last executing test programs: 4m50.648388758s ago: executing program 1 (id=33): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_CIPSOV4_C_ADD(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000001c0)=ANY=[], 0x40}, 0x1, 0x0, 0x0, 0xc082}, 0x20004080) mkdirat(0xffffffffffffff9c, 0x0, 0x1ff) socket$netlink(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) syz_emit_vhci(&(0x7f0000000500)=ANY=[@ANYBLOB="04230d00c8"], 0x10) connect$unix(0xffffffffffffffff, &(0x7f0000000540)=@abs, 0x6e) recvmmsg(0xffffffffffffffff, &(0x7f00000005c0), 0x10106, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000600)={0x38, 0x5, 0x8, 0x0, 0x0, 0x9, 0xffffff7fffffffff, 0xfffffdfffffffffd, 0xffffffc0, 0xffffffff}, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000640)='net/ip6_tables_targets\x00') preadv(r1, &(0x7f0000000680)=[{&(0x7f00000006c0)=""/4112, 0x1010}], 0x1, 0x4000, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x19) write$binfmt_aout(r1, &(0x7f0000001700)=ANY=[], 0x685) io_uring_setup(0x3454, 0x0) 4m49.55679897s ago: executing program 1 (id=37): socket$inet6(0xa, 0x1, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x2, 0x0) msgctl$MSG_INFO(0x0, 0xc, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000040)=0x7) r1 = getpid() sched_setscheduler(r1, 0x1, &(0x7f0000000080)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000100)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000180), 0x651, 0x0) recvmmsg(r2, &(0x7f00000001c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x6) r4 = syz_genetlink_get_family_id$batadv(&(0x7f00000009c0), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000a00)={'batadv0\x00', 0x0}) sendmsg$BATADV_CMD_SET_MESH(r0, &(0x7f0000000a80)={0x0, 0x0, &(0x7f0000000ac0)={&(0x7f0000000b00)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="010028bd7040010000000f00000005002e000000000008000300", @ANYRES32=r5, @ANYBLOB="05002f"], 0x2c}}, 0x18) 4m48.583612371s ago: executing program 1 (id=39): syz_open_dev$vbi(&(0x7f0000000000), 0x0, 0x2) landlock_create_ruleset(0x0, 0x0, 0x0) openat$ttyS3(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) syz_open_procfs$namespace(0x0, &(0x7f0000000180)='ns/pid_for_children\x00') socket$inet_sctp(0x2, 0x5, 0x84) userfaultfd(0x801) userfaultfd(0x801) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000006c0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r1, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x4004000) recvmsg$unix(r0, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000080), 0x100}, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)) r2 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r2) readv(0xffffffffffffffff, &(0x7f0000000200)=[{&(0x7f0000000100)=""/35, 0x23}], 0x1) ptrace$setregs(0xd, r2, 0x2, &(0x7f0000000180)) ptrace$cont(0x21, r2, 0x5, 0x4) 4m47.726430399s ago: executing program 1 (id=42): r0 = socket$inet(0xa, 0x801, 0x84) r1 = socket$inet(0xa, 0x801, 0x84) connect$inet(r1, &(0x7f0000004cc0)={0x2, 0x2, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) listen(r1, 0xfffffffd) listen(r0, 0x8) r2 = socket$inet(0xa, 0x801, 0x84) listen(r2, 0x8) r3 = socket$inet(0xa, 0x801, 0x84) listen(r3, 0x8) r4 = socket$inet6(0xa, 0x1, 0x8010000000000084) listen(r4, 0x7) accept4(r1, 0x0, 0x0, 0x800) r5 = socket$netlink(0x10, 0x3, 0x4) syz_genetlink_get_family_id$nl80211(&(0x7f0000000300), r5) writev(r5, &(0x7f0000000000)=[{&(0x7f0000000140)="480000001400190d09004beafd0d8c560a84476080ffe00600000000590000a2bc5603ca00000f7f89000000200000000101ff0000000309ff5bffff00c7e5ed5e00000000000000", 0x40b}], 0x1) 4m46.875066316s ago: executing program 1 (id=44): syncfs(0xffffffffffffffff) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000040)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f0000000080)=0x2) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f00000000c0)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000240)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000002c0), 0x318, 0x0) recvmmsg(r1, &(0x7f0000000300), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000340)=0x2) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x15) mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./proc_mnt\x00', 0x1ff) mount(0x0, &(0x7f0000000180)='./proc_mnt\x00', &(0x7f00000001c0)='proc\x00', 0x0, 0x0) mount$bind(&(0x7f0000000480)='./proc_mnt/sys/net/ipv4/conf/lo/forwarding\x00', &(0x7f00000004c0)='./proc_mnt/sys/net/ipv4/conf/lo/forwarding\x00', 0x0, 0x221490, 0x0) 4m45.450501553s ago: executing program 1 (id=47): mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000003c80)=ANY=[@ANYBLOB="020000000400000006000000aa0b"], 0x48) close(0xffffffffffffffff) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(0xffffffffffffffff, 0xc02064b2, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, &(0x7f0000000180)={@loopback={0x200000000000000}, 0x800, 0x0, 0x3, 0x1}, 0x20) r0 = socket$inet_udp(0x2, 0x2, 0x0) execve(&(0x7f00000004c0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f0000000700)={[&(0x7f00000006c0)='&.\x00']}, &(0x7f0000000800)={[&(0x7f0000000740)='\x00', &(0x7f0000000780)='{+\x00', &(0x7f00000007c0)=':]#].\'.:&++(#>{\x00']}) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=@newlink={0x30, 0x10, 0x801, 0x0, 0x25dfdbfb, {}, [@IFLA_MASTER={0x8}, @IFLA_GROUP={0x8}]}, 0x30}}, 0x4) bind$inet(r0, &(0x7f0000000200)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x17}}, 0x10) connect$inet(r0, &(0x7f0000000480)={0x2, 0x0, @multicast2}, 0x10) sendmmsg(r0, &(0x7f0000007fc0), 0x800001d, 0x0) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0) r2 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000100)='net/ip6_flowlabel\x00') read$FUSE(r2, &(0x7f0000001080)={0x2020}, 0x38) 4m30.401114151s ago: executing program 32 (id=47): mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000003c80)=ANY=[@ANYBLOB="020000000400000006000000aa0b"], 0x48) close(0xffffffffffffffff) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(0xffffffffffffffff, 0xc02064b2, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, &(0x7f0000000180)={@loopback={0x200000000000000}, 0x800, 0x0, 0x3, 0x1}, 0x20) r0 = socket$inet_udp(0x2, 0x2, 0x0) execve(&(0x7f00000004c0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f0000000700)={[&(0x7f00000006c0)='&.\x00']}, &(0x7f0000000800)={[&(0x7f0000000740)='\x00', &(0x7f0000000780)='{+\x00', &(0x7f00000007c0)=':]#].\'.:&++(#>{\x00']}) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=@newlink={0x30, 0x10, 0x801, 0x0, 0x25dfdbfb, {}, [@IFLA_MASTER={0x8}, @IFLA_GROUP={0x8}]}, 0x30}}, 0x4) bind$inet(r0, &(0x7f0000000200)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x17}}, 0x10) connect$inet(r0, &(0x7f0000000480)={0x2, 0x0, @multicast2}, 0x10) sendmmsg(r0, &(0x7f0000007fc0), 0x800001d, 0x0) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0) r2 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000100)='net/ip6_flowlabel\x00') read$FUSE(r2, &(0x7f0000001080)={0x2020}, 0x38) 48.035476118s ago: executing program 2 (id=453): sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x20020084, 0x0, 0x0) getsockopt$inet_pktinfo(0xffffffffffffffff, 0x0, 0x8, 0x0, &(0x7f0000000040)) syz_mount_image$ext4(&(0x7f00000000c0)='ext3\x00', &(0x7f0000000100)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x8002, &(0x7f0000000200)={[{@journal_dev={'journal_dev', 0x3d, 0x3}}, {@inode_readahead_blks={'inode_readahead_blks', 0x3d, 0x8000000}}, {@quota}, {@noload}, {@user_xattr}, {@mblk_io_submit}, {@noinit_itable}, {@init_itable}, {@max_dir_size_kb={'max_dir_size_kb', 0x3d, 0x9}}, {@init_itable_val={'init_itable', 0x3d, 0xfff}}]}, 0xfa, 0x47f, &(0x7f0000000300)="$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") mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0xa, 0x204031, 0xffffffffffffffff, 0xc974d000) r0 = userfaultfd(0x801) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f00000008c0)) ioctl$BTRFS_IOC_BALANCE_PROGRESS(r0, 0x84009422, 0x0) prlimit64(0x0, 0xe, &(0x7f0000001240)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000001280)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f00000012c0)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001300)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000001340)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000013c0), 0x6b4, 0x0) recvmmsg(r2, &(0x7f0000001400), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000001440)=0x6) add_key$user(0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd) sendmsg$unix(0xffffffffffffffff, 0x0, 0x4000001) ioctl$BTRFS_IOC_SCRUB_PROGRESS(r0, 0xc400941d, 0x0) syz_mount_image$vfat(&(0x7f0000000780), &(0x7f00000007c0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x181d011, 0x0, 0x40, 0x0, &(0x7f00000008c0)) openat(0xffffffffffffff9c, &(0x7f0000000a40)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x101341, 0xaf) symlinkat(&(0x7f0000000b40)='./file0\x00', 0xffffffffffffff9c, &(0x7f0000000b80)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') syz_mount_image$vfat(&(0x7f0000000d00), &(0x7f0000000d40)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x824050, 0x0, 0x1, 0x0, &(0x7f0000000e40)) 46.205999656s ago: executing program 2 (id=457): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000100)=0x59) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000000)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) sched_setaffinity(r2, 0x0, 0x0) ptrace$ARCH_GET_CPUID(0x1e, r0, 0x0, 0x1011) socketpair$unix(0x1, 0x2, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0) r4 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000040)={'syz_tun\x00', 0x0}) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000440)={0xffffffffffffffff, r5, 0x25, 0x2, @void}, 0x10) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x1000003, 0x20000000ec072, 0xffffffffffffffff, 0x0) r6 = syz_clone(0x4084111, 0x0, 0x1d, 0x0, 0x0, 0x0) ptrace$setsig(0x4203, r6, 0x1, 0x0) 44.244830508s ago: executing program 2 (id=459): setns(0xc9, 0x0) r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x40, &(0x7f0000000200)=@raw={'raw\x00', 0x8, 0x3, 0x218, 0x310, 0x11, 0x148, 0x310, 0x0, 0x410, 0x2a8, 0x2a8, 0x410, 0x2a8, 0x3, 0x0, {[{{@uncond, 0x0, 0x98, 0xe0, 0x0, {}, [@common=@inet=@tos={{0x28}, {0x0, 0x8, 0x1}}]}, @unspec=@CT0={0x48}}, {{@ip={@multicast2, @empty, 0x0, 0x0, 'nr0\x00', 'netdevsim0\x00', {}, {}, 0x0, 0x0, 0x44}, 0x0, 0x70, 0xa0}, @common=@unspec=@CONNMARK={0x30}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x278) openat$ttynull(0xffffffffffffff9c, &(0x7f0000000000), 0x200, 0x0) r1 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0xe) ioctl$KVM_CAP_VM_TYPES(r1, 0x4068aea3, &(0x7f0000000040)={0xeb, 0x0, 0x6}) r2 = socket(0x8, 0x2, 0x0) r3 = socket$unix(0x1, 0x5, 0x0) r4 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000780), 0x42202) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r4, 0x4040534e, &(0x7f00000007c0)={0x257, @time={0x65757100, 0x5}, 0x0, {}, 0x67, 0x2}) ioctl$SW_SYNC_IOC_CREATE_FENCE(0xffffffffffffffff, 0xc0285700, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000840), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f0000000880)={'wlan0\x00', 0x0}) r8 = socket$inet(0x2, 0x2, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r8, 0x8914, &(0x7f00000008c0)={'wlan0\x00'}) sendmsg$NL80211_CMD_SET_INTERFACE(r5, &(0x7f0000000900)={0x0, 0x0, &(0x7f0000000940)={&(0x7f0000000980)={0x24, r6, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r7}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x6}]}, 0x24}}, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r8, 0x8914, &(0x7f00000009c0)={'wlan0\x00', 0x1}) openat$ptmx(0xffffffffffffff9c, 0x0, 0x41, 0x0) sendmsg$NL80211_CMD_DEL_INTERFACE(r5, &(0x7f0000000a00)={0x0, 0x0, &(0x7f0000000a40)={&(0x7f0000000a80)={0x1c, r6, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r7}, @void}}}, 0x1c}}, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'veth0_macvtap\x00'}) socket$kcm(0x1e, 0x1, 0x0) sendmsg$nl_generic(r2, &(0x7f0000002300)={0x0, 0x0, &(0x7f0000002340)={&(0x7f00000023c0)={0x20, 0x3a, 0x1, 0x7fffa, 0x4, {0x1}, [@typed={0xc, 0xec, 0x0, 0x0, @u64=0x6}, @generic]}, 0x20}, 0x1, 0x0, 0x0, 0x400c801}, 0x4008094) 37.053511967s ago: executing program 2 (id=471): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) sendmsg$inet(0xffffffffffffffff, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x4004000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r4, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) recvmsg$unix(r3, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000040)=[@rights={{0x10}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @rights={{0x10}}], 0x38}, 0x80) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x3, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]}) r5 = socket$alg(0x26, 0x5, 0x0) bind$alg(r5, &(0x7f0000000080)={0x26, 'hash\x00', 0x0, 0x0, 'sha384\x00'}, 0x58) accept(r5, 0x0, 0x0) mmap$IORING_OFF_SQ_RING(0x0, 0xc00000, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x0, 0x0, 0x0) syz_ublk_add_dev(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x2e, 0x0, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f0000000440)=@new_dev={0x4, 0x3c9, 0x0, 0x0, 0x1000, 0xffffffff, 0x0, 0x0, 0x40}}}, &(0x7f0000000300)=0x0) r7 = socket$inet6_tcp(0xa, 0x1, 0x0) r8 = dup(r7) syz_ublk_setup_queues(r8, r6, 0x0, &(0x7f0000000a80)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0xe704, 0x800, 0x1000002, 0x91}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x5c87, 0x20, 0x3, 0x3aa}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x1f70, 0x2, 0x40040001, 0x334}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x4, 0x200, 0x2, 0xffffffff}}], 0x1, 0x0, 0x0) 35.451943992s ago: executing program 2 (id=473): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) prlimit64(0x0, 0xe, &(0x7f00000000c0)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000100)=0x7) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000140)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x1, r0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000180)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xd6d1c000) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000006200)=""/102392, 0x18ff8) sched_setaffinity(r2, 0x47, &(0x7f000001f200)=0x7) bpf$PROG_LOAD(0x5, 0x0, 0x0) mount(0x0, 0x0, &(0x7f000001f2c0)='nfsd\x00', 0x0, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f000001f300)='./nfsd/nfsv4leasetime\x00', 0x1, 0x0) write$binfmt_aout(r4, 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x4000000) r5 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x2, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x1000485, &(0x7f0000002140)={{'fd', 0x3d, r5}, 0x2c, {'rootmode', 0x3d, 0x4000}}) read$FUSE(r5, &(0x7f00000021c0)={0x2020, 0x0, 0x0}, 0x2020) r7 = openat(0xffffffffffffff9c, &(0x7f00000013c0)='./file0/file0\x00', 0x42, 0x0) write$FUSE_INIT(r5, &(0x7f0000001dc0)={0x50, 0x0, r6, {0x7, 0x2b, 0x0, 0x44448000, 0x6}}, 0x50) accept4$unix(r7, 0x0, &(0x7f0000000000), 0x0) 34.373733833s ago: executing program 2 (id=476): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) clock_adjtime(0x0, &(0x7f0000000300)={0x8b8d, 0x3, 0x4, 0x0, 0x8, 0x7000000000, 0x4, 0xfffffffffffffffd, 0x1, 0xffffffffffffffff, 0xf423f, 0x3f420f8000000000, 0x80000001, 0x1, 0x4, 0x0, 0x5, 0x401, 0x0, 0x0, 0x1, 0x4, 0xacb, 0x3, 0x6}) r3 = bpf$LINK_GET_FD_BY_ID(0x1e, &(0x7f00000000c0), 0x4) bpf$ITER_CREATE(0x21, &(0x7f0000000100)={r3}, 0x8) 19.218700212s ago: executing program 33 (id=476): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) clock_adjtime(0x0, &(0x7f0000000300)={0x8b8d, 0x3, 0x4, 0x0, 0x8, 0x7000000000, 0x4, 0xfffffffffffffffd, 0x1, 0xffffffffffffffff, 0xf423f, 0x3f420f8000000000, 0x80000001, 0x1, 0x4, 0x0, 0x5, 0x401, 0x0, 0x0, 0x1, 0x4, 0xacb, 0x3, 0x6}) r3 = bpf$LINK_GET_FD_BY_ID(0x1e, &(0x7f00000000c0), 0x4) bpf$ITER_CREATE(0x21, &(0x7f0000000100)={r3}, 0x8) 11.782207847s ago: executing program 0 (id=507): r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x101042, 0x15) mkdirat(0xffffffffffffff9c, &(0x7f00000002c0)='./dev\x00', 0x1ff) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x10, 0x4, &(0x7f00000003c0)=ANY=[@ANYBLOB="b4000000080400007910480000000000630004ff0000000095000000000000"], 0x0, 0x4, 0xc3, &(0x7f00000004c0)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg, 0xffffffffffffffff, 0x8, &(0x7f00000005c0), 0x8, 0x10, &(0x7f0000000600), 0x10}, 0x94) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, 0x0) syz_open_procfs(0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) mount(0x0, &(0x7f0000001500)='./dev\x00', &(0x7f0000001600)='devtmpfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./mnt\x00', 0x0) mount(&(0x7f00000000c0)=@filename='./dev/sda1\x00', &(0x7f0000000140)='./mnt\x00', &(0x7f00000001c0)='ext4\x00', 0x8410, 0x0) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) chdir(&(0x7f0000000140)='./file0\x00') socket$inet6_udp(0xa, 0x2, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpuset.memory_pressure\x00', 0x275a, 0x0) write$binfmt_script(r2, &(0x7f0000000000), 0x208e24b) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='blkio.bfq.io_service_bytes_recursive\x00', 0x275a, 0x0) mmap(&(0x7f00009c5000/0x4000)=nil, 