last executing test programs: 28m28.898206081s ago: executing program 32 (id=100): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x7) fcntl$getownex(0xffffffffffffffff, 0x10, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x19, 0x4, 0x8, 0x8, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r4}, 0x10) r5 = socket$packet(0x11, 0x0, 0x300) setsockopt$SO_ATTACH_FILTER(r5, 0x1, 0x1a, 0x0, 0x0) r6 = bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000440)=@base={0x12, 0x42, 0x8, 0x2, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r7 = socket$inet6_udp(0xa, 0x2, 0x0) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000280)={r6, &(0x7f00000004c0), &(0x7f0000000400)=@udp6=r7}, 0x3f) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f00000007c0)={r6, &(0x7f0000000000), &(0x7f0000000780)=@udp6=r7}, 0x20) bpf$MAP_UPDATE_ELEM(0x4, &(0x7f0000000100)={r6, &(0x7f0000000000), &(0x7f00000000c0)=@udp6}, 0x20) 27m35.699367689s ago: executing program 33 (id=176): prlimit64(0x0, 0xe, &(0x7f0000000280)={0x7, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_TASK_PERF_EVENTS_ENABLE(0x20) r3 = socket$can_raw(0x1d, 0x3, 0x1) setsockopt$CAN_RAW_ERR_FILTER(r3, 0x65, 0x2, &(0x7f0000000400)=0x2, 0x4) bind$can_raw(r3, &(0x7f0000000040), 0x10) bind$can_raw(r3, &(0x7f0000000480), 0x10) mkdirat(0xffffffffffffffff, &(0x7f0000000180)='./bus\x00', 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)=ANY=[@ANYBLOB="480000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="00000000000000002800128009000100626f6e6400000000180002801400088008"], 0x48}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) sendmmsg$inet(r4, &(0x7f0000005200)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) quotactl_fd$Q_QUOTAON(r4, 0xffffffff80000200, 0x0, &(0x7f0000000100)='./bus\x00') renameat2(0xffffffffffffffff, &(0x7f0000000080)='./bus\x00', 0xffffffffffffffff, 0x0, 0x0) mount$cgroup(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f0000000040)={[{@name={'name', 0x3d, 'cgrou-\x00'}}]}) 21m33.57887796s ago: executing program 34 (id=648): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) socketpair$unix(0x1, 0x3, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket$inet6(0xa, 0x2, 0x0) setsockopt$SO_BINDTODEVICE(r3, 0x1, 0x19, &(0x7f0000000000)='veth1_virt_wifi\x00', 0x10) connect$inet6(r3, &(0x7f0000004540)={0xa, 0x0, 0x0, @dev}, 0x1c) sendmmsg$inet6(r3, &(0x7f0000000100), 0x40000c4, 0x7ffffff7) r4 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000240)={'syz_tun\x00', 0x0}) bind$packet(r4, &(0x7f0000000300)={0x11, 0x0, r5, 0x1, 0x0, 0x6, @remote}, 0x14) r6 = socket$packet(0x11, 0x3, 0x300) r7 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='net/ptype\x00') getsockname$packet(r6, &(0x7f0000000380)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) preadv(r7, &(0x7f0000000000)=[{&(0x7f0000000480)=""/187, 0xbb}], 0x1, 0x4c, 0x0) r8 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) ioctl$EXT4_IOC_MOVE_EXT(r8, 0x8004587d, 0x0) quotactl$Q_SYNC(0x0, 0x0, 0x0, 0x0) symlink(&(0x7f0000000080)='.\x00', 0x0) 21m1.013278336s ago: executing program 3 (id=720): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeea, 0x8031, 0xffffffffffffffff, 0x40000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000380)=@base={0x17, 0x0, 0x0, 0x8000, 0x2808, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x4, 0x0, 0x0, @void, @value, @void, @value}, 0x50) bpf$PROG_LOAD(0x5, 0x0, 0x0) syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) r3 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, 0x0) sendmsg$NL80211_CMD_NEW_KEY(r3, 0x0, 0x6042001) bind$bt_sco(0xffffffffffffffff, 0x0, 0x0) bind$bt_hci(0xffffffffffffffff, 0x0, 0x0) openat$binderfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000140), r4) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, 0x0) sendmsg$IEEE802154_SET_MACPARAMS(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)={0x1c, r5, 0x1, 0x70bd27, 0x25dfdbfb, {}, [@IEEE802154_ATTR_DEV_INDEX={0x8}]}, 0x1c}}, 0x4000000) 20m59.066047317s ago: executing program 3 (id=724): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) syz_clone(0x0, 0x0, 0xfffffe11, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) r2 = open(0x0, 0x0, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x0, 0x0, &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r2, 0x0, 0x0, 0x0, 0x0, 0xffffffff, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={0x0, r3}, 0x18) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) setsockopt$packet_int(0xffffffffffffffff, 0x107, 0xf, &(0x7f0000000000)=0xf3e, 0x4) sendto$packet(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) io_setup(0x7, &(0x7f0000000280)=0x0) r5 = openat$sysfs(0xffffff9c, &(0x7f00000000c0)='/sys/kernel/fscaps', 0x42, 0x0) io_submit(r4, 0x1, &(0x7f0000000500)=[&(0x7f0000000040)={0x0, 0x4000, 0x0, 0x1, 0x0, r5, 0x0}]) syz_open_dev$tty1(0xc, 0x4, 0x1) r6 = syz_open_dev$tty1(0xc, 0x4, 0x1) r7 = dup(r6) write$UHID_INPUT(r7, &(0x7f0000001980)={0x9, {"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", 0x1000}}, 0x1006) 20m55.471239096s ago: executing program 3 (id=727): r0 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(r0, 0x0, &(0x7f00000000c0)=0x0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r2) sendmsg$NFC_CMD_DEV_UP(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)={0x1c, r3, 0x1, 0x123, 0x234, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r1}]}, 0x1c}}, 0x0) read$nci(r0, &(0x7f0000000200)=""/100, 0x64) write$nci(r0, &(0x7f0000000280)=@NCI_OP_CORE_RESET_RSP, 0x6) read$nci(r0, &(0x7f00000002c0)=""/100, 0x64) write$nci(r0, &(0x7f0000000340)=@NCI_OP_CORE_INIT_RSP, 0x14) read$nci(r0, &(0x7f0000000380)=""/100, 0x64) write$nci(r0, &(0x7f0000000400)=@NCI_OP_RF_DISCOVER_MAP_RSP, 0x4) sendmsg$NFC_CMD_START_POLL(r2, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000480)={&(0x7f00000004c0)={0x24, r3, 0x1, 0x123, 0x234, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r1}, @NFC_ATTR_PROTOCOLS={0x8, 0x3, 0xffffffff}]}, 0x24}}, 0x0) read$nci(r0, &(0x7f0000000500)=""/100, 0x64) write$nci(r0, &(0x7f0000000580)=@NCI_OP_CORE_SET_CONFIG_RSP, 0x5) read$nci(r0, &(0x7f00000005c0)=""/100, 0x64) read$nci(r0, &(0x7f0000000680)=""/100, 0x64) write$nci(r0, &(0x7f0000000700)=@NCI_OP_RF_DISCOVER_RSP, 0x4) write$nci(r0, &(0x7f0000000740)=@NCI_OP_RF_DISCOVER_NTF={0x1, 0x0, 0x3, 0x3, 0x0, @b={0x0, 0x1, 0x1, 0x1, {0x1, "aa"}}}, 0xa) sendmsg$NFC_CMD_ACTIVATE_TARGET(r2, &(0x7f0000000780)={0x0, 0x0, &(0x7f00000007c0)={&(0x7f0000000800)={0x2c, r3, 0x1, 0x123, 0x234, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r1}, @NFC_ATTR_TARGET_INDEX={0x8}, @NFC_ATTR_PROTOCOLS={0x8, 0x3, 0x1}]}, 0x2c}}, 0x0) read$nci(r0, &(0x7f0000000840)=""/100, 0x64) write$nci(r0, &(0x7f00000008c0)=@NCI_OP_CORE_CONN_CREATE_RSP={0x0, 0x0, 0x2, 0x4, 0x0, {0x0, 0x0, 0x0, 0x1}}, 0x7) 20m49.000402721s ago: executing program 3 (id=738): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r3}, 0x10) r4 = syz_open_procfs(0x0, 0x0) fchdir(r4) mount(0x0, &(0x7f0000000080)='.\x00', &(0x7f0000000000)='proc\x00', 0x0, 0x0) r5 = inotify_init1(0x0) r6 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$SNDCTL_TMR_CONTINUE(0xffffffffffffffff, 0x5404) ioctl$SNDRV_CTL_IOCTL_ELEM_UNLOCK(r6, 0x40186f40, &(0x7f0000000080)={0x0, 0x0, 0x7}) fcntl$setown(r5, 0x8, 0xffffffffffffffff) fcntl$getownex(r5, 0x10, &(0x7f0000000480)={0x0, 0x0}) r8 = syz_open_procfs(r7, 0x0) ioctl$FS_IOC_GET_ENCRYPTION_KEY_STATUS(r8, 0x6612, 0x0) mkdir(0x0, 0x0) 20m47.899075157s ago: executing program 3 (id=740): socketpair$unix(0x1, 0x2, 0x0, 0x0) r0 = accept4$alg(0xffffffffffffffff, 0x0, 0x0, 0x0) getsockopt$bt_hci(r0, 0x0, 0x3, 0x0, 0x0) connect$unix(0xffffffffffffffff, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x100008b}, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000180)=0x6) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) syz_clone(0x0, 0x0, 0xfffffe11, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) bpf$MAP_CREATE(0x0, 0x0, 0x48) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0xf, 0x0, 0x0) r3 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) setsockopt$bt_l2cap_L2CAP_LM(r3, 0x6, 0x3, &(0x7f0000000040)=0x21, 0x4) connect$bt_l2cap(r3, &(0x7f0000000000)={0x1f, 0x1, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}}, 0xe) listen(0xffffffffffffffff, 0x0) bpf$MAP_UPDATE_ELEM(0x2, 0x0, 0x0) 20m44.686986484s ago: executing program 3 (id=742): r0 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(r0, 0x0, &(0x7f00000000c0)=0x0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r2) sendmsg$NFC_CMD_DEV_UP(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)={0x1c, r3, 0x1, 0x123, 0x234, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r1}]}, 0x1c}}, 0x0) read$nci(r0, &(0x7f0000000200)=""/100, 0x64) write$nci(r0, &(0x7f0000000280)=@NCI_OP_CORE_RESET_RSP, 0x6) read$nci(r0, &(0x7f00000002c0)=""/100, 0x64) write$nci(r0, &(0x7f0000000340)=@NCI_OP_CORE_INIT_RSP, 0x14) read$nci(r0, &(0x7f0000000380)=""/100, 0x64) write$nci(r0, &(0x7f0000000400)=@NCI_OP_RF_DISCOVER_MAP_RSP, 0x4) sendmsg$NFC_CMD_START_POLL(r2, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000480)={&(0x7f00000004c0)={0x24, r3, 0x1, 0x123, 0x234, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r1}, @NFC_ATTR_PROTOCOLS={0x8, 0x3, 0xffffffff}]}, 0x24}}, 0x0) read$nci(r0, &(0x7f0000000500)=""/100, 0x64) write$nci(r0, &(0x7f0000000580)=@NCI_OP_CORE_SET_CONFIG_RSP, 0x5) write$nci(r0, &(0x7f0000000640)=@NCI_OP_CORE_SET_CONFIG_RSP, 0x5) read$nci(r0, &(0x7f0000000680)=""/100, 0x64) write$nci(r0, &(0x7f0000000700)=@NCI_OP_RF_DISCOVER_RSP, 0x4) write$nci(r0, &(0x7f0000000740)=@NCI_OP_RF_DISCOVER_NTF={0x1, 0x0, 0x3, 0x3, 0x0, @b={0x0, 0x1, 0x1, 0x1, {0x1, "aa"}}}, 0xa) sendmsg$NFC_CMD_ACTIVATE_TARGET(r2, &(0x7f0000000780)={0x0, 0x0, &(0x7f00000007c0)={&(0x7f0000000800)={0x2c, r3, 0x1, 0x123, 0x234, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r1}, @NFC_ATTR_TARGET_INDEX={0x8}, @NFC_ATTR_PROTOCOLS={0x8, 0x3, 0x1}]}, 0x2c}}, 0x0) read$nci(r0, &(0x7f0000000840)=""/100, 0x64) write$nci(r0, &(0x7f00000008c0)=@NCI_OP_CORE_CONN_CREATE_RSP={0x0, 0x0, 0x2, 0x4, 0x0, {0x0, 0x0, 0x0, 0x1}}, 0x7) 20m27.915487005s ago: executing program 35 (id=742): r0 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(r0, 0x0, &(0x7f00000000c0)=0x0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r2) sendmsg$NFC_CMD_DEV_UP(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)={0x1c, r3, 0x1, 0x123, 0x234, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r1}]}, 0x1c}}, 0x0) read$nci(r0, &(0x7f0000000200)=""/100, 0x64) write$nci(r0, &(0x7f0000000280)=@NCI_OP_CORE_RESET_RSP, 0x6) read$nci(r0, &(0x7f00000002c0)=""/100, 0x64) write$nci(r0, &(0x7f0000000340)=@NCI_OP_CORE_INIT_RSP, 0x14) read$nci(r0, &(0x7f0000000380)=""/100, 0x64) write$nci(r0, &(0x7f0000000400)=@NCI_OP_RF_DISCOVER_MAP_RSP, 0x4) sendmsg$NFC_CMD_START_POLL(r2, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000480)={&(0x7f00000004c0)={0x24, r3, 0x1, 0x123, 0x234, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r1}, @NFC_ATTR_PROTOCOLS={0x8, 0x3, 0xffffffff}]}, 0x24}}, 0x0) read$nci(r0, &(0x7f0000000500)=""/100, 0x64) write$nci(r0, &(0x7f0000000580)=@NCI_OP_CORE_SET_CONFIG_RSP, 0x5) write$nci(r0, &(0x7f0000000640)=@NCI_OP_CORE_SET_CONFIG_RSP, 0x5) read$nci(r0, &(0x7f0000000680)=""/100, 0x64) write$nci(r0, &(0x7f0000000700)=@NCI_OP_RF_DISCOVER_RSP, 0x4) write$nci(r0, &(0x7f0000000740)=@NCI_OP_RF_DISCOVER_NTF={0x1, 0x0, 0x3, 0x3, 0x0, @b={0x0, 0x1, 0x1, 0x1, {0x1, "aa"}}}, 0xa) sendmsg$NFC_CMD_ACTIVATE_TARGET(r2, &(0x7f0000000780)={0x0, 0x0, &(0x7f00000007c0)={&(0x7f0000000800)={0x2c, r3, 0x1, 0x123, 0x234, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r1}, @NFC_ATTR_TARGET_INDEX={0x8}, @NFC_ATTR_PROTOCOLS={0x8, 0x3, 0x1}]}, 0x2c}}, 0x0) read$nci(r0, &(0x7f0000000840)=""/100, 0x64) write$nci(r0, &(0x7f00000008c0)=@NCI_OP_CORE_CONN_CREATE_RSP={0x0, 0x0, 0x2, 0x4, 0x0, {0x0, 0x0, 0x0, 0x1}}, 0x7) 15m7.678687359s ago: executing program 5 (id=1223): r0 = shmget$private(0x0, 0x2000, 0x4, &(0x7f0000ffb000/0x2000)=nil) socket$nl_generic(0x10, 0x3, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) getpid() mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = io_uring_setup(0x1690, &(0x7f0000000080)={0x0, 0x9d1, 0x40, 0x2, 0x1de}) io_uring_register$IORING_REGISTER_BUFFERS(r3, 0x0, &(0x7f00000002c0)=[{&(0x7f0000001700)=""/4095, 0x440000}], 0x100000000000011a) io_uring_register$IORING_REGISTER_BUFFERS_UPDATE(r3, 0x10, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0}, 0x20) io_uring_register$IORING_UNREGISTER_BUFFERS(r3, 0x1, 0x0, 0x0) bpf$BPF_LINK_CREATE(0x1c, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff, 0x3, 0x0, @void}, 0x62) socket$inet_tcp(0x2, 0x1, 0x0) socket$l2tp6(0xa, 0x2, 0x73) shmat(r0, &(0x7f0000ffd000/0x1000)=nil, 0x2000) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000600)={&(0x7f0000000000)=@newtaction={0x48, 0x30, 0xb, 0x0, 0x0, {}, [{0x34, 0x1, [@m_skbedit={0x30, 0x1, 0x0, 0x0, {{0xc}, {0x4}, {0x4}, {0xc, 0xa}, {0xc, 0x9, {0xf5}}}}]}]}, 0x48}}, 0x0) 14m54.723836799s ago: executing program 7 (id=1241): write$P9_RVERSION(0xffffffffffffffff, 0x0, 0x15) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x0, 0x0) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000006900000000000001000000940000000fad413e850000000700000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r2}, 0x10) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, &(0x7f00000002c0), 0x0, &(0x7f0000000300)}, 0x10) r3 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={0x0, r3}, 0x18) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) write$cgroup_subtree(0xffffffffffffffff, 0x0, 0x2a) r4 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r4, &(0x7f0000000080)={0x1f, 0xffff, 0x3}, 0x6) write(r4, &(0x7f0000000340)="08000000010000", 0x7) bpf$OBJ_GET_MAP(0x7, 0x0, 0x0) 14m52.79567811s ago: executing program 7 (id=1244): bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x16, 0x0, 0x4, 0xff, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='sys_enter\x00', r0}, 0x10) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f00000006c0)=ANY=[@ANYBLOB="18000000000000000000000095980000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f0ffffffb702000005000000b703000000000000850000007300000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000000)='kfree\x00', r1}, 0x10) r2 = openat$sysfs(0xffffff9c, &(0x7f0000000040)='/sys/kernel/notes', 0x0, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x1, 0x4, 0xfff, 0x5, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1801000000002000000000000000000018190000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000002400000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000580)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='consume_skb\x00', r4}, 0x10) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000300)=@bpf_lsm={0x16, 0x5, &(0x7f0000000040)=@framed={{0x25, 0xa, 0x0, 0x0, 0x0, 0x61, 0x11, 0x51}, [@initr0]}, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x1b, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) finit_module(r2, 0x0, 0x0) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r6, &(0x7f00000003c0)=ANY=[@ANYBLOB="1500000065ffff01840011080039503230303048f84db2f5c4b6d936bcabae3eae01ee50a26c22cbdae778c069ac04a533d4060000006b405cf47557f55634b2c64c7a4302efb01551f03ebb66368dd30a7e3037f9c6191cef7b888ed2746280d0604493c282bcf56038bdec2dc6d69c9d992548d766759d4a4f1cd39707b81bcd8021c1ad68854bac313c43aaa8f855dcd11b421171b85772eaa2d3d945fab31bd7d6583164d282552b19ad4d8cfbf5966f7bd7186580e5578cd6be38b3eb8cc3d0ebc757ab06f007bcbc9b9cc39798601d26a16bc78a3b847be1a453ffde26b8cb28682c99c0d9ef0da0e4ba9cbe301a8bf2a756685bfb"], 0x15) r7 = dup(r6) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xb, &(0x7f0000000200)=ANY=[@ANYRES8=r7], &(0x7f0000000040)='GPL\x00', 0x5, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r8 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) socket$packet(0x11, 0x3, 0x300) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000200)='fib_table_lookup\x00'}, 0x10) socket$inet_udp(0x2, 0x2, 0x0) ioctl$LOOP_CTL_REMOVE(r8, 0x4c81, 0xb) 14m52.360126642s ago: executing program 36 (id=1223): r0 = shmget$private(0x0, 0x2000, 0x4, &(0x7f0000ffb000/0x2000)=nil) socket$nl_generic(0x10, 0x3, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) getpid() mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = io_uring_setup(0x1690, &(0x7f0000000080)={0x0, 0x9d1, 0x40, 0x2, 0x1de}) io_uring_register$IORING_REGISTER_BUFFERS(r3, 0x0, &(0x7f00000002c0)=[{&(0x7f0000001700)=""/4095, 0x440000}], 0x100000000000011a) io_uring_register$IORING_REGISTER_BUFFERS_UPDATE(r3, 0x10, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0}, 0x20) io_uring_register$IORING_UNREGISTER_BUFFERS(r3, 0x1, 0x0, 0x0) bpf$BPF_LINK_CREATE(0x1c, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff, 0x3, 0x0, @void}, 0x62) socket$inet_tcp(0x2, 0x1, 0x0) socket$l2tp6(0xa, 0x2, 0x73) shmat(r0, &(0x7f0000ffd000/0x1000)=nil, 0x2000) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000600)={&(0x7f0000000000)=@newtaction={0x48, 0x30, 0xb, 0x0, 0x0, {}, [{0x34, 0x1, [@m_skbedit={0x30, 0x1, 0x0, 0x0, {{0xc}, {0x4}, {0x4}, {0xc, 0xa}, {0xc, 0x9, {0xf5}}}}]}]}, 0x48}}, 0x0) 14m49.434596828s ago: executing program 7 (id=1250): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) semget$private(0x0, 0x2, 0x0) syz_emit_vhci(0x0, 0x22) syz_emit_vhci(0x0, 0xc) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) mkdirat(0xffffffffffffff9c, 0x0, 0x0) connect$inet(0xffffffffffffffff, 0x0, 0x0) getsockopt$sock_buf(0xffffffffffffffff, 0x1, 0x1c, 0x0, &(0x7f00000000c0)) write$FUSE_INIT(0xffffffffffffffff, 0x0, 0x0) syz_mount_image$minix(&(0x7f0000000340), &(0x7f0000000040)='./file2\x00', 0x1200808, &(0x7f0000000100)=ANY=[@ANYRES64=0x0, @ANYRES16, @ANYRES64, @ANYRESHEX, @ANYRES8, @ANYRES16], 0x1, 0x1e5, &(0x7f0000000400)="$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") mkdir(&(0x7f0000000100)='./file1\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) fcntl$notify(0xffffffffffffffff, 0x402, 0x29) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000400)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) 14m46.515080474s ago: executing program 7 (id=1261): ioctl$SNDRV_TIMER_IOCTL_SELECT(0xffffffffffffffff, 0x40345410, &(0x7f0000000400)={{0x1}}) ioctl$SNDRV_TIMER_IOCTL_PAUSE(0xffffffffffffffff, 0x54a3) bpf$MAP_CREATE(0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000006900000000000001000000940000000fad413e8500000007"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={0x0, r0}, 0x10) syz_mount_image$ext4(&(0x7f00000004c0)='ext4\x00', &(0x7f0000000500)='./bus\x00', 0x0, &(0x7f0000000240), 0x21, 0x4a6, &(0x7f0000000a40)="$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") r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mkdirat(0xffffffffffffff9c, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) socket(0x0, 0x0, 0x0) getpid() sendmmsg$unix(r0, &(0x7f0000001500)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f00000013c0)=[@rights={{0x10}}], 0x10}}], 0x1, 0x0) setsockopt$inet6_buf(0xffffffffffffffff, 0x29, 0x0, &(0x7f00000000c0)="0bbb268dd6ffa80800000000000000000000210d0000aaa8fa017242ba9380d440fe0000000000", 0x27) r4 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r4) ptrace$getregset(0x4204, r4, 0x202, &(0x7f0000000340)={&(0x7f00000002c0)=""/96, 0x60}) 14m41.446561901s ago: executing program 7 (id=1259): openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x20000, 0x0) ioctl$KVM_CREATE_IRQCHIP(0xffffffffffffffff, 0xae60) lstat(&(0x7f0000000200)='./file0\x00', &(0x7f0000000240)) r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000680)={'bridge0\x00'}) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0xfffffffffffffffe}, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x1) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) syz_open_dev$dri(&(0x7f0000000140), 0x1, 0x0) syz_open_dev$dri(&(0x7f00000000c0), 0x1ff, 0x0) 14m35.111030705s ago: executing program 7 (id=1267): r0 = shmget$private(0x0, 0x2000, 0x4, &(0x7f0000ffb000/0x2000)=nil) socket$nl_generic(0x10, 0x3, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r4 = io_uring_setup(0x1690, &(0x7f0000000080)={0x0, 0x9d1, 0x40, 0x2, 0x1de}) io_uring_register$IORING_REGISTER_BUFFERS(r4, 0x0, &(0x7f00000002c0)=[{&(0x7f0000001700)=""/4095, 0x440000}], 0x100000000000011a) io_uring_register$IORING_REGISTER_BUFFERS_UPDATE(r4, 0x10, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0}, 0x20) io_uring_register$IORING_UNREGISTER_BUFFERS(r4, 0x1, 0x0, 0x0) bpf$BPF_LINK_CREATE(0x1c, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff, 0x3, 0x0, @void}, 0x62) socket$inet_tcp(0x2, 0x1, 0x0) socket$l2tp6(0xa, 0x2, 0x73) shmat(r0, &(0x7f0000ffd000/0x1000)=nil, 0x2000) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r5, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000600)={&(0x7f0000000000)=@newtaction={0x48, 