last executing test programs: 8m15.008701452s ago: executing program 32 (id=25): openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x8002, 0x0) openat$tun(0xffffffffffffff9c, 0x0, 0x52a02, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f00000009c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r1}, 0x18) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee2, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r5 = socket$nl_audit(0x10, 0x3, 0x9) sendmsg$AUDIT_SET(r5, 0x0, 0x8000) setsockopt$inet6_tcp_int(r0, 0x6, 0x17, &(0x7f00000001c0)=0x4, 0x4) syz_pidfd_open(0x0, 0x0) setns(0xffffffffffffffff, 0x80) 7m33.351339328s ago: executing program 1 (id=90): socket$packet(0x11, 0x3, 0x300) ioctl$EVIOCGBITSW(0xffffffffffffffff, 0x80404525, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000040)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f0000000000)=0x5) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000001700)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './bus\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x3fffffffffffcb5, 0x2, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="170000000000000004000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000840)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000058"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r4}, 0x10) unshare(0x26020480) r5 = socket$can_raw(0x1d, 0x3, 0x1) setsockopt$CAN_RAW_JOIN_FILTERS(r5, 0x65, 0x6, 0x0, 0x0) sched_setaffinity(0xffffffffffffffff, 0x8, &(0x7f00000007c0)=0xeb) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f00000001c0)='./bus\x00', 0x41, &(0x7f0000000740)={[{@bsdgroups}, {@nodiscard}, {@noblock_validity}, {@grpjquota}, {@grpjquota}, {@noquota}, {@auto_da_alloc}, {@noload}, {@nodiscard}]}, 0x64, 0x50a, &(0x7f0000000200)="$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") r6 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000540)=@newqdisc={0x5a, 0x24, 0x3fe3aa0262d8c783, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0x4c, 0x2, {{0x3, 0x0, 0x7ff, 0x1}, 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0x1e, 0x2, 0x0, 0x0, 0x0, {0x0, 0x0, 0xfffffffc}}}}]}, 0x78}}, 0x0) 7m29.079793809s ago: executing program 1 (id=94): socket(0x1d, 0x2, 0x9) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x3, &(0x7f00000000c0)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x2, 0xba, &(0x7f0000000140)=""/186, 0x41100, 0x2b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x39, @void, @value}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x20000000}, 0x0) setrlimit(0x0, &(0x7f0000000100)={0x6, 0xa}) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) r4 = openat$cuse(0xffffffffffffff9c, 0x0, 0x2, 0x0) read$FUSE(r4, &(0x7f0000009780)={0x2020}, 0x2020) write$FUSE_DIRENTPLUS(r4, 0x0, 0xb0) socket$nl_netfilter(0x10, 0x3, 0xc) r5 = dup(0xffffffffffffffff) ioctl$BLKZEROOUT(r5, 0x127f, 0x0) r6 = socket$inet_smc(0x2b, 0x1, 0x0) connect$inet(r6, &(0x7f0000000000)={0x2, 0x4001, @remote}, 0x10) setsockopt$SO_BINDTODEVICE_wg(r6, 0x1, 0x19, &(0x7f0000000080)='wg1\x00', 0x4) sendto$inet(r6, &(0x7f0000000040)="e5", 0xffffffe4, 0x0, 0x0, 0x0) 7m27.022134025s ago: executing program 1 (id=97): r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) setsockopt$inet6_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000080)='cdg\x00', 0x4) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x3, 0x0, @loopback}, 0x1c) connect$inet6(r0, &(0x7f0000000040)={0xa, 0x3, 0x0, @loopback}, 0x1c) sendmmsg$inet6(r0, &(0x7f0000002b00)=[{{0x0, 0x0, &(0x7f0000002c40)=[{&(0x7f00000027c0)=';', 0x1}], 0x1}}, {{0x0, 0x0, &(0x7f0000002740)=[{0x0}], 0x1}}], 0x2, 0x0) syz_usb_disconnect(0xffffffffffffffff) setsockopt$inet6_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000180)='bbr\x00', 0x4) shutdown(r0, 0x2) 7m21.217510494s ago: executing program 1 (id=101): socket$nl_route(0x10, 0x3, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x143042, 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f00000001c0), 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000100)='./file1\x00', &(0x7f0000000140), 0x2, &(0x7f0000002400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r0, &(0x7f0000000200)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r0, &(0x7f0000002300)={0x50, 0x0, r1, {0x7, 0x9, 0x0, 0x1030002}}, 0x50) r2 = landlock_create_ruleset(&(0x7f0000000040)={0x501a, 0x3, 0x3}, 0x18, 0x0) r3 = socket$unix(0x1, 0x2, 0x0) r4 = socket$inet(0x2, 0xa, 0x262) ioctl$sock_inet_SIOCSARP(r4, 0x8955, &(0x7f0000000000)={{0x2, 0x0, @dev}, {0x1, @local}, 0x4a, {0x2, 0x0, @loopback}}) ioctl$sock_inet_SIOCSARP(r4, 0x8953, &(0x7f0000000000)={{0x2, 0x4e22, @dev}, {0x0, @multicast}, 0x38, {0x2, 0x2, @broadcast}, 'syz_tun\x00'}) r5 = socket$unix(0x1, 0x2, 0x0) landlock_restrict_self(r2, 0x1) bind$unix(r5, 0x0, 0x0) connect$unix(r3, &(0x7f0000000640)=@file={0x1}, 0x6e) truncate(&(0x7f0000004540)='./file1\x00', 0xfff) r6 = openat$ubi_ctrl(0xffffffffffffff9c, 0x0, 0x60c002, 0x0) dup3(r6, r0, 0x0) capset(0x0, &(0x7f0000000040)={0x200000, 0x200000, 0x20000000}) r7 = socket$netlink(0x10, 0x3, 0x4) writev(r7, &(0x7f00000002c0)=[{&(0x7f0000000300)="4800000014001d1009074beafd0d8c560a84606080ffe020590000a2bc5603ca00000f7f8907000020008d42188fedc22e47ad8f75edc6d100000101ff0000000309ff5b", 0x44}], 0x1) r8 = socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_genetlink_get_family_id$nl80211(&(0x7f0000004ec0), 0xffffffffffffffff) r10 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r10, 0x89f1, &(0x7f0000001080)={'ip6tnl0\x00', &(0x7f0000001000)={'syztnl0\x00', 0x0, 0x29, 0x3, 0x6e, 0x6, 0x20, @private2={0xfc, 0x2, '\x00', 0x1}, @empty, 0x1, 0x8000, 0xc, 0x5}}) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r10, 0x89f3, &(0x7f0000001340)={'syztnl0\x00', &(0x7f00000012c0)={'ip6_vti0\x00', 0x0, 0x29, 0x3, 0x5, 0x2, 0x50, @mcast1, @mcast2, 0x80, 0x10, 0x9, 0xfffffffe}}) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000004f00)={'wlan0\x00', 0x0}) openat$proc_mixer(0xffffffffffffff9c, &(0x7f0000000300)='/proc/asound/card1/oss_mixer\x00', 0x80040, 0x408) sendmsg$NL80211_CMD_TDLS_CANCEL_CHANNEL_SWITCH(r8, &(0x7f0000005000)={0x0, 0x0, &(0x7f0000004fc0)={&(0x7f0000004f40)={0x1c, r9, 0x1, 0x70bd29, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r11}, @void}}}, 0x1c}}, 0x40000000) socket$nl_route(0x10, 0x3, 0x0) 7m17.440878222s ago: executing program 1 (id=106): syz_open_dev$evdev(0x0, 0x0, 0x8840) socket$packet(0x11, 0x2, 0x300) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f0000001c40)=ANY=[@ANYBLOB="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"/3576], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000540)='rcu_utilization\x00', r0}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x6) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x0, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r2 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) setsockopt$bt_BT_POWER(r2, 0x112, 0x9, 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f0000000380)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) close(0x3) bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0x5, 0x5, 0x9fd, 0x84, 0x1, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r5 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='fdinfo/3\x00') read$FUSE(r5, &(0x7f00000020c0)={0x2020}, 0x2020) 7m15.697182597s ago: executing program 1 (id=107): socket$packet(0x11, 0x3, 0x300) ioctl$EVIOCGBITSW(0xffffffffffffffff, 0x80404525, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000040)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f0000000000)=0x5) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000001700)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './bus\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x3fffffffffffcb5, 0x2, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="170000000000000004000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000840)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000058"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r4}, 0x10) unshare(0x26020480) setsockopt$CAN_RAW_JOIN_FILTERS(0xffffffffffffffff, 0x65, 0x6, 0x0, 0x0) sched_setaffinity(0xffffffffffffffff, 0x8, &(0x7f00000007c0)=0xeb) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f00000001c0)='./bus\x00', 0x41, &(0x7f0000000740)={[{@bsdgroups}, {@nodiscard}, {@noblock_validity}, {@grpjquota}, {@grpjquota}, {@noquota}, {@auto_da_alloc}, {@noload}, {@nodiscard}]}, 0x64, 0x50a, &(0x7f0000000200)="$eJzs3VFrHFsdAPD/bHZrk6Y3ueqDXvB6tZW0aHeTxrbBh1pB9Kmg1vcak00I2WRDdtM2oWiKH0AQUcEnffFF8AMIUvDFRxEK+qyoKKKtPvigncvuTtK03U227TabZn8/OJlzzszs/5wNMztnZpgJYGC9FxHXIuJxmqbnI2Isq89lKbZbqbHco4d35xopiTS98c8kkqxu57OSbHoqW+1kRHztyxHfTJ6PW9vcWp6tVMrrWblUX1kr1Ta3LiytzC6WF8ur09NTl2euzFyamexJP09HxNUv/vUH3/3Zl67+6jO3/3Tz7+e+1WjWaDZ/bz9eUH6/ma2uF5rfxd4V1l8y2FGUb/YwM9xuiaHnau695jYBANBe4xj/gxHxyYg4H2MxtP/hLAAAAPAGSj8/Gv9LItL2TnSoBwAAAN4gueY9sEmuGBEjzXwuVyy27uH9cIzkKtVa/dML1Y3V+da9suNRyC0sVcqT2b3C41FIGuWpZv5J+eIz5emIeDsivj823CwX56qV+X6f/AAAAIABcWrP+D8XEf8Za43/AQAAgGNmvN8NAAAAAF47438AAAA4/oz/AQAA4Fj7yvXrjZTuvP96/tbmxnL11oX5cm25uLIxV5yrrq8VF6vVxeYz+1YO+rxKtbr22VjduFOql2v1Um1z6+ZKdWO1fnPpqVdgAwAAAIfo7Y/f/0MSEdufG26mhhPdrdrlYsBRld/NJdm0zWb9x7da078cUqOAQzHU7wYAfZPvdwOAvin0uwFA3yUHzO94885vs+knetseAACg9yY+2vn6f27fNbf3nw0ceTZiGFyu/8Pgal7/7/ZOXgcLcKwUHAHAwHvl6/8HStMXahAAANBzo82U5IrZ6b3RyOWKxYjTzdcCFJKFpUp5MiLeiojfjxU+0ChPNddMDhwzAAAAAAAAAAAAAAAAAAAAAAAAAAAtaZpECgAAABxrEbm/Jb9uPct/Yuzs6LPnB04k/x2L7BWht39844d3Zuv19alG/b926+s/yuov9uMMBgAAAAyEF3qB/844fWccDwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAC99Ojh3bmddJhx//GFiBhvFz8fJ5vTk1GIiJF/J5Hfs14SEUM9iD/c+PORdvGTRrN2Q7aLP9yD+Nv39o0f49m30C7+qR7Eh0F2v7H/udZu+8vFe81p++0vH/FU+WV13v/F7v5vqMP2f7rLGO88+EWpY/x7Ee/k2+9/duInHeKf6TL+N76+tdVpXvqTiIm2vz/JU7FK9ZW1Um1z68LSyuxiebG8Oj09dXnmysylmcnSwlKlnP1tG+N7H/vl4/36P9Ih/vgB/T/bZf///+DOww+1soV28c+daRP/Nz/Nlng+fi777ftUlm/Mn9jJb7fye73789+9u1//5zv0/6D//7ku+3/+q9/5c5eLAgCHoLa5tTxbqZTXj22mMUo/As2QOYKZb/f0A9M0TRvb1Ct8ThJH4WtpZvq9ZwIAAHrtyUF/v1sCAAAAAAAAAAAAAAAAAAAAg+swHif2bMzt3VzSi0doAwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAD0xPsBAAD//wdy2V0=") socket(0x10, 0x3, 0x0) socket$packet(0x11, 0x2, 0x300) 6m56.887918604s ago: executing program 33 (id=107): socket$packet(0x11, 0x3, 0x300) ioctl$EVIOCGBITSW(0xffffffffffffffff, 0x80404525, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000040)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f0000000000)=0x5) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000001700)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './bus\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x3fffffffffffcb5, 0x2, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="170000000000000004000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000840)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000058"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r4}, 0x10) unshare(0x26020480) setsockopt$CAN_RAW_JOIN_FILTERS(0xffffffffffffffff, 0x65, 0x6, 0x0, 0x0) sched_setaffinity(0xffffffffffffffff, 0x8, &(0x7f00000007c0)=0xeb) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f00000001c0)='./bus\x00', 0x41, &(0x7f0000000740)={[{@bsdgroups}, {@nodiscard}, {@noblock_validity}, {@grpjquota}, {@grpjquota}, {@noquota}, {@auto_da_alloc}, {@noload}, {@nodiscard}]}, 0x64, 0x50a, &(0x7f0000000200)="$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") socket(0x10, 0x3, 0x0) socket$packet(0x11, 0x2, 0x300) 6m10.295914876s ago: executing program 5 (id=180): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000007c0)=@base={0x5, 0x7, 0x8, 0x5, 0x80, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x8, 0x0, 0x0, 0x0, 0x20, '\x00', 0x0, @fallback=0x30, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000180)={r1, 0x2000000, 0xe, 0x0, &(0x7f0000000200)="63eced8e46dc3f0adf33c9f7b986", 0x0, 0x3800, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 6m7.868067074s ago: executing program 5 (id=182): r0 = socket$kcm(0x11, 0x200000000000002, 0x300) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) close(r0) r3 = socket$kcm(0x11, 0x200000000000002, 0x300) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) close(r5) recvmsg$unix(r4, 0x0, 0x0) setsockopt$sock_attach_bpf(r3, 0x107, 0x12, &(0x7f00000008c0), 0x4) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000600)={0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, &(0x7f00000003c0)=[{}, {0x10040002, 0x0, 0x0, 0x3}], 0x10, 0x0, @void, @value}, 0x94) close(r2) recvmsg$unix(r1, &(0x7f0000000400)={0x0, 0xfffffffffffffc9a, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) setsockopt$sock_attach_bpf(r0, 0x107, 0x12, &(0x7f00000008c0)=r6, 0x4) 6m7.798591391s ago: executing program 5 (id=183): r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) mount$9p_fd(0x0, 0x0, &(0x7f0000000080), 0x400, &(0x7f0000000a40)=ANY=[@ANYRESDEC=r0, @ANYRES16]) getpeername$unix(0xffffffffffffffff, &(0x7f0000000380), &(0x7f00000001c0)=0x6e) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x8c) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0x88, 0x30, 0x1, 0x0, 0x0, {}, [{0x74, 0x1, [@m_ct={0x44, 0x2, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x9d, 0x11e41e7a, 0x20000000, 0x0, 0xf}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}, @m_ife={0x2c, 0x1, 0x0, 0x0, {{0x8}, {0x4}, {0x4}, {0xc}, {0xc}}}]}]}, 0x88}, 0x1, 0x0, 0x0, 0x804}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) connect$inet(0xffffffffffffffff, &(0x7f0000000000)={0x2, 0x4e22, @local}, 0x10) ioctl$SOUND_OLD_MIXER_INFO(0xffffffffffffffff, 0x80304d65, &(0x7f0000000280)) shutdown(0xffffffffffffffff, 0x1) mount$overlay(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000200), 0xd4, &(0x7f0000000180)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@workdir={'workdir', 0x3d, './file0'}}], [], 0x2c}) fspick(0xffffffffffffffff, &(0x7f0000000140)='./file0\x00', 0x1) r4 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=ANY=[@ANYBLOB="38000000031401002abd7000fedbdf250900020073017a31000000000800410072786500140033006c6f"], 0x38}, 0x1, 0x0, 0x0, 0x44}, 0x810) socket$inet6(0xa, 0x5, 0x6) r5 = syz_usb_connect(0x3, 0x36, &(0x7f00000000c0)=ANY=[@ANYBLOB="120100008010bd40820514009dbb0000000109022400011b00000009040000022a3e740009058bff7f0000100109050b362f"], 0x0) close(0xffffffffffffffff) syz_open_dev$midi(&(0x7f0000000000), 0x3, 0x88c02) syz_usb_disconnect(r5) 6m4.374492362s ago: executing program 5 (id=186): bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000280)='virtio_transport_alloc_pkt\x00', r0}, 0x10) r1 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r1, &(0x7f0000000080)={0x28, 0x0, 0x2711}, 0x10) 6m3.518026369s ago: executing program 5 (id=198): r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) setsockopt$inet6_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000080)='cdg\x00', 0x4) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x3, 0x0, @loopback}, 0x1c) connect$inet6(r0, &(0x7f0000000040)={0xa, 0x3, 0x0, @loopback}, 0x1c) sendmmsg$inet6(r0, &(0x7f0000002b00)=[{{0x0, 0x0, &(0x7f0000002c40)=[{&(0x7f00000027c0)=';', 0x1}], 0x1}}, {{0x0, 0x0, &(0x7f0000002740)}}], 0x2, 0x0) syz_usb_disconnect(0xffffffffffffffff) setsockopt$inet6_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000180)='bbr\x00', 0x4) shutdown(r0, 0x2) 6m2.469479648s ago: executing program 5 (id=192): socket$packet(0x11, 0x3, 0x300) ioctl$EVIOCGBITSW(0xffffffffffffffff, 0x80404525, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000040)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f0000000000)=0x5) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000001700)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './bus\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x3fffffffffffcb5, 0x2, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="170000000000000004000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000840)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000058"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r4}, 0x10) unshare(0x26020480) r5 = socket$can_raw(0x1d, 0x3, 0x1) setsockopt$CAN_RAW_JOIN_FILTERS(r5, 0x65, 0x6, 0x0, 0x0) sched_setaffinity(0xffffffffffffffff, 0x8, &(0x7f00000007c0)=0xeb) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f00000001c0)='./bus\x00', 0x41, &(0x7f0000000740)={[{@bsdgroups}, {@nodiscard}, {@noblock_validity}, {@grpjquota}, {@grpjquota}, {@noquota}, {@auto_da_alloc}, {@noload}, {@nodiscard}]}, 0x64, 0x50a, &(0x7f0000000200)="$eJzs3VFrHFsdAPD/bHZrk6Y3ueqDXvB6tZW0aHeTxrbBh1pB9Kmg1vcak00I2WRDdtM2oWiKH0AQUcEnffFF8AMIUvDFRxEK+qyoKKKtPvigncvuTtK03U227TabZn8/OJlzzszs/5wNMztnZpgJYGC9FxHXIuJxmqbnI2Isq89lKbZbqbHco4d35xopiTS98c8kkqxu57OSbHoqW+1kRHztyxHfTJ6PW9vcWp6tVMrrWblUX1kr1Ta3LiytzC6WF8ur09NTl2euzFyamexJP09HxNUv/vUH3/3Zl67+6jO3/3Tz7+e+1WjWaDZ/bz9eUH6/ma2uF5rfxd4V1l8y2FGUb/YwM9xuiaHnau695jYBANBe4xj/gxHxyYg4H2MxtP/hLAAAAPAGSj8/Gv9LItL2TnSoBwAAAN4gueY9sEmuGBEjzXwuVyy27uH9cIzkKtVa/dML1Y3V+da9suNRyC0sVcqT2b3C41FIGuWpZv5J+eIz5emIeDsivj823CwX56qV+X6f/AAAAIABcWrP+D8XEf8Za43/AQAAgGNmvN8NAAAAAF47438AAAA4/oz/AQAA4Fj7yvXrjZTuvP96/tbmxnL11oX5cm25uLIxV5yrrq8VF6vVxeYz+1YO+rxKtbr22VjduFOql2v1Um1z6+ZKdWO1fnPpqVdgAwAAAIfo7Y/f/0MSEdufG26mhhPdrdrlYsBRld/NJdm0zWb9x7da078cUqOAQzHU7wYAfZPvdwOAvin0uwFA3yUHzO94885vs+knetseAACg9yY+2vn6f27fNbf3nw0ceTZiGFyu/8Pgal7/7/ZOXgcLcKwUHAHAwHvl6/8HStMXahAAANBzo82U5IrZ6b3RyOWKxYjTzdcCFJKFpUp5MiLeiojfjxU+0ChPNddMDhwzAAAAAAAAAAAAAAAAAAAAAAAAAAAtaZpECgAAABxrEbm/Jb9uPct/Yuzs6LPnB04k/x2L7BWht39844d3Zuv19alG/b926+s/yuov9uMMBgAAAAyEF3qB/844fWccDwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAC99Ojh3bmddJhx//GFiBhvFz8fJ5vTk1GIiJF/J5Hfs14SEUM9iD/c+PORdvGTRrN2Q7aLP9yD+Nv39o0f49m30C7+qR7Eh0F2v7H/udZu+8vFe81p++0vH/FU+WV13v/F7v5vqMP2f7rLGO88+EWpY/x7Ee/k2+9/duInHeKf6TL+N76+tdVpXvqTiIm2vz/JU7FK9ZW1Um1z68LSyuxiebG8Oj09dXnmysylmcnSwlKlnP1tG+N7H/vl4/36P9Ih/vgB/T/bZf///+DOww+1soV28c+daRP/Nz/Nlng+fi777ftUlm/Mn9jJb7fye73789+9u1//5zv0/6D//7ku+3/+q9/5c5eLAgCHoLa5tTxbqZTXj22mMUo/As2QOYKZb/f0A9M0TRvb1Ct8ThJH4WtpZvq9ZwIAAHrtyUF/v1sCAAAAAAAAAAAAAAAAAAAAg+swHif2bMzt3VzSi0doAwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAD0xPsBAAD//wdy2V0=") r6 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00', 0x0}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000540)=@newqdisc={0x5a, 0x24, 0x3fe3aa0262d8c783, 0x0, 0x0, {0x0, 0x0, 0x0, r7, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0x4c, 0x2, {{0x3, 0x0, 0x7ff, 0x1}, 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0x1e, 0x2, 0x0, 0x0, 0x0, {0x0, 0x0, 0xfffffffc}}}}]}, 0x78}}, 0x0) 5m46.298153339s ago: executing program 34 (id=192): socket$packet(0x11, 0x3, 0x300) ioctl$EVIOCGBITSW(0xffffffffffffffff, 0x80404525, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000040)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f0000000000)=0x5) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000001700)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './bus\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x3fffffffffffcb5, 0x2, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="170000000000000004000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000840)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000058"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r4}, 0x10) unshare(0x26020480) r5 = socket$can_raw(0x1d, 0x3, 0x1) setsockopt$CAN_RAW_JOIN_FILTERS(r5, 0x65, 0x6, 0x0, 0x0) sched_setaffinity(0xffffffffffffffff, 0x8, &(0x7f00000007c0)=0xeb) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f00000001c0)='./bus\x00', 0x41, &(0x7f0000000740)={[{@bsdgroups}, {@nodiscard}, {@noblock_validity}, {@grpjquota}, {@grpjquota}, {@noquota}, {@auto_da_alloc}, {@noload}, {@nodiscard}]}, 0x64, 0x50a, &(0x7f0000000200)="$eJzs3VFrHFsdAPD/bHZrk6Y3ueqDXvB6tZW0aHeTxrbBh1pB9Kmg1vcak00I2WRDdtM2oWiKH0AQUcEnffFF8AMIUvDFRxEK+qyoKKKtPvigncvuTtK03U227TabZn8/OJlzzszs/5wNMztnZpgJYGC9FxHXIuJxmqbnI2Isq89lKbZbqbHco4d35xopiTS98c8kkqxu57OSbHoqW+1kRHztyxHfTJ6PW9vcWp6tVMrrWblUX1kr1Ta3LiytzC6WF8ur09NTl2euzFyamexJP09HxNUv/vUH3/3Zl67+6jO3/3Tz7+e+1WjWaDZ/bz9eUH6/ma2uF5rfxd4V1l8y2FGUb/YwM9xuiaHnau695jYBANBe4xj/gxHxyYg4H2MxtP/hLAAAAPAGSj8/Gv9LItL2TnSoBwAAAN4gueY9sEmuGBEjzXwuVyy27uH9cIzkKtVa/dML1Y3V+da9suNRyC0sVcqT2b3C41FIGuWpZv5J+eIz5emIeDsivj823CwX56qV+X6f/AAAAIABcWrP+D8XEf8Za43/AQAAgGNmvN8NAAAAAF47438AAAA4/oz/AQAA4Fj7yvXrjZTuvP96/tbmxnL11oX5cm25uLIxV5yrrq8VF6vVxeYz+1YO+rxKtbr22VjduFOql2v1Um1z6+ZKdWO1fnPpqVdgAwAAAIfo7Y/f/0MSEdufG26mhhPdrdrlYsBRld/NJdm0zWb9x7da078cUqOAQzHU7wYAfZPvdwOAvin0uwFA3yUHzO94885vs+knetseAACg9yY+2vn6f27fNbf3nw0ceTZiGFyu/8Pgal7/7/ZOXgcLcKwUHAHAwHvl6/8HStMXahAAANBzo82U5IrZ6b3RyOWKxYjTzdcCFJKFpUp5MiLeiojfjxU+0ChPNddMDhwzAAAAAAAAAAAAAAAAAAAAAAAAAAAtaZpECgAAABxrEbm/Jb9uPct/Yuzs6LPnB04k/x2L7BWht39844d3Zuv19alG/b926+s/yuov9uMMBgAAAAyEF3qB/844fWccDwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAC99Ojh3bmddJhx//GFiBhvFz8fJ5vTk1GIiJF/J5Hfs14SEUM9iD/c+PORdvGTRrN2Q7aLP9yD+Nv39o0f49m30C7+qR7Eh0F2v7H/udZu+8vFe81p++0vH/FU+WV13v/F7v5vqMP2f7rLGO88+EWpY/x7Ee/k2+9/duInHeKf6TL+N76+tdVpXvqTiIm2vz/JU7FK9ZW1Um1z68LSyuxiebG8Oj09dXnmysylmcnSwlKlnP1tG+N7H/vl4/36P9Ih/vgB/T/bZf///+DOww+1soV28c+daRP/Nz/Nlng+fi777ftUlm/Mn9jJb7fye73789+9u1//5zv0/6D//7ku+3/+q9/5c5eLAgCHoLa5tTxbqZTXj22mMUo/As2QOYKZb/f0A9M0TRvb1Ct8ThJH4WtpZvq9ZwIAAHrtyUF/v1sCAAAAAAAAAAAAAAAAAAAAg+swHif2bMzt3VzSi0doAwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAD0xPsBAAD//wdy2V0=") r6 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00', 0x0}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000540)=@newqdisc={0x5a, 0x24, 0x3fe3aa0262d8c783, 0x0, 0x0, {0x0, 0x0, 0x0, r7, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0x4c, 0x2, {{0x3, 0x0, 0x7ff, 0x1}, 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0x1e, 0x2, 0x0, 0x0, 0x0, {0x0, 0x0, 0xfffffffc}}}}]}, 0x78}}, 0x0) 4m53.385380807s ago: executing program 7 (id=291): prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000540)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, 0x0, 0x0) sendmmsg$unix(r1, 0x0, 0x0, 0x0) recvmmsg(r0, 0x0, 0x0, 0x2, 0x0) r2 = fsmount(0xffffffffffffffff, 0x0, 0x0) symlinkat(&(0x7f00000000c0)='./file0\x00', r2, &(0x7f0000000080)='./file1\x00') bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x48) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000080)=@base={0x16, 0x0, 0x4, 0x1, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b7040000000000008500000057"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x4, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r4 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000280)=ANY=[@ANYBLOB="4000000010001fff000000000000000000060000", @ANYRES32=0x0, @ANYBLOB="0000000000000000180012800e0001007769726567756172640000000400028008000a00b8"], 0x40}}, 0x0) 4m44.137396409s ago: executing program 7 (id=305): syz_mount_image$ext4(&(0x7f00000004c0)='ext4\x00', &(0x7f00000000c0)='./bus\x00', 0x0, &(0x7f0000000100), 0x2, 0x50e, &(0x7f0000000f40)="$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") prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x35, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r0 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, 0x0) timer_settime(0x0, 0x1, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x3938700}}, 0x0) futex(&(0x7f000000cffc)=0x1, 0x86, 0x2, 0x0, 0x0, 0xfffffffc) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.controllers\x00', 0x275a, 0x0) syz_clone(0x80842111, 0x0, 0x0, 0x0, 0x0, 0x0) write$binfmt_script(r1, &(0x7f0000000000), 0x208e24b) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r2 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000080)={&(0x7f0000000300)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x54, 0x54, 0x3, [@union={0xb, 0x0, 0x0, 0x5, 0x0, 0x2}, @type_tag={0x7, 0x0, 0x0, 0x12, 0x4}, @func_proto={0x0, 0x6, 0x0, 0xd, 0x0, [{0xf, 0x4}, {0x8}, {0xe, 0x1}, {0x1, 0x4}, {0xa, 0x5}, {0x6, 0x2}]}]}, {0x0, [0x0]}}, &(0x7f0000000400)=""/67, 0x6f, 0x43, 0x0, 0x55b, 0x10000, @value=r1}, 0x28) bpf$MAP_CREATE(0x0, &(0x7f0000000500)=@base={0x16, 0x9, 0x9, 0x4, 0x200, r1, 0x101, '\x00', 0x0, r2, 0x4, 0x1, 0x5, 0x0, @void, @value, @void, @value}, 0x50) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) syz_open_procfs$namespace(0x0, 0x0) r4 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0, 0x0) r5 = fanotify_init(0xf00, 0x0) fanotify_mark(r5, 0x105, 0x4800003a, r4, 0x0) read$FUSE(r5, 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) 4m32.583519765s ago: executing program 7 (id=325): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000001fc0)=@delchain={0x1d0, 0x65, 0x2, 0x70bd27, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, {0x2, 0x9}, {0x0, 0x1}, {0x0, 0xe}}, [@TCA_CHAIN={0x8, 0xb, 0x6}, @TCA_RATE={0x6, 0x5, {0x8, 0xb6}}, @filter_kind_options=@f_bpf={{0x8}, {0x194, 0x2, [@TCA_BPF_FD={0x8}, @TCA_BPF_NAME={0xc, 0x7, './file0\x00'}, @TCA_BPF_ACT={0x17c, 0x1, [@m_simple={0x30, 0x3e, 0x0, 0x0, {{0xb}, {0x4}, {0x4}, {0xc}, {0xc, 0x8, {0x1}}}}, @m_connmark={0xdc, 0x8, 0x0, 0x0, {{0xd}, {0xac, 0x2, 0x0, 0x1, [@TCA_CONNMARK_PARMS={0x1c, 0x1, {{0xce, 0x2, 0x7, 0x6, 0x40}, 0x9}}, @TCA_CONNMARK_PARMS={0x1c, 0x1, {{0xe6d, 0x1, 0x20000000, 0x7, 0x2}, 0x6}}, @TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x7fffffff, 0xfffffffd, 0x1, 0xd66, 0x2}, 0xc}}, @TCA_CONNMARK_PARMS={0x1c, 0x1, {{0xfffff801, 0x7, 0x0, 0x4, 0x3}}}, @TCA_CONNMARK_PARMS={0x1c, 0x1, {{0xf06, 0x2, 0x4}, 0x6}}, @TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x5, 0x100, 0x6, 0x5, 0x8}, 0x7}}]}, {0x4}, {0xc}, {0xc, 0x8, {0x1}}}}, @m_connmark={0x6c, 0x15, 0x0, 0x0, {{0xd}, {0x3c, 0x2, 0x0, 0x1, [@TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x6, 0x4, 0x8, 0xc, 0x8}, 0xff21}}, @TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x1, 0x2, 0x20000000, 0x1, 0x6}, 0x8}}]}, {0x4}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x1, 0x3}}}}]}]}}]}, 0x1d0}, 0x1, 0x0, 0x0, 0x40040d1}, 0x0) r0 = socket(0x10, 0x803, 0x0) sendto(r0, &(0x7f0000000740)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) recvmmsg(r0, &(0x7f00000037c0), 0x0, 0x2040000, &(0x7f0000003700)={0x77359400}) 4m32.361974759s ago: executing program 7 (id=326): r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/asound/timers\x00', 0x0, 0x0) syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000040)='./file0\x00', 0x0, &(0x7f0000000d40)=ANY=[@ANYBLOB="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"], 0xfe, 0x2ae, &(0x7f0000000a40)="$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") r1 = open(0x0, 0x14507e, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e22}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18020000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb703000008000000b703000000000020850000007200000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000080)='sched_switch\x00', r5}, 0x18) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) ioctl$FITRIM(r1, 0xc0185879, 