0x4000, 0x3, 0x28012, r3, 0x2000) io_submit(0x0, 0x2, &(0x7f0000000640)=[&(0x7f0000000680)={0x0, 0x0, 0x0, 0x0, 0xc2, 0xffffffffffffffff, &(0x7f00000006c0)="0100fd6400000000", 0x8, 0x36}, &(0x7f0000000700)={0x0, 0x0, 0x0, 0x5, 0x0, 0xffffffffffffffff, 0x0, 0xfe, 0x0, 0x0, 0x1}]) r4 = fsopen(&(0x7f0000000740)='cgroup2\x00', 0x0) fsconfig$FSCONFIG_SET_BINARY(r4, 0x6, 0x0, 0x0, 0x0) openat$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000780), 0x2, 0x0) io_submit(0x0, 0x2, &(0x7f0000002780)=[&(0x7f0000002640)={0x0, 0x0, 0x0, 0x2, 0x1000, 0xffffffffffffffff, &(0x7f0000001640)="6cd9c1ba41178ed491aba6c66ab02751f8ac87e162255ca081796a653e8fa5a7fa709aee40ee6909ca1568cdbbd923aaaabe3f6a577a46092c502cd55e48b34f347d4bc42dfcbab6577b9dfaac36f010009b2d756e50eb89eb4f6a3d67fb8568affb4daec19781bd5056180e96e34ea279c9fe4623066682a8607fe2812e7446f0e1592359ae60b6e60dd6cd423d37744acc8bb111a801a802552a27fca373ad147111e70afbecbdb20ff22995884bd28fbf320d86ee246e2ef9304ae1a1482574638ed666db5c08175c5b774b865bda3379a1480f9e17a47cf34e3d226d656f46802418888c0dc0d4202ef8aafbe83b5e5c25f32bcfe49ef9dc6c6adead788c698dcbdcec0d475adcc43b0d469901e99f40532f3a8750be99836dfb61f7be3db4805178495fa551684744aad53d8520bc60b5d8eff4a2701bbe51ca0f34b890b44c91c951b04e81e2cf39036410fac93bbba53cad135c3851cf636c91c49de0ae70a50df060dd623f2bd849d44ce45918e8c153051d4889c5c069ac9039f4870c52c8c1c56e5993c2ada65af5c8967fbc4a7b0493ccec7d54bd9ddbb29e45fee416d68d9f5d53977def1cfec39c63ba2c446157c7a5446abe5e0db083b9a6bfb40ae0dbeec0a3081f0095c3cd6d2452541db54436ebfed8df0498e766e7116995a77cd3467ca83db10d38d8ead7eaf2a51f0a14e1b64b5db9b2e705bce956a900e65bf151ca8d48234eaa1e506442d546dca47cc322eca6ee3e5b4cc1ac65fb28d843d920dd18791260646d00fc0acb4e0bfe01646f9c4167dd0ddd556c05469426282ac45af64a3397779edb4fc05000c6cc8f4661226ecf1c8cc119c89266a2fc76e7533ce8ede4f895ce1db816958d365107324c005edca99017d979f4decab3d601416e26139e2d8d2485b3e49e464cbd1f3b0b7886e3ee8204a3a818cafd080ea8014e8344f8f1b84911a3ae4599128c45dd8ae63fe6e82c83fa490412b67af222ee486394c1d66ca393d25c1f89b35104e254434c689fe217f241b41534ae400ef297a2e4e5b6d1da259e5b5c3521598e7b4824aa93db34347c5e85ff64b6071410cd73fe6cacdb7c8d08bbe56832f3e2df7639bb4254998cbf988ab639d5b20b57202b04024ab6a6d31c869974ca2052773882946d619d86da666c514b7324868e722f716195d6b7d83da863a3ba1953f9a9f9ef27a001564b54dc2addcba2b99d8dbbff330b29d25a1ab232a6f62cb06ea4fa817051f3f7c5dbf5cb16deaf9b67d89d69a6205466545e99b13f808cc6f6e3df42d2eff89c583d4498ebd8150fd08a8d5b561cf2e6159d725386a245bcbc5d87d4135b5d490eaf845cb63e1f7da5bbed266abf3201cfdea21dfa78cdf84037d128542a83fddd88596972517416733be705f90ef9d8e088c1705fafb2d4dadf15f6a2839184786a9c40720baef8eccfdfa299afdaf8d0df19b144c60dceb95438325c7a5c5f3634c870f0490ee2a3837e59bbd71766fae4eadfd3ee19e9f656f80b089a311d8ee4861c41f19e67ce207533a1a539885ec45912705687053ddacfe923489b93a12fe7a84affab6a1e86f11d3dd2bf52ba8e292207824866dc8933aa3d8e57eb7ec016db0aeacf4d8e861e0de2d5bef4f3d0a644d614e0140a04190546b3fdaad259a52dd767aa5020ed2e13d9498dd3ec198e445eb8685c70f3f95d77e2de0cafa8041450fc8998f8a44b6bcca92a7a0225451193084652c9a519c9cffbd70b7bc3bc6dd0d17a0e66664a7056e14f08b0c1279fb53071b021ebc2cbf47b139c80f853be796d58b3225e230de85bcda32726b03653fe518c83d30ec68ac632d441d5f1cf2b37e9fc171ce8f909c91df03193545123414ef036e7cfe7f89eef09a8aef91e8d13fc0b81993bdec1da7556bbea40bb3d9a8019aff3cb080fd5d9b6e6e3c4bdc8776a98d3b1d93c95ffc5299b5c154fdb3de28ae058423471d75f7eea454462f7ba8ea087088d36f4f4352b0805598aa52a3c4785111a8b6e805c995a6022f2b7fa9b6f8639757b9b1d6bd6e77bbd49e8f0baa3fa1adc55b3dba0d927c8446c10017205ea2cf22c68a0b5392762daab0b7cadf73df326bcbcc0a0f056f8f05bef42a3ad2b670ebfea24612b6a1475fbed5c9771f245a91c5f4e7ea846f4591277cb3f423aaf4718e8e662293af34cd960be291411aa33376945a4dc53ac836674737cf64770f97886bcc701b2e4f2ec48f92f2933e9453c248cc6fb788bfcc7a39758c12c1eecc8f6f276cf92691f58ce40e8d7ea968fde62535eedc1572ab3c7ec926de88f9565b7e9ceaa95ff950884d64624ec0be336b6f25efc5d64cd0598e920850d5fb1fe0b883d5963d424185111a484f7801396d12611c3108e229a7c43920b68fb44bb31a808ba5eb47292483f00d84a562299c436b00c05cf230748935bd92aec371a28722d5a6751eb4bee58684e8e1ed630bbbf8c33f93d3de495dbca3c7e5c0108917bb594c0fc3cc66fd056aeb1456d5573e8ce338510424c6397adb85e20598266ed216ac2d439b7cbdf27b035340cbefbc6f211d13e089cd6ea5721b85c1500e194c0a70198bd166ebbc5459b603ac9735dc842c56f51c2bec20895907d599b1e739577bca02bb1f7144879adeee9e044098ef7c8e62798c626f40a360da477392ff78614718e7eb218781640f655202ceabe0f7f87cfc1406dd35d41d505edffd4e2908fb1b5f047e6d9566cdd46aa9dfa92e5075cf3b12c4d1c251d335ed571467dcdad51495f35fd5d42fe340353910a5eef9d22723b0ab3d7d4892392b8988a5f4c691a1efe452a1e3c316c20a8f187f117a0acb3e3057cf9ef571c54cb24f0eb943953c7e30fd2224f4d99e86f89ed140ff5e3eff4c10b3fdde727c00873debeb6ae43592a3d1d3ba7d23a760c5e06c6493306404ab83de512dc2760745fb0001974abe9131984e29415df19d2c08184169ff1f4ad591268f1adaa2024edd48932573a6b3f1f5633fadb3a99b8e99c1cdb6c15b3a37c37578229f407d2c7a632c9ea14bf8856ef3b05b569450ebdde0b4a3298d802f12e0ebf873a6fdcdcf4ec70f4717317ba6f9706468611297ac6cf5b1b8b7958889fa8057559a63d9c14ca254f27b5c2f1142506bcad11c129d0343e24d804114cc86a46d19499bb3d60b5f3ef322bf61250d8c4e06d5949aaf686bdb03620b7e765af2c9be36b2b312fe054ecc4c404f4a901f06f6ab326f136b4fb225bee4426a1dd8b4a9255191891a872c467753834c2e389330ac0853e23eac485d24aa1be98f7669309559f7e8b612e9a1f512fa2218c7430b2581c34ebe4f956b1907eeee4c160f116e7aa4d76164513dcb8647dafc01a361b00930cbb080f439a87ced7cc0e911b34bc00a60b07deafa5cd7e82a4e78cb735b20298bab80307f2b19672ae11f462ca6926a27e850ce2f0ae46beb774aa20c103e239a537b1e0463432dac2052784a022309d0f3d8bfb463d706dd01955f35f3aea462b0c920b77c07ce9e61f5b1461254bf0205648b0b356b72ac4deab3c27b4c6a5fb70357bbff46b63e5ae1999e55b591d8c86156e6627679ec0bc1c09e28d0826c415e8b1e075f15210cf1f23ce40246c6f03624c6cbb234184e3dcbf4ee6e7247781459536a380ec0b966dadc6c2580f9e7054dfa3d18fcbdcd428d3b3b2462670a301da4e0357ac9c10e390847d7c0d1f7f1d4c1e949f5111330ef9d986709862860b2803d17a6fbd8da841f7237372cb72b7529dc5c4ec1373e1cc92411b066c553be4f0ef86bb68b6c3b418aa11b398d42caff106cb1b554226d37b9c2aa8269525fed69d085926a9225540e6f1b7c2d88eec4c8553880dbde1611e590cccb9eaa9a1aee9b9a7c453424afb31019179f4f6a7cbff176b24ebd4c55970e229fc6a89e088b648e5388465e5ac0390ba926c64a7efd7aedbfaebf4a0ab0fd51fede8a2a1e7beb00646c63175af1f2a1cf1e9641067a2670578178ccd348f69f4a1ae283a517d07ecaccab570590a2447d96b7178c02cb5d0c4cf76db060f6c4f955b218a005bb8f57b08700c3edfe37606c490c59f53f701ae8c7f4e43aa6fb3c11ba1793b63bb412e9c7ea14ef29e0240d54a739d3c053c5247c0b2027c62975d90f7899c3e835ce37907eb2131c0a7679af05a361f92a748dce6750c34defd98922bdd3f70f4afdcb5343cbb26eaa0be6ca901b63a1bb81941df3d55d4f2adbfd21b29731a5d20979fd8161e1eff17d4989a4f6f2d6c5e8f510b77fcfecabc497dfce9596172c57d184d9e2e801261ae094d798fcf74005ae3a427e88e3c36f1434caadc21b170e0227094c2dbace55d79e3e9de582c81209cb990af9966552883f5dbd0e38b4d25d42bedf27f80894bea5edb9108a7ccca5707dc241fb01fb70fe6316c2c8f9b7ede685c36602df9d6abca87b267f979b1971153994606a88bef75703b90a608d0cdaf4d8e6817deb624670e345fa53f240b5bcd8836171584866a80161e2810d3c0f486755a8c0008b16f9b5a2c0a60310c4cba9d6857304a69753f5d8ecb2eb72c6c6bf38941fe7cb6df4972dfc105e3ebaf0dc22cbe4d26ca94acd330aad845c182d761c846be1f7624b8ef37077093786b6b5739246b6d0f7d8a3ff5e8d414520523210eb26390762ceef0247dc808a4ecc93b592839f6d408241798289ba97c38e40dd945ff0e803098302faabe2ec1838eeecea866d0071a92d29800f1d562e6b5c1b12adf4a1f2bc0dbe74eaf39f999855dd5a97df4d4cbe791daeee050303cb3dfb5d9428b1cb6d5081b078a87737e136b0b801ae1784db246626e3f3fe20dc172c463f792f0ffdd12a3961e205c9ae4dcf85db88dde5eb98b3b4b5109d97bb5d7ac7df181f6ff2baccceeece04a9bfb96e1aa215c293c70f613218668a1188b9a81de5ef4db2e1492558f79bb377ab015633c03191e2f1aad2d20f0a2628cfe00612ffe22703d32e8d86dfc1f05748454c360a34e1600c1f77394ebe99b638c9d17e18c065d6ab3aad29d31b0fbc81258000b4af5bb546c5ee4d4597d3ce0a7ef26f9e7a5a0d6be5f325041dc88ba8db8008604d129aaa3b38d4f415e07d7a2acede67cfe6a568abf3ff78f42e0dae3b38c6d745c470984224eacccc88798c80670365886414e5ab605da49c3f45825411cebcb86d8c792f6b98ce7acf70841ef17f0dd93c5612c0b73e48edcf973bd5bd91a8b7b87cccfc09df1bbf34c4a8c645d81a8a2ecbaf0c1330815a811b6a0d488cb340067276c573c686dca49a6d15bc3db80cd26b1eed7ef8dd21e7af4b2d1a029694e6a4b6aa5395e5f476b8409182d42f227802c6479526c44fbfe2f15341877b3858df0545011e940bd148ce9dfe0c46855beb15aed02d3c5f7365601f4f4472cf57b9cc8417600555d1d66bc9b9afe8801d505c64b20eab7452d4aa3d3ad7320b23a4ca9ef090b95035f601b56ffbea57bf6e299dbbafde3b9c9722fdcd058548c7bf59580a8140be24804fcf165effeea8935f9a89f16b470b550d4212fa92d2c8e6565f2dfa083c6fbd865fe871cf94bb671f7c2a078baa93085f610977ec0e4ae5834c40b64b9f1c2af356e86b864aba647a7b70f4d2ab58cd2a8620dda767d6dd34bcab0135846e5c49555aeca5751b73c2f875fc6efe0495d11dddbddbdf81ad8f751462fcdb52b3b67773598bb594d475d0d3b577fbce150610175e5cfd1863ab8a0c5a3761e77b307c1b109f8a984b89d213ffd", 0xff0, 0xf30, 0x0, 0x1, r2}, &(0x7f0000002740)={0x0, 0x0, 0x0, 0x4, 0x2, r1, &(0x7f0000002680), 0x0, 0x7, 0x0, 0x3, r0}]) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xa, 0x28011, r2, 0x0) r5 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x42, 0x0) fallocate(r5, 0x0, 0xa20, 0x8000c65) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x8000000f3aa6ea) 10.171843653s ago: executing program 4 (id=511): ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f00000011c0)={'tunl0\x00', &(0x7f0000000000)={'gre0\x00', 0x0, 0x7, 0x80, 0x1000, 0x6, {{0x5, 0x4, 0x0, 0xe, 0xffffffffffffffbc, 0x64, 0x0, 0x10, 0x29, 0x0, @multicast2, @multicast2}}}}) ioctl$UFFDIO_API(0xffffffffffffffff, 0xc018aa3f, &(0x7f00000000c0)) ioctl$UFFDIO_REGISTER(0xffffffffffffffff, 0xc020aa00, &(0x7f0000000000)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}, 0x3}) ioctl$UFFDIO_WRITEPROTECT(0xffffffffffffffff, 0xc018aa06, &(0x7f0000000140)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}, 0x1}) r0 = memfd_create(&(0x7f00000000c0)='-B\xd5N4\xa6Ey\xdb\xd1\xa7\xb1S\xf1:)\x00\x8a\xd7Uw\x00\xbc\xa92\xb3\xbb\x8d\xac\xacva}knh#\xcf)\x0f\xc8\xc0:\x9cc\x10d\xee\xa9\x8b\x066\xb8G\xd1c\xe1$\xff\x97\x8f~\xb90a\xa9\xb2\x04K\x98\x93=\xabQ\xf7\x19\xea\xef\xe3\xe1@\x84\x13\xefZb:\x8f\t\x01B\xec\xde\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00@Ip]D\xd6\r\xac\v#co\xd5\xb9\xc806\xa8\x99\xffs7\xa1b1\xb1;i)j\x0e\x1e\xedI\xa2\x80\x89\x1d\xd9p!\xc86s\xe07(\xee\xf9<\"\xf0\xc8\xae\x96J\xe2]\x01\x86\xb7.<\xf5N\xd3\x94W1\xff\x18z>\xa7q,\xf7\x96\xb8{\x8e\xbf4\xe0\x95\x1ce\xe4\x85\xcdi\xed\xd3>\xeb\xa5\xaf\x87\x90@\xd1\xbd`^\xfa\xb6\x9cj\x13/\xc5\\W\x04\br\x17X\xe3\xfb\xc8\xd4\xaeX\xc9s\xd18\xd9L\xbf\xa0\xa6\xdf2\a\x99i\xb1/\x19@\x1cq\xeb?\xc1z:\x913\xfa8\xac\xd3q\xe4vPGU', 0x1) r1 = dup(r0) write$binfmt_elf32(r1, 0x0, 0x58) fanotify_init(0x200, 0x0) fanotify_mark(0xffffffffffffffff, 0x0, 0x40000027, r1, 0x0) execveat(r1, &(0x7f0000000000)='\x00', 0x0, 0x0, 0x1000) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x100000000000000e) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cpuacct.usage_percpu_user\x00', 0x275a, 0x0) write$binfmt_script(r4, &(0x7f0000000000), 0x208e24b) ioctl$IOCTL_GET_NCIDEV_IDX(r4, 0x0, 0x0) connect(0xffffffffffffffff, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000003, 0x28011, r4, 0x0) preadv(r4, 0x0, 0x0, 0x0, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, 0x0) ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r5, &(0x7f00000000c0)={0xa, 0x6e22, 0x9, @empty, 0x6}, 0x1c) r6 = socket$inet_tcp(0x2, 0x1, 0x0) listen(r6, 0x0) listen(r5, 0x0) 9.063026557s ago: executing program 3 (id=512): openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) socket$packet(0x11, 0x3, 0x300) socket$packet(0x11, 0x3, 0x300) openat$audio1(0xffffffffffffff9c, &(0x7f0000000040), 0x203a2, 0x0) openat$rtc(0xffffffffffffff9c, &(0x7f0000000000), 0x101, 0x0) r0 = syz_ublk_setup_io_uring(0x1d, &(0x7f0000000040)={0x0, 0x30b5, 0x0, 0x2, 0x158}, &(0x7f0000000100)=0x0, &(0x7f0000000280)=0x0, &(0x7f0000000140)=0x0) syz_ublk_add_dev(r0, r1, r2, r3, &(0x7f0000000200)={0x2e, 0x14, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0xf4a, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f00000004c0)=@any_dev={0x4043, 0x8a, 0x0, 0x0, 0x1000, 0x1, 0x0, 0x0, 0x1}}}, &(0x7f0000000480)=0x0) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) r6 = dup(r5) syz_ublk_setup_queues(r6, r4, &(0x7f0000000400)={0x0, 0x1, 0x0, 0x3, 0x1ae, 0x0, r0}, &(0x7f0000000500)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0x617c, 0x80, 0x2008, 0x10000004, 0x0, r6}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xffffed80, 0x4000, 0x0, 0x146}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xf910, 0x0, 0x1, 0x401f0, 0x0, r6}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x4e48, 0x400, 0x2, 0x367}}], 0x1, &(0x7f0000000840)={0x2e, 0x6, 0x0, 0xffffffffffffffff, 0xc0107520, 0x0, 0x0, 0x0, 0x0, {}, 0x1f, 0x0, '\x00', {0xffb9, 0x4, 0x0, 0x0}}, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x48) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_open_dev$vim2m(&(0x7f0000000000), 0x7, 0x2) openat(0xffffffffffffff9c, &(0x7f00000000c0)='./cgroup.cpu/cgroup.procs\x00', 0x0, 0x18) openat$tcp_mem(0xffffffffffffff9c, &(0x7f00000002c0)='/proc/sys/net/ipv4/tcp_wmem\x00', 0x1, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) r7 = syz_ublk_setup_io_uring(0xd, &(0x7f0000000500)={0x0, 0x30b5, 0x0, 0x2, 0x377}, &(0x7f0000000100)=0x0, &(0x7f0000000280)=0x0, &(0x7f0000000300)=0x0) syz_ublk_add_dev(r7, r8, r9, r10, &(0x7f0000000200)={0x2e, 0x14, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x1, 0x4, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f00000004c0)=@any_dev={0x6, 0xe26, 0x0, 0x0, 0x1000, 0x10000, 0xffffffffffffffff}}}, &(0x7f0000000480)=0x0) r12 = socket$inet6_tcp(0xa, 0x1, 0x0) r13 = dup(r12) syz_ublk_setup_queues(r13, r11, &(0x7f0000000180)={0x0, 0x20fb87, 0x400, 0xfffffffd, 0x12b}, &(0x7f0000000a80)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0x7ffffe, 0x200, 0x1002, 0x15a, 0x0, r7}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x7ac7, 0x8000, 0x10000000, 0x546}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x88de, 0x8, 0x3, 0xfffffffc}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x0, 0x2000, 0x2, 0xbd}}], 0x1, &(0x7f0000000340)={0x2e, 0x50, 0x0, r13, 0xc0107520, 0x0, 0x0, 0x700, 0x0, {}, 0x1f, 0x0, '\x00', {0x3, 0x826, 0x0, 0x0}}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000006c0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r15, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x4004000) recvmmsg(r14, &(0x7f0000001900)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000300)=""/71, 0x47}, 0x4}], 0x1, 0x40000002, 0x0) 9.055172068s ago: executing program 0 (id=513): prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x400000000008d}, 0x0) ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f0000000380)={'\x00', 0x3, 0x6, 0x0, 0x2, 0x8, 0x0}) sched_setscheduler(r0, 0x2, &(0x7f0000000280)=0xa) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x1, &(0x7f0000000240)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x9a5eb000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x4000087, 0x2, 0x0) r4 = syz_clone(0x8800, &(0x7f0000000040)="69fcb602a97e6582a87b089799b1942942e91ce90791ec03d9e53bf6a882e7eb922ec9c9aa43e37e0dc76ae92362d2a2ffe165131e7d80ed005fde26d78d7ca39a1edcdd3665553847ab2f1ec630efcdda337373eeb8b13651f66ef23425c83e48e62d5086a9ca81c0245cb1a7f8b3bc273d891d5ad5a6f39f873693fbdb5952c4a02287eb1c1654875c5bc3ead9e96439a7a8ec661c9536a4", 0x99, &(0x7f0000000100), &(0x7f0000000600), &(0x7f0000000b00)="2014d972bf1284e36c112a7fe29de1a9d8fdd2be835a13cb1ed463974683c74a9e928b53f9") sched_setaffinity(r4, 0x8, &(0x7f0000000b40)=0xb138) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) read(0xffffffffffffffff, 0x0, 0x0) syz_ublk_setup_io_uring(0x2c73, &(0x7f0000000400)={0x0, 0x34bb, 0x4, 0x1, 0x2f4}, &(0x7f0000000480)=0x0, &(0x7f00000004c0), &(0x7f0000000500)) r6 = mmap$IORING_OFF_CQ_RING(0x7fffffffb000, 0x20ec, 0x0, 0xbd4c341840b03bf2, 0xffffffffffffffff, 0x8000000) munmap$IORING_OFF_CQ_RING(r6, 0x9) capset(&(0x7f0000000540)={0x20071026}, &(0x7f0000000580)={0x200000, 0x200000}) prlimit64(0x0, 0x8, &(0x7f00000005c0), 0x0) syz_mount_image$erofs(&(0x7f0000000b80), &(0x7f0000000bc0)='./file0\x00', 0x2004010, &(0x7f0000000c00)=ANY=[], 0x3, 0x204, &(0x7f0000000c40)="$eJzslU2L00AYx/+TtJO2B/HsxcuCejBNugpeFtbP4BseBIubSjWLspuDuyDFT+Ddmwc/htCzF7+BVC8KopfqTRiZt2SaJvaFFhGfH+z0n5lnn3lmJvkPCIL4b/n08edE/Nj73ALQxg4C0//FzyU8J/5D6/vzBoCX9968CyZBKVvp+ZcQYsH8ct7xdR8ZWOX4jvm9CS/Xt+DhktF3wBAafR8ebhudgOGu0Y8K3ZRNGIZAmoQPnqQHg2GaRINhE7FUPdns5pOPALnWby8YDkyXEEIwdPKQ45PTx/00TY5WFWJU9Pgox5x1g6t3bvxVtqq+FrDn1OeeV2j2NXL2L1b/pdkFww2jryGQe2O2JE1iFOs/1yjy+07++bVxrLkjSqgXQp6O7Rmsl2c5weVUpaHOXM+ssO8pqz57tqVSVxDMfFcAFgWbN8+e6N+reROiahVobGwKEQAbr/nMcsH8z0bzdn/2uMVIP69Wz37NEK/Iw63P2p6gHKPHpW2I1wwXHH/SVvJKXRbd7PBp9/jk9PLwsP/QJo2uRNHVXlcZkW6rLVDlbyt/6hT523WxnHE862fZUazb/Lmn2yrH9ZT/edP35u6Q35Yqs1nETNXdaV1B/3nqV6qLfm3xqC2VIAhi65wHU56sfNkKc5vkA9x1O4IgCIIgCIIgCIIg/jV+BwAA//8FuUSx") openat(0xffffffffffffff9c, &(0x7f0000000e80)='.