0x30, 0xb, 0x0, 0x0, {}, [{0x34, 0x1, [@m_skbedit={0x30, 0x1, 0x0, 0x0, {{0xc}, {0x4}, {0x4}, {0xc, 0xa}, {0xc, 0x9, {0xf5}}}}]}]}, 0x48}}, 0x0) 14m32.928999007s ago: executing program 37 (id=1267): r0 = shmget$private(0x0, 0x2000, 0x4, &(0x7f0000ffb000/0x2000)=nil) socket$nl_generic(0x10, 0x3, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r4 = io_uring_setup(0x1690, &(0x7f0000000080)={0x0, 0x9d1, 0x40, 0x2, 0x1de}) io_uring_register$IORING_REGISTER_BUFFERS(r4, 0x0, &(0x7f00000002c0)=[{&(0x7f0000001700)=""/4095, 0x440000}], 0x100000000000011a) io_uring_register$IORING_REGISTER_BUFFERS_UPDATE(r4, 0x10, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0}, 0x20) io_uring_register$IORING_UNREGISTER_BUFFERS(r4, 0x1, 0x0, 0x0) bpf$BPF_LINK_CREATE(0x1c, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff, 0x3, 0x0, @void}, 0x62) socket$inet_tcp(0x2, 0x1, 0x0) socket$l2tp6(0xa, 0x2, 0x73) shmat(r0, &(0x7f0000ffd000/0x1000)=nil, 0x2000) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r5, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000600)={&(0x7f0000000000)=@newtaction={0x48, 0x30, 0xb, 0x0, 0x0, {}, [{0x34, 0x1, [@m_skbedit={0x30, 0x1, 0x0, 0x0, {{0xc}, {0x4}, {0x4}, {0xc, 0xa}, {0xc, 0x9, {0xf5}}}}]}]}, 0x48}}, 0x0) 9m45.092735592s ago: executing program 2 (id=1682): bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000540)=ANY=[], 0x50) mkdirat(0xffffffffffffff9c, 0x0, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) sched_setaffinity(0x0, 0xfffffef7, &(0x7f0000000740)=0x410000002) timer_gettime(0x0, 0x0) r2 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/consoles\x00', 0x0, 0x0) preadv2(r2, &(0x7f0000000100)=[{&(0x7f0000000080)=""/125, 0x7d}], 0x1, 0x8, 0x0, 0x0) r3 = socket$inet(0x2, 0x2, 0x1) setsockopt$SO_BINDTODEVICE(r3, 0x1, 0x19, &(0x7f0000000940)='batadv_slave_1\x00', 0x10) sendmsg$inet(0xffffffffffffffff, &(0x7f00000004c0)={&(0x7f0000000000)={0x2, 0x0, @multicast1}, 0x10, &(0x7f0000000880), 0x0, 0x0, 0x0, 0xe0000000}, 0x40) r4 = syz_open_dev$usbfs(&(0x7f0000000240), 0xb, 0x101301) ioctl$USBDEVFS_IOCTL(r4, 0xc0105512, 0x0) ioctl$USBDEVFS_IOCTL(r4, 0x80045505, &(0x7f0000000340)=@usbdevfs_connect) sched_setscheduler(0x0, 0x2, 0x0) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000180)={0xffffffffffffffff, 0x0, 0x0, 0x1}, 0x20) 9m42.770994024s ago: executing program 2 (id=1686): r0 = socket$inet6(0xa, 0x6, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x420000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYRES32=0x1, @ANYBLOB, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="000000000000000600"/19], 0x48) syz_open_dev$sg(&(0x7f00000003c0), 0x0, 0x8202) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r4}, 0x10) setsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, 0x0, 0x0) fstat(r4, &(0x7f0000000300)) mount$overlay(0x0, 0x0, 0x0, 0x1200c94, &(0x7f0000000580)={[{@xino_on}, {@default_permissions}, {@xino_off}, {@default_permissions}, {@upperdir={'upperdir', 0x3d, './file0'}}, {@redirect_dir_nofollow}, {@redirect_dir_on}]}) bind$inet6(r0, &(0x7f0000000180)={0xa, 0x4e20, 0x0, @empty}, 0x1c) r5 = socket$inet_dccp(0x2, 0x6, 0x0) fcntl$F_SET_FILE_RW_HINT(r2, 0x40e, &(0x7f0000000140)) listen(r0, 0x5) setsockopt$sock_linger(r5, 0x1, 0xd, &(0x7f0000000040)={0x1, 0x1}, 0x8) socket$kcm(0x2, 0x3, 0x106) r6 = socket$kcm(0x10, 0x2, 0x4) sendmsg$kcm(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000ac0)="4c000000140097f87059ae08060c040002ff0f020000000000001a350182fa73a69d35a21429b17cd02941601d60ffc0cca84708f7abca1b4e7d06a60300000072f750375ed08a5604000000", 0x4c}], 0x1}, 0x840) 9m41.784891739s ago: executing program 2 (id=1687): bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0xe, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="18000000010000000000000000"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x16, 0x0, 0x4, 0x1, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) syz_open_dev$usbfs(&(0x7f0000000040), 0x76, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="184f62d8e7", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000001000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x12, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r3, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r4 = syz_io_uring_setup(0x6908, &(0x7f0000000340), &(0x7f0000000140), &(0x7f0000000100)) r5 = io_uring_setup(0x7058, &(0x7f0000000040)) bind$bt_l2cap(0xffffffffffffffff, 0x0, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6}]}) ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, 0x0) r6 = io_uring_register$IORING_REGISTER_PERSONALITY(r5, 0x9, 0x0, 0x0) io_uring_register$IORING_UNREGISTER_PERSONALITY(r4, 0x18, 0x20000000, r6) 9m40.461237817s ago: executing program 2 (id=1691): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) pipe(0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) unshare(0x8000000) semget$private(0x0, 0x4000, 0x0) semtimedop(0x0, &(0x7f0000000280)=[{0x0, 0x0, 0x1000}], 0x1, 0x0) unshare(0x2c040000) syz_mount_image$hfsplus(&(0x7f0000000600), &(0x7f0000000640)='./file0\x00', 0x1004000, &(0x7f00000003c0)=ANY=[@ANYBLOB="747970653dd88d17102c6e6c733d61736369692c00b65c5e80ee881a8017a99080db5f384bdecc38aad57f2265deb9bc09ceaa37a446dd9779c499df84c71ac5709884f5a46a6157a859efa0011b98ed9e0084e7f30840308a546dfc131f58f11e2885d3d93d1ea670d769ec2f0aa0c9e9bc2dce36eb80f93e9c66e51cd63047e63897ad645ff9e12ba3000000000000a038840483468e20afe97ee11df867f724292017e27da8ee18b36e12ec848a02f157f0c97084870848c3f5101666aeeb41"], 0x4, 0x5d4, &(0x7f0000000cc0)="$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") openat$tun(0xffffffffffffff9c, 0x0, 0xc1842, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e) r4 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r4, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000000000)=""/74, 0x328000, 0x1000}, 0x20) syz_clone3(&(0x7f0000003dc0)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) 9m33.920204052s ago: executing program 2 (id=1702): bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000540)=ANY=[], 0x50) mkdirat(0xffffffffffffff9c, 0x0, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) sched_setaffinity(0x0, 0xfffffef7, &(0x7f0000000740)=0x410000002) timer_gettime(0x0, 0x0) r2 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/consoles\x00', 0x0, 0x0) preadv2(r2, &(0x7f0000000100)=[{&(0x7f0000000080)=""/125, 0x7d}], 0x1, 0x8, 0x0, 0x0) r3 = socket$inet(0x2, 0x2, 0x1) setsockopt$SO_BINDTODEVICE(r3, 0x1, 0x19, &(0x7f0000000940)='batadv_slave_1\x00', 0x10) sendmsg$inet(0xffffffffffffffff, &(0x7f00000004c0)={&(0x7f0000000000)={0x2, 0x0, @multicast1}, 0x10, &(0x7f0000000880), 0x0, 0x0, 0x0, 0xe0000000}, 0x40) r4 = syz_open_dev$usbfs(&(0x7f0000000240), 0xb, 0x101301) ioctl$USBDEVFS_IOCTL(r4, 0x80045505, &(0x7f0000000340)=@usbdevfs_connect) ioctl$USBDEVFS_SUBMITURB(r4, 0x8038550a, &(0x7f0000000180)=@urb_type_control={0x2, {0x8, 0x1}, 0x9, 0x6, 0x0, 0x0, 0x3, 0x9, 0x0, 0x9, 0x4, 0x0}) sched_setscheduler(0x0, 0x2, 0x0) unshare(0x2c020400) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000180)={0xffffffffffffffff, 0x0, 0x0, 0x1}, 0x20) 9m29.131655288s ago: executing program 2 (id=1705): write$P9_RVERSION(0xffffffffffffffff, 0x0, 0x15) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x0, 0x0) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000006900000000000001000000940000000fad413e850000000700000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r3}, 0x10) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, &(0x7f00000002c0), 0x0, &(0x7f0000000300)}, 0x10) r4 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={0x0, r4}, 0x18) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000cc0), 0x1c1341, 0x0) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) write$cgroup_subtree(r5, 0x0, 0x2a) r6 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r6, &(0x7f0000000080)={0x1f, 0xffff, 0x3}, 0x6) write(r6, &(0x7f0000000340)="08000000010000", 0x7) bpf$OBJ_GET_MAP(0x7, 0x0, 0x0) 9m14.091213919s ago: executing program 38 (id=1705): write$P9_RVERSION(0xffffffffffffffff, 0x0, 0x15) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x0, 0x0) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000006900000000000001000000940000000fad413e850000000700000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r3}, 0x10) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, &(0x7f00000002c0), 0x0, &(0x7f0000000300)}, 0x10) r4 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={0x0, r4}, 0x18) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000cc0), 0x1c1341, 0x0) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) write$cgroup_subtree(r5, 0x0, 0x2a) r6 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r6, &(0x7f0000000080)={0x1f, 0xffff, 0x3}, 0x6) write(r6, &(0x7f0000000340)="08000000010000", 0x7) bpf$OBJ_GET_MAP(0x7, 0x0, 0x0) 7m32.770576376s ago: executing program 1 (id=1860): socket$inet(0x2, 0x4000000000000001, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=@deltaction={0x18, 0x30, 0x9, 0x0, 0x0, {}, [@TCA_ACT_TAB={0x4}]}, 0x18}}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) r3 = socket$inet6(0xa, 0x5, 0x0) r4 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000000), 0x8502, 0x0) write$sndseq(r4, &(0x7f0000001380)=[{0x6, 0x0, 0x0, 0x0, @tick, {0x4}, {}, @ext={0x0, 0x0}}, {0x0, 0x0, 0x0, 0x0, @time={0xffff, 0xa5}, {}, {0x2}, @connect={{0x2, 0x3}, {0x3}}}, {0x0, 0x0, 0x0, 0x0, @time={0x2, 0x2}, {0x0, 0x8}, {}, @control}, {0x0, 0x0, 0x0, 0x0, @time, {}, {}, @connect={{}, {0x0, 0x5}}}], 0x70) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r3, 0x84, 0x64, &(0x7f0000000100)=[@in={0x2, 0x0, @private=0xa010102}, @in6={0xa, 0x0, 0x0, @private0}], 0x2c) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_REM(r3, 0x84, 0x65, &(0x7f0000000a00)=[@in={0x2, 0x0, @loopback}], 0x10) bpf$PROG_LOAD(0x5, 0x0, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz0\x00', 0x1ff) r5 = openat$cgroup_freezer_state(0xffffffffffffffff, 0x0, 0x2, 0x0) sendfile(r5, r5, 0x0, 0x9) r6 = socket$inet_udp(0x2, 0x2, 0x0) connect$inet(r6, &(0x7f0000000480)={0x2, 0x0, @multicast1}, 0x10) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x2, 0x13, &(0x7f0000000080)=ANY=[@ANYBLOB="18080000000400000000000000080003851000000600000018000000", @ANYRES32, @ANYBLOB="00000000000000006608000000000000180000000000000000000000000000009500000000000000360a020000000000180100002020782500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b50a00000000000085000000060000009500000000"], &(0x7f0000000000)='GPL\x00', 0x2, 0xde, &(0x7f0000000340)=""/222, 0x0, 0x1e, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) 7m29.976091041s ago: executing program 1 (id=1870): bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xe, 0x4, 0x8, 0x5, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x3, &(0x7f0000000780)=ANY=[@ANYBLOB="18000000000000000000000000000000950000000000000031889d5c7bb919944c"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f00000006c0)='sched_switch\x00', r3}, 0x10) r4 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) close(0xffffffffffffffff) setsockopt$bt_l2cap_L2CAP_LM(r4, 0x6, 0x3, &(0x7f0000000140)=0xc, 0x4) connect$bt_l2cap(r4, &(0x7f0000000180)={0x1f, 0x0, @fixed}, 0xe) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r5 = socket$key(0xf, 0x3, 0x2) sendmsg$key(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={0x0}}, 0x0) sendmsg$key(0xffffffffffffffff, &(0x7f00000001c0)={0x40000000, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="02030609100000000000004c9e000000020013000200000000000000ff0800ed05000600200000000a00060000000000ff0000000000000000001ffeff0001000003f1dc7f7c6e7c0200010000000000004000020000000005000500000000000a"], 0x80}}, 0x0) sendmmsg(r5, &(0x7f0000000180), 0x400008a, 0x0) getpid() sendmsg$key(r5, &(0x7f0000000140)={0x9, 0x0, &(0x7f0000000100)={&(0x7f0000000240)={0x2, 0x9, 0x0, 0x0, 0x2}, 0x10}}, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) 7m24.196553112s ago: executing program 1 (id=1864): r0 = socket$kcm(0x10, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x50a3e9d58f959fea) r1 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_int(r1, 0x29, 0x31, &(0x7f0000000040)=0x8000, 0x4) syz_emit_ethernet(0x6a, &(0x7f0000000000)={@local, @link_local, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x5c, 0x0, 0x0, 0x0, 0x11, 0x0, @empty, @empty}, {0x0, 0x4e20, 0x48, 0x0, @wg=@cookie={0x3, 0x0, "6d4dfdeb8cf7bbfe143803bec2ce783e04cd32308cdd8dde", "c71cb8adfce542a4bc5a026c208fd0c45787e4aa384e3d26b21ea41cc128364c"}}}}}}, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={0xffffffffffffffff, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) write(0xffffffffffffffff, 0x0, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket(0x200000000000011, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000000)={'bridge0\x00'}) sendmsg$nl_route(r2, 0x0, 0x10) r4 = syz_open_dev$video(&(0x7f0000000040), 0xa7, 0x0) ioctl$VIDIOC_S_PARM(r4, 0xc0cc5616, &(0x7f0000000080)={0x1, @capture={0x0, 0x0, {0x0, 0xc8}}}) sendmsg$kcm(r0, &(0x7f0000000600)={0x0, 0xfffffffe, &(0x7f0000000080)=[{&(0x7f0000000000)="2e00000010008188040f80ec59acbc0413a1f8480d0000005e140604000000000e000a000f00000002800000121f", 0x2e}], 0x1}, 0x0) openat$autofs(0xffffffffffffff9c, &(0x7f00000000c0), 0x18000, 0x0) r5 = openat$binfmt_format(0xffffffffffffff9c, &(0x7f0000000100)='/proc/sys/fs/binfmt_misc/syz3\x00', 0x2, 0x0) mmap(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x100000a, 0x810, r5, 0xd0118000) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x7, 0x6, &(0x7f0000000000)) r6 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000040), 0x1, 0x0) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x9, 0x4, &(0x7f0000000040)=@framed={{0xffffffb4, 0x0, 0x0, 0x0, 0x0, 0x71, 0x11, 0x36}, [@ldst={0x5}]}, &(0x7f0000003ff6)='GPL\x00', 0x5, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @cgroup_sock, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) write$vga_arbiter(r6, &(0x7f0000000080)=@other={'trylock', ' ', 'none'}, 0xd) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) sigaltstack(&(0x7f0000000040)={0x0, 0x80000000, 0xfffffffffffffed8}, 0x0) sigaltstack(&(0x7f0000000180)={0x0, 0x2}, &(0x7f0000000280)={0x0}) 7m19.452643508s ago: executing program 1 (id=1871): pipe2(&(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x40000000000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f00000006c0)='sched_switch\x00'}, 0x10) socket$key(0xf, 0x3, 0x2) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) r5 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000001840), 0x2982, 0x0) r6 = openat$procfs(0xffffffffffffff9c, &(0x7f00000001c0)='/proc/timer_list\x00', 0x0, 0x0) sendfile(r5, r6, 0x0, 0x20000023896) r7 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r8 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r8}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) syz_extract_tcp_res$synack(&(0x7f0000000180), 0x1, 0x0) ioctl$TCSETSF(r7, 0x5404, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, "7a58beca39ed2d5a99bbc4bff0ebd3e9bd5a8e"}) read$FUSE(r0, &(0x7f0000000480)={0x2020, 0x0, 0x0, 0x0, 0x0}, 0x2020) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x10012, 0xffffffffffffffff, 0x589ab000) write$FUSE_ENTRY(r1, &(0x7f00000003c0)={0x90, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r9, 0x3}}}, 0x90) 7m15.472099759s ago: executing program 1 (id=1876): syz_open_dev$MSR(0x0, 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000040)={&(0x7f0000000880)=ANY=[@ANYBLOB="9feb01001800000000000000b7000000b70000000400000004000000000000090406d46392e18f0100000000000006f10e0000000100000f0300000005000000080000000e000000252873080000000000000c050000000c0000000a0000850500002005000000050d338ca4733dccc200000003000000030000000f00000003000000090000000d00000005000000890000000b000000020000007a0400000d000000000000007f00000010000000010000000700c6f10a0000000400000004000000010000"], &(0x7f0000000780)=""/200, 0xd4, 0xc8, 0x0, 0x0, 0x0, @void, @value}, 0x20) prctl$PR_SCHED_CORE(0x3e, 0x0, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) listxattr(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_TIMEOUT_NEW(r1, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000002c0)=ANY=[@ANYBLOB="1400000000080300000000000000000040000000"], 0x14}}, 0x0) execve(&(0x7f00000009c0)='./bus\x00', &(0x7f0000000740), &(0x7f0000000d00)) connect$inet(0xffffffffffffffff, &(0x7f0000000000)={0x2, 0x0, @remote}, 0x10) r2 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r2, 0x6, 0x9, &(0x7f0000000000), 0x4) bpf$MAP_CREATE(0x0, 0x0, 0x0) openat$tcp_mem(0xffffffffffffff9c, 0x0, 0x1, 0x0) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000140)='./file1\x00', 0x0, &(0x7f0000000440)={[{@noblock_validity}, {@nobh}, {@abort}, {@norecovery}, {@nojournal_checksum}, {@orlov}, {@nogrpid}, {@noauto_da_alloc}, {@nomblk_io_submit}]}, 0x6, 0x56a, &(0x7f00000015c0)="$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") setxattr$trusted_overlay_opaque(&(0x7f0000000000)='./file1\x00', &(0x7f0000000080), 0x0, 0x0, 0x0) setxattr$trusted_overlay_upper(&(0x7f0000000200)='./file1\x00', &(0x7f00000001c0), &(0x7f0000001400)=ANY=[], 0x835, 0x0) socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) write$binfmt_misc(0xffffffffffffffff, &(0x7f0000000080), 0xd) sync() unlink(&(0x7f00000003c0)='./file1\x00') syz_mount_image$ext4(&(0x7f0000000740)='ext4\x00', &(0x7f0000000040)='./file0\x00', 0x1800493, &(0x7f0000000940), 0x0, 0x5ac, &(0x7f0000000180)="$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") 7m12.272746687s ago: executing program 1 (id=1882): openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x20000, 0x0) ioctl$KVM_CREATE_IRQCHIP(0xffffffffffffffff, 0xae60) lstat(&(0x7f0000000200)='./file0\x00', &(0x7f0000000240)) r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000680)={'bridge0\x00'}) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0xfffffffffffffffe}, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) r2 = syz_open_dev$dri(&(0x7f0000000140), 0x1, 0x0) r3 = syz_open_dev$dri(&(0x7f00000000c0), 0x1ff, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r3, 0xc04064a0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000340)=[0x0], 0x0, 0x2a, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_GETCONNECTOR(r2, 0xc05064a7, &(0x7f0000000780)={0x0, 0x0, 0x0, &(0x7f0000000280)=[0x0], 0x0, 0x0, 0x0, 0x0, r4}) bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=@bloom_filter={0x1e, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0182101, &(0x7f00000004c0)) sendmsg$L2TP_CMD_TUNNEL_GET(0xffffffffffffffff, &(0x7f00000004c0)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000480)={&(0x7f0000000400)=ANY=[@ANYBLOB, @ANYRES16, @ANYBLOB="000229bd7000fbdbdf2504000000050021000100000005001200f900000006001d000700000006001b004e20000005002200010000000500210001000000"], 0x44}, 0x1, 0x0, 0x0, 0x2}, 0x80) read$FUSE(0xffffffffffffffff, &(0x7f000000c3c0)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(0xffffffffffffffff, &(0x7f00000002c0)={0x50, 0x0, r5, {0x7, 0x1f, 0x0, 0x102080}}, 0x50) 6m53.520197408s ago: executing program 39 (id=1882): openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x20000, 0x0) ioctl$KVM_CREATE_IRQCHIP(0xffffffffffffffff, 0xae60) lstat(&(0x7f0000000200)='./file0\x00', &(0x7f0000000240)) r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000680)={'bridge0\x00'}) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0xfffffffffffffffe}, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) r2 = syz_open_dev$dri(&(0x7f0000000140), 0x1, 0x0) r3 = syz_open_dev$dri(&(0x7f00000000c0), 0x1ff, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r3, 0xc04064a0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000340)=[0x0], 0x0, 0x2a, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_GETCONNECTOR(r2, 0xc05064a7, &(0x7f0000000780)={0x0, 0x0, 0x0, &(0x7f0000000280)=[0x0], 0x0, 0x0, 0x0, 0x0, r4}) bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=@bloom_filter={0x1e, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0182101, &(0x7f00000004c0)) sendmsg$L2TP_CMD_TUNNEL_GET(0xffffffffffffffff, &(0x7f00000004c0)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000480)={&(0x7f0000000400)=ANY=[@ANYBLOB, @ANYRES16, @ANYBLOB="000229bd7000fbdbdf2504000000050021000100000005001200f900000006001d000700000006001b004e20000005002200010000000500210001000000"], 0x44}, 0x1, 0x0, 0x0, 0x2}, 0x80) read$FUSE(0xffffffffffffffff, &(0x7f000000c3c0)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(0xffffffffffffffff, &(0x7f00000002c0)={0x50, 0x0, r5, {0x7, 0x1f, 0x0, 0x102080}}, 0x50) 5m48.548981328s ago: executing program 6 (id=1974): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8a}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x4000002, 0x50032, 0xffffffffffffffff, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x0, 