, {0x4}, {0xc}, {0xc, 0x4, {0x3}}}}]}]}, 0x48}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000001140)={0x0, 0x68}, 0x1, 0x0, 0x0, 0x4000810}, 0x0) bind$alg(r2, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-camellia-asm\x00'}, 0x58) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r3 = accept4(r2, 0x0, 0x0, 0x800) sendmmsg$alg(r3, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048"}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r3, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f00000013c0)={'wlan1\x00'}) sendmsg$NL80211_CMD_FRAME(r1, &(0x7f0000001380)={0x0, 0x0, &(0x7f0000001340)={&(0x7f0000000680)=ANY=[], 0x6f4}}, 0x0) 3.003855259s ago: executing program 1 (id=3442): syz_mount_image$ext4(&(0x7f0000000240)='ext4\x00', &(0x7f0000000280)='./mnt\x00', 0x840, &(0x7f0000000180)={[{@test_dummy_encryption_v1}, {@nolazytime}]}, 0x1, 0x241, &(0x7f00000020c0)="$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") r0 = open(&(0x7f0000000180)='./bus\x00', 0x14927e, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) setsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000000180)={r2, 0xee01}, 0xc) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file1\x00'}, 0x6e) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000700)=ANY=[@ANYBLOB="0100000004000000e27f000001"], 0x50) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000004c0), &(0x7f0000000380), 0x9, r4}, 0x38) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r4}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x30, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) socketpair$unix(0x1, 0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r5}, 0x10) copy_file_range(r0, 0x0, r0, &(0x7f0000000080)=0x87d, 0xd, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000740)='./file1\x00', 0x183042, 0x15) 2.74754184s ago: executing program 0 (id=3443): syz_open_dev$swradio(&(0x7f0000000040), 0x1, 0x2) socket$nl_generic(0x10, 0x3, 0x10) r0 = syz_open_dev$dri(&(0x7f00000003c0), 0x1, 0x80000) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r0, 0xc04064a0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000440)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_GETCONNECTOR(r0, 0xc05064a7, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)=[0x0], &(0x7f0000000540), 0x0, 0x1, 0x0, 0x0, r1}) r2 = gettid() rt_tgsigqueueinfo(0x0, r2, 0x8, 0x0) r3 = signalfd(0xffffffffffffffff, &(0x7f00007aeff8)={[0xfffffffffffffffe]}, 0x8) syz_clone3(0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x1000008, 0x4000000000008b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r4 = syz_open_dev$MSR(&(0x7f0000000240), 0x0, 0x0) read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8) socket$inet6_tcp(0xa, 0x1, 0x0) syz_open_dev$vim2m(&(0x7f0000000100), 0x807ff, 0x2) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket(0x1, 0x803, 0x0) getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)) sendmsg$nl_route(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000900)=@newlink={0x48, 0x10, 0x401, 0x0, 0x4, {0x0, 0x0, 0x0, r7, 0x10886}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @veth={{0x9}, {0x18, 0x2, 0x0, 0x1, @val=@VETH_INFO_PEER={0x14, 0x1, {{0x0, 0x0, 0x0, 0x0, 0x10820, 0x343}}}}}}]}, 0x48}}, 0x0) ioctl$sock_inet_SIOCSIFBRDADDR(0xffffffffffffffff, 0x891a, &(0x7f0000001b40)={'bond0\x00', {0x2, 0x4e20, @empty}}) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/power/pm_trace_dev_match', 0x109000, 0x0) read$FUSE(r3, &(0x7f00000011c0)={0x2020}, 0x2020) ioctl$DRM_IOCTL_SYNCOBJ_FD_TO_HANDLE_FD(0xffffffffffffffff, 0xc01064c2, &(0x7f0000000000)={0x0}) ioctl$DRM_IOCTL_SYNCOBJ_FD_TO_HANDLE_SYNC_FILE(0xffffffffffffffff, 0xc01064c2, 0x0) ioctl$DRM_IOCTL_SYNCOBJ_TRANSFER(r0, 0xc02064cc, &(0x7f0000000140)={r8, 0x0, 0x1, 0x134, 0x4}) 2.198534395s ago: executing program 7 (id=3444): socket$nl_netfilter(0x10, 0x3, 0xc) r0 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(r0, 0x0, &(0x7f00000000c0)=0x0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r3) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r6, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x0) recvmsg$unix(r5, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000080), 0x100}, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) recvmsg$unix(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000080), 0x100}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r8, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) recvmsg$unix(r7, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000900), 0x100}, 0x0) sendmsg$NFC_CMD_DEV_UP(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000000)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r4, @ANYBLOB="010028bd7000070000000200000008000100", @ANYRES32=r1], 0x1c}, 0x1, 0x0, 0x0, 0x40089}, 0x8004) r9 = socket$nl_xfrm(0x10, 0x3, 0x6) write$nci(r0, &(0x7f00000001c0)=ANY=[@ANYBLOB="414601", @ANYRES8=r9], 0x4) 1.880255004s ago: executing program 1 (id=3445): r0 = socket$netlink(0x10, 0x3, 0x0) bind$netlink(r0, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) sendmsg$TIPC_NL_LINK_GET(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000280)={0x0, 0x24}}, 0x0) socket(0x2a, 0x2, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000380)=@newqdisc={0x24, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {}, {0xffff, 0xffff}}}, 0x24}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000080)=@newtfilter={0x44, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {0xfffa, 0x2}, {}, {0x1c, 0xfff9}}, [@filter_kind_options=@f_flower={{0xb}, {0x14, 0x2, [@TCA_FLOWER_KEY_ETH_TYPE={0x6, 0x8, 0x800}, @TCA_FLOWER_KEY_IP_PROTO={0x5, 0x9, 0x84}]}}]}, 0x44}}, 0x24004000) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x6}]}, 0x10) r1 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r1, &(0x7f00000002c0), 0x40000000000009f, 0x0) 1.596484812s ago: executing program 7 (id=3446): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="07000000040000000800000001"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x11, 0x8, &(0x7f0000000740)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b703000000030000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000080)='sched_switch\x00', r1}, 0x18) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000001100)='./file1\x00', 0x10000, &(0x7f0000000a40)={[{@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x4}}, {@usrjquota}, {@errors_remount}, {@user_xattr}, {@sysvgroups}, {@mblk_io_submit}, {@minixdf}, {@jqfmt_vfsold}, {@nombcache}, {@nolazytime}]}, 0x45, 0x7ca, &(0x7f0000000240)="$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") socket(0x10, 0x803, 0x4) prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x8b}, 0x0) r2 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) sendmsg$sock(r2, &(0x7f0000001500)={0x0, 0x0, 0x0}, 0x40881) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x8) r3 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r6 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_inet6_SIOCADDRT(r6, 0x890b, &(0x7f0000000440)={@private2={0xfc, 0x2, '\x00', 0x1}, @mcast1, @mcast1={0xff, 0x5}, 0x0, 0x4, 0x0, 0x600, 0xfc8, 0x20c200a0}) r7 = getpgid(r3) tgkill(r7, r3, 0x33) r8 = socket$netlink(0x10, 0x3, 0x0) writev(r8, &(0x7f0000000000)=[{&(0x7f0000000040)="290000002000190f00003fffffffda060a00008bfee80001dd0048040d000600fe7f00000005000500", 0x29}], 0x1) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x0, 0x0, &(0x7f0000000040)='GPL\x00', 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) 255.865366ms ago: executing program 0 (id=3447): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) pipe2$9p(&(0x7f0000000240), 0x0) socket(0xa, 0x3, 0x1003a) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, r0, 0x0) socket$netlink(0x10, 0x3, 0x8) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x8}, 0x6e) sendmmsg$unix(r3, 0x0, 0x0, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000", @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffff"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = socket$netlink(0x10, 0x3, 0x0) sendmsg$netlink(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000300)=ANY=[@ANYBLOB="1c0000005e00250e00000000000000000c000080080021007a87a1b50b1000"], 0x1c}], 0x1}, 0x0) arch_prctl$ARCH_SHSTK_LOCK(0x5003, 0x2) 200.204366ms ago: executing program 8 (id=3448): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) getpid() socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r2 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x20, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18050000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r2, @ANYBLOB="0000000000000000b704000008000000850000007800000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x73cea2d47785b264, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000580)=ANY=[], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x40, &(0x7f0000000140)=@raw={'raw\x00', 0x8, 0x3, 0x498, 0x320, 0xa, 0x148, 0x368, 0x60, 0x400, 0x2a8, 0x2a8, 0x400, 0x2a8, 0x7fffffe, 0x0, {[{{@ip={@multicast2, @multicast2, 0x0, 0x0, 'bridge0\x00', 'rose0\x00'}, 0x0, 0x2f8, 0x368, 0x0, {0x200003ae, 0x7f00}, [@common=@inet=@hashlimit1={{0x58}, {'veth1_to_team\x00', {0x0, 0x0, 0x2, 0x0, 0x0, 0xffffffff, 0x7}}}, @common=@unspec=@bpf1={{0x230, 'bpf\x00', 0x0}, @pinned={0x1, 0x8601, 0x6, './file0\x00'}}]}, @common=@unspec=@NFLOG={0x70, 'NFLOG\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, "f2f7b9f28413d9d8ad470ad2b60c45cb4ea6e7bf902bdc2ff8a9304d9f655c746adc0bdc773506378bc2d27efd6abb05175089830cc46186074d7de46d5af300"}}}, {{@ip={@empty, @empty, 0x0, 0x0, 'syzkaller0\x00', 'veth0_to_team\x00'}, 0x0, 0x70, 0x98}, @common=@unspec=@MARK={0x28}}], {{'\x00', 0xc8, 0x70, 0x98}, {0x28}}}}, 0x4f8) syz_open_dev$tty1(0xc, 0x4, 0x1) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x11, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000021000000000000004bc311ec8500000075000000a70000000800000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f00000000c0)='percpu_alloc_percpu\x00', r3}, 0x10) syz_io_uring_setup(0x111, &(0x7f0000000340)={0x0, 0x11, 0x2}, 0x0, 0x0) 100.87966ms ago: executing program 1 (id=3449): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) write$P9_RVERSION(0xffffffffffffffff, &(0x7f0000000080)=ANY=[@ANYBLOB], 0x15) socket(0xa, 0x3, 0x1003a) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x8}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) sendmsg$netlink(r3, 0x0, 0x0) arch_prctl$ARCH_SHSTK_LOCK(0x5003, 0x2) 0s ago: executing program 7 (id=3450): socketpair$tipc(0x1e, 0x2, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x2) sched_setaffinity(0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) syz_open_dev$usbmon(0x0, 0xba, 0x280802) read$qrtrtun(0xffffffffffffffff, 0x0, 0x0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r1, 0x6, 0x210000000013, 0x0, 0x0) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r1, 0x6, 0x16, &(0x7f0000000340)=[@sack_perm, @window={0x3, 0x6, 0x7}, @mss={0x2, 0x7}, @window={0x3, 0x0, 0x4}, @window={0x3, 0x8, 0x6}, @timestamp, @window={0x3, 0xfffe}, @sack_perm], 0x200000000000005e) sendmmsg$inet(r1, &(0x7f0000000dc0)=[{{0x0, 0x0, &(0x7f0000000440)=[{&(0x7f0000000540)="86f02c2b1fd65cc55f6cd20ca40e9f671d415246f7ac04b7b9612df49608cc4758bebf84b3b875f4e3469dafb8456ca0855c46b29e1bad9a6227cb162e7ab938871e5a6cd782a5a27f03eaf5803928a18d12133a4865deaca29f2da9", 0x5c}], 0x1}}], 0x1, 0x20040010) kernel console output (not intermixed with test programs): : Node identity ca92b2754c4c, cluster identity 4711 [ 1597.060068][T17103] tipc: Enabled bearer , priority 0 [ 1597.303890][T17102] tipc: Resetting bearer [ 1598.021295][T17105] syzkaller0: entered promiscuous mode [ 1598.027922][T17105] syzkaller0: entered allmulticast mode [ 1598.122431][ T5985] tipc: Node number set to 2262741621 [ 1598.149152][T17096] tipc: Resetting bearer [ 1598.316266][T17096] tipc: Disabling bearer [ 1603.892882][T17171] loop3: detected capacity change from 0 to 256 [ 1603.904722][T17171] exfat: Unknown parameter '' [ 1604.042964][T17171] loop3: detected capacity change from 0 to 2048 [ 1605.720947][ T5878] Bluetooth: hci2: command 0x0405 tx timeout [ 1606.743393][ T1298] ieee802154 phy0 wpan0: encryption failed: -22 [ 1606.753757][ T1298] ieee802154 phy1 wpan1: encryption failed: -22 [ 1607.168123][T17161] mkiss: ax0: crc mode is auto. [ 1614.985994][T17224] netlink: 32 bytes leftover after parsing attributes in process `syz.9.2768'. [ 1618.457310][T17260] loop2: detected capacity change from 0 to 512 [ 1618.687531][T17260] EXT4-fs: quotafile must be on filesystem root [ 1618.817616][T17266] loop6: detected capacity change from 0 to 256 [ 1619.666589][T17266] exfat: Deprecated parameter 'utf8' [ 1619.674196][T17266] exfat: Deprecated parameter 'namecase' [ 1619.679955][T17266] exfat: Deprecated parameter 'namecase' [ 1619.685665][T17266] exfat: Deprecated parameter 'utf8' [ 1621.763510][T17266] exFAT-fs (loop6): failed to load upcase table (idx : 0x00012153, chksum : 0x5270ca8d, utbl_chksum : 0xe619d30d) [ 1624.135406][T17278] binder: BINDER_SET_CONTEXT_MGR already set [ 1624.225093][T17278] binder: 17277:17278 ioctl 4018620d 200000004a80 returned -16 [ 1626.037421][ T30] kauditd_printk_skb: 13 callbacks suppressed [ 1626.037466][ T30] audit: type=1326 audit(1756358974.847:95): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17291 comm="syz.9.2785" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f775098ebe9 code=0x7ffc0000 [ 1626.605575][ T30] audit: type=1326 audit(1756358974.847:96): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17291 comm="syz.9.2785" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f775098ebe9 code=0x7ffc0000 [ 1626.629187][ T30] audit: type=1326 audit(1756358974.857:97): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17291 comm="syz.9.2785" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f775098ebe9 code=0x7ffc0000 [ 1626.740693][ T30] audit: type=1326 audit(1756358974.867:98): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17291 comm="syz.9.2785" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f775098ebe9 code=0x7ffc0000 [ 1627.040614][ T30] audit: type=1326 audit(1756358974.867:99): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17291 comm="syz.9.2785" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f775098ebe9 code=0x7ffc0000 [ 1627.514977][T17301] loop9: detected capacity change from 0 to 512 [ 1627.940338][T17301] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1629.091611][ T30] audit: type=1326 audit(1756358977.367:100): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17313 comm="syz.6.2791" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f377b98ebe9 code=0x7ffc0000 [ 1629.234177][ T30] audit: type=1326 audit(1756358977.367:101): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17313 comm="syz.6.2791" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f377b98ebe9 code=0x7ffc0000 [ 1629.818954][ T30] audit: type=1326 audit(1756358977.377:102): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17313 comm="syz.6.2791" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f377b98ebe9 code=0x7ffc0000 [ 1630.012371][ T30] audit: type=1326 audit(1756358977.397:103): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17313 comm="syz.6.2791" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f377b98ebe9 code=0x7ffc0000 [ 1630.201230][ T30] audit: type=1326 audit(1756358977.397:104): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17313 comm="syz.6.2791" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f377b98ebe9 code=0x7ffc0000 [ 1631.394158][T15625] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1637.164759][T17381] Can't find ip_set type hash:i [ 1637.339444][T17385] loop9: detected capacity change from 0 to 128 [ 1637.564634][T17385] EXT4-fs (loop9): Test dummy encryption mode enabled [ 1638.568256][T17385] EXT4-fs (loop9): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 1639.874873][T17385] ext4 filesystem being mounted at /65/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 1640.081245][ T30] kauditd_printk_skb: 28 callbacks suppressed [ 1640.081262][ T30] audit: type=1326 audit(1756358987.937:133): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17395 comm="syz.5.2811" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcdddf8ebe9 code=0x7ffc0000 [ 1640.301826][T17385] fscrypt: AES-256-XTS using implementation "xts-aes-vaes-avx2" [ 1640.441819][ T30] audit: type=1326 audit(1756358987.947:134): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17395 comm="syz.5.2811" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcdddf8ebe9 code=0x7ffc0000 [ 1640.750497][ T30] audit: type=1326 audit(1756358987.947:135): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17395 comm="syz.5.2811" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fcdddf8ebe9 code=0x7ffc0000 [ 1640.779697][T17413] loop2: detected capacity change from 0 to 128 [ 1641.130318][T17413] EXT4-fs (loop2): Test dummy encryption mode enabled [ 1641.137945][ T30] audit: type=1326 audit(1756358987.967:136): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17395 comm="syz.5.2811" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcdddf8ebe9 code=0x7ffc0000 [ 1641.746397][ T30] audit: type=1326 audit(1756358987.967:137): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17395 comm="syz.5.2811" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcdddf8ebe9 code=0x7ffc0000 [ 1641.793301][T17413] EXT4-fs (loop2): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 1641.825261][T15625] EXT4-fs (loop9): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 1641.991900][ T30] audit: type=1326 audit(1756358987.977:138): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17395 comm="syz.5.2811" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fcdddf8ebe9 code=0x7ffc0000 [ 1642.021246][T17413] ext4 filesystem being mounted at /570/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 1642.170119][ T30] audit: type=1326 audit(1756358987.987:139): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17395 comm="syz.5.2811" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcdddf8ebe9 code=0x7ffc0000 [ 1642.385977][ T30] audit: type=1326 audit(1756358987.987:140): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17395 comm="syz.5.2811" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcdddf8ebe9 code=0x7ffc0000 [ 1642.472651][ T30] audit: type=1326 audit(1756358988.017:141): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17395 comm="syz.5.2811" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fcdddf8ebe9 code=0x7ffc0000 [ 1642.498065][ T30] audit: type=1326 audit(1756358988.017:142): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17395 comm="syz.5.2811" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcdddf8ebe9 code=0x7ffc0000 [ 1643.373257][ T5865] EXT4-fs (loop2): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 1644.562414][T17445] tipc: Started in network mode [ 1644.567510][T17445] tipc: Node identity fe80000000000000000000000000001, cluster identity 4711 [ 1644.587660][T17445] tipc: Enabled bearer , priority 10 [ 1645.702377][ T5871] tipc: Node number set to 4269801488 [ 1646.652091][T17458] Can't find ip_set type hash:i [ 1647.475045][T17467] loop1: detected capacity change from 0 to 256 [ 1647.731778][T17477] loop3: detected capacity change from 0 to 256 [ 1647.745948][T17477] exfat: Deprecated parameter 'utf8' [ 1647.751628][T17477] exfat: Deprecated parameter 'namecase' [ 1647.758093][T17477] exfat: Deprecated parameter 'namecase' [ 1647.763909][T17477] exfat: Deprecated parameter 'utf8' [ 1648.006111][T17477] exFAT-fs (loop3): failed to load upcase table (idx : 0x00012153, chksum : 0x5270ca8d, utbl_chksum : 0xe619d30d) [ 1648.581775][T17467] FAT-fs (loop1): Directory bread(block 64) failed [ 1649.527042][T17467] FAT-fs (loop1): Directory bread(block 65) failed [ 1649.561024][T17467] FAT-fs (loop1): Directory bread(block 66) failed [ 1649.621089][T17467] FAT-fs (loop1): Directory bread(block 67) failed [ 1649.642535][T17467] FAT-fs (loop1): Directory bread(block 68) failed [ 1649.649107][T17467] FAT-fs (loop1): Directory bread(block 69) failed [ 1649.711319][T17467] FAT-fs (loop1): Directory bread(block 70) failed [ 1649.717880][T17467] FAT-fs (loop1): Directory bread(block 71) failed [ 1649.753820][T17483] loop3: detected capacity change from 0 to 128 [ 1649.786899][T17467] FAT-fs (loop1): Directory bread(block 72) failed [ 1649.806604][T17483] EXT4-fs (loop3): Test dummy encryption mode enabled [ 1649.821391][T17467] FAT-fs (loop1): Directory bread(block 73) failed [ 1649.869586][T17483] EXT4-fs (loop3): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 1650.040790][T17483] ext4 filesystem being mounted at /558/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 1650.308803][T17489] loop6: detected capacity change from 0 to 256 [ 1650.316836][T17489] exfat: Unknown parameter '' [ 1650.350215][T17489] loop6: detected capacity change from 0 to 2048 [ 1654.163636][ T5864] EXT4-fs (loop3): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 1654.881457][ T5985] usb 3-1: new high-speed USB device number 3 using dummy_hcd [ 1655.623464][T17511] loop3: detected capacity change from 0 to 512 [ 1655.661714][T17511] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 1655.692585][T17511] EXT4-fs (loop3): orphan cleanup on readonly fs [ 1656.471723][T17511] EXT4-fs error (device loop3): ext4_validate_block_bitmap:441: comm syz.3.2833: bg 0: block 248: padding at end of block bitmap is not set [ 1656.586947][T17511] __quota_error: 23 callbacks suppressed [ 1656.586996][T17511] Quota error (device loop3): write_blk: dquota write failed [ 1656.600853][T17511] Quota error (device loop3): qtree_write_dquot: Error -117 occurred while creating quota [ 1656.610865][T17511] EXT4-fs error (device loop3): ext4_acquire_dquot:6937: comm syz.3.2833: Failed to acquire dquot type 1 [ 1658.491105][ T5985] usb 3-1: Using ep0 maxpacket: 32 [ 1658.499686][ T5985] usb 3-1: config index 0 descriptor too short (expected 156, got 27) [ 1658.522014][T17511] EXT4-fs (loop3): 1 truncate cleaned up [ 1658.701350][ T5985] usb 3-1: too many endpoints for config 0 interface 0 altsetting 191: 144, using maximum allowed: 30 [ 1658.713579][ T5985] usb 3-1: config 0 interface 0 altsetting 191 endpoint 0x87 has an invalid bInterval 0, changing to 7 [ 1658.725337][ T5985] usb 3-1: config 0 interface 0 altsetting 191 has 1 endpoint descriptor, different from the interface descriptor's value: 144 [ 1658.732699][T17511] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 1658.739190][ T5985] usb 3-1: config 0 interface 0 has no altsetting 0 [ 1658.920094][ T5864] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1658.979366][ T5985] usb 3-1: string descriptor 0 read error: -71 [ 1659.061135][ T5985] usb 3-1: New USB device found, idVendor=0f11, idProduct=1021, bcdDevice=86.66 [ 1659.070216][ T5985] usb 3-1: New USB device strings: Mfr=85, Product=120, SerialNumber=172 [ 1659.226432][ T5985] usb 3-1: config 0 descriptor?? [ 1659.266314][ T5985] usb 3-1: can't set config #0, error -71 [ 1660.638437][ T5985] usb 3-1: USB disconnect, device number 3 [ 1662.855075][T17532] futex_wake_op: syz.3.2841 tries to shift op by 144; fix this program [ 1664.167665][T17540] loop1: detected capacity change from 0 to 128 [ 1664.198576][T17538] loop2: detected capacity change from 0 to 256 [ 1664.224483][T17540] EXT4-fs (loop1): Test dummy encryption mode enabled [ 1664.315293][T17540] EXT4-fs (loop1): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 1664.477608][T17540] ext4 filesystem being mounted at /66/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 1664.611570][T17538] FAT-fs (loop2): Directory bread(block 64) failed [ 1664.679212][T17538] FAT-fs (loop2): Directory bread(block 65) failed [ 1664.750705][T17538] FAT-fs (loop2): Directory bread(block 66) failed [ 1664.757258][T17538] FAT-fs (loop2): Directory bread(block 67) failed [ 1664.981524][T17538] FAT-fs (loop2): Directory bread(block 68) failed [ 1664.988100][T17538] FAT-fs (loop2): Directory bread(block 69) failed [ 1665.782711][T17538] FAT-fs (loop2): Directory bread(block 70) failed [ 1665.789269][T17538] FAT-fs (loop2): Directory bread(block 71) failed [ 1665.807098][T15627] EXT4-fs (loop1): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 1665.862789][T17538] FAT-fs (loop2): Directory bread(block 72) failed [ 1665.869344][T17538] FAT-fs (loop2): Directory bread(block 73) failed [ 1668.127094][ T1298] ieee802154 phy0 wpan0: encryption failed: -22 [ 1668.133463][ T1298] ieee802154 phy1 wpan1: encryption failed: -22 [ 1668.358210][T15632] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 1668.416795][T15632] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 1668.424721][T15632] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 1668.433028][T15632] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 1668.464369][T15632] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 1668.500950][ T5878] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 1668.509877][ T5878] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 1668.527015][ T5878] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 1668.541924][ T5878] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 1668.559329][ T5878] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 1668.579423][T17555] lo speed is unknown, defaulting to 1000 [ 1668.891335][T17558] lo speed is unknown, defaulting to 1000 [ 1670.611160][ T5878] Bluetooth: hci0: command tx timeout [ 1670.681768][ T5878] Bluetooth: hci3: command tx timeout [ 1671.406370][T14080] netdevsim netdevsim9 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1671.806739][T15632] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 1672.034047][T17583] loop2: detected capacity change from 0 to 256 [ 1672.095276][T15632] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 1672.107600][T15632] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 1672.126040][T15632] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 1672.146525][T15632] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 1672.681769][T15632] Bluetooth: hci0: command tx timeout [ 1672.761529][T15632] Bluetooth: hci3: command tx timeout [ 1674.853330][T15632] Bluetooth: hci0: command tx timeout [ 1674.858813][ T5878] Bluetooth: hci3: command tx timeout [ 1674.923645][T17588] loop3: detected capacity change from 0 to 128 [ 1675.092028][T17588] EXT4-fs (loop3): Test dummy encryption mode enabled [ 1675.179894][T17588] EXT4-fs (loop3): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 1675.197872][T17588] ext4 filesystem being mounted at /563/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 1675.883781][T14080] netdevsim netdevsim9 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1676.103403][T17555] chnl_net:caif_netlink_parms(): no params data found [ 1676.163751][T17593] tipc: Started in network mode [ 1676.168654][T17593] tipc: Node identity fe80000000000000000000000000001, cluster identity 4711 [ 1676.179224][T17593] tipc: Enabled bearer , priority 10 [ 1676.536003][T17599] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2857'. [ 1676.654218][T17579] lo speed is unknown, defaulting to 1000 [ 1676.980714][T15632] Bluetooth: hci5: command tx timeout [ 1676.986983][T15632] Bluetooth: hci0: command tx timeout [ 1676.991312][ T5878] Bluetooth: hci3: command tx timeout [ 1678.190285][ T5871] tipc: Node number set to 4269801488 [ 1678.470913][T17609] loop1: detected capacity change from 0 to 256 [ 1679.133332][ T5878] Bluetooth: hci5: command tx timeout [ 1680.323977][T14080] netdevsim netdevsim9 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1680.657583][ T5864] EXT4-fs (loop3): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 1681.237498][ T5878] Bluetooth: hci5: command tx timeout [ 1681.276980][T17558] chnl_net:caif_netlink_parms(): no params data found [ 1681.663448][T17615] tipc: Started in network mode [ 1681.668393][T17615] tipc: Node identity fe80000000000000000000000000001, cluster identity 4711 [ 1681.679673][T17615] tipc: Enabled bearer , priority 10 [ 1682.542957][T14080] netdevsim netdevsim9 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1682.790730][ T6038] tipc: Node number set to 4269801488 [ 1683.320702][ T5878] Bluetooth: hci5: command tx timeout [ 1684.621840][T17672] netlink: 20 bytes leftover after parsing attributes in process `syz.3.2868'. [ 1684.781572][T17555] bridge0: port 1(bridge_slave_0) entered blocking state [ 1684.798935][T17555] bridge0: port 1(bridge_slave_0) entered disabled state [ 1684.834250][T17555] bridge_slave_0: entered allmulticast mode [ 1685.452059][T17555] bridge_slave_0: entered promiscuous mode [ 1685.464610][T17555] bridge0: port 2(bridge_slave_1) entered blocking state [ 1685.481667][T17555] bridge0: port 2(bridge_slave_1) entered disabled state [ 1685.488829][T17555] bridge_slave_1: entered allmulticast mode [ 1685.728283][T17555] bridge_slave_1: entered promiscuous mode [ 1685.781370][T17676] tipc: Enabling of bearer rejected, already enabled [ 1687.531824][T17692] loop1: detected capacity change from 0 to 512 [ 1687.620880][T17692] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 1687.673079][T17692] EXT4-fs (loop1): orphan cleanup on readonly fs [ 1687.708873][T17692] EXT4-fs error (device loop1): ext4_validate_block_bitmap:441: comm syz.1.2871: bg 0: block 248: padding at end of block bitmap is not set [ 1687.727609][T17692] Quota error (device loop1): write_blk: dquota write failed [ 1687.735745][T17692] Quota error (device loop1): qtree_write_dquot: Error -117 occurred while creating quota [ 1687.746021][T17692] EXT4-fs error (device loop1): ext4_acquire_dquot:6937: comm syz.1.2871: Failed to acquire dquot type 1 [ 1687.766406][T17692] EXT4-fs (loop1): 1 truncate cleaned up [ 1687.872615][T17692] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 1690.383084][T15627] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1691.796240][T17555] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1691.809186][T17711] loop2: detected capacity change from 0 to 512 [ 1691.830013][T17711] EXT4-fs: quotafile must be on filesystem root [ 1691.921888][T17558] bridge0: port 1(bridge_slave_0) entered blocking state [ 1691.931509][T17558] bridge0: port 1(bridge_slave_0) entered disabled state [ 1691.938751][T17558] bridge_slave_0: entered allmulticast mode [ 1692.120353][T17558] bridge_slave_0: entered promiscuous mode [ 1692.130199][T17558] bridge0: port 2(bridge_slave_1) entered blocking state [ 1692.138414][T17558] bridge0: port 2(bridge_slave_1) entered disabled state [ 1692.148727][T17558] bridge_slave_1: entered allmulticast mode [ 1692.174483][T17558] bridge_slave_1: entered promiscuous mode [ 1692.365891][T17715] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2877'. [ 1693.137371][T17555] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1694.875583][T17558] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1695.228683][T17734] tipc: Enabling of bearer rejected, already enabled [ 1695.836908][T17555] team0: Port device team_slave_0 added [ 1695.898486][T17555] team0: Port device team_slave_1 added [ 1696.017701][T17558] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1696.546644][T17740] loop2: detected capacity change from 0 to 128 [ 1696.584291][T17740] EXT4-fs (loop2): Test dummy encryption mode enabled [ 1696.606405][T17558] team0: Port device team_slave_0 added [ 1696.626130][T17740] EXT4-fs (loop2): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 1696.656168][T14080] bridge_slave_1: left allmulticast mode [ 1696.687894][T17740] ext4 filesystem being mounted at /590/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 1696.711034][T14080] bridge_slave_1: left promiscuous mode [ 1696.716844][T14080] bridge0: port 2(bridge_slave_1) entered disabled state [ 1696.839788][T14080] bridge_slave_0: left allmulticast mode [ 1696.861317][T14080] bridge_slave_0: left promiscuous mode [ 1696.868562][T14080] bridge0: port 1(bridge_slave_0) entered disabled state [ 1698.309313][ T5865] EXT4-fs (loop2): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 1698.327473][T17754] loop1: detected capacity change from 0 to 128 [ 1698.341793][T17754] EXT4-fs (loop1): Test dummy encryption mode enabled [ 1698.382661][T17754] EXT4-fs (loop1): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 1698.399710][T17754] ext4 filesystem being mounted at /79/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 1699.098301][T17750] delete_channel: no stack [ 1699.499365][T17763] loop2: detected capacity change from 0 to 128 [ 1699.526206][T15627] EXT4-fs (loop1): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 1699.554814][T17763] EXT4-fs (loop2): Test dummy encryption mode enabled [ 1699.647663][T17763] EXT4-fs (loop2): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 1699.663248][T17763] ext4 filesystem being mounted at /592/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 1700.832759][ T5865] EXT4-fs (loop2): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 1700.923603][T14080] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1700.935933][T14080] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1700.959397][T14080] bond0 (unregistering): Released all slaves [ 1701.051846][T17555] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1701.058940][T17555] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1701.093270][T17555] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1701.182022][T17558] team0: Port device team_slave_1 added [ 1701.308224][T17771] tipc: Started in network mode [ 1701.361351][T17771] tipc: Node identity deddc756d1b2, cluster identity 4711 [ 1701.372072][T17771] tipc: Enabled bearer , priority 0 [ 1701.391730][T17772] syzkaller0: entered promiscuous mode [ 1701.406021][T17772] syzkaller0: entered allmulticast mode [ 1701.416116][T14080] tipc: Disabling bearer [ 1701.435263][T14080] tipc: Left network mode [ 1701.440142][T17555] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1701.464905][T17555] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1701.466107][T17770] Falling back ldisc for ttyprintk. [ 1701.491985][ C0] vkms_vblank_simulate: vblank timer overrun [ 1701.510928][T17555] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1701.626000][T17764] tipc: Resetting bearer [ 1701.711473][T17764] tipc: Disabling bearer [ 1703.327190][T12542] Bluetooth: hci5: command 0x0405 tx timeout [ 1703.610142][T17558] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1703.634103][T17558] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1703.660027][ C0] vkms_vblank_simulate: vblank timer overrun [ 1703.669629][T17558] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1703.683257][T17558] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1703.690217][T17558] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1703.824027][T17558] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1704.200990][T17579] chnl_net:caif_netlink_parms(): no params data found [ 1704.283145][T17555] hsr_slave_0: entered promiscuous mode [ 1704.289846][T17555] hsr_slave_1: entered promiscuous mode [ 1704.333000][T17555] debugfs: 'hsr0' already exists in 'hsr' [ 1704.338746][T17555] Cannot create hsr debugfs directory [ 1704.515077][T17808] loop2: detected capacity change from 0 to 256 [ 1704.616674][T17808] FAT-fs (loop2): Directory bread(block 64) failed [ 1704.657596][T17808] FAT-fs (loop2): Directory bread(block 65) failed [ 1704.730508][T17808] FAT-fs (loop2): Directory bread(block 66) failed [ 1704.737245][T17808] FAT-fs (loop2): Directory bread(block 67) failed [ 1704.761768][T17808] FAT-fs (loop2): Directory bread(block 68) failed [ 1704.789252][T17808] FAT-fs (loop2): Directory bread(block 69) failed [ 1704.806060][T17808] FAT-fs (loop2): Directory bread(block 70) failed [ 1704.820592][T17808] FAT-fs (loop2): Directory