\x00', 0x0, 0x0) syz_fuse_handle_req(0xffffffffffffffff, 0x0, 0x0, 0x0) syz_fuse_handle_req(0xffffffffffffffff, 0x0, 0x0, 0x0) syz_io_uring_complete(r5, r6) 8.74130435s ago: executing program 4 (id=514): r0 = openat(0xffffffffffffff9c, &(0x7f0000000380)='./cgroup.cpu/cgroup.procs\x00', 0x0, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f00000003c0), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg$IPSET_CMD_HEADER(0xffffffffffffffff, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102) ptrace(0x4206, 0x0) tkill(0x0, 0x12) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) modify_ldt$write2(0x11, &(0x7f0000000180)={0x81, 0x0, 0x4000, 0x1}, 0x10) modify_ldt$read(0x0, &(0x7f0000001640)=""/4101, 0xffffffffffffffd6) listen(0xffffffffffffffff, 0x5) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="9feb01001800000000000000180000001800000004000000020000000100000c02000000000000000000000d0000000000005f"], 0x0, 0x34}, 0x20) bind$rds(r0, &(0x7f0000000240)={0x2, 0x4e24, @loopback}, 0x10) mkdirat(0xffffffffffffff9c, &(0x7f00000002c0)='./dev\x00', 0x1ff) mount(0x0, &(0x7f0000001500)='./dev\x00', &(0x7f0000001600)='devtmpfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./mnt\x00', 0x0) mount(&(0x7f00000000c0)=@filename='./dev/sda1\x00', &(0x7f0000000140)='./mnt\x00', &(0x7f00000001c0)='ext4\x00', 0x8410, 0x0) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) mount_setattr(0xffffffffffffffff, 0x0, 0x1000, &(0x7f0000000100)={0x36, 0x70, 0x20000}, 0x20) chdir(&(0x7f0000000140)='./file0\x00') openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpuset.memory_pressure\x00', 0x275a, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./file1\x00', 0xc142, 0x90) sendfile(r2, r2, 0x0, 0x8000000f3aa6ea) 7.332157665s ago: executing program 0 (id=515): ioctl$SNDRV_SEQ_IOCTL_SET_PORT_INFO(0xffffffffffffffff, 0xc0a85320, 0x0) socket$netlink(0x10, 0x3, 0x6) prlimit64(0x0, 0xe, &(0x7f0000000d40)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000d80)=0x7) getpid() socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000e00)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f0000000e40)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f0000000ec0), 0x651, 0x0) recvmmsg(r0, &(0x7f0000000f00), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000f40)=0x6) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000f80), 0x28642, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFULNL_MSG_CONFIG(r2, &(0x7f0000001000)={0x0, 0x0, &(0x7f0000001040)={&(0x7f0000001080)={0x24, 0x1, 0x4, 0x101, 0x0, 0x0, {0xec6e9499dea48d65, 0x0, 0x4}, [@NFULA_CFG_CMD={0x5, 0x1, 0x1}, @NFULA_CFG_FLAGS={0x6, 0x6, 0x1, 0x0, 0x1}]}, 0x24}, 0x1, 0x0, 0x0, 0x44084}, 0x10) ioctl$SNDRV_CTL_IOCTL_SUBSCRIBE_EVENTS(0xffffffffffffffff, 0xc0045516, &(0x7f00000010c0)=0xffb) 6.244312167s ago: executing program 4 (id=516): mlockall(0x7) 5.987705344s ago: executing program 4 (id=517): socket$netlink(0x10, 0x3, 0x6) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) syz_mount_image$ext4(&(0x7f0000000440)='ext4\x00', &(0x7f00000002c0)='./file0\x00', 0xc41a, &(0x7f0000000900)={[{@noblock_validity}, {@max_dir_size_kb={'max_dir_size_kb', 0x3d, 0x9}}, {@stripe={'stripe', 0x3d, 0xee9}}, {@nodioread_nolock}, {@discard}, {@usrjquota, 0x2e}, {@nouid32}, {@nomblk_io_submit}, {@barrier}, {@delalloc}, {@nogrpid}], [], 0x2c}, 0x1, 0x477, &(0x7f0000000480)="$eJzs289vFFUcAPDvbFt+YyviDxC1ij8af7S0oHLwgtGEi4mJHvBYSyFIoYbWRAiR6gGPhpNH9WjiX+BJLkY9abzq3ZgQw0U0kYyZ3ZllaXeX7W63C+znk0x33uybed83M6998940gL41mv1IIrZFxG8RMRwRA8szjFY+rl09P/PP1fMzSaTpW38l2W7x99XzM0XWJP/cmifGStVNKyycPXdyem5u9kyenlg89f7EwtlzL5w4NX189vjs6amDBw/sn3z5pakX16Se27NYd380v2fX4XcuvTFz5NK7P36TBbct/762HhUjHZc5GqMNT8BTHR/99rI9/2x4wbktZW19MCKGyu1/OAbKqYrheP2TngYHdFWapunGFVurPYClFLiLJdHrCIDeKP7QZ8+/xbKO3Y+eu3Ko8gCU1ftavlS+GYxSnmeo5vl2rY1GxJGlf7/Ilqg7DgEAsLa+y/o/z9fr/5XigZp89+RzQyMRcW9E7IiI+yJiZ0TcH1HO+2BEPLTK8keXpW+Ufz0fhPplc/u1u7UrhyJ5JZ/burn/V/T+YmQgT20v138oOXZibnZffk7GYmhjlp5sUsbl1379rNF3tf2/bMnKL/qCeRx/Di4boDs6vTjdSZ1rXfm4PAZ4YWX9k+pMQBIRuyJidxvH3xQRJ579ek91w4aag+aa17+JwTYCWib9KuKZyvVfimX1j5pQm8xPTmyKudl9E8VdsdJPP198s1H5t77+3ZVd/y117/9q/UeS2vnahdWXcfH3Txs+07R7/29I3i6vF7fTh9OLi2cmIzYkSyu3T93Yt0gX+bP6j+2t3/53RFz/Mt/v4YjIbuJHIuLRiHgsj/3xiHgiIvY2qf8Prz75Xvv1766s/kdXdf1XvzJw8vtvG5Xf2vU/UF4by7e08vuv1QA7OXcAAABwpyiV34FPSuPV9VJpfLzyDv/O2FKam19YfO7Y/Aenj1belR+JoVIx0jVcMx46mY+5FOmpfKy4SO8vjxunaZpuLqfHZ+bnujWnDrRma4P2n/ljoNfRAV1Xnkc7+Hlrmf2HF9xVbppHH+pdHMD6W4P3aIA7lPYP/Uv7h/5Vr/1fiLjWg1CAdebvP/Qv7R/6l/YP/Uv7h77Uyf/1N1vZcbhbR74TVy5HRKM8A20feWNEdBrh01vb3T1KvT6rra8U77RVt5TqZP6vVxFm17HVzBdivQLr8S8mAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACANfJ/AAAA///tr+cS") prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f00000000c0)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, 0x0, 0x0, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_mreqn(r3, 0x0, 0x24, 0x0, 0x0) r4 = openat$ttyS3(0xffffffffffffff9c, 0x0, 0x28642, 0x0) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(0xffffffffffffffff, 0x6, 0x23, 0x0, &(0x7f0000000000)) ioctl$TIOCMGET(r4, 0x5415, 0x0) r5 = syz_open_dev$sndctrl(&(0x7f0000000040), 0x0, 0x0) ioctl$int_in(r5, 0x5452, &(0x7f00000001c0)=0x1) ioctl$SNDRV_CTL_IOCTL_SUBSCRIBE_EVENTS(r5, 0xc0045516, &(0x7f0000000000)=0xffb) ioctl$SNDRV_CTL_IOCTL_ELEM_ADD(r5, 0xc1105517, 0x0) r6 = socket$inet6(0xa, 0x3, 0x7) setsockopt$inet6_buf(r6, 0x29, 0x39, &(0x7f0000000040), 0x0) connect$inet6(r6, &(0x7f0000001940)={0xa, 0x0, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x9}, 0x1c) 5.791222054s ago: executing program 3 (id=518): close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) syz_emit_ethernet(0x4a, &(0x7f00000012c0)={@local, @broadcast, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "083ff2", 0x14, 0x6, 0x0, @remote, @mcast2, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0xc}}}}}}}, 0x0) sendmsg$DEVLINK_CMD_RATE_NEW(0xffffffffffffffff, 0x0, 0x4008000) r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$batadv(0x0, 0xffffffffffffffff) syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000200)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x80800, &(0x7f0000000140), 0xff, 0x4d8, &(0x7f0000004000)="$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") prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x8a}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x3) close_range(r0, 0xffffffffffffffff, 0x0) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) accept4$unix(0xffffffffffffffff, 0x0, 0x0, 0x80000) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) read$msr(0xffffffffffffffff, 0x0, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) sync() socket(0x11, 0x3, 0x8) socket(0x11, 0xa, 0x8) r2 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f00000000c0)=ANY=[], &(0x7f00000002c0)='GPL\x00'}, 0x94) syz_emit_ethernet(0x32, &(0x7f0000000000)={@local, @broadcast, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x24, 0x0, 0x0, 0x0, 0x88, 0x0, @empty, @multicast1}, {0x0, 0x2, 0x10, 0x0, @gue={{0x2, 0x0, 0x0, 0xc}}}}}}}, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r2, 0x5, 0x0, 0x0, 0x0, 0x0, 0x149c, 0x503, 0x0, 0x0, 0x0, 0x0, 0x2, 0xffff80fe}, 0x50) epoll_create1(0x0) mkdir(&(0x7f0000000000)='my_tracefs\x00', 0x1ff) mount(0x0, &(0x7f0000000200)='my_tracefs\x00', 0x0, 0x0, 0x0) 4.813609624s ago: executing program 4 (id=519): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) prlimit64(0x0, 0xe, &(0x7f00000000c0)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000100)=0x7) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000140)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x1, r0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000180)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xd6d1c000) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000006200)=""/102392, 0x18ff8) sched_setaffinity(r2, 0x47, &(0x7f000001f200)=0x7) bpf$PROG_LOAD(0x5, 0x0, 0x0) mount(0x0, 0x0, &(0x7f000001f2c0)='nfsd\x00', 0x0, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f000001f300)='./nfsd/nfsv4leasetime\x00', 0x1, 0x0) write$binfmt_aout(r4, 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x4000000) r5 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x2, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x1000485, &(0x7f0000002140)={{'fd', 0x3d, r5}, 0x2c, {'rootmode', 0x3d, 0x4000}}) read$FUSE(r5, &(0x7f00000021c0)={0x2020, 0x0, 0x0}, 0x2020) r7 = openat(0xffffffffffffff9c, &(0x7f00000013c0)='./file0/file0\x00', 0x42, 0x0) write$FUSE_INIT(r5, &(0x7f0000001dc0)={0x50, 0x0, r6, {0x7, 0x2b, 0x0, 0x44448000, 0x6}}, 0x50) accept4$unix(r7, 0x0, &(0x7f0000000000), 0x0) 3.377489312s ago: executing program 4 (id=520): socket$inet_tcp(0x2, 0x1, 0x0) userfaultfd(0x801) mremap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x1000, 0x3, &(0x7f0000390000/0x1000)=nil) syz_usb_control_io$printer(0xffffffffffffffff, 0x0, &(0x7f0000000ac0)={0x1c, &(0x7f0000000300)=ANY=[@ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x0}) syz_open_procfs(0x0, 0x0) r0 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f00000001c0)={0x0, 0x1f, &(0x7f0000000000)=[@in={0x2, 0x4e22, @remote}, @in6={0xa, 0x4e23, 0x4, @mcast2}]}, &(0x7f0000000180)=0x10) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2}, &(0x7f0000000140)=0x0) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10000, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r1, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x3000002, 0x204031, 0xffffffffffffffff, 0xe60d3000) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = openat$userio(0xffffffffffffff9c, &(0x7f0000000080), 0x22242, 0x0) write$USERIO_CMD_SET_PORT_TYPE(r5, &(0x7f00000002c0)={0x1, 0x5}, 0x2) write$USERIO_CMD_REGISTER(r5, &(0x7f00000000c0), 0x2) read(r5, &(0x7f00000001c0)=""/93, 0x5d) write$USERIO_CMD_SEND_INTERRUPT(r5, &(0x7f0000000580)={0x2, 0xf8}, 0x2) write$USERIO_CMD_SEND_INTERRUPT(r5, &(0x7f0000000100), 0x2) splice(r2, 0x0, r4, 0x0, 0x39000, 0x0) memfd_create(&(0x7f0000000180)='J=\t\xeb\xf8\xa7\x04\x9f\xe1hO\x8e\xd7\xb5\x93}\x8d\xed\x01L`\x93\xcd^2P\x00$x\"\xda\xf1Az\xfe_\xc5\xb3\x9b`;\x1c\xfc\xaf9\x98\x91\xe7', 0x1) write$binfmt_elf64(r3, &(0x7f0000000000)=ANY=[], 0xfffffe3e) pipe2(&(0x7f0000000040), 0x0) 3.240014936s ago: executing program 3 (id=521): prlimit64(0x0, 0xe, &(0x7f00000000c0)={0x7, 0x104}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) socket$inet6_tcp(0xa, 0x1, 0x0) syz_open_dev$tty1(0xc, 0x4, 0x1) capset(&(0x7f0000000500)={0x20080522}, &(0x7f0000000200)={0x200002, 0x200003, 0x803, 0x4, 0x7}) r3 = fsopen(&(0x7f0000000200)='configfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r3, 0x6, 0x0, 0x0, 0x0) r4 = fsmount(r3, 0x0, 0x0) fchdir(r4) chown(&(0x7f0000000000)='.\x00', 0x0, 0xffffffffffffffff) r5 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$TCSETS(0xffffffffffffffff, 0x40045431, &(0x7f0000000080)={0x0, 0x0, 0x4, 0x7fffffff, 0xd, "00080000000000000000000cadf100004000"}) ioctl$TIOCGPTPEER(0xffffffffffffffff, 0x5441, 0x8) syz_open_pts(0xffffffffffffffff, 0x41) close_range(r5, 0xffffffffffffffff, 0x0) r6 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) ioctl$SNDRV_TIMER_IOCTL_TREAD_OLD(r6, 0x40045402, &(0x7f0000000040)=0x1) 2.987037293s ago: executing program 0 (id=522): syz_mount_image$ext4(&(0x7f0000000080)='ext3\x00', &(0x7f0000000480)='./file0\x00', 0x0, &(0x7f0000000100)={[{@noload}, {@max_dir_size_kb={'max_dir_size_kb', 0x3d, 0x1}}, {@usrjquota}, {@noload}, {@data_err_ignore}, {@usrjquota}]}, 0xff, 0x44d, &(0x7f0000000900)="$eJzs3MtvG8UfAPDvrp30/Ut+UB4tLQQKouKRNOnzwKUIJA4gIcGhiFNI0qrUbaAJEq0qKBzKEVXijjgi8RdwggsCTkhc4Y4qVaiXFiQko13vpsa107hx6rb+fKRNZrzjzHx3d+zZGTsBDKyx7EcSsTkifouIkUb2vwXGGr+uXTk389eVczNJ1Otv/Jnk5a5eOTdTFi2ft6mRqdeL/Lo29V54O2K6Vps7XeQnFk++N7Fw5uzzx09OH5s7Nndq6tChfXt3Dh+Y2t+TOLO4rm7/aH7HtlfeuvjazJGL7/z0TdbezcX+5jh6ZaxxdNt6qteV9dmWpnRS7WND6EolIrLTNZT3/5GoxIalfSPx8qd9bRywpur1er3d+3PhfB24hyXR7xYA/VG+0Wf3v+V2m4Yed4TLhyPeP9iI/1qxNfZUIy3KDLXc3/bSWEQcOf/3l9kWazQPAQDQ7LvDEfFcu/FfGg82lftfsYYyGhH/j4j7IuL+iNgaEQ9E5GUfioiHu6y/dYXkxvFPeumWAluhbPz3QrG2tTT++6eex18YrRS5LXn8Q8nR47W5PcUx2R1D67L85DJ1fP/Sr5932tc8/su2rP5yLNiQXqq2TNDNTi9OrzLsJZc/idhebYk/l0S5jJNExLaI2N7VX75+h3H8ma93dCp18/iX0YN1pvpXEU83zv/5aIm/lHRcn5w8eGBq/8T6qM3tmSivihv9/MuF1zvVv6r4eyA7/xtbr//cUvyjyfqIhTNnT+TrtQvd13Hh98863tPc6vU/nLyZp4eLxz6cXlw8PRkxnLx64+NT159b5svyWfy7d7WLP81f48oj8UhEZBfxzoh4NCIeK9r+eEQ8ERG7lon/xxeffLf7+JeZle+hLP7Zm53/aD7/3ScqJ374tvv4S9n535endhePrOT1b6UNXM2xAwAAgLtFmn8GPknHl9JpOj7e+Az/1tiY1uYXFp89Ov/BqdnGZ+VHYygtZ7pGmuZDJ4u54TI/1ZLfW8wbf1HZkOfHZ+Zrs/0OHgbcpg79P/NHpd+tA9ac72vB4NL/YXDp/zC49H8YXPo/DK52/f/jPrQDuP28/8Pg0v9hcOn/MLj0fxhIHb8bn67qK/8S93wi0u6fVY07pPF3U6K64n9mcYuJdW139fuVCQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAoDf+DQAA//9X4u4v") keyctl$join(0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) ioctl$KDSIGACCEPT(0xffffffffffffffff, 0x5607, 0x4) ioctl$VT_ACTIVATE(0xffffffffffffffff, 0x5606, 0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0xfffffffe}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) futex_waitv(0x0, 0x0, 0x0, 0x0, 0x1) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) semctl$IPC_RMID(0x0, 0x0, 0x0) r3 = socket$inet(0x2, 0x1, 0x0) bind$inet(r3, &(0x7f0000000040)={0x2, 0x4e23, @multicast2}, 0x10) sendto$inet(r3, 0x0, 0x0, 0x200007f9, &(0x7f00000000c0)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x1c}}, 0x10) shutdown(r3, 0x1) recvmsg(r3, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x20003160) pipe2(&(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80000) splice(r3, 0x0, r4, 0x0, 0x1, 0x0) r5 = openat(0xffffffffffffff9c, &(0x7f0000000440)='./file3\x00', 0x64042, 0x49) write$P9_RREADLINK(r5, &(0x7f0000000000)={0x6549bfc8e202b0dd, 0x17, 0x2, {0x7, './file0'}}, 0xfffffdab) 1.630311162s ago: executing program 0 (id=523): ioctl$SNDRV_SEQ_IOCTL_SET_PORT_INFO(0xffffffffffffffff, 0xc0a85320, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000780)='./proc\x00', 0x1ed) mount(0x0, &(0x7f00000007c0)='./proc\x00', &(0x7f0000000800)='proc\x00', 0x0, 0x0) socket$netlink(0x10, 0x3, 0x6) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000040)='./file0\x00', 0xc41a, &(0x7f0000000080)={[{@oldalloc}, {@noblock_validity}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x7}}, {@resuid}, {@stripe={'stripe', 0x3d, 0x2}}, {@bsdgroups}, {@sysvgroups}, {@data_err_abort}, {@nobh}], [{@fscontext={'fscontext', 0x3d, 'user_u'}}], 0x2c}, 0x1, 0x477, &(0x7f00000008c0)="$eJzs289vFFUcAPDvbFt+YyviDxC1ij8af7S0oHLwgtGEi4mJHvBYSyFIoYbWRAiR6gGPhpNH9WjiX+BJLkY9abzq3ZgQw0U0kYyZ3ZllaXeX7W63C+znk0x33uybed83M6998940gL41mv1IIrZFxG8RMRwRA8szjFY+rl09P/PP1fMzSaTpW38l2W7x99XzM0XWJP/cmifGStVNKyycPXdyem5u9kyenlg89f7EwtlzL5w4NX189vjs6amDBw/sn3z5pakX16Se27NYd380v2fX4XcuvTFz5NK7P36TBbct/762HhUjHZc5GqMNT8BTHR/99rI9/2x4wbktZW19MCKGyu1/OAbKqYrheP2TngYHdFWapunGFVurPYClFLiLJdHrCIDeKP7QZ8+/xbKO3Y+eu3Ko8gCU1ftavlS+GYxSnmeo5vl2rY1GxJGlf7/Ilqg7DgEAsLa+y/o/z9fr/5XigZp89+RzQyMRcW9E7IiI+yJiZ0TcH1HO+2BEPLTK8keXpW+Ufz0fhPplc/u1u7UrhyJ5JZ/burn/V/T+YmQgT20v138oOXZibnZffk7GYmhjlp5sUsbl1379rNF3tf2/bMnKL/qCeRx/Di4boDs6vTjdSZ1rXfm4PAZ4YWX9k+pMQBIRuyJidxvH3xQRJ579ek91w4aag+aa17+JwTYCWib9KuKZyvVfimX1j5pQm8xPTmyKudl9E8VdsdJPP198s1H5t77+3ZVd/y117/9q/UeS2vnahdWXcfH3Txs+07R7/29I3i6vF7fTh9OLi2cmIzYkSyu3T93Yt0gX+bP6j+2t3/53RFz/Mt/v4YjIbuJHIuLRiHgsj/3xiHgiIvY2qf8Prz75Xvv1766s/kdXdf1XvzJw8vtvG5Xf2vU/UF4by7e08vuv1QA7OXcAAABwpyiV34FPSuPV9VJpfLzyDv/O2FKam19YfO7Y/Aenj1belR+JoVIx0jVcMx46mY+5FOmpfKy4SO8vjxunaZpuLqfHZ+bnujWnDrRma4P2n/ljoNfRAV1Xnkc7+Hlrmf2HF9xVbppHH+pdHMD6W4P3aIA7lPYP/Uv7h/5Vr/1fiLjWg1CAdebvP/Qv7R/6l/YP/Uv7h77Uyf/1N1vZcbhbR74TVy5HRKM8A20feWNEdBrh01vb3T1KvT6rra8U77RVt5TqZP6vVxFm17HVzBdivQLr8S8mAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACANfJ/AAAA///tr+cS") prlimit64(0x0, 0xe, &(0x7f0000000d40)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000d80)=0x7) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000dc0)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000e00)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000e40)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000ec0), 0x651, 0x0) recvmmsg(r1, &(0x7f0000000f00), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000f40)=0x6) socket$inet_udp(0x2, 0x2, 0x0) r3 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000f80), 0x28642, 0x0) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(0xffffffffffffffff, 0x6, 0x23, 0x0, &(0x7f0000000fc0)) ioctl$TIOCMGET(r3, 0x5415, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFULNL_MSG_CONFIG(r4, &(0x7f0000001000)={0x0, 0x0, &(0x7f0000001040)={&(0x7f0000001080)={0x24, 0x1, 0x4, 0x101, 0x0, 0x0, {0xec6e9499dea48d65, 0x0, 0x4}, [@NFULA_CFG_CMD={0x5, 0x1, 0x1}, @NFULA_CFG_FLAGS={0x6, 0x6, 0x1, 0x0, 0x1}]}, 0x24}, 0x1, 0x0, 0x0, 0x44084}, 0x10) r5 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000001100)={0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x2e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) setsockopt$bt_BT_SNDMTU(r5, 0x112, 0xc, 0x0, 0x0) 1.630194552s ago: executing program 3 (id=524): mlockall(0x7) 1.471976058s ago: executing program 3 (id=525): mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000240)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f00000002c0)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000300)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeeb, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000380)=@file={0x0, './file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000400), 0x651, 0x0) recvmmsg(r1, &(0x7f0000000440), 0x10106, 0x2, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r3, 