0x0) connect$can_bcm(0xffffffffffffffff, &(0x7f0000001200), 0x10) close(0xffffffffffffffff) close(r0) sync() 4m29.308920497s ago: executing program 7 (id=331): mkdir(0x0, 0x101) pipe2$9p(&(0x7f00000000c0), 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) socket$inet6_icmp(0xa, 0x2, 0x3a) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sendmsg$NFQNL_MSG_CONFIG(0xffffffffffffffff, &(0x7f0000000ac0)={0x0, 0x0, &(0x7f0000000a80)={&(0x7f0000000100)=ANY=[@ANYBLOB="300000000203010200000000000000000000000008000340000000000900020000000000020000000800010001"], 0x30}}, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFQNL_MSG_CONFIG(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000540)=ANY=[@ANYBLOB="1c000000020301040000000000000000000000100800010001"], 0x1c}}, 0x0) getpid() r4 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r4, 0x0, 0x40, &(0x7f00000014c0)=@nat={'nat\x00', 0x62, 0x5, 0x430, 0x398, 0x2a0, 0xffffffff, 0xe0, 0x188, 0x398, 0x398, 0xffffffff, 0x398, 0x398, 0x5, 0x0, {[{{@ip={@multicast2, @initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 'veth0_to_bond\x00', 'wg1\x00'}, 0x0, 0xa8, 0xe0, 0x0, {0x22e}, [@common=@unspec=@statistic={{0x38}}]}, @MASQUERADE={0x38, 'MASQUERADE\x00', 0x0, {0x1, {0x0, @multicast1, @remote, @icmp_id, @icmp_id}}}}, {{@uncond, 0x0, 0x70, 0xa8}, @REDIRECT={0x38, 'REDIRECT\x00', 0x0, {0x1, {0x0, @multicast1, @empty, @gre_key, @icmp_id}}}}, {{@ip={@broadcast, @multicast1, 0x0, 0x0, 'veth1_to_hsr\x00', 'ipvlan0\x00'}, 0x0, 0xe0, 0x118, 0x0, {}, [@common=@socket0={{0x20}}, @common=@osf={{0x50}, {'syz0\x00'}}]}, @DNAT0={0x38, 'DNAT\x00', 0x0, {0x1, {0x0, @private, @multicast2, @gre_key}}}}, {{@ip={@remote, @empty, 0x0, 0x0, 'veth1_to_batadv\x00', 'pim6reg\x00', {0xff}}, 0x0, 0xc0, 0xf8, 0x0, {}, [@common=@ttl={{0x28}}, @common=@inet=@tcpmss={{0x28}, {0xf}}]}, @NETMAP={0x38, 'NETMAP\x00', 0x0, {0x1, {0x16, @remote, @broadcast, @icmp_id}}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x490) 4m27.194189623s ago: executing program 7 (id=336): syz_mount_image$ext4(&(0x7f00000004c0)='ext4\x00', &(0x7f00000000c0)='./bus\x00', 0x0, &(0x7f0000000100), 0x2, 0x50e, &(0x7f0000000f40)="$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") prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x35, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r0 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, 0x0) timer_settime(0x0, 0x1, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x3938700}}, 0x0) futex(&(0x7f000000cffc)=0x1, 0x86, 0x2, 0x0, 0x0, 0xfffffffc) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.controllers\x00', 0x275a, 0x0) syz_clone(0x80842111, 0x0, 0x0, 0x0, 0x0, 0x0) write$binfmt_script(r1, &(0x7f0000000000), 0x208e24b) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r2 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000080)={&(0x7f0000000300)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x54, 0x54, 0x3, [@union={0xb, 0x0, 0x0, 0x5, 0x0, 0x2}, @type_tag={0x7, 0x0, 0x0, 0x12, 0x4}, @func_proto={0x0, 0x6, 0x0, 0xd, 0x0, [{0xf, 0x4}, {0x8}, {0xe, 0x1}, {0x1, 0x4}, {0xa, 0x5}, {0x6, 0x2}]}]}, {0x0, [0x0]}}, &(0x7f0000000400)=""/67, 0x6f, 0x43, 0x0, 0x55b, 0x10000, @value=r1}, 0x28) bpf$MAP_CREATE(0x0, &(0x7f0000000500)=@base={0x16, 0x9, 0x9, 0x4, 0x200, r1, 0x101, '\x00', 0x0, r2, 0x4, 0x1, 0x5, 0x0, @void, @value, @void, @value}, 0x50) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) syz_open_procfs$namespace(0x0, 0x0) r4 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0, 0x0) r5 = fanotify_init(0xf00, 0x0) fanotify_mark(r5, 0x105, 0x4800003a, r4, 0x0) read$FUSE(r5, 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) 4m21.612200774s ago: executing program 3 (id=347): syz_open_dev$media(&(0x7f0000001a80), 0x3, 0x0) connect$inet(0xffffffffffffffff, &(0x7f0000004cc0)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0xffffffffffffffa3) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000680)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) listen(0xffffffffffffffff, 0xfffffffd) gettid() timer_create(0x0, 0x0, 0x0) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) r1 = socket(0x1d, 0x2, 0x6) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, 0x0) bind$can_j1939(r1, &(0x7f0000000380)={0x1d, 0x0, 0x1, {0x0, 0x1, 0x3}, 0xfe}, 0x18) syz_io_uring_setup(0x4b93, 0x0, 0x0, 0x0) r2 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) ioctl$VHOST_SET_OWNER(r2, 0xaf01, 0x0) ioctl$VHOST_SET_VRING_ADDR(r2, 0x4028af11, &(0x7f0000000480)={0x1, 0x0, 0x0, &(0x7f0000001740)=""/97, 0x0}) ioctl$VHOST_SET_MEM_TABLE(r2, 0x4008af03, &(0x7f0000000400)) r3 = eventfd2(0x1, 0x1) ioctl$VHOST_SET_VRING_ERR(r2, 0x4008af22, &(0x7f00000001c0)={0x0, r3}) ioctl$VHOST_SET_VRING_ADDR(r2, 0x4028af11, &(0x7f0000003700)={0x0, 0x0, 0x0, &(0x7f0000001d00)=""/163, 0x0, 0x4000}) ioctl$VHOST_SET_VRING_KICK(r2, 0x4008af20, &(0x7f0000000000)={0x0, r3}) ioctl$VHOST_VSOCK_SET_RUNNING(r2, 0x4004af61, &(0x7f00000000c0)=0x1) syz_emit_vhci(&(0x7f0000000300)=ANY=[@ANYBLOB="1b709c3cd9a8442f1d60a43c4ad74f23ba879d3bd9a25380da455a979185e7ad67abf4a1d445540798309c4a752169f72c5d200c52f816402a167f39e3c32dfe5185edc1f4396fc9a9c2c079e348cb588e4898d89a39ea24f694a48ce59cb1c6be89d46d482f88d9"], 0x7) 4m11.50682065s ago: executing program 35 (id=336): syz_mount_image$ext4(&(0x7f00000004c0)='ext4\x00', &(0x7f00000000c0)='./bus\x00', 0x0, &(0x7f0000000100), 0x2, 0x50e, &(0x7f0000000f40)="$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") prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x35, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r0 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, 0x0) timer_settime(0x0, 0x1, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x3938700}}, 0x0) futex(&(0x7f000000cffc)=0x1, 0x86, 0x2, 0x0, 0x0, 0xfffffffc) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.controllers\x00', 0x275a, 0x0) syz_clone(0x80842111, 0x0, 0x0, 0x0, 0x0, 0x0) write$binfmt_script(r1, &(0x7f0000000000), 0x208e24b) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r2 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000080)={&(0x7f0000000300)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x54, 0x54, 0x3, [@union={0xb, 0x0, 0x0, 0x5, 0x0, 0x2}, @type_tag={0x7, 0x0, 0x0, 0x12, 0x4}, @func_proto={0x0, 0x6, 0x0, 0xd, 0x0, [{0xf, 0x4}, {0x8}, {0xe, 0x1}, {0x1, 0x4}, {0xa, 0x5}, {0x6, 0x2}]}]}, {0x0, [0x0]}}, &(0x7f0000000400)=""/67, 0x6f, 0x43, 0x0, 0x55b, 0x10000, @value=r1}, 0x28) bpf$MAP_CREATE(0x0, &(0x7f0000000500)=@base={0x16, 0x9, 0x9, 0x4, 0x200, r1, 0x101, '\x00', 0x0, r2, 0x4, 0x1, 0x5, 0x0, @void, @value, @void, @value}, 0x50) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) syz_open_procfs$namespace(0x0, 0x0) r4 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0, 0x0) r5 = fanotify_init(0xf00, 0x0) fanotify_mark(r5, 0x105, 0x4800003a, r4, 0x0) read$FUSE(r5, 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) 4m9.299267158s ago: executing program 3 (id=376): bpf$MAP_CREATE(0x1900000000000000, 0x0, 0x50) prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x20000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x4000074, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) socketpair(0x1, 0x100000005, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) getpeername$packet(r3, &(0x7f0000000040)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000100)=0xfffffffffffffdd7) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0xb, &(0x7f0000000380)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020000000000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000300)='rcu_utilization\x00', r4}, 0x10) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x3, &(0x7f0000000240)=@framed, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f00000000c0)='mmap_lock_acquire_returned\x00', r5}, 0x10) r6 = syz_open_procfs(0x0, &(0x7f00000001c0)='pagemap\x00') pread64(r6, &(0x7f0000001240)=""/102400, 0x19000, 0x1000000000) msgget$private(0x0, 0x1c0) 4m7.830863505s ago: executing program 3 (id=378): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000240)=ANY=[@ANYBLOB="18020000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb703000008000000b703000000000020850000007200000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x8, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r3 = syz_open_procfs(0x0, &(0x7f0000000180)='wchan\x00') pread64(r3, &(0x7f000001a240)=""/102400, 0x19000, 0x41e) 4m6.575316245s ago: executing program 3 (id=381): bpf$MAP_CREATE(0x1900000000000000, 0x0, 0x50) prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x20000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x4000074, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) socketpair(0x1, 0x100000005, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) getpeername$packet(r3, &(0x7f0000000040)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000100)=0xfffffffffffffdd7) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0xb, &(0x7f0000000380)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020000000000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000300)='rcu_utilization\x00', r4}, 0x10) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x3, &(0x7f0000000240)=@framed, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f00000000c0)='mmap_lock_acquire_returned\x00', r5}, 0x10) 4m5.604072966s ago: executing program 3 (id=382): bpf$MAP_CREATE(0x0, &(0x7f0000000880)=@base={0xa, 0x4, 0xfff, 0x7, 0x88, 0xffffffffffffffff, 0x1, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1f, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x1a, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$PROG_BIND_MAP(0xa, &(0x7f00000004c0)={r0}, 0xc) 4m5.268234074s ago: executing program 3 (id=385): syz_open_dev$media(&(0x7f0000001a80), 0x3, 0x0) connect$inet(0xffffffffffffffff, &(0x7f0000004cc0)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0xffffffffffffffa3) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000680)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) listen(0xffffffffffffffff, 0xfffffffd) gettid() timer_create(0x0, 0x0, 0x0) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) r1 = socket(0x1d, 0x2, 0x6) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, 0x0) bind$can_j1939(r1, &(0x7f0000000380)={0x1d, 0x0, 0x1, {0x0, 0x1, 0x3}, 0xfe}, 0x18) syz_io_uring_setup(0x4b93, 0x0, 0x0, 0x0) r2 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) ioctl$VHOST_SET_OWNER(r2, 0xaf01, 0x0) ioctl$VHOST_SET_VRING_ADDR(r2, 0x4028af11, &(0x7f0000000480)={0x1, 0x0, 0x0, &(0x7f0000001740)=""/97, 0x0}) ioctl$VHOST_SET_MEM_TABLE(r2, 0x4008af03, &(0x7f0000000400)) r3 = eventfd2(0x1, 0x1) ioctl$VHOST_SET_VRING_ERR(r2, 0x4008af22, &(0x7f00000001c0)={0x0, r3}) ioctl$VHOST_SET_VRING_ADDR(r2, 0x4028af11, &(0x7f0000003700)={0x0, 0x0, 0x0, &(0x7f0000001d00)=""/163, 0x0, 0x4000}) ioctl$VHOST_SET_VRING_KICK(r2, 0x4008af20, &(0x7f0000000000)={0x0, r3}) ioctl$VHOST_VSOCK_SET_RUNNING(r2, 0x4004af61, &(0x7f00000000c0)=0x1) syz_emit_vhci(&(0x7f0000000300)=ANY=[@ANYBLOB="1b709c3cd9a8442f1d60a43c4ad74f23ba879d3bd9a25380da455a979185e7ad67abf4a1d445540798309c4a752169f72c5d200c52f816402a167f39e3c32dfe5185edc1f4396fc9a9c2c079e348cb588e4898d89a39ea24f694a48ce59cb1c6be89d46d482f88d9"], 0x7) 3m49.769015067s ago: executing program 36 (id=385): syz_open_dev$media(&(0x7f0000001a80), 0x3, 0x0) connect$inet(0xffffffffffffffff, &(0x7f0000004cc0)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0xffffffffffffffa3) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000680)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) listen(0xffffffffffffffff, 0xfffffffd) gettid() timer_create(0x0, 0x0, 0x0) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) r1 = socket(0x1d, 0x2, 0x6) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, 0x0) bind$can_j1939(r1, &(0x7f0000000380)={0x1d, 0x0, 0x1, {0x0, 0x1, 0x3}, 0xfe}, 0x18) syz_io_uring_setup(0x4b93, 0x0, 0x0, 0x0) r2 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) ioctl$VHOST_SET_OWNER(r2, 0xaf01, 0x0) ioctl$VHOST_SET_VRING_ADDR(r2, 0x4028af11, &(0x7f0000000480)={0x1, 0x0, 0x0, &(0x7f0000001740)=""/97, 0x0}) ioctl$VHOST_SET_MEM_TABLE(r2, 0x4008af03, &(0x7f0000000400)) r3 = eventfd2(0x1, 0x1) ioctl$VHOST_SET_VRING_ERR(r2, 0x4008af22, &(0x7f00000001c0)={0x0, r3}) ioctl$VHOST_SET_VRING_ADDR(r2, 0x4028af11, &(0x7f0000003700)={0x0, 0x0, 0x0, &(0x7f0000001d00)=""/163, 0x0, 0x4000}) ioctl$VHOST_SET_VRING_KICK(r2, 0x4008af20, &(0x7f0000000000)={0x0, r3}) ioctl$VHOST_VSOCK_SET_RUNNING(r2, 0x4004af61, &(0x7f00000000c0)=0x1) syz_emit_vhci(&(0x7f0000000300)=ANY=[@ANYBLOB="1b709c3cd9a8442f1d60a43c4ad74f23ba879d3bd9a25380da455a979185e7ad67abf4a1d445540798309c4a752169f72c5d200c52f816402a167f39e3c32dfe5185edc1f4396fc9a9c2c079e348cb588e4898d89a39ea24f694a48ce59cb1c6be89d46d482f88d9"], 0x7) 1m23.058974768s ago: executing program 4 (id=703): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x9}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, 0x0, 0x0, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xa, 0x4, 0xffd, 0x7, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000900)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000180)='sched_switch\x00', r4}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0xe, 0x16, &(0x7f0000001900)=ANY=[@ANYBLOB], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) 1m21.591556628s ago: executing program 4 (id=705): socket$inet_udplite(0x2, 0x2, 0x88) socket$netlink(0x10, 0x3, 0x0) r0 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r0, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) r1 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r1, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) setsockopt$sock_int(r1, 0x1, 0x8, &(0x7f0000000300), 0x4) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r1, 0x10e, 0x4, &(0x7f0000000040)=0x1800, 0x4) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TIPC_NL_LINK_GET(r2, &(0x7f00000001c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x2040}, 0xc, &(0x7f0000000180)={&(0x7f0000001b00)={0x88, 0x0, 0x200, 0x70bd2d, 0x25dfdbff, {}, [@TIPC_NLA_LINK={0x8, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_PROP={0x4}]}, @TIPC_NLA_LINK={0x4c, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_PROP={0x1c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xc0be}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xf}]}, @TIPC_NLA_LINK_PROP={0x2c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x5}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x6}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xd}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x9}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x2}]}]}, @TIPC_NLA_SOCK={0x20, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x1}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x9}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}]}]}, 0x88}, 0x1, 0x0, 0x0, 0x20004005}, 0x2000c800) syz_genetlink_get_family_id$ipvs(&(0x7f00000003c0), r0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x24, r4, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r5}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x3}]}, 0x24}}, 0x0) sendmsg$NL80211_CMD_START_AP(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000002c0)={0x64, r4, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r5}, @void}}, [@beacon=[@NL80211_ATTR_BEACON_HEAD={0x2b, 0xe, {{{}, {}, @broadcast, @device_a, @from_mac=@broadcast}, 0x0, @random=0x7ff, 0x1, @void, @void, @val={0x3, 0x1, 0x3}, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void}}, @NL80211_ATTR_IE_ASSOC_RESP={0x4}], @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}], @NL80211_ATTR_BEACON_INTERVAL={0x8}, @NL80211_ATTR_DTIM_PERIOD={0x8, 0xd, 0x81}]}, 0x64}, 0x1, 0x0, 0x0, 0x20000000}, 0x0) 1m20.98215871s ago: executing program 4 (id=706): r0 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f0000000940)=ANY=[@ANYBLOB="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"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x366, 0x10, &(0x7f0000000000), 0x1dd, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="12000000040000000400000012"], 0x48) close(r0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000140)={{r1}, &(0x7f0000000380), &(0x7f0000000100)=r0}, 0x20) close(0x3) 1m20.83161344s ago: executing program 4 (id=707): socket$inet_udplite(0x2, 0x2, 0x88) socket$netlink(0x10, 0x3, 0x0) r0 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r0, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) r1 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r1, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) setsockopt$sock_int(r1, 0x1, 0x8, &(0x7f0000000300), 0x4) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r1, 0x10e, 0x4, &(0x7f0000000040)=0x1800, 0x4) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ipvs(&(0x7f00000003c0), r0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x24, r3, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r4}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x3}]}, 0x24}}, 0x0) sendmsg$NL80211_CMD_START_AP(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000002c0)={0x64, r3, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r4}, @void}}, [@beacon=[@NL80211_ATTR_BEACON_HEAD={0x2b, 0xe, {{{}, {}, @broadcast, @device_a, @from_mac=@broadcast}, 0x0, @random=0x7ff, 0x1, @void, @void, @val={0x3, 0x1, 0x3}, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void}}, @NL80211_ATTR_IE_ASSOC_RESP={0x4}], @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}], @NL80211_ATTR_BEACON_INTERVAL={0x8}, @NL80211_ATTR_DTIM_PERIOD={0x8, 0xd, 0x81}]}, 0x64}, 0x1, 0x0, 0x0, 0x20000000}, 0x0) 1m20.650601946s ago: executing program 4 (id=711): bpf$MAP_CREATE(0x1900000000000000, 0x0, 0x50) prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x20000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r2, &(0x7f00000bd000), 0x4000074, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) socketpair(0x1, 0x100000005, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) getpeername$packet(r3, &(0x7f0000000040)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000100)=0xfffffffffffffdd7) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0xb, &(0x7f0000000380)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020000000000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000300)='rcu_utilization\x00', r4}, 0x10) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x3, &(0x7f0000000240)=@framed, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f00000000c0)='mmap_lock_acquire_returned\x00', r5}, 0x10) msgget$private(0x0, 0x1c0) 1m19.407516704s ago: executing program 4 (id=714): socket$packet(0x11, 0x3, 0x300) ioctl$EVIOCGBITSW(0xffffffffffffffff, 0x80404525, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000040)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f0000000000)=0x5) getpid() socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@file={0x0, './bus\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x3fffffffffffcb5, 0x2, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r2}, 0x10) r3 = socket$can_raw(0x1d, 0x3, 0x1) setsockopt$CAN_RAW_JOIN_FILTERS(r3, 0x65, 0x6, 0x0, 0x0) sched_setaffinity(0xffffffffffffffff, 0x8, &(0x7f00000007c0)=0xeb) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f00000001c0)='./bus\x00', 0x41, &(0x7f0000000740)={[{@bsdgroups}, {@nodiscard}, {@noblock_validity}, {@grpjquota}, {@grpjquota}, {@noquota}, {@auto_da_alloc}, {@noload}, {@nodiscard}]}, 0x64, 0x50a, &(0x7f0000000200)="$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") socket$packet(0x11, 0x2, 0x300) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000540)=@newqdisc={0x5a, 0x24, 0x3fe3aa0262d8c783, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0x4c, 0x2, {{0x3, 0x0, 0x7ff, 0x1}, 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0x1e, 0x2, 0x0, 0x0, 0x0, {0x0, 0x0, 0xfffffffc}}}}]}, 0x78}}, 0x0) 1m3.64300804s ago: executing program 37 (id=714): socket$packet(0x11, 0x3, 0x300) ioctl$EVIOCGBITSW(0xffffffffffffffff, 0x80404525, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000040)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f0000000000)=0x5) getpid() socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@file={0x0, './bus\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x3fffffffffffcb5, 0x2, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r2}, 0x10) r3 = socket$can_raw(0x1d, 0x3, 0x1) setsockopt$CAN_RAW_JOIN_FILTERS(r3, 0x65, 0x6, 0x0, 0x0) sched_setaffinity(0xffffffffffffffff, 0x8, &(0x7f00000007c0)=0xeb) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f00000001c0)='./bus\x00', 0x41, &(0x7f0000000740)={[{@bsdgroups}, {@nodiscard}, {@noblock_validity}, {@grpjquota}, {@grpjquota}, {@noquota}, {@auto_da_alloc}, {@noload}, {@nodiscard}]}, 0x64, 0x50a, &(0x7f0000000200)="$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") socket$packet(0x11, 0x2, 0x300) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000540)=@newqdisc={0x5a, 0x24, 0x3fe3aa0262d8c783, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0x4c, 0x2, {{0x3, 0x0, 0x7ff, 0x1}, 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0x1e, 0x2, 0x0, 0x0, 0x0, {0x0, 0x0, 0xfffffffc}}}}]}, 0x78}}, 0x0) 16.552465865s ago: executing program 0 (id=919): r0 = socket$inet6(0xa, 0x4, 0x7) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000e00)={0x0, 0x0, &(0x7f0000000040)={0x0}, 0x1, 0x0, 0x0, 0x20000001}, 0x0) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000100)=[@in6={0xa, 0x4e24, 0x1, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x40}, @in={0x2, 0x4e24, @remote}, @in6={0xa, 0x4e24, 0x2, @loopback, 0x5}, @in={0x2, 0x4e23, @rand_addr=0x64010101}, @in6={0xa, 0x4e20, 0x2, @mcast1, 0xf}], 0x74) bind$inet6(r0, &(0x7f0000fa0fe4)={0xa, 0x4e20, 0x7fff, @loopback}, 0x1c) r2 = socket$netlink(0x10, 0x3, 0x10) r3 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r3, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) setsockopt$sock_int(r3, 0x1, 0x8, &(0x7f0000000000)=0x80, 0x4) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r3, 0x10e, 0x4, &(0x7f0000000180)=0x800, 0x4) r4 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RATE_NEW(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000300)={0x34, r4, 0x1, 0x0, 0x25dfdbfb, {0x25}, [@handle=@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}]}, 0x34}, 0x1, 0x0, 0x0, 0x41}, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r6 = socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$tipc2(&(0x7f0000000000), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r6, 0x8933, &(0x7f00000003c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_CHANNEL_SWITCH(r6, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000400)={0x30, r5, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r7}, @void}}, [@chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x994}], @NL80211_ATTR_CH_SWITCH_BLOCK_TX={0x4}, @NL80211_ATTR_CH_SWITCH_COUNT={0x8, 0xb7, 0x99}]}, 0x30}}, 0x0) 14.081765894s ago: executing program 0 (id=931): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="05000000010000000a00000008"], 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000380)={{r0}, &(0x7f0000000200), &(0x7f0000000240)}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000080)='GPL\x00', 0x3, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) socket$inet6_tcp(0xa, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000240)={0x8, 0x248}, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xffffe000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f00000004c0)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x3fffffffffffeda, 0x2, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0700000004000000080200000100000000000000", @ANYRES32, @ANYBLOB="00000400"/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, 0x0, &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000080)='sched_switch\x00', r4}, 0x18) syz_mount_image$ext4(&(0x7f0000000540)='ext4\x00', &(0x7f00000001c0)='./file2\x00', 0x88, &(0x7f0000000c80)={[{@nogrpid}, {@min_batch_time={'min_batch_time', 0x3d, 0x4}}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x68}}, {@nombcache}, {@noinit_itable}, {@quota}]}, 0x3, 0x438, &(0x7f0000000580)="$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") preadv(0xffffffffffffffff, &(0x7f0000000200)=[{0x0}], 0x1, 0x0, 0x0) kcmp$KCMP_EPOLL_TFD(r1, r1, 0x7, r2, &(0x7f0000000340)={0xffffffffffffffff, r2, 0x7}) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xc, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) symlink(&(0x7f00000003c0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f0000000cc0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') readlink(&(0x7f0000000240)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f0000001200)=""/4096, 0x1000) 13.986592019s ago: executing program 6 (id=932): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000480)=@abs={0x0, 0x0, 0x8004e24}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000300)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000002000000b7030000e8ffff05850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @fallback=0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000a00)={&(0x7f0000000d00)='sched_switch\x00', r3}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x11, 0xf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) socket$nl_xfrm(0x10, 0x3, 0x6) r4 = socket$netlink(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, 0x0) r5 = dup(0xffffffffffffffff) getsockname$packet(r5, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000000140)=0x14) sendmsg$nl_route(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000500)=@newlink={0xec, 0x10, 0x801, 0x0, 0x0, {0x0, 0x0, 0x0, r6}, [@IFLA_AF_SPEC={0xcc, 0x1a, 0x0, 0x1, [@AF_INET6={0x18, 0x2, 0x0, 0x1, [@IFLA_INET6_TOKEN={0x14, 0x7, @local}]}, @AF_INET={0x30, 0x2, 0x0, 0x1, {0x4, 0x1, 0x0, 0x1, [{0x3}, {0x8}, {0x4}, {0x8}, {0x8}]}}, @AF_INET={0x18, 0x2, 0x0, 0x1, {0x14, 0x1, 0x0, 0x1, [{0x11}, {0x8}]}}, @AF_INET6={0x18, 0xa, 0x0, 0x1, [@IFLA_INET6_TOKEN={0x14, 0x7, @mcast2}, @IFLA_INET6_TOKEN={0x0, 0x7, @mcast2}, @IFLA_INET6_TOKEN={0x0, 0x7, @dev}]}, @AF_INET={0x28, 0x2, 0x0, 0x1, {0x24, 0x1, 0x0, 0x1, [{0x8}, {0x8}, {0x8}, {0x8}]}}, @AF_MPLS={0x4}, @AF_INET6={0x0, 0xa, 0x0, 0x1, [@IFLA_INET6_TOKEN={0x0, 0x7, @rand_addr=' \x01\x00'}, @IFLA_INET6_ADDR_GEN_MODE, @IFLA_INET6_ADDR_GEN_MODE, @IFLA_INET6_TOKEN={0x0, 0x7, @dev}, @IFLA_INET6_TOKEN={0x0, 0x7, @mcast2}, @IFLA_INET6_TOKEN={0x0, 0x7, @rand_addr=' \x01\x00'}, @IFLA_INET6_TOKEN={0x0, 0x7, @private1}, @IFLA_INET6_ADDR_GEN_MODE, @IFLA_INET6_ADDR_GEN_MODE]}, @AF_MPLS={0x4}]}]}, 0xec}}, 0x0) ioctl$NS_GET_OWNER_UID(0xffffffffffffffff, 0xb704, &(0x7f0000000180)) getsockopt$inet_pktinfo(0xffffffffffffffff, 0x0, 0x8, &(0x7f00000001c0)={0x0, @private, @multicast2}, 