bread(block 71) failed [ 1704.837347][T17808] FAT-fs (loop2): Directory bread(block 72) failed [ 1704.859677][T17808] FAT-fs (loop2): Directory bread(block 73) failed [ 1707.127268][T17834] netlink: 'syz.1.2900': attribute type 1 has an invalid length. [ 1707.887424][T17840] loop3: detected capacity change from 0 to 512 [ 1707.932159][T17840] EXT4-fs: quotafile must be on filesystem root [ 1708.052961][T17558] hsr_slave_0: entered promiscuous mode [ 1708.073401][T17842] loop1: detected capacity change from 0 to 512 [ 1708.080489][T17558] hsr_slave_1: entered promiscuous mode [ 1708.093896][T17842] EXT4-fs: quotafile must be on filesystem root [ 1708.332257][T17558] debugfs: 'hsr0' already exists in 'hsr' [ 1708.338028][T17558] Cannot create hsr debugfs directory [ 1709.315217][T14080] hsr_slave_0: left promiscuous mode [ 1709.335962][T14080] hsr_slave_1: left promiscuous mode [ 1709.349307][T14080] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1709.358015][T14080] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1709.367393][T14080] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1709.377289][T14080] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1709.430329][T14080] veth1_macvtap: left promiscuous mode [ 1709.437040][T14080] veth0_macvtap: left promiscuous mode [ 1709.445163][T14080] veth1_vlan: left promiscuous mode [ 1709.451782][T14080] veth0_vlan: left promiscuous mode [ 1710.109119][T17855] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2903'. [ 1710.848897][T14080] team0 (unregistering): Port device team_slave_1 removed [ 1710.936792][T14080] team0 (unregistering): Port device team_slave_0 removed [ 1712.302169][T17866] loop3: detected capacity change from 0 to 128 [ 1712.333076][T17866] EXT4-fs (loop3): Test dummy encryption mode enabled [ 1712.385152][T17866] EXT4-fs (loop3): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 1712.422730][T17866] ext4 filesystem being mounted at /578/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 1712.435758][T17873] loop1: detected capacity change from 0 to 512 [ 1712.568535][T17873] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1712.782594][T17579] bridge0: port 1(bridge_slave_0) entered blocking state [ 1712.797012][T17579] bridge0: port 1(bridge_slave_0) entered disabled state [ 1712.998388][T17579] bridge_slave_0: entered allmulticast mode [ 1713.375434][T17579] bridge_slave_0: entered promiscuous mode [ 1713.429303][T17579] bridge0: port 2(bridge_slave_1) entered blocking state [ 1713.471717][T17579] bridge0: port 2(bridge_slave_1) entered disabled state [ 1713.521700][T17579] bridge_slave_1: entered allmulticast mode [ 1713.554308][T17579] bridge_slave_1: entered promiscuous mode [ 1713.583135][ T5864] EXT4-fs (loop3): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 1714.465535][T17579] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1714.481584][T17888] loop3: detected capacity change from 0 to 128 [ 1714.495042][T17579] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1715.274489][T17891] loop2: detected capacity change from 0 to 512 [ 1715.441127][T17888] EXT4-fs (loop3): Test dummy encryption mode enabled [ 1715.471339][T17891] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 1715.498766][T17891] EXT4-fs (loop2): orphan cleanup on readonly fs [ 1715.520873][T17891] EXT4-fs error (device loop2): ext4_validate_block_bitmap:441: comm syz.2.2912: bg 0: block 248: padding at end of block bitmap is not set [ 1715.588581][T17891] Quota error (device loop2): write_blk: dquota write failed [ 1715.596669][T17891] Quota error (device loop2): qtree_write_dquot: Error -117 occurred while creating quota [ 1715.607059][T17891] EXT4-fs error (device loop2): ext4_acquire_dquot:6937: comm syz.2.2912: Failed to acquire dquot type 1 [ 1715.683148][T17891] EXT4-fs (loop2): 1 truncate cleaned up [ 1715.703155][T17888] EXT4-fs (loop3): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 1715.779663][T17891] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 1716.291297][T17888] ext4 filesystem being mounted at /580/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 1717.407073][T15627] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1717.628830][T17579] team0: Port device team_slave_0 added [ 1717.661700][T17579] team0: Port device team_slave_1 added [ 1717.736069][T17579] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1717.744792][T17579] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1717.953188][T17579] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1718.023719][T17579] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1718.075311][ T5864] EXT4-fs (loop3): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 1718.100490][T17579] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1718.157916][T17900] loop1: detected capacity change from 0 to 128 [ 1718.207001][T17900] EXT4-fs (loop1): Test dummy encryption mode enabled [ 1718.236799][T17579] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1718.290620][ T5865] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1718.320483][T17900] EXT4-fs (loop1): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 1718.404112][T17900] ext4 filesystem being mounted at /87/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 1720.001559][T15627] EXT4-fs (loop1): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 1720.007617][T17579] hsr_slave_0: entered promiscuous mode [ 1720.047887][T17579] hsr_slave_1: entered promiscuous mode [ 1720.069076][T17579] debugfs: 'hsr0' already exists in 'hsr' [ 1720.092883][T17579] Cannot create hsr debugfs directory [ 1720.477464][T14080] netdevsim netdevsim6 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1721.434930][T14080] netdevsim netdevsim6 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1721.519005][T17920] loop1: detected capacity change from 0 to 256 [ 1721.825976][T17920] FAT-fs (loop1): Directory bread(block 64) failed [ 1721.841636][T17920] FAT-fs (loop1): Directory bread(block 65) failed [ 1721.912851][T17920] FAT-fs (loop1): Directory bread(block 66) failed [ 1721.935252][T14080] netdevsim netdevsim6 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1721.951655][T17920] FAT-fs (loop1): Directory bread(block 67) failed [ 1721.988353][T17920] FAT-fs (loop1): Directory bread(block 68) failed [ 1722.003975][T17927] loop3: detected capacity change from 0 to 512 [ 1722.083284][T17920] FAT-fs (loop1): Directory bread(block 69) failed [ 1722.177694][T17927] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1722.190787][T17927] ext4 filesystem being mounted at /582/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 1722.309050][T17920] FAT-fs (loop1): Directory bread(block 70) failed [ 1722.662313][T17920] FAT-fs (loop1): Directory bread(block 71) failed [ 1722.668959][T17920] FAT-fs (loop1): Directory bread(block 72) failed [ 1722.695228][T17920] FAT-fs (loop1): Directory bread(block 73) failed [ 1723.771990][T14080] netdevsim netdevsim6 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1724.797660][ T5864] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1726.251792][T17953] loop2: detected capacity change from 0 to 256 [ 1726.973672][T14080] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1729.152908][T12542] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 1729.161753][T12542] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 1729.178280][T12542] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 1729.186765][T12542] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 1729.201105][T12542] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 1729.343694][ T5878] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 1729.353853][ T5878] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 1729.362435][ T5878] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 1729.370383][ T5878] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 1729.378364][ T5878] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 1729.571400][ T1298] ieee802154 phy0 wpan0: encryption failed: -22 [ 1729.578192][ T1298] ieee802154 phy1 wpan1: encryption failed: -22 [ 1729.605206][T14080] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1729.673878][T17956] lo speed is unknown, defaulting to 1000 [ 1729.934369][T14080] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1730.188484][T17954] lo speed is unknown, defaulting to 1000 [ 1730.314379][T14080] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1731.274821][ T5878] Bluetooth: hci0: command tx timeout [ 1731.497817][ T5878] Bluetooth: hci2: command tx timeout [ 1732.406360][T12542] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 1732.418355][T12542] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 1732.441678][T12542] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 1733.291698][T12542] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 1733.299555][T12542] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 1733.383864][ T5878] Bluetooth: hci0: command tx timeout [ 1733.561396][ T5878] Bluetooth: hci2: command tx timeout [ 1733.816013][T14080] bridge_slave_1: left allmulticast mode [ 1733.899214][T14080] bridge_slave_1: left promiscuous mode [ 1733.928042][T14080] bridge0: port 2(bridge_slave_1) entered disabled state [ 1734.109584][T14080] bridge_slave_0: left allmulticast mode [ 1734.267981][T14080] bridge_slave_0: left promiscuous mode [ 1734.288428][T14080] bridge0: port 1(bridge_slave_0) entered disabled state [ 1734.360083][T14080] bridge_slave_1: left allmulticast mode [ 1734.379185][T14080] bridge_slave_1: left promiscuous mode [ 1734.399626][T14080] bridge0: port 2(bridge_slave_1) entered disabled state [ 1734.428913][T14080] bridge_slave_0: left allmulticast mode [ 1734.449220][T14080] bridge_slave_0: left promiscuous mode [ 1734.481684][T14080] bridge0: port 1(bridge_slave_0) entered disabled state [ 1735.432652][ T5878] Bluetooth: hci3: command tx timeout [ 1735.438781][ T5878] Bluetooth: hci0: command tx timeout [ 1735.640994][T12542] Bluetooth: hci2: command tx timeout [ 1737.485375][ T5878] Bluetooth: hci3: command tx timeout [ 1737.491325][T12542] Bluetooth: hci0: command tx timeout [ 1737.518700][T18010] ieee802154 phy0 wpan0: encryption failed: -22 [ 1737.721151][T12542] Bluetooth: hci2: command tx timeout [ 1737.773860][T14080] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1737.793298][T14080] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1737.811426][T14080] bond0 (unregistering): Released all slaves [ 1739.088575][T14080] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1739.106371][T14080] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1739.117440][T14080] bond0 (unregistering): Released all slaves [ 1739.560663][T12542] Bluetooth: hci3: command tx timeout [ 1740.869697][T18031] loop2: detected capacity change from 0 to 128 [ 1740.917431][T18031] EXT4-fs (loop2): Test dummy encryption mode enabled [ 1740.976144][T18031] EXT4-fs (loop2): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 1741.000124][T18031] ext4 filesystem being mounted at /612/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 1741.443879][T14080] tipc: Left network mode [ 1741.641257][T12542] Bluetooth: hci3: command tx timeout [ 1742.094946][T17974] lo speed is unknown, defaulting to 1000 [ 1743.409155][T17954] chnl_net:caif_netlink_parms(): no params data found [ 1743.723886][T18046] siw: device registration error -23 [ 1744.332022][ T5865] EXT4-fs (loop2): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 1745.678544][T17956] chnl_net:caif_netlink_parms(): no params data found [ 1745.943471][T18064] loop3: detected capacity change from 0 to 512 [ 1745.997111][T18064] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 1746.801243][T18064] EXT4-fs (loop3): orphan cleanup on readonly fs [ 1746.811603][T18064] EXT4-fs error (device loop3): ext4_validate_block_bitmap:441: comm syz.3.2944: bg 0: block 248: padding at end of block bitmap is not set [ 1746.827044][T18064] Quota error (device loop3): write_blk: dquota write failed [ 1746.834555][T18064] Quota error (device loop3): qtree_write_dquot: Error -117 occurred while creating quota [ 1746.844609][T18064] EXT4-fs error (device loop3): ext4_acquire_dquot:6937: comm syz.3.2944: Failed to acquire dquot type 1 [ 1747.765099][T18064] EXT4-fs (loop3): 1 truncate cleaned up [ 1747.811196][T18064] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 1749.190442][ T5864] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1749.704456][T17954] bridge0: port 1(bridge_slave_0) entered blocking state [ 1749.750734][T17954] bridge0: port 1(bridge_slave_0) entered disabled state [ 1749.773383][T17954] bridge_slave_0: entered allmulticast mode [ 1750.131718][T17954] bridge_slave_0: entered promiscuous mode [ 1750.205665][T17954] bridge0: port 2(bridge_slave_1) entered blocking state [ 1750.316437][T17954] bridge0: port 2(bridge_slave_1) entered disabled state [ 1750.367419][T17954] bridge_slave_1: entered allmulticast mode [ 1750.433615][T17954] bridge_slave_1: entered promiscuous mode [ 1751.797872][T17954] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1752.440391][T18094] loop3: detected capacity change from 0 to 128 [ 1752.482800][T18094] EXT4-fs (loop3): Test dummy encryption mode enabled [ 1752.502001][T17954] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1752.528306][T18094] EXT4-fs (loop3): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 1752.705309][T18094] ext4 filesystem being mounted at /589/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 1752.742075][T17956] bridge0: port 1(bridge_slave_0) entered blocking state [ 1752.749213][T17956] bridge0: port 1(bridge_slave_0) entered disabled state [ 1752.764091][T17956] bridge_slave_0: entered allmulticast mode [ 1752.775435][T17956] bridge_slave_0: entered promiscuous mode [ 1753.845038][ T5864] EXT4-fs (loop3): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 1754.247566][T17956] bridge0: port 2(bridge_slave_1) entered blocking state [ 1754.963030][T17956] bridge0: port 2(bridge_slave_1) entered disabled state [ 1754.988852][T17956] bridge_slave_1: entered allmulticast mode [ 1755.017591][T17956] bridge_slave_1: entered promiscuous mode [ 1755.038719][T17954] team0: Port device team_slave_0 added [ 1755.067773][T17954] team0: Port device team_slave_1 added [ 1755.192602][T18115] loop3: detected capacity change from 0 to 256 [ 1756.067399][T18115] FAT-fs (loop3): Directory bread(block 64) failed [ 1756.090273][T18115] FAT-fs (loop3): Directory bread(block 65) failed [ 1756.117825][T18115] FAT-fs (loop3): Directory bread(block 66) failed [ 1756.126195][T18115] FAT-fs (loop3): Directory bread(block 67) failed [ 1756.341633][T18115] FAT-fs (loop3): Directory bread(block 68) failed [ 1756.348163][T18115] FAT-fs (loop3): Directory bread(block 69) failed [ 1756.371690][T18115] FAT-fs (loop3): Directory bread(block 70) failed [ 1757.091415][T18115] FAT-fs (loop3): Directory bread(block 71) failed [ 1757.098995][T18115] FAT-fs (loop3): Directory bread(block 72) failed [ 1757.118304][T18115] FAT-fs (loop3): Directory bread(block 73) failed [ 1757.186626][T17974] chnl_net:caif_netlink_parms(): no params data found [ 1757.271699][T14080] hsr_slave_0: left promiscuous mode [ 1757.330618][T14080] hsr_slave_1: left promiscuous mode [ 1757.467977][T14080] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1757.476099][T14080] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1757.492277][T14080] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1757.499667][T14080] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1757.532235][T14080] hsr_slave_0: left promiscuous mode [ 1757.538317][T14080] hsr_slave_1: left promiscuous mode [ 1758.542181][T14080] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1758.744924][T14080] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1758.758125][T14080] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1758.765983][T14080] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1758.803271][T14080] veth1_macvtap: left promiscuous mode [ 1758.808875][T14080] veth0_macvtap: left promiscuous mode [ 1759.720858][T14080] veth1_vlan: left promiscuous mode [ 1759.726352][T14080] veth0_vlan: left promiscuous mode [ 1760.320170][T14080] veth1_macvtap: left promiscuous mode [ 1760.329723][T14080] veth0_macvtap: left promiscuous mode [ 1760.336088][T14080] veth1_vlan: left promiscuous mode [ 1760.351395][T14080] veth0_vlan: left promiscuous mode [ 1760.503928][T18135] loop3: detected capacity change from 0 to 128 [ 1760.623418][T18135] EXT4-fs (loop3): Test dummy encryption mode enabled [ 1760.693787][T18135] EXT4-fs (loop3): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 1760.795584][T18135] ext4 filesystem being mounted at /592/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 1760.852071][T18141] loop2: detected capacity change from 0 to 128 [ 1760.909866][T18141] EXT4-fs (loop2): Test dummy encryption mode enabled [ 1761.492078][T18141] EXT4-fs (loop2): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 1761.829994][T18141] ext4 filesystem being mounted at /615/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 1762.197999][ T5864] EXT4-fs (loop3): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 1764.368884][ T5865] EXT4-fs (loop2): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 1764.532122][T18163] loop2: detected capacity change from 0 to 256 [ 1765.113002][T18163] FAT-fs (loop2): Directory bread(block 64) failed [ 1765.142885][T18163] FAT-fs (loop2): Directory bread(block 65) failed [ 1765.175665][T18163] FAT-fs (loop2): Directory bread(block 66) failed [ 1765.203390][T18163] FAT-fs (loop2): Directory bread(block 67) failed [ 1765.209984][T18163] FAT-fs (loop2): Directory bread(block 68) failed [ 1765.268633][T18163] FAT-fs (loop2): Directory bread(block 69) failed [ 1765.275805][T18163] FAT-fs (loop2): Directory bread(block 70) failed [ 1765.310720][T18163] FAT-fs (loop2): Directory bread(block 