0x39b1) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000480)=ANY=[@ANYBLOB="12000000040000000400000012"], 0x48) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f00000004c0)={r4, &(0x7f0000000500), &(0x7f0000000540)=@udp=r3}, 0x20) recvmmsg(r3, &(0x7f0000000580)=[{{0x0, 0x0, &(0x7f00000005c0)=[{&(0x7f0000000600)=""/163, 0xa3}], 0x1}, 0x2000006}], 0x1, 0x23, 0x0) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) connect$inet6(r3, &(0x7f0000000040)={0xa, 0x4e22, 0x4000000, @mcast2, 0x7ff}, 0x1c) ioctl$TIOCSWINSZ(0xffffffffffffffff, 0x5414, 0x0) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x870, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) ioctl$SNAPSHOT_FREE(0xffffffffffffffff, 0x3305) r5 = inotify_init1(0x800) socket$phonet_pipe(0x23, 0x5, 0x2) inotify_rm_watch(r5, 0x0) socket(0x40000000015, 0x5, 0x0) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) 39.741595ms ago: executing program 0 (id=526): socket$nl_rdma(0x10, 0x3, 0x14) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x8b}, 0x0) r0 = getpid() setsockopt$nfc_llcp_NFC_LLCP_MIUX(0xffffffffffffffff, 0x118, 0x1, &(0x7f0000000080)=0x4bc, 0x4) getsockopt$inet_buf(0xffffffffffffffff, 0x118, 0x1, 0x0, &(0x7f00000000c0)=0xf) sched_setscheduler(r0, 0x2, &(0x7f0000000100)=0x7) syz_emit_ethernet(0x9a, &(0x7f0000000140)={@random="038e71e43634", @dev={'\xaa\xaa\xaa\xaa\xaa', 0x16}, @void, {@ipv6={0x86dd, @udp={0x0, 0x6, "82379f", 0x64, 0x2b, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @mcast2, {[], {0x4, 0x0, 0x64, 0x0, @wg=@response={0x2, 0x4, 0x0, "bf1cfabf7539096072a6844022656c6d6333947b5581b2391df068591fd8bbbe", "6f05283b3552cebb33293161ba16d651", {"8b53915865a224f1d88adb6d6a81689e", "f915937a90b71c36f2017befbaa04350"}}}}}}}}, 0x0) connect$unix(0xffffffffffffffff, &(0x7f0000000240)=@file={0xca88081e5693265, './config/usb_gadget/g1/functions/midi.usb0/out_ports\x00'}, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f00000002c0), 0x651, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000000300), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000340)=0x6) bpf$PROG_LOAD(0x5, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000005c0)='./config\x00', 0x1ff) mount(0x0, &(0x7f0000000600)='./config\x00', &(0x7f00000002c0)='configfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000680)='./config/usb_gadget/g1\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f00000006c0)='./config/usb_gadget/g1/functions/midi.usb0\x00', 0x1ff) mount$9p_unix(&(0x7f0000000700)='./config/usb_gadget/g1/functions/midi.usb0\x00', &(0x7f0000000740)='./config/usb_gadget/g1/functions/midi.usb0/out_ports\x00', &(0x7f0000000780), 0x100000, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000880)='./config/usb_gadget/g1/functions/midi.usb0/out_ports\x00', 0x1, 0x0) write(r1, &(0x7f00000008c0)='2', 0x1) syz_80211_inject_frame(&(0x7f0000000900), 0x0, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19) mlock2(&(0x7f00001e7000/0x3000)=nil, 0x3000, 0x0) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19) landlock_create_ruleset(0x0, 0x0, 0x0) 0s ago: executing program 3 (id=527): openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f00000000c0), 0x80200, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) pselect6(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) sendmsg$IEEE802154_LLSEC_ADD_SECLEVEL(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000001c0)={0x0, 0x38}}, 0x0) r1 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000240), 0x2, 0x0) ioctl$IOCTL_VMCI_VERSION2(r1, 0x7a7, &(0x7f0000000300)=0xb0000) ioctl$IOCTL_VMCI_INIT_CONTEXT(r1, 0x7a0, &(0x7f0000000480)={@my=0x1}) ioctl$IOCTL_VMCI_QUEUEPAIR_ALLOC(r1, 0x7a8, &(0x7f0000000600)={{@my=0x1, 0x2}, @my=0x1, 0x0, 0x2000000, 0x5e, 0x200000000000, 0x100000000000006, 0x0, 0x80000000}) openat$dsp(0xffffffffffffff9c, &(0x7f00000005c0), 0x2200, 0x0) mkdir(&(0x7f0000000000)='./my_configfs\x00', 0x0) mount(0x0, &(0x7f0000000080)='./my_configfs\x00', &(0x7f0000000100)='configfs\x00', 0x0, 0x0) openat$snapshot(0xffffff9c, &(0x7f0000000340), 0x24100, 0x0) mkdir(&(0x7f0000000140)='./my_configfs/target/core/rd_mcp_0\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f00000003c0)='./file0\x00', 0x10) setxattr$trusted_overlay_origin(&(0x7f0000000400)='./file0\x00', &(0x7f0000000440), 0x0, 0x0, 0x0) mkdirat(0xffffffffffffff9c, 0x0, 0x180) mount$overlay(0x0, &(0x7f0000000500)='./file0\x00', &(0x7f0000000540), 0x8, &(0x7f0000000580)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file0'}}]}) rmdir(&(0x7f0000000280)='./my_configfs/target/core/rd_mcp_0\x00') close(r0) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.1.106' (ED25519) to the list of known hosts. [ 63.580848][ T5766] cgroup: Unknown subsys name 'net' [ 63.714563][ T5766] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 65.149968][ T5766] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 67.088419][ T5782] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 67.107785][ T5782] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 67.115741][ T5782] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 67.124119][ T5782] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 67.132337][ T5782] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 67.139801][ T5782] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 67.189247][ T5782] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 67.210874][ T5789] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 67.218771][ T5789] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 67.237798][ T5789] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 67.268040][ T5780] (null): rxe_set_mtu: Set mtu to 1024 [ 67.275205][ T5789] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 67.283123][ T5790] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 67.294449][ T5789] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 67.300303][ T5780] rxe_eth0 speed is unknown, defaulting to 1000 [ 67.301558][ T5790] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 67.319674][ T5780] rxe_eth0 speed is unknown, defaulting to 1000 [ 67.327966][ T5790] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 67.335894][ T5789] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 67.348606][ T52] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 67.349351][ T5780] rxe_eth0 speed is unknown, defaulting to 1000 [ 67.369468][ T52] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 67.380647][ T5782] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 67.391228][ T52] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 67.399575][ T52] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 67.427649][ T52] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 67.438395][ T52] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 67.447978][ T52] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 67.455779][ T5786] (null): rxe_set_mtu: Set mtu to 1024 [ 67.485445][ T5784] (null): rxe_set_mtu: Set mtu to 1024 [ 67.503733][ T5794] (null): rxe_set_mtu: Set mtu to 1024 [ 67.508531][ T5786] rdma_rxe: rxe_newlink: failed to add rxe_eth0 [ 67.516093][ T5784] rdma_rxe: rxe_newlink: failed to add rxe_eth0 [ 67.518676][ T5794] rdma_rxe: rxe_newlink: failed to add rxe_eth0 [ 67.600662][ T5780] infiniband rxe0: set active [ 67.606089][ T5780] infiniband rxe0: added rxe_eth0 [ 67.627678][ T971] rxe_eth0 speed is unknown, defaulting to 1000 [ 67.660471][ T5780] RDS/IB: rxe0: added [ 67.665193][ T5780] smc: adding ib device rxe0 with port count 1 [ 67.671912][ T5780] smc: ib device rxe0 port 1 has pnetid [ 67.680098][ T5794] rxe_eth0 speed is unknown, defaulting to 1000 [ 67.691874][ T5770] rxe_eth0 speed is unknown, defaulting to 1000 [ 67.903657][ T5784] chnl_net:caif_netlink_parms(): no params data found [ 67.999551][ T5780] rxe_eth0 speed is unknown, defaulting to 1000 [ 68.112399][ T5786] chnl_net:caif_netlink_parms(): no params data found [ 68.163385][ T5784] bridge0: port 1(bridge_slave_0) entered blocking state [ 68.177576][ T5784] bridge0: port 1(bridge_slave_0) entered disabled state [ 68.185003][ T5784] bridge_slave_0: entered allmulticast mode [ 68.209169][ T5784] bridge_slave_0: entered promiscuous mode [ 68.272553][ T5784] bridge0: port 2(bridge_slave_1) entered blocking state [ 68.282067][ T5784] bridge0: port 2(bridge_slave_1) entered disabled state [ 68.289348][ T5784] bridge_slave_1: entered allmulticast mode [ 68.296659][ T5784] bridge_slave_1: entered promiscuous mode [ 68.304118][ T5780] rxe_eth0 speed is unknown, defaulting to 1000 [ 68.420012][ T5784] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 68.462968][ T5770] rxe_eth0 speed is unknown, defaulting to 1000 [ 68.473401][ T5784] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 68.510388][ T5786] bridge0: port 1(bridge_slave_0) entered blocking state [ 68.527501][ T5786] bridge0: port 1(bridge_slave_0) entered disabled state [ 68.534750][ T5786] bridge_slave_0: entered allmulticast mode [ 68.542097][ T5786] bridge_slave_0: entered promiscuous mode [ 68.573922][ T5784] team0: Port device team_slave_0 added [ 68.584708][ T5786] bridge0: port 2(bridge_slave_1) entered blocking state [ 68.592294][ T5786] bridge0: port 2(bridge_slave_1) entered disabled state [ 68.599650][ T5786] bridge_slave_1: entered allmulticast mode [ 68.606356][ T5786] bridge_slave_1: entered promiscuous mode [ 68.633387][ T5786] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 68.645206][ T5784] team0: Port device team_slave_1 added [ 68.676055][ T5786] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 68.716626][ T5780] rxe_eth0 speed is unknown, defaulting to 1000 [ 68.758234][ T5784] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 68.765720][ T5784] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 68.829959][ T5784] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 68.866564][ T5786] team0: Port device team_slave_0 added [ 68.885357][ T5784] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 68.899400][ T5784] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 68.960080][ T5784] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 68.980365][ T5794] chnl_net:caif_netlink_parms(): no params data found [ 69.014373][ T5786] team0: Port device team_slave_1 added [ 69.108404][ T5786] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 69.115398][ T5786] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 69.141918][ T5786] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 69.193202][ T5786] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 69.200595][ T5789] Bluetooth: hci0: command tx timeout [ 69.209996][ T5786] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 69.238470][ T5786] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 69.295781][ T5794] bridge0: port 1(bridge_slave_0) entered blocking state [ 69.303110][ T5794] bridge0: port 1(bridge_slave_0) entered disabled state [ 69.312340][ T5794] bridge_slave_0: entered allmulticast mode [ 69.319163][ T5794] bridge_slave_0: entered promiscuous mode [ 69.332719][ T5784] hsr_slave_0: entered promiscuous mode [ 69.339280][ T5784] hsr_slave_1: entered promiscuous mode [ 69.346271][ T5446] infiniband rxe0: set active [ 69.371107][ T5794] bridge0: port 2(bridge_slave_1) entered blocking state [ 69.384661][ T5794] bridge0: port 2(bridge_slave_1) entered disabled state [ 69.395629][ T5794] bridge_slave_1: entered allmulticast mode [ 69.403809][ T5794] bridge_slave_1: entered promiscuous mode [ 69.421593][ T23] rxe_eth0 speed is unknown, defaulting to 1000 [ 69.437547][ T5789] Bluetooth: hci2: command tx timeout [ 69.443646][ T52] Bluetooth: hci1: command tx timeout [ 69.488672][ T5786] hsr_slave_0: entered promiscuous mode [ 69.495281][ T5786] hsr_slave_1: entered promiscuous mode [ 69.502365][ T5786] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 69.510309][ T5786] Cannot create hsr debugfs directory [ 69.517469][ T52] Bluetooth: hci3: command tx timeout [ 69.564089][ T5794] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 69.576548][ T5794] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 69.660952][ T5794] team0: Port device team_slave_0 added [ 69.708133][ T5794] team0: Port device team_slave_1 added [ 69.785387][ T5794] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 69.807585][ T5794] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 69.839389][ T5794] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 69.867189][ T5794] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 69.875415][ T5794] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 69.902175][ T5794] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 69.949500][ T5780] chnl_net:caif_netlink_parms(): no params data found [ 69.964036][ T5794] hsr_slave_0: entered promiscuous mode [ 69.972447][ T5794] hsr_slave_1: entered promiscuous mode [ 69.978918][ T5794] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 69.986473][ T5794] Cannot create hsr debugfs directory [ 70.123182][ T5784] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 70.134770][ T5784] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 70.170959][ T5784] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 70.204858][ T5784] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 70.224755][ T5780] bridge0: port 1(bridge_slave_0) entered blocking state [ 70.232229][ T5780] bridge0: port 1(bridge_slave_0) entered disabled state [ 70.242114][ T5780] bridge_slave_0: entered allmulticast mode [ 70.249211][ T5780] bridge_slave_0: entered promiscuous mode [ 70.276414][ T5780] bridge0: port 2(bridge_slave_1) entered blocking state [ 70.283742][ T5780] bridge0: port 2(bridge_slave_1) entered disabled state [ 70.293667][ T5780] bridge_slave_1: entered allmulticast mode [ 70.300985][ T5780] bridge_slave_1: entered promiscuous mode [ 70.348737][ T5786] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 70.361293][ T5780] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 70.373774][ T5780] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 70.385445][ T5786] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 70.433826][ T5786] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 70.448921][ T5780] team0: Port device team_slave_0 added [ 70.457775][ T5780] team0: Port device team_slave_1 added [ 70.481176][ T5786] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 70.521860][ T5780] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 70.528947][ T5780] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 70.555014][ T5780] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 70.575467][ T5780] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 70.582766][ T5780] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 70.609341][ T5780] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 70.620697][ T5794] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 70.629979][ T5794] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 70.654837][ T5794] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 70.682301][ T5794] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 70.742913][ T5780] hsr_slave_0: entered promiscuous mode [ 70.750067][ T5780] hsr_slave_1: entered promiscuous mode [ 70.756244][ T5780] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 70.764644][ T5780] Cannot create hsr debugfs directory [ 70.854544][ T5784] 8021q: adding VLAN 0 to HW filter on device bond0 [ 70.924272][ T5784] 8021q: adding VLAN 0 to HW filter on device team0 [ 71.005798][ T42] bridge0: port 1(bridge_slave_0) entered blocking state [ 71.013248][ T42] bridge0: port 1(bridge_slave_0) entered forwarding state [ 71.042279][ T42] bridge0: port 2(bridge_slave_1) entered blocking state [ 71.049499][ T42] bridge0: port 2(bridge_slave_1) entered forwarding state [ 71.090743][ T5786] 8021q: adding VLAN 0 to HW filter on device bond0 [ 71.125260][ T5780] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 71.135269][ T5780] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 71.149672][ T5780] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 71.162680][ T5780] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 71.195893][ T5786] 8021q: adding VLAN 0 to HW filter on device team0 [ 71.213759][ T3445] bridge0: port 1(bridge_slave_0) entered blocking state [ 71.220941][ T3445] bridge0: port 1(bridge_slave_0) entered forwarding state [ 71.241877][ T5794] 8021q: adding VLAN 0 to HW filter on device bond0 [ 71.251201][ T5784] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 71.263754][ T5784] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 71.277638][ T52] Bluetooth: hci0: command tx timeout [ 71.287708][ T3445] bridge0: port 2(bridge_slave_1) entered blocking state [ 71.295002][ T3445] bridge0: port 2(bridge_slave_1) entered forwarding state [ 71.370814][ T5794] 8021q: adding VLAN 0 to HW filter on device team0 [ 71.420865][ T60] bridge0: port 1(bridge_slave_0) entered blocking state [ 71.428132][ T60] bridge0: port 1(bridge_slave_0) entered forwarding state [ 71.455497][ T60] bridge0: port 2(bridge_slave_1) entered blocking state [ 71.462698][ T60] bridge0: port 2(bridge_slave_1) entered forwarding state [ 71.518577][ T52] Bluetooth: hci1: command tx timeout [ 71.524024][ T52] Bluetooth: hci2: command tx timeout [ 71.561237][ T5780] 8021q: adding VLAN 0 to HW filter