0x0) r7 = socket$netlink(0x10, 0x3, 0xa) r8 = dup(r7) fsopen(0x0, 0x0) sendfile(r8, 0xffffffffffffffff, 0x0, 0x80001d00c0d1) 12.425029013s ago: executing program 6 (id=936): r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan0\x00'}) sendmsg$NL80211_CMD_SET_INTERFACE(r0, 0x0, 0x0) 11.528632907s ago: executing program 6 (id=939): r0 = socket$inet6(0xa, 0x4, 0x7) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000e00)={0x0, 0x0, &(0x7f0000000040)={0x0}, 0x1, 0x0, 0x0, 0x20000001}, 0x0) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000100)=[@in6={0xa, 0x4e24, 0x1, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x40}, @in={0x2, 0x4e24, @remote}, @in6={0xa, 0x4e24, 0x2, @loopback, 0x5}, @in={0x2, 0x4e23, @rand_addr=0x64010101}, @in6={0xa, 0x4e20, 0x2, @mcast1, 0xf}], 0x74) bind$inet6(r0, &(0x7f0000fa0fe4)={0xa, 0x4e20, 0x7fff, @loopback}, 0x1c) r2 = socket$netlink(0x10, 0x3, 0x10) r3 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r3, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) setsockopt$sock_int(r3, 0x1, 0x8, &(0x7f0000000000)=0x80, 0x4) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r3, 0x10e, 0x4, &(0x7f0000000180)=0x800, 0x4) r4 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RATE_NEW(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000300)={0x34, r4, 0x1, 0x0, 0x25dfdbfb, {0x25}, [@handle=@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}]}, 0x34}, 0x1, 0x0, 0x0, 0x41}, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TIPC_NL_BEARER_ENABLE(r7, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000080)={0x3c, 0x0, 0xd01, 0x0, 0x0, {}, [@TIPC_NLA_BEARER={0x28, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_PROP={0x14, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0xf}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x6}]}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz1\x00'}]}]}, 0x3c}, 0x1, 0x0, 0x0, 0x851}, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r6, 0x8933, &(0x7f00000003c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_CHANNEL_SWITCH(r6, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000400)={0x30, r5, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r8}, @void}}, [@chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x994}], @NL80211_ATTR_CH_SWITCH_BLOCK_TX={0x4}, @NL80211_ATTR_CH_SWITCH_COUNT={0x8, 0xb7, 0x99}]}, 0x30}}, 0x0) 10.106415501s ago: executing program 0 (id=943): socket$packet(0x11, 0x3, 0x300) ioctl$EVIOCGBITSW(0xffffffffffffffff, 0x80404525, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000040)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000001700)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './bus\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x3fffffffffffcb5, 0x2, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r3}, 0x10) r4 = socket$can_raw(0x1d, 0x3, 0x1) setsockopt$CAN_RAW_JOIN_FILTERS(r4, 0x65, 0x6, 0x0, 0x0) sched_setaffinity(0xffffffffffffffff, 0x8, &(0x7f00000007c0)=0xeb) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f00000001c0)='./bus\x00', 0x41, &(0x7f0000000740)={[{@bsdgroups}, {@nodiscard}, {@noblock_validity}, {@grpjquota}, {@grpjquota}, {@noquota}, {@auto_da_alloc}, {@noload}, {@nodiscard}]}, 0x64, 0x50a, &(0x7f0000000200)="$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") socket$packet(0x11, 0x2, 0x300) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000540)=@newqdisc={0x5a, 0x24, 0x3fe3aa0262d8c783, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0x4c, 0x2, {{0x3, 0x0, 0x7ff, 0x1}, 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0x1e, 0x2, 0x0, 0x0, 0x0, {0x0, 0x0, 0xfffffffc}}}}]}, 0x78}}, 0x0) 10.095208978s ago: executing program 8 (id=944): mkdir(0x0, 0x101) pipe2$9p(&(0x7f00000000c0), 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFQNL_MSG_CONFIG(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000540)=ANY=[@ANYBLOB="1c000000020301040000000000000000000000100800010001"], 0x1c}}, 0x0) getpid() r4 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r4, 0x0, 0x40, &(0x7f00000014c0)=@nat={'nat\x00', 0x62, 0x5, 0x430, 0x398, 0x2a0, 0xffffffff, 0xe0, 0x188, 0x398, 0x398, 0xffffffff, 0x398, 0x398, 0x5, 0x0, {[{{@ip={@multicast2, @initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 'veth0_to_bond\x00', 'wg1\x00'}, 0x0, 0xa8, 0xe0, 0x0, {0x22e}, [@common=@unspec=@statistic={{0x38}}]}, @MASQUERADE={0x38, 'MASQUERADE\x00', 0x0, {0x1, {0x0, @multicast1, @remote, @icmp_id, @icmp_id}}}}, {{@uncond, 0x0, 0x70, 0xa8}, @REDIRECT={0x38, 'REDIRECT\x00', 0x0, {0x1, {0x0, @multicast1, @empty, @gre_key, @icmp_id}}}}, {{@ip={@broadcast, @multicast1, 0x0, 0x0, 'veth1_to_hsr\x00', 'ipvlan0\x00'}, 0x0, 0xe0, 0x118, 0x0, {}, [@common=@socket0={{0x20}}, @common=@osf={{0x50}, {'syz0\x00'}}]}, @DNAT0={0x38, 'DNAT\x00', 0x0, {0x1, {0x0, @private, @multicast2, @gre_key}}}}, {{@ip={@remote, @empty, 0x0, 0x0, 'veth1_to_batadv\x00', 'pim6reg\x00', {0xff}}, 0x0, 0xc0, 0xf8, 0x0, {}, [@common=@ttl={{0x28}}, @common=@inet=@tcpmss={{0x28}, {0xf}}]}, @NETMAP={0x38, 'NETMAP\x00', 0x0, {0x1, {0x16, @remote, @broadcast, @icmp_id}}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x490) 7.201549309s ago: executing program 0 (id=947): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="05000000010000000a00000008"], 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000380)={{r0}, &(0x7f0000000200), &(0x7f0000000240)}, 0x20) prlimit64(0x0, 0xe, &(0x7f0000000240)={0x8, 0x248}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x1, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xffffe000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f00000004c0)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x3fffffffffffeda, 0x2, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0700000004000000080200000100000000000000", @ANYRES32, @ANYBLOB="00000400"/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000080)='sched_switch\x00'}, 0x18) syz_mount_image$ext4(&(0x7f0000000540)='ext4\x00', &(0x7f00000001c0)='./file2\x00', 0x88, &(0x7f0000000c80)={[{@nogrpid}, {@min_batch_time={'min_batch_time', 0x3d, 0x4}}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x68}}, {@nombcache}, {@noinit_itable}, {@quota}]}, 0x3, 0x438, &(0x7f0000000580)="$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") bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xc, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) symlink(&(0x7f00000003c0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f0000000cc0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') readlink(&(0x7f0000000240)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f0000001200)=""/4096, 0x1000) 6.479895357s ago: executing program 9 (id=948): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000040)={0x11, 0x4, 0x0, &(0x7f0000000180)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r4, 0x29, 0x40, &(0x7f00000007c0)=@raw={'raw\x00', 0x3c1, 0x3, 0x378, 0x1d8, 0x12, 0x60d, 0x1d8, 0x202, 0x2a8, 0x2e8, 0x2e8, 0x2a8, 0x2c0, 0x4, 0x0, {[{{@ipv6={@local, @mcast1, [], [], 'veth0_to_team\x00', 'macsec0\x00'}, 0x0, 0x190, 0x1d8, 0x0, {}, [@common=@unspec=@string={{0xc0}, {0x0, 0x0, 'kmp\x00', "000000165a8c2e0617ae5119b5135c2aee68d23a465cd431e1ecef50c3234e082555f672225d6147864fa03182f5cf11d8c348cbd06dc8de1dcbde7d4e252c3394fed47bf78c70f607b0178fa5ea335019ac05a602061c96baebc989f1f34a214e6726401fe4b124e0f7323a587d2a1fcf07000000eca0a7b66c60c527bac2b5", 0x2, 0x2}}, @inet=@rpfilter={{0x28}}]}, @common=@unspec=@LED={0x48, 'LED\x00', 0x0, {'syz1\x00'}}}, {{@uncond, 0x0, 0xa8, 0xd0}, @common=@inet=@SET1={0x28}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x3d8) r5 = io_uring_setup(0x3454, &(0x7f0000000080)={0x0, 0xffffeffe, 0x18, 0x2}) io_uring_register$IORING_REGISTER_BUFFERS(r5, 0x0, &(0x7f00000002c0)=[{&(0x7f0000001700)=""/4095, 0x440000}], 0x100000000000011a) 6.343486539s ago: executing program 8 (id=950): close(0xffffffffffffffff) bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1f, 0x11, 0x0, &(0x7f0000000b00)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x1a, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) sendmsg$IPCTNL_MSG_CT_GET(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, 0x0}, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-camellia-asm\x00'}, 0x58) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) write$cgroup_type(r3, &(0x7f0000000100), 0x9) recvmsg(r2, &(0x7f0000000500)={0x0, 0x0, 0x0}, 0x2) r4 = accept4(r1, 0x0, 0x0, 0x800) sendmsg$NL80211_CMD_JOIN_MESH(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000540)=ANY=[@ANYBLOB='L\x00\x00', @ANYRES64, @ANYRES16], 0x4c}}, 0x4000804) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.swap.current\x00', 0x26e1, 0x0) sendmmsg$alg(r4, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048"}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r4, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x51}, {0x0}], 0x2}, 0x0) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000013c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000001380)={0x0, 0x0, &(0x7f0000001340)={&(0x7f0000000680)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r5, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r6, @ANYBLOB="d506330080000000ffffffffffff080211000001"], 0x6f4}}, 0x0) 4.935287899s ago: executing program 9 (id=952): r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/asound/timers\x00', 0x0, 0x0) syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000040)='./file0\x00', 0x0, &(0x7f0000000d40)=ANY=[@ANYBLOB="73686f72746e616d653d77696e39352c73686f72746e616d653d77696e6e742c756e695f786c6174653d302c756e695f786c6174653d312c757466383d312c757466383d312c646973636172642c757466383d302c756e695f786c6174653d302c666c7573682c73686f72746e616d653d6d697865642c73686f72746e616d653d6c6f7765722c646f733178666c6f7070792c73686f72746e616d653d77696e6e742c73686f72746e616d653d6c6f7765722c757466382c0014697a7960fb374b723f64329787434c6c9f891d2e309efaf1d4e529e1ba0f697fedffb095592bc19d5a8f8141ee9bf46262f3a2b1452bf206c0e2ae8a465e6e1be6eeb5d588035a24458d476fc1f9a234cdc4ba352a4185614ce67df4870bff796357ee95fffb99cde9"], 0xfe, 0x2ae, &(0x7f0000000a40)="$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") r1 = open(0x0, 0x14507e, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e22}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r5 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000080)='sched_switch\x00', r5}, 0x18) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) ioctl$FITRIM(r1, 0xc0185879, 0x0) connect$can_bcm(0xffffffffffffffff, &(0x7f0000001200), 0x10) close(0xffffffffffffffff) close(r0) sync() 4.33648508s ago: executing program 8 (id=953): socket$nl_generic(0x10, 0x3, 0x10) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) close(0x4) syz_open_procfs$namespace(0x0, &(0x7f0000000040)='ns/cgroup\x00') r0 = socket$inet_smc(0x2b, 0x1, 0x0) connect$inet(r0, &(0x7f0000000380)={0x2, 0x4e25, @local}, 0x10) 4.261236577s ago: executing program 6 (id=954): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000001fc0)=@delchain={0x1d0, 0x65, 0x2, 0x70bd27, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, {0x2, 0x9}, {0x0, 0x1}, {0x0, 0xe}}, [@TCA_CHAIN={0x8, 0xb, 0x6}, @TCA_RATE={0x6, 0x5, {0x8, 0xb6}}, @filter_kind_options=@f_bpf={{0x8}, {0x194, 0x2, [@TCA_BPF_FD={0x8}, @TCA_BPF_NAME={0xc, 0x7, './file0\x00'}, @TCA_BPF_ACT={0x17c, 0x1, [@m_simple={0x30, 0x3e, 0x0, 0x0, {{0xb}, {0x4}, {0x4}, {0xc}, {0xc, 0x8, {0x1}}}}, @m_connmark={0xdc, 0x8, 0x0, 0x0, {{0xd}, {0xac, 0x2, 0x0, 0x1, [@TCA_CONNMARK_PARMS={0x1c, 0x1, {{0xce, 0x2, 0x7, 0x6, 0x40}, 0x9}}, @TCA_CONNMARK_PARMS={0x1c, 0x1, {{0xe6d, 0x1, 0x20000000, 0x7, 0x2}, 0x6}}, @TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x7fffffff, 0xfffffffd, 0x1, 0xd66, 0x2}, 0xc}}, @TCA_CONNMARK_PARMS={0x1c, 0x1, {{0xfffff801, 0x7, 0x0, 0x4, 0x3}}}, @TCA_CONNMARK_PARMS={0x1c, 0x1, {{0xf06, 0x2, 0x4}, 0x6}}, @TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x5, 0x100, 0x6, 0x5, 0x8}, 0x7}}]}, {0x4}, {0xc}, {0xc, 0x8, {0x1}}}}, @m_connmark={0x6c, 0x15, 0x0, 0x0, {{0xd}, {0x3c, 0x2, 0x0, 0x1, [@TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x6, 0x4, 0x8, 0xc, 0x8}, 0xff21}}, @TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x1, 0x2, 0x20000000, 0x1, 0x6}, 0x8}}]}, {0x4}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x1, 0x3}}}}]}]}}]}, 0x1d0}, 0x1, 0x0, 0x0, 0x40040d1}, 0x0) r0 = socket(0x10, 0x803, 0x0) sendto(r0, &(0x7f0000000740)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) recvmmsg(r0, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0x80, &(0x7f0000000380)=[{&(0x7f0000000140)=""/100, 0x64}, {0x0}, {&(0x7f0000000fc0)=""/4096, 0x1000}, {&(0x7f0000000400)=""/106, 0x6a}, {&(0x7f0000000980)=""/73, 0x49}, {&(0x7f0000000200)=""/77, 0x4d}, {&(0x7f00000007c0)=""/154, 0x9a}, {&(0x7f00000001c0)=""/17, 0x11}], 0x8, &(0x7f0000000600)=""/191, 0xbf}}], 0x1, 0x2040000, &(0x7f0000003700)={0x77359400}) 3.255700209s ago: executing program 2 (id=956): socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000a00)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000000cc0)={'virt_wifi0\x00', &(0x7f0000000040)=@ethtool_drvinfo={0x3, "ff918db4b2ea864f5815795e5c517b777bf7d391e3a422329473449b6549c7ed", "1a324626a66fea4c37e166fb9b76dbb0b34a4b52c396450339b98a84de4a9567", "b767d3283bdd19a0bac6fc57d24dc8ec638ab26a47bc5f7cf96061a759cdef6c", "bea2a66f7ab0e327991883899b8aa68cbdb0cdcc65ba8de2a80f983f3bc5c9b5", "bf445359f87c8d9d44597e290cfd1c5ef93ac3eabc63287ff01f140e67ad238a", "7fb9d290634203eb8f9ca834", 0x8, 0x7fff, 0x6, 0x5, 0x6}}) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000240)={&(0x7f0000000280)='contention_end\x00'}, 0x18) r1 = socket$key(0xf, 0x3, 0x2) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000580)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)={{0x14}, [@NFT_MSG_NEWRULE={0x48, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x1c, 0x4, 0x0, 0x1, [{0x18, 0x1, 0x0, 0x1, @fib={{0x8}, @val={0xc, 0x2, 0x0, 0x1, [@NFTA_FIB_RESULT={0x8}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x70}}, 0x0) unshare(0x20000400) bpf$BPF_MAP_LOOKUP_AND_DELETE_ELEM(0x15, &(0x7f0000000000)={0xffffffffffffffff, 0x0, 0x0, 0x4}, 0x20) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0x6, &(0x7f00000005c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x70) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000580)={&(0x7f0000000080)='sched_switch\x00', r3}, 0x10) sendmsg$key(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)={0x2, 0xa, 0x0, 0x14, 0x2, 0x0, 0x70bd25, 0x25dfdbfc}, 0x10}}, 0x30004000) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, 0x0) r4 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000040)={'wlan0\x00', 0x0}) sendto$packet(r4, 0x0, 0x0, 0x0, &(0x7f00000001c0)={0x11, 0x888e, r5, 0x1, 0x0, 0x6, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}}, 0x14) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0x6, &(0x7f00000005c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x70) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000580)={&(0x7f0000000080)='sched_switch\x00', r6}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4000000000000007910480000000000610400000000000095000000"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) recvmsg$unix(0xffffffffffffffff, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f00000006c0)=""/179, 0x33fe0}], 0x1}, 0x0) getpeername$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, &(0x7f0000000200)=0x14) r7 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_route(r3, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000340)=@getroute={0x14, 0x1a, 0x100, 0x70bd28, 0x25dfdbfd}, 0x14}, 0x1, 0x0, 0x0, 0x8000}, 0x4008900) sendmsg$nl_generic(r7, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000a40)=ANY=[@ANYBLOB="140000002500010324bd7002fddbdf2501000000959cfe49db43ecd9e5c1cc7b27dd3ea0269ddc7e0ab9ef402e183fd70fbc30d790d81140829956d3a94cb14eef53d99e61c72b8f8a98750adb44e5cfa551d718db35ccf072"], 0x14}}, 0x0) 3.207720497s ago: executing program 8 (id=957): socket$inet_udplite(0x2, 0x2, 0x88) socket$netlink(0x10, 0x3, 0x0) r0 = socket$netlink(0x10, 0x3, 0x10) r1 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r1, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) setsockopt$sock_int(r1, 0x1, 0x8, &(0x7f0000000300), 0x4) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r1, 0x10e, 0x4, &(0x7f0000000040)=0x1800, 0x4) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TIPC_NL_LINK_GET(r2, &(0x7f00000001c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x2040}, 0xc, &(0x7f0000000180)={&(0x7f0000001b00)={0x88, 0x0, 0x200, 0x70bd2d, 0x25dfdbff, {}, [@TIPC_NLA_LINK={0x8, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_PROP={0x4}]}, @TIPC_NLA_LINK={0x4c, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_PROP={0x1c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xc0be}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xf}]}, @TIPC_NLA_LINK_PROP={0x2c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x5}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x6}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xd}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x9}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x2}]}]}, @TIPC_NLA_SOCK={0x20, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x1}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x9}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}]}]}, 0x88}, 0x1, 0x0, 0x0, 0x20004005}, 0x2000c800) syz_genetlink_get_family_id$ipvs(&(0x7f00000003c0), r0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x24, r4, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r5}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x3}]}, 0x24}}, 0x0) sendmsg$NL80211_CMD_START_AP(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000002c0)={0x64, r4, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r5}, @void}}, [@beacon=[@NL80211_ATTR_BEACON_HEAD={0x2b, 0xe, {{{}, {}, @broadcast, @device_a, @from_mac=@broadcast}, 0x0, @random=0x7ff, 0x1, @void, @void, @val={0x3, 0x1, 0x3}, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void}}, @NL80211_ATTR_IE_ASSOC_RESP={0x4}], @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}], @NL80211_ATTR_BEACON_INTERVAL={0x8}, @NL80211_ATTR_DTIM_PERIOD={0x8, 0xd, 0x81}]}, 0x64}, 0x1, 0x0, 0x0, 0x20000000}, 0x0) 3.1886336s ago: executing program 6 (id=958): syz_clone(0x600, 0x0, 0x33, 0x0, 0x0, 0x0) r0 = gettid() timer_create(0x8, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) r1 = syz_open_dev$evdev(&(0x7f0000000080), 0x0, 0x0) readv(r1, &(0x7f0000001140)=[{&(0x7f0000000700)=""/206, 0xce}], 0x1) 3.015969549s ago: executing program 0 (id=959): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000480)=@abs={0x0, 0x0, 0x8004e24}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000300)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000002000000b7030000e8ffff05850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @fallback=0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000a00)={&(0x7f0000000d00)='sched_switch\x00', r3}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x11, 0xf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) socket$nl_xfrm(0x10, 0x3, 0x6) r4 = socket$netlink(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r6 = dup(r5) getsockname$packet(r6, 0x0, &(0x7f0000000140)) sendmsg$nl_route(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000500)=@newlink={0xec, 0x10, 0x801, 0x0, 0x0, {}, [@IFLA_AF_SPEC={0xcc, 0x1a, 0x0, 0x1, [@AF_INET6={0x18, 0x2, 0x0, 0x1, [@IFLA_INET6_TOKEN={0x14, 0x7, @local}]}, @AF_INET={0x30, 0x2, 0x0, 0x1, {0x4, 0x1, 0x0, 0x1, [{0x3}, {0x8}, {0x4}, {0x8}, {0x8}]}}, @AF_INET={0x18, 0x2, 0x0, 0x1, {0x14, 0x1, 0x0, 0x1, [{0x11}, {0x8}]}}, @AF_INET6={0x18, 0xa, 0x0, 0x1, [@IFLA_INET6_TOKEN={0x14, 0x7, @mcast2}, @IFLA_INET6_TOKEN={0x0, 0x7, @mcast2}, @IFLA_INET6_TOKEN={0x0, 0x7, @dev}]}, @AF_INET={0x28, 0x2, 0x0, 0x1, {0x24, 0x1, 0x0, 0x1, [{0x8}, {0x8}, {0x8}, {0x8}]}}, @AF_MPLS={0x4}, @AF_INET6={0x0, 0xa, 0x0, 0x1, [@IFLA_INET6_TOKEN={0x0, 0x7, @rand_addr=' \x01\x00'}, @IFLA_INET6_ADDR_GEN_MODE, @IFLA_INET6_ADDR_GEN_MODE, @IFLA_INET6_TOKEN={0x0, 0x7, @dev}, @IFLA_INET6_TOKEN={0x0, 0x7, @mcast2}, @IFLA_INET6_TOKEN={0x0, 0x7, @rand_addr=' \x01\x00'}, @IFLA_INET6_TOKEN={0x0, 0x7, @private1}, @IFLA_INET6_ADDR_GEN_MODE, @IFLA_INET6_ADDR_GEN_MODE]}, @AF_MPLS={0x4}]}]}, 0xec}}, 0x0) ioctl$NS_GET_OWNER_UID(0xffffffffffffffff, 0xb704, &(0x7f0000000180)) getsockopt$inet_pktinfo(0xffffffffffffffff, 0x0, 0x8, &(0x7f00000001c0)={0x0, @private, @multicast2}, 0x0) r7 = socket$netlink(0x10, 0x3, 0xa) r8 = dup(r7) fsopen(0x0, 0x0) sendfile(r8, 0xffffffffffffffff, 0x0, 0x80001d00c0d1) 2.914901651s ago: executing program 9 (id=960): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000840)=@base={0xa, 0x5, 0x2, 0x4, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) close(r0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x0, 0x10, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7020000010000e1850000008600000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000001800007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0x10, &(0x7f0000000180)=ANY=[], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) 2.863718267s ago: executing program 2 (id=961): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2500000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000060000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0xffb, @void, @value}, 0x94) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x16, 0x0, 0x4, 0x1, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b7040000000000008500000057"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb70300000800"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x16, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @flow_dissector, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000180)={r1, 0x2000000, 0xe, 0x0, &(0x7f0000000200)="63eced8e46dc3f0adf33c9f7b986", 0x0, 0x3800, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 2.781563176s ago: executing program 8 (id=962): socketpair$unix(0x1, 0x5, 0x0, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x3, 0x0) r2 = socket$unix(0x1, 0x5, 0x0) r3 = socket(0x400000000010, 0x3, 0x0) socket$unix(0x1, 0x5, 0x0) sendmsg$nl_route_sched(r3, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0x25dfdbfd, {0x0, 0x0, 0x0, 0x0, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x1, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x28}}}]}, 0x38}}, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000001340)=@newtfilter={0x38, 0x2c, 0xd27, 0x70bd28, 0x8000, {0x0, 0x0, 0x0, r4, {0x8, 0x3}, {}, {0xa, 0xfff3}}, [@filter_kind_options=@f_fw={{0x7}, {0x8, 0x2, [@TCA_FW_MASK={0x8, 0x5, 0x46}]}}]}, 0x38}, 0x1, 0x0, 0x0, 0x22044028}, 0x0) 2.61378734s ago: executing program 2 (id=963): r0 = socket$inet6(0xa, 0x4, 0x7) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000e00)={0x0, 0x0, &(0x7f0000000040)={0x0}, 0x1, 0x0, 0x0, 0x20000001}, 0x0) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000100)=[@in6={0xa, 0x4e24, 0x1, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x40}, @in={0x2, 0x4e24, @remote}, @in6={0xa, 0x4e24, 0x2, @loopback, 0x5}, @in={0x2, 0x4e23, @rand_addr=0x64010101}, @in6={0xa, 0x4e20, 0x2, @mcast1, 0xf}], 0x74) bind$inet6(r0, &(0x7f0000fa0fe4)={0xa, 0x4e20, 0x7fff, @loopback}, 0x1c) r2 = socket$netlink(0x10, 0x3, 0x10) r3 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r3, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) setsockopt$sock_int(r3, 0x1, 0x8, &(0x7f0000000000)=0x80, 0x4) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r3, 0x10e, 0x4, &(0x7f0000000180)=0x800, 0x4) r4 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RATE_NEW(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000300)={0x34, r4, 0x1, 0x0, 0x25dfdbfb, {0x25}, [@handle=@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}]}, 0x34}, 0x1, 0x0, 0x0, 0x41}, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r6 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TIPC_NL_BEARER_ENABLE(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000080)={0x3c, 0x0, 0xd01, 0x0, 0x0, {}, [@TIPC_NLA_BEARER={0x28, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_PROP={0x14, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0xf}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x6}]}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz1\x00'}]}]}, 0x3c}, 0x1, 0x0, 0x0, 0x851}, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r6, 0x8933, &(0x7f00000003c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_CHANNEL_SWITCH(r6, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000400)={0x30, r5, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r7}, @void}}, [@chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x994}], @NL80211_ATTR_CH_SWITCH_BLOCK_TX={0x4}, @NL80211_ATTR_CH_SWITCH_COUNT={0x8, 0xb7, 0x99}]}, 0x30}}, 0x0) 2.612791544s ago: executing program 9 (id=964): close(0xffffffffffffffff) bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1f, 0x11, 0x0, &(0x7f0000000b00)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x1a, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) sendmsg$IPCTNL_MSG_CT_GET(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, 0x0}, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-camellia-asm\x00'}, 0x58) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) write$cgroup_type(r3, &(0x7f0000000100), 0x9) recvmsg(r2, &(0x7f0000000500)={0x0, 0x0, 0x0}, 0x2) r4 = accept4(r1, 0x0, 0x0, 0x800) sendmsg$NL80211_CMD_JOIN_MESH(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000540)=ANY=[@ANYBLOB='L\x00\x00', @ANYRES64, @ANYRES16], 0x4c}}, 0x4000804) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.swap.current\x00', 0x26e1, 0x0) sendmmsg$alg(r4, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048"}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r4, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x51}, {0x0}], 0x2}, 0x0) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000013c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000001380)={0x0, 0x0, &(0x7f0000001340)={&(0x7f0000000680)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r5, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r6, @ANYBLOB="d506330080000000ffffffffffff080211000001"], 0x6f4}}, 0x0) 1.98349885s ago: executing program 8 (id=965): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="05000000010000000a00000008"], 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000380)={{r0}, &(0x7f0000000200), &(0x7f0000000240)}, 0x20) prlimit64(0x0, 0xe, &(0x7f0000000240)={0x8, 0x248}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x1, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xffffe000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f00000004c0)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x3fffffffffffeda, 