71) failed [ 1765.317381][T18163] FAT-fs (loop2): Directory bread(block 72) failed [ 1765.324334][T18163] FAT-fs (loop2): Directory bread(block 73) failed [ 1765.620187][T14080] team0 (unregistering): Port device team_slave_1 removed [ 1765.715290][T14080] team0 (unregistering): Port device team_slave_0 removed [ 1768.123938][T14080] team0 (unregistering): Port device team_slave_1 removed [ 1768.205141][T14080] team0 (unregistering): Port device team_slave_0 removed [ 1768.880376][T17956] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1768.902624][T17954] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1768.909637][T17954] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1768.938748][T17954] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1769.014253][T17956] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1770.103355][T17954] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1770.110358][T17954] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1770.136272][ C0] vkms_vblank_simulate: vblank timer overrun [ 1770.177553][T17954] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1770.341251][T17718] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 1770.381669][T17956] team0: Port device team_slave_0 added [ 1770.396502][T17956] team0: Port device team_slave_1 added [ 1770.681292][T17718] usb 2-1: Using ep0 maxpacket: 32 [ 1770.688522][T17718] usb 2-1: config index 0 descriptor too short (expected 156, got 27) [ 1770.697237][T17718] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1771.692948][T17718] usb 2-1: config 0 has no interfaces? [ 1771.724173][T17718] usb 2-1: New USB device found, idVendor=0f11, idProduct=1021, bcdDevice=86.66 [ 1772.401414][T17974] bridge0: port 1(bridge_slave_0) entered blocking state [ 1772.661935][T17718] usb 2-1: New USB device strings: Mfr=85, Product=120, SerialNumber=172 [ 1772.686640][T17974] bridge0: port 1(bridge_slave_0) entered disabled state [ 1772.718028][T17718] usb 2-1: Product: syz [ 1772.720892][T17974] bridge_slave_0: entered allmulticast mode [ 1772.727512][T17718] usb 2-1: Manufacturer: syz [ 1772.734288][T17718] usb 2-1: SerialNumber: syz [ 1772.739750][T18201] loop2: detected capacity change from 0 to 128 [ 1772.743326][T17718] usb 2-1: config 0 descriptor?? [ 1772.756698][T17974] bridge_slave_0: entered promiscuous mode [ 1772.785964][T17974] bridge0: port 2(bridge_slave_1) entered blocking state [ 1772.829960][T18201] EXT4-fs (loop2): Test dummy encryption mode enabled [ 1772.848408][T17974] bridge0: port 2(bridge_slave_1) entered disabled state [ 1772.894420][T17974] bridge_slave_1: entered allmulticast mode [ 1772.929849][T17974] bridge_slave_1: entered promiscuous mode [ 1772.954680][T18201] EXT4-fs (loop2): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 1772.980450][T18201] ext4 filesystem being mounted at /621/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 1773.052315][T17718] usb 2-1: USB disconnect, device number 2 [ 1773.399500][T17974] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1773.419173][T17956] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1773.947640][T17956] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1773.990726][T17956] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1773.993848][ T5865] EXT4-fs (loop2): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 1774.019674][T17956] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1774.068694][T17956] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1774.147105][T17956] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1774.247053][T17954] hsr_slave_0: entered promiscuous mode [ 1774.375845][T17954] hsr_slave_1: entered promiscuous mode [ 1774.397369][T17974] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1779.678435][T18223] loop2: detected capacity change from 0 to 512 [ 1780.700706][T18223] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1780.713947][T18223] ext4 filesystem being mounted at /624/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 1782.025490][T17974] team0: Port device team_slave_0 added [ 1782.296562][T17956] hsr_slave_0: entered promiscuous mode [ 1782.304663][T17956] hsr_slave_1: entered promiscuous mode [ 1782.305573][ T5865] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1782.311581][T17956] debugfs: 'hsr0' already exists in 'hsr' [ 1782.324920][T17956] Cannot create hsr debugfs directory [ 1782.341969][T17974] team0: Port device team_slave_1 added [ 1783.683806][T18235] loop2: detected capacity change from 0 to 256 [ 1785.045605][T17974] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1785.082999][T17974] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1785.201306][T17974] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1789.382244][T17974] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1789.914813][T17974] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1790.713640][T17974] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1791.037743][ T1298] ieee802154 phy0 wpan0: encryption failed: -22 [ 1791.061690][ T1298] ieee802154 phy1 wpan1: encryption failed: -22 [ 1792.623532][ T5878] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 1792.640819][ T5878] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 1792.677592][ T5878] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 1792.685853][ T5878] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 1792.710819][ T5878] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 1794.724186][T18290] loop3: detected capacity change from 0 to 128 [ 1794.799645][T18290] EXT4-fs (loop3): Test dummy encryption mode enabled [ 1794.923295][T18290] EXT4-fs (loop3): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 1794.988577][T18290] ext4 filesystem being mounted at /600/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 1795.481458][ T5878] Bluetooth: hci5: command tx timeout [ 1795.798689][T12542] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 1795.815897][T12542] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 1795.824331][T12542] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 1795.833103][T12542] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 1795.841022][T12542] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 1796.415772][T18283] lo speed is unknown, defaulting to 1000 [ 1797.074202][ T5864] EXT4-fs (loop3): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 1797.339364][ T5878] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 1797.356407][T18310] sock: sock_set_timeout: `syz.1.2996' (pid 18310) tries to set negative timeout [ 1797.371875][ T5878] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 1797.379770][ T5878] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 1797.395159][ T5878] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 1797.404605][ T5878] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 1797.562727][T12542] Bluetooth: hci5: command tx timeout [ 1797.872642][T18296] lo speed is unknown, defaulting to 1000 [ 1798.121181][T12542] Bluetooth: hci6: command tx timeout [ 1799.342830][T18307] lo speed is unknown, defaulting to 1000 [ 1799.481669][T12542] Bluetooth: hci0: command tx timeout [ 1799.640975][T12542] Bluetooth: hci5: command tx timeout [ 1799.927971][T18283] chnl_net:caif_netlink_parms(): no params data found [ 1799.970292][T14080] bridge_slave_1: left allmulticast mode [ 1799.987669][T14080] bridge_slave_1: left promiscuous mode [ 1799.997883][T14080] bridge0: port 2(bridge_slave_1) entered disabled state [ 1800.007900][T14080] bridge_slave_0: left allmulticast mode [ 1800.014274][T14080] bridge_slave_0: left promiscuous mode [ 1800.020029][T14080] bridge0: port 1(bridge_slave_0) entered disabled state [ 1800.033308][T14080] bridge_slave_1: left allmulticast mode [ 1800.039016][T14080] bridge_slave_1: left promiscuous mode [ 1800.047230][T14080] bridge0: port 2(bridge_slave_1) entered disabled state [ 1800.056719][T14080] bridge_slave_0: left allmulticast mode [ 1800.065352][T14080] bridge_slave_0: left promiscuous mode [ 1800.072454][T14080] bridge0: port 1(bridge_slave_0) entered disabled state [ 1800.085293][T14080] bridge_slave_1: left allmulticast mode [ 1800.092050][T14080] bridge_slave_1: left promiscuous mode [ 1800.097779][T14080] bridge0: port 2(bridge_slave_1) entered disabled state [ 1800.108039][T14080] bridge_slave_0: left allmulticast mode [ 1800.114408][T14080] bridge_slave_0: left promiscuous mode [ 1800.120129][T14080] bridge0: port 1(bridge_slave_0) entered disabled state [ 1800.202093][T12542] Bluetooth: hci6: command tx timeout [ 1800.257609][T14080] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1800.269472][T14080] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1800.280181][T14080] bond0 (unregistering): Released all slaves [ 1800.431127][T14080] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1800.449835][T14080] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1800.467075][T14080] bond0 (unregistering): Released all slaves [ 1800.604716][T14080] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1800.619227][T14080] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1800.634175][T14080] bond0 (unregistering): Released all slaves [ 1800.710067][T18355] warning: `syz.3.3012' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 1800.858420][T18368] netlink: 16 bytes leftover after parsing attributes in process `syz.3.3016'. [ 1800.895206][T18368] IPv6: NLM_F_CREATE should be specified when creating new route [ 1801.097599][T14080] hsr_slave_0: left promiscuous mode [ 1801.150214][T14080] hsr_slave_1: left promiscuous mode [ 1801.169793][T14080] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1801.188869][T14080] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1801.215296][T14080] hsr_slave_0: left promiscuous mode [ 1801.228907][T14080] hsr_slave_1: left promiscuous mode [ 1801.237692][T14080] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1801.253532][T14080] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1801.279812][T14080] hsr_slave_0: left promiscuous mode [ 1801.289745][T14080] hsr_slave_1: left promiscuous mode [ 1801.306649][T14080] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1801.314903][T14080] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1801.565523][T14080] team0 (unregistering): Port device team_slave_1 removed [ 1801.573203][T12542] Bluetooth: hci0: command tx timeout [ 1801.599928][T14080] team0 (unregistering): Port device team_slave_0 removed [ 1801.720864][T12542] Bluetooth: hci5: command tx timeout [ 1802.046011][T14080] team0 (unregistering): Port device team_slave_1 removed [ 1802.076875][T14080] team0 (unregistering): Port device team_slave_0 removed [ 1802.291283][T12542] Bluetooth: hci6: command tx timeout [ 1802.422787][T14080] team0 (unregistering): Port device team_slave_1 removed [ 1802.456333][T14080] team0 (unregistering): Port device team_slave_0 removed [ 1802.707179][T18397] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3022'. [ 1802.827371][T18403] netlink: 'syz.2.3024': attribute type 1 has an invalid length. [ 1802.836057][T18403] netlink: 'syz.2.3024': attribute type 1 has an invalid length. [ 1802.848864][T18403] netlink: 216 bytes leftover after parsing attributes in process `syz.2.3024'. [ 1802.899875][T18296] chnl_net:caif_netlink_parms(): no params data found [ 1803.083850][T18409] netlink: 104 bytes leftover after parsing attributes in process `syz.2.3027'. [ 1803.287117][T18283] bridge0: port 1(bridge_slave_0) entered blocking state [ 1803.307887][T18283] bridge0: port 1(bridge_slave_0) entered disabled state [ 1803.316955][T18283] bridge_slave_0: entered allmulticast mode [ 1803.326084][T18283] bridge_slave_0: entered promiscuous mode [ 1803.335914][T18283] bridge0: port 2(bridge_slave_1) entered blocking state [ 1803.343725][T18283] bridge0: port 2(bridge_slave_1) entered disabled state [ 1803.351289][T18283] bridge_slave_1: entered allmulticast mode [ 1803.364251][T18283] bridge_slave_1: entered promiscuous mode [ 1803.565676][T18307] chnl_net:caif_netlink_parms(): no params data found [ 1803.641206][T12542] Bluetooth: hci0: command tx timeout [ 1803.717868][T18283] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1803.953655][T18296] bridge0: port 1(bridge_slave_0) entered blocking state [ 1803.968192][T18296] bridge0: port 1(bridge_slave_0) entered disabled state [ 1803.976287][T18296] bridge_slave_0: entered allmulticast mode [ 1803.986608][T18296] bridge_slave_0: entered promiscuous mode [ 1804.006223][T18283] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1804.068284][T18439] netlink: 200 bytes leftover after parsing attributes in process `syz.1.3038'. [ 1804.091419][T18296] bridge0: port 2(bridge_slave_1) entered blocking state [ 1804.124751][T18296] bridge0: port 2(bridge_slave_1) entered disabled state [ 1804.133713][T18296] bridge_slave_1: entered allmulticast mode [ 1804.148182][T18296] bridge_slave_1: entered promiscuous mode [ 1804.212987][T18442] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3040'. [ 1804.256066][T18283] team0: Port device team_slave_0 added [ 1804.274250][T18446] netlink: 108 bytes leftover after parsing attributes in process `syz.3.3040'. [ 1804.358980][T18296] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1804.371598][T12542] Bluetooth: hci6: command tx timeout [ 1804.418920][T18283] team0: Port device team_slave_1 added [ 1804.491463][T18307] bridge0: port 1(bridge_slave_0) entered blocking state [ 1804.498786][T18307] bridge0: port 1(bridge_slave_0) entered disabled state [ 1804.507979][T18307] bridge_slave_0: entered allmulticast mode [ 1804.516935][T18307] bridge_slave_0: entered promiscuous mode [ 1804.538373][T18296] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1804.613205][T18434] lo speed is unknown, defaulting to 1000 [ 1804.613505][T18307] bridge0: port 2(bridge_slave_1) entered blocking state [ 1804.632146][T18307] bridge0: port 2(bridge_slave_1) entered disabled state [ 1804.639377][T18307] bridge_slave_1: entered allmulticast mode [ 1804.647624][T18307] bridge_slave_1: entered promiscuous mode [ 1804.765816][T18296] team0: Port device team_slave_0 added [ 1804.779284][T18296] team0: Port device team_slave_1 added [ 1804.787794][T18283] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1804.796878][T18283] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1804.824607][T18283] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1804.900337][T18283] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1804.911275][T18283] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1804.938883][T18283] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1804.966762][T18307] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1804.995056][T18296] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1805.003089][T18296] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1805.038594][T18296] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1805.067028][T18296] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1805.081363][T18296] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1805.119339][T18296] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1805.139130][T18307] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1805.323285][T18307] team0: Port device team_slave_0 added [ 1805.377869][T18283] hsr_slave_0: entered promiscuous mode [ 1805.385826][T18283] hsr_slave_1: entered promiscuous mode [ 1805.393001][T18283] debugfs: 'hsr0' already exists in 'hsr' [ 1805.398726][T18283] Cannot create hsr debugfs directory [ 1805.437506][T18307] team0: Port device team_slave_1 added [ 1805.444370][T18458] lo speed is unknown, defaulting to 1000 [ 1805.562524][T18296] hsr_slave_0: entered promiscuous mode [ 1805.569330][T18296] hsr_slave_1: entered promiscuous mode [ 1805.576429][T18296] debugfs: 'hsr0' already exists in 'hsr' [ 1805.582822][T18296] Cannot create hsr debugfs directory [ 1805.596196][T18307] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1805.603402][T18307] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1805.632191][T18307] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1805.644877][T18307] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1805.652655][T18307] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1805.679715][T18307] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1805.720689][T12542] Bluetooth: hci0: command tx timeout [ 1805.999120][T18307] hsr_slave_0: entered promiscuous mode [ 1806.005972][T18307] hsr_slave_1: entered promiscuous mode [ 1806.013238][T18307] debugfs: 'hsr0' already exists in 'hsr' [ 1806.018964][T18307] Cannot create hsr debugfs directory [ 1806.145335][T14080] bridge_slave_1: left allmulticast mode [ 1806.151838][T14080] bridge_slave_1: left promiscuous mode [ 1806.157624][T14080] bridge0: port 2(bridge_slave_1) entered disabled state [ 1806.168776][T14080] bridge_slave_0: left allmulticast mode [ 1806.176027][T14080] bridge_slave_0: left promiscuous mode [ 1806.183233][T14080] bridge0: port 1(bridge_slave_0) entered disabled state [ 1806.200460][T14080] bridge_slave_1: left allmulticast mode [ 1806.211520][T14080] bridge_slave_1: left promiscuous mode [ 1806.225774][T14080] bridge0: port 2(bridge_slave_1) entered disabled state [ 1806.228885][T18470] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 1806.258898][T14080] bridge_slave_0: left allmulticast mode [ 1806.267915][T14080] bridge_slave_0: left promiscuous mode [ 1806.279930][T14080] bridge0: port 1(bridge_slave_0) entered disabled state [ 1806.314338][T14080] bridge_slave_1: left allmulticast mode [ 1806.322587][T14080] bridge_slave_1: left promiscuous mode [ 1806.328371][T14080] bridge0: port 2(bridge_slave_1) entered disabled state [ 1806.346652][T14080] bridge_slave_0: left allmulticast mode [ 1806.354825][T14080] bridge_slave_0: left promiscuous mode [ 1806.362007][T14080] bridge0: port 1(bridge_slave_0) entered disabled state [ 