0x401d031, 0xffffffffffffffff, 0x0) r3 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) r4 = socket$inet6(0xa, 0x800000000000002, 0x0) setsockopt$inet6_udp_int(r4, 0x11, 0x67, 0x0, 0x0) connect$inet6(r4, &(0x7f0000000040)={0xa, 0x0, 0x0, @mcast2}, 0x1c) connect$inet6(r4, &(0x7f0000000080)={0xa, 0x4e24, 0x0, @ipv4={'\x00', '\xff\xff', @multicast2}}, 0x1c) sendmmsg$inet6(r4, 0x0, 0x0, 0x80440c1) r5 = syz_pidfd_open(r3, 0x0) process_madvise(r5, 0x0, 0x0, 0x19, 0x0) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r6, 0x0, 0x0) r7 = syz_open_procfs(0x0, 0x0) read$FUSE(r7, &(0x7f00000023c0)={0x2020}, 0x2020) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) syz_clone(0x5142000, 0x0, 0x11, 0x0, 0x0, 0x0) 5m46.827185498s ago: executing program 6 (id=1976): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000680)={0x10, 0x4, &(0x7f0000000380)=ANY=[@ANYBLOB="1802000000c4c4000000000000000000850000003e00000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0) mmap(&(0x7f0000002000/0x3000)=nil, 0x3000, 0x0, 0x12, r0, 0x0) r1 = bpf$MAP_CREATE(0x1900000000000000, &(0x7f0000000040)=@base={0x1b, 0x0, 0x0, 0x2000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x11, 0xf, &(0x7f0000000400)=ANY=[@ANYBLOB="1800000000000000000000001000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7020000140000b0b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000000000000b70000000000000095"], &(0x7f0000000200)='syzkaller\x00', 0x6, 0x1007, &(0x7f0000001e40)=""/4103, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007180000f8ffffffb702000000000000b703ee00000000008500000004000000959b0c5f41dc5d7d4cc0960bb8070000000000000094fc3331d98b90b4343f8527a213da"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='memory.events\x00', 0x26e1, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000040)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000080000001801000020646c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007200000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) openat$cgroup_ro(r2, &(0x7f00000001c0)='blkio.bfq.io_queued_recursive\x00', 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000000)='global_dirty_state\x00', r3}, 0x10) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000600)='memory.swap.current\x00', 0x100002, 0x0) write$cgroup_type(r4, &(0x7f0000000180), 0x40010) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000580)={&(0x7f0000000240)='bcache_write\x00', r0}, 0x10) getrusage(0x0, &(0x7f0000000280)) r5 = memfd_create(&(0x7f0000000200)='-B\xd5NI\xc5j\x9appp\xf0\b\x84\xa2m\x00\v\x18\x004\x91\xfdy\xdb\xd1\xa7\xb1S\xf1:)\x00\xca\xd7Uw\x00\xbc\xfa2\xb3\xbb\x8d\xac\xacva}knh#\xcf)\x0f\xc8\xc0`\xaa8\xc7\xc8\x9d\xfdA\b\x10\x92(c\x10d\xee\xa9\x8b\x066\xb8G\xd1c\xe1$\xff\x97k\xde\xc5\xe96\xddU)\xc98M\xcd\xfb\xcc\x82n=\x7f=\xcdI\x83\xaa\x8f~\xb90a\xa9\xb2\x04K\x98\x93=\xabQ\xf7 \x1d\xa1\xce\x8b\xac \xe8\x88\xdc\x02\xd7\x04\x9b\x9aL\x9f([4\x81\xf6\xb6\xdf\x16J\xab\xecC\xe2{\xfd\x8a\xb4\x8e\x9c\xfb\xf6\xe9\xd8]B6{\xf0(\xaeW;)\x9f\x9cR\xae\x12G\xd8\xa4y', 0x0) r6 = dup(r5) write$cgroup_pid(r6, &(0x7f0000000040)=0xffffffffffffffff, 0xe) mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x4, 0x11, r5, 0x0) r7 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r7, 0x6, 0x21, 0x0, &(0x7f0000000280)) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r0, 0x89f3, &(0x7f0000000000)={'syztnl2\x00', &(0x7f0000000480)={'syztnl0\x00', 0x0, 0x29, 0x1, 0xff, 0x5, 0x3, @dev={0xfe, 0x80, '\x00', 0x15}, @rand_addr=' \x01\x00', 0x5392fb30de2da587, 0x40, 0xa79d, 0x2}}) bpf$MAP_CREATE(0x0, &(0x7f0000000500)=@base={0x17, 0x7, 0x400, 0x0, 0xa, r1, 0xb545, '\x00', r8, r0, 0x5, 0x3, 0x1, 0x0, @void, @value, @void, @value}, 0x48) 5m46.115598282s ago: executing program 6 (id=1979): bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000540)=ANY=[], 0x50) mkdirat(0xffffffffffffff9c, 0x0, 0x0) read$msr(0xffffffffffffffff, &(0x7f0000019680)=""/102392, 0x18ff8) timer_gettime(0x0, 0x0) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/consoles\x00', 0x0, 0x0) preadv2(r1, &(0x7f0000000100)=[{&(0x7f0000000080)=""/125, 0x7d}], 0x1, 0x8, 0x0, 0x0) setsockopt$SO_BINDTODEVICE(0xffffffffffffffff, 0x1, 0x19, &(0x7f0000000940)='batadv_slave_1\x00', 0x10) sendmsg$inet(0xffffffffffffffff, &(0x7f00000004c0)={&(0x7f0000000000)={0x2, 0x0, @multicast1}, 0x10, &(0x7f0000000880), 0x0, 0x0, 0x0, 0xe0000000}, 0x40) r2 = syz_open_dev$usbfs(&(0x7f0000000240), 0xb, 0x101301) ioctl$USBDEVFS_IOCTL(r2, 0xc0105512, 0x0) ioctl$USBDEVFS_IOCTL(r2, 0x80045505, &(0x7f0000000340)=@usbdevfs_connect) ioctl$USBDEVFS_SUBMITURB(r2, 0x8038550a, &(0x7f0000000180)=@urb_type_control={0x2, {0x8, 0x1}, 0x9, 0x6, 0x0, 0x0, 0x3, 0x9, 0x0, 0x9, 0x4, 0x0}) sched_setscheduler(0x0, 0x2, 0x0) unshare(0x2c020400) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000180)={0xffffffffffffffff, 0x0, 0x0, 0x1}, 0x20) 5m45.370994606s ago: executing program 6 (id=1982): r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) ioctl$VHOST_SET_OWNER(r0, 0xaf01, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x3, &(0x7f0000000240)=@framed, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f00000006c0)='sched_switch\x00', r4}, 0x10) rt_sigprocmask(0x0, &(0x7f0000000100), 0x0, 0x8) openat$vmci(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) r5 = socket$inet6_dccp(0xa, 0x6, 0x0) connect$inet6(r5, &(0x7f0000000200)={0xa, 0x0, 0x0, @remote, 0x7}, 0x1c) unshare(0x20000400) shutdown(r5, 0x0) r6 = syz_open_dev$dri(0x0, 0x1ff, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r6, 0xc01864c6, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000200)={'veth0_to_team\x00'}) sendmmsg$inet(0xffffffffffffffff, &(0x7f0000002240)=[{{&(0x7f0000000000)={0x2, 0x4e20, @broadcast}, 0x10, 0x0}}], 0x1, 0x24000004) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f00000002c0)={0x35}) 5m42.215011773s ago: executing program 6 (id=1988): write$P9_RVERSION(0xffffffffffffffff, 0x0, 0x15) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x0, 0x0) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, 0x0, 0x0, 0x2, 0x0) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000006900000000000001000000940000000fad413e850000000700000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r3}, 0x10) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, &(0x7f00000002c0), 0x0, &(0x7f0000000300)}, 0x10) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={0x0}, 0x18) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000cc0), 0x1c1341, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) write$cgroup_subtree(r4, 0x0, 0x2a) r5 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r5, &(0x7f0000000080)={0x1f, 0xffff, 0x3}, 0x6) write(r5, &(0x7f0000000340)="08000000010000", 0x7) bpf$OBJ_GET_MAP(0x7, 0x0, 0x0) 5m40.304330653s ago: executing program 6 (id=1991): openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x20000, 0x0) ioctl$KVM_CREATE_IRQCHIP(0xffffffffffffffff, 0xae60) lstat(&(0x7f0000000200)='./file0\x00', &(0x7f0000000240)) r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000680)={'bridge0\x00', 0x0}) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x1) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) r3 = syz_open_dev$dri(&(0x7f0000000140), 0x1, 0x0) r4 = syz_open_dev$dri(&(0x7f00000000c0), 0x1ff, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r4, 0xc04064a0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000340)=[0x0], 0x0, 0x2a, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_GETCONNECTOR(r3, 0xc05064a7, &(0x7f0000000780)={0x0, 0x0, 0x0, &(0x7f0000000280)=[0x0], 0x0, 0x0, 0x0, 0x0, r5}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)=ANY=[@ANYBLOB="3800000055003d0902000000fccbdf", @ANYRES32=r1, @ANYRES32=r1, @ANYBLOB="00000000ff0298df9725f98eed2300000000000100000000"], 0x84}}, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f0000000040)) bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=@bloom_filter={0x1e, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0182101, &(0x7f00000004c0)) openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x42, 0x0) r6 = syz_genetlink_get_family_id$l2tp(&(0x7f00000003c0), 0xffffffffffffffff) sendmsg$L2TP_CMD_TUNNEL_GET(0xffffffffffffffff, &(0x7f00000004c0)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000480)={&(0x7f0000000400)=ANY=[@ANYBLOB, @ANYRES16=r6, @ANYBLOB="000229bd7000fbdbdf2504000000050021000100000005001200f900000006001d000700000006001b004e20000005002200010000000500210001000000"], 0x44}, 0x1, 0x0, 0x0, 0x2}, 0x80) read$FUSE(0xffffffffffffffff, &(0x7f000000c3c0)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(0xffffffffffffffff, &(0x7f00000002c0)={0x50, 0x0, r7, {0x7, 0x1f, 0x0, 0x102080}}, 0x50) 5m34.502963045s ago: executing program 9 (id=2003): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x18, 0xb, &(0x7f0000000040)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x34, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x88, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$inet6(0xa, 0x4, 0x81) r4 = socket$inet(0x2, 0x2, 0x1) setsockopt$inet_int(r4, 0x0, 0xa, &(0x7f0000000300)=0x5, 0x4) sendmsg$inet(r4, &(0x7f0000000080)={&(0x7f0000000000)={0x2, 0x0, @multicast1}, 0x10, &(0x7f0000000140)=[{&(0x7f0000000040)="08001efbb07d586e", 0x4788}], 0x1}, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x1ff) r5 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r6 = openat$cgroup_pressure(r5, &(0x7f0000000040)='memory.pressure\x00', 0x2, 0x0) write$cgroup_pressure(r6, &(0x7f0000000080)={'full', 0x20, 0x2000000008, 0x20, 0x10000000fffff}, 0x2f) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f0000000b40)=ANY=[@ANYBLOB="620af8ff0c200021bfa100000000000007010000f8ffffffb702000003000000bd120000000000008500000006000000b70000000000000095000000000000003faf4f1e7f2aa3d9b18ed81c0c869b51ec6c0af4e0e4a9446c7670568982b4e020f698393aa0f3881f9c24aa56f15199fad0093c59d66b5ece9f36c70d0f13905ea23c22624c9f87ea487e223ac37264833d618e92eac195f9793f50bb546040677b0c5077da80fb982c1e9400e693146cea484a415b76966118b64f751a0f241b072e90080008002d75593a286cecc93e64c227c95aa0b784625704f07a72c234664c0af9360a1f7a5e6b607130c89f18c0c1089d8b853289e01aa27ae8b09e00e79ab20b0b8e1148f49faf2ad0000000000000006fa03c6468972089b302d7bf6023cdcedb5e0125ebbc08dee510cb2364149215108333719acd97cfa107d40224edc5465a932b77e74e802a0d42bc6099ad2300000080006ef6c1ff0900000000000010c63a949e8b7955394ffa82b8e942c89112f4ab87b1bfeda7be586602d985430cea0162ab3fcf4591c926abfb0767192302000000b0eea24492a660583eecb42cbcd3de3a83209da17a0faf60fd6ad9b97aa5fa68480366c9c6fd70a5043aa3926b81e3b59c95c25a573dc2edcaea2b1a52496dfcaf99431412fd134a996382a1a04d5bb924cfe5f3185418d605ffff9c4d29c7c32f2095e63c80aff9fa740b5b7632f32030916f89c6dad7603f2ba2a790d62d6faec2fed44da4928b30142ba11de6c5d50b83bae613402216b5054d1e7c13b1355d6f4a8245ffa4997da9c77af4c0eb97fca585ec6bf58351d564beb6d952aab9c707647fa8a7583c90b3433b809bdb9fbd48bc873495cbff8a326eea31ae4e0f7505ebf6c9d13330ca005ace1a84521f14518c9b356fccbd6c712016219848624b87cec2dbe98223a0eb4fa39f6b5c02e6d6d90756ff53902a8f57000000009700cf0b4b8bc2294133000000007900000000030000000000000000000000000010008bc0d9559711e6e8861c46495ba585a4b2d02edc3e28dd271c896249ed85b980680b00002b435ac15fc0288d9b2a169cdcacc413038dafb7a2c8cb482bac0ac502d9ba96ffffff7f0000100000000000007d5ad897ef3b7cda42013d53046da21b40216e14ba2d6ad5656bfff17addaedab25b30002abbba7fa725f38400be7c1f001b2cd317902f19e385be9e48dccff729433282830689da6b53b263339863297771429d120000003341bf4abacac95900fca0493cf29b33dcc9ffffffffffffffd39fec2271ff01589646efd1cf870cd7bb2366fde41f94290c2a5ff870ce41fd3467decb05cfd9fcb32c8ed1dbd9d10a64c1083d5e71b5565b1768ee58969c41595229df17bcad70fb4021428ce970275d13b78100788f11f76161d46ea3abe0fa4d30dc94ef241875f3b4ce0232fcea69c271d7fa60e717a04becff0f719197724f4fce1093b62d7e8c7123d8ec571be54c72d978cf906df0042e36acd37d7f9e119f2c06f815312e0cfe222a06f56dd022c074eb8a322fb0bf47c0a8d154b405c37feaf3dd95f6ef2ae582786105c7df8be5877050c91301bb997316dbf17866fb84d4173731efe895ff2e1c5560926e90109b598502d3e959efc71f665c4d75cf2458e3546c1c776da64fb5abee0acfd235f2f4632c9062ece84c99a061887a20639b41c8c12ee86c50804042b3fb5aac518a75f9e7d7101d5e186c489b3a06fb99e0aa7f23a054de2f4d92d6bd72ee2c9fdc75aaaf1e3e483b4ad05573af40326993947d9a631bcbf3583784acbda216550d7aec6b79e30cbd128f54c2d3335457acf37331766e472391e358c3b377327ac9ecc34f24c9ae153ec60ac0694dc55bff9f5f45f90400000000000000d6b2c5ea1393fdf24285bf16b99c9cc0ad1857216f1a985f369191ae954febb3df464bfe0f7f3ee9afe7befb89d2777399f5874c553aeb3729cffe86e66964ae09bb6d163118e4cbe024fd4500f8ff0700000000cc9d8046c216c1f895778cb25122a2a9f9b444aeadea2a40da8daccf080842a486721737390cbf3a74cb2003016f1514216bdf57d2a40d40b51ab63e96ec8485b3b8a8c9ae3d14f93100c2e0893862eef552fcde2981f48c482bde8a168c3f5db2fea6f26e4a4304e50c349f4f9ecee27defc93871c5f99b355b72d538ba4958ea8e4aa37094191e10096e7e60fc3541a2c905a1a95e9571bf38ae1981c4238ecaee6f75cd0a6881bd1517a8250ddc8674152f94e3a409e2a3bce109b60000000000000000d6d5210d7503000000a87a27602b81f76386f1535bef1497f92186086e29c6bc5a1fad6ec9a31137abf9a404abde7750898b1bd627e873f8703be8672d70d1ab57075228a9f46ed9bd1f08fb8191bbab2dc51de3a61f0868afc4294859323e6c257a45319f18101288d139bd3da20fed05a8fe64680b0a3fc22dd70400000000946912d6c98cd1a9fbe1e7d58c08acaf30235b918a31d2eca55f74a23641f61f2d5b308cf0d031b0c7f0ced69993e9960ff5f76015e6009556237badf4e7965bbe2777e808fcba821aa8e8c5c39609ff854352cb4900000000000000000000000000c1fee30a3f7a85d1b29e58c77685efc0ceb1c8e5729c66418d169fc03aa188546b3ad2a182068e1e3a0e2505bc7f41019645463dbd334b47f067bbab40743b2a42010082008df75cf43f8ecc8d3726602111b40e761fd21081920382f14d12ca3c3431ee97471c7868dcda7eaa69eb7f7f80572fdd11bb1d0d1280fbc22bf73468788df51710d7d31c632fc5ed1762eb0b428ee751c47d8e894f745a868404a0bf35f0121008b722b1eaa6aedfa1bf2e7ccb2d61d5d76331945ecefa26b8471d42645288d7226bbd9ccd628ab84875f2c50ba891cea592b0430a537a395dc73bda367bf12cb7d81691a5fe8c47be395656a297e9df0e71f96756ea5cce7daac4be290159f6bcd75f0dda9de5532e71ae9e48b0ed0254a83100000000f6fbb869604d51a36a54c832e45b2569dc0d90b075225fde44c4e0973171ad47d6b0fdf9743af932cd6db49a47613808bad959710300000000000000832d0a45fa4242e24c7e800003c9e8095e02985f28e678f66422436f949e2ab8f162d7e3f855e378f4a1f40b0c6fb2d4b205a800b6d713acebc5b014e61a543a5a194f9ac18d76b5440e3b1a569e7397f6cafa86966d7ba19e720413267a6ccea9c439671d2c680f2753ca184eeeb843450368acb4383a80741f0adba07f01d25eb3d1e23e0f2645d1cdfabfa410632f95a5f622f851c66ee7e30393cd7a4d67ff2a49c4f93c0984b5c2d4523497e4d64f95f08493564a1df87111c9bf3194fef97dcecc467ace45feeb685c5870d05f88a0f463db88d377442e1349acaf766218b54a9d624778e1c4e064c98e494198276eb2df7766411bef0ebb5000000000006065d635b0b7a00ee767221d8af9753387e0cd8d718f54a29df6eba3bd4c440e6e2172e3fcc01b8babb757b5c59217b80d0db3ba582814a604e4ef7a803e9ca7c85b35c9b93a9e0885e238b44ae1c2e64cce3b27083b8246829e64056000302bffff15405bd5f2eba20000000000000000000000000000000000009a9823fd8fbc5aa165099c5ed032b48ea12d8e0588dc52702e4084913a06d468d0928bad76d697e1f85ab030e788d38788ee5b5428d4a971cc97db9fd231088e570735ce129e7e77fc2777692664a1488fd8d6dff4dad618fd54f529d4555c6507009ee69dd1bc55258789b24052137e9637f3efbab71720f88c3c44b3b7486f979e8a3174b531f573fe0e5239c000be2733c49546f6e8a9175ec6f14dbf72cac91643b2fd99c29eca28a3c2e60d5e5b8795fae16a7c3ea57e728eca35eaf0155a39f97580e079175426c088a0208040982a0000000000000000000000000051ceaaf0159fe61f2eade7603d0a7a56fb09cd119ac06adb6597155ae47846892bb423c024d8cbe9240b71ec6dc2124d3a19e2d714b273d95d1d3aa737cb04a33615ff2a730e51067d5d675d7122361cfbc61a43b5afd865b60d4cae891b73220f17d25985a7f76834995e53a93a1c7b9eef267df691ca983a0b15bda7f6c5c1ca7aa50261a3089a1ebf0734c9b07e8951ff023263ad5aed8cfb49b49e128c697724c057d22c5df5aef27ce3db11d5ad5527d149d076e1a87e2df27c0cb8a67ad026bf953e88f10447e125c2c0f1aebee1f3390a9e3ddad4e2a6e0f6e4569fdefa19e870e04acf9493b963f98e23cfc665e4f465fa3f801e1957c399e45f61d3459b1c606204368bb931345af2823c487d2fd99db6ea6e7567335dc3008e7ffa06ca861551189d155bd077a79fe2c7e961352e56824f727d21d41eae78bfec4a2d7a7edbc8ef958c7ba599f7c25bf71c2340558aa12fdd24a88aaad5921aee7dae6a2f3009d9cb43ab4898d0f0aa565431b6abe585d75db04d1c9ba0b9de4ae8b0d3132bc6810cc9a693979f55174a72e1df9fdef35bc470f9e6e591982757f45c52c645d891bf63bb21fb66926ebe1a8525611fc3e8bb8795c36dc2a86b5ab46ff33cc74f61751b2dae92676db85c8d0c721b7ea4544bf51c95c86fcac1f434d09d1ee4928aafe23de66fed972e0dddfb33f64e48701b049239e7f552d816441d11c4c2647c014462344359198d97c4b6e9ed31ca18987b64de079b2bed641e8a92f13ca70844c65cb423d01950b0ebf44bd28e09c05d9ae5dd689fb880fb18d042219f5ac60c3a03b0a8d328733461f04c99607061c65ed14c61322a5ac2d371a95b8ad867ec92d13a4fa4ae033a09673866cd77f4bcdaaa05207166b19a8758d8855400d8c6a7242dc207251e8797eca24ea4f487663e60f2f5e1f1424958fd148f846830e88a42d93e1fe9c0b4a4a268921738938aa9f3cb3811ac87c54c8ebc8bcfb4613cc3a997ff1579edbd4ade8020e3ad001b072b1a751b588ac4639f35a58e00a50c0270608c7a7f10132b1c25b96a81232fbef665f6212f875b2a0000000000000000000000000000f841b35af2e300000000000000000087a5f4bca39ad01340e98399f47f81d522dddcabc93ca6b082eb6be80b24b87652f76c3042ce504ac67b01a62451724b9257a0edceacb715a627247d11689663302f02b90fd6e10638b372c3413ee3066af68ce7ae685ccbd815c567fc50947703444e5625daea863219ebccf6cb3bd813e011097619c3f3c5f72c08ac0fa8f7e2536073bfd9f326f7369a3b4f000c4a300d3ef04db5fcf063e7f92711d1eb068d789e6c4d85c34c89e3e5f73178067e2976212ffe3ec8c284389ec7197a382bcba30b101938062e292e5185d8c1893f90cad3d8cac60b84b39843eed5fa17c362977c788361346eeca1d69fe200bd55a8d7ee48e80266661574f362e2069cec64e7e4426eb0a76a9a72887f68b5081aaf99f4d0a863cf47798cbe87b00663da6c834674fc2160d047e95f011b64a06576016f074e9e6afbe7675636fcd7e8abf2d788f5c8b31857"], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x2e) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) close(r6) 5m29.70390665s ago: executing program 9 (id=2007): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x89}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x0, 0x0) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b702000020000000850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f00000006c0)='sched_switch\x00', r4}, 0x10) ioctl$KDSKBENT(0xffffffffffffffff, 0x4b31, &(0x7f0000000580)) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={0x0}, 0x18) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000004c0)={0x88, 0x2a, 0x9, 0x0, 0x0, {0x4, 0x0, 0x2c00}, [@typed={0x74, 0x27, 0x0, 0x0, @binary="db7edd693b3c2bf5cc9c5283ac52c7a507637054136f63d24501f59f7686686c27f4884804d213caf2a5dfa9e630f6a8784e7944ad4b7d64d66b3c715d9114ef37e4fb07c273598ea08daf4dd3c6fdb5a0f7dc9b1ae28cd02b63edbed884c4bbf440ddb824e37f91c29cbfa9bf618715"}]}, 0x88}, 0x1, 0x3000000}, 0x0) r6 = socket$alg(0x26, 0x5, 0x0) bind$alg(r6, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-camellia-asm\x00'}, 0x58) setsockopt$ALG_SET_KEY(r6, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5910fae9d6dcd3292ea54c7b6", 0x10) r7 = accept4(r6, 0x0, 0x0, 0x0) recvmsg$unix(r7, &(0x7f0000000300)={0x0, 0x0, 0x0}, 0x40000120) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x24000004, &(0x7f0000000000)={0xa, 0x4e22, 0x0, @empty}, 0x1c) r8 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r8, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000000)=@newsa={0x138, 0x10, 0x1, 0x0, 0x0, {{@in6=@loopback, @in=@multicast1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, 0x0, 0xc}, {@in=@empty, 0x0, 0x33}, @in6=@private1, {0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x3}, {0x4}, {0x0, 0x1}, 0x70bd2a, 0x0, 0xa}, [@algo_auth={0x48, 0x1, {{'sha256\x00'}}}]}, 0x138}}, 0x0) 5m28.259346708s ago: executing program 9 (id=2010): r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) r2 = socket(0x40000000015, 0x5, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bind$inet(r2, &(0x7f0000000340)={0x2, 0x0, @loopback}, 0x10) sendmmsg$inet(r2, &(0x7f00000028c0)=[{{&(0x7f0000000080)={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, 0x0, 0x0, &(0x7f0000002840)=[@ip_tos_int={{0x14}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @empty, @loopback}}}], 0x38}}], 0x1, 0x0) bind$inet6(r1, &(0x7f00004b8fe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) setsockopt$inet_sctp6_SCTP_DEFAULT_SEND_PARAM(r1, 0x84, 0xa, &(0x7f00000001c0)={0x0, 0x0, 0x5}, 0x20) sendto$inet6(r1, 0x0, 0x0, 0x41014, &(0x7f000005ffe4)={0xa, 0x4e22, 0x0, @loopback}, 0x1c) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r6, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) 5m26.544754138s ago: executing program 9 (id=2011): r0 = syz_open_dev$vbi(&(0x7f0000000080), 0x1, 0x2) ioctl$VIDIOC_DV_TIMINGS_CAP(r0, 0xc0905664, &(0x7f0000000240)={0x0, 0x0, '\x00', @bt={0xd, 0x72e8, 0x7, 0xffff, 0x2, 0x7000000000, 0x2, 0xe}}) 5m25.170357245s ago: executing program 40 (id=1991): openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x20000, 0x0) ioctl$KVM_CREATE_IRQCHIP(0xffffffffffffffff, 0xae60) lstat(&(0x7f0000000200)='./file0\x00', &(0x7f0000000240)) r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000680)={'bridge0\x00', 0x0}) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x1) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) r3 = syz_open_dev$dri(&(0x7f0000000140), 0x1, 0x0) r4 = syz_open_dev$dri(&(0x7f00000000c0), 0x1ff, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r4, 0xc04064a0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000340)=[0x0], 0x0, 0x2a, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_GETCONNECTOR(r3, 0xc05064a7, &(0x7f0000000780)={0x0, 0x0, 0x0, &(0x7f0000000280)=[0x0], 0x0, 0x0, 0x0, 0x0, r5}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)=ANY=[@ANYBLOB="3800000055003d0902000000fccbdf", @ANYRES32=r1, @ANYRES32=r1, @ANYBLOB="00000000ff0298df9725f98eed2300000000000100000000"], 0x84}}, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f0000000040)) bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=@bloom_filter={0x1e, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0182101, &(0x7f00000004c0)) openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x42, 0x0) r6 = syz_genetlink_get_family_id$l2tp(&(0x7f00000003c0), 0xffffffffffffffff) sendmsg$L2TP_CMD_TUNNEL_GET(0xffffffffffffffff, &(0x7f00000004c0)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000480)={&(0x7f0000000400)=ANY=[@ANYBLOB, @ANYRES16=r6, @ANYBLOB="000229bd7000fbdbdf2504000000050021000100000005001200f900000006001d000700000006001b004e20000005002200010000000500210001000000"], 0x44}, 0x1, 0x0, 0x0, 0x2}, 0x80) read$FUSE(0xffffffffffffffff, &(0x7f000000c3c0)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(0xffffffffffffffff, &(0x7f00000002c0)={0x50, 0x0, r7, {0x7, 0x1f, 0x0, 0x102080}}, 0x50) 5m24.000039281s ago: executing program 9 (id=2025): syz_emit_vhci(&(0x7f00000003c0)=ANY=[@ANYBLOB="02c8002d0029000100040d130000000000040900000000000000"], 0x32) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000006900000000000001000000940000000fad413e85000000070000"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r0}, 0x10) syz_mount_image$ext4(&(0x7f0000000740)='ext4\x00', &(0x7f0000000040)='./file0\x00', 0x1810714, &(0x7f0000000440)={[{@inode_readahead_blks={'inode_readahead_blks', 0x3d, 0x1}}, {@init_itable_val}, {@nolazytime}, {@grpid}, {@prjquota}, {@norecovery}, {@lazytime}, {@errors_continue}, {@auto_da_alloc}, {@test_dummy_encryption}]}, 0xff, 0x468, &(0x7f0000000780)="$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") r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x3, 0x0, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r1}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0x0) syz_mount_image$fuse(0x0, &(0x7f0000000300)='./file2\x00', 0x0, 0x0, 0x0, 0x0, 0x0) read$FUSE(0xffffffffffffffff, &(0x7f0000005780)={0x2020}, 0x1efe) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000180)='kfree\x00'}, 0x10) r5 = socket$inet6(0xa, 0x80002, 0x0) setsockopt$inet6_IPV6_RTHDR(r5, 0x29, 0x39, 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={0x0, &(0x7f0000000b80)=""/4090, 0x5e, 0xffa, 0x1, 0x0, 0x0, @void, @value}, 0x28) r6 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$KVM_CHECK_EXTENSION(r6, 0xae03, 0x9d) 5m20.205924591s ago: executing program 9 (id=2021): r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) r2 = socket(0x40000000015, 0x5, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bind$inet(r2, &(0x7f0000000340)={0x2, 0x0, @loopback}, 0x10) sendmmsg$inet(r2, &(0x7f00000028c0)=[{{&(0x7f0000000080)={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, 0x0, 0x0, &(0x7f0000002840)=[@ip_tos_int={{0x14}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @empty, @loopback}}}], 0x38}}], 0x1, 0x0) bind$inet6(r1, &(0x7f00004b8fe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) setsockopt$inet_sctp6_SCTP_DEFAULT_SEND_PARAM(r1, 0x84, 0xa, &(0x7f00000001c0)={0x0, 0x0, 0x5}, 0x20) sendto$inet6(r1, 0x0, 0x0, 0x41014, &(0x7f000005ffe4)={0xa, 0x4e22, 0x0, @loopback}, 0x1c) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r6, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) 5m5.056013734s ago: executing program 41 (id=2021): r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) r2 = socket(0x40000000015, 0x5, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bind$inet(r2, &(0x7f0000000340)={0x2, 0x0, @loopback}, 0x10) sendmmsg$inet(r2, &(0x7f00000028c0)=[{{&(0x7f0000000080)={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, 0x0, 0x0, &(0x7f0000002840)=[@ip_tos_int={{0x14}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @empty, @loopback}}}], 0x38}}], 0x1, 0x0) bind$inet6(r1, &(0x7f00004b8fe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) setsockopt$inet_sctp6_SCTP_DEFAULT_SEND_PARAM(r1, 0x84, 0xa, &(0x7f00000001c0)={0x0, 0x0, 0x5}, 0x20) sendto$inet6(r1, 0x0, 0x0, 0x41014, &(0x7f000005ffe4)={0xa, 0x4e22, 0x0, @loopback}, 0x1c) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r6, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) 21.122947506s ago: executing program 0 (id=2398): r0 = socket$nl_route(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x6) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) ioctl$BINDER_GET_FROZEN_INFO(0xffffffffffffffff, 0xc00c620f, &(0x7f00000003c0)) socket$inet_tcp(0x2, 0x1, 0x0) r4 = syz_init_net_socket$x25(0x9, 0x5, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000280)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x18, 0x18, 0x2, [@ptr, @restrict={0x0, 0x0, 0x0, 0x4}]}}, 0x0, 0x32, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x28) ioctl$SIOCX25CALLACCPTAPPRV(r4, 0x89e8) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFNL_MSG_CTHELPER_NEW(r5, &(0x7f00000063c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4001}, 0x0) syz_genetlink_get_family_id$ieee802154(&(0x7f0000000400), 0xffffffffffffffff) r6 = eventfd2(0x0, 0x0) io_setup(0x3f, &(0x7f0000000080)=0x0) io_submit(r7, 0x1, &(0x7f0000001480)=[&(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, r6, 0x0, 0x3f, 0x0, 0x0, 0x1, r6}]) sendmsg$nl_route(r0, 0x0, 0x20048840) r8 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000380)={&(0x7f0000000080)=ANY=[@ANYBLOB="9feb010018000000000000001c0000001c00000003000000010000000000000e020000000000000000000000000000050400000000"], 0x0, 0x37, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x28) bpf$MAP_CREATE(0x0, &(0x7f0000004440)=@base={0x5, 0x4, 0x4, 0x7, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, r8, 0x2, 0x1, 0x0, 0x0, @void, @value, @void, @value}, 0x48) 17.077862988s ago: executing program 8 (id=2394): bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, 0x0) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000540)=ANY=[], 0x50) mkdirat(0xffffffffffffff9c, 0x0, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) sched_setaffinity(0x0, 0xfffffef7, &(0x7f0000000740)=0x410000002) timer_gettime(0x0, 0x0) r2 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/consoles\x00', 0x0, 0x0) preadv2(r2, &(0x7f0000000100)=[{&(0x7f0000000080)=""/125, 0x7d}], 0x1, 0x8, 0x0, 0x0) r3 = socket$inet(0x2, 0x2, 0x1) setsockopt$SO_BINDTODEVICE(r3, 0x1, 0x19, &(0x7f0000000940)='batadv_slave_1\x00', 0x10) sendmsg$inet(0xffffffffffffffff, &(0x7f00000004c0)={&(0x7f0000000000)={0x2, 0x0, @multicast1}, 0x10, &(0x7f0000000880), 0x0, 0x0, 0x0, 0xe0000000}, 0x40) r4 = syz_open_dev$usbfs(&(0x7f0000000240), 0xb, 0x101301) ioctl$USBDEVFS_IOCTL(r4, 0xc0105512, 0x0) ioctl$USBDEVFS_IOCTL(r4, 0x80045505, &(0x7f0000000340)=@usbdevfs_connect) ioctl$USBDEVFS_SUBMITURB(r4, 0x8038550a, &(0x7f0000000180)=@urb_type_control={0x2, {0x8, 0x1}, 0x9, 0x6, 0x0, 0x0, 0x3, 0x9, 0x0, 0x9, 0x4, 0x0}) sched_setscheduler(0x0, 0x2, 0x0) unshare(0x2c020400) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000180)={0xffffffffffffffff, 0x0, 0x0, 0x1}, 0x20) 15.748598055s ago: executing program 4 (id=2396): r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000180)='./bus\x00', 0xe, &(0x7f00000002c0)={[{@init_itable}, {@resuid}, {@stripe}]}, 0x3, 0x445, &(0x7f0000000340)="$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") socket$nl_route(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) syz_mount_image$ext4(&(0x7f0000000240)='ext4\x00', &(0x7f0000000300)='./bus\x00', 0x1008002, &(0x7f0000000280)={[{@grpquota}, {@delalloc}, {@noblock_validity}, {@debug}, {@test_dummy_encryption}, {@jqfmt_vfsold}, {@nomblk_io_submit}, {@noauto_da_alloc}]}, 0x1, 0x5d8, &(0x7f00000005c0)="$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") getdents64(0xffffffffffffffff, 0x0, 0x0) chdir(0x0) openat(0xffffffffffffff9c, 0x0, 0x24001, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4) socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$SO_TIMESTAMPING(0xffffffffffffffff, 0x1, 0x41, &(0x7f0000000040)=0x90, 0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) socket$inet_udp(0x2, 0x2, 0x0) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bind$inet(0xffffffffffffffff, 0x0, 0x0) syz_mount_image$squashfs(&(0x7f0000000180), &(0x7f00000001c0)='./file0\x00', 0x144807, &(0x7f0000001180)=ANY=[], 0x1, 0x182, &(0x7f0000000c00)="$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") r4 = openat(0xffffffffffffff9c, &(0x7f0000004280)='./file0\x00', 0x0, 0x0) getdents64(r4, &(0x7f0000000100)=""/94, 0x5e) bind$bt_hci(r0, &(0x7f0000000080)={0x1f, 0xffff, 0x4}, 0x6) write(r0, &(0x7f0000000000)="0c000000010001", 0x7) 15.747640285s ago: executing program 0 (id=2405): write$P9_RVERSION(0xffffffffffffffff, 0x0, 0x15) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x0, 0x0) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000006900000000000001000000940000000fad413e850000000700000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r2}, 0x10) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, &(0x7f00000002c0), 0x0, &(0x7f0000000300)}, 0x10) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) write$cgroup_subtree(0xffffffffffffffff, 0x0, 0x2a) r3 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r3, &(0x7f0000000080)={0x1f, 0xffff, 0x3}, 0x6) write(r3, &(0x7f0000000340)="08000000010000", 0x7) bpf$OBJ_GET_MAP(0x7, 0x0, 0x0) 14.378039423s ago: executing program 0 (id=2397): bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x0, 0x0) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000540)=ANY=[], 0x50) mkdirat(0xffffffffffffff9c, 0x0, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) sched_setaffinity(0x0, 0xfffffef7, &(0x7f0000000740)=0x410000002) timer_gettime(0x0, 0x0) r2 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/consoles\x00', 0x0, 0x0) preadv2(r2, &(0x7f0000000100)=[{&(0x7f0000000080)=""/125, 0x7d}], 0x1, 0x8, 0x0, 0x0) r3 = socket$inet(0x2, 0x2, 0x1) setsockopt$SO_BINDTODEVICE(r3, 0x1, 0x19, &(0x7f0000000940)='batadv_slave_1\x00', 0x10) sendmsg$inet(0xffffffffffffffff, &(0x7f00000004c0)={&(0x7f0000000000)={0x2, 0x0, @multicast1}, 0x10, &(0x7f0000000880), 0x0, 0x0, 0x0, 0xe0000000}, 0x40) r4 = syz_open_dev$usbfs(&(0x7f0000000240), 0xb, 0x101301) ioctl$USBDEVFS_IOCTL(r4, 0xc0105512, 0x0) ioctl$USBDEVFS_IOCTL(r4, 0x80045505, &(0x7f0000000340)=@usbdevfs_connect) ioctl$USBDEVFS_SUBMITURB(r4, 0x8038550a, &(0x7f0000000180)=@urb_type_control={0x2, {0x8, 0x1}, 0x9, 0x6, 0x0, 0x0, 0x3, 0x9, 0x0, 0x9, 0x4, 0x0}) sched_setscheduler(0x0, 0x2, 0x0) unshare(0x2c020400) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000180)={0xffffffffffffffff, 0x0, 0x0, 0x1}, 0x20) 13.960379725s ago: executing program 4 (id=2399): syz_mount_image$squashfs(&(0x7f0000000180), &(0x7f0000000000)='./file0\x00', 0x800000, &(0x7f0000000500)=ANY=[@ANYRES16=0x0, @ANYBLOB="da42823e509616ae9a55d0343597086522f44a052ef8f88a8a64abac39413f811db3ba29e45a895c7a118795f77237ece84c9c45d8d2eb2a3cdc1cc16e59d6712fdfa5a7b7cf3f458acfda11f66f00269b82985a31ad3ddea2e3d332f35e4650e6f6bf0e75151841a5149d665af3a68cd8b512ebe57788f8e6cf15", @ANYRES32, @ANYRESHEX, @ANYRES64, @ANYRESOCT, @ANYRES64, @ANYRES64, @ANYBLOB="fad50f61722d8f2e0ccd6186e627354da57807aa9a4f9752c80919dfb058acc725c18edc3e8760cabb4294aa9e3fc7f54e7122bc70666228004fb7f23cfbaaa3844f52c446820ec0b99b05d05f570d8c151971cedc87359c3dd4a292636a5bbf63f65e24e48bdff93a7edd3feb44df8153a1f5b36dd7424aa3e0a69c2da0542601a506fb13f1bc27fd19eca65aff32c9999a38a10c949a1c2377ae7de9691249adf0dd07da9250db2395f54e7802427cb8c0ce373cb5df46cc07c06db0a8125ab3fed2eaa59816083c4574eb8a41e5187afff1"], 0x1, 0x1e5, &(0x7f00000006c0)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) timer_create(0x2, 0x0, &(0x7f00000000c0)) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) creat(&(0x7f00000000c0)='./bus\x00', 0x0) r2 = creat(&(0x7f0000000080)='./file0\x00', 0x0) r3 = open(0x0, 0x0, 0x0) syz_mount_image$ext4(&(0x7f0000000580)='ext4\x00', &(0x7f00000005c0)='./file0\x00', 0x1008002, &(0x7f0000000600)={[{@commit={'commit', 0x3d, 0x3ee}}, {@journal_ioprio={'journal_ioprio', 0x3d, 0x3}}, {@resuid}, {@max_batch_time={'max_batch_time', 0x3d, 0xefe}}, {@data_ordered}, {@jqfmt_vfsold}, {@barrier_val={'barrier', 0x3d, 0x648}}, {@barrier_val={'barrier', 0x3d, 0x7}}]}, 0x1, 0x5de, &(0x7f0000001200)="$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") fcntl$setstatus(r3, 0x4, 0x46c00) dup3(r3, r2, 0x0) io_setup(0x10, &(0x7f0000000100)=0x0) io_submit(r4, 0x0, 0x0) setsockopt$inet6_mreq(r1, 0x29, 0x15, &(0x7f0000000300)={@remote}, 0x14) timer_settime(0x0, 0x5, &(0x7f00000001c0)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1000001, 0x10012, r0, 0x1000) openat$cgroup_procs(0xffffffffffffffff, 0x0, 0x2, 0x0) openat$pfkey(0xffffffffffffff9c, &(0x7f0000000280), 0x402000, 0x0) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, 0xffffffffffffffff, &(0x7f0000000380)) bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x11, 0x4, &(0x7f0000000240)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) open_tree(0xffffffffffffff9c, &(0x7f00000002c0)='./bus\x00', 0x801) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x11, 0x4, 0x0, &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='xdp_exception\x00', r5}, 0x10) r6 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, 0x0) bpf$BPF_LINK_CREATE_XDP(0x1c, 0x0, 0x0) syz_emit_ethernet(0x36, 0x0, 0x0) 9.31067331s ago: executing program 5 (id=2036): r0 = memfd_create(&(0x7f0000000140)='y\x105\xfb\xf7u\x83%:r\xc2\xb9x\xa4q\xc1\xea_\x8cZ7\xe7a\x9b\x11x\x0e\xa1\xcf\x1a\x98S7\xc9\x00\x00\x00\x00\x00\x00\a\x00\x00\x00\x00\x00\x00\x04\x879\xa24\xa9am\xde\xb2\xd3\xcbZJoa\xc4\x1acB\xaa\xc1\xfb Q\xd4\xf4\x01\xa52\xe2DG\xd4\xbd{\x9f\xa9\x97\x9b@\xdb\x00b\xe1br\xb6\xea7\xe3\x10\xff\xc2\x9d\r2\x9e\x8e\x04sW\x1b\xb7\xb3\xa2\xc9&@\xca\xda\xdc\xe2/\x97X\xac\b\xb0\xc2<\x80E\x1a\xbc\xc7W\xda9VsA\xaf\xc6\xcf\xe1\xa1\xb5M\xa2\x85\xa6y\xc4J\xf1\xf7\xfcD\x95\xe3\xeb\xc7\xbc\x91\xb0\xa8\x9eo\xebF(\x9dL\x01vRk\xaacB\x04\xa7I\v\x86EZ\x96\xd5\x14OD\\\xe8R\xe4\xcd\xec\xcc\xd1\x0fre\xe86\xcd\xeb\xc4$\x98\x06J\xd6dD\x8d_U`ji{\xab\x97\xaf;l\x1f\xaf\xb38U\xcb\xfa\xb3j\x92\f\x81\xa0\xa2-g\b\x99\x0e\x8d\x8d\x16\xd9w\\\xf8\xce\xb0j\x9d\'\x93\xef\x1d\xa0H\xcd\xbd\xd9\xaf\x12$\x8d\x16%\x8b\x00', 0x3) ftruncate(r0, 0xffff) fcntl$addseals(r0, 0x409, 0x7) r1 = openat$udambuf(0xffffffffffffff9c, &(0x7f00000000c0), 0x2) ioctl$UDMABUF_CREATE(r1, 0x40187542, 0x0) r2 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f0000000400)={0x1, &(0x7f0000000140)=[{0x6, 0x0, 0x0, 0x7fffffff}]}) r3 = socket$unix(0x1, 0x5, 0x0) r4 = socket(0x1e, 0x5, 0x0) setsockopt$packet_tx_ring(r4, 0x10f, 0x87, &(0x7f0000000040)=@req3={0x80000000}, 0x1c) listen(r4, 0x0) r5 = socket(0x1e, 0x805, 0x0) semget$private(0x0, 0x2, 0x100) sendmsg$tipc(r5, &(0x7f0000000080)={&(0x7f0000000100)=@name, 0x10, 0x0}, 0x0) setsockopt$packet_tx_ring(r5, 0x10f, 0x87, &(0x7f00000000c0)=@req3={0x80000000}, 0x1c) r6 = dup(0xffffffffffffffff) ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x0) ioctl$KVM_CAP_X86_BUS_LOCK_EXIT(r6, 0x4068aea3, 0x0) accept4$inet6(r4, 0x0, 0x0, 0x0) sendmsg$tipc(r5, &(0x7f0000000640)={&(0x7f0000000300), 0x10, &(0x7f0000000500)=[{0x0}], 0x1, 0x0, 0x0, 0x20000000}, 0x0) r7 = dup2(r3, r2) close_range(r7, 0xffffffffffffffff, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) fsopen(0x0, 0x0) openat$nci(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) sendto$packet(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f00000002c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}}, 0x14) 9.30869616s ago: executing program 0 (id=2409): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) syz_emit_ethernet(0x66, &(0x7f0000000880)={@random="c16d473d990c", @link_local, @void, {@ipv4={0x800, @gre={{0x5, 0x4, 0x0, 0x0, 0x58, 0x0, 0x0, 0x0, 0x2f, 0x0, @private=0xfffffffc, @multicast1}, {{0x0, 0x0, 0x1, 0x0, 0x2, 0x0, 0x0, 0x4, 0x8100, 0x0, 0x2000}, {0x0, 0x0, 0x0, 0x0, 0x11}}}}}}, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x0) mount$bind(&(0x7f00000001c0)='.\x00', &(0x7f0000000100)='./file0/../file0\x00', 0x0, 0x905891, 0x0) mount$bind(&(0x7f00000003c0)='./file0\x00', &(0x7f0000000440)='./file0/file0\x00', 0x0, 0x212f4d1, 0x0) mount$9p_xen(0x0, &(0x7f0000000200)='./file0/file0\x00', 0x0, 0x24000, 0x0) r1 = open_tree(0xffffffffffffff9c, &(0x7f0000000480)='./file0\x00', 0x89901) move_mount(r1, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) socket(0x10, 0x400000000080803, 0x0) r2 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r2, &(0x7f0000000000)={0x2, 0x0, @local}, 0x10) sendmsg$nl_route_sched_retired(0xffffffffffffffff, 0x0, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000080), 0xffffffffffffffff) set_robust_list(0x0, 0x0) r5 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x80882, 0x0) ioctl$PPPIOCNEWUNIT(r5, 0xc004743e, &(0x7f0000000140)) ioctl$PPPIOCSFLAGS1(r5, 0x40047459, &(0x7f00000000c0)=0x41) pwritev(r5, &(0x7f0000000040)=[{&(0x7f0000000180)="80fd02000040", 0x42}], 0x1, 0x0, 0x0) sendmsg$IPVS_CMD_GET_DAEMON(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000480)={0x14, r4, 0x6c04073ee59f7719, 0x0, 0x0, {0x4}}, 0x14}}, 0x0) r6 = dup(r0) r7 = openat2(r6, &(0x7f0000000000)='./file0\x00', &(0x7f0000000100)={0x240300, 0x20, 0x2}, 0x18) setsockopt$inet_tcp_int(r7, 0x6, 0x7, &(0x7f0000000140)=0x6, 0x4) sendmsg$IPSET_CMD_CREATE(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000002c0)={0x14, 0x2, 0x6, 0x3, 0x0, 0xf0ffff}, 0x14}}, 0xc001) sendmsg$IPSET_CMD_DESTROY(r6, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000200)={0x1c, 0x3, 0x6, 0x401, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5}]}, 0x1c}}, 0x0) 9.29427125s ago: executing program 8 (id=2410): r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f00000000c0), 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000300)={{0x0, 0x2}}) r1 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r1, 0xc08c5332, &(0x7f00000003c0)={0x0, 0x0, 0x0, 'queue0\x00'}) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TIMER(r1, 0x40605346, &(0x7f0000000280)={0x0, 0x0, {0x3}}) ioctl$SNDRV_TIMER_IOCTL_PARAMS(r0, 0x40505412, &(0x7f0000000340)={0x7}) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@bloom_filter={0x1e, 0x9, 0x4, 0x3, 0x2004, 0xffffffffffffffff, 0x1002, '\x00', 0x0, 0xffffffffffffffff, 0x3, 0x9, 0x2, 0x2, @void, @value, @void, @value}, 0x48) bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f0000000900)={0x0, &(0x7f0000001500)=""/4096, &(0x7f0000000840), &(0x7f0000000040), 0x8, r2}, 0x38) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) r4 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000180)='./binderfs/binder0\x00', 0x0, 0x0) r5 = syz_usb_connect(0x0, 0x24, &(0x7f0000000480)=ANY=[@ANYBLOB="12010000703ac020580406709169000000010902120001000000000904000000c7769800b3a892ce84fba009bd524731b19a0b3862fcb2877057b925ba3c0aa3db37a0bc8c872450d5a2ca7a9070e023db31174361f81b2246a7f0f854d450197afb423e1a4b1e598ea532cac538495542c95fed0e938a48b6981f1183843be86978e2eceb71134d8b6aa41621de5409859ad20985633f27936c5f"], 0x0) syz_usb_control_io$hid(r5, 0x0, 0x0) syz_usb_control_io$uac1(r5, 0x0, 0x0) r6 = dup3(r4, r3, 0x0) ioctl$BINDER_WRITE_READ(r6, 0xc0306201, &(0x7f0000000140)={0x8, 0x2000000000000000, &(0x7f0000000540)=[@decrefs={0x4008630a}], 0x0, 0x0, 0x0}) r7 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000040), 0x45480, 0x0) ioctl$BLKZEROOUT(r7, 0x1265, &(0x7f0000000240)) r8 = socket$alg(0x26, 0x5, 0x0) bind$alg(r8, &(0x7f00000003c0)={0x26, 'rng\x00', 0x0, 0x0, 'drbg_nopr_ctr_aes256\x00'}, 0x58) openat$dsp(0xffffffffffffff9c, &(0x7f0000000000), 0x42, 0x0) r9 = syz_open_dev$sndctrl(&(0x7f0000000080), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(r9, 0x40045532, &(0x7f0000000100)) r10 = syz_open_dev$sndpcmp(&(0x7f00000001c0), 0x0, 0xa2c65) ioctl$SNDRV_PCM_IOCTL_DRAIN(r10, 0x4144, 0x0) ioctl$SNDRV_PCM_IOCTL_REWIND(r10, 0x40084146, &(0x7f0000000180)=0x4) 9.28220938s ago: executing program 4 (id=2411): getgid() openat$binderfs(0xffffffffffffff9c, &(0x7f0000004d40)='./binderfs/custom0\x00', 0x800, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = gettid() fcntl$lock(r0, 0x25, &(0x7f0000000080)={0x1, 0x2, 0x0, 0x1, r1}) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='cpuset.effective_cpus\x00', 0x275a, 0x0) write$binfmt_script(r2, &(0x7f0000000080), 0xfea7) syz_init_net_socket$nfc_raw(0x27, 0x5, 0x0) r3 