0x2, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0700000004000000080200000100000000000000", @ANYRES32, @ANYBLOB="00000400"/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000080)='sched_switch\x00'}, 0x18) syz_mount_image$ext4(&(0x7f0000000540)='ext4\x00', &(0x7f00000001c0)='./file2\x00', 0x88, &(0x7f0000000c80)={[{@nogrpid}, {@min_batch_time={'min_batch_time', 0x3d, 0x4}}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x68}}, {@nombcache}, {@noinit_itable}, {@quota}]}, 0x3, 0x438, &(0x7f0000000580)="$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") bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xc, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) symlink(&(0x7f00000003c0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f0000000cc0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') readlink(&(0x7f0000000240)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f0000001200)=""/4096, 0x1000) 1.825188195s ago: executing program 0 (id=966): r0 = socket$inet6(0xa, 0x4, 0x7) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000e00)={0x0, 0x0, &(0x7f0000000040)={0x0}, 0x1, 0x0, 0x0, 0x20000001}, 0x0) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000100)=[@in6={0xa, 0x4e24, 0x1, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x40}, @in={0x2, 0x4e24, @remote}, @in6={0xa, 0x4e24, 0x2, @loopback, 0x5}, @in={0x2, 0x4e23, @rand_addr=0x64010101}, @in6={0xa, 0x4e20, 0x2, @mcast1, 0xf}], 0x74) bind$inet6(r0, &(0x7f0000fa0fe4)={0xa, 0x4e20, 0x7fff, @loopback}, 0x1c) r2 = socket$netlink(0x10, 0x3, 0x10) r3 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r3, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) setsockopt$sock_int(r3, 0x1, 0x8, &(0x7f0000000000)=0x80, 0x4) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r3, 0x10e, 0x4, &(0x7f0000000180)=0x800, 0x4) r4 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RATE_NEW(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000300)={0x34, r4, 0x1, 0x0, 0x25dfdbfb, {0x25}, [@handle=@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}]}, 0x34}, 0x1, 0x0, 0x0, 0x41}, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r6 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TIPC_NL_BEARER_ENABLE(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000080)={0x3c, 0x0, 0xd01, 0x0, 0x0, {}, [@TIPC_NLA_BEARER={0x28, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_PROP={0x14, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0xf}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x6}]}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz1\x00'}]}]}, 0x3c}, 0x1, 0x0, 0x0, 0x851}, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r6, 0x8933, &(0x7f00000003c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_CHANNEL_SWITCH(r6, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000400)={0x30, r5, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r7}, @void}}, [@chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x994}], @NL80211_ATTR_CH_SWITCH_BLOCK_TX={0x4}, @NL80211_ATTR_CH_SWITCH_COUNT={0x8, 0xb7, 0x99}]}, 0x30}}, 0x0) 1.765372593s ago: executing program 9 (id=967): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000a40)=ANY=[@ANYBLOB="140000002500010324bd7002"], 0x14}}, 0x0) 1.656223716s ago: executing program 6 (id=968): socket$nl_generic(0x10, 0x3, 0x10) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) close(0x4) syz_open_procfs$namespace(0x0, &(0x7f0000000040)='ns/cgroup\x00') r0 = socket$inet_smc(0x2b, 0x1, 0x0) connect$inet(r0, &(0x7f0000000380)={0x2, 0x4e25, @local}, 0x10) 1.645765928s ago: executing program 2 (id=969): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1f, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000a8000000180100002020692500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb70200"], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x10, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000500)={r0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 1.50520317s ago: executing program 9 (id=970): r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/asound/timers\x00', 0x0, 0x0) syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000040)='./file0\x00', 0x0, &(0x7f0000000d40)=ANY=[@ANYBLOB="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"], 0xfe, 0x2ae, &(0x7f0000000a40)="$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") r1 = open(0x0, 0x14507e, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e22}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r5 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000080)='sched_switch\x00', r5}, 0x18) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) ioctl$FITRIM(r1, 0xc0185879, 0x0) connect$can_bcm(0xffffffffffffffff, &(0x7f0000001200), 0x10) close(0xffffffffffffffff) close(r0) sync() 403.65941ms ago: executing program 2 (id=971): bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0xe) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r1 = socket$tipc(0x1e, 0x2, 0x0) setsockopt$TIPC_GROUP_JOIN(r1, 0x10f, 0x87, &(0x7f0000000080)={0x42, 0x80000009, 0x2}, 0x10) r2 = socket$tipc(0x1e, 0x5, 0x0) sendmsg$tipc(r2, &(0x7f0000000380)={&(0x7f0000000140)=@name={0x1e, 0x2, 0x0, {{0x42, 0x80000009}}}, 0x10, 0x0}, 0x0) unshare(0x22020400) socket$nl_generic(0x10, 0x3, 0x10) socket$inet_udplite(0x2, 0x2, 0x88) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x0, 0x3}, 0x0, &(0x7f00000002c0)={0x3ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fffffff}, 0x0, 0x0) 0s ago: executing program 2 (id=972): prlimit64(0x0, 0xe, &(0x7f0000000240)={0x8, 0x248}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x4c, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xffffe000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000840)=@abs={0x0, 0x0, 0x4e20}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x3fffffffffffeda, 0x2, 0x0) r3 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f00000003c0)='sched_switch\x00', r3}, 0x18) ioctl$UI_DEV_SETUP(0xffffffffffffffff, 0x405c5503, 0x0) flock(0xffffffffffffffff, 0x4) r4 = socket(0x10, 0x803, 0x0) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r4, 0x89f0, &(0x7f0000000340)={'ip_vti0\x00', &(0x7f0000000300)={'syztnl2\x00', 0x0, 0x10, 0x700, 0x5, 0x2, {{0x5, 0x4, 0x3, 0x12, 0x14, 0x64, 0x0, 0x3, 0x4, 0x0, @multicast2, @dev={0xac, 0x14, 0x14, 0x1a}}}}}) kernel console output (not intermixed with test programs): [ 290.010541][ T7194] EXT4-fs error (device loop3): ext4_validate_block_bitmap:441: comm syz.3.232: bg 0: block 248: padding at end of block bitmap is not set [ 290.058242][ T7194] Quota error (device loop3): write_blk: dquota write failed [ 290.066168][ T7194] Quota error (device loop3): qtree_write_dquot: Error -117 occurred while creating quota [ 290.076272][ T7194] EXT4-fs error (device loop3): ext4_acquire_dquot:6933: comm syz.3.232: Failed to acquire dquot type 1 [ 290.122769][ T7194] EXT4-fs (loop3): 1 truncate cleaned up [ 290.957769][ T7194] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 291.701015][ T7194] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 292.743633][ T7218] x_tables: ip_tables: osf match: only valid for protocol 6 [ 293.476754][ T7096] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 293.827229][ T6622] hsr_slave_0: left promiscuous mode [ 293.875454][ T6622] hsr_slave_1: left promiscuous mode [ 293.956441][ T6622] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 293.990188][ T6622] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 294.018600][ T6622] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 294.032193][ T6622] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 294.074521][ T6622] hsr_slave_0: left promiscuous mode [ 294.112391][ T6622] hsr_slave_1: left promiscuous mode [ 294.135255][ T6622] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 294.142812][ T6622] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 294.504675][ T7245] rdma_rxe: rxe_newlink: failed to add lo [ 294.660941][ T6622] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 294.974251][ T6622] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 295.150130][ T6622] veth1_macvtap: left promiscuous mode [ 295.175651][ T6622] veth0_macvtap: left promiscuous mode [ 295.193248][ T6622] veth1_vlan: left promiscuous mode [ 295.214183][ T6622] veth0_vlan: left promiscuous mode [ 295.230151][ T6622] veth1_macvtap: left promiscuous mode [ 295.235802][ T5956] usb 5-1: new high-speed USB device number 5 using dummy_hcd [ 295.243465][ T6622] veth0_macvtap: left promiscuous mode [ 295.264265][ T6622] veth1_vlan: left promiscuous mode [ 295.269632][ T6622] veth0_vlan: left promiscuous mode [ 295.396222][ T7261] loop3: detected capacity change from 0 to 512 [ 295.425050][ T7261] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 295.484969][ T7261] EXT4-fs (loop3): orphan cleanup on readonly fs [ 295.500953][ T7261] EXT4-fs error (device loop3): ext4_validate_block_bitmap:441: comm syz.3.243: bg 0: block 248: padding at end of block bitmap is not set [ 295.518317][ T7261] Quota error (device loop3): write_blk: dquota write failed [ 295.526383][ T7261] Quota error (device loop3): qtree_write_dquot: Error -117 occurred while creating quota [ 295.536609][ T7261] EXT4-fs error (device loop3): ext4_acquire_dquot:6933: comm syz.3.243: Failed to acquire dquot type 1 [ 295.562697][ T7261] EXT4-fs (loop3): 1 truncate cleaned up [ 295.586055][ T7261] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 296.325555][ T5956] usb 5-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 296.366566][ T5956] usb 5-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 296.412480][ T5956] usb 5-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 296.444132][ T5956] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 296.499157][ T7247] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 296.509832][ T5956] usb 5-1: Quirk or no altset; falling back to MIDI 1.0 [ 296.752404][ T1214] usb 5-1: USB disconnect, device number 5 [ 297.009317][ T6622] pimreg (unregistering): left allmulticast mode [ 297.429970][ T6622] team0 (unregistering): Port device team_slave_1 removed [ 297.463651][ T6622] team0 (unregistering): Port device team_slave_0 removed [ 298.050761][ T6622] team0 (unregistering): Port device team_slave_1 removed [ 298.101558][ T6622] team0 (unregistering): Port device team_slave_0 removed [ 298.435861][ T7261] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 298.454499][ T7258] workqueue: Failed to create a rescuer kthread for wq "wg-crypt-wireguard%d": -EINTR [ 298.489118][ T7020] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 298.931830][ T7284] loop4: detected capacity change from 0 to 512 [ 298.969812][ T7284] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 299.003912][ T7284] EXT4-fs (loop4): orphan cleanup on readonly fs [ 299.019805][ T7284] EXT4-fs error (device loop4): ext4_validate_block_bitmap:441: comm syz.4.246: bg 0: block 248: padding at end of block bitmap is not set [ 299.037641][ T7284] Quota error (device loop4): write_blk: dquota write failed [ 299.046551][ T7284] Quota error (device loop4): qtree_write_dquot: Error -117 occurred while creating quota [ 299.056773][ T7284] EXT4-fs error (device loop4): ext4_acquire_dquot:6933: comm syz.4.246: Failed to acquire dquot type 1 [ 299.110451][ T7284] EXT4-fs (loop4): 1 truncate cleaned up [ 299.127468][ T7284] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 299.963422][ T7291] loop2: detected capacity change from 0 to 512 [ 300.281611][ T7291] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000d40000 r/w without journal. Quota mode: writeback. [ 300.789933][ T7291] ext4 filesystem being mounted at /60/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 300.823665][ T7284] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 301.158357][ T7096] veth0_vlan: entered promiscuous mode [ 301.240946][ T7096] veth1_vlan: entered promiscuous mode [ 301.567826][ T7096] veth0_macvtap: entered promiscuous mode [ 303.100427][ T7316] netlink: 46 bytes leftover after parsing attributes in process `syz.4.252'. [ 304.219248][ T7096] veth1_macvtap: entered promiscuous mode [ 306.630775][ T7020] veth0_vlan: entered promiscuous mode [ 306.654670][ T5834] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000d40000. [ 306.668745][ T7020] veth1_vlan: entered promiscuous mode [ 306.706518][ T7096] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 306.752763][ T7020] veth0_macvtap: entered promiscuous mode [ 306.777902][ T7020] veth1_macvtap: entered promiscuous mode [ 306.811097][ T7020] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 306.928850][ T7096] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 307.417405][ T7020] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 307.558598][ T7020] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 307.595994][ T7020] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 307.605865][ T7332] loop2: detected capacity change from 0 to 512 [ 307.633221][ T7020] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 307.642053][ T7020] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 307.680815][ T7096] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 307.705060][ T7096] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 307.713781][ T7096] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 307.754124][ T7096] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 307.932233][ T7332] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000d40000 r/w without journal. Quota mode: writeback. [ 307.961758][ T7332] ext4 filesystem being mounted at /61/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 308.091242][ T7343] netlink: 'syz.4.257': attribute type 4 has an invalid length. [ 308.099141][ T7343] netlink: 17 bytes leftover after parsing attributes in process `syz.4.257'. [ 308.909956][ T7350] loop4: detected capacity change from 0 to 512 [ 308.944370][ T6748] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 309.009733][ T6748] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 309.014400][ T7350] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000d40000 r/w without journal. Quota mode: writeback. [ 309.040244][ T6622] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 309.072133][ T6622] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 309.133742][ T7350] ext4 filesystem being mounted at /65/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 309.170878][ T5834] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000d40000. [ 309.257512][ T6748] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 309.288688][ T6748] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 310.400417][ T6415] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 310.408313][ T6415] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 311.370282][ T7383] loop3: detected capacity change from 0 to 512 [ 311.463037][ T5842] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000d40000. [ 311.509659][ T7383] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000d40000 r/w without journal. Quota mode: writeback. [ 311.674714][ T7383] ext4 filesystem being mounted at /63/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 312.520411][ T7393] netlink: 8 bytes leftover after parsing attributes in process `syz.7.262'. [ 314.204306][ T7418] netlink: 40 bytes leftover after parsing attributes in process `syz.6.266'. [ 314.213244][ T7418] netlink: 40 bytes leftover after parsing attributes in process `syz.6.266'. [ 314.222604][ T7418] A link change request failed with some changes committed already. Interface ip6gre0 may have been left with an inconsistent configuration, please check. [ 314.891851][ T7422] netlink: 'syz.2.267': attribute type 4 has an invalid length. [ 314.899560][ T7422] netlink: 17 bytes leftover after parsing attributes in process `syz.2.267'. [ 316.808546][ T5843] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000d40000. [ 316.934886][ T7442] loop6: detected capacity change from 0 to 512 [ 316.978256][ T7442] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 317.007200][ T1306] ieee802154 phy0 wpan0: encryption failed: -22 [ 317.013528][ T1306] ieee802154 phy1 wpan1: encryption failed: -22 [ 317.785929][ T7442] EXT4-fs (loop6): orphan cleanup on readonly fs [ 317.802538][ T7442] EXT4-fs error (device loop6): ext4_validate_block_bitmap:441: comm syz.6.272: bg 0: block 248: padding at end of block bitmap is not set [ 317.817991][ T7442] Quota error (device loop6): write_blk: dquota write failed [ 317.825455][ T7442] Quota error (device loop6): qtree_write_dquot: Error -117 occurred while creating quota [ 317.835503][ T7442] EXT4-fs error (device loop6): ext4_acquire_dquot:6933: comm syz.6.272: Failed to acquire dquot type 1 [ 317.857292][ T7442] EXT4-fs (loop6): 1 truncate cleaned up [ 317.879313][ T7442] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 318.346730][ T7442] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 318.876278][ T5956] usb 3-1: new full-speed USB device number 6 using dummy_hcd [ 319.057540][ T7454] loop2: detected capacity change from 0 to 512 [ 319.101974][ T7457] loop3: detected capacity change from 0 to 512 [ 319.126078][ T7455] loop6: detected capacity change from 0 to 512 [ 319.202215][ T7454] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000d40000 r/w without journal. Quota mode: writeback. [ 319.219451][ T7455] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000d40000 r/w without journal. Quota mode: writeback. [ 319.247189][ T7457] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000d40000 r/w without journal. Quota mode: writeback. [ 319.288453][ T7454] ext4 filesystem being mounted at /67/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 319.302262][ T7455] ext4 filesystem being mounted at /5/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 319.312530][ T7457] ext4 filesystem being mounted at /65/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 320.812448][ T5843] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000d40000. [ 320.832278][ T5834] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000d40000. [ 321.226560][ T7487] netlink: 40 bytes leftover after parsing attributes in process `syz.4.280'. [ 321.235982][ T7487] netlink: 40 bytes leftover after parsing attributes in process `syz.4.280'. [ 321.245833][ T7487] A link change request failed with some changes committed already. Interface ip6gre0 may have been left with an inconsistent configuration, please check. [ 322.164452][ T7498] x_tables: ip_tables: osf match: only valid for protocol 6 [ 324.389369][ T7519] loop3: detected capacity change from 0 to 512 [ 324.441703][ T7522] loop2: detected capacity change from 0 to 512 [ 324.506584][ T7519] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000d40000 r/w without journal. Quota mode: writeback. [ 324.519609][ T7519] ext4 filesystem being mounted at /69/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 324.578502][ T7522] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000d40000 r/w without journal. Quota mode: writeback. [ 324.601897][ T7522] ext4 filesystem being mounted at /70/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 326.481463][ T5843] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000d40000. [ 326.620022][ T5834] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000d40000. [ 326.909489][ T7020] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000d40000. [ 328.136698][ T7555] loop2: detected capacity change from 0 to 512 [ 328.978184][ T7556] loop3: detected capacity change from 0 to 512 [ 330.555951][ T7559] netlink: 40 bytes leftover after parsing attributes in process `syz.6.295'. [ 330.564890][ T7559] netlink: 40 bytes leftover after parsing attributes in process `syz.6.295'. [ 330.574293][ T7559] A link change request failed with some changes committed already. Interface ip6gre0 may have been left with an inconsistent configuration, please check. [ 331.384240][ T7556] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 331.393145][ T7555] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 331.393792][ T7556] workqueue: Failed to create a rescuer kthread for wq "ext4-rsv-conversion": -EINTR [ 331.401702][ T7556] EXT4-fs: failed to create workqueue [ 331.417264][ T7556] EXT4-fs (loop3): mount failed [ 331.425914][ T7555] workqueue: Failed to create a rescuer kthread for wq "ext4-rsv-conversion": -EINTR [ 331.425976][ T7555] EXT4-fs: failed to create workqueue [ 331.440866][ T7555] EXT4-fs (loop2): mount failed [ 333.028041][ T7576] netlink: 40 bytes leftover after parsing attributes in process `syz.2.298'. [ 333.037288][ T7576] netlink: 40 bytes leftover after parsing attributes in process `syz.2.298'. [ 333.049132][ T7576] A link change request failed with some changes committed already. Interface ip6_vti0 may have been left with an inconsistent configuration, please check. [ 333.710941][ T7580] loop3: detected capacity change from 0 to 512 [ 333.896168][ T7586] loop6: detected capacity change from 0 to 512 [ 333.926338][ T7580] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000d40000 r/w without journal. Quota mode: writeback. [ 333.941296][ T7580] ext4 filesystem being mounted at /73/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 333.962768][ T7586] loop6: detected capacity change from 0 to 512 [ 334.150280][ T7586] EXT4-fs: Ignoring removed mblk_io_submit option [ 334.328014][ T7586] EXT4-fs (loop6): can't mount with data_err=abort, fs mounted w/o journal [ 334.522829][ T7590] loop7: detected capacity change from 0 to 512 [ 334.688235][ T7590] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000d40000 r/w without journal. Quota mode: writeback. [ 334.701089][ T7590] ext4 filesystem being mounted at /7/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 335.728152][ T7608] netlink: 40 bytes leftover after parsing attributes in process `syz.2.307'. [ 335.737220][ T7608] netlink: 40 bytes leftover after parsing attributes in process `syz.2.307'. [ 335.748396][ T7608] A link change request failed with some changes committed already. Interface sit0 may have been left with an inconsistent configuration, please check. [ 336.711176][ T5843] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000d40000. [ 337.777223][ T7621] loop3: detected capacity change from 0 to 512 [ 337.787521][ T7619] loop2: detected capacity change from 0 to 512 [ 337.812509][ T7619] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 337.845593][ T7621] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000d40000 r/w without journal. Quota mode: writeback. [ 337.884962][ T7621] ext4 filesystem being mounted at /74/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 337.907176][ T7619] EXT4-fs (loop2): orphan cleanup on readonly fs [ 337.940927][ T7619] EXT4-fs error (device loop2): ext4_validate_block_bitmap:441: comm syz.2.308: bg 0: block 248: padding at end of block bitmap is not set [ 338.111661][ T7619] Quota error (device loop2): write_blk: dquota write failed [ 338.153307][ T7619] Quota error (device loop2): qtree_write_dquot: Error -117 occurred while creating quota [ 338.184474][ T7619] EXT4-fs error (device loop2): ext4_acquire_dquot:6933: comm syz.2.308: Failed to acquire dquot type 1 [ 338.355873][ T7619] EXT4-fs (loop2): 1 truncate cleaned up [ 338.488897][ T7619] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 339.042822][ T7638] netlink: 40 bytes leftover after parsing attributes in process `syz.4.314'. [ 339.051870][ T7638] netlink: 40 bytes leftover after parsing attributes in process `syz.4.314'. [ 339.062979][ T7638] A link change request failed with some changes committed already. Interface ip6_vti0 may have been left with an inconsistent configuration, please check. [ 339.716084][ T5843] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000d40000. [ 341.168162][ T7646] x_tables: ip_tables: osf match: only valid for protocol 6 [ 341.193114][ T7644] loop6: detected capacity change from 0 to 512 [ 341.202249][ T7644] EXT4-fs (loop6): encrypted files will use data=ordered instead of data journaling mode [ 341.232759][ T7644] EXT4-fs (loop6): 1 truncate cleaned up [ 341.242394][ T7644] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 341.258634][ T7644] EXT4-fs error (device loop6): ext4_get_verity_descriptor_location:298: inode #15: comm syz.6.318: verity file has no extents [ 341.273128][ T7644] fs-verity (loop6, inode 15): Error -117 getting verity descriptor size [ 341.488047][ T7020] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 341.926459][ T7658] netlink: 40 bytes leftover after parsing attributes in process `syz.3.319'. [ 341.935514][ T7658] netlink: 40 bytes leftover after parsing attributes in process `syz.3.319'. [ 341.946236][ T7658] A link change request failed with some changes committed already. Interface sit0 may have been left with an inconsistent configuration, please check. [ 342.787491][ T7662] loop3: detected capacity change from 0 to 512 [ 342.979661][ T7664] sd 0:0:1:0: PR command failed: 1026 [ 342.985370][ T7664] sd 0:0:1:0: Sense Key : Illegal Request [current] [ 342.992257][ T7664] sd 0:0:1:0: Add. Sense: Invalid command operation code [ 343.540041][ T7662] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000d40000 r/w without journal. Quota mode: writeback. [ 343.582038][ T7662] ext4 filesystem being mounted at /77/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 343.965015][ T7674] x_tables: ip_tables: TPROXY target: used from hooks FORWARD, but only usable from PREROUTING [ 345.303722][ T7096] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000d40000. [ 345.526149][ T5843] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000d40000. [ 345.641600][ T7684] loop7: detected capacity change from 0 to 256 [ 345.825206][ T7684] FAT-fs (loop7): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 346.052315][ T7690] netlink: 40 bytes leftover after parsing attributes in process `syz.3.327'. [ 346.061272][ T7690] netlink: 40 bytes leftover after parsing attributes in process `syz.3.327'. [ 346.070653][ T7690] A link change request failed with some changes committed already. Interface ip6_vti0 may have been left with an inconsistent configuration, please check. [ 349.432830][ T7709] x_tables: ip_tables: osf match: only valid for protocol 6 [ 350.229940][ T7710] loop6: detected capacity change from 0 to 512 [ 350.688924][ T7710] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000d40000 r/w without journal. Quota mode: writeback. [ 350.804290][ T7710] ext4 filesystem being mounted at /20/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 350.826543][ T7718] loop7: detected capacity change from 0 to 512 [ 350.881135][ T7718] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000d40000 