1806.637710][T14080] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1806.650246][T14080] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1806.672356][T14080] bond0 (unregistering): Released all slaves [ 1806.823338][T14080] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1806.846209][T14080] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1806.865646][T14080] bond0 (unregistering): Released all slaves [ 1807.009154][T14080] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1807.023234][T14080] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1807.033825][T14080] bond0 (unregistering): Released all slaves [ 1807.299396][T14080] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1807.310134][T14080] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1807.325595][T14080] hsr_slave_0: left promiscuous mode [ 1807.335328][T14080] hsr_slave_1: left promiscuous mode [ 1807.343514][T14080] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1807.358437][T14080] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1807.374289][T14080] hsr_slave_0: left promiscuous mode [ 1807.380521][T14080] hsr_slave_1: left promiscuous mode [ 1807.389937][T14080] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1807.412564][T14080] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1807.478582][T14080] team0 (unregistering): Port device team_slave_1 removed [ 1807.512499][T14080] team0 (unregistering): Port device team_slave_0 removed [ 1807.800680][T12542] Bluetooth: hci0: command tx timeout [ 1807.849970][T14080] team0 (unregistering): Port device team_slave_1 removed [ 1807.884476][T14080] team0 (unregistering): Port device team_slave_0 removed [ 1808.208451][T14080] team0 (unregistering): Port device team_slave_1 removed [ 1808.237505][T14080] team0 (unregistering): Port device team_slave_0 removed [ 1808.655554][T18489] netlink: 64 bytes leftover after parsing attributes in process `syz.2.3055'. [ 1808.959397][T18497] netlink: 796 bytes leftover after parsing attributes in process `syz.2.3059'. [ 1808.996493][ T5871] IPVS: starting estimator thread 0... [ 1809.117804][T18504] IPVS: using max 25 ests per chain, 60000 per kthread [ 1809.147770][T18283] netdevsim netdevsim8 netdevsim0: renamed from eth0 [ 1809.183933][T18283] netdevsim netdevsim8 netdevsim1: renamed from eth1 [ 1809.217693][T18283] netdevsim netdevsim8 netdevsim2: renamed from eth2 [ 1809.336819][T18283] netdevsim netdevsim8 netdevsim3: renamed from eth3 [ 1809.506248][T18296] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 1809.546635][T18296] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 1809.575710][T18296] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 1809.588287][T18296] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 1809.655530][T18527] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3068'. [ 1809.707655][T18527] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3068'. [ 1809.758722][T18535] netlink: 96 bytes leftover after parsing attributes in process `syz.3.3069'. [ 1809.768086][T12489] netdevsim netdevsim2 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 1809.778455][T12489] netdevsim netdevsim2 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 1809.825803][T12489] netdevsim netdevsim2 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 1809.849016][T12489] netdevsim netdevsim2 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 1809.973619][T18307] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 1810.003858][T18307] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 1810.049174][T18542] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3072'. [ 1810.091218][T18307] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 1810.148810][T18307] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 1810.191278][T18283] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1810.317596][T18283] 8021q: adding VLAN 0 to HW filter on device team0 [ 1810.383093][ T8069] bridge0: port 1(bridge_slave_0) entered blocking state [ 1810.390312][ T8069] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1810.458276][T18296] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1810.504213][ T8069] bridge0: port 2(bridge_slave_1) entered blocking state [ 1810.511440][ T8069] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1810.635913][T18296] 8021q: adding VLAN 0 to HW filter on device team0 [ 1810.706904][ T8069] bridge0: port 1(bridge_slave_0) entered blocking state [ 1810.714104][ T8069] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1810.778693][T14080] bridge0: port 2(bridge_slave_1) entered blocking state [ 1810.785913][T14080] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1810.892873][T18296] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 1810.903486][T18296] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 1811.128010][T18578] siw: device registration error -23 [ 1811.164746][T18307] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1811.453810][T18307] 8021q: adding VLAN 0 to HW filter on device team0 [ 1811.523478][T12489] bridge0: port 1(bridge_slave_0) entered blocking state [ 1811.530674][T12489] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1811.546752][T12489] bridge0: port 2(bridge_slave_1) entered blocking state [ 1811.553929][T12489] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1812.316628][T18296] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1812.589946][T18606] netlink: 64 bytes leftover after parsing attributes in process `syz.1.3084'. [ 1812.612151][T18283] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1814.349733][T18307] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1815.657968][T18633] mkiss: ax0: crc mode is auto. [ 1815.761522][T18307] veth0_vlan: entered promiscuous mode [ 1815.805603][T18307] veth1_vlan: entered promiscuous mode [ 1816.137442][T18296] veth0_vlan: entered promiscuous mode [ 1816.243185][T18296] veth1_vlan: entered promiscuous mode [ 1816.344816][T18283] veth0_vlan: entered promiscuous mode [ 1816.402246][T18307] veth0_macvtap: entered promiscuous mode [ 1816.456490][T18650] loop3: detected capacity change from 0 to 256 [ 1816.467949][T18296] veth0_macvtap: entered promiscuous mode [ 1816.524782][T18307] veth1_macvtap: entered promiscuous mode [ 1816.535446][T18296] veth1_macvtap: entered promiscuous mode [ 1816.635114][T18283] veth1_vlan: entered promiscuous mode [ 1816.641454][T18650] FAT-fs (loop3): Directory bread(block 64) failed [ 1816.647983][T18650] FAT-fs (loop3): Directory bread(block 65) failed [ 1816.707713][T18650] FAT-fs (loop3): Directory bread(block 66) failed [ 1816.743783][T18650] FAT-fs (loop3): Directory bread(block 67) failed [ 1816.750449][T18650] FAT-fs (loop3): Directory bread(block 68) failed [ 1816.789981][T18307] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1816.825358][T18650] FAT-fs (loop3): Directory bread(block 69) failed [ 1816.840703][T18650] FAT-fs (loop3): Directory bread(block 70) failed [ 1816.843522][T18296] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1816.848331][T18650] FAT-fs (loop3): Directory bread(block 71) failed [ 1816.888478][T18296] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1816.927285][T18650] FAT-fs (loop3): Directory bread(block 72) failed [ 1816.946052][T18307] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1816.960822][T18650] FAT-fs (loop3): Directory bread(block 73) failed [ 1817.027041][T17649] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1817.289522][T18283] veth0_macvtap: entered promiscuous mode [ 1817.311397][T17638] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1817.326331][T17638] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1817.951352][ T5878] Bluetooth: hci0: command 0x0405 tx timeout [ 1818.172321][T18283] veth1_macvtap: entered promiscuous mode [ 1818.187576][T17638] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1818.226090][T17638] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1818.392238][T17638] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1818.609610][T17649] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1819.531434][T17649] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1819.618468][T18283] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1819.679451][T18283] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1819.779664][T17638] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1819.794009][T17638] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1819.958535][T17660] netdevsim netdevsim8 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1819.968865][T17638] netdevsim netdevsim8 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1819.998214][T17638] netdevsim netdevsim8 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1820.086954][T17638] netdevsim netdevsim8 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1820.130251][T13966] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1820.174826][T13966] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1820.384675][T17638] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1820.419621][T17638] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1820.693041][T13966] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1820.711618][T13966] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1820.798891][ T8069] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1820.871744][ T8069] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1820.993810][T18685] lo speed is unknown, defaulting to 1000 [ 1821.080474][T13966] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1821.119822][T13966] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1821.127195][T18691] loop7: detected capacity change from 0 to 512 [ 1821.204699][T18691] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1821.639190][T18702] loop8: detected capacity change from 0 to 256 [ 1821.647202][T18702] exfat: Unknown parameter '' [ 1821.682023][T18702] loop8: detected capacity change from 0 to 2048 [ 1824.395111][T18296] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1825.649736][T18714] netlink: 20 bytes leftover after parsing attributes in process `syz.0.3109'. [ 1826.019021][T18716] loop7: detected capacity change from 0 to 128 [ 1826.083468][T18716] EXT4-fs (loop7): Test dummy encryption mode enabled [ 1826.287108][T18716] EXT4-fs (loop7): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 1826.351621][T18716] ext4 filesystem being mounted at /2/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 1827.512403][T18296] EXT4-fs (loop7): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 1827.529729][T12542] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 1827.850340][T12542] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 1827.906275][T12542] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 1827.925091][T12542] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 1827.939656][T12542] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 1828.662653][T18726] lo speed is unknown, defaulting to 1000 [ 1829.940780][T18753] netlink: 'syz.3.3120': attribute type 4 has an invalid length. [ 1830.024227][T18758] netlink: 'syz.3.3120': attribute type 4 has an invalid length. [ 1830.043275][T12542] Bluetooth: hci1: command tx timeout [ 1830.418908][T12489] netdevsim netdevsim2 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1830.461362][T12489] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1830.700602][T12489] netdevsim netdevsim2 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1830.744169][T12489] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1831.108451][T12489] netdevsim netdevsim2 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1831.184542][T12489] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1831.188440][T18778] loop7: detected capacity change from 0 to 256 [ 1831.527857][T12489] netdevsim netdevsim2 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1831.594120][T12489] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1831.654554][T18778] FAT-fs (loop7): Directory bread(block 64) failed [ 1831.675784][T18778] FAT-fs (loop7): Directory bread(block 65) failed [ 1831.711418][T18778] FAT-fs (loop7): Directory bread(block 66) failed [ 1831.768056][T18778] FAT-fs (loop7): Directory bread(block 67) failed [ 1831.801902][T18778] FAT-fs (loop7): Directory bread(block 68) failed [ 1831.813214][T18778] FAT-fs (loop7): Directory bread(block 69) failed [ 1831.819825][T18778] FAT-fs (loop7): Directory bread(block 70) failed [ 1831.842364][T18778] FAT-fs (loop7): Directory bread(block 71) failed [ 1831.855523][T18783] loop3: detected capacity change from 0 to 128 [ 1831.860181][T18778] FAT-fs (loop7): Directory bread(block 72) failed [ 1831.876299][T18778] FAT-fs (loop7): Directory bread(block 73) failed [ 1831.916357][T18783] EXT4-fs (loop3): Test dummy encryption mode enabled [ 1833.139753][T12542] Bluetooth: hci1: command tx timeout [ 1834.281752][T18783] EXT4-fs (loop3): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 1834.376807][T18783] ext4 filesystem being mounted at /641/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 1834.623633][T18803] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3131'. [ 1835.241916][T12542] Bluetooth: hci1: command tx timeout [ 1835.484109][T18807] loop8: detected capacity change from 0 to 128 [ 1835.573113][T18807] EXT4-fs (loop8): Test dummy encryption mode enabled [ 1835.921522][T18807] EXT4-fs (loop8): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 1836.065026][T18726] chnl_net:caif_netlink_parms(): no params data found [ 1836.104667][T18807] ext4 filesystem being mounted at /7/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 1836.237793][T18814] netlink: 'syz.1.3135': attribute type 4 has an invalid length. [ 1836.279753][T18815] netlink: 'syz.1.3135': attribute type 4 has an invalid length. [ 1836.510438][T12489] bridge_slave_0: left allmulticast mode [ 1836.520165][T12489] bridge_slave_0: left promiscuous mode [ 1836.535562][T12489] bridge0: port 1(bridge_slave_0) entered disabled state [ 1837.323045][ T5864] EXT4-fs (loop3): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 1837.331453][T12542] Bluetooth: hci1: command tx timeout [ 1837.390952][T18283] EXT4-fs (loop8): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 1837.416118][T18822] loop3: detected capacity change from 0 to 256 [ 1837.526872][T18822] FAT-fs (loop3): Directory bread(block 64) failed [ 1837.556481][T18822] FAT-fs (loop3): Directory bread(block 65) failed [ 1837.606986][T18822] FAT-fs (loop3): Directory bread(block 66) failed [ 1837.631331][T18822] FAT-fs (loop3): Directory bread(block 67) failed [ 1837.670325][T18822] FAT-fs (loop3): Directory bread(block 68) failed [ 1837.708169][T18822] FAT-fs (loop3): Directory bread(block 69) failed [ 1837.720378][T18822] FAT-fs (loop3): Directory bread(block 70) failed [ 1837.740865][T18822] FAT-fs (loop3): Directory bread(block 71) failed [ 1837.791834][T18822] FAT-fs (loop3): Directory bread(block 72) failed [ 1837.828522][T18822] FAT-fs (loop3): Directory bread(block 73) failed [ 1838.007741][T18834] loop7: detected capacity change from 0 to 512 [ 1841.304650][T18834] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 1841.366491][T18834] EXT4-fs (loop7): orphan cleanup on readonly fs [ 1841.375138][T18834] EXT4-fs error (device loop7): ext4_validate_block_bitmap:441: comm syz.7.3141: bg 0: block 248: padding at end of block bitmap is not set [ 1841.426791][T18834] Quota error (device loop7): write_blk: dquota write failed [ 1841.434466][T18834] Quota error (device loop7): qtree_write_dquot: Error -117 occurred while creating quota [ 1841.444558][T18834] EXT4-fs error (device loop7): ext4_acquire_dquot:6937: comm syz.7.3141: Failed to acquire dquot type 1 [ 1841.490935][T18834] EXT4-fs (loop7): 1 truncate cleaned up [ 1841.525162][T18834] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 1842.657926][T18296] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1842.860037][T18847] loop3: detected capacity change from 0 to 512 [ 1842.871492][T18847] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 1842.892645][T18847] EXT4-fs (loop3): orphan cleanup on readonly fs [ 1842.902446][T18847] EXT4-fs error (device loop3): ext4_validate_block_bitmap:441: comm syz.3.3143: bg 0: block 248: padding at end of block bitmap is not set [ 1842.918714][T18847] Quota error (device loop3): write_blk: dquota write failed [ 1842.926422][T18847] Quota error (device loop3): qtree_write_dquot: Error -117 occurred while creating quota [ 1842.936422][T18847] EXT4-fs error (device loop3): ext4_acquire_dquot:6937: comm syz.3.3143: Failed to acquire dquot type 1 [ 1842.949336][T18847] EXT4-fs (loop3): 1 truncate cleaned up [ 1843.169932][T18847] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 1844.229994][T12489] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1844.278193][T12489] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1844.317022][T12489] bond0 (unregistering): (slave bridge_slave_1): Releasing backup interface [ 1844.380037][T12489] bond0 (unregistering): Released all slaves [ 1846.336625][T12489] tipc: Disabling bearer [ 1846.342289][T12489] tipc: Left network mode [ 1846.980349][T18726] bridge0: port 1(bridge_slave_0) entered blocking state [ 1847.010311][T18726] bridge0: port 1(bridge_slave_0) entered disabled state [ 1847.019957][T18726] bridge_slave_0: entered allmulticast mode [ 1847.304108][T18891] fuse: Bad value for 'fd' [ 1847.704053][T18726] bridge_slave_0: entered promiscuous mode [ 1847.886778][T18726] bridge0: port 2(bridge_slave_1) entered blocking state [ 1848.074951][T18726] bridge0: port 2(bridge_slave_1) entered disabled state [ 1848.083082][T18726] bridge_slave_1: entered allmulticast mode [ 1848.089679][T18892] netlink: 64 bytes leftover after parsing attributes in process `syz.0.3156'. [ 1848.093717][T18726] bridge_slave_1: entered promiscuous mode [ 1848.249473][T18726] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1848.322488][T18726] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1848.683049][T18903] loop7: detected capacity change from 0 to 128 [ 1848.696918][T18903] EXT4-fs (loop7): Test dummy encryption mode enabled [ 1849.508052][T18903] EXT4-fs (loop7): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 1849.558150][T18903] ext4 filesystem being mounted at /13/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 1849.575656][T18726] team0: Port device team_slave_0 added [ 1850.964565][T18726] team0: Port device team_slave_1 added [ 1850.985599][T18296] EXT4-fs (loop7): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 1851.572707][T18726] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1851.610187][T18726] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1851.783778][T18726] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1852.031937][T18726] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1852.038920][T18726] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1852.298943][T18726] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1852.461483][ T1298] ieee802154 phy0 wpan0: encryption failed: -22 [ 1852.467811][ T1298] ieee802154 phy1 wpan1: encryption failed: -22 [ 1852.840177][T18726] hsr_slave_0: entered promiscuous mode [ 1852.872673][T18726] hsr_slave_1: entered promiscuous mode [ 1853.684613][T18936] netlink: 20 bytes leftover after parsing attributes in process `syz.0.3168'. [ 1854.137536][T18940] loop8: detected capacity change from 0 to 512 [ 1854.574826][T18940] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 1854.615247][T18940] EXT4-fs (loop8): orphan cleanup on readonly fs [ 1854.631250][T18940] EXT4-fs error (device loop8): ext4_validate_block_bitmap:441: comm syz.8.3169: bg 0: block 248: padding at end of block bitmap is not set [ 1854.648310][T18940] Quota error (device loop8): write_blk: dquota write failed [ 1854.656378][T18940] Quota error (device loop8): qtree_write_dquot: Error -117 occurred while creating quota [ 1854.666616][T18940] EXT4-fs error (device loop8): ext4_acquire_dquot:6937: comm syz.8.3169: Failed to acquire dquot type 1 [ 1854.696468][T18940] EXT4-fs (loop8): 1 truncate cleaned up [ 1855.476050][T18940] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 1856.736994][T18283] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1856.765265][T18943] netlink: 64 bytes leftover after parsing attributes in process `syz.0.3170'. [ 1861.191810][ T5878] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 1861.202139][ T5878] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 1861.410812][ T5878] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 1861.423420][ T5878] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 1861.431234][ T5878] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 1863.135585][T18978] lo speed is unknown, defaulting to 1000 [ 1863.480767][ T5878] Bluetooth: hci2: command tx timeout [ 1864.071580][T12489] hsr_slave_0: left promiscuous mode [ 1864.220775][T12489] hsr_slave_1: left promiscuous mode [ 1864.322045][T12489] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1865.162688][T12489] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1865.171624][T12489] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1865.315266][T18844] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1865.406964][T12489] veth1_macvtap: left promiscuous mode [ 1865.431586][T12489] veth0_macvtap: left promiscuous mode [ 1865.437269][T12489] veth1_vlan: left promiscuous mode [ 1865.487560][T12489] veth0_vlan: left promiscuous mode [ 1865.603331][ T5878] Bluetooth: hci2: command tx timeout [ 1866.894143][T19022] nvme_fabrics: missing parameter 'transport=%s' [ 1866.900495][T19022] nvme_fabrics: missing parameter 'nqn=%s' [ 1867.759539][ T5878] Bluetooth: hci2: command tx timeout [ 1869.800684][ T5878] Bluetooth: hci2: command tx timeout [ 1870.858768][T19053] netlink: 64 bytes leftover after parsing attributes in process `syz.0.3206'. [ 1871.559155][T12489] team0 (unregistering): Port device team_slave_1 removed [ 1871.709668][T12489] team0 (unregistering): Port device team_slave_0 removed [ 1872.849648][T19064] siw: device registration error -23 [ 1873.220774][T12493] lo speed is unknown, defaulting to 1000 [ 1873.256256][T12493] infiniband 3yz0: ib_query_port failed (-19) [ 1873.365524][T19067] loop8: detected capacity change from 0 to 128 [ 1873.423264][T19067] EXT4-fs (loop8): Test dummy encryption mode enabled [ 1873.476184][T19067] EXT4-fs (loop8): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 1873.548888][T19067] ext4 filesystem being mounted at /19/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 1873.798897][T18726] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 1873.873050][T18726] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 1873.953204][T18726] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 1874.436286][T18726] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 1874.972982][T18978] chnl_net:caif_netlink_parms(): no params data found [ 1875.925939][T18726] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1876.027935][T18978] bridge0: port 1(bridge_slave_0) entered blocking state [ 1876.035566][T18978] bridge0: port 1(bridge_slave_0) entered disabled state [ 1876.043622][T18978] bridge_slave_0: entered allmulticast mode [ 1876.056561][T18978] bridge_slave_0: entered promiscuous mode [ 1876.081964][T18978] bridge0: port 2(bridge_slave_1) entered blocking state [ 1876.089175][T18978] bridge0: port 2(bridge_slave_1) entered disabled state [ 1876.096372][T18978] bridge_slave_1: entered allmulticast mode [ 1876.103879][T18978] bridge_slave_1: entered promiscuous mode [ 1876.373683][T12489] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1876.663236][T18726] 8021q: adding VLAN 0 to HW filter on device team0 [ 1877.380793][T18283] EXT4-fs (loop8): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 1877.464914][T12489] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1877.821438][T18978] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1877.869945][T19112] netlink: 64 bytes leftover after parsing attributes in process `syz.8.3218'. [ 1877.978282][T12489] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1878.056309][T18253] bridge0: port 1(bridge_slave_0) entered blocking state [ 1878.063538][T18253] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1878.142125][T18253] bridge0: port 2(bridge_slave_1) entered blocking state [ 1878.149323][T18253] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1879.043779][T19117] loop8: detected capacity change from 0 to 2048 [ 1879.070333][T12489] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1879.094583][T19117] EXT4-fs: Ignoring removed mblk_io_submit option [ 1879.237356][T18643] udevd[18643]: incorrect ext4 checksum on /dev/loop8 [ 1879.250784][T19117] EXT4-fs (loop8): VFS: Found ext4 filesystem with unknown checksum algorithm. [ 1879.288023][T18642] udevd[18642]: incorrect ext4 checksum on /dev/loop8 [ 1879.323619][T18978] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1879.664056][T19126] netlink: 'syz.8.3220': attribute type 6 has an invalid length. [ 1880.562060][T18978] team0: Port device team_slave_0 added [ 1880.623688][T18978] team0: Port device team_slave_1 added [ 1880.935560][T19137] netlink: 12 bytes leftover after parsing attributes in process `syz.7.3226'. [ 1881.667528][T19139] loop8: detected capacity change from 0 to 128 [ 1881.707998][T19139] EXT4-fs (loop8): Test dummy encryption mode enabled [ 1881.776176][T18978] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1881.798330][T19139] EXT4-fs (loop8): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 1881.848251][T18978] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1881.890820][T18978] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1881.904028][T18978] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1881.916563][T18978] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1881.918676][T19139] ext4 filesystem being mounted at /24/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 1881.972855][T18978] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1882.000314][T18726] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 1883.399644][T18283] EXT4-fs (loop8): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 1884.214316][T18978] hsr_slave_0: entered promiscuous mode [ 1884.248889][T18978] hsr_slave_1: entered promiscuous mode [ 1884.277768][T18978] debugfs: 'hsr0' already exists in 'hsr' [ 1884.307551][T18978] Cannot create hsr debugfs directory [ 1884.524722][T12489] bridge_slave_0: left allmulticast mode [ 1884.546242][T12489] bridge_slave_0: left promiscuous mode [ 1884.568259][T12489] bridge0: port 1(bridge_slave_0) entered disabled state [ 1884.991116][T19183] netlink: 12 bytes leftover after parsing attributes in process `syz.8.3238'. [ 1888.562812][T12542] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 1888.574496][T12542] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 1888.583530][T12542] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 1888.592005][T12542] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 1888.611631][T12542] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 1890.761030][ T5878] Bluetooth: hci3: command tx timeout [ 1891.282412][T19225] loop7: detected capacity change from 0 to 256 [ 1891.402832][T19225] FAT-fs (loop7): Directory bread(block 64) failed [ 1891.410130][T19225] FAT-fs (loop7): Directory bread(block 65) failed [ 1891.444418][T19225] FAT-fs (loop7): Directory bread(block 66) failed [ 1891.478600][T19225] FAT-fs (loop7): Directory bread(block 67) failed [ 1891.506425][T19225] FAT-fs (loop7): Directory bread(block 68) failed [ 1891.529157][T19225] FAT-fs (loop7): Directory bread(block 69) failed [ 1891.536877][T19225] FAT-fs (loop7): Directory bread(block 70) failed [ 1891.545508][T19225] FAT-fs (loop7): Directory bread(block 71) failed [ 1891.552873][T19225] FAT-fs (loop7): Directory bread(block 72) failed [ 1891.559581][T19225] FAT-fs (loop7): Directory bread(block 73) failed [ 1891.560186][T12489] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1891.591572][T12489] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1891.850445][T12489] bond0 (unregistering): (slave bridge_slave_1): Releasing backup interface [ 1892.661168][T12489] bond0 (unregistering): Released all slaves [ 1892.706020][T12489] bond1 (unregistering): Released all slaves [ 1892.850961][ T5878] Bluetooth: hci3: command tx timeout [ 1893.037575][T19236] loop7: detected capacity change from 0 to 512 [ 1893.106026][T19236] EXT4-fs: quotafile must be on filesystem root [ 1893.406979][T19235] netlink: 8 bytes leftover after parsing attributes in process `syz.7.3250'. [ 1893.424052][T19235] vlan2: entered allmulticast mode [ 1893.429184][T19235] dummy0: entered allmulticast mode [ 1893.974253][T12489] tipc: Left network mode [ 1894.921267][ T5878] Bluetooth: hci3: command tx timeout [ 1895.458055][T19251] binder: BINDER_SET_CONTEXT_MGR already set [ 1895.478397][T19251] binder: 19250:19251 ioctl 4018620d 200000004a80 returned -16 [ 1897.674587][ T5878] Bluetooth: hci3: command tx timeout [ 1898.844034][T19269] netlink: 64 bytes leftover after parsing attributes in process `syz.7.3258'. [ 1900.071756][T19289] binder: BINDER_SET_CONTEXT_MGR already set [ 1900.104505][T19289] binder: 19288:19289 ioctl 4018620d 200000004a80 returned -16 [ 1901.293799][T19201] chnl_net:caif_netlink_parms(): no params data found [ 1902.362948][T19327] sock: sock_set_timeout: `syz.0.3271' (pid 19327) tries to set negative timeout [ 1902.616739][T19332] netlink: 48 bytes leftover after parsing attributes in process `syz.0.3272'. [ 1903.631739][T19201] bridge0: port 1(bridge_slave_0) entered blocking state [ 1903.701335][T19201] bridge0: port 1(bridge_slave_0) entered disabled state [ 1903.721472][T19201] bridge_slave_0: entered allmulticast mode [ 1903.737476][T19201] bridge_slave_0: entered promiscuous mode [ 1903.789526][T18978] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 1903.836979][T19201] bridge0: port 2(bridge_slave_1) entered blocking state [ 1903.884094][T19201] bridge0: port 2(bridge_slave_1) entered disabled state [ 1903.891876][T19201] bridge_slave_1: entered allmulticast mode [ 1903.900975][T19201] bridge_slave_1: entered promiscuous mode [ 1904.012767][T18978] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 1904.048104][T18978] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 1904.183865][T19201] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1904.206550][T18978] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 1904.249168][T19346] netlink: 24 bytes leftover after parsing attributes in process `syz.1.3276'. [ 1904.275299][T19346] netlink: 24 bytes leftover after parsing attributes in process `syz.1.3276'. [ 1904.319171][T19201] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1904.381419][T19350] netlink: 4 bytes leftover after parsing attributes in process `syz.8.3277'. [ 1904.794750][T19201] team0: Port device team_slave_0 added [ 1904.841853][T19201] team0: Port device team_slave_1 added [ 1905.771963][T19201] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1905.825359][T19201] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1905.926044][T19201] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1906.036399][T19201] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1906.055224][T19201] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1906.163811][T19201] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1906.675315][T19389] netlink: 20 bytes leftover after parsing attributes in process `syz.8.3288'. [ 1906.979067][T19201] hsr_slave_0: entered promiscuous mode [ 1906.997653][T19201] hsr_slave_1: entered promiscuous mode [ 1907.013111][T19201] debugfs: 'hsr0' already exists in 'hsr' [ 1907.018920][T19201] Cannot create hsr debugfs directory [ 1907.341706][T19396] netlink: 4 bytes leftover after parsing attributes in process `syz.7.3291'. [ 1907.603163][T19400] netlink: 48 bytes leftover after parsing attributes in process `syz.8.3292'. [ 1907.678806][T12489] hsr_slave_0: left promiscuous mode [ 1907.709163][T12489] hsr_slave_1: left promiscuous mode [ 1907.748876][T12489] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1907.798806][T12489] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1907.838651][T12489] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1907.967087][T12489] veth1_macvtap: left promiscuous mode [ 1908.003775][T12489] veth0_macvtap: left promiscuous mode [ 1908.021769][T12489] veth1_vlan: left promiscuous mode [ 1908.041729][T12489] veth0_vlan: left promiscuous mode [ 1908.379007][T19410] loop7: detected capacity change from 0 to 256 [ 1908.386594][T19410] exfat: Deprecated parameter 'utf8' [ 1908.392070][T19410] exfat: Deprecated parameter 'namecase' [ 1908.397837][T19410] exfat: Deprecated parameter 'namecase' [ 1908.403583][T19410] exfat: Deprecated parameter 'utf8' [ 1909.674455][T19410] exFAT-fs (loop7): failed to load upcase table (idx : 0x00012153, chksum : 0x5270ca8d, utbl_chksum : 0xe619d30d) [ 1912.047070][T19429] loop7: detected capacity change from 0 to 512 [ 1912.083654][T19429] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 1912.192257][T19429] EXT4-fs (loop7): orphan cleanup on readonly fs [ 1912.214382][T19429] EXT4-fs error (device loop7): ext4_validate_block_bitmap:441: comm syz.7.3300: bg 0: block 248: padding at end of block bitmap is not set [ 1912.242902][T19429] Quota error (device loop7): write_blk: dquota write failed [ 1912.251066][T19429] Quota error (device loop7): qtree_write_dquot: Error -117 occurred while creating quota [ 1912.261069][T19429] EXT4-fs error (device loop7): ext4_acquire_dquot:6937: comm syz.7.3300: Failed to acquire dquot type 1 [ 1912.285220][T19429] EXT4-fs (loop7): 1 truncate cleaned up [ 1912.329435][T19429] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 1913.164100][T19432] binder: BINDER_SET_CONTEXT_MGR already set [ 1913.204361][T19432] binder: 19431:19432 ioctl 4018620d 200000004a80 returned -16 [ 1914.007041][ T1298] ieee802154 phy0 wpan0: encryption failed: -22 [ 1914.013862][ T1298] ieee802154 phy1 wpan1: encryption failed: -22 [ 1914.389198][T18296] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1914.802801][T19439] netlink: 'syz.7.3303': attribute type 4 has an invalid length. [ 1914.847441][T12489] team0 (unregistering): Port device team_slave_1 removed [ 1914.909022][T12489] team0 (unregistering): Port device team_slave_0 removed [ 1915.329606][T19451] netlink: 12 bytes leftover after parsing attributes in process `syz.8.3307'. [ 1916.053902][ T5878] Bluetooth: hci5: command 0x0406 tx timeout [ 1916.228699][T19438] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3304'. [ 1916.265814][T19438] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3304'. [ 1916.284769][T18978] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1916.397031][T19438] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3304'. [ 1916.439683][T19438] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3304'. [ 1916.666119][T12471] netdevsim netdevsim0 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 1917.930351][T19478] fuse: Bad value for 'fd' [ 1918.683795][T17655] netdevsim netdevsim0 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 1918.713409][T19481] binder: BINDER_SET_CONTEXT_MGR already set [ 1918.740346][T17655] netdevsim netdevsim0 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 1918.749437][T19481] binder: 19480:19481 ioctl 4018620d 200000004a80 returned -16 [ 1919.203452][T18978] 8021q: adding VLAN 0 to HW filter on device team0 [ 1919.219550][T18253] netdevsim netdevsim0 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 1919.314901][T19484] vxcan0: tx drop: invalid da for name 0x0000000000000001 [ 1919.697829][T19490] netlink: 48 bytes leftover after parsing attributes in process `syz.1.3317'. [ 1920.117868][T12489] IPVS: stop unused estimator thread 0... [ 