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_mreqn(r3, 0x0, 0x40, &(0x7f00000001c0)={@private}, 0xc) r4 = socket$inet6(0xa, 0x3, 0x103) connect$inet6(r4, &(0x7f0000000000)={0xa, 0x0, 0x0, @loopback}, 0x1c) sendmmsg$inet6(r4, &(0x7f0000001700)=[{{0x0, 0x4000000, 0x0, 0x0, 0x0, 0x0, 0xfc}, 0x1030000}], 0x40000000000035c, 0x0) setsockopt$inet6_int(r4, 0x29, 0x3c, 0x0, 0x0) openat$cgroup_int(0xffffffffffffffff, &(0x7f00000061c0)='cpu.weight.nice\x00', 0x2, 0x0) openat$ptmx(0xffffffffffffff9c, &(0x7f0000006200), 0x2000, 0x0) openat$incfs(0xffffffffffffff9c, &(0x7f0000006240)='.log\x00', 0x80, 0xa) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000300)=@ipv6_delroute={0x1c, 0x19, 0x1, 0x0, 0x0, {0xa, 0x0, 0x0, 0x0, 0x0, 0x3}}, 0x1c}}, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000006280), 0x8400, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)=@can_newroute={0x34, 0x18, 0x1, 0x0, 0x0, {}, [@CGW_CS_XOR={0x8, 0x5, {0x0, 0x0, 0x8}}, @CGW_MOD_OR={0x15, 0x2, {{{}, 0x0, 0x0, 0x0, 0x0, "836404ac50491c9a"}, 0xa}}]}, 0x34}}, 0x0) r7 = socket$inet6(0xa, 0x1, 0x0) ioctl$sock_SIOCETHTOOL(r7, 0x8946, &(0x7f0000000080)={'veth0_macvtap\x00', &(0x7f0000000040)=@ethtool_channels={0x3d, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0xfffffffc}}) r8 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) getsockopt$IP6T_SO_GET_INFO(r8, 0x29, 0x40, &(0x7f00000001c0)={'mangle\x00'}, &(0x7f0000000240)=0x54) 8.787813103s ago: executing program 5 (id=2400): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) connect$unix(0xffffffffffffffff, &(0x7f0000000180)=@file={0x0, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) r3 = bpf$MAP_CREATE(0x0, 0x0, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$tipc(&(0x7f0000001600), 0xffffffffffffffff) r6 = socket(0x1e, 0x1, 0x0) connect$tipc(r6, &(0x7f0000000000)=@name={0x1e, 0x2, 0x0, {{0x1, 0x1}}}, 0x10) sendmsg$TIPC_CMD_SHOW_PORTS(r4, &(0x7f00000016c0)={0x0, 0x0, &(0x7f0000001680)={&(0x7f0000001640)={0x1c, r5, 0x1}, 0x1c}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000f00)=ANY=[@ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff", @ANYRES8=r4, @ANYRESDEC], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r7 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r7}, 0x10) writev(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}], 0x1) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r8, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000005c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a03000000000000000000010000000900010073797a30000000003c000000090a010400000000000000000100000008000a40000000000900020073797a32000000000900010073797a3000000000080005400000001f580000000c0a010200000000000000000100000008000440000000000900010073797a3000000000300003802c00008028000180230001008c7557da69279e189c7320d865399ef8cd0180f500000000000000040000000014000000020a0000000000000000000000000000140000001000010000000000000000000000000abdd4a8c62c80e58d073f0eaf78cd8fe7f54c5bf4e0d8e7929cae2077275acdf722c5d9eca431db3bdaf7c17678e65316593a4e267a104c83961a7c39f36fecb0bfb0d0b9b6baef2d8a06fd37f3d7c29685cb"], 0xf0}, 0x1, 0x0, 0x0, 0x8000}, 0x0) syz_open_procfs(0x0, &(0x7f0000000480)='net/icmp6\x00') preadv(0xffffffffffffffff, &(0x7f0000000280)=[{&(0x7f00000007c0)=""/152, 0x98}], 0x1, 0x40000147, 0x0) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000100)='./file1\x00', 0x200000, &(0x7f00000003c0)={[{@abort}, {@nombcache}, {@auto_da_alloc_val={'auto_da_alloc', 0x3d, 0x2}}, {@mb_optimize_scan={'mb_optimize_scan', 0x3d, 0x1}}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x6}}, {@nodelalloc}, {@jqfmt_vfsv1}, {@usrquota}, {@grpquota}]}, 0x2, 0x55d, &(0x7f0000000980)="$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") 8.732796483s ago: executing program 4 (id=2401): r0 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(r0, 0x0, &(0x7f00000000c0)=0x0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r2) sendmsg$NFC_CMD_DEV_UP(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)={0x1c, r3, 0x1, 0x123, 0x234, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r1}]}, 0x1c}}, 0x0) read$nci(r0, &(0x7f0000000200)=""/100, 0x64) write$nci(r0, &(0x7f0000000280)=@NCI_OP_CORE_RESET_RSP, 0x6) read$nci(r0, &(0x7f00000002c0)=""/100, 0x64) write$nci(r0, &(0x7f0000000340)=@NCI_OP_CORE_INIT_RSP, 0x14) read$nci(r0, &(0x7f0000000380)=""/100, 0x64) write$nci(r0, &(0x7f0000000400)=@NCI_OP_RF_DISCOVER_MAP_RSP, 0x4) sendmsg$NFC_CMD_START_POLL(r2, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000480)={&(0x7f00000004c0)={0x24, r3, 0x1, 0x123, 0x234, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r1}, @NFC_ATTR_PROTOCOLS={0x8, 0x3, 0xffffffff}]}, 0x24}}, 0x0) read$nci(r0, &(0x7f0000000500)=""/100, 0x64) write$nci(r0, &(0x7f0000000580)=@NCI_OP_CORE_SET_CONFIG_RSP, 0x5) read$nci(r0, &(0x7f00000005c0)=""/100, 0x64) write$nci(r0, &(0x7f0000000640)=@NCI_OP_CORE_SET_CONFIG_RSP, 0x5) read$nci(r0, &(0x7f0000000680)=""/100, 0x64) write$nci(r0, &(0x7f0000000700)=@NCI_OP_RF_DISCOVER_RSP, 0x4) write$nci(r0, &(0x7f0000000740)=@NCI_OP_RF_DISCOVER_NTF={0x1, 0x0, 0x3, 0x3, 0x0, @b={0x0, 0x1, 0x1, 0x1, {0x1, "aa"}}}, 0xa) sendmsg$NFC_CMD_ACTIVATE_TARGET(r2, &(0x7f0000000780)={0x0, 0x0, 0x0}, 0x0) read$nci(r0, &(0x7f0000000840)=""/100, 0x64) write$nci(r0, &(0x7f00000008c0)=@NCI_OP_CORE_CONN_CREATE_RSP={0x0, 0x0, 0x2, 0x4, 0x0, {0x0, 0x0, 0x0, 0x1}}, 0x7) 8.729890143s ago: executing program 0 (id=2402): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f0000000000)=0x5) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000001700)=0x4) openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x42, 0x0) pwritev2(0xffffffffffffffff, 0x0, 0x0, 0x7ffffe, 0x0, 0x0) syz_mount_image$f2fs(&(0x7f0000000000), &(0x7f0000000040)='./bus\x00', 0x1808014, &(0x7f0000000600)=ANY=[@ANYBLOB="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"/716], 0x5, 0x558b, &(0x7f00000079c0)="$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") sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000080000000000000", @ANYRES32, @ANYBLOB="0000000000000001000000000000000000", @ANYRES32=0x0], 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000240)=@framed={{}, [@ringbuf_query={{0x18, 0x1, 0x1, 0x0, r2}}]}, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f00000006c0)='sched_switch\x00', r3}, 0x10) r4 = getpid() sched_setscheduler(r4, 0x1, &(0x7f0000001700)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r6, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0) 7.45219795s ago: executing program 5 (id=2403): syz_init_net_socket$ax25(0x3, 0x2, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$tipc2(&(0x7f00000041c0), 0xffffffffffffffff) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz1\x00', 0x1ff) write$cgroup_type(0xffffffffffffffff, &(0x7f0000000280), 0x9) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x7, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000180)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r4 = openat$sw_sync_info(0xffffffffffffff9c, &(0x7f0000000240), 0x200, 0x0) recvmsg$kcm(r4, &(0x7f0000000c00)={&(0x7f00000003c0)=@caif, 0x80, &(0x7f0000000b40)=[{&(0x7f0000000440)=""/180, 0xb4}, {&(0x7f0000000500)=""/213, 0xd5}, {&(0x7f0000000740)=""/214, 0xd6}, {&(0x7f00000014c0)=""/4096, 0x1000}, {&(0x7f0000000840)=""/179, 0xb3}, {&(0x7f0000000600)=""/95, 0x5f}, {&(0x7f00000009c0)=""/95, 0x5f}, {&(0x7f0000000a40)=""/213, 0xd5}], 0x8, &(0x7f0000000300)=""/29, 0x1d}, 0x100) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0xf, &(0x7f0000000340)=@ringbuf={{}, {{0x18, 0x1, 0x1, 0x0, r3}}, {}, [], {{}, {}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) socket$nl_xfrm(0x10, 0x3, 0x6) openat$cgroup_procs(0xffffffffffffffff, &(0x7f00000002c0)='cgroup.threads\x00', 0x2, 0x0) r5 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$IP_VS_SO_SET_ADD(r5, 0x0, 0x482, &(0x7f0000000040)={0x84, @private=0xa010101, 0x4e23, 0x3, 'sh\x00', 0x1, 0x7, 0x49}, 0x2c) socket$inet_tcp(0x2, 0x1, 0x0) r6 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IP_VS_SO_SET_ADDDEST(r6, 0x0, 0x487, &(0x7f0000000000)={{0x84, @initdev={0xac, 0x1e, 0x1, 0x0}, 0x4e21, 0x3, 'lc\x00', 0x4, 0x81, 0x5}, {@rand_addr=0xac1414aa, 0x4e23, 0x0, 0xcb, 0x12d5c, 0x12d5c}}, 0x44) 7.231003861s ago: executing program 0 (id=2404): write$P9_RVERSION(0xffffffffffffffff, 0x0, 0x15) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x0, 0x0) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000006900000000000001000000940000000fad413e8500000007"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r3}, 0x10) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, &(0x7f00000002c0), 0x0, &(0x7f0000000300)}, 0x10) r4 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={0x0, r4}, 0x18) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000cc0), 0x1c1341, 0x0) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) write$cgroup_subtree(r5, 0x0, 0x2a) r6 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r6, &(0x7f0000000080)={0x1f, 0xffff, 0x3}, 0x6) write(r6, &(0x7f0000000340)="08000000010000", 0x7) bpf$OBJ_GET_MAP(0x7, 0x0, 0x0) 6.030822798s ago: executing program 42 (id=2404): write$P9_RVERSION(0xffffffffffffffff, 0x0, 0x15) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x0, 0x0) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000006900000000000001000000940000000fad413e8500000007"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r3}, 0x10) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, &(0x7f00000002c0), 0x0, &(0x7f0000000300)}, 0x10) r4 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={0x0, r4}, 0x18) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000cc0), 0x1c1341, 0x0) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) write$cgroup_subtree(r5, 0x0, 0x2a) r6 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r6, &(0x7f0000000080)={0x1f, 0xffff, 0x3}, 0x6) write(r6, &(0x7f0000000340)="08000000010000", 0x7) bpf$OBJ_GET_MAP(0x7, 0x0, 0x0) 6.023856708s ago: executing program 5 (id=2407): ioctl$sock_inet6_udp_SIOCINQ(0xffffffffffffffff, 0x541b, 0x0) syz_mount_image$ext4(&(0x7f0000000140)='ext4\x00', &(0x7f0000000000)='./bus\x00', 0x21081e, &(0x7f00000001c0)={[{@grpquota}, {@discard}, {@minixdf}]}, 0x1, 0x50f, &(0x7f00000004c0)="$eJzs3c9vI1cdAPCvndhxsmmTlh4AQVvawoJW6yTeNqp6gHJCgCohegRpGxJvFMWOo9gpTdhDeuaKxEqc4MgfwHlP3LkguHFZDkj8iEAbJA5GM55kvYm9STeJHcWfjzSa92Zm/f2+9c57Oy+xXwAj6/WI2IuIYkR8FBEz2fFcuk1GvB/pllz3eP/+8sH+/eVctNsf/jOXXpMci64/k7iRvWYpIn74nYif5E7Gbe7sri/VatWtrD7Xqm/ONXd2b6/Vl1arq9WNSmVxYXH+3TvvVC6sra/Vi1npy4/+sPeNnyVpTWdHuttxkTpNLxzFSYxHxPcvI9gQjGXtKQ47EZ5LPiJejog30vt/JsbSdxMAuM7a7Zloz3TXAYDrLp/OgeXy5WwuYDry+XK5M4f3Skzla41m69a9xvbGSmeubDYK+Xtrtep8Nlc4G4VcUl9Iy0/qlWP1OxHxUkT8YmIyrZeXG7WVYf7HBwBG2I1j4/9/JjrjPwBwzZWGnQAAMHB9x/+JweYBAAyO538AGD3GfwAYPZ3xf3LYaQAAA+T5HwBGj/EfAEbKDz74INnaB9n3X698vLO93vj49kq1uV6uby+Xlxtbm+XVRmM1/c6e+mmvV2s0Nhfeju1PZr+52WzNNXd279Yb2xutu+n3et+tFtKr9gbQMgCgn5dee/jnXDIivzeZbtG1lkNhqJkBly0/7ASAoRkbdgLA0FjtC0bXOZ7xTQ/ANdFjid6nlHp9QKjdbrcvLyXgkt38gvl/GFVd8/9+CxhGjPl/GF3m/2F0tdu5s675H2e9EAC42szxA31+/v9ytv9t9sOBH68cv+LBZWYFAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAV9vh+r/lbC3w6cjny+WIFyJiNgq5e2u16nxEvBgRf5ooTCT1hSHnDACcV/5vuWz9r5szb00/derVG0fFYkT89Fcf/vKTpVZr648Rxdy/Jg6Ptx5kxyuDzx4AON3hOJ3sH3Y9yD/ev798uA0yn79/OyJKnfgH+8U4OIo/HuPpvhSFiJj6dy6rd+S65i7OY+/TiPh8r/bnYjqdA+msfHo8fhL7hYHGzz8VP5+e6+yTv4vPXUAuMGoeJv3P+73uv3y8nu573/+ltIc6v6z/S15q+SDtA5/EP+z/xvr0f2eO8fbvv9spTZ4892nEF8cjDmMfdPU/h/FzfeK/dcb4f/nSq2/0O9f+dcTN6B2/O9Zcq74519zZvb1WX1qtrlY3KpXFhcX5d++8U5lL56jnTo4GE9n+H+/derFf/KT9U33il05p/1fP2P7f/O+jH32lUzzxBiTxv/5mr/j5eOUZ8ZMx8WtnjL809btSv3NJ/JU+7T/t/b/17LDfK2aFR3/dPbFsOAAwPM2d3fWlWq26paBw9QvJP9lBBh3/DBd/a1CJFaP3qZ+/2bmnj51qt58rVr8e4yJm3YCr4Oimj4j/DjsZAAAAAAAAAAAAAACgp0F8YmnYbQQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAOD6+n8AAAD//w1fz2A=") prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0200000004000000060000000500"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000001070000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000001900007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r4}, 0x10) request_key(&(0x7f0000000340)='user\x00', &(0x7f0000000380)={'syz', 0x3}, &(0x7f00000003c0)=')\x00', 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000a00)={0x0, 0x41, &(0x7f00000010c0)=ANY=[], 0x0, 0x100, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100000, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) syz_mount_image$ext4(&(0x7f00000004c0)='ext4\x00', &(0x7f0000000500)='./file0\x00', 0x0, &(0x7f0000001080), 0x1, 0x4e2, &(0x7f0000000b80)="$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") creat(&(0x7f0000000340)='./bus\x00', 0x0) openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x40, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='writeback_bdi_register\x00'}, 0x10) 6.021377198s ago: executing program 4 (id=2408): sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000009c0)=ANY=[@ANYRES16], 0x14}}, 0x0) r0 = socket$nl_audit(0x10, 0x3, 0x9) sendmsg$AUDIT_SIGNAL_INFO(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000140)={0x10}, 0x10}}, 0x0) syz_genetlink_get_family_id$SEG6(&(0x7f0000001c40), r0) sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000340)=ANY=[@ANYBLOB="380000000201090400000000000000000294"], 0x38}}, 0x0) bpf$ENABLE_STATS(0x20, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x3, 0x0, 0x0, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r1 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) bpf$MAP_CREATE_RINGBUF(0x0, 0x0, 0x0) openat$cgroup_ro(r1, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000800)={0x0, 0x0, &(0x7f000000ddc0)={&(0x7f0000000ac0)=@newtfilter={0x2c, 0x2c, 0x1, 0x70bd2b, 0x25dfdbff, {0x0, 0x0, 0x0, 0x0, {0xe, 0x3}, {0xfffe, 0x3}, {0x5, 0x5}}, [@TCA_CHAIN={0x8, 0xb, 0x1}]}, 0x2c}, 0x1, 0x0, 0x0, 0x24000000}, 0x2008c860) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x5, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000040)='./file0\x00', 0x759, &(0x7f0000000700)={[{@noload}, {@max_batch_time={'max_batch_time', 0x3d, 0x7}}, {@inode_readahead_blks={'inode_readahead_blks', 0x3d, 0x80000}}, {@errors_remount}, {@min_batch_time={'min_batch_time', 0x3d, 0x7f}, 0x0}, {@usrjquota}, {@noload}, {@jqfmt_vfsv1}, {@journal_ioprio={'journal_ioprio', 0x3d, 0x1}}, {@noacl}, {@noauto_da_alloc}, {@data_err_ignore}], [], 0x2c}, 0x2, 0x4f9, &(0x7f0000000200)="$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") setresgid(0xee00, 0x0, 0x0) r3 = getgid() setgid(r3) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='cgroup.controllers\x00', 0x26e1, 0x0) prctl$PR_CAP_AMBIENT(0x2f, 0x2, 0x4000000000) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000400)=@base={0x1, 0x3, 0x261, 0x2, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000500)={r4, &(0x7f0000000480), &(0x7f00000004c0)=@udp6, 0x4}, 0x20) ioctl$EVIOCSFF(r1, 0x40304580, &(0x7f0000001080)={0x0, 0x0, 0x0, {0x9a03, 0x1}, {0x4c, 0x2}, @period={0x0, 0x0, 0x0, 0x0, 0x4, {0xfffd, 0x7}, 0x0, 0x0}}) r5 = syz_open_dev$evdev(&(0x7f00000000c0), 0x2, 0x822b01) write$char_usb(r5, &(0x7f0000000040)="e2", 0x2778) 6.021031198s ago: executing program 8 (id=2418): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x0, 0x0) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b70800000000002c7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000800000000000000000001811", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r3 = fspick(0xffffffffffffffff, &(0x7f0000000400)='.\x00', 0x0) fsconfig$FSCONFIG_SET_BINARY(r3, 0x2, &(0x7f0000000480)='^!$\'\x00', 0x0, 0x0) capset(0x0, &(0x7f0000000040)={0x8, 0x8}) r4 = getpid() r5 = syz_open_dev$sndctrl(&(0x7f0000000100), 0x1, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_INFO(r5, 0xc1105511, &(0x7f0000000240)={{0x5, 0x0, 0x0, 0x0, 'syz1\x00'}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'syz0\x00', 0x0}) r6 = syz_pidfd_open(r4, 0x0) r7 = pidfd_getfd(r6, r6, 0x0) setns(r7, 0x20080) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) fsopen(&(0x7f00000003c0)='cgroup2\x00', 0x1) fsconfig$FSCONFIG_CMD_CREATE(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) ioctl$TIOCSPGRP(0xffffffffffffffff, 0x5410, &(0x7f0000000000)) syz_emit_vhci(&(0x7f00000007c0)=ANY=[@ANYBLOB="040e06006220"], 0x9) 3.459008712s ago: executing program 8 (id=2412): r0 = socket$nl_route(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000040)={0x80}, 0x213) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000001700)=ANY=[@ANYBLOB="180200001600050000000000200000000a00000000000000000200001200090000000000", @ANYRES32=0x0, @ANYBLOB="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"], 0x218}}, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b70300000000feff850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000b40)={0x11, 0x8, &(0x7f0000005c00)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0xffffffffffffff7e, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x17) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="180100001c0000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f00000000c0)='sys_enter\x00', r4}, 0x10) r5 = mmap$KVM_VCPU(&(0x7f0000ffb000/0x2000)=nil, 0x930, 0x1000002, 0x4018831, 0xffffffffffffffff, 0x0) r6 = userfaultfd(0x80801) ioctl$UFFDIO_API(r6, 0xc018aa3f, &(0x7f00000000c0)={0xaa, 0x15d}) ioctl$UFFDIO_REGISTER(r6, 0xc020aa00, &(0x7f0000000040)={{&(0x7f0000ffa000/0x3000)=nil, 0x3000}, 0x1}) syz_memcpy_off$KVM_EXIT_HYPERCALL(r5, 0x20, &(0x7f0000000180)="5e73663bf4082f7c6cbecbf09d6dd7be5a06dfd64563f329c16f799d1836bfc45a7badc8faed24bb77c848723a43602d1fe0d236c062e105ec77ffd00fb243c3111dda42112650cc", 0x0, 0x48) syz_memcpy_off$KVM_EXIT_MMIO(r5, 0x20, &(0x7f0000000140)="4d2d34b3baa3c75aa2147cea25de5aea8a6693b164d6fa67", 0x0, 0x18) close(r6) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000080)='sched_switch\x00', r3}, 0x10) r7 = signalfd4(0xffffffffffffffff, &(0x7f0000000080), 0x8, 0x0) readv(r7, &(0x7f0000000000)=[{&(0x7f0000000200)=""/215, 0x7ffff000}], 0x6) r8 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="180100001c0000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000140)='kmem_cache_free\x00', r8}, 0x10) setsockopt$inet6_udp_int(0xffffffffffffffff, 0x11, 0x0, 0x0, 0x0) rt_sigprocmask(0x0, &(0x7f0000000480)={[0xfffffffffffffffd]}, 0x0, 0x8) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f0000000040)=[{0x200000000006}]}) sendmsg$nl_route_sched_retired(r2, &(0x7f0000005700)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0x48, 0x2e, 0x1, 0x0, 0x0, {}, [{0x30, 0x1, [@m_ipt={0x2c, 0x0, 0x0, 0x0, {{0x8}, {0x4}, {0x4}, {0xc}, {0xc}}}]}, {0x4}]}, 0x48}}, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000080)='ext4_ext_remove_space_done\x00', r1}, 0x10) syz_mount_image$ext4(&(0x7f0000000080)='ext3\x00', &(0x7f0000000140)='./file1\x00', 0x2000040, &(0x7f0000000300)={[{@errors_remount}, {@nodiscard}, {@noquota}, {@init_itable}, {@grpquota}, {@resgid}, {@dioread_lock}, {@delalloc}, {@usrquota}]}, 0x10, 0x4e9, &(0x7f00000004c0)="$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") 3.178436823s ago: executing program 5 (id=2413): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) syz_open_dev$dri(0x0, 0x1f, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x3) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) ioctl$PIO_FONTX(0xffffffffffffffff, 0x4b6c, 0x0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) r2 = socket$inet_sctp(0x2, 0x5, 0x84) getsockopt$inet_sctp_SCTP_AUTO_ASCONF(r2, 0x84, 0x1e, &(0x7f0000000180), &(0x7f00000003c0)=0x4) r3 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000480), 0x101000, 0x0) sendmsg$TEAM_CMD_PORT_LIST_GET(r3, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={0x0, 0x2371}, 0x1, 0x0, 0x0, 0x564aa1ef2092538}, 0xc099) memfd_create(0x0, 0x6) sendmsg$TIPC_CMD_SET_NODE_ADDR(0xffffffffffffffff, &(0x7f0000000840)={0x0, 0x0, &(0x7f0000000800)={&(0x7f0000000380)={0x24, 0x0, 0x1, 0x70bd26, 0x25dfdbff, {{}, {}, {0x8, 0x11, 0x5}}, ["", ""]}, 0x24}, 0x1, 0x0, 0x0, 0xc000}, 0x884) write$sndseq(0xffffffffffffffff, 0x0, 0x0) r4 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r4, &(0x7f0000000080), 0x10) sendmsg$can_bcm(r4, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000400)={0x5, 0x0, 0x0, {}, {}, {}, 0x1, @can={{}, 0x0, 0x0, 0x0, 0x0, "f8ca44b8874fdf8a"}}, 0x48}}, 0x0) sendmsg$can_bcm(r4, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000680)={0x6, 0x0, 0x0, {0x0, 0x2710}, {}, {}, 0x1, @can={{}, 0x0, 0x0, 0x0, 0x0, "08d5f1c619795be7"}}, 0x48}}, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000100)={'wlan1\x00'}) getpgrp(0x0) sendmsg$NL80211_CMD_SET_WIPHY_NETNS(0xffffffffffffffff, &(0x7f00000004c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000280)={0x0}, 0x1, 0x0, 0x0, 0x20000000}, 0x4008010) syz_emit_ethernet(0x52, &(0x7f0000002d00)={@multicast, @random="777de85bf4dd", @val={@val={0x88a8, 0x6, 0x1, 0x1}, {0x8100, 0x6}}, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, '\x00', 0x14, 