r/w without journal. Quota mode: writeback. [ 350.901282][ T7718] ext4 filesystem being mounted at /11/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 351.199067][ T5834] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 352.288245][ T7735] loop4: detected capacity change from 0 to 512 [ 354.504172][ T7735] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 354.513358][ T7735] workqueue: Failed to create a rescuer kthread for wq "ext4-rsv-conversion": -EINTR [ 354.513409][ T7735] EXT4-fs: failed to create workqueue [ 354.528342][ T7735] EXT4-fs (loop4): mount failed [ 354.814427][ T7742] netlink: 40 bytes leftover after parsing attributes in process `syz.2.340'. [ 354.823450][ T7742] netlink: 40 bytes leftover after parsing attributes in process `syz.2.340'. [ 354.834218][ T7742] A link change request failed with some changes committed already. Interface ip6_vti0 may have been left with an inconsistent configuration, please check. [ 355.357468][ T7739] loop3: detected capacity change from 0 to 256 [ 355.533776][ T7739] FAT-fs (loop3): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 355.548736][ T7020] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000d40000. [ 356.320637][ T7756] netlink: 8 bytes leftover after parsing attributes in process `syz.2.345'. [ 356.707686][ T7763] x_tables: ip_tables: osf match: only valid for protocol 6 [ 358.601182][ T7777] rdma_rxe: rxe_newlink: failed to add lo [ 359.254091][ T5956] usb 7-1: new high-speed USB device number 2 using dummy_hcd [ 359.463043][ T7784] netlink: 40 bytes leftover after parsing attributes in process `syz.2.353'. [ 359.472287][ T7784] netlink: 40 bytes leftover after parsing attributes in process `syz.2.353'. [ 359.482894][ T7784] A link change request failed with some changes committed already. Interface ip6_vti0 may have been left with an inconsistent configuration, please check. [ 360.190398][ T5956] usb 7-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 360.256639][ T5956] usb 7-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 360.286275][ T7790] loop4: detected capacity change from 0 to 256 [ 360.301967][ T7790] FAT-fs (loop4): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 360.463309][ T5956] usb 7-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 360.477694][ T5956] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 361.203905][ T7778] raw-gadget.0 gadget.6: fail, usb_ep_enable returned -22 [ 361.262771][ T7797] loop4: detected capacity change from 0 to 512 [ 361.293652][ T7797] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000d40000 r/w without journal. Quota mode: writeback. [ 361.312175][ T7797] ext4 filesystem being mounted at /88/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 363.751991][ T5956] usb 7-1: Quirk or no altset; falling back to MIDI 1.0 [ 364.184413][ T7817] x_tables: ip_tables: osf match: only valid for protocol 6 [ 364.400997][ T7819] netlink: 40 bytes leftover after parsing attributes in process `syz.2.363'. [ 364.410144][ T7819] netlink: 40 bytes leftover after parsing attributes in process `syz.2.363'. [ 364.428723][ T7819] A link change request failed with some changes committed already. Interface sit0 may have been left with an inconsistent configuration, please check. [ 366.068692][ T5842] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000d40000. [ 366.351826][ T5956] usb 7-1: USB disconnect, device number 2 [ 366.418552][ T7831] netlink: 40 bytes leftover after parsing attributes in process `syz.4.366'. [ 366.428296][ T7831] netlink: 40 bytes leftover after parsing attributes in process `syz.4.366'. [ 366.439474][ T7831] A link change request failed with some changes committed already. Interface ip6_vti0 may have been left with an inconsistent configuration, please check. [ 367.072995][ T7834] loop2: detected capacity change from 0 to 256 [ 367.085562][ T7835] loop6: detected capacity change from 0 to 512 [ 367.161113][ T7834] FAT-fs (loop2): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 367.388170][ T7835] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000d40000 r/w without journal. Quota mode: writeback. [ 367.414903][ T7835] ext4 filesystem being mounted at /28/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 368.571721][ T7020] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000d40000. [ 368.628265][ T5838] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 368.645797][ T7857] x_tables: ip_tables: osf match: only valid for protocol 6 [ 368.679118][ T5838] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 368.689646][ T5838] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 368.701928][ T5838] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 368.713125][ T5838] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 369.109924][ T7854] loop2: detected capacity change from 0 to 512 [ 369.169269][ T7850] lo speed is unknown, defaulting to 1000 [ 369.202119][ T7854] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000d40000 r/w without journal. Quota mode: writeback. [ 369.619623][ T7867] netlink: 40 bytes leftover after parsing attributes in process `syz.6.375'. [ 369.628718][ T7867] netlink: 40 bytes leftover after parsing attributes in process `syz.6.375'. [ 369.638281][ T7867] A link change request failed with some changes committed already. Interface sit0 may have been left with an inconsistent configuration, please check. [ 370.002370][ T7854] ext4 filesystem being mounted at /87/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 371.270968][ T5838] Bluetooth: hci5: command tx timeout [ 372.574798][ T5834] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000d40000. [ 373.322825][ T5838] Bluetooth: hci5: command tx timeout [ 373.545152][ T7732] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000d40000. [ 374.672885][ T7902] lo speed is unknown, defaulting to 1000 [ 375.193842][ T7914] x_tables: ip_tables: osf match: only valid for protocol 6 [ 375.445176][ T5838] Bluetooth: hci5: command tx timeout [ 375.913717][ T7850] chnl_net:caif_netlink_parms(): no params data found [ 377.129370][ T7850] bridge0: port 1(bridge_slave_0) entered blocking state [ 377.182079][ T7850] bridge0: port 1(bridge_slave_0) entered disabled state [ 377.475503][ T5838] Bluetooth: hci5: command tx timeout [ 377.588158][ T7850] bridge_slave_0: entered allmulticast mode [ 377.599384][ T7850] bridge_slave_0: entered promiscuous mode [ 377.609560][ T7850] bridge0: port 2(bridge_slave_1) entered blocking state [ 377.618558][ T7850] bridge0: port 2(bridge_slave_1) entered disabled state [ 377.627699][ T7850] bridge_slave_1: entered allmulticast mode [ 377.635865][ T7850] bridge_slave_1: entered promiscuous mode [ 377.837020][ T7850] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 377.852683][ T7850] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 379.021385][ T1306] ieee802154 phy0 wpan0: encryption failed: -22 [ 379.028187][ T1306] ieee802154 phy1 wpan1: encryption failed: -22 [ 379.966114][ T7942] rdma_rxe: rxe_newlink: failed to add lo [ 380.092176][ T7850] team0: Port device team_slave_0 added [ 380.618929][ T7850] team0: Port device team_slave_1 added [ 380.625120][ T7947] Cannot find add_set index 0 as target [ 380.706689][ T7850] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 380.718216][ T7850] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 380.748771][ T7850] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 380.774690][ T7850] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 380.781905][ T7850] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 380.814350][ T7850] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 380.929930][ T7850] hsr_slave_0: entered promiscuous mode [ 380.940535][ T7850] hsr_slave_1: entered promiscuous mode [ 380.958751][ T7850] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 381.029519][ T7952] loop6: detected capacity change from 0 to 512 [ 381.094049][ T5956] usb 5-1: new high-speed USB device number 6 using dummy_hcd [ 381.784267][ T7952] EXT4-fs (loop6): encrypted files will use data=ordered instead of data journaling mode [ 381.920284][ T7850] Cannot create hsr debugfs directory [ 383.223971][ T7952] EXT4-fs (loop6): 1 truncate cleaned up [ 383.231230][ T7952] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 383.691387][ T7020] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 387.038137][ T7974] x_tables: ip_tables: TPROXY target: used from hooks FORWARD, but only usable from PREROUTING [ 387.486837][ T7984] x_tables: ip_tables: osf match: only valid for protocol 6 [ 389.176466][ T7991] netlink: 40 bytes leftover after parsing attributes in process `syz.2.403'. [ 389.185495][ T7991] netlink: 40 bytes leftover after parsing attributes in process `syz.2.403'. [ 389.194863][ T7991] A link change request failed with some changes committed already. Interface ip6_vti0 may have been left with an inconsistent configuration, please check. [ 389.549808][ T8000] loop4: detected capacity change from 0 to 512 [ 389.596619][ T8000] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 389.630414][ T8000] EXT4-fs (loop4): orphan cleanup on readonly fs [ 389.643467][ T8000] EXT4-fs error (device loop4): ext4_validate_block_bitmap:441: comm syz.4.406: bg 0: block 248: padding at end of block bitmap is not set [ 389.661546][ T8000] Quota error (device loop4): write_blk: dquota write failed [ 389.670222][ T8000] Quota error (device loop4): qtree_write_dquot: Error -117 occurred while creating quota [ 389.680999][ T8000] EXT4-fs error (device loop4): ext4_acquire_dquot:6933: comm syz.4.406: Failed to acquire dquot type 1 [ 389.710872][ T8000] EXT4-fs (loop4): 1 truncate cleaned up [ 389.743187][ T8000] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 391.226637][ T5154] Bluetooth: hci3: command 0x0406 tx timeout [ 391.313651][ T8008] rdma_rxe: rxe_newlink: failed to add lo [ 393.300100][ T8014] loop6: detected capacity change from 0 to 512 [ 393.437678][ T8014] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000d40000 r/w without journal. Quota mode: writeback. [ 393.461695][ T7850] netdevsim netdevsim8 netdevsim0: renamed from eth0 [ 393.490025][ T8014] ext4 filesystem being mounted at /38/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 393.522351][ T5842] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 393.569640][ T7850] netdevsim netdevsim8 netdevsim1: renamed from eth1 [ 393.862266][ T7850] netdevsim netdevsim8 netdevsim2: renamed from eth2 [ 394.005080][ T8025] x_tables: ip_tables: TPROXY target: used from hooks FORWARD, but only usable from PREROUTING [ 394.707690][ T7850] netdevsim netdevsim8 netdevsim3: renamed from eth3 [ 396.268966][ T8045] x_tables: ip_tables: osf match: only valid for protocol 6 [ 396.868540][ T5154] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 396.877944][ T5154] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 396.885988][ T5154] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 396.895007][ T5154] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 396.902654][ T5154] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 396.981436][ T7850] 8021q: adding VLAN 0 to HW filter on device bond0 [ 397.855349][ T8052] netlink: 40 bytes leftover after parsing attributes in process `syz.4.416'. [ 397.866352][ T8052] netlink: 40 bytes leftover after parsing attributes in process `syz.4.416'. [ 397.877022][ T8052] A link change request failed with some changes committed already. Interface ip6_vti0 may have been left with an inconsistent configuration, please check. [ 397.898524][ T8032] lo speed is unknown, defaulting to 1000 [ 397.988725][ T7850] 8021q: adding VLAN 0 to HW filter on device team0 [ 398.071462][ T6749] bridge0: port 1(bridge_slave_0) entered blocking state [ 398.078597][ T6749] bridge0: port 1(bridge_slave_0) entered forwarding state [ 398.328228][ T5994] bridge0: port 2(bridge_slave_1) entered blocking state [ 398.335380][ T5994] bridge0: port 2(bridge_slave_1) entered forwarding state [ 398.436184][ T8057] loop4: detected capacity change from 0 to 512 [ 398.482301][ T8057] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 398.681548][ T8057] EXT4-fs (loop4): 1 truncate cleaned up [ 398.984857][ T5154] Bluetooth: hci0: command tx timeout [ 399.335086][ T8057] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 399.434438][ T7020] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000d40000. [ 400.329472][ T5842] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 400.693742][ T8066] loop6: detected capacity change from 0 to 512 [ 400.807098][ T8068] rdma_rxe: rxe_newlink: failed to add lo [ 401.075715][ T5154] Bluetooth: hci0: command tx timeout [ 401.112491][ T8066] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 401.247814][ T8066] EXT4-fs (loop6): orphan cleanup on readonly fs [ 401.368897][ T8066] EXT4-fs error (device loop6): ext4_validate_block_bitmap:441: comm syz.6.418: bg 0: block 248: padding at end of block bitmap is not set [ 401.591716][ T8066] Quota error (device loop6): write_blk: dquota write failed [ 401.600373][ T8066] Quota error (device loop6): qtree_write_dquot: Error -117 occurred while creating quota [ 401.610653][ T8066] EXT4-fs error (device loop6): ext4_acquire_dquot:6933: comm syz.6.418: Failed to acquire dquot type 1 [ 401.789761][ T917] usb 5-1: new high-speed USB device number 7 using dummy_hcd [ 401.875494][ T8066] EXT4-fs (loop6): 1 truncate cleaned up [ 403.181773][ T8066] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 403.198340][ T5154] Bluetooth: hci0: command tx timeout [ 405.594143][ T5154] Bluetooth: hci0: command tx timeout [ 405.875899][ T7020] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 409.553698][ T8094] netlink: 40 bytes leftover after parsing attributes in process `syz.4.420'. [ 409.562757][ T8094] netlink: 40 bytes leftover after parsing attributes in process `syz.4.420'. [ 409.572037][ T8094] A link change request failed with some changes committed already. Interface sit0 may have been left with an inconsistent configuration, please check. [ 410.436664][ T8102] netlink: 40 bytes leftover after parsing attributes in process `syz.2.425'. [ 410.445615][ T8102] netlink: 40 bytes leftover after parsing attributes in process `syz.2.425'. [ 410.454971][ T8102] A link change request failed with some changes committed already. Interface ip6_vti0 may have been left with an inconsistent configuration, please check. [ 410.571151][ T7850] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 410.696641][ T8032] chnl_net:caif_netlink_parms(): no params data found [ 410.767901][ T8107] loop4: detected capacity change from 0 to 512 [ 411.006849][ T8107] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000d40000 r/w without journal. Quota mode: writeback. [ 411.049563][ T5992] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 411.064258][ T8107] ext4 filesystem being mounted at /110/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 411.228114][ T8116] rdma_rxe: rxe_newlink: failed to add lo [ 411.574594][ T5953] usb 3-1: new high-speed USB device number 7 using dummy_hcd [ 411.826028][ T5992] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 411.856028][ T5953] usb 3-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 411.900347][ T5953] usb 3-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 411.952887][ T5953] usb 3-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 411.980227][ T5953] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 412.011129][ T5992] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 412.032522][ T8117] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 412.043462][ T5953] usb 3-1: Quirk or no altset; falling back to MIDI 1.0 [ 412.150971][ T5842] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000d40000. [ 412.217534][ T5992] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 412.250250][ T9] usb 3-1: USB disconnect, device number 7 [ 412.269530][ T8032] bridge0: port 1(bridge_slave_0) entered blocking state [ 412.289691][ T8032] bridge0: port 1(bridge_slave_0) entered disabled state [ 412.302279][ T8032] bridge_slave_0: entered allmulticast mode [ 413.245897][ T8032] bridge_slave_0: entered promiscuous mode [ 414.250927][ T8032] bridge0: port 2(bridge_slave_1) entered blocking state [ 414.272939][ T8032] bridge0: port 2(bridge_slave_1) entered disabled state [ 414.954337][ T8032] bridge_slave_1: entered allmulticast mode [ 414.963587][ T8032] bridge_slave_1: entered promiscuous mode [ 415.830646][ T8150] netlink: 40 bytes leftover after parsing attributes in process `syz.4.435'. [ 415.839960][ T8150] netlink: 40 bytes leftover after parsing attributes in process `syz.4.435'. [ 415.849998][ T8150] A link change request failed with some changes committed already. Interface sit0 may have been left with an inconsistent configuration, please check. [ 416.992642][ T8151] netlink: 'syz.2.433': attribute type 4 has an invalid length. [ 417.000375][ T8151] netlink: 17 bytes leftover after parsing attributes in process `syz.2.433'. [ 417.548182][ T8158] loop6: detected capacity change from 0 to 512 [ 418.201716][ T8032] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 418.448939][ T8159] netlink: 40 bytes leftover after parsing attributes in process `syz.4.437'. [ 418.459148][ T8159] netlink: 40 bytes leftover after parsing attributes in process `syz.4.437'. [ 418.468546][ T8159] A link change request failed with some changes committed already. Interface ip6_vti0 may have been left with an inconsistent configuration, please check. [ 418.539287][ T7850] veth0_vlan: entered promiscuous mode [ 418.567731][ T8158] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 419.418565][ T7850] veth1_vlan: entered promiscuous mode [ 419.437298][ T8158] EXT4-fs (loop6): orphan cleanup on readonly fs [ 419.847338][ T8158] EXT4-fs error (device loop6): ext4_validate_block_bitmap:441: comm syz.6.436: bg 0: block 248: padding at end of block bitmap is not set [ 419.929737][ T8158] Quota error (device loop6): write_blk: dquota write failed [ 419.937819][ T8158] Quota error (device loop6): qtree_write_dquot: Error -117 occurred while creating quota [ 419.948184][ T8158] EXT4-fs error (device loop6): ext4_acquire_dquot:6933: comm syz.6.436: Failed to acquire dquot type 1 [ 419.970302][ T8158] EXT4-fs (loop6): 1 truncate cleaned up [ 419.999474][ T8158] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 420.152494][ T8032] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 422.062186][ T8032] team0: Port device team_slave_0 added [ 422.069459][ T7020] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 422.072765][ T5992] bridge_slave_1: left allmulticast mode [ 422.087735][ T5992] bridge_slave_1: left promiscuous mode [ 422.093632][ T5992] bridge0: port 2(bridge_slave_1) entered disabled state [ 423.080308][ T5992] bridge_slave_0: left allmulticast mode [ 423.094119][ T5992] bridge_slave_0: left promiscuous mode [ 423.105282][ T5992] bridge0: port 1(bridge_slave_0) entered disabled state [ 424.113643][ T8179] loop4: detected capacity change from 0 to 512 [ 425.220396][ T8179] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 425.243052][ T8179] EXT4-fs (loop4): orphan cleanup on readonly fs [ 425.259035][ T8179] EXT4-fs error (device loop4): ext4_validate_block_bitmap:441: comm syz.4.441: bg 0: block 248: padding at end of block bitmap is not set [ 426.320104][ T8179] Quota error (device loop4): write_blk: dquota write failed [ 426.330348][ T8179] Quota error (device loop4): qtree_write_dquot: Error -117 occurred while creating quota [ 426.346441][ T8179] EXT4-fs error (device loop4): ext4_acquire_dquot:6933: comm syz.4.441: Failed to acquire dquot type 1 [ 426.629571][ T8185] loop6: detected capacity change from 0 to 512 [ 426.677261][ T8185] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 426.691172][ T8179] EXT4-fs (loop4): 1 truncate cleaned up [ 426.711509][ T8179] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 427.390545][ T8185] EXT4-fs (loop6): orphan cleanup on readonly fs [ 427.417412][ T8185] EXT4-fs error (device loop6): ext4_validate_block_bitmap:441: comm syz.6.442: bg 0: block 248: padding at end of block bitmap is not set [ 427.437186][ T8185] Quota error (device loop6): write_blk: dquota write failed [ 427.445211][ T8185] Quota error (device loop6): qtree_write_dquot: Error -117 occurred while creating quota [ 427.456513][ T8185] EXT4-fs error (device loop6): ext4_acquire_dquot:6933: comm syz.6.442: Failed to acquire dquot type 1 [ 427.476195][ T8185] EXT4-fs (loop6): 1 truncate cleaned up [ 427.500635][ T8185] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 429.154910][ T5992] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 429.166952][ T5992] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 429.177496][ T5992] bond0 (unregistering): Released all slaves [ 429.198737][ T8032] team0: Port device team_slave_1 added [ 429.310476][ T5838] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 429.318652][ T5838] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 429.326751][ T5838] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 429.334980][ T5838] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 429.342939][ T5838] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 429.425850][ T5842] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 429.553102][ T7020] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 429.876030][ T8032] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 429.883337][ T8032] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 430.588620][ T8205] loop6: detected capacity change from 0 to 512 [ 430.616974][ T8032] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 430.734083][ T8205] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 430.772463][ T8205] EXT4-fs (loop6): orphan cleanup on readonly fs [ 430.788233][ T8205] EXT4-fs error (device loop6): ext4_validate_block_bitmap:441: comm syz.6.445: bg 0: block 248: padding at end of block bitmap is not set [ 430.805018][ T8205] Quota error (device loop6): write_blk: dquota write failed [ 430.813058][ T8205] Quota error (device loop6): qtree_write_dquot: Error -117 occurred while creating quota [ 430.823289][ T8205] EXT4-fs error (device loop6): ext4_acquire_dquot:6933: comm syz.6.445: Failed to acquire dquot type 1 [ 430.863759][ T8205] EXT4-fs (loop6): 1 truncate cleaned up [ 430.882846][ T8205] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 431.163331][ T8032] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 431.172929][ T8032] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 431.206290][ T8032] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 431.384353][ T5838] Bluetooth: hci4: command tx timeout [ 431.411401][ T8205] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 431.750267][ T8189] lo speed is unknown, defaulting to 1000 [ 431.902702][ T8213] netlink: 'syz.2.448': attribute type 4 has an invalid length. [ 431.910475][ T8213] netlink: 17 bytes leftover after parsing attributes in process `syz.2.448'. [ 432.565863][ T5910] usb 5-1: new full-speed USB device number 8 using dummy_hcd [ 432.970260][ T5910] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 432.994099][ T5910] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 10 [ 433.005421][ T5910] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 433.018350][ T5910] usb 5-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 5 [ 433.914361][ T5838] Bluetooth: hci4: command tx timeout [ 433.974883][ T8032] hsr_slave_0: entered promiscuous mode [ 434.005113][ T5910] usb 5-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 434.035127][ T5910] usb 5-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 434.216309][ T8225] sd 0:0:1:0: PR command failed: 1026 [ 434.221978][ T8225] sd 0:0:1:0: Sense Key : Illegal Request [current] [ 434.228938][ T8225] sd 0:0:1:0: Add. Sense: Invalid command operation code [ 434.645106][ T8032] hsr_slave_1: entered promiscuous mode [ 434.651372][ T8032] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 434.669947][ T5910] usb 5-1: Manufacturer: syz [ 434.678088][ T8032] Cannot create hsr debugfs directory [ 434.680848][ T5910] usb 5-1: config 0 descriptor?? [ 434.700407][ T5910] usb 5-1: can't set config #0, error -71 [ 434.710636][ T5910] usb 5-1: USB disconnect, device number 8 [ 435.065257][ T8230] netlink: 'syz.6.452': attribute type 4 has an invalid length. [ 435.072967][ T8230] netlink: 17 bytes leftover after parsing attributes in process `syz.6.452'. [ 435.992570][ T5838] Bluetooth: hci4: command tx timeout [ 436.698923][ T8238] loop6: detected capacity change from 0 to 512 [ 436.723651][ T5992] hsr_slave_0: left promiscuous mode [ 436.742868][ T5992] hsr_slave_1: left promiscuous mode [ 436.767337][ T5992] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 436.803528][ T5992] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 436.826879][ T8238] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000d40000 r/w without journal. Quota mode: writeback. [ 436.859312][ T5992] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 436.870976][ T8238] ext4 filesystem being mounted at /52/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 436.890230][ T5992] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 436.922120][ T5992] veth1_macvtap: left promiscuous mode [ 436.933510][ T5992] veth0_macvtap: left promiscuous mode [ 436.939815][ T5992] veth1_vlan: left promiscuous mode [ 436.949546][ T5992] veth0_vlan: left promiscuous mode [ 438.035858][ T8253] netlink: 'syz.2.453': attribute type 4 has an invalid length. [ 438.043661][ T8253] netlink: 17 bytes leftover after parsing attributes in process `syz.2.453'. [ 438.084125][ T5838] Bluetooth: hci4: command tx timeout [ 438.577831][ T7020] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000d40000. [ 438.589283][ T5992] team0 (unregistering): Port device team_slave_1 removed [ 438.639878][ T5992] team0 (unregistering): Port device team_slave_0 removed [ 438.723070][ T8258] loop6: detected capacity change from 0 to 512 [ 438.766914][ T8258] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000d40000 r/w without journal. Quota mode: writeback. [ 438.779701][ T8258] ext4 filesystem being mounted at /54/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 439.472479][ T49] smc: removing ib device sz1 [ 439.504724][ T5953] lo speed is unknown, defaulting to 1000 [ 439.510527][ T5953] sz1: Port: 1 Link DOWN [ 439.814552][ T1306] ieee802154 phy0 wpan0: encryption failed: -22 [ 439.820962][ T1306] ieee802154 phy1 wpan1: encryption failed: -22 [ 439.901033][ T7020] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000d40000. [ 440.120872][ T8270] sd 0:0:1:0: PR command failed: 1026 [ 440.126485][ T8270] sd 0:0:1:0: Sense Key : Illegal