on device bond0 [ 71.584275][ T5780] 8021q: adding VLAN 0 to HW filter on device team0 [ 71.604579][ T52] Bluetooth: hci3: command tx timeout [ 71.605350][ T1294] ieee802154 phy0 wpan0: encryption failed: -22 [ 71.623063][ T1294] ieee802154 phy1 wpan1: encryption failed: -22 [ 71.638848][ T42] bridge0: port 1(bridge_slave_0) entered blocking state [ 71.645977][ T42] bridge0: port 1(bridge_slave_0) entered forwarding state [ 71.661245][ T42] bridge0: port 2(bridge_slave_1) entered blocking state [ 71.668446][ T42] bridge0: port 2(bridge_slave_1) entered forwarding state [ 71.719945][ T5794] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 71.821250][ T5784] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 71.948048][ T5784] veth0_vlan: entered promiscuous mode [ 71.964304][ T5784] veth1_vlan: entered promiscuous mode [ 72.025444][ T5786] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 72.085240][ T5784] veth0_macvtap: entered promiscuous mode [ 72.117407][ T5784] veth1_macvtap: entered promiscuous mode [ 72.183523][ T5794] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 72.203530][ T5786] veth0_vlan: entered promiscuous mode [ 72.231484][ T5786] veth1_vlan: entered promiscuous mode [ 72.244714][ T5780] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 72.267216][ T5784] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 72.295910][ T5784] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 72.326383][ T5784] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 72.335799][ T5784] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 72.345495][ T5784] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 72.354276][ T5784] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 72.419732][ T5786] veth0_macvtap: entered promiscuous mode [ 72.434323][ T5786] veth1_macvtap: entered promiscuous mode [ 72.452030][ T5794] veth0_vlan: entered promiscuous mode [ 72.476966][ T5780] veth0_vlan: entered promiscuous mode [ 72.506681][ T5794] veth1_vlan: entered promiscuous mode [ 72.519809][ T5780] veth1_vlan: entered promiscuous mode [ 72.541730][ T5786] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 72.553748][ T5786] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 72.570174][ T5786] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 72.596719][ T5786] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 72.608214][ T5786] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 72.619322][ T5786] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 72.663899][ T5786] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 72.673497][ T5786] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 72.683505][ T5786] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 72.692457][ T5786] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 72.714838][ T5780] veth0_macvtap: entered promiscuous mode [ 72.716698][ T60] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 72.736525][ T60] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 72.752998][ T5794] veth0_macvtap: entered promiscuous mode [ 72.791630][ T2971] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 72.792377][ T5780] veth1_macvtap: entered promiscuous mode [ 72.802019][ T2971] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 72.820509][ T5794] veth1_macvtap: entered promiscuous mode [ 72.836066][ T5780] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 72.849434][ T5780] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 72.860046][ T5780] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 72.870585][ T5780] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 72.882353][ T5780] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 72.912737][ T5784] soft_limit_in_bytes is deprecated and will be removed. Writing any value to this file has no effect. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 72.944481][ T5780] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 72.963049][ T5780] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 72.973839][ T5780] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 72.987121][ T5780] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 72.999756][ T5780] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 73.010197][ T5794] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 73.022068][ T5794] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 73.032583][ T5794] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 73.043287][ T5794] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 73.053493][ T5794] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 73.064494][ T5794] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 73.075498][ T5794] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 73.127213][ T5780] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 73.137276][ T5780] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 73.147281][ T5780] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 73.160615][ T5780] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 73.175081][ T5794] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 73.186794][ T5794] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 73.197184][ T5794] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 73.216141][ T5794] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 73.226737][ T5794] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 73.246893][ T5794] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 73.260444][ T5794] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 73.330787][ T2971] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 73.353978][ T2971] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 73.392048][ T5794] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 73.393730][ T52] Bluetooth: hci0: command tx timeout [ 73.400933][ T5794] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 73.400992][ T5794] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 73.401018][ T5794] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 73.585046][ T3445] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 73.609557][ T5789] Bluetooth: hci1: command tx timeout [ 73.616182][ T52] Bluetooth: hci2: command tx timeout [ 73.691089][ T52] Bluetooth: hci3: command tx timeout [ 73.761133][ T3445] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 74.138571][ T2953] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 74.146733][ T2953] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 74.215876][ T42] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 74.233407][ T42] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 74.402159][ T3445] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 74.444624][ T3445] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 74.491613][ T3445] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 74.704903][ T3445] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 75.281049][ T5894] syz.2.6[5894]: memfd_create() called without MFD_EXEC or MFD_NOEXEC_SEAL set [ 75.342356][ T5894] loop2: detected capacity change from 0 to 1764 [ 75.364564][ T5894] ======================================================= [ 75.364564][ T5894] WARNING: The mand mount option has been deprecated and [ 75.364564][ T5894] and is ignored by this kernel. Remove the mand [ 75.364564][ T5894] option from the mount to silence this warning. [ 75.364564][ T5894] ======================================================= [ 75.438834][ T52] Bluetooth: hci0: command tx timeout [ 75.614393][ T5894] bridge0: port 2(bridge_slave_1) entered disabled state [ 75.622303][ T5894] bridge0: port 1(bridge_slave_0) entered disabled state [ 75.677990][ T52] Bluetooth: hci2: command tx timeout [ 75.683448][ T52] Bluetooth: hci1: command tx timeout [ 75.686539][ T5894] bridge0: port 2(bridge_slave_1) entered blocking state [ 75.696327][ T5894] bridge0: port 2(bridge_slave_1) entered forwarding state [ 75.704304][ T5894] bridge0: port 1(bridge_slave_0) entered blocking state [ 75.711465][ T5894] bridge0: port 1(bridge_slave_0) entered forwarding state [ 75.767816][ T52] Bluetooth: hci3: command tx timeout [ 76.235993][ T5894] team0: Port device bridge0 added [ 76.713950][ T5902] team0: Failed to send port change of device bridge0 via netlink (err -105) [ 77.452243][ T5902] bridge0: port 1(bridge_slave_0) entered disabled state [ 77.534926][ T5902] bridge0: port 2(bridge_slave_1) entered disabled state [ 78.237331][ T0] NOHZ tick-stop error: local softirq work is pending, handler #142!!! [ 78.473243][ T5902] team0: Failed to send port change of device team_slave_0 via netlink (err -105) [ 78.494930][ T5902] team0: Failed to send port change of device team_slave_1 via netlink (err -105) [ 78.658822][ T5921] netlink: 'syz.3.10': attribute type 1 has an invalid length. [ 80.494050][ T5878] rxe_eth0 speed is unknown, defaulting to 1000 [ 80.604340][ T5942] netlink: 8 bytes leftover after parsing attributes in process `syz.3.16'. [ 80.719439][ T5949] autofs4:pid:5949:autofs_fill_super: called with bogus options [ 81.606296][ T5956] netlink: 'syz.2.20': attribute type 1 has an invalid length. [ 81.652865][ T5958] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 81.717706][ T5961] loop3: detected capacity change from 0 to 512 [ 81.752719][ T5956] veth3: entered allmulticast mode [ 81.797507][ T5961] EXT4-fs error (device loop3): ext4_iget_extra_inode:4752: inode #15: comm syz.3.19: corrupted in-inode xattr: invalid ea_ino [ 81.910710][ T5961] EXT4-fs error (device loop3): ext4_orphan_get:1413: comm syz.3.19: couldn't read orphan inode 15 (err -117) [ 82.157776][ T5961] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 83.067731][ T8] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 83.147436][ T971] usb 4-1: new full-speed USB device number 2 using dummy_hcd [ 83.264820][ T8] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 83.264911][ T8] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 83.264933][ T8] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 83.264989][ T8] usb 2-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 83.265012][ T8] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 83.297123][ T8] usb 2-1: config 0 descriptor?? [ 83.365097][ T971] usb 4-1: not running at top speed; connect to a high speed hub [ 83.369564][ T971] usb 4-1: config 1 has an invalid descriptor of length 44, skipping remainder of the config [ 83.369628][ T971] usb 4-1: New USB device found, idVendor=046d, idProduct=0825, bcdDevice= 1.00 [ 83.369654][ T971] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 83.385932][ T971] usb 4-1: Found UVC 1.00 device (046d:0825) [ 83.630980][ T971] usb 4-1: UVC non compliance - GET_DEF(PROBE) not supported. Enabling workaround. [ 83.648701][ T971] uvcvideo 4-1:1.1: Failed to query (129) UVC probe control : -71 (exp. 26). [ 83.673543][ T971] uvcvideo 4-1:1.1: Failed to initialize the device (-71). [ 83.763491][ T971] usb 4-1: USB disconnect, device number 2 [ 83.913260][ T8] plantronics 0003:047F:FFFF.0001: No inputs registered, leaving [ 83.998354][ T8] plantronics 0003:047F:FFFF.0001: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.1-1/input0 [ 84.142260][ T6006] damon-dbgfs: DAMON debugfs interface is deprecated, so users should move to DAMON_SYSFS. If you cannot, please report your usecase to damon@lists.linux.dev and linux-mm@kvack.org. [ 84.339002][ T8] usb 2-1: USB disconnect, device number 2 [ 84.462049][ T5784] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 84.616415][ T6015] kvm_intel: L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 85.142080][ T6021] syz.2.27 uses obsolete (PF_INET,SOCK_PACKET) [ 85.543656][ T6021] netlink: 'syz.2.27': attribute type 2 has an invalid length. [ 87.207052][ T176] cfg80211: failed to load regulatory.db [ 87.398096][ T6043] loop0: detected capacity change from 0 to 2048 [ 87.406630][ T6043] UDF-fs: bad mount option "ÿÿÿÿÿÿ" or missing value [ 87.705056][ T6046] loop2: detected capacity change from 0 to 512 [ 87.800599][ T6050] process 'syz.3.34' launched './file1' with NULL argv: empty string added [ 87.921923][ T6046] EXT4-fs: Ignoring removed i_version option [ 88.054921][ T6046] EXT4-fs: Ignoring removed oldalloc option [ 88.223886][ T6046] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 88.294942][ T6046] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support! [ 88.378728][ T6046] EXT4-fs (loop2): orphan cleanup on readonly fs [ 88.397421][ T6046] EXT4-fs error (device loop2): ext4_ext_check_inode:532: inode #4: comm syz.2.35: pblk 0 bad header/extent: too large eh_depth - magic f30a, entries 1, max 4(4), depth 2048(2048) [ 88.435282][ T6046] EXT4-fs error (device loop2): ext4_quota_enable:7143: comm syz.2.35: Bad quota inode: 4, type: 1 [ 88.542582][ T6046] EXT4-fs warning (device loop2): ext4_enable_quotas:7184: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 88.774050][ T6046] EXT4-fs (loop2): Cannot turn on quotas: error -117 [ 88.930041][ T6046] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 89.849771][ T5786] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 89.964719][ T6073] loop2: detected capacity change from 0 to 1024 [ 96.854292][ T6129] netdevsim netdevsim8 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 99.930014][ T6148] futex_wake_op: syz.0.61 tries to shift op by 144; fix this program [ 99.940275][ T6148] futex_wake_op: syz.0.61 tries to shift op by 144; fix this program [ 102.137443][ T5854] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 102.158123][ T6160] ip_tables: iptables: counters copy to user failed while replacing table [ 102.181985][ T6160] syz_tun: entered allmulticast mode [ 102.329386][ T5854] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 102.349755][ T5854] usb 3-1: config 1 has 0 interfaces, different from the descriptor's value: 3 [ 102.370005][ T5854] usb 3-1: New USB device found, idVendor=0dba, idProduct=1000, bcdDevice= 0.40 [ 102.379726][ T5854] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 102.399738][ T5854] usb 3-1: Product: syz [ 102.404828][ T5854] usb 3-1: Manufacturer: syz [ 102.420206][ T5854] usb 3-1: SerialNumber: syz [ 102.656401][ T6155] netlink: 16 bytes leftover after parsing attributes in process `syz.2.64'. [ 104.288761][ T5854] usb 3-1: USB disconnect, device number 2 [ 104.594040][ T6183] bridge1: entered promiscuous mode [ 104.631656][ T6183] bridge1: entered allmulticast mode [ 106.632642][ T6194] NILFS (nullb0): couldn't find nilfs on the device [ 106.934854][ T6197] loop0: detected capacity change from 0 to 16 [ 107.025515][ T6197] erofs: (device loop0): mounted with root inode @ nid 36. [ 107.110665][ T6197] netlink: 4 bytes leftover after parsing attributes in process `syz.0.75'. [ 107.137535][ T6197] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 107.284443][ T6197] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 109.082718][ T6211] FAULT_INJECTION: forcing a failure. [ 109.082718][ T6211] name fail_usercopy, interval 1, probability 0, space 0, times 1 [ 109.160853][ T6211] CPU: 1 PID: 6211 Comm: syz.3.79 Not tainted syzkaller #0 [ 109.168108][ T6211] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 109.178187][ T6211] Call Trace: [ 109.181475][ T6211] [ 109.184414][ T6211] dump_stack_lvl+0x18c/0x250 [ 109.189126][ T6211] ? show_regs_print_info+0x20/0x20 [ 109.194344][ T6211] ? load_image+0x420/0x420 [ 109.198859][ T6211] ? __might_fault+0xaa/0x120 [ 109.203547][ T6211] ? __lock_acquire+0x7eb0/0x7eb0 [ 109.208581][ T6211] ? __local_bh_enable_ip+0x13a/0x1c0 [ 109.213969][ T6211] ? _local_bh_enable+0xa0/0xa0 [ 109.218844][ T6211] should_fail_ex+0x394/0x4c0 [ 109.223579][ T6211] copy_fpstate_to_sigframe+0xa0c/0xce0 [ 109.229151][ T6211] ? copy_fpstate_to_sigframe+0x188/0xce0 [ 109.234898][ T6211] ? fpregs_set+0x370/0x370 [ 109.239438][ T6211] ? fpu__alloc_mathframe+0xa7/0x120 [ 109.244742][ T6211] get_sigframe+0x5de/0x7d0 [ 109.249268][ T6211] ? load_gs_index+0x1a0/0x1a0 [ 109.254050][ T6211] ? lockdep_hardirqs_on_prepare+0x44c/0x7d0 [ 109.260043][ T6211] ? get_signal+0x1197/0x1390 [ 109.264740][ T6211] x64_setup_rt_frame+0x164/0xc30 [ 109.269781][ T6211] ? lockdep_hardirqs_on+0x98/0x150 [ 109.275005][ T6211] ? _raw_spin_unlock_irq+0x2e/0x50 [ 109.280225][ T6211] ? lockdep_hardirqs_on_prepare+0x44c/0x7d0 [ 109.286218][ T6211] ? sigaltstack_size_valid+0x1e0/0x1e0 [ 109.291777][ T6211] ? arch_do_signal_or_restart+0x39b/0x7b0 [ 109.297605][ T6211] arch_do_signal_or_restart+0x411/0x7b0 [ 109.303260][ T6211] ? get_sigframe_size+0x20/0x20 [ 109.308233][ T6211] ? exit_to_user_mode_loop+0x3b/0x110 [ 109.313715][ T6211] exit_to_user_mode_loop+0x70/0x110 [ 109.319020][ T6211] exit_to_user_mode_prepare+0xee/0x180 [ 109.324581][ T6211] syscall_exit_to_user_mode+0x1a/0x50 [ 109.330048][ T6211] do_syscall_64+0x61/0xb0 [ 109.334479][ T6211] ? clear_bhb_loop+0x40/0x90 [ 109.339172][ T6211] ? clear_bhb_loop+0x40/0x90 [ 109.344305][ T6211] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 109.350225][ T6211] RIP: 0033:0x7f05ded9f557 [ 109.354655][ T6211] Code: 83 c8 ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 <0f> 05 48 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 [ 109.374281][ T6211] RSP: 002b:00007f05dfbe4028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 