0x3a, 0x0, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @mcast2, {[], @ndisc_ns={0x87, 0x0, 0x0, @private0}}}}}}, 0x0) syz_usb_connect$uac1(0x0, 0x8c, &(0x7f0000000380)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x8, 0x1d6b, 0x101, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x7a, 0x3, 0x1, 0x0, 0x0, 0x0, {{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, {{}, [@mixer_unit={0x5}]}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {[@as_header={0x7, 0x24, 0x1, 0x0, 0x0, 0x1}]}, {{0x9, 0x5, 0x1, 0x9, 0x0, 0x0, 0x0, 0x0, {0x7}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {[@as_header={0x7}, @format_type_i_continuous={0x8, 0x24, 0x2, 0x1, 0x9, 0x3, 0x2, 0x48}]}, {{0x9, 0x5, 0x82, 0x9, 0x20, 0x0, 0x0, 0x0, {0x7}}}}}}}]}}, 0x0) 1.757384641s ago: executing program 4 (id=2414): prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000340)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000007200000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000140)='sched_switch\x00', r0}, 0x10) r1 = getpid() sched_setscheduler(r1, 0x1, &(0x7f0000000100)=0x5) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000002c40)={0x0, 0x17, 0x0, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r4 = socket$inet_tcp(0x2, 0x1, 0x0) r5 = fcntl$dupfd(r4, 0x0, r4) sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000000040)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) setsockopt$inet_tcp_TCP_MD5SIG(r5, 0x6, 0xe, 0x0, 0x0) r6 = socket$alg(0x26, 0x5, 0x0) mount(0x0, 0x0, &(0x7f00000000c0)='ramfs\x00', 0x0, 0x0) bind$alg(r6, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(aes-aesni)\x00'}, 0x58) r7 = accept4(r6, 0x0, 0x0, 0x0) setsockopt$ALG_SET_KEY(r6, 0x117, 0x1, &(0x7f0000000080)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) sendmmsg$inet6(r7, &(0x7f0000003b80)=[{{0x0, 0xd, &(0x7f00000003c0)=[{&(0x7f00000000c0)="e6", 0x2}], 0x1}, 0xff03}, {{0x0, 0x0, &(0x7f0000000740)=[{&(0x7f0000000440)='&', 0x23fff}], 0x1}}], 0x4000070, 0x8000) recvmmsg(r7, &(0x7f00000018c0)=[{{0x0, 0x0, &(0x7f0000001780)=[{&(0x7f0000000400)=""/34, 0x22}, {&(0x7f0000000480)=""/160, 0xa0}], 0x2}}, {{0x0, 0x0, &(0x7f0000000c80)=[{&(0x7f0000000380)=""/8, 0x8}, {0x0}, {&(0x7f0000000840)=""/209, 0xd1}, {&(0x7f00000006c0)=""/3, 0x3}, {&(0x7f0000000940)=""/184, 0xb8}, {&(0x7f0000000b80)=""/252, 0xfc}], 0x6}}, {{&(0x7f00000005c0)=@caif=@rfm, 0x80, 0x0}}, {{0x0, 0x0, &(0x7f0000001540)=[{0x0}, {&(0x7f0000001300)=""/161, 0xa1}, {0x0}, {&(0x7f0000001440)=""/233, 0xe9}], 0x4}}], 0x4, 0x0, 0x0) syz_mount_image$ext4(&(0x7f0000000780)='ext4\x00', &(0x7f0000000240)='./file0\x00', 0x2000490, &(0x7f0000000000)={[{@orlov}, {@errors_remount}]}, 0x1, 0x784, &(0x7f00000007c0)="$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") openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x275a, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x275a, 0x0) 1.202861444s ago: executing program 8 (id=2415): r0 = openat$audio1(0xffffffffffffff9c, &(0x7f0000000080), 0x129202, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) getrlimit(0x6, &(0x7f0000000000)) r4 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000180)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x11, 0xf, &(0x7f0000000340)=@ringbuf={{}, {{0x18, 0x1, 0x1, 0x0, r4}}, {}, [], {{}, {}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000001dc0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) getsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, &(0x7f0000000100)={@dev, 0x0, 0x2}, 0x0) add_key$keyring(&(0x7f00000003c0), &(0x7f0000000400)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffa) r5 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000002e80), 0x2, 0x0) ioctl$vim2m_VIDIOC_S_FMT(r5, 0xc0d05605, &(0x7f0000002ec0)={0x1, @vbi={0xfffffffc, 0x6, 0x33524742, 0x32314742, [0xa, 0x8], [0x5, 0x7], 0x108}}) r6 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x3) ioctl$FS_IOC_GETFSLABEL(r6, 0x400452c8, &(0x7f0000000100)) ioctl$SNDCTL_DSP_SETFRAGMENT(r0, 0xc004500a, &(0x7f0000000040)) ioctl$SNDCTL_DSP_SETFMT(r0, 0xc0045005, &(0x7f00000000c0)=0x20) write$binfmt_elf32(r0, 0x0, 0x4cd) ioctl$SNDCTL_DSP_SETFMT(r0, 0xc0045005, &(0x7f0000000100)=0x1) write$dsp(r0, &(0x7f0000000140)="755a5398d512d39077459e67ee110daaf0413bc745ef85b89f2141d513969bd8", 0x20) 0s ago: executing program 8 (id=2416): r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r0, 0x107, 0x12, 0x0, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) r1 = memfd_create(&(0x7f00000006c0)='\x103q}2\x9a\xce\xaf\x03\x86\xe7\xc0\x14\x8f\xf8\xd28\xf4\x1c\xc0\xf9\x1c\xa6\xab\bi\xe4^\xd5\xfd\xa9\r\xac7A\x94\xeb\xcd\t\x00\x90k\xd6\x05\r\x84\x87\x1c\b\x8c`\xea\x13A\x90m\xb6\x02\x00\x00\x00A\xc5\xb8_\xd4\x18,\fus\xb2\x99/\xc0\x9a\xf2O\xdb\xc0\x8b\x19\x17\xb7Rvd\xcb:\b0\xc3\x93;\xcc\x14\x02\xc4\xfd{\xbb-\x80\xbf\xab\xbf\xd2\xd3\xe0Cf\xb7\x7f\x93X\'\xf5/\xf9cY\x828\xa2\x00_\xb0#w\xae\xb8L\xeb\xa1\xecF\xbd\xf0\x91$s\xd8\x80\x1a\xc4\xe5=_b\x99\xf9\x84(\xcb,Y\xe6\xf0\x13\x15J\x9f,\xa5\xf2.A\x00\x00S\x94\xe7\x05no\xee\x8b\xb0ciB\x82\t9*\a\x88\xfe\xca\xcb\xe2G\x00\xa9;q\x0f\xb4\xfa\x8e\v\xf7\xc7\x86>wHw]=rW\x01\xe3\xdb\x10G-\xf7\xacD\xd7\xfb\xa0\x96\x85u\xddDv\x9c\x8b\xab\xe3F\x1d\xd2C\xdc\x1f\x80\x005\'y8a\xd3s_\xa6\b\x90\xab\xc9_\xc9\xcb;z\xcc\x9d5\xd2j\x1d\xd9\xe1\xcb\x1c\x156\xc5\xf2d\xfe\x0er\x01\xcdyF\xc1H\r\x94\xa9\x89P|\xcff\x9e\x03\xa4:\x04\v\xfe\x04\x02.\x9e\xf5~\x00\xf2TL\xac\x87<)\x02\xbaq\xae\x87\x1a\xc0\xe5\x90', 0x0) ftruncate(r1, 0x80079a0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) mmap(&(0x7f0000567000/0x1000)=nil, 0x1000, 0x3000001, 0x4015, r2, 0x0) clock_settime(0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) write$cgroup_type(0xffffffffffffffff, &(0x7f0000000180), 0x40010) syz_mount_image$ext4(&(0x7f00000004c0)='ext4\x00', &(0x7f0000000500)='./file0\x00', 0x1000410, &(0x7f0000000340)={[{@stripe={'stripe', 0x3d, 0x1ff}}, {@grpquota}]}, 0x1, 0x4fb, &(0x7f0000000b40)="$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") openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpuacct.usage_sys\x00', 0x275a, 0x0) quotactl$Q_GETNEXTQUOTA(0xffffffff80000901, &(0x7f0000000180)=@loop={'/dev/loop', 0x0}, 0x0, 0x0) dup(0xffffffffffffffff) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x8, 0x3, &(0x7f0000000040)=@framed, &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000d00)={r3, 0x0, 0xe, 0x0, &(0x7f0000000bc0)="ffc08ef872bc8833374472413fe6", 0x0, 0x0, 0x0, 0x0, 0xc0, 0x0, &(0x7f0000000cc0)='8', 0x0, 0x0, 0x8}, 0x48) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000001240)={0x0, 0x0, &(0x7f0000001200)={&(0x7f0000001040)=@gettaction={0x1c, 0x1e, 0x1, 0x0, 0x0, {}, [@action_gd=@TCA_ACT_TAB={0x4}, @action_gd=@TCA_ACT_TAB={0x4}]}, 0x1c}}, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x80000c, 0x2) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000440)={0x6, 0x5, &(0x7f0000000000)=@raw=[@exit, @map_idx, @func, @exit], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f00000000c0), 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) syz_emit_ethernet(0xf4, &(0x7f0000000180)=ANY=[], 0x0) ioctl$NS_GET_OWNER_UID(0xffffffffffffffff, 0xb704, &(0x7f0000000000)=0x0) syz_mount_image$ext4(&(0x7f00000000c0)='ext4\x00', &(0x7f0000000100)='./file1\x00', 0x1000447, &(0x7f0000000740)={[{@stripe={'stripe', 0x3d, 0x5}}, {@norecovery}, {@block_validity}, {@journal_async_commit}], [{@smackfsroot={'smackfsroot', 0x3d, ':\'\x1a:'}}, {@fowner_gt={'fowner>', r5}}]}, 0x44, 0x5e0, &(0x7f0000000140)="$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") kernel console output (not intermixed with test programs): hen stopping log writer [ 1302.799421][T13745] sctp: failed to load transform for md5: -2 [ 1302.806812][T13746] sctp: failed to load transform for md5: -2 [ 1302.884516][ T4256] NILFS (loop4): discard dirty page: offset=0, ino=2 [ 1302.911595][ T4256] NILFS (loop4): discard dirty block: blocknr=18, size=1024 [ 1302.918987][ T4256] NILFS (loop4): discard dirty block: blocknr=18446744073709551615, size=1024 [ 1303.049313][ T4256] NILFS (loop4): discard dirty block: blocknr=18446744073709551615, size=1024 [ 1303.083750][ T4256] NILFS (loop4): discard dirty block: blocknr=18446744073709551615, size=1024 [ 1303.132066][ T4256] NILFS (loop4): discard dirty page: offset=0, ino=6 [ 1303.138818][ T4256] NILFS (loop4): discard dirty block: blocknr=35, size=1024 [ 1303.263444][ T4256] NILFS (loop4): discard dirty block: blocknr=36, size=1024 [ 1303.295736][ T4256] NILFS (loop4): discard dirty block: blocknr=37, size=1024 [ 1303.332394][T13763] syz.9.1709[13763] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 1303.332508][T13763] syz.9.1709[13763] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 1303.371914][ T4256] NILFS (loop4): discard dirty block: blocknr=38, size=1024 [ 1303.408912][ T4256] NILFS (loop4): discard dirty page: offset=4096, ino=6 [ 1303.443664][ T4256] NILFS (loop4): discard dirty block: blocknr=39, size=1024 [ 1303.528302][ T4256] NILFS (loop4): discard dirty block: blocknr=18446744073709551615, size=1024 [ 1303.879475][ T4256] NILFS (loop4): discard dirty block: blocknr=18446744073709551615, size=1024 [ 1304.041974][T13770] loop9: detected capacity change from 0 to 512 [ 1304.081513][ T4256] NILFS (loop4): discard dirty block: blocknr=18446744073709551615, size=1024 [ 1304.092856][T13770] EXT4-fs (loop9): encrypted files will use data=ordered instead of data journaling mode [ 1304.123448][ T4256] NILFS (loop4): discard dirty page: offset=0, ino=5 [ 1304.130543][ T4256] NILFS (loop4): discard dirty block: blocknr=41, size=1024 [ 1304.195745][ T4256] NILFS (loop4): discard dirty block: blocknr=18446744073709551615, size=1024 [ 1304.227151][ T4256] NILFS (loop4): discard dirty block: blocknr=18446744073709551615, size=1024 [ 1304.270330][ T4256] NILFS (loop4): discard dirty block: blocknr=18446744073709551615, size=1024 [ 1304.280117][ T4256] NILFS (loop4): discard dirty page: offset=0, ino=4 [ 1304.287388][ T4256] NILFS (loop4): discard dirty block: blocknr=40, size=1024 [ 1304.294793][ T4256] NILFS (loop4): discard dirty block: blocknr=18446744073709551615, size=1024 [ 1304.304587][ T4256] NILFS (loop4): discard dirty block: blocknr=18446744073709551615, size=1024 [ 1304.313560][ T4256] NILFS (loop4): discard dirty block: blocknr=18446744073709551615, size=1024 [ 1304.322813][ T4256] NILFS (loop4): discard dirty page: offset=0, ino=3 [ 1304.329527][ T4256] NILFS (loop4): discard dirty block: blocknr=42, size=1024 [ 1304.339531][ T4256] NILFS (loop4): discard dirty block: blocknr=43, size=1024 [ 1304.349644][ T4256] NILFS (loop4): discard dirty block: blocknr=44, size=1024 [ 1304.359331][ T4256] NILFS (loop4): discard dirty block: blocknr=18446744073709551615, size=1024 [ 1304.373526][ T4256] NILFS (loop4): discard dirty page: offset=196608, ino=3 [ 1304.380687][ T4256] NILFS (loop4): discard dirty block: blocknr=18446744073709551615, size=1024 [ 1304.395117][T13770] EXT4-fs (loop9): 1 orphan inode deleted [ 1304.400897][T13770] EXT4-fs (loop9): 1 truncate cleaned up [ 1304.429636][T13770] EXT4-fs (loop9): mounted filesystem without journal. Quota mode: none. [ 1304.469543][ T4256] NILFS (loop4): discard dirty block: blocknr=18446744073709551615, size=1024 [ 1304.506260][ T4256] NILFS (loop4): discard dirty block: blocknr=49, size=1024 [ 1304.589099][ T4256] NILFS (loop4): discard dirty block: blocknr=18446744073709551615, size=1024 [ 1304.852390][ T27] audit: type=1326 audit(1732333003.774:150): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13774 comm="syz.1.1710" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7efc17f7e819 code=0x0 [ 1305.513212][T13784] netlink: 64 bytes leftover after parsing attributes in process `syz.1.1710'. [ 1306.582135][T13785] xt_NFQUEUE: number of total queues is 0 [ 1308.286258][ T27] audit: type=1326 audit(1732333007.204:151): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13789 comm="syz.4.1707" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f5e4fb7e819 code=0x0 [ 1309.211846][T13803] netlink: 'syz.1.1714': attribute type 3 has an invalid length. [ 1309.251768][T13805] loop4: detected capacity change from 0 to 512 [ 1309.258809][T13805] EXT4-fs: Invalid want_extra_isize 7 [ 1309.312215][T11343] EXT4-fs (loop9): unmounting filesystem. [ 1310.013419][T13812] loop4: detected capacity change from 0 to 164 [ 1321.753537][T13880] netlink: 'syz.4.1728': attribute type 3 has an invalid length. [ 1325.789397][T13904] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 1325.816564][T13904] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 1325.874139][T13904] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 1325.886068][T13904] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 1325.899704][T13904] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 1325.919520][T13904] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 1326.736052][T13906] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1328.115099][ T4302] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1328.131292][ T4264] Bluetooth: hci4: command 0x0409 tx timeout [ 1329.055507][ T4302] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1329.479699][ T4302] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1329.785881][ T4302] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1330.892972][ T4264] Bluetooth: hci4: command 0x041b tx timeout [ 1332.202392][T13953] loop9: detected capacity change from 0 to 1024 [ 1332.639642][T13953] EXT4-fs: Ignoring removed nomblk_io_submit option [ 1332.667757][ T27] audit: type=1800 audit(1732333031.454:152): pid=13957 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.8.1739" name="file0" dev="fuse" ino=0 res=0 errno=0 [ 1332.733638][T13953] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 1332.760974][T13953] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 1332.775888][T13901] chnl_net:caif_netlink_parms(): no params data found [ 1332.844359][T13953] EXT4-fs (loop9): mounted filesystem without journal. Quota mode: writeback. [ 1332.921569][ T4264] Bluetooth: hci4: command 0x040f tx timeout [ 1333.726054][T13972] loop8: detected capacity change from 0 to 512 [ 1333.904920][T13972] EXT4-fs error (device loop8): ext4_validate_block_bitmap:438: comm syz.8.1748: bg 0: block 393: padding at end of block bitmap is not set [ 1334.151414][T13972] EXT4-fs error (device loop8) in ext4_mb_clear_bb:6170: Corrupt filesystem [ 1334.272437][T13901] bridge0: port 1(bridge_slave_0) entered blocking state [ 1334.279585][T13901] bridge0: port 1(bridge_slave_0) entered disabled state [ 1334.507095][T13972] EXT4-fs (loop8): 2 truncates cleaned up [ 1334.514250][T13901] device bridge_slave_0 entered promiscuous mode [ 1334.523487][T13972] EXT4-fs (loop8): mounted filesystem without journal. Quota mode: writeback. [ 1335.001346][ T4264] Bluetooth: hci4: command 0x0419 tx timeout [ 1335.181821][T13901] bridge0: port 2(bridge_slave_1) entered blocking state [ 1335.208525][T13901] bridge0: port 2(bridge_slave_1) entered disabled state [ 1335.223401][T13901] device bridge_slave_1 entered promiscuous mode [ 1335.422776][T11343] EXT4-fs (loop9): unmounting filesystem. [ 1335.584355][ T9216] EXT4-fs (loop8): unmounting filesystem. [ 1335.730836][T13901] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1337.045985][T13901] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1337.772739][T14002] loop4: detected capacity change from 0 to 1024 [ 1337.780017][T14002] hfsplus: unable to parse mount options [ 1338.535776][T13991] x_tables: ip6_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING [ 1338.555518][T13901] team0: Port device team_slave_0 added [ 1338.893495][T14008] ipt_REJECT: TCP_RESET invalid for non-tcp [ 1342.585394][T13901] team0: Port device team_slave_1 added [ 1342.906070][T14017] loop1: detected capacity change from 0 to 2048 [ 1342.950306][T14022] NILFS (loop1): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 1343.789948][T14024] 9pnet: Could not find request transport: fd0xffffffffffffffff0x0000000000000006 [ 1343.799351][T14024] 9pnet: Unknown protocol version 9p200 [ 1344.099849][T14026] lo speed is unknown, defaulting to 1000 [ 1344.105910][T14026] lo speed is unknown, defaulting to 1000 [ 1344.130400][T14026] lo speed is unknown, defaulting to 1000 [ 1344.208119][T14026] infiniband syz2: RDMA CMA: cma_listen_on_dev, error -98 [ 1344.915201][T14037] syz.8.1759[14037] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 1344.915313][T14037] syz.8.1759[14037] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 1344.959162][T14022] NILFS (loop1): vblocknr = 23 has abnormal lifetime: start cno (= 4294967298) > current cno (= 3) [ 1344.999297][T14037] loop8: detected capacity change from 0 to 512 [ 1345.018712][T14037] EXT4-fs (loop8): encrypted files will use data=ordered instead of data journaling mode [ 1345.132172][T14022] NILFS error (device loop1): nilfs_bmap_propagate: broken bmap (inode number=4) [ 1345.156912][T14037] EXT4-fs (loop8): 1 orphan inode deleted [ 1345.169355][T14022] Remounting filesystem read-only [ 1345.174845][ T8824] NILFS (loop1): discard dirty page: offset=0, ino=6 [ 1345.196405][ T8824] NILFS (loop1): discard dirty block: blocknr=35, size=1024 [ 1345.211321][T14037] EXT4-fs (loop8): 1 truncate cleaned up [ 1345.217197][T14037] EXT4-fs (loop8): mounted filesystem without journal. Quota mode: none. [ 1345.236514][ T8824] NILFS (loop1): discard dirty block: blocknr=36, size=1024 [ 1345.297777][ T8824] NILFS (loop1): discard dirty block: blocknr=37, size=1024 [ 1345.350802][ T8824] NILFS (loop1): discard dirty block: blocknr=38, size=1024 [ 1345.400299][ T8824] NILFS (loop1): discard dirty page: offset=4096, ino=6 [ 1345.439321][ T8824] NILFS (loop1): discard dirty block: blocknr=39, size=1024 [ 1345.480414][ T8824] NILFS (loop1): discard dirty block: blocknr=18446744073709551615, size=1024 [ 1345.529419][T14026] lo speed is unknown, defaulting to 1000 [ 1345.536631][T14026] lo speed is unknown, defaulting to 1000 [ 1345.540992][ T8824] NILFS (loop1): discard dirty block: blocknr=18446744073709551615, size=1024 [ 1345.543610][T14026] lo speed is unknown, defaulting to 1000 [ 1345.551517][ T8824] NILFS (loop1): discard dirty block: blocknr=18446744073709551615, size=1024 [ 1345.558136][T14026] lo speed is unknown, defaulting to 1000 [ 1345.566140][ T8824] NILFS (loop1): discard dirty page: offset=0, ino=2 [ 1345.572874][T14026] lo speed is unknown, defaulting to 1000 [ 1345.578767][ T8824] NILFS (loop1): discard dirty block: blocknr=18, size=1024 [ 1345.585582][T14026] lo speed is unknown, defaulting to 1000 [ 1345.591933][ T8824] NILFS (loop1): discard dirty block: blocknr=18446744073709551615, size=1024 [ 1345.656607][T13901] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1345.670504][ T8824] NILFS (loop1): discard dirty block: blocknr=18446744073709551615, size=1024 [ 1345.751328][T13901] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1345.782393][ T8824] NILFS (loop1): discard dirty block: blocknr=18446744073709551615, size=1024 [ 1345.810305][ T8824] NILFS (loop1): discard dirty page: offset=0, ino=5 [ 1345.825500][ T8824] NILFS (loop1): discard dirty block: blocknr=41, size=1024 [ 1345.854966][ T8824] NILFS (loop1): discard dirty block: blocknr=18446744073709551615, size=1024 [ 1345.870879][T13901] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1345.912587][ T8824] NILFS (loop1): discard dirty block: blocknr=18446744073709551615, size=1024 [ 1345.938075][ T8824] NILFS (loop1): discard dirty block: blocknr=18446744073709551615, size=1024 [ 1345.968827][ T8824] NILFS (loop1): discard dirty page: offset=0, ino=3 [ 1345.973755][T13901] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1346.001225][ T8824] NILFS (loop1): discard dirty block: blocknr=42, size=1024 [ 1346.003206][T13901] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1346.008548][ T8824] NILFS (loop1): discard dirty block: blocknr=43, size=1024 [ 1346.008572][ T8824] NILFS (loop1): discard dirty block: blocknr=44, size=1024 [ 1346.034458][ C1] vkms_vblank_simulate: vblank timer overrun [ 1346.235301][T13901] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1346.248556][ T8824] NILFS (loop1): discard dirty block: blocknr=18446744073709551615, size=1024 [ 1346.257591][ T8824] NILFS (loop1): discard dirty page: offset=196608, ino=3 [ 1346.264976][ T8824] NILFS (loop1): discard dirty block: blocknr=18446744073709551615, size=1024 [ 1346.273936][ T8824] NILFS (loop1): discard dirty block: blocknr=18446744073709551615, size=1024 [ 1346.283004][ T8824] NILFS (loop1): discard dirty block: blocknr=49, size=1024 [ 1346.290426][ T8824] NILFS (loop1): discard dirty block: blocknr=18446744073709551615, size=1024 [ 1346.300353][T11455] NILFS (loop1): disposed unprocessed dirty file(s) when stopping log writer [ 1346.320959][T11455] NILFS (loop1): discard dirty page: offset=0, ino=4 [ 1346.361608][T11455] NILFS (loop1): discard dirty block: blocknr=40, size=1024 [ 1346.386044][T11455] NILFS (loop1): discard dirty block: blocknr=18446744073709551615, size=1024 [ 1347.696224][T11455] NILFS (loop1): discard dirty block: blocknr=18446744073709551615, size=1024 [ 1347.761252][T11455] NILFS (loop1): discard dirty block: blocknr=18446744073709551615, size=1024 [ 1347.962284][ T9216] EXT4-fs (loop8): unmounting filesystem. [ 1348.955434][T14073] loop8: detected capacity change from 0 to 16 [ 1349.051543][T14073] erofs: (device loop8): mounted with root inode @ nid 36. [ 1349.993368][ T4264] erofs: (device loop8): z_erofs_lz4_decompress_mem: failed to decompress -26 in[46, 4050] out[9000] [ 1350.015703][T14080] erofs: (device loop8): z_erofs_lz4_decompress_mem: failed to decompress -26 in[46, 4050] out[4096] [ 1350.732130][ T4302] device hsr_slave_0 left promiscuous mode [ 1350.750529][T14091] loop9: detected capacity change from 0 to 256 [ 1350.785761][ T4302] device hsr_slave_1 left promiscuous mode [ 1350.846385][ T4302] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1350.904126][ T4302] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1351.067653][ T4302] device bridge_slave_1 left promiscuous mode [ 1351.151965][ T4302] bridge0: port 2(bridge_slave_1) entered disabled state [ 1351.370698][ T4302] device bridge_slave_0 left promiscuous mode [ 1351.488922][ T4302] bridge0: port 1(bridge_slave_0) entered disabled state [ 1351.679583][ T4302] device veth1_macvtap left promiscuous mode [ 1351.689223][ T4302] device veth0_macvtap left promiscuous mode [ 1351.703113][ T4302] device veth1_vlan left promiscuous mode [ 1351.710059][ T4302] device veth0_vlan left promiscuous mode [ 1352.516456][ T4302] team0 (unregistering): Port device team_slave_1 removed [ 1352.579293][ T4302] team0 (unregistering): Port device team_slave_0 removed [ 1352.649957][ T4302] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1352.720639][ T4302] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1353.529891][ T4302] bond0 (unregistering): Released all slaves [ 1353.645607][T13901] device hsr_slave_0 entered promiscuous mode [ 1353.652761][T13901] device hsr_slave_1 entered promiscuous mode [ 1354.010332][T11071] Bluetooth: hci0: Frame reassembly failed (-84) [ 1355.706870][T14124] x_tables: unsorted entry at hook 3 [ 1356.041451][ T4264] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 1356.044040][T13904] Bluetooth: hci0: command 0x1003 tx timeout [ 1356.309566][T14117] netlink: 'syz.1.1772': attribute type 10 has an invalid length. [ 1356.317946][T14117] netlink: 40 bytes leftover after parsing attributes in process `syz.1.1772'. [ 1356.327602][T14117] bridge0: port 3(macvlan1) entered blocking state [ 1356.343151][T14117] bridge0: port 3(macvlan1) entered disabled state [ 1356.350734][T14117] device macvlan1 entered promiscuous mode [ 1356.357162][T14117] bridge0: port 3(macvlan1) entered blocking state [ 1356.363762][T14117] bridge0: port 3(macvlan1) entered forwarding state [ 1358.769043][T14156] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1785'. [ 1359.310870][T14148] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1359.717547][T14159] loop1: detected capacity change from 0 to 16 [ 1359.932586][T14159] erofs: (device loop1): mounted with root inode @ nid 36. [ 1362.591914][T14127] erofs: (device loop1): z_erofs_lz4_decompress_mem: failed to decompress -26 in[46, 4050] out[9000] [ 1362.604988][ T1275] ieee802154 phy0 wpan0: encryption failed: -22 [ 1362.612547][T14181] erofs: (device loop1): z_erofs_lz4_decompress_mem: failed to decompress -26 in[46, 4050] out[4096] [ 1365.065927][T13901] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 1365.083843][T13901] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 1365.556817][T13901] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 1366.121913][T13901] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 1366.857457][T13901] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1367.050798][T13901] 8021q: adding VLAN 0 to HW filter on device team0 [ 1367.569492][T11071] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 1367.595792][T11071] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 1367.831302][T14225] netlink: 19 bytes leftover after parsing attributes in process `syz.1.1788'. [ 1368.947398][T11071] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 1369.232418][T11071] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 1369.355643][T11071] bridge0: port 1(bridge_slave_0) entered blocking state [ 1369.362838][T11071] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1369.438679][T11071] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 1369.475152][T11071] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 1369.551917][T11071] bridge0: port 2(bridge_slave_1) entered blocking state [ 1369.559092][T11071] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1370.168370][T11071] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 1370.341484][ T9010] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 1370.363586][ T9010] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 1370.403147][ T9010] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 1370.431254][ T9010] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 1370.461859][ T9010] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 1370.502312][ T9010] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 1370.550281][T14241] loop1: detected capacity change from 0 to 2048 [ 1371.920716][T14241] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 1371.939176][ T9010] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 1372.168502][ T9010] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 1372.218064][ T9010] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 1372.286564][T13901] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 1372.311341][T10349] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 1372.326582][T13901] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 1372.366698][ T9010] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 1372.392040][ T9010] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 1372.511965][T10349] usb 2-1: Using ep0 maxpacket: 16 [ 1372.524954][T10349] usb 2-1: config 1 interface 0 altsetting 8 bulk endpoint 0x82 has invalid maxpacket 16 [ 1372.640574][T10349] usb 2-1: config 1 interface 0 altsetting 8 bulk endpoint 0x3 has invalid maxpacket 8 [ 1372.681335][T10349] usb 2-1: config 1 interface 0 has no altsetting 0 [ 1372.718337][T10349] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 1372.734241][T10349] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1372.782747][T10349] usb 2-1: Product: syz [ 1372.803187][T10349] usb 2-1: Manufacturer: syz [ 1372.808244][T10349] usb 2-1: SerialNumber: syz [ 1372.863798][T14241] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 1372.871173][T14241] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 1374.616531][T10349] cdc_ether: probe of 2-1:1.0 failed with error -71 [ 1374.631462][T10349] usb 2-1: USB disconnect, device number 2 [ 1374.974600][ T6112] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 1374.985079][ T6112] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 1375.979046][T13901] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1377.331045][T11071] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 1377.382084][T11071] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 1382.822673][T14326] loop8: detected capacity change from 0 to 1024 [ 1383.749429][T14326] EXT4-fs (loop8): mounted filesystem without journal. Quota mode: none. [ 1384.006496][T14332] rdma_rxe: rxe_register_device failed with error -23 [ 1384.013565][T14332] rdma_rxe: failed to add team_slave_1 [ 1384.725750][ T4265] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 1386.756074][ T4265] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 1386.767653][ T4265] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 1386.776249][ T4265] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 1386.784326][ T4264] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 1386.791930][ T4265] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 1386.897644][T14325] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1386.957289][T14342] lo speed is unknown, defaulting to 1000 [ 1387.368014][T14360] xt_NFQUEUE: number of total queues is 0 [ 1388.921533][T14127] Bluetooth: hci0: command 0x0409 tx timeout [ 1390.229675][ T9216] EXT4-fs (loop8): unmounting filesystem. [ 1390.364197][T14342] chnl_net:caif_netlink_parms(): no params data found [ 1392.057959][T14127] Bluetooth: hci0: command 0x041b tx timeout [ 1392.282709][T14394] loop1: detected capacity change from 0 to 256 [ 1392.339781][T14394] exfat: Deprecated parameter 'utf8' [ 1392.391987][T14394] exfat: Deprecated parameter 'utf8' [ 1392.412711][T14394] exfat: Deprecated parameter 'utf8' [ 1392.470891][T14394] exFAT-fs (loop1): failed to load upcase table (idx : 0x00010000, chksum : 0xabf88b1f, utbl_chksum : 0xe619d30d) [ 1392.536174][T14342] bridge0: port 1(bridge_slave_0) entered blocking state [ 1392.557727][T14397] Bluetooth: MGMT ver 1.22 [ 1392.558292][T14342] bridge0: port 1(bridge_slave_0) entered disabled state [ 1392.570690][T14342] device bridge_slave_0 entered promiscuous mode [ 1392.867681][T14342] bridge0: port 2(bridge_slave_1) entered blocking state [ 1393.558195][T14342] bridge0: port 2(bridge_slave_1) entered disabled state [ 1393.795340][T14342] device bridge_slave_1 entered promiscuous mode [ 1394.221952][ T4265] Bluetooth: hci0: command 0x040f tx timeout [ 1395.373861][T14417] loop9: detected capacity change from 0 to 8192 [ 1395.863048][ T3621] loop9: p1 p2 p4 [ 1395.866989][ T3621] loop9: p1 size 108986237 extends beyond EOD, truncated [ 1395.932470][ T3621] loop9: p2 start 65535 is beyond EOD, truncated [ 1395.938878][ T3621] loop9: p4 start 50331648 is beyond EOD, truncated [ 1395.999344][T14342] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1396.062988][T14342] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1396.090668][T14424] loop9: detected capacity change from 0 to 128 [ 1396.275707][T14342] team0: Port device team_slave_0 added [ 1396.521441][T14127] Bluetooth: hci0: command 0x0419 tx timeout [ 1397.050817][T14342] team0: Port device team_slave_1 added [ 1397.074377][T14012] udevd[14012]: inotify_add_watch(7, /dev/loop9p1, 10) failed: No such file or directory [ 1397.285572][T14342] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1397.329646][T14438] loop9: detected capacity change from 0 to 256 [ 1397.337143][T14342] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1397.877080][T14438] exFAT-fs (loop9): failed to load upcase table (idx : 0x00010000, chksum : 0xadbf5ead, utbl_chksum : 0xe619d30d) [ 1398.202745][T14342] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1398.253421][T14342] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1398.260408][T14342] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1398.288420][T14342] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1399.647429][T14455] loop8: detected capacity change from 0 to 2048 [ 1399.660269][T14457] loop9: detected capacity change from 0 to 256 [ 1399.751121][T14458] loop1: detected capacity change from 0 to 2048 [ 1399.769854][T14457] exfat: Deprecated parameter 'utf8' [ 1399.828406][T14458] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 1400.000774][T14457] exfat: Deprecated parameter 'utf8' [ 1400.006299][T14457] exfat: Deprecated parameter 'utf8' [ 1400.033914][T14342] device hsr_slave_0 entered promiscuous mode [ 1400.061642][T14342] device hsr_slave_1 entered promiscuous mode [ 1400.078376][T14462] NILFS (loop8): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 1401.505203][T14342] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1401.951559][T14457] exFAT-fs (loop9): failed to load upcase table (idx : 0x00010000, chksum : 0xabf88b1f, utbl_chksum : 0xe619d30d) [ 1402.009556][T14342] Cannot create hsr debugfs directory [ 1402.682607][T14453] sctp: failed to load transform for md5: -2 [ 1403.646134][T14479] xt_NFQUEUE: number of total queues is 0 [ 1405.812504][T14501] loop8: detected capacity change from 0 to 512 [ 1407.000664][T14501] EXT4-fs (loop8): Test dummy encryption mode enabled [ 1407.126564][ T4338] device hsr_slave_0 left promiscuous mode [ 1407.148990][ T4338] device hsr_slave_1 left promiscuous mode [ 1407.179439][ T4338] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1407.223819][ T4338] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1407.249985][T14501] EXT4-fs error (device loop8): __ext4_iget:5055: inode #11: block 1: comm syz.8.1842: invalid block [ 1407.282216][ T4338] device bridge_slave_1 left promiscuous mode [ 1407.288424][ T4338] bridge0: port 2(bridge_slave_1) entered disabled state [ 1407.309243][T14501] EXT4-fs error (device loop8): ext4_orphan_get:1405: comm syz.8.1842: couldn't read orphan inode 11 (err -117) [ 1407.360555][T14501] EXT4-fs (loop8): mounted filesystem without journal. Quota mode: none. [ 1408.135921][ T4338] device bridge_slave_0 left promiscuous mode [ 1408.163668][ T4338] bridge0: port 1(bridge_slave_0) entered disabled state [ 1409.577067][T14529] fscrypt (loop8): Missing crypto API support for AES-256-XTS (API name: "xts(aes)") [ 1409.598572][T14531] fscrypt (loop8): Missing crypto API support for AES-256-XTS (API name: "xts(aes)") [ 1409.756074][ T9216] EXT4-fs (loop8): unmounting filesystem. [ 1412.021411][ T4297] usb 2-1: new high-speed USB device number 3 using dummy_hcd [ 1412.951151][ T4297] usb 2-1: Using ep0 maxpacket: 32 [ 1412.962397][ T4297] usb 2-1: New USB device found, idVendor=05ac, idProduct=023f, bcdDevice=e0.d8 [ 1412.991176][ T4297] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1413.049550][ T4297] usb 2-1: config 0 descriptor?? [ 1414.104808][ T4297] input: bcm5974 as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/input/input15 [ 1414.156385][ T4265] Bluetooth: hci4: sending frame failed (-49) [ 1414.166926][T14127] Bluetooth: hci4: Opcode 0x1003 failed: -49 [ 1414.183341][ T3606] bcm5974 2-1:0.0: could not read from device [ 1414.287921][ T4297] usb 2-1: USB disconnect, device number 3 [ 1414.985328][ T4338] team0 (unregistering): Port device team_slave_1 removed [ 1416.130618][ T4338] team0 (unregistering): Port device team_slave_0 removed [ 1417.871668][T10349] usb 10-1: new high-speed USB device number 2 using dummy_hcd [ 1418.115194][ T4338] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1418.376100][T14603] loop4: detected capacity change from 0 to 256 [ 1418.733465][T10349] usb 10-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 1418.746946][T14603] FAT-fs (loop4): Directory bread(block 64) failed [ 1418.753596][T14603] FAT-fs (loop4): Directory bread(block 65) failed [ 1418.760257][T14603] FAT-fs (loop4): Directory bread(block 66) failed [ 1418.767185][T14603] FAT-fs (loop4): Directory bread(block 67) failed [ 1418.768076][T10349] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1418.782851][T14603] FAT-fs (loop4): Directory bread(block 68) failed [ 1418.789597][T14603] FAT-fs (loop4): Directory bread(block 69) failed [ 1418.797200][T14603] FAT-fs (loop4): Directory bread(block 70) failed [ 1418.804014][T14603] FAT-fs (loop4): Directory bread(block 71) failed [ 1418.811397][T14603] FAT-fs (loop4): Directory bread(block 72) failed [ 1418.839668][T14605] dlm: no local IP address has been set [ 1418.845973][T14605] dlm: cannot start dlm midcomms -107 [ 1418.883285][T14603] FAT-fs (loop4): Directory bread(block 73) failed [ 1419.595602][T10349] usb 10-1: config 0 descriptor?? [ 1419.601602][T10349] usb 10-1: can't set config #0, error -71 [ 1419.615250][T10349] usb 10-1: USB disconnect, device number 2 [ 1419.732579][ T4338] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1420.563741][ T4338] bond0 (unregistering): Released all slaves [ 1426.293251][ T1275] ieee802154 phy0 wpan0: encryption failed: -22 [ 1426.826922][T14629] netlink: 'syz.1.1864': attribute type 10 has an invalid length. [ 1429.840262][T14636] overlayfs: bad index found (index=index/00fb2100018bc248b42010413d90510a6fcb70f0af5c822f981504000000000000, ftype=2000, origin ftype=a000). [ 1429.862262][T14636] loop8: detected capacity change from 0 to 256 [ 1429.868849][T14636] overlayfs: bad index found (index=index/00fb2100018bc248b42010413d90510a6fcb70f0af5c822f981504000000000000, ftype=2000, origin ftype=a000). [ 1429.884556][T14636] overlayfs: bad index found (index=index/00fb2100018bc248b42010413d90510a6fcb70f0af5c822f981504000000000000, ftype=2000, origin ftype=a000). [ 1429.900279][T14127] Bluetooth: hci0: command 0x0405 tx timeout [ 1429.926979][T14629] bridge0: port 3(macvlan1) entered disabled state [ 1429.933731][T14629] bridge0: port 2(bridge_slave_1) entered disabled state [ 1430.001488][T14629] bridge0: port 3(macvlan1) entered blocking state [ 1430.008176][T14629] bridge0: port 3(macvlan1) entered forwarding state [ 1430.015292][T14629] bridge0: port 2(bridge_slave_1) entered blocking state [ 1430.022525][T14629] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1430.029954][T14629] bridge0: port 1(bridge_slave_0) entered blocking state [ 1430.037171][T14629] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1430.083036][T14629] bond0: (slave bridge0): Enslaving as an active interface with an up link [ 1430.215774][T14645] loop4: detected capacity change from 0 to 256 [ 1430.225411][T14645] exfat: Deprecated parameter 'namecase' [ 1430.288312][T14645] exFAT-fs (loop4): failed to load upcase table (idx : 0x00010000, chksum : 0xb89b369d, utbl_chksum : 0xe619d30d) [ 1430.341638][T14645] syz.4.1867: attempt to access beyond end of device [ 1430.341638][T14645] loop4: rw=524288, sector=34359738488, nr_sectors = 8 limit=256 [ 1430.361370][T14645] syz.4.1867: attempt to access beyond end of device [ 1430.361370][T14645] loop4: rw=0, sector=34359738488, nr_sectors = 8 limit=256 [ 1430.395611][ T27] audit: type=1800 audit(1732333129.294:153): pid=14645 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.4.1867" name="file1" dev="loop4" ino=1048697 res=0 errno=0 [ 1430.415757][ C1] vkms_vblank_simulate: vblank timer overrun [ 1431.064717][T14012] I/O error, dev loop8, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 1431.427642][T14652] loop4: detected capacity change from 0 to 128 [ 1435.074661][T14342] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 1435.311705][T14342] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 1435.430053][T14342] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 1435.513714][T14342] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 1435.680354][T14686] loop9: detected capacity change from 0 to 128 [ 1436.045101][T14684] loop1: detected capacity change from 0 to 1024 [ 1436.161603][T14684] EXT4-fs: Ignoring removed nobh option [ 1436.290257][T14684] EXT4-fs: Ignoring removed orlov option [ 1436.381991][T14684] EXT4-fs: Ignoring removed nomblk_io_submit option [ 1436.865670][T14342] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1436.915108][ T4302] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 1436.930343][ T4302] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 1436.958761][T14342] 8021q: adding VLAN 0 to HW filter on device team0 [ 1436.958926][T14684] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none. [ 1436.983392][ T4302] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 1437.008584][ T4302] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 1437.168658][ T4302] bridge0: port 1(bridge_slave_0) entered blocking state [ 1437.175900][ T4302] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1437.284166][ T4302] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 1437.348138][ T4302] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 1437.367072][ T4302] bridge0: port 2(bridge_slave_1) entered blocking state [ 1437.374910][ T4302] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1437.430763][ T4302] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 1437.454949][ T4302] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 1437.477219][ T4302] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 1437.546011][ T4302] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 1437.691638][ T4302] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 1438.039844][ T4302] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 1438.318217][ T4302] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 1438.372054][ T4302] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 1438.457326][T14714] netlink: 'syz.4.1880': attribute type 10 has an invalid length. [ 1438.506277][T11455] EXT4-fs (loop1): unmounting filesystem. [ 1438.515664][T14714] bridge0: port 3(macvlan1) entered disabled state [ 1438.525415][T14714] bridge0: port 2(bridge_slave_1) entered disabled state [ 1438.532933][T14714] bridge0: port 1(bridge_slave_0) entered