Request [current] [ 440.133364][ T8270] sd 0:0:1:0: Add. Sense: Invalid command operation code [ 440.499951][ T8272] netlink: 'syz.4.462': attribute type 1 has an invalid length. [ 440.654295][ T8276] loop6: detected capacity change from 0 to 512 [ 440.720258][ T8276] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000d40000 r/w without journal. Quota mode: writeback. [ 440.729394][ T8272] 8021q: adding VLAN 0 to HW filter on device bond1 [ 440.740693][ T8276] ext4 filesystem being mounted at /55/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 441.972637][ T7020] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000d40000. [ 442.242539][ T8299] rdma_rxe: rxe_newlink: failed to add lo [ 442.742140][ T8032] netdevsim netdevsim9 netdevsim0: renamed from eth0 [ 442.759229][ T8297] loop4: detected capacity change from 0 to 512 [ 442.781389][ T8297] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 442.812837][ T8032] netdevsim netdevsim9 netdevsim1: renamed from eth1 [ 442.855029][ T8297] EXT4-fs (loop4): orphan cleanup on readonly fs [ 442.915041][ T8032] netdevsim netdevsim9 netdevsim2: renamed from eth2 [ 442.942454][ T8297] EXT4-fs error (device loop4): ext4_validate_block_bitmap:441: comm syz.4.466: bg 0: block 248: padding at end of block bitmap is not set [ 442.961842][ T8032] netdevsim netdevsim9 netdevsim3: renamed from eth3 [ 443.014081][ T8186] usb 3-1: new high-speed USB device number 8 using dummy_hcd [ 443.042817][ T8297] Quota error (device loop4): write_blk: dquota write failed [ 443.076555][ T8297] Quota error (device loop4): qtree_write_dquot: Error -117 occurred while creating quota [ 443.091279][ T8297] EXT4-fs error (device loop4): ext4_acquire_dquot:6933: comm syz.4.466: Failed to acquire dquot type 1 [ 443.190568][ T8297] EXT4-fs (loop4): 1 truncate cleaned up [ 443.336084][ T8297] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 443.389874][ T8186] usb 3-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 443.465552][ T8189] chnl_net:caif_netlink_parms(): no params data found [ 443.581727][ T8186] usb 3-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 443.716887][ T8186] usb 3-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 443.942694][ T8186] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 444.081029][ T8301] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 444.092000][ T8186] usb 3-1: Quirk or no altset; falling back to MIDI 1.0 [ 444.191139][ T8317] loop6: detected capacity change from 0 to 512 [ 444.211857][ T8317] EXT4-fs (loop6): feature flags set on rev 0 fs, running e2fsck is recommended [ 444.254405][ T8317] EXT4-fs (loop6): mounting ext2 file system using the ext4 subsystem [ 444.275414][ T8317] EXT4-fs (loop6): warning: checktime reached, running e2fsck is recommended [ 444.294715][ T8317] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=a042c01c, mo2=0002] [ 444.309876][ T5910] usb 3-1: USB disconnect, device number 8 [ 444.329466][ T8317] System zones: 0-2, 18-18, 34-34 [ 444.380493][ T8317] EXT4-fs error (device loop6): ext4_orphan_get:1393: inode #15: comm syz.6.469: iget: bad i_size value: 360287970189639680 [ 444.427719][ T8317] EXT4-fs error (device loop6): ext4_orphan_get:1398: comm syz.6.469: couldn't read orphan inode 15 (err -117) [ 444.429235][ T8297] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 444.468561][ T8317] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 444.599236][ T8189] bridge0: port 1(bridge_slave_0) entered blocking state [ 444.614092][ T8189] bridge0: port 1(bridge_slave_0) entered disabled state [ 444.631888][ T8189] bridge_slave_0: entered allmulticast mode [ 444.702339][ T8189] bridge_slave_0: entered promiscuous mode [ 444.733643][ T8189] bridge0: port 2(bridge_slave_1) entered blocking state [ 444.757417][ T8189] bridge0: port 2(bridge_slave_1) entered disabled state [ 444.822365][ T8189] bridge_slave_1: entered allmulticast mode [ 444.852807][ T8189] bridge_slave_1: entered promiscuous mode [ 444.924297][ T8325] netlink: 60 bytes leftover after parsing attributes in process `syz.6.469'. [ 445.054086][ T30] audit: type=1800 audit(1750118456.680:4): pid=8325 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.6.469" name="file2" dev="loop6" ino=16 res=0 errno=0 [ 445.463898][ T8032] 8021q: adding VLAN 0 to HW filter on device bond0 [ 445.661510][ T7020] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 445.736720][ T8032] 8021q: adding VLAN 0 to HW filter on device team0 [ 445.791088][ T8330] loop6: detected capacity change from 0 to 512 [ 445.814065][ T8189] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 445.831170][ T49] bridge0: port 1(bridge_slave_0) entered blocking state [ 445.838449][ T49] bridge0: port 1(bridge_slave_0) entered forwarding state [ 445.859205][ T8189] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 445.891667][ T8330] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000d40000 r/w without journal. Quota mode: writeback. [ 445.932827][ T8330] ext4 filesystem being mounted at /59/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 445.950031][ T8334] loop2: detected capacity change from 0 to 512 [ 445.974289][ T6750] bridge0: port 2(bridge_slave_1) entered blocking state [ 445.981474][ T6750] bridge0: port 2(bridge_slave_1) entered forwarding state [ 445.982511][ T8334] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 446.017022][ T8189] team0: Port device team_slave_0 added [ 446.036288][ T8189] team0: Port device team_slave_1 added [ 446.080272][ T8334] EXT4-fs (loop2): 1 truncate cleaned up [ 446.109582][ T8189] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 446.117685][ T8334] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 446.124671][ T8189] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 446.160881][ T8334] EXT4-fs error (device loop2): ext4_get_verity_descriptor_location:298: inode #15: comm syz.2.472: verity file has no extents [ 446.634467][ T8334] fs-verity (loop2, inode 15): Error -117 getting verity descriptor size [ 446.700426][ T8189] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 446.701556][ T5834] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 446.738572][ T8189] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 446.750260][ T8189] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 446.802375][ T8189] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 446.819154][ T7020] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000d40000. [ 447.117869][ T8343] loop6: detected capacity change from 0 to 512 [ 447.127334][ T8343] EXT4-fs (loop6): encrypted files will use data=ordered instead of data journaling mode [ 447.143417][ T8343] EXT4-fs (loop6): 1 truncate cleaned up [ 447.150837][ T8343] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 447.166933][ T8343] EXT4-fs error (device loop6): ext4_get_verity_descriptor_location:298: inode #15: comm syz.6.474: verity file has no extents [ 447.182251][ T8343] fs-verity (loop6, inode 15): Error -117 getting verity descriptor size [ 447.300611][ T7020] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 447.362792][ T8189] hsr_slave_0: entered promiscuous mode [ 447.385153][ T8189] hsr_slave_1: entered promiscuous mode [ 447.397996][ T8189] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 447.416384][ T8189] Cannot create hsr debugfs directory [ 448.015175][ T8358] futex_wake_op: syz.6.475 tries to shift op by -33; fix this program [ 448.029189][ T8358] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 448.737609][ T8358] netdevsim netdevsim6: Direct firmware load for . [ 448.737609][ T8358] failed with error -2 [ 448.756301][ T8358] netdevsim netdevsim6: Falling back to sysfs fallback for: . [ 448.756301][ T8358] [ 449.786208][ T5992] netdevsim netdevsim7 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 450.164492][ T5154] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 450.177760][ T5154] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 450.192475][ T5154] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 450.200483][ T5992] netdevsim netdevsim7 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 450.214537][ T5154] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 450.222495][ T5154] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 450.727490][ T5992] netdevsim netdevsim7 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 451.453054][ T8378] lo speed is unknown, defaulting to 1000 [ 451.475749][ T5992] netdevsim netdevsim7 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 451.532487][ T8378] lo speed is unknown, defaulting to 1000 [ 451.540630][ T8378] lo speed is unknown, defaulting to 1000 [ 451.929229][ T8378] infiniband sz1: set active [ 451.934005][ T8378] infiniband sz1: added lo [ 451.978437][ T8378] RDS/IB: sz1: added [ 451.982514][ T8378] smc: adding ib device sz1 with port count 1 [ 451.988746][ T8378] smc: ib device sz1 port 1 has pnetid [ 452.012620][ T5956] lo speed is unknown, defaulting to 1000 [ 452.081979][ T8378] lo speed is unknown, defaulting to 1000 [ 452.264260][ T5154] Bluetooth: hci0: command tx timeout [ 452.313606][ T8186] lo speed is unknown, defaulting to 1000 [ 452.333113][ T8378] lo speed is unknown, defaulting to 1000 [ 452.374816][ T8370] chnl_net:caif_netlink_parms(): no params data found [ 452.392404][ T5992] bridge_slave_1: left allmulticast mode [ 452.408662][ T5992] bridge_slave_1: left promiscuous mode [ 452.415388][ T5992] bridge0: port 2(bridge_slave_1) entered disabled state [ 452.433905][ T5992] bridge_slave_0: left allmulticast mode [ 452.441041][ T5992] bridge_slave_0: left promiscuous mode [ 452.463786][ T5992] bridge0: port 1(bridge_slave_0) entered disabled state [ 452.481191][ T5992] bridge_slave_1: left allmulticast mode [ 452.497299][ T5992] bridge_slave_1: left promiscuous mode [ 452.503105][ T5992] bridge0: port 2(bridge_slave_1) entered disabled state [ 452.526674][ T5992] bridge_slave_0: left allmulticast mode [ 452.532329][ T5992] bridge_slave_0: left promiscuous mode [ 452.548409][ T5992] bridge0: port 1(bridge_slave_0) entered disabled state [ 452.556568][ T5956] usb 3-1: new high-speed USB device number 9 using dummy_hcd [ 452.720793][ T5956] usb 3-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 452.754309][ T5956] usb 3-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 452.775720][ T5956] usb 3-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 452.795251][ T5956] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 452.830626][ T8394] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 452.841448][ T5956] usb 3-1: Quirk or no altset; falling back to MIDI 1.0 [ 453.125283][ T5956] usb 3-1: USB disconnect, device number 9 [ 453.608401][ T5992] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 453.619377][ T5992] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 453.629669][ T5992] bond0 (unregistering): Released all slaves [ 453.951024][ T5992] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 453.963218][ T5992] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 453.980092][ T5992] bond0 (unregistering): Released all slaves [ 454.011333][ T8378] lo speed is unknown, defaulting to 1000 [ 454.344256][ T5154] Bluetooth: hci0: command tx timeout [ 454.431582][ T8189] netdevsim netdevsim8 netdevsim0: renamed from eth0 [ 454.449730][ T8370] bridge0: port 1(bridge_slave_0) entered blocking state [ 454.460026][ T8370] bridge0: port 1(bridge_slave_0) entered disabled state [ 454.469579][ T8370] bridge_slave_0: entered allmulticast mode [ 454.479005][ T8370] bridge_slave_0: entered promiscuous mode [ 454.494406][ T8378] lo speed is unknown, defaulting to 1000 [ 454.494770][ T8370] bridge0: port 2(bridge_slave_1) entered blocking state [ 454.507587][ T8370] bridge0: port 2(bridge_slave_1) entered disabled state [ 454.514874][ T8370] bridge_slave_1: entered allmulticast mode [ 454.522628][ T8370] bridge_slave_1: entered promiscuous mode [ 454.562410][ T8370] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 454.575539][ T8370] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 454.785113][ T8189] netdevsim netdevsim8 netdevsim1: renamed from eth1 [ 454.809395][ T8378] lo speed is unknown, defaulting to 1000 [ 454.809908][ T8189] netdevsim netdevsim8 netdevsim2: renamed from eth2 [ 454.881609][ T8189] netdevsim netdevsim8 netdevsim3: renamed from eth3 [ 454.920879][ T8370] team0: Port device team_slave_0 added [ 454.966301][ T8370] team0: Port device team_slave_1 added [ 455.041534][ T8378] lo speed is unknown, defaulting to 1000 [ 455.042974][ T8370] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 455.062224][ T8370] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 455.105036][ T8370] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 455.152642][ T8370] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 455.174051][ T8370] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 455.249290][ T8370] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 455.273472][ T8378] lo speed is unknown, defaulting to 1000 [ 455.463067][ T8370] hsr_slave_0: entered promiscuous mode [ 455.485132][ T8370] hsr_slave_1: entered promiscuous mode [ 455.499640][ T8370] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 455.511400][ T8370] Cannot create hsr debugfs directory [ 455.527891][ T8378] lo speed is unknown, defaulting to 1000 [ 455.733528][ T8388] rdma_rxe: rxe_newlink: failed to add lo [ 455.892122][ T8419] pimreg: entered allmulticast mode [ 456.145211][ T8425] loop2: detected capacity change from 0 to 512 [ 456.838729][ T8427] x_tables: ip_tables: osf match: only valid for protocol 6 [ 456.874344][ T5154] Bluetooth: hci0: command tx timeout [ 457.004712][ T8425] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 457.914168][ T8425] EXT4-fs (loop2): orphan cleanup on readonly fs [ 457.932222][ T8425] EXT4-fs error (device loop2): ext4_validate_block_bitmap:441: comm syz.2.488: bg 0: block 248: padding at end of block bitmap is not set [ 457.953216][ T8425] Quota error (device loop2): write_blk: dquota write failed [ 457.961021][ T8425] Quota error (device loop2): qtree_write_dquot: Error -117 occurred while creating quota [ 457.972045][ T8425] EXT4-fs error (device loop2): ext4_acquire_dquot:6933: comm syz.2.488: Failed to acquire dquot type 1 [ 458.032883][ T8425] EXT4-fs (loop2): 1 truncate cleaned up [ 458.057008][ T8425] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 458.288658][ T8189] 8021q: adding VLAN 0 to HW filter on device bond0 [ 458.333065][ T8430] loop6: detected capacity change from 0 to 256 [ 458.357889][ T8425] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 458.420355][ T8430] FAT-fs (loop6): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 459.474130][ T5154] Bluetooth: hci0: command tx timeout [ 459.854706][ T8438] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 460.577168][ T8189] 8021q: adding VLAN 0 to HW filter on device team0 [ 460.688207][ T6622] bridge0: port 1(bridge_slave_0) entered blocking state [ 460.695418][ T6622] bridge0: port 1(bridge_slave_0) entered forwarding state [ 460.746303][ T6622] bridge0: port 2(bridge_slave_1) entered blocking state [ 460.753543][ T6622] bridge0: port 2(bridge_slave_1) entered forwarding state [ 461.490794][ T8456] rdma_rxe: rxe_newlink: failed to add lo [ 462.114062][ T8451] xt_CT: No such helper "netbios-ns" [ 462.171157][ T5992] hsr_slave_0: left promiscuous mode [ 462.177481][ T5992] hsr_slave_1: left promiscuous mode [ 462.187374][ T5992] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 462.204826][ T5992] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 462.230955][ T5992] hsr_slave_0: left promiscuous mode [ 462.236982][ T5992] hsr_slave_1: left promiscuous mode [ 462.243006][ T5992] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 462.251026][ T5992] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 462.260073][ T5992] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 462.267819][ T5992] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 462.302103][ T5992] veth1_vlan: left promiscuous mode [ 462.308031][ T5992] veth0_vlan: left promiscuous mode [ 462.316349][ T5992] veth1_macvtap: left promiscuous mode [ 462.321995][ T5992] veth0_macvtap: left promiscuous mode [ 462.328669][ T5992] veth1_vlan: left promiscuous mode [ 462.334346][ T5992] veth0_vlan: left promiscuous mode [ 463.043500][ T5992] team0 (unregistering): Port device team_slave_1 removed [ 463.151931][ T5992] team0 (unregistering): Port device team_slave_0 removed [ 464.137527][ T8468] futex_wake_op: syz.6.498 tries to shift op by -33; fix this program [ 464.156782][ T8468] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 464.864548][ T5992] team0 (unregistering): Port device team_slave_1 removed [ 464.918659][ T5992] team0 (unregistering): Port device team_slave_0 removed [ 465.242711][ T8442] workqueue: Failed to create a rescuer kthread for wq "wg-crypt-wireguard%d": -EINTR [ 465.370415][ T8468] netdevsim netdevsim6: Direct firmware load for . [ 465.370415][ T8468] failed with error -2 [ 465.434042][ T8468] netdevsim netdevsim6: Falling back to sysfs fallback for: . [ 465.434042][ T8468] [ 465.502415][ T8370] netdevsim netdevsim9 netdevsim0: renamed from eth0 [ 465.669521][ T8476] loop4: detected capacity change from 0 to 512 [ 465.699273][ T8476] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 465.731740][ T8370] netdevsim netdevsim9 netdevsim1: renamed from eth1 [ 465.832509][ T8476] EXT4-fs (loop4): orphan cleanup on readonly fs [ 465.848650][ T8476] EXT4-fs error (device loop4): ext4_validate_block_bitmap:441: comm syz.4.499: bg 0: block 248: padding at end of block bitmap is not set [ 465.873476][ T8476] Quota error (device loop4): write_blk: dquota write failed [ 465.881426][ T8476] Quota error (device loop4): qtree_write_dquot: Error -117 occurred while creating quota [ 465.891617][ T8476] EXT4-fs error (device loop4): ext4_acquire_dquot:6933: comm syz.4.499: Failed to acquire dquot type 1 [ 465.910755][ T8476] EXT4-fs (loop4): 1 truncate cleaned up [ 465.933719][ T8476] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 466.011223][ T8370] netdevsim netdevsim9 netdevsim2: renamed from eth2 [ 466.185280][ T8370] netdevsim netdevsim9 netdevsim3: renamed from eth3 [ 466.422374][ T8189] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 466.439445][ T8476] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 467.060048][ T8488] x_tables: ip_tables: osf match: only valid for protocol 6 [ 467.654226][ T8370] 8021q: adding VLAN 0 to HW filter on device bond0 [ 467.798334][ T8370] 8021q: adding VLAN 0 to HW filter on device team0 [ 467.835401][ T13] bridge0: port 1(bridge_slave_0) entered blocking state [ 467.842673][ T13] bridge0: port 1(bridge_slave_0) entered forwarding state [ 467.876698][ T13] bridge0: port 2(bridge_slave_1) entered blocking state [ 467.883889][ T13] bridge0: port 2(bridge_slave_1) entered forwarding state [ 467.969274][ T8370] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 469.171285][ T8506] x_tables: ip_tables: TPROXY target: used from hooks FORWARD, but only usable from PREROUTING [ 469.758168][ T8370] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 470.061958][ T8507] x_tables: ip_tables: osf match: only valid for protocol 6 [ 470.235732][ T8189] veth0_vlan: entered promiscuous mode [ 470.348442][ T5992] bridge_slave_1: left allmulticast mode [ 470.358365][ T5992] bridge_slave_1: left promiscuous mode [ 470.367642][ T5992] bridge0: port 2(bridge_slave_1) entered disabled state [ 470.377743][ T5992] bridge_slave_0: left allmulticast mode [ 470.383498][ T5992] bridge_slave_0: left promiscuous mode [ 470.390174][ T5992] bridge0: port 1(bridge_slave_0) entered disabled state [ 470.657339][ T8526] loop4: detected capacity change from 0 to 512 [ 470.685680][ T8526] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000d40000 r/w without journal. Quota mode: writeback. [ 470.702224][ T8526] ext4 filesystem being mounted at /136/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 470.966451][ T5992] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 470.987031][ T5992] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 471.035960][ T5992] bond0 (unregistering): Released all slaves [ 471.104409][ T8189] veth1_vlan: entered promiscuous mode [ 471.990290][ T8370] veth0_vlan: entered promiscuous mode [ 472.153626][ T8370] veth1_vlan: entered promiscuous mode [ 473.156585][ T8543] loop6: detected capacity change from 0 to 512 [ 473.165897][ T8543] EXT4-fs (loop6): encrypted files will use data=ordered instead of data journaling mode [ 473.191465][ T5842] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000d40000. [ 473.208353][ T8531] workqueue: Failed to create a rescuer kthread for wq "wg-crypt-wireguard%d": -EINTR [ 473.218610][ T8543] EXT4-fs (loop6): 1 truncate cleaned up [ 473.425200][ T8189] veth0_macvtap: entered promiscuous mode [ 473.690854][ T8189] veth1_macvtap: entered promiscuous mode [ 474.081406][ T8370] veth0_macvtap: entered promiscuous mode [ 474.175736][ T8543] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 474.826858][ T8549] loop4: detected capacity change from 0 to 512 [ 474.865005][ T8549] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 474.896424][ T8549] EXT4-fs (loop4): orphan cleanup on readonly fs [ 474.912730][ T8549] EXT4-fs error (device loop4): ext4_validate_block_bitmap:441: comm syz.4.511: bg 0: block 248: padding at end of block bitmap is not set [ 474.929408][ T8549] Quota error (device loop4): write_blk: dquota write failed [ 474.937368][ T8549] Quota error (device loop4): qtree_write_dquot: Error -117 occurred while creating quota [ 474.947597][ T8549] EXT4-fs error (device loop4): ext4_acquire_dquot:6933: comm syz.4.511: Failed to acquire dquot type 1 [ 474.976584][ T8549] EXT4-fs (loop4): 1 truncate cleaned up [ 474.996492][ T8549] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 475.561647][ T8549] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 475.579106][ T5992] hsr_slave_0: left promiscuous mode [ 475.600842][ T5992] hsr_slave_1: left promiscuous mode [ 475.607223][ T7020] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 475.616962][ T5992] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 475.652316][ T5992] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 476.055313][ T5992] team0 (unregistering): Port device team_slave_1 removed [ 476.116352][ T5992] team0 (unregistering): Port device team_slave_0 removed [ 476.629059][ T8554] netlink: 'syz.6.512': attribute type 1 has an invalid length. [ 476.657063][ T8189] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 476.670088][ T8370] veth1_macvtap: entered promiscuous mode [ 476.721897][ T8554] 8021q: adding VLAN 0 to HW filter on device bond1 [ 476.732930][ T8189] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 476.753769][ T8370] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 476.766124][ T8370] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 476.776773][ T8370] netdevsim netdevsim9 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 476.813495][ T8370] netdevsim netdevsim9 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 476.853121][ T8370] netdevsim netdevsim9 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 476.872437][ T8370] netdevsim netdevsim9 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 476.905515][ T8189] netdevsim netdevsim8 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 476.938131][ T8189] netdevsim netdevsim8 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 476.947402][ T8189] netdevsim netdevsim8 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 476.957261][ T8560] x_tables: ip_tables: osf match: only valid for protocol 6 [ 476.961627][ T8189] netdevsim netdevsim8 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 477.198003][ T1099] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 477.209696][ T1099] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 477.265734][ T6622] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 477.285152][ T49] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 477.292988][ T49] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 477.300437][ T6622] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 477.363494][ T1099] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 477.393198][ T1099] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 481.634212][ T8602] lo speed is unknown, defaulting to 1000 [ 482.586398][ T8611] loop2: detected capacity change from 0 to 512 [ 482.879870][ T8611] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000d40000 r/w without journal. Quota mode: writeback. [ 482.921006][ T8611] ext4 filesystem being mounted at /137/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 483.761244][ T8623] x_tables: ip_tables: osf match: only valid for protocol 6 [ 483.852817][ T8627] loop4: detected capacity change from 0 to 512 [ 484.497827][ T8627] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000d40000 r/w without journal. Quota mode: writeback. [ 484.607901][ T8627] ext4 filesystem being mounted at /145/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 484.837782][ T5834] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000d40000. [ 485.062332][ T8637] loop9: detected capacity change from 0 to 512 [ 485.555919][ T8637] EXT4-fs (loop9): encrypted files will use data=ordered instead of data journaling mode [ 486.284527][ T8637] EXT4-fs (loop9): 1 truncate cleaned up [ 486.426709][ T8637] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 486.667679][ T8650] netlink: 40 bytes leftover after parsing attributes in process `syz.2.538'. [ 486.676654][ T8650] netlink: 40 bytes leftover after parsing attributes in process `syz.2.538'. [ 486.686093][ T8650] A link change request failed with some changes committed already. Interface sit0 may have been left with an inconsistent configuration, please check. [ 487.297397][ T8637] EXT4-fs error (device loop9): ext4_get_verity_descriptor_location:298: inode #15: comm syz.9.536: verity file has no extents [ 487.341510][ T8637] fs-verity (loop9, inode 15): Error -117 getting verity descriptor size [ 487.355465][ T8652] loop2: detected capacity change from 0 to 256 [ 487.370203][ T8652] FAT-fs (loop2): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 487.601131][ T8654] pimreg: entered allmulticast mode [ 487.636176][ T5842] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000d40000. [ 487.744681][ T8370] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 489.944558][ T8682] netlink: 40 bytes leftover after parsing attributes in process `syz.9.550'. [ 489.953601][ T8682] netlink: 40 bytes leftover after parsing attributes in process `syz.9.550'. [ 489.964062][ T8682] A link change request failed with some changes committed already. Interface