1921.082944][T12542] Bluetooth: hci6: command 0x0406 tx timeout [ 1921.283978][T12542] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 1921.375193][T19502] loop8: detected capacity change from 0 to 512 [ 1921.403565][T12542] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 1921.433329][T12542] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 1921.447803][T12542] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 1921.460262][T12542] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 1921.736307][T19502] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 1921.881912][T19502] EXT4-fs (loop8): orphan cleanup on readonly fs [ 1921.904689][T19502] EXT4-fs error (device loop8): ext4_validate_block_bitmap:441: comm syz.8.3320: bg 0: block 248: padding at end of block bitmap is not set [ 1922.002001][T19502] Quota error (device loop8): write_blk: dquota write failed [ 1922.010146][T19502] Quota error (device loop8): qtree_write_dquot: Error -117 occurred while creating quota [ 1922.020414][T19502] EXT4-fs error (device loop8): ext4_acquire_dquot:6937: comm syz.8.3320: Failed to acquire dquot type 1 [ 1922.060064][T19502] EXT4-fs (loop8): 1 truncate cleaned up [ 1922.135264][T19502] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 1923.560749][T12542] Bluetooth: hci1: command tx timeout [ 1923.795756][T18283] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1923.841021][T19510] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3323'. [ 1923.869669][T19510] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3323'. [ 1925.236542][T19521] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3326'. [ 1925.641137][ T5878] Bluetooth: hci1: command tx timeout [ 1925.959199][T19510] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3323'. [ 1925.973115][T19510] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3323'. [ 1925.984408][T19521] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1925.993402][T19521] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1926.009633][T19521] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1926.020885][T19521] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1926.265417][ T5878] Bluetooth: hci0: command 0x0405 tx timeout [ 1926.668373][T19536] loop8: detected capacity change from 0 to 256 [ 1927.316127][ T9498] netdevsim netdevsim1 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 1927.421957][T19538] tipc: Started in network mode [ 1927.426852][T19538] tipc: Node identity fe80000000000000000000000000001, cluster identity 4711 [ 1927.436672][T19538] tipc: Enabled bearer , priority 10 [ 1927.991439][T12542] Bluetooth: hci1: command tx timeout [ 1928.016628][ T9498] netdevsim netdevsim1 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 1928.046020][ T9498] netdevsim netdevsim1 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 1928.080646][ T9498] netdevsim netdevsim1 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 1928.412509][T19542] loop7: detected capacity change from 0 to 256 [ 1928.419769][T19542] exfat: Deprecated parameter 'utf8' [ 1928.425195][T19542] exfat: Deprecated parameter 'namecase' [ 1928.430965][T19542] exfat: Deprecated parameter 'namecase' [ 1928.436603][T19542] exfat: Deprecated parameter 'utf8' [ 1928.462164][T19542] exFAT-fs (loop7): failed to load upcase table (idx : 0x00012153, chksum : 0x5270ca8d, utbl_chksum : 0xe619d30d) [ 1928.598045][T12493] tipc: Node number set to 4269801488 [ 1929.244961][T17649] bridge_slave_1: left allmulticast mode [ 1929.264140][T17649] bridge_slave_1: left promiscuous mode [ 1929.329551][T17649] bridge0: port 2(bridge_slave_1) entered disabled state [ 1929.432711][T17649] bridge_slave_0: left allmulticast mode [ 1929.439513][T17649] bridge_slave_0: left promiscuous mode [ 1929.626950][T17649] bridge0: port 1(bridge_slave_0) entered disabled state [ 1930.051922][T12542] Bluetooth: hci1: command tx timeout [ 1931.794139][T19574] loop8: detected capacity change from 0 to 128 [ 1931.947496][T19574] EXT4-fs (loop8): Test dummy encryption mode enabled [ 1932.009692][T19574] EXT4-fs (loop8): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 1932.260189][T19574] ext4 filesystem being mounted at /57/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 1933.148558][T17649] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1933.270313][T18283] EXT4-fs (loop8): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 1933.288245][T17649] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1933.335195][T17649] bond0 (unregistering): Released all slaves [ 1933.437916][T19565] lo speed is unknown, defaulting to 1000 [ 1933.443851][T19565] lo speed is unknown, defaulting to 1000 [ 1933.564833][T19565] lo speed is unknown, defaulting to 1000 [ 1933.601453][T19565] infiniband 3yz0: RDMA CMA: cma_listen_on_dev, error -98 [ 1933.727189][T19565] lo speed is unknown, defaulting to 1000 [ 1933.769405][T19565] lo speed is unknown, defaulting to 1000 [ 1933.816453][T19565] lo speed is unknown, defaulting to 1000 [ 1933.816559][T19499] chnl_net:caif_netlink_parms(): no params data found [ 1933.876320][T19565] lo speed is unknown, defaulting to 1000 [ 1933.879851][T19201] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 1933.909516][T19565] lo speed is unknown, defaulting to 1000 [ 1933.923899][T19201] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 1933.941386][T19565] lo speed is unknown, defaulting to 1000 [ 1933.941717][T19201] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 1933.999771][T19565] lo speed is unknown, defaulting to 1000 [ 1934.007047][T19565] lo speed is unknown, defaulting to 1000 [ 1934.125824][T19201] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 1934.268200][T17649] hsr_slave_0: left promiscuous mode [ 1934.284876][T17649] hsr_slave_1: left promiscuous mode [ 1934.480540][T19595] loop7: detected capacity change from 0 to 256 [ 1934.487584][T19595] exfat: Deprecated parameter 'utf8' [ 1934.492953][T19595] exfat: Deprecated parameter 'namecase' [ 1934.498645][T19595] exfat: Deprecated parameter 'namecase' [ 1934.504305][T19595] exfat: Deprecated parameter 'utf8' [ 1934.535781][T17649] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1934.562394][T19595] exFAT-fs (loop7): failed to load upcase table (idx : 0x00012153, chksum : 0x5270ca8d, utbl_chksum : 0xe619d30d) [ 1934.947920][T17649] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1935.015303][T19600] netlink: 12 bytes leftover after parsing attributes in process `syz.8.3344'. [ 1936.849385][T17649] team0 (unregistering): Port device team_slave_1 removed [ 1936.911568][T17649] team0 (unregistering): Port device team_slave_0 removed [ 1937.635800][T19618] netlink: 'syz.0.3349': attribute type 6 has an invalid length. [ 1939.470343][T19644] siw: device registration error -23 [ 1939.976544][T19499] bridge0: port 1(bridge_slave_0) entered blocking state [ 1940.149838][T19499] bridge0: port 1(bridge_slave_0) entered disabled state [ 1940.157168][T19499] bridge_slave_0: entered allmulticast mode [ 1940.165141][T19499] bridge_slave_0: entered promiscuous mode [ 1940.382666][T19499] bridge0: port 2(bridge_slave_1) entered blocking state [ 1941.225033][T19499] bridge0: port 2(bridge_slave_1) entered disabled state [ 1941.249810][ T30] audit: type=1326 audit(1756359289.417:166): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19641 comm="syz.0.3355" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f54dd78ebe9 code=0x7ffc0000 [ 1941.372554][ T30] audit: type=1326 audit(1756359289.417:167): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19641 comm="syz.0.3355" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f54dd78ebe9 code=0x7ffc0000 [ 1941.397426][T19499] bridge_slave_1: entered allmulticast mode [ 1941.404080][ T30] audit: type=1326 audit(1756359289.427:168): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19641 comm="syz.0.3355" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f54dd78ebe9 code=0x7ffc0000 [ 1942.377111][ T30] audit: type=1326 audit(1756359289.437:169): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19641 comm="syz.0.3355" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f54dd78ebe9 code=0x7ffc0000 [ 1942.399545][ T30] audit: type=1326 audit(1756359289.447:170): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19641 comm="syz.0.3355" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f54dd78ebe9 code=0x7ffc0000 [ 1942.405509][T19499] bridge_slave_1: entered promiscuous mode [ 1942.711856][ T30] audit: type=1326 audit(1756359289.467:171): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19641 comm="syz.0.3355" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f54dd78ebe9 code=0x7ffc0000 [ 1942.734348][ T30] audit: type=1326 audit(1756359289.477:172): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19641 comm="syz.0.3355" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f54dd78ebe9 code=0x7ffc0000 [ 1943.279212][ T30] audit: type=1326 audit(1756359289.477:173): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19641 comm="syz.0.3355" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f54dd78ebe9 code=0x7ffc0000 [ 1943.381467][ T30] audit: type=1326 audit(1756359289.507:174): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19641 comm="syz.0.3355" exe="/root/syz-executor" sig=0 arch=c000003e syscall=118 compat=0 ip=0x7f54dd78ebe9 code=0x7ffc0000 [ 1944.160742][ T30] audit: type=1326 audit(1756359289.507:175): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19641 comm="syz.0.3355" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f54dd78ebe9 code=0x7ffc0000 [ 1944.246324][T19662] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3360'. [ 1944.363157][T19662] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1944.390817][T19662] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1944.445667][T19662] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1944.454871][T19662] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1944.515793][T19499] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1944.638142][T19499] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1944.853032][T19499] team0: Port device team_slave_0 added [ 1944.874656][T19499] team0: Port device team_slave_1 added [ 1945.415199][T19499] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1945.433093][T19499] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1945.496077][T19499] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1945.674482][T19499] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1945.682127][T19499] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1946.472207][T19499] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1946.593729][T19697] netlink: 20 bytes leftover after parsing attributes in process `syz.1.3370'. [ 1947.095105][T19705] netlink: 12 bytes leftover after parsing attributes in process `syz.8.3371'. [ 1948.124559][T19499] hsr_slave_0: entered promiscuous mode [ 1948.142273][T19499] hsr_slave_1: entered promiscuous mode [ 1949.007679][ T5878] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 1949.021530][ T5878] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 1949.029908][ T5878] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 1949.040259][ T5878] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 1949.050932][ T5878] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 1951.081152][T15632] Bluetooth: hci2: command tx timeout [ 1952.845447][T19721] lo speed is unknown, defaulting to 1000 [ 1953.180722][T15632] Bluetooth: hci2: command tx timeout [ 1953.308062][T17649] bridge_slave_1: left allmulticast mode [ 1954.271770][T17649] bridge_slave_1: left promiscuous mode [ 1954.277596][T17649] bridge0: port 2(bridge_slave_1) entered disabled state [ 1954.307516][T17649] bridge_slave_0: left allmulticast mode [ 1954.471825][T17649] bridge_slave_0: left promiscuous mode [ 1954.477702][T17649] bridge0: port 1(bridge_slave_0) entered disabled state [ 1955.530912][T15632] Bluetooth: hci2: command tx timeout [ 1957.561885][T15632] Bluetooth: hci2: command tx timeout [ 1959.270454][T17649] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1959.312200][T17649] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1961.501169][T19807] loop8: detected capacity change from 0 to 128 [ 1961.522223][T19807] EXT4-fs (loop8): Test dummy encryption mode enabled [ 1961.576887][T19807] EXT4-fs (loop8): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 1961.593134][T17649] bond0 (unregistering): Released all slaves [ 1961.606743][T19807] ext4 filesystem being mounted at /71/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 1961.707422][T19811] netlink: 'syz.1.3401': attribute type 2 has an invalid length. [ 1961.952281][T19814] loop7: detected capacity change from 0 to 512 [ 1962.290171][T19814] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1962.646027][T18283] EXT4-fs (loop8): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 1962.756235][T17649] hsr_slave_0: left promiscuous mode [ 1962.920718][T17649] hsr_slave_1: left promiscuous mode [ 1962.926687][T17649] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1962.973760][T19823] loop8: detected capacity change from 0 to 128 [ 1962.998904][T18296] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1963.016977][T19823] EXT4-fs (loop8): Test dummy encryption mode enabled [ 1963.024636][T17649] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1963.266294][T19823] EXT4-fs (loop8): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 1963.338640][T19823] ext4 filesystem being mounted at /72/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 1963.954457][T19834] netlink: 'syz.0.3406': attribute type 6 has an invalid length. [ 1965.294152][T17649] team0 (unregistering): Port device team_slave_1 removed [ 1965.324778][T18283] EXT4-fs (loop8): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 1965.818210][T17649] team0 (unregistering): Port device team_slave_0 removed [ 1969.527498][T19863] nvme_fabrics: missing parameter 'transport=%s' [ 1969.533886][T19863] nvme_fabrics: missing parameter 'nqn=%s' [ 1971.215782][T19888] binder: BINDER_SET_CONTEXT_MGR already set [ 1971.259335][T19888] binder: 19887:19888 ioctl 4018620d 200000004a80 returned -16 [ 1972.379600][T19721] chnl_net:caif_netlink_parms(): no params data found [ 1972.745347][T19499] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 1972.777158][T19499] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 1972.870162][T19499] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 1973.140702][T19499] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 1973.147943][T19910] netlink: 4 bytes leftover after parsing attributes in process `syz.8.3425'. [ 1973.207596][T19910] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1973.215499][T19910] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1973.224676][T19910] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1973.235271][T19910] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1973.344193][T19721] bridge0: port 1(bridge_slave_0) entered blocking state [ 1973.363369][T19721] bridge0: port 1(bridge_slave_0) entered disabled state [ 1973.378443][T19721] bridge_slave_0: entered allmulticast mode [ 1973.423181][T19721] bridge_slave_0: entered promiscuous mode [ 1973.446297][T19721] bridge0: port 2(bridge_slave_1) entered blocking state [ 1973.466860][T19721] bridge0: port 2(bridge_slave_1) entered disabled state [ 1973.677252][T19721] bridge_slave_1: entered allmulticast mode [ 1973.685839][T19721] bridge_slave_1: entered promiscuous mode [ 1974.019199][T19932] loop7: detected capacity change from 0 to 256 [ 1975.697985][ T1298] ieee802154 phy0 wpan0: encryption failed: -22 [ 1975.706284][ T1298] ieee802154 phy1 wpan1: encryption failed: -22 [ 1977.474960][T19721] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1977.548543][T19721] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1979.593611][T19721] team0: Port device team_slave_0 added [ 1979.839510][T19721] team0: Port device team_slave_1 added [ 1980.621464][T19721] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1980.629537][T19721] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1980.809843][T19721] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1980.827461][T19963] netlink: 4 bytes leftover after parsing attributes in process `syz.7.3439'. [ 1981.048936][T19963] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1981.142486][T19967] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3440'. [ 1981.822965][T19963] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1981.879674][T19963] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1981.903983][T19963] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1982.620400][T19721] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1982.637682][T19721] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1982.799290][T19721] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1983.138121][ T5878] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 1983.151507][ T5878] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 1983.178023][ T5878] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 1983.189918][ T5878] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 1983.202806][ T5878] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 1983.211780][T17649] bridge_slave_1: left allmulticast mode [ 1983.220537][T17649] bridge_slave_1: left promiscuous mode [ 1983.254253][T17649] bridge0: port 2(bridge_slave_1) entered disabled state [ 1983.278897][T17649] bridge_slave_0: left allmulticast mode [ 1983.293564][T17649] bridge_slave_0: left promiscuous mode [ 1983.309604][T17649] bridge0: port 1(bridge_slave_0) entered disabled state [ 1983.371756][T19989] loop7: detected capacity change from 0 to 2048 [ 1983.379653][T19989] EXT4-fs: Ignoring removed mblk_io_submit option [ 1983.403650][T19989] EXT4-fs (loop7): VFS: Found ext4 filesystem with unknown checksum algorithm. [ 1983.504817][T18642] udevd[18642]: incorrect ext4 checksum on /dev/loop7 [ 1983.803716][T19991] netlink: 'syz.7.3446': attribute type 6 has an invalid length. [ 1984.486961][T17649] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1984.498263][T17649] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1984.517203][T17649] bond0 (unregistering): Released all slaves [ 1984.639428][T19721] hsr_slave_0: entered promiscuous mode [ 1984.675703][T19721] hsr_slave_1: entered promiscuous mode [ 1984.703039][T19721] debugfs: 'hsr0' already exists in 'hsr' [ 1984.719037][T19721] Cannot create hsr debugfs directory [ 1984.994309][T17649] hsr_slave_0: left promiscuous mode [ 1985.023295][T17649] hsr_slave_1: left promiscuous mode [ 1985.047772][T17649] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1985.079752][T17649] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1985.560627][ C0] ================================================================== [ 1985.568741][ C0] BUG: KASAN: slab-use-after-free in rose_timer_expiry+0x471/0x4b0 [ 1985.576627][ C0] Read of size 2 at addr ffff88804a82802a by task syz.1.3449/20004 [ 1985.584494][ C0] [ 1985.586803][ C0] CPU: 0 UID: 0 PID: 20004 Comm: syz.1.3449 Not tainted syzkaller #0 PREEMPT(full) [ 1985.586825][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 1985.586837][ C0] Call Trace: [ 1985.586844][ C0] [ 1985.586851][ C0] dump_stack_lvl+0x189/0x250 [ 1985.586874][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1985.586896][ C0] ? __kasan_check_byte+0x12/0x40 [ 1985.586922][ C0] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1985.586949][ C0] ? rcu_is_watching+0x15/0xb0 [ 1985.586974][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1985.587003][ C0] ? lock_release+0x4b/0x3e0 [ 1985.587035][ C0] ? __virt_addr_valid+0x1c8/0x5c0 [ 1985.587058][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1985.587079][ C0] ? __virt_addr_valid+0x4a5/0x5c0 [ 1985.587102][ C0] print_report+0xca/0x240 [ 1985.587120][ C0] ? rose_timer_expiry+0x471/0x4b0 [ 1985.587143][ C0] kasan_report+0x118/0x150 [ 1985.587170][ C0] ? rose_timer_expiry+0x471/0x4b0 [ 1985.587198][ C0] rose_timer_expiry+0x471/0x4b0 [ 1985.587223][ C0] call_timer_fn+0x17e/0x5f0 [ 1985.587249][ C0] ? __pfx_rose_timer_expiry+0x10/0x10 [ 1985.587272][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1985.587293][ C0] ? call_timer_fn+0xbe/0x5f0 [ 1985.587318][ C0] ? __pfx_call_timer_fn+0x10/0x10 [ 1985.587348][ C0] ? _raw_spin_unlock_irq+0x23/0x50 [ 1985.587372][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1985.587392][ C0] ? lockdep_hardirqs_on+0x9c/0x150 [ 1985.587417][ C0] ? __pfx_rose_timer_expiry+0x10/0x10 [ 1985.587442][ C0] __run_timer_base+0x61a/0x860 [ 1985.587465][ C0] ? ktime_get+0x3e/0x1f0 [ 1985.587491][ C0] ? __pfx___run_timer_base+0x10/0x10 [ 1985.587514][ C0] ? seqcount_lockdep_reader_access+0x15f/0x1c0 [ 1985.587538][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1985.587563][ C0] run_timer_softirq+0xb7/0x180 [ 1985.587593][ C0] handle_softirqs+0x286/0x870 [ 1985.587612][ C0] ? __irq_exit_rcu+0xca/0x1f0 [ 1985.587632][ C0] ? __pfx_handle_softirqs+0x10/0x10 [ 1985.587652][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1985.587672][ C0] ? irqtime_account_irq+0xb6/0x1c0 [ 1985.587695][ C0] __irq_exit_rcu+0xca/0x1f0 [ 1985.587713][ C0] ? __pfx___irq_exit_rcu+0x10/0x10 [ 1985.587733][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1985.587755][ C0] irq_exit_rcu+0x9/0x30 [ 1985.587770][ C0] sysvec_apic_timer_interrupt+0xa6/0xc0 [ 1985.587795][ C0] [ 1985.587801][ C0] [ 1985.587808][ C0] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 1985.587829][ C0] RIP: 0010:_raw_spin_unlock_irqrestore+0xa8/0x110 [ 1985.587854][ C0] Code: 74 05 e8 6b 17 4b f6 48 c7 44 24 20 00 00 00 00 9c 8f 44 24 20 f6 44 24 21 02 75 4f f7 c3 00 02 00 00 74 01 fb bf 01 00 00 00 53 bf 13 f6 65 8b 05 0c 12 24 07 85 c0 74 40 48 c7 04 24 0e 36 [ 1985.587869][ C0] RSP: 0018:ffffc900046d75e0 EFLAGS: 00000206 [ 1985.587885][ C0] RAX: 5e8acdbd4afe0900 RBX: 0000000000000212 RCX: 5e8acdbd4afe0900 [ 1985.587898][ C0] RDX: 0000000000000006 RSI: ffffffff8d9b7d7a RDI: 0000000000000001 [ 1985.587910][ C0] RBP: ffffc900046d7670 R08: ffffffff8fa38c37 R09: 1ffffffff1f47186 [ 1985.587924][ C0] R10: dffffc0000000000 R11: fffffbfff1f47187 R12: dffffc0000000000 [ 1985.587938][ C0] R13: ffff88807de775c0 R14: ffff88807de77580 R15: 1ffff920008daebc [ 1985.587961][ C0] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 1985.587989][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1985.588018][ C0] ? autoremove_wake_function+0x39/0x100 [ 1985.588052][ C0] __wake_up_common_lock+0x190/0x1f0 [ 1985.588081][ C0] __unix_dgram_recvmsg+0x486/0xd60 [ 1985.588108][ C0] ? __pfx___unix_dgram_recvmsg+0x10/0x10 [ 1985.588132][ C0] ? __pfx_unix_dgram_recvmsg+0x10/0x10 [ 1985.588156][ C0] ? unix_dgram_recvmsg+0xb1/0xd0 [ 1985.588181][ C0] ? unix_dgram_recvmsg+0xbd/0xd0 [ 1985.588205][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1985.588226][ C0] ? unix_dgram_recvmsg+0xb1/0xd0 [ 1985.588249][ C0] ? __pfx_unix_dgram_recvmsg+0x10/0x10 [ 1985.588274][ C0] sock_recvmsg_nosec+0x186/0x1c0 [ 1985.588301][ C0] ____sys_recvmsg+0x3aa/0x460 [ 1985.588324][ C0] ? __pfx_____sys_recvmsg+0x10/0x10 [ 1985.588351][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1985.588371][ C0] ? import_iovec+0x74/0xa0 [ 1985.588393][ C0] ___sys_recvmsg+0x1b5/0x510 [ 1985.588415][ C0] ? __pfx____sys_recvmsg+0x10/0x10 [ 1985.588448][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1985.588470][ C0] ? __might_fault+0xb0/0x130 [ 1985.588496][ C0] do_recvmmsg+0x307/0x770 [ 1985.588520][ C0] ? __pfx_do_recvmmsg+0x10/0x10 [ 1985.588545][ C0] ? __pfx_do_futex+0x10/0x10 [ 1985.588579][ C0] __x64_sys_recvmmsg+0x190/0x240 [ 1985.588601][ C0] ? __pfx___x64_sys_recvmmsg+0x10/0x10 [ 1985.588620][ C0] ? rcu_is_watching+0x15/0xb0 [ 1985.588640][ C0] ? do_syscall_64+0xbe/0x3b0 [ 1985.588669][ C0] do_syscall_64+0xfa/0x3b0 [ 1985.588695][ C0] ? lockdep_hardirqs_on+0x9c/0x150 [ 1985.588720][ C0] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1985.588738][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1985.588758][ C0] ? exc_page_fault+0x9f/0xf0 [ 1985.588784][ C0] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1985.588801][ C0] RIP: 0033:0x7ff109d8ebe9 [ 1985.588816][ C0] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1985.588833][ C0] RSP: 002b:00007ff10ac52038 EFLAGS: 00000246 ORIG_RAX: 000000000000012b [ 1985.588851][ C0] RAX: ffffffffffffffda RBX: 00007ff109fb6090 RCX: 00007ff109d8ebe9 [ 1985.588864][ C0] RDX: 0000000000010106 RSI: 00002000000000c0 RDI: 0000000000000003 [ 1985.588876][ C0] RBP: 00007ff109e11e19 R08: 0000000000000000 R09: 0000000000000000 [ 1985.588888][ C0] R10: 0000000000000002 R11: 0000000000000246 R12: 0000000000000000 [ 1985.588900][ C0] R13: 00007ff109fb6128 R14: 00007ff109fb6090 R15: 00007ffd60c10fd8 [ 1985.588921][ C0] [ 1985.588927][ C0] [ 1986.153711][ C0] Allocated by task 19947: [ 1986.158102][ C0] kasan_save_track+0x3e/0x80 [ 1986.162780][ C0] __kasan_kmalloc+0x93/0xb0 [ 1986.167355][ C0] __kmalloc_cache_noprof+0x230/0x3d0 [ 1986.172710][ C0] io_sq_offload_create+0x2ac/0x1000 [ 1986.177983][ C0] io_uring_create+0x60d/0xb60 [ 1986.182730][ C0] __se_sys_io_uring_setup+0x264/0x270 [ 1986.188172][ C0] do_syscall_64+0xfa/0x3b0 [ 1986.192662][ C0] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1986.198530][ C0] [ 1986.200832][ C0] Freed by task 19947: [ 1986.204869][ C0] kasan_save_track+0x3e/0x80 [ 1986.209527][ C0] kasan_save_free_info+0x46/0x50 [ 1986.214529][ C0] __kasan_slab_free+0x5b/0x80 [ 1986.219276][ C0] kfree+0x18e/0x440 [ 1986.223152][ C0] io_sq_thread_finish+0x206/0x250 [ 1986.228242][ C0] io_sq_offload_create+0x1d6/0x1000 [ 1986.233528][ C0] io_uring_create+0x60d/0xb60 [ 1986.238290][ C0] __se_sys_io_uring_setup+0x264/0x270 [ 1986.243736][ C0] do_syscall_64+0xfa/0x3b0 [ 1986.248226][ C0] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1986.254094][ C0] [ 1986.256392][ C0] The buggy address belongs to the object at ffff88804a828000 [ 1986.256392][ C0] which belongs to the cache kmalloc-512 of size 512 [ 1986.270418][ C0] The buggy address is located 42 bytes inside of [ 1986.270418][ C0] freed 512-byte region [ffff88804a828000, ffff88804a828200) [ 1986.284107][ C0] [ 1986.286411][ C0] The buggy address belongs to the physical page: [ 1986.292795][ C0] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x4a828 [ 1986.301529][ C0] head: order:2 mapcount:0 entire_mapcount:0 nr_pages_mapped:0 pincount:0 [ 1986.310003][ C0] flags: 0xfff00000000040(head|node=0|zone=1|lastcpupid=0x7ff) [ 1986.317543][ C0] page_type: f5(slab) [ 1986.321502][ C0] raw: 00fff00000000040 ffff88801a441c80 dead000000000100 dead000000000122 [ 1986.330063][ C0] raw: 0000000000000000 0000000000100010 00000000f5000000 0000000000000000 [ 1986.338625][ C0] head: 00fff00000000040 ffff88801a441c80 dead000000000100 dead000000000122 [ 1986.347272][ C0] head: 0000000000000000 0000000000100010 00000000f5000000 0000000000000000 [ 1986.355919][ C0] head: 00fff00000000002 ffffea00012a0a01 00000000ffffffff 00000000ffffffff [ 1986.364585][ C0] head: ffffffffffffffff 0000000000000000 00000000ffffffff 0000000000000004 [ 1986.373230][ C0] page dumped because: kasan: bad access detected [ 1986.379617][ C0] page_owner tracks the page as allocated [ 1986.385302][ C0] page last allocated via order 2, migratetype Unmovable, gfp_mask 0xd20c0(__GFP_IO|__GFP_FS|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC), pid 2918, tgid 2918 (kworker/u8:7), ts 96070195215, free_ts 96027659146 [ 1986.406641][ C0] post_alloc_hook+0x240/0x2a0 [ 1986.411396][ C0] get_page_from_freelist+0x21e4/0x22c0 [ 1986.416920][ C0] __alloc_frozen_pages_noprof+0x181/0x370 [ 1986.422701][ C0] alloc_pages_mpol+0x232/0x4a0 [ 1986.427535][ C0] allocate_slab+0x8a/0x370 [ 1986.432017][ C0] ___slab_alloc+0xbeb/0x1410 [ 1986.436681][ C0] __kmalloc_cache_noprof+0x296/0x3d0 [ 1986.442034][ C0] __ipv6_dev_mc_inc+0x44f/0xa50 [ 1986.446952][ C0] addrconf_dad_work+0x3d0/0x14b0 [ 1986.451955][ C0] process_scheduled_works+0xae1/0x17b0 [ 1986.457477][ C0] worker_thread+0x8a0/0xda0 [ 1986.462044][ C0] kthread+0x711/0x8a0 [ 1986.466094][ C0] ret_from_fork+0x3fc/0x770 [ 1986.470669][ C0] ret_from_fork_asm+0x1a/0x30 [ 1986.475423][ C0] page last free pid 6006 tgid 6006 stack trace: [ 1986.481737][ C0] __free_frozen_pages+0xbc4/0xd30 [ 1986.486834][ C0] __put_partials+0x156/0x1a0 [ 1986.491497][ C0] put_cpu_partial+0x17c/0x250 [ 1986.496254][ C0] __slab_free+0x2d5/0x3c0 [ 1986.500648][ C0] qlist_free_all+0x97/0x140 [ 1986.505221][ C0] kasan_quarantine_reduce+0x148/0x160 [ 1986.510663][ C0] __kasan_slab_alloc+0x22/0x80 [ 1986.515496][ C0] __kmalloc_noprof+0x224/0x4f0 [ 1986.520328][ C0] tomoyo_realpath_from_path+0xe3/0x5d0 [ 1986.525850][ C0] tomoyo_path_perm+0x213/0x4b0 [ 1986.530685][ C0] security_inode_getattr+0x12f/0x330 [ 1986.536037][ C0] __x64_sys_newfstat+0xfc/0x200 [ 1986.540950][ C0] do_syscall_64+0xfa/0x3b0 [ 1986.545441][ C0] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1986.551327][ C0] [ 1986.553626][ C0] Memory state around the buggy address: [ 1986.559226][ C0] ffff88804a827f00: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 1986.567264][ C0] ffff88804a827f80: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 1986.575327][ C0] >ffff88804a828000: fa fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 1986.583361][ C0] ^ [ 1986.588702][ C0] ffff88804a828080: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 1986.596755][ C0] ffff88804a828100: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 1986.604803][ C0] ================================================================== [ 1986.612899][ C0] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 1986.620087][ C0] CPU: 0 UID: 0 PID: 20004 Comm: syz.1.3449 Not tainted syzkaller #0 PREEMPT(full) [ 1986.629431][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 1986.639462][ C0] Call Trace: [ 1986.642718][ C0] [ 1986.645540][ C0] dump_stack_lvl+0x99/0x250 [ 1986.650119][ C0] ? __asan_memcpy+0x40/0x70 [ 1986.654693][ C0] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1986.659875][ C0] ? __pfx__printk+0x10/0x10 [ 1986.664466][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1986.670089][ C0] vpanic+0x281/0x750 [ 1986.674071][ C0] ? __pfx_vpanic+0x10/0x10 [ 1986.678563][ C0] ? irqentry_exit+0x74/0x90 [ 1986.683160][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1986.688784][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1986.694409][ C0] panic+0xb9/0xc0 [ 1986.698120][ C0] ? __pfx_panic+0x10/0x10 [ 1986.702528][ C0] ? _raw_spin_unlock_irqrestore+0xa8/0x110 [ 1986.708419][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1986.714039][ C0] ? _raw_spin_unlock_irqrestore+0xad/0x110 [ 1986.719952][ C0] ? rose_timer_expiry+0x471/0x4b0 [ 1986.725061][ C0] check_panic_on_warn+0x89/0xb0 [ 1986.729994][ C0] ? rose_timer_expiry+0x471/0x4b0 [ 1986.735103][ C0] end_report+0x78/0x160 [ 1986.739347][ C0] kasan_report+0x129/0x150 [ 1986.743850][ C0] ? rose_timer_expiry+0x471/0x4b0 [ 1986.748964][ C0] rose_timer_expiry+0x471/0x4b0 [ 1986.753897][ C0] call_timer_fn+0x17e/0x5f0 [ 1986.758484][ C0] ? __pfx_rose_timer_expiry+0x10/0x10 [ 1986.763960][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1986.769588][ C0] ? call_timer_fn+0xbe/0x5f0 [ 1986.774261][ C0] ? __pfx_call_timer_fn+0x10/0x10 [ 1986.779373][ C0] ? _raw_spin_unlock_irq+0x23/0x50 [ 1986.784568][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1986.790202][ C0] ? lockdep_hardirqs_on+0x9c/0x150 [ 1986.795397][ C0] ? __pfx_rose_timer_expiry+0x10/0x10 [ 1986.800856][ C0] __run_timer_base+0x61a/0x860 [ 1986.805705][ C0] ? ktime_get+0x3e/0x1f0 [ 1986.810030][ C0] ? __pfx___run_timer_base+0x10/0x10 [ 1986.815390][ C0] ? seqcount_lockdep_reader_access+0x15f/0x1c0 [ 1986.821626][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1986.827255][ C0] run_timer_softirq+0xb7/0x180 [ 1986.832130][ C0] handle_softirqs+0x286/0x870 [ 1986.836888][ C0] ? __irq_exit_rcu+0xca/0x1f0 [ 1986.841641][ C0] ? __pfx_handle_softirqs+0x10/0x10 [ 1986.846916][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1986.852542][ C0] ? irqtime_account_irq+0xb6/0x1c0 [ 1986.857736][ C0] __irq_exit_rcu+0xca/0x1f0 [ 1986.862312][ C0] ? __pfx___irq_exit_rcu+0x10/0x10 [ 1986.867499][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1986.873125][ C0] irq_exit_rcu+0x9/0x30 [ 1986.877355][ C0] sysvec_apic_timer_interrupt+0xa6/0xc0 [ 1986.882996][ C0] [ 1986.885911][ C0] [ 1986.888843][ C0] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 1986.894815][ C0] RIP: 0010:_raw_spin_unlock_irqrestore+0xa8/0x110 [ 1986.901314][ C0] Code: 74 05 e8 6b 17 4b f6 48 c7 44 24 20 00 00 00 00 9c 8f 44 24 20 f6 44 24 21 02 75 4f f7 c3 00 02 00 00 74 01 fb bf 01 00 00 00 53 bf 13 f6 65 8b 05 0c 12 24 07 85 c0 74 40 48 c7 04 24 0e 36 [ 1986.920911][ C0] RSP: 0018:ffffc900046d75e0 EFLAGS: 00000206 [ 1986.926979][ C0] RAX: 5e8acdbd4afe0900 RBX: 0000000000000212 RCX: 5e8acdbd4afe0900 [ 1986.934969][ C0] RDX: 0000000000000006 RSI: ffffffff8d9b7d7a RDI: 0000000000000001 [ 1986.942926][ C0] RBP: ffffc900046d7670 R08: ffffffff8fa38c37 R09: 1ffffffff1f47186 [ 1986.950883][ C0] R10: dffffc0000000000 R11: fffffbfff1f47187 R12: dffffc0000000000 [ 1986.958842][ C0] R13: ffff88807de775c0 R14: ffff88807de77580 R15: 1ffff920008daebc [ 1986.966843][ C0] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 1986.973172][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1986.978799][ C0] ? autoremove_wake_function+0x39/0x100 [ 1986.984429][ C0] __wake_up_common_lock+0x190/0x1f0 [ 1986.989718][ C0] __unix_dgram_recvmsg+0x486/0xd60 [ 1986.994920][ C0] ? __pfx___unix_dgram_recvmsg+0x10/0x10 [ 1987.000636][ C0] ? __pfx_unix_dgram_recvmsg+0x10/0x10 [ 1987.006191][ C0] ? unix_dgram_recvmsg+0xb1/0xd0 [ 1987.011211][ C0] ? unix_dgram_recvmsg+0xbd/0xd0 [ 1987.016231][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1987.021853][ C0] ? unix_dgram_recvmsg+0xb1/0xd0 [ 1987.026877][ C0] ? __pfx_unix_dgram_recvmsg+0x10/0x10 [ 1987.032421][ C0] sock_recvmsg_nosec+0x186/0x1c0 [ 1987.037444][ C0] ____sys_recvmsg+0x3aa/0x460 [ 1987.042202][ C0] ? __pfx_____sys_recvmsg+0x10/0x10 [ 1987.047487][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1987.053118][ C0] ? import_iovec+0x74/0xa0 [ 1987.057617][ C0] ___sys_recvmsg+0x1b5/0x510 [ 1987.062286][ C0] ? __pfx____sys_recvmsg+0x10/0x10 [ 1987.067489][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1987.073113][ C0] ? __might_fault+0xb0/0x130 [ 1987.077789][ C0] do_recvmmsg+0x307/0x770 [ 1987.082203][ C0] ? __pfx_do_recvmmsg+0x10/0x10 [ 1987.087137][ C0] ? __pfx_do_futex+0x10/0x10 [ 1987.091814][ C0] __x64_sys_recvmmsg+0x190/0x240 [ 1987.096839][ C0] ? __pfx___x64_sys_recvmmsg+0x10/0x10 [ 1987.102376][ C0] ? rcu_is_watching+0x15/0xb0 [ 1987.107132][ C0] ? do_syscall_64+0xbe/0x3b0 [ 1987.111817][ C0] do_syscall_64+0xfa/0x3b0 [ 1987.116345][ C0] ? lockdep_hardirqs_on+0x9c/0x150 [ 1987.121544][ C0] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1987.127600][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1987.133226][ C0] ? exc_page_fault+0x9f/0xf0 [ 1987.137903][ C0] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1987.143783][ C0] RIP: 0033:0x7ff109d8ebe9 [ 1987.148184][ C0] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1987.167776][ C0] RSP: 002b:00007ff10ac52038 EFLAGS: 00000246 ORIG_RAX: 000000000000012b [ 1987.176192][ C0] RAX: ffffffffffffffda RBX: 00007ff109fb6090 RCX: 00007ff109d8ebe9 [ 1987.184156][ C0] RDX: 0000000000010106 RSI: 00002000000000c0 RDI: 0000000000000003 [ 1987.192118][ C0] RBP: 00007ff109e11e19 R08: 0000000000000000 R09: 0000000000000000 [ 1987.200081][ C0] R10: 0000000000000002 R11: 0000000000000246 R12: 0000000000000000 [ 1987.208038][ C0] R13: 00007ff109fb6128 R14: 00007ff109fb6090 R15: 00007ffd60c10fd8 [ 1987.216008][ C0] [ 1987.219209][ C0] Kernel Offset: disabled [ 1987.223521][ C0] Rebooting in 86400 seconds..