109.382717][ T6211] RAX: 000000000000002e RBX: 00007f05df025fa0 RCX: 00007f05ded9f559 [ 109.390700][ T6211] RDX: 0000000000000010 RSI: 0000200000000440 RDI: 0000000000000005 [ 109.398679][ T6211] RBP: 00007f05dee36b20 R08: 0000000000000000 R09: 0000000000000000 [ 109.406672][ T6211] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 109.414668][ T6211] R13: 00007f05df026038 R14: 00007f05df025fa0 R15: 00007ffedd171148 [ 109.422685][ T6211] [ 109.507314][ C0] sched: RT throttling activated [ 111.689543][ T5789] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 111.706872][ T5789] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 111.716747][ T5789] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 111.735760][ T5789] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 111.746130][ T5789] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 111.755555][ T5789] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 111.971573][ T6222] rxe_eth0 speed is unknown, defaulting to 1000 [ 112.128124][ T6229] mac80211_hwsim hwsim4 wlan0: entered promiscuous mode [ 112.682428][ T6236] Zero length message leads to an empty skb [ 112.900263][ T6245] CIFS: Attempting to mount //127.0.0.1/share [ 112.928822][ T3445] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 112.953172][ T6222] chnl_net:caif_netlink_parms(): no params data found [ 112.953483][ T6247] CIFS: VFS: Invalid response size 0 for command 0 [ 112.967131][ T6247] CIFS: VFS: \\127.0.0.1 RFC 1002 unknown response type 0x20 [ 113.031326][ T3445] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 113.058893][ T6245] CIFS: VFS: cifs_mount failed w/return code = -5 [ 113.139796][ T3445] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 113.280367][ T3445] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 113.319324][ T6222] bridge0: port 1(bridge_slave_0) entered blocking state [ 113.329420][ T6222] bridge0: port 1(bridge_slave_0) entered disabled state [ 113.336794][ T6222] bridge_slave_0: entered allmulticast mode [ 113.344819][ T6222] bridge_slave_0: entered promiscuous mode [ 113.375085][ T6222] bridge0: port 2(bridge_slave_1) entered blocking state [ 113.383370][ T6222] bridge0: port 2(bridge_slave_1) entered disabled state [ 113.392372][ T6222] bridge_slave_1: entered allmulticast mode [ 113.399896][ T6222] bridge_slave_1: entered promiscuous mode [ 113.463520][ T6222] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 113.498747][ T6222] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 113.538616][ T6222] team0: Port device team_slave_0 added [ 115.051035][ T52] Bluetooth: hci4: command tx timeout [ 115.073930][ T6222] team0: Port device team_slave_1 added [ 115.236325][ T6222] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 115.256383][ T6222] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 115.313876][ T6222] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 115.334857][ T6222] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 115.357749][ T6222] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 115.427477][ T6222] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 115.795824][ T6222] hsr_slave_0: entered promiscuous mode [ 115.815168][ T6222] hsr_slave_1: entered promiscuous mode [ 115.835325][ T6222] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 115.857392][ T6222] Cannot create hsr debugfs directory [ 117.118513][ T52] Bluetooth: hci4: command tx timeout [ 117.303648][ T6222] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 117.325353][ T6294] syzkaller0: entered promiscuous mode [ 117.336583][ T6294] syzkaller0: entered allmulticast mode [ 117.355106][ T6222] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 117.466491][ T6222] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 117.483145][ T6222] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 117.645233][ T28] audit: type=1326 audit(1793202807.270:2): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6304 comm="syz.0.98" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f46cb59f559 code=0x7ffc0000 [ 117.696420][ T28] audit: type=1326 audit(1793202807.300:3): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6304 comm="syz.0.98" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f46cb59f559 code=0x7ffc0000 [ 117.735919][ T28] audit: type=1326 audit(1793202807.300:4): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6304 comm="syz.0.98" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f46cb59f559 code=0x7ffc0000 [ 117.790890][ T28] audit: type=1326 audit(1793202807.300:5): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6304 comm="syz.0.98" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f46cb59f559 code=0x7ffc0000 [ 117.823197][ T28] audit: type=1326 audit(1793202807.300:6): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6304 comm="syz.0.98" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f46cb59f559 code=0x7ffc0000 [ 117.880447][ T28] audit: type=1326 audit(1793202807.300:7): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6304 comm="syz.0.98" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=334 compat=0 ip=0x7f46cb59f559 code=0x7ffc0000 [ 117.930073][ T28] audit: type=1326 audit(1793202807.300:8): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6304 comm="syz.0.98" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f46cb59f559 code=0x7ffc0000 [ 117.957486][ T28] audit: type=1326 audit(1793202807.300:9): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6304 comm="syz.0.98" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7f46cb59f559 code=0x7ffc0000 [ 117.983701][ T28] audit: type=1326 audit(1793202807.300:10): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6304 comm="syz.0.98" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f46cb59f559 code=0x7ffc0000 [ 117.987773][ T8] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 118.085600][ T28] audit: type=1326 audit(1793202807.300:11): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6304 comm="syz.0.98" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f46cb59f559 code=0x7ffc0000 [ 118.124855][ T6222] 8021q: adding VLAN 0 to HW filter on device bond0 [ 118.168775][ T6222] 8021q: adding VLAN 0 to HW filter on device team0 [ 118.190944][ T3007] bridge0: port 1(bridge_slave_0) entered blocking state [ 118.198164][ T3007] bridge0: port 1(bridge_slave_0) entered forwarding state [ 118.255145][ T3007] bridge0: port 2(bridge_slave_1) entered blocking state [ 118.262370][ T3007] bridge0: port 2(bridge_slave_1) entered forwarding state [ 118.299005][ T8] usb 1-1: New USB device found, idVendor=0711, idProduct=0550, bcdDevice= 0.00 [ 118.314030][ T8] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 118.339156][ T8] usb 1-1: Product: syz [ 118.343377][ T8] usb 1-1: Manufacturer: syz [ 118.376524][ T8] usb 1-1: SerialNumber: syz [ 118.406823][ T8] usb 1-1: USB2VGA dongle found at address 2 [ 118.453079][ T8] usb 1-1: Allocated 8 output buffers [ 118.596461][ T3445] hsr_slave_0: left promiscuous mode [ 118.787919][ T3445] hsr_slave_1: left promiscuous mode [ 118.827967][ T3445] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 118.848576][ T3445] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 118.897857][ T3445] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 118.905358][ T3445] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 120.205356][ T52] Bluetooth: hci4: command tx timeout [ 120.294510][ T3445] bridge_slave_1: left allmulticast mode [ 120.300293][ T3445] bridge_slave_1: left promiscuous mode [ 120.308909][ T3445] bridge0: port 2(bridge_slave_1) entered disabled state [ 120.489976][ T3445] bridge_slave_0: left allmulticast mode [ 120.495662][ T3445] bridge_slave_0: left promiscuous mode [ 120.516136][ T3445] bridge0: port 1(bridge_slave_0) entered disabled state [ 120.596026][ T3445] veth1_macvtap: left promiscuous mode [ 120.602813][ T3445] veth0_macvtap: left promiscuous mode [ 120.634925][ T3445] veth1_vlan: left promiscuous mode [ 120.661418][ T3445] veth0_vlan: left promiscuous mode [ 121.739062][ T3445] team0 (unregistering): Port device team_slave_1 removed [ 122.234637][ T3445] team0 (unregistering): Port device team_slave_0 removed [ 122.242578][ T52] Bluetooth: hci4: command tx timeout [ 122.434872][ T3445] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 122.511470][ T3445] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 123.035582][ T3445] bond0 (unregistering): Released all slaves [ 123.173637][ T6330] netlink: 'syz.0.98': attribute type 30 has an invalid length. [ 123.666004][ T8] usb 1-1: Failed to early initialize device [ 124.010999][ T8] usb 1-1: USB disconnect, device number 2 [ 125.690823][ T6369] syzkaller0: entered promiscuous mode [ 125.706585][ T6369] syzkaller0: entered allmulticast mode [ 125.774525][ T6369] tipc: Started in network mode [ 125.791980][ T6369] tipc: Node identity 26c786cffb24, cluster identity 4711 [ 125.823263][ T6369] tipc: Enabled bearer , priority 0 [ 125.871317][ T6365] tipc: Resetting bearer [ 125.980388][ T6365] tipc: Disabling bearer [ 126.153062][ T6222] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 128.218562][ T6222] veth0_vlan: entered promiscuous mode [ 128.879680][ T6222] veth1_vlan: entered promiscuous mode [ 129.171310][ T6222] veth0_macvtap: entered promiscuous mode [ 129.272966][ T6222] veth1_macvtap: entered promiscuous mode [ 129.823933][ T6222] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 129.917503][ T6222] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 129.949401][ T6222] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 129.982185][ T6222] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 131.332763][ T6222] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 131.367404][ T6222] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 131.394759][ T6222] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 131.441587][ T6222] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 131.487448][ T6222] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 131.517352][ T6222] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 131.549087][ T6222] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 131.589486][ T6222] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 131.635214][ T6222] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 131.680129][ T6222] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 131.702398][ T6222] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 131.877076][ T6222] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 132.879618][ T6437] syzkaller0: entered promiscuous mode [ 132.885144][ T6437] syzkaller0: entered allmulticast mode [ 132.931318][ T6437] tipc: Started in network mode [ 132.936245][ T6437] tipc: Node identity ce64bb0ae681, cluster identity 4711 [ 132.958211][ T6437] tipc: Enabled bearer , priority 0 [ 132.978329][ T3445] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 132.992245][ T3445] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 133.027138][ T6436] tipc: Resetting bearer [ 133.056022][ T1294] ieee802154 phy0 wpan0: encryption failed: -22 [ 133.062487][ T1294] ieee802154 phy1 wpan1: encryption failed: -22 [ 133.098585][ T6436] tipc: Disabling bearer [ 133.231944][ T11] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 133.291474][ T11] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 134.581010][ T6472] loop3: detected capacity change from 0 to 512 [ 134.657423][ T6472] EXT4-fs (loop3): mounting ext3 file system using the ext4 subsystem [ 134.856701][ T6472] EXT4-fs (loop3): 1 truncate cleaned up [ 135.090857][ T6472] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 137.342603][ T5784] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 145.663161][ T6576] loop0: detected capacity change from 0 to 64 [ 146.487937][ T6588] syz.0.147: attempt to access beyond end of device [ 146.487937][ T6588] loop0: rw=2049, sector=161, nr_sectors = 1 limit=64 [ 146.510071][ T6588] Buffer I/O error on dev loop0, logical block 161, lost async page write [ 146.519068][ T6588] syz.0.147: attempt to access beyond end of device [ 146.519068][ T6588] loop0: rw=2049, sector=162, nr_sectors = 1 limit=64 [ 146.551505][ T6588] Buffer I/O error on dev loop0, logical block 162, lost async page write [ 146.561839][ T6588] syz.0.147: attempt to access beyond end of device [ 146.561839][ T6588] loop0: rw=2049, sector=163, nr_sectors = 1 limit=64 [ 146.575286][ T6588] Buffer I/O error on dev loop0, logical block 163, lost async page write [ 146.584348][ T6588] syz.0.147: attempt to access beyond end of device [ 146.584348][ T6588] loop0: rw=2049, sector=167, nr_sectors = 1 limit=64 [ 146.597808][ T6588] Buffer I/O error on dev loop0, logical block 167, lost async page write [ 146.606720][ T6588] syz.0.147: attempt to access beyond end of device [ 146.606720][ T6588] loop0: rw=2049, sector=169, nr_sectors = 1 limit=64 [ 146.620174][ T6588] Buffer I/O error on dev loop0, logical block 169, lost async page write [ 146.629236][ T6588] syz.0.147: attempt to access beyond end of device [ 146.629236][ T6588] loop0: rw=2049, sector=171, nr_sectors = 1 limit=64 [ 146.643454][ T6588] Buffer I/O error on dev loop0, logical block 171, lost async page write [ 146.652519][ T6588] syz.0.147: attempt to access beyond end of device [ 146.652519][ T6588] loop0: rw=2049, sector=172, nr_sectors = 1 limit=64 [ 146.728403][ T6588] Buffer I/O error on dev loop0, logical block 172, lost async page write [ 147.006671][ T6594] netlink: 'syz.0.141': attribute type 1 has an invalid length. [ 147.053459][ T6594] 8021q: adding VLAN 0 to HW filter on device bond2 [ 147.101591][ T6592] syzkaller0: entered promiscuous mode [ 147.128251][ T6592] syzkaller0: entered allmulticast mode [ 147.230571][ T6594] bond2: (slave veth0_to_bond): Enslaving as an active interface with an up link [ 147.383726][ T6603] loop2: detected capacity change from 0 to 256 [ 149.551004][ T6616] xt_AUDIT: Audit type out of range (valid range: 0..2) [ 151.562213][ T6640] loop0: detected capacity change from 0 to 256 [ 151.667469][ T6640] FAT-fs (loop0): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 152.887647][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 153.367144][ T6652] mac80211_hwsim hwsim4 wlan0: left promiscuous mode [ 154.604369][ T6663] rxe_eth0 speed is unknown, defaulting to 1000 [ 161.368047][ T6715] UBIFS error (pid: 6715): cannot open "./file0", error -22 [ 162.333005][ T28] kauditd_printk_skb: 56 callbacks suppressed [ 162.333019][ T28] audit: type=1326 audit(1793202851.960:68): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6728 comm="syz.4.168" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f313a79f559 code=0x7ffc0000 [ 163.977532][ T28] audit: type=1326 audit(1793202851.970:69): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6728 comm="syz.4.168" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f313a79f559 code=0x7ffc0000 [ 164.087749][ T5878] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 164.113518][ T6740] overlayfs: failed to clone upperpath [ 164.271636][ T5878] usb 5-1: New USB device found, idVendor=0711, idProduct=0550, bcdDevice= 0.00 [ 164.302178][ T5878] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 164.321906][ T5878] usb 5-1: Product: syz [ 164.326118][ T5878] usb 5-1: Manufacturer: syz [ 164.337153][ T5878] usb 5-1: SerialNumber: syz [ 164.366467][ T5878] usb 5-1: USB2VGA dongle found at address 2 [ 164.397111][ T5878] usb 5-1: Allocated 8 output buffers [ 164.664892][ T28] audit: type=1326 audit(1793202854.290:70): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6728 comm="syz.4.168" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f313a79f559 code=0x7ffc0000 [ 164.804008][ T6761] netlink: 'syz.4.168': attribute type 30 has an invalid length. [ 164.914587][ T28] audit: type=1326 audit(1793202854.540:71): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6728 comm="syz.4.168" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f313a79f559 code=0x7ffc0000 [ 165.127324][ T0] NOHZ tick-stop error: local softirq work is pending, handler #02!!! [ 165.177330][ T0] NOHZ tick-stop error: local softirq work is pending, handler #82!!! [ 165.197327][ T0] NOHZ tick-stop error: local softirq work is pending, handler #02!!! [ 165.267332][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 165.457349][ T0] NOHZ tick-stop error: local softirq work is pending, handler #82!!! [ 165.577339][ T0] NOHZ tick-stop error: local softirq work is pending, handler #02!!! [ 165.637345][ T0] NOHZ tick-stop error: local softirq work is pending, handler #02!!! [ 165.697345][ T0] NOHZ tick-stop error: local softirq work is pending, handler #02!!! [ 166.107502][ T28] audit: type=1326 audit(1793202854.540:72): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6728 comm="syz.4.168" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f313a79f559 code=0x7ffc0000 [ 166.391597][ T5878] usb 5-1: Failed to early initialize device [ 166.426886][ T5878] usb 5-1: USB disconnect, device number 2 [ 167.211893][ T6784] loop3: detected capacity change from 0 to 512 [ 167.415433][ T6784] EXT4-fs (loop3): 1 orphan inode deleted [ 167.466244][ T6784] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 167.499596][ T6784] ext4 filesystem being mounted at /48/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 167.571472][ T60] Quota error (device loop3): do_check_range: Getting dqdh_entries 15 out of range 0-14 [ 167.627113][ T60] EXT4-fs error (device loop3): ext4_release_dquot:6985: comm kworker/u4:4: Failed to release dquot type 1 [ 168.335436][ T6798] vivid-008: ================= START STATUS ================= [ 168.345414][ T6798] vivid-008: FM Deviation: 75000 [ 168.351331][ T6798] vivid-008: ================== END STATUS ================== [ 168.418496][ T6798] loop4: detected capacity change from 0 to 512 [ 169.047985][ T5784] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 169.109154][ T6798] EXT4-fs error (device loop4): ext4_orphan_get:1408: inode #15: comm syz.4.179: iget: bad i_size value: 38620345925642 [ 169.183995][ T6798] EXT4-fs error (device loop4): ext4_orphan_get:1413: comm syz.4.179: couldn't read orphan inode 15 (err -117) [ 169.259238][ T6798] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 170.957774][ T6222] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 175.819784][ T6858] ecryptfs_parse_options: eCryptfs doesn't support cipher: aes [ 175.827893][ T6858] Error parsing options; rc = [-22] [ 175.951743][ T6858] vlan0: entered promiscuous mode [ 176.000062][ T6858] team0: Port device vlan0 added [ 183.137944][ T6915] tipc: Enabling of bearer rejected, failed to enable media [ 183.774672][ T6925] rtc_cmos 00:00: Alarms can be up to one day in the future [ 184.491114][ T6925] tty tty4: ldisc open failed (-12), clearing slot 3 [ 185.380464][ T6950] netlink: 64 bytes leftover after parsing attributes in process `syz.0.204'. [ 185.389770][ T6950] netlink: 64 bytes leftover after parsing attributes in process `syz.0.204'. [ 185.398737][ T6950] iwpm_parse_nlmsg: Invalid NULL attribute (msg type Mapping Error Msg ret = -22) [ 191.699523][ T5097] Bluetooth: hci3: command 0x0406 tx timeout [ 191.709462][ T5097] Bluetooth: hci1: command 0x0406 tx timeout [ 191.718740][ T5790] Bluetooth: hci2: command 0x0406 tx timeout [ 192.152307][ T7006] fuse: Bad value for 'fd' [ 195.492007][ T1294] ieee802154 phy0 wpan0: encryption failed: -22 [ 195.519413][ T1294] ieee802154 phy1 wpan1: encryption failed: -22 [ 202.650660][ T7107] loop3: detected capacity change from 0 to 512 [ 202.713719][ T7107] EXT4-fs (loop3): mounting ext3 file system using the ext4 subsystem [ 202.774769][ T7107] EXT4-fs (loop3): 1 truncate cleaned up [ 202.789266][ T7107] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 203.554832][ T28] audit: type=1800 audit(1793202892.760:73): pid=7120 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.232" name="file3" dev="loop3" ino=16 res=0 errno=0 [ 203.780487][ T5784] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 205.961043][ T7139] A link change request failed with some changes committed already. Interface teql0 may have been left with an inconsistent configuration, please check. [ 208.388922][ T23] libceph: connect (1)[c::]:6789 error -101 [ 208.395623][ T23] libceph: mon0 (1)[c::]:6789 connect error [ 208.676024][ T7154] ceph: No mds server is up or the cluster is laggy [ 208.720111][ T2182] libceph: connect (1)[c::]:6789 error -101 [ 208.755725][ T2182] libceph: mon0 (1)[c::]:6789 connect error [ 208.782219][ T7176] netlink: 8 bytes leftover after parsing attributes in process `syz.4.244'. [ 208.797521][ T7176] netlink: 36 bytes leftover after parsing attributes in process `syz.4.244'. [ 208.806498][ T7176] netlink: 12 bytes leftover after parsing attributes in process `syz.4.244'. [ 208.815826][ T7176] netlink: 8 bytes leftover after parsing attributes in process `syz.4.244'. [ 209.629386][ T7155] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 209.854162][ T7182] loop4: detected capacity change from 0 to 128 [ 210.724079][ T7161] I/O error, dev loop4, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 212.063596][ T7192] tipc: Started in network mode [ 212.069427][ T7192] tipc: Node identity 7f000001, cluster identity 4711 [ 212.084042][ T7192] tipc: New replicast peer: 127.0.0.1 [ 212.091318][ T7192] tipc: Enabled bearer , priority 10 [ 213.467559][ T23] tipc: Node number set to 2130706433 [ 214.988083][ T7208] xt_addrtype: ipv6 PROHIBIT (THROW, NAT ..) matching not supported [ 216.340616][ T7221] loop3: detected capacity change from 0 to 256 [ 219.829281][ T7246] bond2: entered allmulticast mode [ 219.887729][ T7246] 8021q: adding VLAN 0 to HW filter on device bond2 [ 219.963269][ T7249] bond_slave_0: entered promiscuous mode [ 219.969467][ T7249] bond_slave_1: entered promiscuous mode [ 220.038304][ T7249] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 220.046984][ T7249] macvlan2: entered allmulticast mode [ 220.096612][ T7249] bond0: entered allmulticast mode [ 220.103643][ T7249] bond_slave_0: entered allmulticast mode [ 220.295859][ T7249] bond_slave_1: entered allmulticast mode [ 220.311003][ T7249] bond2: (slave macvlan2): Enslaving as an active interface with an up link [ 220.813706][ T7249] ip6gretap1: entered allmulticast mode [ 220.848286][ T7249] bond2: (slave ip6gretap1): Enslaving as a backup interface with an up link [ 221.007693][ T7246] netlink: 14 bytes leftover after parsing attributes in process `syz.4.263'. [ 221.721763][ T7246] bond_slave_0: left promiscuous mode [ 221.782316][ T7246] bond_slave_1: left promiscuous mode [ 221.929331][ T7267] loop3: detected capacity change from 0 to 2048 [ 222.109998][ T7267] UDF-fs: error (device loop3): udf_process_sequence: Primary Volume Descriptor not found! [ 222.132429][ T7267] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 222.764222][ T7246] bond0 (unregistering): left allmulticast mode [ 222.794376][ T7246] bond_slave_0: left allmulticast mode [ 222.824789][ T7246] bond_slave_1: left allmulticast mode [ 222.930505][ T7246] bond2: (slave macvlan2): Removing an active aggregator [ 222.938017][ T7246] bond2: Warning: No 802.3ad response from the link partner for any adapters in the bond [ 222.993011][ T7246] bond2: (slave macvlan2): Releasing backup interface [ 223.105659][ T7246] bond2: (slave macvlan2): the permanent HWaddr of slave - 4a:29:e9:29:99:d5 - is still in use by bond - set the HWaddr of slave to a different address to avoid conflicts [ 223.178986][ T7275] No such timeout policy "syz1" [ 223.901313][ T7246] macvlan2 (unregistering): left allmulticast mode [ 224.148178][ T7246] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 225.628016][ T7246] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 225.666367][ T7246] bond0 (unregistering): Released all slaves [ 228.545658][ T7303] overlayfs: failed to clone upperpath [ 228.556097][ T7306] syzkaller0: entered promiscuous mode [ 228.583334][ T7306] syzkaller0: entered allmulticast mode [ 228.709811][ T7306] tipc: Started in network mode [ 228.714737][ T7306] tipc: Node identity ee3a6f68dc7b, cluster identity 4711 [ 228.732220][ T7306] tipc: Enabled bearer , priority 0 [ 228.895616][ T7301] tipc: Resetting bearer [ 229.716190][ T7301] tipc: Disabling bearer [ 230.291920][ T5854] IPVS: starting estimator thread 0... [ 230.459173][ T7320] IPVS: using max 17 ests per chain, 40800 per kthread [ 231.561374][ T7324] overlayfs: failed to clone lowerpath [ 237.272075][ T7364] loop3: detected capacity change from 0 to 164 [ 237.570901][ T6997] Bluetooth: hci4: command 0x0406 tx timeout [ 242.408052][ T7407] loop4: detected capacity change from 0 to 512 [ 242.531468][ T7407] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 242.597769][ T7407] ext4 filesystem being mounted at /49/file2 supports timestamps until 2038-01-19 (0x7fffffff) [ 243.458836][ T6222] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 243.981728][ T7400] netlink: 4 bytes leftover after parsing attributes in process `syz.0.299'. [ 243.996379][ T7400] netlink: 4 bytes leftover after parsing attributes in process `syz.0.299'. [ 245.063769][ T7426] loop3: detected capacity change from 0 to 512 [ 245.701300][ T7429] loop4: detected capacity change from 0 to 1024 [ 245.768014][ T7429] EXT4-fs: Ignoring removed mblk_io_submit option [ 245.774505][ T7429] ext4: Bad value for 'max_batch_time' [ 246.290096][ T7426] EXT4-fs error (device loop3): ext4_iget_extra_inode:4752: inode #15: comm syz.3.306: corrupted in-inode xattr: invalid ea_ino [ 246.314129][ T7426] EXT4-fs error (device loop3): ext4_orphan_get:1413: comm syz.3.306: couldn't read orphan inode 15 (err -117) [ 246.398138][ T7408] I/O error, dev loop4, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 246.431909][ T7426] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 247.316644][ T7440] A link change request failed with some changes committed already. Interface teql0 may have been left with an inconsistent configuration, please check. [ 247.467076][ T5784] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 249.768279][ T7457] loop3: detected capacity change from 0 to 512 [ 250.602484][ T7457] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 250.652085][ T7457] ext4 filesystem being mounted at /81/file2 supports timestamps until 2038-01-19 (0x7fffffff) [ 251.391472][ T5784] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 251.422068][ C1] vcan0: j1939_tp_rxtimer: 0xffff88805f0e8400: rx timeout, send abort [ 251.439496][ C1] vcan0: j1939_xtp_rx_abort_one: 0xffff88805f0e8400: 0x00000: (3) A timeout occurred and this is the connection abort to close the session. [ 254.638788][ T7505] A link change request failed with some changes committed already. Interface teql0 may have been left with an inconsistent configuration, please check. [ 257.667710][ T1294] ieee802154 phy0 wpan0: encryption failed: -22 [ 257.674160][ T1294] ieee802154 phy1 wpan1: encryption failed: -22 [ 257.819735][ T7520] loop3: detected capacity change from 0 to 256 [ 257.827139][ T7520] exfat: Deprecated parameter 'namecase' [ 257.833015][ T7520] exfat: Deprecated parameter 'namecase' [ 258.710009][ T7520] exFAT-fs (loop3): failed to load upcase table (idx : 0x0001fe89, chksum : 0xef5d2b8f, utbl_chksum : 0xe619d30d) [ 259.926580][ T7535] loop3: detected capacity change from 0 to 512 [ 259.998042][ T7521] I/O error, dev loop3, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 260.468411][ T7522] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 261.177993][ T7547] warning: `syz.3.331' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 262.208401][ T7553] loop4: detected capacity change from 0 to 128 [ 262.262287][ T7553] EXT4-fs (loop4): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 262.327644][ T7553] ext4 filesystem being mounted at /55/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 267.554243][ T6222] EXT4-fs (loop4): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 269.069123][ T7601] netlink: 4 bytes leftover after parsing attributes in process `syz.2.339'. [ 269.081044][ T7601] netlink: 4 bytes leftover after parsing attributes in process `syz.2.339'. [ 271.341364][ T7616] loop3: detected capacity change from 0 to 1024 [ 271.777940][ T7616] ext4: Unknown parameter 'context' [ 278.102400][ T7664] IPVS: wrr: TCP 127.0.0.1:21 - no destination available [ 278.853678][ T5854] IPVS: starting estimator thread 0... [ 278.977572][ T7666] IPVS: using max 20 ests per chain, 48000 per kthread [ 283.330028][ T7703] loop3: detected capacity change from 0 to 2048 [ 283.347939][ T7703] UDF-fs: bad mount option "ÿÿÿÿÿÿ" or missing value [ 283.417432][ T7704] I/O error, dev loop3, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 284.346515][ T7710] loop4: detected capacity change from 0 to 512 [ 284.364862][ T7710] EXT4-fs: Ignoring removed orlov option [ 284.400026][ T7713] tipc: Enabled bearer , priority 0 [ 284.414420][ T7710] EXT4-fs: Ignoring removed oldalloc option [ 284.489616][ T7710] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 284.604580][ T7710] EXT4-fs (loop4): failed to initialize system zone (-117) [ 285.245600][ T7710] EXT4-fs (loop4): mount failed [ 285.624220][ T5878] tipc: Node number set to 3722675919 [ 287.002824][ T7743] loop3: detected capacity change from 0 to 1024 [ 287.486929][ T6998] Bluetooth: hci3: unexpected event for opcode 0x0000 [ 288.322791][ T7757] overlayfs: failed to clone upperpath [ 289.032860][ T7760] loop4: detected capacity change from 0 to 512 [ 289.082010][ T7760] EXT4-fs: Ignoring removed nomblk_io_submit option [ 289.152168][ T6998] Bluetooth: hci1: unexpected event for opcode 0x041c [ 289.161887][ T7760] EXT4-fs: journaled quota format not specified [ 292.109758][ T7765] batman_adv: batadv0: Adding interface: macvtap1 [ 292.116231][ T7765] batman_adv: batadv0: The MTU of interface macvtap1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 292.247453][ T7765] batman_adv: batadv0: Not using interface macvtap1 (retrying later): interface not active [ 293.002749][ T7780] overlayfs: failed to clone upperpath [ 295.735810][ T7802] loop4: detected capacity change from 0 to 1024 [ 295.863395][ T7803] I/O error, dev loop4, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 298.937035][ T7838] loop3: detected capacity change from 0 to 256 [ 298.951619][ T7838] exfat: Deprecated parameter 'namecase' [ 298.957696][ T7838] exfat: Deprecated parameter 'namecase' [ 299.238410][ T7838] exFAT-fs (loop3): failed to load upcase table (idx : 0x0001fe89, chksum : 0xbf24f927, utbl_chksum : 0xe619d30d) [ 300.225184][ T7846] loop3: detected capacity change from 0 to 1024 [ 300.537061][ T7854] loop4: detected capacity change from 0 to 256 [ 300.547760][ T7854] exfat: Deprecated parameter 'namecase' [ 300.554000][ T7854] exfat: Deprecated parameter 'namecase' [ 301.128557][ T7854] exFAT-fs (loop4): failed to load upcase table (idx : 0x0001fe89, chksum : 0xef5d2b8f, utbl_chksum : 0xe619d30d) [ 303.420833][ T7880] loop3: detected capacity change from 0 to 128 [ 304.914338][ T7887] loop4: detected capacity change from 0 to 1024 [ 305.005964][ T7893] loop3: detected capacity change from 0 to 512 [ 305.049973][ T7893] EXT4-fs: Mount option(s) incompatible with ext2 [ 305.799644][ T6998] Bluetooth: hci1: unexpected event for opcode 0x1405 [ 307.289065][ T7909] loop3: detected capacity change from 0 to 1024 [ 307.564264][ T7913] syz.4.408 calls setitimer() with new_value NULL pointer. Misfeature support will be removed [ 307.585514][ T7913] xt_cgroup: invalid path, errno=-2 [ 311.353088][ T7940] netlink: 4 bytes leftover after parsing attributes in process `syz.4.419'. [ 311.886126][ T7950] Illegal XDP return value 4294967199 on prog (id 35) dev N/A, expect packet loss! [ 315.943137][ T7976] tipc: Cannot configure node identity twice [ 319.711180][ T1294] ieee802154 phy0 wpan0: encryption failed: -22 [ 319.718347][ T1294] ieee802154 phy1 wpan1: encryption failed: -22 [ 320.182037][ T8000] loop3: detected capacity change from 0 to 512 [ 320.206944][ T8000] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 320.230389][ T8000] EXT4-fs (loop3): ext4_check_descriptors: Block bitmap for group 1 overlaps superblock [ 320.274380][ T8000] EXT4-fs (loop3): ext4_check_descriptors: Inode bitmap for group 1 overlaps superblock [ 320.356918][ T8000] EXT4-fs (loop3): ext4_check_descriptors: Inode table for group 1 overlaps superblock [ 320.490858][ T8000] EXT4-fs (loop3): revision level too high, forcing read-only mode [ 320.586651][ T8000] [EXT4 FS bs=4096, gc=2, bpg=35, ipg=32, mo=e040e01c, mo2=0000] [ 320.617459][ T8005] null_blk: disk nullb1 created [ 320.671612][ T8000] EXT4-fs (loop3): failed to initialize system zone (-117) [ 320.742828][ T8000] EXT4-fs (loop3): mount failed [ 325.857705][ T8041] IPv6: NLM_F_CREATE should be specified when creating new route [ 325.865711][ T8041] netlink: 'syz.4.444': attribute type 1 has an invalid length. [ 326.199689][ T8051] netlink: 'syz.0.446': attribute type 10 has an invalid length. [ 328.233534][ T8061] netlink: 'syz.3.449': attribute type 2 has an invalid length. [ 328.432651][ T8068] loop4: detected capacity change from 0 to 512 [ 329.591737][ T8091] loop3: detected capacity change from 0 to 8 [ 329.600546][ T8091] squashfs: Unknown parameter '¿A¢8ôòw¦m' [ 337.819550][ T8153] unsupported nlmsg_type 40 [ 339.251474][ T8172] ubi0: attaching mtd0 [ 339.271951][ T8172] ubi0: scanning is finished [ 339.276646][ T8172] ubi0: empty MTD device detected [ 339.317133][ T6998] Bluetooth: hci4: adv larger than maximum supported [ 339.317245][ T6998] Bluetooth: hci4: Malformed LE Event: 0x0d [ 339.500115][ T8172] ubi0: attached mtd0 (name "mtdram test device", size 0 MiB) [ 339.507868][ T8172] ubi0: PEB size: 4096 bytes (4 KiB), LEB size: 3968 bytes [ 339.515240][ T8172] ubi0: min./max. I/O unit sizes: 1/64, sub-page size 1 [ 339.522526][ T8172] ubi0: VID header offset: 64 (aligned 64), data offset: 128 [ 339.530050][ T8172] ubi0: good PEBs: 32, bad PEBs: 0, corrupted PEBs: 0 [ 339.536933][ T8172] ubi0: user volume: 0, internal volumes: 1, max. volumes count: 23 [ 339.545068][ T8172] ubi0: max/mean erase counter: 0/0, WL threshold: 4096, image sequence number: 3707049002 [ 339.555282][ T8172] ubi0: available PEBs: 28, total reserved PEBs: 4, PEBs reserved for bad PEB handling: 0 [ 339.584215][ T8175] ubi0: background thread "ubi_bgt0d" started, PID 8175 [ 340.326993][ T8181] xt_cgroup: invalid path, errno=-2 [ 341.229976][ T8193] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 341.433434][ T8193] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 341.500411][ T8193] bond0 (unregistering): Released all slaves [ 341.502720][ T8204] loop3: detected capacity change from 0 to 512 [ 341.517905][ T8204] EXT4-fs: Ignoring removed oldalloc option [ 341.531508][ T8204] EXT4-fs: Invalid want_extra_isize 7 [ 343.384797][ T8211] fuse: Bad value for 'fd' [ 343.564903][ T8220] loop4: detected capacity change from 0 to 512 [ 343.610999][ T8220] EXT4-fs: Ignoring removed mblk_io_submit option [ 343.630520][ T8222] loop3: detected capacity change from 0 to 1024 [ 343.668106][ T8220] EXT4-fs (loop4): mounting ext3 file system using the ext4 subsystem [ 344.382986][ T8229] xt_cgroup: invalid path, errno=-2 [ 344.390360][ T8220] EXT4-fs error (device loop4): ext4_iget_extra_inode:4752: inode #15: comm syz.4.475: corrupted in-inode xattr: e_value size too large [ 345.120347][ T8220] EXT4-fs error (device loop4): ext4_orphan_get:1413: comm syz.4.475: couldn't read orphan inode 15 (err -117) [ 345.262268][ T8220] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 347.528275][ T8249] xt_l2tp: wrong L2TP version: 0 [ 347.538208][ T8249] xt_TPROXY: Can be used only with -p tcp or -p udp [ 350.909371][ T6222] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 351.912125][ T8294] vlan2: entered allmulticast mode [ 351.917493][ T8294] bond0: entered allmulticast mode [ 351.922755][ T8294] bond_slave_0: entered allmulticast mode [ 351.929756][ T8294] bond_slave_1: entered allmulticast mode [ 354.072062][ T8314] Process accounting resumed [ 362.716729][ T6997] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 362.728894][ T60] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 362.771356][ T6997] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 362.780193][ T6997] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 362.788421][ T6997] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 362.797088][ T6997] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 362.805687][ T6997] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 362.949863][ T8380] rxe_eth0 speed is unknown, defaulting to 1000 [ 363.086293][ T60] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 363.299797][ T8394] loop3: detected capacity change from 0 to 1024 [ 363.645994][ T8394] Quota error (device loop3): do_check_range: Getting block 64 out of range 1-5 [ 363.655711][ T8394] Quota error (device loop3): qtree_read_dquot: Can't read quota structure for id 0 [ 363.665481][ T8394] EXT4-fs error (device loop3): ext4_acquire_dquot:6949: comm syz.3.505: Failed to acquire dquot type 0 [ 363.821734][ T8394] EXT4-fs error (device loop3): mb_free_blocks:1970: group 0, inode 13: block 160:freeing already freed block (bit 10); block bitmap corrupt. [ 364.027642][ T8394] EXT4-fs (loop3): 1 truncate cleaned up [ 364.034673][ T8394] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 364.080039][ T60] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 364.109678][ T8393] fuse: Bad value for 'fd' [ 364.326907][ T5784] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 364.368989][ T60] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 364.939068][ T52] Bluetooth: hci0: command tx timeout [ 365.516213][ T60] tipc: Disabling bearer [ 365.556434][ T60] tipc: Left network mode [ 365.610339][ T8380] chnl_net:caif_netlink_parms(): no params data found [ 366.236003][ T8380] bridge0: port 1(bridge_slave_0) entered blocking state [ 366.268107][ T8380] bridge0: port 1(bridge_slave_0) entered disabled state [ 366.275403][ T8380] bridge_slave_0: entered allmulticast mode [ 366.306253][ T8380] bridge_slave_0: entered promiscuous mode [ 366.405890][ T8380] bridge0: port 2(bridge_slave_1) entered blocking state [ 366.419733][ T8380] bridge0: port 2(bridge_slave_1) entered disabled state [ 366.439961][ T8380] bridge_slave_1: entered allmulticast mode [ 366.458075][ T8380] bridge_slave_1: entered promiscuous mode [ 366.842869][ T8380] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 366.855926][ T8380] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 366.971706][ T8445] 9pnet_fd: Insufficient options for proto=fd [ 367.014558][ T52] Bluetooth: hci0: command tx timeout [ 367.542844][ T8380] team0: Port device team_slave_0 added [ 367.571038][ T8380] team0: Port device team_slave_1 added [ 367.871981][ T8380] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 367.901372][ T8380] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 367.947472][ T8380] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 368.054419][ T8456] Invalid ELF header magic: != ELF [ 368.858540][ T8380] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 368.872784][ T8380] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 368.939651][ T8380] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 369.037448][ T52] Bluetooth: hci0: command tx timeout [ 369.286134][ T8473] capability: warning: `syz.0.513' uses deprecated v2 capabilities in a way that may be insecure [ 371.501322][ T52] Bluetooth: hci0: command tx timeout [ 371.611319][ T8380] hsr_slave_0: entered promiscuous mode [ 371.734257][ T8380] hsr_slave_1: entered promiscuous mode [ 371.778092][ T8380] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 371.804066][ T8380] Cannot create hsr debugfs directory [ 372.084692][ T8495] loop4: detected capacity change from 0 to 512 [ 372.128542][ T8495] EXT4-fs: Ignoring removed nomblk_io_submit option [ 372.153363][ T8499] loop3: detected capacity change from 0 to 512 [ 372.158686][ T8495] EXT4-fs: journaled quota format not specified [ 373.125274][ T60] hsr_slave_0: left promiscuous mode [ 373.145381][ T60] hsr_slave_1: left promiscuous mode [ 374.476650][ T60] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 374.503038][ T60] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 374.529472][ T60] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 374.554304][ T60] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 374.593732][ T60] bridge_slave_1: left allmulticast mode [ 374.609445][ T60] bridge_slave_1: left promiscuous mode [ 374.615347][ T60] bridge0: port 2(bridge_slave_1) entered disabled state [ 374.655732][ T60] bridge_slave_0: left allmulticast mode [ 374.664146][ T60] bridge_slave_0: left promiscuous mode [ 374.687677][ T60] bridge0: port 1(bridge_slave_0) entered disabled state [ 374.823703][ T60] veth1_macvtap: left promiscuous mode [ 374.850124][ T60] veth0_macvtap: left promiscuous mode [ 374.868253][ T60] veth1_vlan: left promiscuous mode [ 374.877463][ T60] veth0_vlan: left promiscuous mode [ 377.910578][ T8536] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 378.360411][ T8540] overlayfs: failed to resolve './bus': -2 [ 378.375865][ T8540] [ 378.378240][ T8540] ====================================================== [ 378.385263][ T8540] WARNING: possible circular locking dependency detected [ 378.392297][ T8540] syzkaller #0 Not tainted [ 378.396714][ T8540] ------------------------------------------------------ [ 378.403731][ T8540] syz.3.527/8540 is trying to acquire lock: [ 378.409625][ T8540] ffffffff8eb20350 (&subsys->su_mutex){+.+.}-{3:3}, at: configfs_rmdir+0x63c/0x980 [ 378.419085][ T8540] [ 378.419085][ T8540] but task is already holding lock: [ 378.426450][ T8540] ffff88807ab1aef0 (&sb->s_type->i_mutex_key#26){++++}-{3:3}, at: vfs_rmdir+0xee/0x4b0 [ 378.436161][ T8540] [ 378.436161][ T8540] which lock already depends on the new lock. [ 378.436161][ T8540] [ 378.446567][ T8540] [ 378.446567][ T8540] the existing dependency chain (in reverse order) is: [ 378.455596][ T8540] [ 378.455596][ T8540] -> #2 (&sb->s_type->i_mutex_key#26){++++}-{3:3}: [ 378.464308][ T8540] down_write+0x97/0x200 [ 378.469196][ T8540] configfs_depend_item_unlocked+0x157/0x460 [ 378.475709][ T8540] usbg_make_tpg+0x1e1/0x550 [ 378.480923][ T8540] target_fabric_make_tpg+0xa4/0x6d0 [ 378.486763][ T8540] configfs_mkdir+0x515/0x9e0 [ 378.491970][ T8540] vfs_mkdir+0x2a5/0x470 [ 378.496739][ T8540] do_mkdirat+0x1dc/0x450 [ 378.501599][ T8540] __x64_sys_mkdirat+0x89/0xa0 [ 378.506890][ T8540] do_syscall_64+0x55/0xb0 [ 378.511913][ T8540] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 378.518492][ T8540] [ 378.518492][ T8540] -> #1 (tpg_instances_lock){+.+.}-{3:3}: [ 378.526408][ T8540] __mutex_lock+0x135/0xc80 [ 378.531504][ T8540] usbg_make_tpg+0xf9/0x550 [ 378.536539][ T8540] target_fabric_make_tpg+0xa4/0x6d0 [ 378.542446][ T8540] configfs_mkdir+0x515/0x9e0 [ 378.547654][ T8540] vfs_mkdir+0x2a5/0x470 [ 378.552424][ T8540] do_mkdirat+0x1dc/0x450 [ 378.557283][ T8540] __x64_sys_mkdirat+0x89/0xa0 [ 378.562579][ T8540] do_syscall_64+0x55/0xb0 [ 378.567512][ T8540] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 378.573948][ T8540] [ 378.573948][ T8540] -> #0 (&subsys->su_mutex){+.+.}-{3:3}: [ 378.581748][ T8540] __lock_acquire+0x3a07/0x7eb0 [ 378.587169][ T8540] lock_acquire+0x19e/0x420 [ 378.592178][ T8540] __mutex_lock+0x135/0xc80 [ 378.597199][ T8540] configfs_rmdir+0x63c/0x980 [ 378.602388][ T8540] vfs_rmdir+0x352/0x4b0 [ 378.607142][ T8540] do_rmdir+0x29f/0x590 [ 378.611832][ T8540] __x64_sys_rmdir+0x49/0x50 [ 378.616929][ T8540] do_syscall_64+0x55/0xb0 [ 378.621854][ T8540] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 378.628273][ T8540] [ 378.628273][ T8540] other info that might help us debug this: [ 378.628273][ T8540] [ 378.638480][ T8540] Chain exists of: [ 378.638480][ T8540] &subsys->su_mutex --> tpg_instances_lock --> &sb->s_type->i_mutex_key#26 [ 378.638480][ T8540] [ 378.653000][ T8540] Possible unsafe locking scenario: [ 378.653000][ T8540] [ 378.660448][ T8540] CPU0 CPU1 [ 378.665800][ T8540] ---- ---- [ 378.671143][ T8540] lock(&sb->s_type->i_mutex_key#26); [ 378.676592][ T8540] lock(tpg_instances_lock); [ 378.683777][ T8540] lock(&sb->s_type->i_mutex_key#26); [ 378.691774][ T8540] lock(&subsys->su_mutex); [ 378.696375][ T8540] [ 378.696375][ T8540] *** DEADLOCK *** [ 378.696375][ T8540] [ 378.704506][ T8540] 3 locks held by syz.3.527/8540: [ 378.709528][ T8540] #0: ffff888018d5e418 (sb_writers#19){.+.+}-{0:0}, at: mnt_want_write+0x41/0x90 [ 378.718764][ T8540] #1: ffff888148f02ef0 (&default_group_class[depth - 1]#9/1){+.+.}-{3:3}, at: do_rmdir+0x1c6/0x590 [ 378.729543][ T8540] #2: ffff88807ab1aef0 (&sb->s_type->i_mutex_key#26){++++}-{3:3}, at: vfs_rmdir+0xee/0x4b0 [ 378.739619][ T8540] [ 378.739619][ T8540] stack backtrace: [ 378.745501][ T8540] CPU: 0 PID: 8540 Comm: syz.3.527 Not tainted syzkaller #0 [ 378.752917][ T8540] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 378.762973][ T8540] Call Trace: [ 378.766316][ T8540] [ 378.769289][ T8540] dump_stack_lvl+0x18c/0x250 [ 378.774010][ T8540] ? load_image+0x420/0x420 [ 378.778542][ T8540] ? show_regs_print_info+0x20/0x20 [ 378.783730][ T8540] ? print_circular_bug+0x12b/0x1a0 [ 378.788937][ T8540] check_noncircular+0x2fc/0x400 [ 378.793946][ T8540] ? print_deadlock_bug+0x5d0/0x5d0 [ 378.799162][ T8540] ? lockdep_lock+0xf5/0x230 [ 378.803755][ T8540] ? _find_first_zero_bit+0xd6/0x100 [ 378.809049][ T8540] __lock_acquire+0x3a07/0x7eb0 [ 378.813892][ T8540] ? verify_lock_unused+0x140/0x140 [ 378.819073][ T8540] ? trace_irq_disable+0x37/0xe0 [ 378.824026][ T8540] ? verify_lock_unused+0x140/0x140 [ 378.829208][ T8540] lock_acquire+0x19e/0x420 [ 378.833805][ T8540] ? configfs_rmdir+0x63c/0x980 [ 378.838639][ T8540] ? __might_sleep+0xe0/0xe0 [ 378.843232][ T8540] ? read_lock_is_recursive+0x20/0x20 [ 378.848589][ T8540] __mutex_lock+0x135/0xc80 [ 378.853092][ T8540] ? configfs_rmdir+0x63c/0x980 [ 378.857926][ T8540] ? configfs_rmdir+0x63c/0x980 [ 378.862769][ T8540] ? mutex_lock_nested+0x20/0x20 [ 378.867698][ T8540] ? __lock_acquire+0x7eb0/0x7eb0 [ 378.872725][ T8540] ? lockref_put_or_lock+0x72/0xb0 [ 378.877850][ T8540] ? dput+0x3b/0x1e0 [ 378.881732][ T8540] ? dput+0x3b/0x1e0 [ 378.885619][ T8540] configfs_rmdir+0x63c/0x980 [ 378.890287][ T8540] vfs_rmdir+0x352/0x4b0 [ 378.894522][ T8540] do_rmdir+0x29f/0x590 [ 378.898674][ T8540] ? __check_object_size+0x4fc/0xa40 [ 378.903943][ T8540] ? d_delete_notify+0x150/0x150 [ 378.908864][ T8540] ? getname_flags+0x20a/0x500 [ 378.913608][ T8540] __x64_sys_rmdir+0x49/0x50 [ 378.918185][ T8540] do_syscall_64+0x55/0xb0 [ 378.922688][ T8540] ? clear_bhb_loop+0x40/0x90 [ 378.927372][ T8540] ? clear_bhb_loop+0x40/0x90 [ 378.932041][ T8540] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 378.937921][ T8540] RIP: 0033:0x7f05ded9f559 [ 378.942388][ T8540] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 378.962026][ T8540] RSP: 002b:00007f05dfb81028 EFLAGS: 00000246 ORIG_RAX: 0000000000000054 [ 378.970443][ T8540] RAX: ffffffffffffffda RBX: 00007f05df026270 RCX: 00007f05ded9f559 [ 378.978425][ T8540] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000200000000280 [ 378.986381][ T8540] RBP: 00007f05dee36b20 R08: 0000000000000000 R09: 0000000000000000 [ 378.994348][ T8540] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 379.002316][ T8540] R13: 00007f05df026308 R14: 00007f05df026270 R15: 00007ffedd171148 [ 379.010285][ T8540] SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 379.164635][ T1294] ieee802154 phy0 wpan0: encryption failed: -22 [ 379.181558][ T1294] ieee802154 phy1 wpan1: encryption failed: -22 [ 380.001622][ T60] team0 (unregistering): Port device team_slave_1 removed [ 380.042300][ T60] team0 (unregistering): Port device team_slave_0 removed [ 380.079010][ T60] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 380.119619][ T60] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 380.374166][ T60] team0 (unregistering): Port device bridge0 removed [ 380.401798][ T60] bond0 (unregistering): Released all slaves [ 380.569618][ T8539] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 380.575677][ T8539] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 380.615539][ T8539] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 380.634914][ T8539] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 380.651626][ T8539] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 381.061459][ T8539] tipc: Resetting bearer [ 381.129917][ T8539] syz_tun (unregistering): left allmulticast mode [ 381.137174][ T8539] tipc: Disabling bearer [ 381.180109][ T60] IPVS: stop unused estimator thread 0... [ 381.300976][ T60] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 381.365998][ T60] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 381.415893][ T60] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 381.486145][ T60] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 381.637836][ T60] tipc: Left network mode [ 381.714302][ T60] bond2: (slave ip6gretap1): Removing an active aggregator [ 381.722256][ T11] bond2: Warning: Found an uninitialized port [ 381.728710][ T60] bond2: (slave ip6gretap1): Releasing backup interface [ 381.740452][ T60] ip6gretap1 (unregistering): left allmulticast mode [ 382.579848][ T60] hsr_slave_0: left promiscuous mode [ 382.588405][ T60] hsr_slave_1: left promiscuous mode [ 382.602841][ T60] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 382.613256][ T60] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 382.623827][ T60] bridge_slave_1: left allmulticast mode [ 382.630434][ T60] bridge_slave_1: left promiscuous mode [ 382.636144][ T60] bridge0: port 2(bridge_slave_1) entered disabled state [ 382.649225][ T60] bridge_slave_0: left allmulticast mode [ 382.654890][ T60] bridge_slave_0: left promiscuous mode [ 382.667970][ T60] bridge0: port 1(bridge_slave_0) entered disabled state [ 382.682150][ T60] hsr_slave_0: left promiscuous mode [ 382.689016][ T60] hsr_slave_1: left promiscuous mode [ 382.695234][ T60] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 382.706474][ T60] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 382.715031][ T60] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 382.723652][ T60] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 382.731778][ T60] bridge_slave_1: left allmulticast mode [ 382.740159][ T60] bridge_slave_1: left promiscuous mode [ 382.745872][ T60] bridge0: port 2(bridge_slave_1) entered disabled state [ 382.754969][ T60] bridge_slave_0: left allmulticast mode [ 382.761267][ T60] bridge_slave_0: left promiscuous mode [ 382.767145][ T60] bridge0: port 1(bridge_slave_0) entered disabled state [ 382.781265][ T60] veth1_macvtap: left promiscuous mode [ 382.786908][ T60] veth0_macvtap: left promiscuous mode [ 382.795497][ T60] veth1_vlan: left promiscuous mode [ 382.914927][ T60] team0 (unregistering): Port device team_slave_1 removed [ 382.926346][ T60] team0 (unregistering): Port device team_slave_0 removed [ 382.961219][ T60] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 382.988622][ T60] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 383.036246][ T60] bond0 (unregistering): Released all slaves [ 383.166531][ T60] bond2 (unregistering): Released all slaves [ 383.180970][ T60] bond1 (unregistering): Released all slaves [ 383.232856][ T60] team0 (unregistering): Port device vlan0 removed [ 383.330290][ T60] team0 (unregistering): Port device team_slave_1 removed [ 383.357591][ T60] team0 (unregistering): Port device team_slave_0 removed