sit0 may have been left with an inconsistent configuration, please check. [ 491.904440][ T8692] syzkaller1: entered promiscuous mode [ 491.909963][ T8692] syzkaller1: entered allmulticast mode [ 491.936192][ T8705] loop9: detected capacity change from 0 to 512 [ 491.982315][ T8705] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000d40000 r/w without journal. Quota mode: writeback. [ 492.135886][ T8705] ext4 filesystem being mounted at /12/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 492.298601][ T8715] loop6: detected capacity change from 0 to 512 [ 492.364539][ T8715] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000d40000 r/w without journal. Quota mode: writeback. [ 492.386000][ T8715] ext4 filesystem being mounted at /75/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 492.443078][ T8721] loop8: detected capacity change from 0 to 512 [ 492.525888][ T8721] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000d40000 r/w without journal. Quota mode: writeback. [ 492.544376][ T8721] ext4 filesystem being mounted at /10/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 493.616599][ T8370] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000d40000. [ 493.858218][ T7020] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000d40000. [ 493.874611][ T8189] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000d40000. [ 493.894837][ T8734] loop4: detected capacity change from 0 to 512 [ 493.944239][ T8734] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 494.009377][ T8734] EXT4-fs (loop4): 1 truncate cleaned up [ 494.018838][ T8734] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 494.070168][ T8736] fuse: Unknown parameter '0x0000000000000007' [ 494.155159][ T8734] EXT4-fs error (device loop4): ext4_get_verity_descriptor_location:298: inode #15: comm syz.4.564: verity file has no extents [ 494.222351][ T8734] fs-verity (loop4, inode 15): Error -117 getting verity descriptor size [ 494.285608][ T8748] netlink: 40 bytes leftover after parsing attributes in process `syz.9.563'. [ 494.294769][ T8748] netlink: 40 bytes leftover after parsing attributes in process `syz.9.563'. [ 494.304135][ T8748] A link change request failed with some changes committed already. Interface sit0 may have been left with an inconsistent configuration, please check. [ 494.369875][ T5842] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 497.927498][ T8773] loop6: detected capacity change from 0 to 512 [ 497.941232][ T8773] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 498.068593][ T8773] EXT4-fs (loop6): orphan cleanup on readonly fs [ 498.083040][ T8773] EXT4-fs error (device loop6): ext4_validate_block_bitmap:441: comm syz.6.576: bg 0: block 248: padding at end of block bitmap is not set [ 498.109338][ T8773] Quota error (device loop6): write_blk: dquota write failed [ 498.118603][ T8773] Quota error (device loop6): qtree_write_dquot: Error -117 occurred while creating quota [ 498.128853][ T8773] EXT4-fs error (device loop6): ext4_acquire_dquot:6933: comm syz.6.576: Failed to acquire dquot type 1 [ 498.160138][ T8773] EXT4-fs (loop6): 1 truncate cleaned up [ 498.181517][ T8773] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 499.642277][ T8792] x_tables: ip_tables: osf match: only valid for protocol 6 [ 500.196424][ T7020] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 500.311935][ T8795] netlink: 40 bytes leftover after parsing attributes in process `syz.8.583'. [ 500.321029][ T8795] netlink: 40 bytes leftover after parsing attributes in process `syz.8.583'. [ 500.330352][ T8795] A link change request failed with some changes committed already. Interface sit0 may have been left with an inconsistent configuration, please check. [ 500.963079][ T8801] loop2: detected capacity change from 0 to 256 [ 500.974135][ T8801] FAT-fs (loop2): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 501.231538][ T1306] ieee802154 phy0 wpan0: encryption failed: -22 [ 501.239314][ T1306] ieee802154 phy1 wpan1: encryption failed: -22 [ 502.394836][ T8826] loop9: detected capacity change from 0 to 512 [ 502.907010][ T8826] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 502.943795][ T8826] EXT4-fs (loop9): orphan cleanup on readonly fs [ 502.960454][ T8826] EXT4-fs error (device loop9): ext4_validate_block_bitmap:441: comm syz.9.595: bg 0: block 248: padding at end of block bitmap is not set [ 502.977522][ T8826] Quota error (device loop9): write_blk: dquota write failed [ 502.985488][ T8826] Quota error (device loop9): qtree_write_dquot: Error -117 occurred while creating quota [ 502.995720][ T8826] EXT4-fs error (device loop9): ext4_acquire_dquot:6933: comm syz.9.595: Failed to acquire dquot type 1 [ 503.021290][ T8826] EXT4-fs (loop9): 1 truncate cleaned up [ 503.049549][ T8826] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 503.624258][ T8834] netlink: 40 bytes leftover after parsing attributes in process `syz.8.598'. [ 503.633293][ T8834] netlink: 40 bytes leftover after parsing attributes in process `syz.8.598'. [ 503.646165][ T8834] A link change request failed with some changes committed already. Interface sit0 may have been left with an inconsistent configuration, please check. [ 504.172691][ T8837] loop8: detected capacity change from 0 to 512 [ 504.181885][ T8837] EXT4-fs (loop8): encrypted files will use data=ordered instead of data journaling mode [ 504.200490][ T8835] loop6: detected capacity change from 0 to 512 [ 504.270099][ T8835] EXT4-fs (loop6): encrypted files will use data=ordered instead of data journaling mode [ 504.496750][ T8837] EXT4-fs (loop8): 1 truncate cleaned up [ 504.516531][ T8835] EXT4-fs (loop6): 1 truncate cleaned up [ 504.522447][ T8837] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 504.581512][ T8845] x_tables: ip_tables: osf match: only valid for protocol 6 [ 504.720987][ T8835] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 504.744489][ T8837] EXT4-fs error (device loop8): ext4_get_verity_descriptor_location:298: inode #15: comm syz.8.600: verity file has no extents [ 504.792551][ T8370] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 504.852849][ T8837] fs-verity (loop8, inode 15): Error -117 getting verity descriptor size [ 504.900834][ T8189] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 507.038909][ T7020] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 507.200909][ T8868] loop9: detected capacity change from 0 to 512 [ 507.218006][ T8875] loop8: detected capacity change from 0 to 256 [ 507.236364][ T8868] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000d40000 r/w without journal. Quota mode: writeback. [ 507.274392][ T8868] ext4 filesystem being mounted at /23/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 507.358627][ T8879] loop2: detected capacity change from 0 to 512 [ 507.442277][ T8879] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 507.461291][ T8875] FAT-fs (loop8): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 507.478538][ T8879] EXT4-fs (loop2): orphan cleanup on readonly fs [ 507.493789][ T8879] EXT4-fs error (device loop2): ext4_validate_block_bitmap:441: comm syz.2.612: bg 0: block 248: padding at end of block bitmap is not set [ 507.528976][ T8879] Quota error (device loop2): write_blk: dquota write failed [ 507.538218][ T8879] Quota error (device loop2): qtree_write_dquot: Error -117 occurred while creating quota [ 507.548476][ T8879] EXT4-fs error (device loop2): ext4_acquire_dquot:6933: comm syz.2.612: Failed to acquire dquot type 1 [ 507.586577][ T8879] EXT4-fs (loop2): 1 truncate cleaned up [ 507.618871][ T8879] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 508.521658][ T8890] netlink: 24 bytes leftover after parsing attributes in process `syz.4.616'. [ 508.679722][ T8892] loop6: detected capacity change from 0 to 512 [ 509.010863][ T5834] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 509.073331][ T8892] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000d40000 r/w without journal. Quota mode: writeback. [ 509.091910][ T8892] ext4 filesystem being mounted at /86/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 509.175459][ T8370] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000d40000. [ 510.329702][ T7020] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000d40000. [ 510.404246][ T8923] loop2: detected capacity change from 0 to 512 [ 510.452831][ T8923] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000d40000 r/w without journal. Quota mode: writeback. [ 510.471328][ T8923] ext4 filesystem being mounted at /158/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 510.602129][ T8936] loop4: detected capacity change from 0 to 512 [ 511.545908][ T8936] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 511.572834][ T8936] EXT4-fs (loop4): orphan cleanup on readonly fs [ 511.586728][ T8936] EXT4-fs error (device loop4): ext4_validate_block_bitmap:441: comm syz.4.630: bg 0: block 248: padding at end of block bitmap is not set [ 511.603177][ T8936] Quota error (device loop4): write_blk: dquota write failed [ 511.611302][ T8936] Quota error (device loop4): qtree_write_dquot: Error -117 occurred while creating quota [ 511.621446][ T8936] EXT4-fs error (device loop4): ext4_acquire_dquot:6933: comm syz.4.630: Failed to acquire dquot type 1 [ 511.654685][ T8936] EXT4-fs (loop4): 1 truncate cleaned up [ 511.682712][ T8936] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 511.916104][ T8944] loop8: detected capacity change from 0 to 256 [ 511.970121][ T8944] FAT-fs (loop8): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 513.002360][ T8936] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 513.159966][ T5834] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000d40000. [ 513.412885][ T8965] loop2: detected capacity change from 0 to 512 [ 513.482652][ T8965] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 514.134813][ T8969] xt_CT: No such helper "netbios-ns" [ 514.157338][ T8965] EXT4-fs (loop2): 1 truncate cleaned up [ 514.212553][ T8965] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 514.523079][ T8965] EXT4-fs error (device loop2): ext4_get_verity_descriptor_location:298: inode #15: comm syz.2.637: verity file has no extents [ 514.538737][ T8965] fs-verity (loop2, inode 15): Error -117 getting verity descriptor size [ 515.178537][ T8983] lo speed is unknown, defaulting to 1000 [ 515.859125][ T5834] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 515.935779][ T8989] loop4: detected capacity change from 0 to 256 [ 515.957909][ T8989] FAT-fs (loop4): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 516.385402][ T9000] loop2: detected capacity change from 0 to 512 [ 517.325215][ T9000] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 518.295336][ T9000] EXT4-fs (loop2): orphan cleanup on readonly fs [ 518.303045][ T9000] EXT4-fs error (device loop2): ext4_validate_block_bitmap:441: comm syz.2.647: bg 0: block 248: padding at end of block bitmap is not set [ 518.320556][ T9000] Quota error (device loop2): write_blk: dquota write failed [ 518.328452][ T9000] Quota error (device loop2): qtree_write_dquot: Error -117 occurred while creating quota [ 518.338524][ T9000] EXT4-fs error (device loop2): ext4_acquire_dquot:6933: comm syz.2.647: Failed to acquire dquot type 1 [ 518.454135][ T9000] EXT4-fs (loop2): 1 truncate cleaned up [ 518.481531][ T9000] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 518.724008][ T9000] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 520.744581][ T5956] usb 7-1: new high-speed USB device number 3 using dummy_hcd [ 521.066621][ T5956] usb 7-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 521.117237][ T5956] usb 7-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 521.145893][ T9041] loop2: detected capacity change from 0 to 512 [ 521.164199][ T5956] usb 7-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 521.192347][ T5956] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 521.207158][ T9041] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 521.227159][ T9038] raw-gadget.0 gadget.6: fail, usb_ep_enable returned -22 [ 521.239938][ T5956] usb 7-1: Quirk or no altset; falling back to MIDI 1.0 [ 521.264634][ T9041] EXT4-fs (loop2): 1 truncate cleaned up [ 521.396007][ T9041] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 521.446841][ T5880] usb 7-1: USB disconnect, device number 3 [ 521.622849][ T9051] loop8: detected capacity change from 0 to 256 [ 521.650209][ T9051] FAT-fs (loop8): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 521.877804][ T9055] loop4: detected capacity change from 0 to 512 [ 521.931066][ T9055] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 521.987169][ T9055] EXT4-fs (loop4): orphan cleanup on readonly fs [ 522.022699][ T9055] EXT4-fs error (device loop4): ext4_validate_block_bitmap:441: comm syz.4.665: bg 0: block 248: padding at end of block bitmap is not set [ 522.050171][ T9055] Quota error (device loop4): write_blk: dquota write failed [ 522.058690][ T9055] Quota error (device loop4): qtree_write_dquot: Error -117 occurred while creating quota [ 522.069252][ T9055] EXT4-fs error (device loop4): ext4_acquire_dquot:6933: comm syz.4.665: Failed to acquire dquot type 1 [ 522.107300][ T9055] EXT4-fs (loop4): 1 truncate cleaned up [ 522.173026][ T9055] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 523.391522][ T9055] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 524.333988][ T9071] x_tables: ip_tables: TPROXY target: used from hooks FORWARD, but only usable from PREROUTING [ 526.247182][ T9090] loop9: detected capacity change from 0 to 512 [ 526.279454][ T9090] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 526.420555][ T9090] EXT4-fs (loop9): orphan cleanup on readonly fs [ 526.902908][ T9090] EXT4-fs error (device loop9): ext4_validate_block_bitmap:441: comm syz.9.677: bg 0: block 248: padding at end of block bitmap is not set [ 527.133658][ T9090] Quota error (device loop9): write_blk: dquota write failed [ 527.206008][ T9101] loop6: detected capacity change from 0 to 512 [ 527.212468][ T9090] Quota error (device loop9): qtree_write_dquot: Error -117 occurred while creating quota [ 527.228732][ T9101] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 527.259803][ T9101] EXT4-fs (loop6): orphan cleanup on readonly fs [ 527.266497][ T9090] EXT4-fs error (device loop9): ext4_acquire_dquot:6933: comm syz.9.677: Failed to acquire dquot type 1 [ 527.279488][ T9101] EXT4-fs error (device loop6): ext4_validate_block_bitmap:441: comm syz.6.681: bg 0: block 248: padding at end of block bitmap is not set [ 527.279560][ T9090] EXT4-fs (loop9): 1 truncate cleaned up [ 527.296062][ T9101] Quota error (device loop6): write_blk: dquota write failed [ 527.307344][ T9101] Quota error (device loop6): qtree_write_dquot: Error -117 occurred while creating quota [ 527.317363][ T9101] EXT4-fs error (device loop6): ext4_acquire_dquot:6933: comm syz.6.681: Failed to acquire dquot type 1 [ 527.329922][ T9101] EXT4-fs (loop6): 1 truncate cleaned up [ 527.356412][ T9101] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 527.377684][ T9090] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 527.386569][ T9104] loop8: detected capacity change from 0 to 256 [ 527.412438][ T9104] FAT-fs (loop8): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 527.498565][ T9101] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 529.745934][ T5834] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 533.634798][ T9155] loop8: detected capacity change from 0 to 256 [ 533.810190][ T9155] FAT-fs (loop8): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 535.216065][ T8370] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 537.655155][ T9195] loop6: detected capacity change from 0 to 512 [ 537.863540][ T9195] EXT4-fs (loop6): encrypted files will use data=ordered instead of data journaling mode [ 537.913192][ T5956] usb 9-1: new full-speed USB device number 2 using dummy_hcd [ 538.702149][ T9195] EXT4-fs (loop6): 1 truncate cleaned up [ 538.714895][ T9195] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 538.758666][ T5956] usb 9-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 539.351062][ T9205] loop4: detected capacity change from 0 to 512 [ 539.463671][ T9205] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 539.552245][ T9205] EXT4-fs (loop4): orphan cleanup on readonly fs [ 539.630981][ T9205] EXT4-fs error (device loop4): ext4_validate_block_bitmap:441: comm syz.4.714: bg 0: block 248: padding at end of block bitmap is not set [ 539.648842][ T5956] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 10 [ 539.660181][ T5956] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 539.670682][ T5956] usb 9-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 5 [ 539.682724][ T7020] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 539.698595][ T5956] usb 9-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 539.719891][ T5956] usb 9-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 539.733971][ T5956] usb 9-1: Manufacturer: syz [ 539.742037][ T9205] Quota error (device loop4): write_blk: dquota write failed [ 539.750571][ T5956] usb 9-1: config 0 descriptor?? [ 539.755922][ T9205] Quota error (device loop4): qtree_write_dquot: Error -117 occurred while creating quota [ 539.769913][ T9205] EXT4-fs error (device loop4): ext4_acquire_dquot:6933: comm syz.4.714: Failed to acquire dquot type 1 [ 539.799927][ T9205] EXT4-fs (loop4): 1 truncate cleaned up [ 539.812885][ T9214] loop2: detected capacity change from 0 to 256 [ 539.852407][ T9205] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 539.865756][ T9214] FAT-fs (loop2): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 540.289368][ T5956] rc_core: IR keymap rc-hauppauge not found [ 540.295610][ T5956] Registered IR keymap rc-empty [ 540.303780][ T5956] mceusb 9-1:0.0: Error: mce write submit urb error = -90 [ 540.324089][ T5956] mceusb 9-1:0.0: Error: mce write submit urb error = -90 [ 540.418431][ T5956] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.8/usb9/9-1/9-1:0.0/rc/rc0 [ 540.432721][ T5956] input: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.8/usb9/9-1/9-1:0.0/rc/rc0/input5 [ 540.451948][ T5956] mceusb 9-1:0.0: Error: mce write submit urb error = -90 [ 540.474142][ T5956] mceusb 9-1:0.0: Error: mce write submit urb error = -90 [ 540.494346][ T5956] mceusb 9-1:0.0: Error: mce write submit urb error = -90 [ 540.520929][ T5956] mceusb 9-1:0.0: Error: mce write submit urb error = -90 [ 540.548489][ T5956] mceusb 9-1:0.0: Error: mce write submit urb error = -90 [ 540.585218][ T5956] mceusb 9-1:0.0: Error: mce write submit urb error = -90 [ 540.675936][ T5956] mceusb 9-1:0.0: Error: mce write submit urb error = -90 [ 540.817093][ T5956] mceusb 9-1:0.0: Error: mce write submit urb error = -90 [ 540.969833][ T5956] mceusb 9-1:0.0: Error: mce write submit urb error = -90 [ 541.155271][ T5956] mceusb 9-1:0.0: Error: mce write submit urb error = -90 [ 541.390478][ T5956] mceusb 9-1:0.0: Registered 424242424242 with mce emulator interface version 1 [ 541.470475][ T5956] mceusb 9-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 542.343018][ T5956] usb 9-1: USB disconnect, device number 2 [ 544.694666][ T9256] loop2: detected capacity change from 0 to 256 [ 544.708495][ T9256] FAT-fs (loop2): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 544.866102][ T9257] loop9: detected capacity change from 0 to 512 [ 545.684340][ T9257] EXT4-fs (loop9): encrypted files will use data=ordered instead of data journaling mode [ 545.749541][ T9257] EXT4-fs (loop9): 1 truncate cleaned up [ 545.764449][ T9257] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 547.054646][ T8370] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 549.714885][ T9279] lo speed is unknown, defaulting to 1000 [ 551.991729][ T9299] loop2: detected capacity change from 0 to 512 [ 552.030091][ T9299] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 552.070796][ T9299] EXT4-fs (loop2): 1 truncate cleaned up [ 552.085829][ T9299] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 552.821270][ T9303] fuse: Unknown parameter '0x0000000000000007' [ 552.864924][ T9305] netlink: 4 bytes leftover after parsing attributes in process `syz.8.748'. [ 552.912116][ T9305] netlink: 4 bytes leftover after parsing attributes in process `syz.8.748'. [ 554.233021][ T5834] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 555.001660][ T9329] Cannot find add_set index 0 as target [ 555.763976][ T9307] Bluetooth: hci4: command 0x0406 tx timeout [ 556.534147][ T9331] netlink: 40 bytes leftover after parsing attributes in process `syz.8.756'. [ 556.543052][ T9331] netlink: 40 bytes leftover after parsing attributes in process `syz.8.756'. [ 556.552446][ T9331] A link change request failed with some changes committed already. Interface ip6tnl0 may have been left with an inconsistent configuration, please check. [ 556.715105][ T9204] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 556.908792][ T9307] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 556.918273][ T9307] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 556.944250][ T9307] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 556.952231][ T9307] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 556.960350][ T9307] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 557.068986][ T9335] lo speed is unknown, defaulting to 1000 [ 558.744556][ T9359] loop9: detected capacity change from 0 to 512 [ 558.763482][ T9359] EXT4-fs (loop9): encrypted files will use data=ordered instead of data journaling mode [ 558.798051][ T9359] EXT4-fs (loop9): 1 truncate cleaned up [ 558.805397][ T9359] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 559.064159][ T5838] Bluetooth: hci5: command tx timeout [ 560.120166][ T8370] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 560.330135][ T6748] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 560.419224][ T9379] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 560.597695][ T6748] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 560.676321][ T9335] chnl_net:caif_netlink_parms(): no params data found [ 561.149114][ T5838] Bluetooth: hci5: command tx timeout [ 562.323646][ T6748] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 562.655372][ T6748] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 562.689047][ T1306] ieee802154 phy0 wpan0: encryption failed: -22 [ 562.697512][ T1306] ieee802154 phy1 wpan1: encryption failed: -22 [ 562.760790][ T9405] loop9: detected capacity change from 0 to 512 [ 563.226379][ T5838] Bluetooth: hci5: command tx timeout [ 563.614695][ T9405] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 563.626606][ T9405] EXT4-fs (loop9): orphan cleanup on readonly fs [ 563.636048][ T9405] EXT4-fs error (device loop9): ext4_validate_block_bitmap:441: comm syz.9.780: bg 0: block 248: padding at end of block bitmap is not set [ 563.653215][ T9405] Quota error (device loop9): write_blk: dquota write failed [ 563.660758][ T9405] Quota error (device loop9): qtree_write_dquot: Error -117 occurred while creating quota [ 563.670710][ T9405] EXT4-fs error (device loop9): ext4_acquire_dquot:6933: comm syz.9.780: Failed to acquire dquot type 1 [ 563.682819][ T9405] EXT4-fs (loop9): 1 truncate cleaned up [ 563.689893][ T9405] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 563.805355][ T9335] bridge0: port 1(bridge_slave_0) entered blocking state [ 563.819846][ T9335] bridge0: port 1(bridge_slave_0) entered disabled state [ 563.827276][ T9335] bridge_slave_0: entered allmulticast mode [ 563.839886][ T9335] bridge_slave_0: entered promiscuous mode [ 563.874812][ T9335] bridge0: port 2(bridge_slave_1) entered blocking state [ 563.893461][ T9335] bridge0: port 2(bridge_slave_1) entered disabled state [ 563.912335][ T9335] bridge_slave_1: entered allmulticast mode [ 563.932511][ T9335] bridge_slave_1: entered promiscuous mode [ 563.952079][ T9405] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 564.086850][ T9335] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 564.123611][ T9335] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 564.348785][ T9335] team0: Port device team_slave_0 added [ 564.377234][ T9335] team0: Port device team_slave_1 added [ 564.481202][ T9335] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 564.488925][ T9335] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 564.524790][ T9335] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 564.561866][ T9335] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 564.572143][ T9335] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 564.631004][ T9335] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 564.646494][ T6748] bridge_slave_1: left allmulticast mode [ 564.652237][ T6748] bridge_slave_1: left promiscuous mode [ 564.664465][ T6748] bridge0: port 2(bridge_slave_1) entered disabled state [ 564.702111][ T6748] bridge_slave_0: left allmulticast mode [ 564.715500][ T6748] bridge_slave_0: left promiscuous mode [ 564.721252][ T6748] bridge0: port 1(bridge_slave_0) entered disabled state [ 564.724033][ T980] usb 7-1: new full-speed USB device number 4 using dummy_hcd [ 564.886891][ T980] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 564.908789][ T980] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 10 [ 564.938744][ T980] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 564.957752][ T980] usb 7-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 5 [ 564.992825][ T980] usb 7-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 565.003153][ T980] usb 7-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 565.027091][ T980] usb 7-1: Manufacturer: syz [ 565.037972][ T980] usb 7-1: config 0 descriptor?? [ 565.304522][ T5838] Bluetooth: hci5: command tx timeout [ 565.313160][ T6748] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 565.338442][ T6748] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 565.357078][ T6748] bond0 (unregistering): Released all slaves [ 565.364001][ T980] rc_core: IR keymap rc-hauppauge not found [ 565.369915][ T980] Registered IR keymap rc-empty [ 565.406972][ T9438] Cannot find add_set index 0 as target [ 565.498891][ T6748] bond1 (unregistering): Released all slaves [ 565.524195][ T980] mceusb 7-1:0.0: Error: mce write submit urb error = -90 [ 565.564109][ T980] mceusb 7-1:0.0: Error: mce write submit urb error = -90 [ 565.607616][ T980] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.6/usb7/7-1/7-1:0.0/rc/rc0 [ 565.661696][ T980] input: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.6/usb7/7-1/7-1:0.0/rc/rc0/input6 [ 565.728910][ T980] mceusb 7-1:0.0: Error: mce write submit urb error = -90 [ 565.828410][ T980] mceusb 7-1:0.0: Error: mce write submit urb error = -90 [ 565.887625][ T980] mceusb 7-1:0.0: Error: mce write submit urb error = -90 [ 565.936876][ T9335] hsr_slave_0: entered promiscuous mode [ 565.944815][ T980] mceusb 7-1:0.0: Error: mce write submit urb error = -90 [ 565.966416][ T9335] hsr_slave_1: entered promiscuous mode [ 565.984906][ T9335] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 565.992475][ T9335] Cannot create hsr debugfs directory [ 566.000506][ T980] mceusb 7-1:0.0: Error: mce write submit urb error = -90 [ 566.044175][ T980] mceusb 7-1:0.0: Error: mce write submit urb error = -90 [ 566.074170][ T980] mceusb 7-1:0.0: Error: mce write submit urb error = -90 [ 566.124067][ T980] mceusb 7-1:0.0: Error: mce write submit urb error = -90 [ 566.145618][ T980] mceusb 7-1:0.0: Error: mce write submit urb error = -90 [ 566.186107][ T980] mceusb 7-1:0.0: Error: mce write submit urb error = -90 [ 566.219175][ T980] mceusb 7-1:0.0: Registered 424242424242 with mce emulator interface version 1 [ 566.248315][ T980] mceusb 7-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 566.295620][ T980] usb 7-1: USB disconnect, device number 4 [ 567.817941][ T9470] netlink: 46 bytes leftover after parsing attributes in process `syz.9.804'. [ 568.054002][ T6748] hsr_slave_0: left promiscuous mode [ 568.086419][ T6748] hsr_slave_1: left promiscuous mode [ 568.102811][ T6748] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 568.134408][ T6748] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 568.163846][ T6748] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 568.202274][ T6748] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 568.236807][ T6748] veth1_macvtap: left promiscuous mode [ 568.242468][ T6748] veth0_macvtap: left promiscuous mode [ 568.252686][ T6748] veth1_vlan: left promiscuous mode [ 568.272045][ T6748] veth0_vlan: left promiscuous mode [ 568.576592][ T6748] pimreg (unregistering): left allmulticast mode [ 569.481466][ T6748] team0 (unregistering): Port device team_slave_1 removed [ 569.572812][ T6748] team0 (unregistering): Port device team_slave_0 removed [ 570.700418][ T9513] x_tables: ip_tables: TPROXY target: used from hooks FORWARD, but only usable from PREROUTING [ 572.134168][ T9335] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 572.158923][ T9335] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 572.186841][ T9335] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 572.233563][ T9335] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 573.346276][ T9335] 8021q: adding VLAN 0 to HW filter on device bond0 [ 573.392977][ T9335] 8021q: adding VLAN 0 to HW filter on device team0 [ 573.465549][ T5992] bridge0: port 1(bridge_slave_0) entered blocking state [ 573.472721][ T5992] bridge0: port 1(bridge_slave_0) entered forwarding state [ 573.509686][ T5992] bridge0: port 2(bridge_slave_1) entered blocking state [ 573.516906][ T5992] bridge0: port 2(bridge_slave_1) entered forwarding state [ 573.879661][ T9569] netdevsim netdevsim8 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 574.295129][ T9569] netdevsim netdevsim8 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 574.441389][ T9583] pimreg: entered allmulticast mode [ 574.587283][ T9335] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 574.986306][ T5154] Bluetooth: hci0: command 0x0406 tx timeout [ 575.011735][ T9335] veth0_vlan: entered promiscuous mode [ 575.028797][ T9335] veth1_vlan: entered promiscuous mode [ 575.152496][ T9569] netdevsim netdevsim8 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 575.257368][ T9335] veth0_macvtap: entered promiscuous mode [ 575.490068][ T9569] netdevsim netdevsim8 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 575.967199][ T9335] veth1_macvtap: entered promiscuous mode [ 576.431131][ T9335] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 577.032474][ T9335] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 577.558952][ T9335] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 577.672022][ T9335] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 577.788388][ T9335] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 577.900921][ T9335] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 579.758310][ T9569] netdevsim netdevsim8 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 580.001225][ T9569] netdevsim netdevsim8 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 580.105846][ T9569] netdevsim netdevsim8 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 580.225053][ T9569] netdevsim netdevsim8 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 580.348125][ T6748] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 580.363884][ T6748] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 580.447346][ T6748] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 580.476255][ T6748] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 582.706007][ T9675] lo speed is unknown, defaulting to 1000 [ 584.053868][ T9692] netlink: 4 bytes leftover after parsing attributes in process `syz.0.851'. [ 584.055494][ T9671] rdma_rxe: rxe_newlink: failed to add lo [ 584.369540][ T5836] usb 3-1: new high-speed USB device number 10 using dummy_hcd [ 584.548773][ T5836] usb 3-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 584.598613][ T5836] usb 3-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 584.629740][ T5836] usb 3-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 584.690519][ T5836] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 584.744629][ T9684] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 584.809394][ T5836] usb 3-1: Quirk or no altset; falling back to MIDI 1.0 [ 585.101381][ T9705] x_tables: ip_tables: TPROXY target: used from hooks FORWARD, but only usable from PREROUTING [ 585.752060][ T5836] usb 3-1: USB disconnect, device number 10 [ 586.919018][ T9717] loop8: detected capacity change from 0 to 512 [ 587.400436][ T9717] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000d40000 r/w without journal. Quota mode: writeback. [ 587.466816][ T9717] ext4 filesystem being mounted at /76/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 587.522259][ T9725] pimreg: entered allmulticast mode [ 588.487112][ T9745] netlink: 46 bytes leftover after parsing attributes in process `syz.2.860'. [ 590.310049][ T9747] netlink: 4 bytes leftover after parsing attributes in process `syz.6.863'. [ 590.927578][ T9760] netdevsim netdevsim9 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 591.251793][ T8189] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000d40000. [ 591.996449][ T9760] netdevsim netdevsim9 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 592.891570][ T9793] rdma_rxe: rxe_newlink: failed to add lo [ 592.907615][ T9760] netdevsim netdevsim9 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 593.061797][ T5880] IPVS: starting estimator thread 0... [ 593.152999][ T9760] netdevsim netdevsim9 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 593.176467][ T9805] IPVS: using max 30 ests per chain, 72000 per kthread [ 593.184279][ T5956] usb 9-1: new high-speed USB device number 3 using dummy_hcd [ 593.278765][ T9807] netlink: 4 bytes leftover after parsing attributes in process `syz.0.878'. [ 594.099663][ T9760] netdevsim netdevsim9 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 594.137176][ T5956] usb 9-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 594.154022][ T5956] usb 9-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 594.170864][ T9760] netdevsim netdevsim9 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 594.179208][ T5956] usb 9-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 594.194013][ T5956] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 594.210375][ T9760] netdevsim netdevsim9 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 594.234236][ T9798] raw-gadget.0 gadget.8: fail, usb_ep_enable returned -22 [ 594.248833][ T5956] usb 9-1: Quirk or no altset; falling back to MIDI 1.0 [ 594.288411][ T9760] netdevsim netdevsim9 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 594.640498][ T5956] usb 9-1: USB disconnect, device number 3 [ 594.743599][ T9841] Cannot find add_set index 0 as target [ 595.881267][ T9848] x_tables: ip_tables: osf match: only valid for protocol 6 [ 596.233855][ T9863] netlink: 40 bytes leftover after parsing attributes in process `syz.0.889'. [ 596.242996][ T9863] netlink: 40 bytes leftover after parsing attributes in process `syz.0.889'. [ 596.254742][ T9863] A link change request failed with some changes committed already. Interface ip6gre0 may have been left with an inconsistent configuration, please check. [ 596.348230][ T9862] netlink: 4 bytes leftover after parsing attributes in process `syz.9.891'. [ 597.012926][ T9872] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 597.831158][ T9900] loop0: detected capacity change from 0 to 512 [ 598.633802][ T9900] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 598.915884][ T9900] EXT4-fs (loop0): 1 truncate cleaned up [ 598.923115][ T9900] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 599.890149][ T9911] netlink: 40 bytes leftover after parsing attributes in process `syz.8.904'. [ 599.900714][ T9911] netlink: 40 bytes leftover after parsing attributes in process `syz.8.904'. [ 599.913363][ T9911] A link change request failed with some changes committed already. Interface ip6gre0 may have been left with an inconsistent configuration, please check. [ 600.769650][ T9915] netlink: 4 bytes leftover after parsing attributes in process `syz.6.908'. [ 600.929070][ T9335] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 602.172900][ T9961] loop8: detected capacity change from 0 to 256 [ 602.229516][ T9961] FAT-fs (loop8): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 602.428906][ T9956] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 602.624731][ T9972] x_tables: ip_tables: osf match: only valid for protocol 6 [ 602.688546][ T9956] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 602.823512][ T9956] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 603.110773][ T9956] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 603.258517][ T9985] netdevsim netdevsim9 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 603.409096][ T9956] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 603.435279][ T9985] netdevsim netdevsim9 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 603.492250][ T9956] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 603.506892][ T9985] netdevsim netdevsim9 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 603.563527][ T9956] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 603.612946][ T9956] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 603.638984][ T9985] netdevsim netdevsim9 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 603.823511][ T9985] netdevsim netdevsim9 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 603.930357][ T9985] netdevsim netdevsim9 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 604.035939][ T9985] netdevsim netdevsim9 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 604.133361][ T9985] netdevsim netdevsim9 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 604.927820][T10019] loop8: detected capacity change from 0 to 512 [ 604.940800][T10019] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 604.991906][T10019] EXT4-fs (loop8): orphan cleanup on readonly fs [ 605.006156][T10019] EXT4-fs error (device loop8): ext4_validate_block_bitmap:441: comm syz.8.934: bg 0: block 248: padding at end of block bitmap is not set [ 605.027527][T10019] Quota error (device loop8): write_blk: dquota write failed [ 605.035555][T10019] Quota error (device loop8): qtree_write_dquot: Error -117 occurred while creating quota [ 605.046176][T10019] EXT4-fs error (device loop8): ext4_acquire_dquot:6933: comm syz.8.934: Failed to acquire dquot type 1 [ 605.090032][T10019] EXT4-fs (loop8): 1 truncate cleaned up [ 605.130111][T10019] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 606.130027][T10019] syz.8.934 (10019) used greatest stack depth: 19688 bytes left [ 606.415408][T10033] loop9: detected capacity change from 0 to 256 [ 606.471675][T10033] FAT-fs (loop9): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 607.472581][ T8189] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 607.509849][T10037] netdevsim netdevsim6 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 607.831766][T10037] netdevsim netdevsim6 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 608.033829][T10062] loop0: detected capacity change from 0 to 512 [ 608.118642][T10062] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 608.151783][T10062] EXT4-fs (loop0): orphan cleanup on readonly fs [ 608.167500][T10062] EXT4-fs error (device loop0): ext4_validate_block_bitmap:441: comm syz.0.943: bg 0: block 248: padding at end of block bitmap is not set [ 608.192883][T10062] Quota error (device loop0): write_blk: dquota write failed [ 608.200813][T10062] Quota error (device loop0): qtree_write_dquot: Error -117 occurred while creating quota [ 608.210930][T10062] EXT4-fs error (device loop0): ext4_acquire_dquot:6933: comm syz.0.943: Failed to acquire dquot type 1 [ 608.277715][T10062] EXT4-fs (loop0): 1 truncate cleaned up [ 608.317979][T10062] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 609.926032][T10037] netdevsim netdevsim6 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 610.265904][T10037] netdevsim netdevsim6 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 610.655880][ T9335] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 611.353216][T10037] netdevsim netdevsim6 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 611.474318][T10037] netdevsim netdevsim6 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 611.537016][T10037] netdevsim netdevsim6 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 612.610342][T10098] loop0: detected capacity change from 0 to 512 [ 612.729877][T10037] netdevsim netdevsim6 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 612.759346][T10098] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 612.942103][T10098] EXT4-fs (loop0): 1 truncate cleaned up [ 612.949832][T10098] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 613.498217][T10106] loop9: detected capacity change from 0 to 256 [ 613.543651][T10106] FAT-fs (loop9): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 614.849359][ T9335] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 615.135401][T10134] netlink: 4 bytes leftover after parsing attributes in process `syz.8.962'. [ 616.365659][T10154] netdevsim netdevsim0 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 616.474401][T10156] loop8: detected capacity change from 0 to 512 [ 616.493351][T10156] EXT4-fs (loop8): encrypted files will use data=ordered instead of data journaling mode [ 616.540434][T10156] EXT4-fs (loop8): 1 truncate cleaned up [ 616.607518][T10156] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 617.316861][T10164] loop9: detected capacity change from 0 to 256 [ 617.367089][T10164] FAT-fs (loop9): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 617.408694][T10154] netdevsim netdevsim0 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 617.889144][T10154] netdevsim netdevsim0 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 618.124256][ C0] ------------[ cut here ]------------ [ 618.129941][ C0] WARNING: net/mac80211/tx.c:5024 at __ieee80211_beacon_get+0x125d/0x1630, CPU#0: syz.8.965/10155 [ 618.140641][ C0] Modules linked in: [ 618.144789][ C0] CPU: 0 UID: 0 PID: 10155 Comm: syz.8.965 Not tainted 6.16.0-rc2-next-20250616-syzkaller #0 PREEMPT(full) [ 618.156383][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 618.166493][ C0] RIP: 0010:__ieee80211_beacon_get+0x125d/0x1630 [ 618.172861][ C0] Code: e7 e8 27 f2 2f f7 45 31 f6 4c 8b bc 24 a0 00 00 00 e9 78 fe ff ff e8 92 bf d6 f6 90 0f 0b 90 e9 e0 f7 ff ff e8 84 bf d6 f6 90 <0f> 0b 90 e9 38 fb ff ff e8 76 bf d6 f6 48 c7 c7 a0 5c 79 8f 4c 89 [ 618.192539][ C0] RSP: 0018:ffffc900000079f8 EFLAGS: 00010246 [ 618.198661][ C0] RAX: ffffffff8ae9aaac RBX: ffffffff8ae99886 RCX: ffff88802c419e00 [ 618.206690][ C0] RDX: 0000000000000100 RSI: 0000000000000000 RDI: 0000000000000000 [ 618.214725][ C0] RBP: 0000000000000000 R08: ffff88802c419e00 R09: 0000000000000003 [ 618.222713][ C0] R10: 0000000000000007 R11: 0000000000000100 R12: ffff88805608e500 [ 618.230741][ C0] R13: dffffc0000000000 R14: ffff88805608e9d0 R15: ffff888032bd6424 [ 618.238776][ C0] FS: 00007f5e2131d6c0(0000) GS:ffff888125c40000(0000) knlGS:0000000000000000 [ 618.247787][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 618.254418][ C0] CR2: 0000200000fb4030 CR3: 00000000283e4000 CR4: 00000000003526f0 [ 618.262409][ C0] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 618.270421][ C0] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 618.278438][ C0] Call Trace: [ 618.281764][ C0] [ 618.284656][ C0] ? __ieee80211_beacon_get+0x36/0x1630 [ 618.290240][ C0] ieee80211_beacon_get_tim+0xb4/0x2b0 [ 618.295757][ C0] ? __pfx_ieee80211_beacon_get_tim+0x10/0x10 [ 618.301857][ C0] mac80211_hwsim_beacon_tx+0x3ce/0x860 [ 618.307455][ C0] ? ieee80211_iterate_active_interfaces_atomic+0x2a/0x180 [ 618.314701][ C0] __iterate_interfaces+0x2a8/0x590 [ 618.319928][ C0] ? __pfx_mac80211_hwsim_beacon_tx+0x10/0x10 [ 618.326041][ C0] ? ieee80211_iterate_active_interfaces_atomic+0x2a/0x180 [ 618.333271][ C0] ? __pfx_mac80211_hwsim_beacon_tx+0x10/0x10 [ 618.339408][ C0] ieee80211_iterate_active_interfaces_atomic+0xdb/0x180 [ 618.346516][ C0] mac80211_hwsim_beacon+0xbb/0x1c0 [ 618.351775][ C0] ? __pfx_mac80211_hwsim_beacon+0x10/0x10 [ 618.357665][ C0] __hrtimer_run_queues+0x529/0xc60 [ 618.363102][ C0] ? __pfx___hrtimer_run_queues+0x10/0x10 [ 618.368907][ C0] ? read_tsc+0x9/0x20 [ 618.373029][ C0] ? __pfx___local_bh_disable_ip+0x10/0x10 [ 618.378913][ C0] hrtimer_run_softirq+0x187/0x2b0 [ 618.384096][ C0] handle_softirqs+0x283/0x870 [ 618.388905][ C0] ? __irq_exit_rcu+0xca/0x1f0 [ 618.393740][ C0] ? __pfx_handle_softirqs+0x10/0x10 [ 618.399104][ C0] __irq_exit_rcu+0xca/0x1f0 [ 618.403732][ C0] ? __pfx___irq_exit_rcu+0x10/0x10 [ 618.409002][ C0] irq_exit_rcu+0x9/0x30 [ 618.413292][ C0] sysvec_apic_timer_interrupt+0xa6/0xc0 [ 618.418987][ C0] [ 618.421940][ C0] [ 618.424909][ C0] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 618.430909][ C0] RIP: 0010:lock_acquire+0xa9/0x360 [ 618.436164][ C0] Code: b4 24 90 00 00 00 4c 89 ef e8 53 38 86 00 83 3d 0c 4d 03 0e 00 0f 84 fa 00 00 00 65 8b 05 0f 0c 00 11 85 c0 0f 85 eb 00 00 00 <65> 48 8b 04 25 08 00 9e 92 83 b8 ec 0a 00 00 00 0f 85 d5 00 00 00 [ 618.455832][ C0] RSP: 0018:ffffc90002fb7948 EFLAGS: 00000246 [ 618.461931][ C0] RAX: 0000000000000000 RBX: 0000000000000000 RCX: d11fd6f166075800 [ 618.470038][ C0] RDX: 0000000000000000 RSI: ffffffff820cccdc RDI: 1ffff1100fcd5444 [ 618.478060][ C0] RBP: ffffffff820cccc0 R08: 0000000000000001 R09: 0000000000000000 [ 618.486078][ C0] R10: ffffc90002fb7aa0 R11: fffff520005f6f5b R12: 0000000000000001 [ 618.494103][ C0] R13: ffff88807e6aa220 R14: 0000000000000000 R15: 0000000000000001 [ 618.502109][ C0] ? __might_fault+0xb0/0x130 [ 618.506851][ C0] ? __might_fault+0xcc/0x130 [ 618.511560][ C0] ? lock_acquire+0x8d/0x360 [ 618.516253][ C0] ? __might_fault+0xb0/0x130 [ 618.521071][ C0] __might_fault+0xcc/0x130 [ 618.525644][ C0] ? __might_fault+0xb0/0x130 [ 618.530360][ C0] _copy_from_user+0x28/0xb0 [ 618.535024][ C0] ___sys_recvmsg+0x12e/0x510 [ 618.539747][ C0] ? __pfx____sys_recvmsg+0x10/0x10 [ 618.545054][ C0] ? __might_fault+0xb0/0x130 [ 618.549766][ C0] do_recvmmsg+0x307/0x770 [ 618.554538][ C0] ? __pfx_do_recvmmsg+0x10/0x10 [ 618.559517][ C0] ? __pfx_do_futex+0x10/0x10 [ 618.564260][ C0] __x64_sys_recvmmsg+0x190/0x240 [ 618.569315][ C0] ? __pfx___x64_sys_recvmmsg+0x10/0x10 [ 618.574903][ C0] ? rcu_is_watching+0x15/0xb0 [ 618.579697][ C0] ? do_syscall_64+0xbe/0x3b0 [ 618.584437][ C0] do_syscall_64+0xfa/0x3b0 [ 618.588982][ C0] ? lockdep_hardirqs_on+0x9c/0x150 [ 618.594228][ C0] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 618.600308][ C0] ? clear_bhb_loop+0x60/0xb0 [ 618.605030][ C0] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 618.610950][ C0] RIP: 0033:0x7f5e2058e929 [ 618.615414][ C0] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 618.635065][ C0] RSP: 002b:00007f5e2131d038 EFLAGS: 00000246 ORIG_RAX: 000000000000012b [ 618.643498][ C0] RAX: ffffffffffffffda RBX: 00007f5e207b6080 RCX: 00007f5e2058e929 [ 618.651513][ C0] RDX: 03fffffffffffeda RSI: 00002000000000c0 RDI: 0000000000000004 [ 618.659538][ C0] RBP: 00007f5e20610b39 R08: 0000000000000000 R09: 0000000000000000 [ 618.667558][ C0] R10: 0000000000000002 R11: 0000000000000246 R12: 0000000000000000 [ 618.675564][ C0] R13: 0000000000000000 R14: 00007f5e207b6080 R15: 00007ffe95dd0ce8 [ 618.683563][ C0] [ 618.686634][ C0] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 618.693951][ C0] CPU: 0 UID: 0 PID: 10155 Comm: syz.8.965 Not tainted 6.16.0-rc2-next-20250616-syzkaller #0 PREEMPT(full) [ 618.705423][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 618.715514][ C0] Call Trace: [ 618.718805][ C0] [ 618.721669][ C0] dump_stack_lvl+0x99/0x250 [ 618.726297][ C0] ? __asan_memcpy+0x40/0x70 [ 618.730910][ C0] ? __pfx_dump_stack_lvl+0x10/0x10 [ 618.736143][ C0] ? __pfx__printk+0x10/0x10 [ 618.740781][ C0] panic+0x2db/0x790 [ 618.744715][ C0] ? __pfx_panic+0x10/0x10 [ 618.749179][ C0] __warn+0x334/0x4c0 [ 618.753185][ C0] ? __ieee80211_beacon_get+0x125d/0x1630 [ 618.758932][ C0] ? __ieee80211_beacon_get+0x125d/0x1630 [ 618.764674][ C0] report_bug+0x2be/0x4f0 [ 618.769027][ C0] ? __ieee80211_beacon_get+0x125d/0x1630 [ 618.774789][ C0] ? __ieee80211_beacon_get+0x125d/0x1630 [ 618.780537][ C0] ? __ieee80211_beacon_get+0x125f/0x1630 [ 618.786276][ C0] handle_bug+0x84/0x160 [ 618.790547][ C0] exc_invalid_op+0x1a/0x50 [ 618.795081][ C0] asm_exc_invalid_op+0x1a/0x20 [ 618.799945][ C0] RIP: 0010:__ieee80211_beacon_get+0x125d/0x1630 [ 618.806292][ C0] Code: e7 e8 27 f2 2f f7 45 31 f6 4c 8b bc 24 a0 00 00 00 e9 78 fe ff ff e8 92 bf d6 f6 90 0f 0b 90 e9 e0 f7 ff ff e8 84 bf d6 f6 90 <0f> 0b 90 e9 38 fb ff ff e8 76 bf d6 f6 48 c7 c7 a0 5c 79 8f 4c 89 [ 618.825918][ C0] RSP: 0018:ffffc900000079f8 EFLAGS: 00010246 [ 618.832010][ C0] RAX: ffffffff8ae9aaac RBX: ffffffff8ae99886 RCX: ffff88802c419e00 [ 618.839998][ C0] RDX: 0000000000000100 RSI: 0000000000000000 RDI: 0000000000000000 [ 618.847983][ C0] RBP: 0000000000000000 R08: ffff88802c419e00 R09: 0000000000000003 [ 618.855973][ C0] R10: 0000000000000007 R11: 0000000000000100 R12: ffff88805608e500 [ 618.863971][ C0] R13: dffffc0000000000 R14: ffff88805608e9d0 R15: ffff888032bd6424 [ 618.871964][ C0] ? __ieee80211_beacon_get+0x36/0x1630 [ 618.877532][ C0] ? __ieee80211_beacon_get+0x125c/0x1630 [ 618.883276][ C0] ? __ieee80211_beacon_get+0x125c/0x1630 [ 618.889012][ C0] ? __ieee80211_beacon_get+0x36/0x1630 [ 618.894585][ C0] ieee80211_beacon_get_tim+0xb4/0x2b0 [ 618.900084][ C0] ? __pfx_ieee80211_beacon_get_tim+0x10/0x10 [ 618.906194][ C0] mac80211_hwsim_beacon_tx+0x3ce/0x860 [ 618.911768][ C0] ? ieee80211_iterate_active_interfaces_atomic+0x2a/0x180 [ 618.918985][ C0] __iterate_interfaces+0x2a8/0x590 [ 618.924200][ C0] ? __pfx_mac80211_hwsim_beacon_tx+0x10/0x10 [ 618.930305][ C0] ? ieee80211_iterate_active_interfaces_atomic+0x2a/0x180 [ 618.937521][ C0] ? __pfx_mac80211_hwsim_beacon_tx+0x10/0x10 [ 618.943607][ C0] ieee80211_iterate_active_interfaces_atomic+0xdb/0x180 [ 618.950657][ C0] mac80211_hwsim_beacon+0xbb/0x1c0 [ 618.955890][ C0] ? __pfx_mac80211_hwsim_beacon+0x10/0x10 [ 618.961721][ C0] __hrtimer_run_queues+0x529/0xc60 [ 618.966973][ C0] ? __pfx___hrtimer_run_queues+0x10/0x10 [ 618.972724][ C0] ? read_tsc+0x9/0x20 [ 618.976825][ C0] ? __pfx___local_bh_disable_ip+0x10/0x10 [ 618.982667][ C0] hrtimer_run_softirq+0x187/0x2b0 [ 618.987806][ C0] handle_softirqs+0x283/0x870 [ 618.992602][ C0] ? __irq_exit_rcu+0xca/0x1f0 [ 618.997400][ C0] ? __pfx_handle_softirqs+0x10/0x10 [ 619.002726][ C0] __irq_exit_rcu+0xca/0x1f0 [ 619.007371][ C0] ? __pfx___irq_exit_rcu+0x10/0x10 [ 619.012624][ C0] irq_exit_rcu+0x9/0x30 [ 619.016897][ C0] sysvec_apic_timer_interrupt+0xa6/0xc0 [ 619.022550][ C0] [ 619.025494][ C0] [ 619.028443][ C0] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 619.034445][ C0] RIP: 0010:lock_acquire+0xa9/0x360 [ 619.039664][ C0] Code: b4 24 90 00 00 00 4c 89 ef e8 53 38 86 00 83 3d 0c 4d 03 0e 00 0f 84 fa 00 00 00 65 8b 05 0f 0c 00 11 85 c0 0f 85 eb 00 00 00 <65> 48 8b 04 25 08 00 9e 92 83 b8 ec 0a 00 00 00 0f 85 d5 00 00 00 [ 619.059298][ C0] RSP: 0018:ffffc90002fb7948 EFLAGS: 00000246 [ 619.065386][ C0] RAX: 0000000000000000 RBX: 0000000000000000 RCX: d11fd6f166075800 [ 619.073370][ C0] RDX: 0000000000000000 RSI: ffffffff820cccdc RDI: 1ffff1100fcd5444 [ 619.081352][ C0] RBP: ffffffff820cccc0 R08: 0000000000000001 R09: 0000000000000000 [ 619.089336][ C0] R10: ffffc90002fb7aa0 R11: fffff520005f6f5b R12: 0000000000000001 [ 619.097322][ C0] R13: ffff88807e6aa220 R14: 0000000000000000 R15: 0000000000000001 [ 619.105313][ C0] ? __might_fault+0xb0/0x130 [ 619.110015][ C0] ? __might_fault+0xcc/0x130 [ 619.114710][ C0] ? lock_acquire+0x8d/0x360 [ 619.119330][ C0] ? __might_fault+0xb0/0x130 [ 619.124029][ C0] __might_fault+0xcc/0x130 [ 619.128545][ C0] ? __might_fault+0xb0/0x130 [ 619.133237][ C0] _copy_from_user+0x28/0xb0 [ 619.137846][ C0] ___sys_recvmsg+0x12e/0x510 [ 619.142548][ C0] ? __pfx____sys_recvmsg+0x10/0x10 [ 619.147826][ C0] ? __might_fault+0xb0/0x130 [ 619.152531][ C0] do_recvmmsg+0x307/0x770 [ 619.156991][ C0] ? __pfx_do_recvmmsg+0x10/0x10 [ 619.161963][ C0] ? __pfx_do_futex+0x10/0x10 [ 619.166681][ C0] __x64_sys_recvmmsg+0x190/0x240 [ 619.171730][ C0] ? __pfx___x64_sys_recvmmsg+0x10/0x10 [ 619.177294][ C0] ? rcu_is_watching+0x15/0xb0 [ 619.182111][ C0] ? do_syscall_64+0xbe/0x3b0 [ 619.186833][ C0] do_syscall_64+0xfa/0x3b0 [ 619.191362][ C0] ? lockdep_hardirqs_on+0x9c/0x150 [ 619.196584][ C0] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 619.202678][ C0] ? clear_bhb_loop+0x60/0xb0 [ 619.207383][ C0] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 619.213295][ C0] RIP: 0033:0x7f5e2058e929 [ 619.217733][ C0] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 619.237355][ C0] RSP: 002b:00007f5e2131d038 EFLAGS: 00000246 ORIG_RAX: 000000000000012b [ 619.245797][ C0] RAX: ffffffffffffffda RBX: 00007f5e207b6080 RCX: 00007f5e2058e929 [ 619.253797][ C0] RDX: 03fffffffffffeda RSI: 00002000000000c0 RDI: 0000000000000004 [ 619.261782][ C0] RBP: 00007f5e20610b39 R08: 0000000000000000 R09: 0000000000000000 [ 619.269773][ C0] R10: 0000000000000002 R11: 0000000000000246 R12: 0000000000000000 [ 619.277759][ C0] R13: 0000000000000000 R14: 00007f5e207b6080 R15: 00007ffe95dd0ce8 [ 619.285759][ C0] [ 619.289169][ C0] Kernel Offset: disabled [ 619.293502][ C0] Rebooting in 86400 seconds..