disabled state [ 1438.699040][T14714] bridge0: port 3(macvlan1) entered blocking state [ 1438.705998][T14714] bridge0: port 3(macvlan1) entered forwarding state [ 1438.713504][T14714] bridge0: port 2(bridge_slave_1) entered blocking state [ 1438.720872][T14714] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1438.728847][T14714] bridge0: port 1(bridge_slave_0) entered blocking state [ 1438.736436][T14714] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1439.264744][T14714] bond0: (slave bridge0): Enslaving as an active interface with an up link [ 1439.351944][ T4338] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 1439.381003][ T4338] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 1439.418684][ T4338] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 1439.617204][ T4338] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 1440.883567][T14737] ipt_rpfilter: unknown options [ 1442.086295][T14743] syz.4.1884 (14743) used greatest stack depth: 17208 bytes left [ 1443.068067][ T4265] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 1443.082942][ T4265] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 1443.094214][ T4264] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 1443.104058][ T4264] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 1443.140320][ T4264] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 1443.166052][ T4265] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 1443.330211][T14769] loop4: detected capacity change from 0 to 512 [ 1443.341102][T14769] EXT4-fs: Ignoring removed nomblk_io_submit option [ 1443.705118][T14769] EXT4-fs (loop4): Test dummy encryption mode enabled [ 1444.022832][T14769] EXT4-fs (loop4): 1 truncate cleaned up [ 1444.028543][T14769] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 1445.480710][ T4264] Bluetooth: hci4: command 0x0409 tx timeout [ 1445.892874][ T4256] EXT4-fs (loop4): unmounting filesystem. [ 1446.981023][T14761] lo speed is unknown, defaulting to 1000 [ 1447.418001][T14796] mkiss: ax0: crc mode is auto. [ 1447.420244][T14799] loop4: detected capacity change from 0 to 512 [ 1447.492103][T14799] EXT4-fs (loop4): mounting ext3 file system using the ext4 subsystem [ 1447.651164][T14127] Bluetooth: hci4: command 0x041b tx timeout [ 1447.783806][T14799] EXT4-fs error (device loop4): ext4_get_journal_inode:5734: comm syz.4.1891: inode #67108864: comm syz.4.1891: iget: illegal inode # [ 1447.829436][T14799] EXT4-fs (loop4): no journal found [ 1448.491182][T14799] EXT4-fs (loop4): can't get journal size [ 1448.509767][T14799] EXT4-fs (loop4): failed to initialize system zone (-22) [ 1448.517646][T14799] EXT4-fs (loop4): mount failed [ 1448.549219][T14807] loop9: detected capacity change from 0 to 512 [ 1448.618354][T14807] EXT4-fs (loop9): Test dummy encryption mode enabled [ 1448.673244][T14807] EXT4-fs error (device loop9): __ext4_iget:5055: inode #11: block 1: comm syz.9.1895: invalid block [ 1448.697023][T14807] EXT4-fs error (device loop9): ext4_orphan_get:1405: comm syz.9.1895: couldn't read orphan inode 11 (err -117) [ 1448.903494][T14807] EXT4-fs (loop9): mounted filesystem without journal. Quota mode: none. [ 1449.732808][T14127] Bluetooth: hci4: command 0x040f tx timeout [ 1450.056066][T14820] overlayfs: unrecognized mount option "smackfsfloor=Y}+" or missing value [ 1451.084234][T14828] netdevsim netdevsim8: loading /lib/firmware/. failed with error -22 [ 1451.086963][T14834] kAFS: unable to lookup cell '/' [ 1451.162852][T14828] netdevsim netdevsim8: Direct firmware load for . failed with error -22 [ 1451.171981][T14828] netdevsim netdevsim8: Falling back to sysfs fallback for: . [ 1452.317711][T14127] Bluetooth: hci4: command 0x0419 tx timeout [ 1452.333642][T14825] fscrypt (loop9): Missing crypto API support for AES-256-XTS (API name: "xts(aes)") [ 1452.346457][T14826] fscrypt (loop9): Missing crypto API support for AES-256-XTS (API name: "xts(aes)") [ 1452.806049][T11343] EXT4-fs (loop9): unmounting filesystem. [ 1454.558090][ T4264] Bluetooth: hci4: command 0x0405 tx timeout [ 1457.813819][T14876] misc userio: No port type given on /dev/userio [ 1459.220944][T14879] orangefs_mount: mount request failed with -4 [ 1459.448227][T14761] chnl_net:caif_netlink_parms(): no params data found [ 1461.647830][T14127] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 1461.659125][ T4265] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 1461.668459][T14127] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 1461.711158][T14127] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 1461.722339][T14127] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 1461.730332][ T4265] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 1461.837850][T14911] overlayfs: unrecognized mount option "smackfsfloor=Y}+" or missing value [ 1463.606615][T14912] netdevsim netdevsim4: loading /lib/firmware/. failed with error -22 [ 1463.614996][T14912] netdevsim netdevsim4: Direct firmware load for . failed with error -22 [ 1463.623927][T14912] netdevsim netdevsim4: Falling back to sysfs fallback for: . [ 1463.846980][ T4265] Bluetooth: hci0: command 0x0409 tx timeout [ 1466.239006][ T4264] Bluetooth: hci0: command 0x041b tx timeout [ 1466.725649][T14939] netlink: 'syz.4.1916': attribute type 4 has an invalid length. [ 1467.178102][T14943] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1916'. [ 1467.697246][T10349] lo speed is unknown, defaulting to 1000 [ 1467.706351][T14900] lo speed is unknown, defaulting to 1000 [ 1467.706633][T14761] bridge0: port 1(bridge_slave_0) entered blocking state [ 1467.796063][T14761] bridge0: port 1(bridge_slave_0) entered disabled state [ 1467.815037][T14761] device bridge_slave_0 entered promiscuous mode [ 1468.674129][ T4264] Bluetooth: hci0: command 0x040f tx timeout [ 1468.701015][T14761] bridge0: port 2(bridge_slave_1) entered blocking state [ 1468.708264][T14761] bridge0: port 2(bridge_slave_1) entered disabled state [ 1468.717374][T14761] device bridge_slave_1 entered promiscuous mode [ 1469.823173][T14948] netlink: 'syz.9.1918': attribute type 10 has an invalid length. [ 1469.831121][T14948] netlink: 40 bytes leftover after parsing attributes in process `syz.9.1918'. [ 1469.840545][T14948] bridge0: port 3(macvlan1) entered blocking state [ 1469.847315][T14948] bridge0: port 3(macvlan1) entered disabled state [ 1469.854700][T14948] device macvlan1 entered promiscuous mode [ 1469.861209][T14948] bridge0: port 3(macvlan1) entered blocking state [ 1469.867759][T14948] bridge0: port 3(macvlan1) entered forwarding state [ 1469.961490][ T4397] usb 5-1: new high-speed USB device number 4 using dummy_hcd [ 1470.241822][ T4397] usb 5-1: Using ep0 maxpacket: 32 [ 1470.274298][ T4397] usb 5-1: config 0 has an invalid interface number: 54 but max is 0 [ 1470.363508][ T4397] usb 5-1: config 0 has no interface number 0 [ 1470.439585][ T4397] usb 5-1: config 0 interface 54 has no altsetting 0 [ 1471.320346][ T4264] Bluetooth: hci0: command 0x0419 tx timeout [ 1471.401650][ T4397] usb 5-1: New USB device found, idVendor=0cf2, idProduct=6250, bcdDevice=46.42 [ 1471.410750][ T4397] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1471.424244][ T4397] usb 5-1: Product: syz [ 1471.456700][ T4397] usb 5-1: config 0 descriptor?? [ 1471.713235][ T4397] usb 5-1: can't set config #0, error -71 [ 1471.755750][T14761] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1474.740103][ T4397] usb 5-1: USB disconnect, device number 4 [ 1474.812482][T14761] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1476.479274][T14761] team0: Port device team_slave_0 added [ 1476.488169][T14761] team0: Port device team_slave_1 added [ 1476.652892][T14982] xt_NFQUEUE: number of total queues is 0 [ 1476.664196][T14982] loop9: detected capacity change from 0 to 256 [ 1476.772857][T14982] exFAT-fs (loop9): failed to load upcase table (idx : 0x000104d0, chksum : 0x60d18cac, utbl_chksum : 0xe619d30d) [ 1478.388881][T14761] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1478.403884][T14761] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1478.443793][T14761] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1478.497653][T14761] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1478.509999][T14761] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1478.561811][T14761] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1478.663137][T14993] loop9: detected capacity change from 0 to 512 [ 1478.674414][T14993] EXT4-fs (loop9): unsupported inode size: 264 [ 1478.680862][T14993] EXT4-fs (loop9): blocksize: 1024 [ 1478.957832][T14012] I/O error, dev loop9, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 1481.669727][T15001] loop4: detected capacity change from 0 to 1024 [ 1483.934953][T15001] hfsplus: failed to load extents file [ 1487.075230][T14761] device hsr_slave_0 entered promiscuous mode [ 1487.115708][T14761] device hsr_slave_1 entered promiscuous mode [ 1487.246756][T15017] loop9: detected capacity change from 0 to 1024 [ 1487.266337][T15017] hfsplus: request for non-existent node -709361664 in B*Tree [ 1487.273942][T15017] hfsplus: request for non-existent node -709361664 in B*Tree [ 1487.281879][T15017] hfsplus: b-tree write err: -5, ino 8 [ 1487.398553][T14900] chnl_net:caif_netlink_parms(): no params data found [ 1487.586220][T14012] I/O error, dev loop9, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 1487.718445][T14900] bridge0: port 1(bridge_slave_0) entered blocking state [ 1487.739352][T14900] bridge0: port 1(bridge_slave_0) entered disabled state [ 1487.747917][T14900] device bridge_slave_0 entered promiscuous mode [ 1487.797707][T14900] bridge0: port 2(bridge_slave_1) entered blocking state [ 1487.810029][T14900] bridge0: port 2(bridge_slave_1) entered disabled state [ 1487.825955][T14900] device bridge_slave_1 entered promiscuous mode [ 1487.919065][T14900] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1487.939678][T14900] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1487.980994][ T4430] device hsr_slave_0 left promiscuous mode [ 1487.987777][ T4430] device hsr_slave_1 left promiscuous mode [ 1488.000734][ T4430] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1488.009691][ T4430] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1488.018976][ T4430] device bridge_slave_1 left promiscuous mode [ 1488.025425][ T4430] bridge0: port 2(bridge_slave_1) entered disabled state [ 1488.034580][ T4430] device bridge_slave_0 left promiscuous mode [ 1488.041837][ T4430] bridge0: port 1(bridge_slave_0) entered disabled state [ 1488.348866][ T4430] team0 (unregistering): Port device team_slave_1 removed [ 1488.421319][ T4430] team0 (unregistering): Port device team_slave_0 removed [ 1488.491523][ T4430] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1488.566244][ T4430] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1489.263290][ T4430] bond0 (unregistering): Released all slaves [ 1489.387128][T14900] team0: Port device team_slave_0 added [ 1489.402683][T14900] team0: Port device team_slave_1 added [ 1489.442158][T14900] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1489.449151][T14900] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1489.493865][T14900] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1489.517527][T14900] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1489.528368][T14900] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1489.554521][T14900] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1489.657896][ T1275] ieee802154 phy0 wpan0: encryption failed: -22 [ 1489.775239][T14900] device hsr_slave_0 entered promiscuous mode [ 1489.782905][T14900] device hsr_slave_1 entered promiscuous mode [ 1489.789565][T14900] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1489.797414][T14900] Cannot create hsr debugfs directory [ 1489.950463][T14761] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 1489.976167][T14761] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 1489.990371][T14761] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 1490.008626][T14761] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 1490.186132][ T4430] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1490.356997][ T4430] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1490.509213][ T4430] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1490.646510][ T4430] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1490.741666][T14761] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1490.760449][T14761] 8021q: adding VLAN 0 to HW filter on device team0 [ 1490.772503][ T4338] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 1490.781388][ T4338] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 1490.821518][ T4338] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 1490.830386][ T4338] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 1490.839285][ T4338] bridge0: port 1(bridge_slave_0) entered blocking state [ 1490.846434][ T4338] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1490.854582][ T4338] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 1490.914912][ T6108] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 1490.927932][ T6108] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 1490.936971][ T6108] bridge0: port 2(bridge_slave_1) entered blocking state [ 1490.944124][ T6108] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1490.954219][T14900] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 1490.963911][T14900] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 1491.000888][T14900] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 1491.020248][ T4302] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 1491.042073][T14900] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 1491.068306][ T6108] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 1491.118037][ T6108] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 1491.134206][ T6108] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 1491.143849][ T6108] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 1491.216800][ T4302] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 1491.227250][ T4302] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 1491.254785][ T4338] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 1491.263916][ T4338] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 1491.272883][ T4338] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 1491.282498][ T4338] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 1491.292803][T14761] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 1491.404813][T14900] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1491.430958][ T4302] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 1491.439668][ T4302] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 1491.486297][T14900] 8021q: adding VLAN 0 to HW filter on device team0 [ 1491.501000][ T6121] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 1491.510219][ T6121] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 1491.528450][ T6121] bridge0: port 1(bridge_slave_0) entered blocking state [ 1491.535636][ T6121] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1491.546147][ T6121] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 1491.559114][ T6121] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 1491.568813][ T6121] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 1491.577970][ T6121] bridge0: port 2(bridge_slave_1) entered blocking state [ 1491.585155][ T6121] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1491.632363][ T4302] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 1491.659968][ T5187] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 1491.669902][ T5187] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 1491.685393][ T5187] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 1491.694495][ T5187] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 1491.754158][ T6121] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 1491.762585][ T6121] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 1491.803841][T14761] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1491.818882][ T4302] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 1491.833977][ T4302] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 1491.847808][ T4302] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 1491.857566][ T4302] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 1491.895031][ T6121] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 1491.909691][ T6121] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 1491.948109][T14900] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 1491.979520][ T6121] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 1491.995449][ T6121] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 1492.076379][ T6108] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 1492.086926][ T6108] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 1492.097298][ T6108] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 1492.105948][ T6108] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 1492.244149][T14761] device veth0_vlan entered promiscuous mode [ 1492.262419][T14761] device veth1_vlan entered promiscuous mode [ 1492.340931][T14900] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1492.357700][ T6108] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 1492.376057][ T6108] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 1492.385664][ T6108] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 1492.402134][ T6108] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 1492.409665][ T6108] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 1492.432343][ T6108] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 1492.596619][T14761] device veth0_macvtap entered promiscuous mode [ 1492.611927][ T4302] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 1492.624499][T14761] device veth1_macvtap entered promiscuous mode [ 1492.706457][ T4430] device hsr_slave_0 left promiscuous mode [ 1492.713899][ T4430] device hsr_slave_1 left promiscuous mode [ 1492.731951][ T4430] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1492.739433][ T4430] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1492.771703][ T4430] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1492.779186][ T4430] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1492.788320][ T4430] device macvlan1 left promiscuous mode [ 1492.801581][ T4430] bridge0: port 3(macvlan1) entered disabled state [ 1492.812831][ T4430] device bridge_slave_1 left promiscuous mode [ 1492.819107][ T4430] bridge0: port 2(bridge_slave_1) entered disabled state [ 1492.829369][ T4430] device bridge_slave_0 left promiscuous mode [ 1492.836169][ T4430] bridge0: port 1(bridge_slave_0) entered disabled state [ 1492.887643][ T4430] device veth1_macvtap left promiscuous mode [ 1492.896798][ T4430] device veth0_macvtap left promiscuous mode [ 1492.906395][ T4430] device veth1_vlan left promiscuous mode [ 1492.914990][ T4430] device veth0_vlan left promiscuous mode [ 1493.997487][ T4430] team0 (unregistering): Port device team_slave_1 removed [ 1494.070356][ T4430] team0 (unregistering): Port device team_slave_0 removed [ 1494.139007][ T4430] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1494.213963][ T4430] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1495.012669][ T4430] bond0 (unregistering): (slave bridge0): Releasing backup interface [ 1495.021759][ T4430] bond0 (unregistering): Released all slaves [ 1495.197099][T14761] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1495.213829][T14761] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1495.228551][T14761] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1495.245815][T14761] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1495.288306][T14761] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1495.318220][ T4338] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 1495.330098][ T4338] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 1495.350314][T14761] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1495.362101][T14761] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1495.372871][T14761] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1495.384693][T14761] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1495.398288][T14761] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1495.432771][ T4338] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 1495.449079][ T4338] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 1495.458335][ T4338] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 1495.474045][ T4338] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 1495.511002][T14761] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1495.520324][T14761] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1495.536612][T14761] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1495.547163][T14761] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1495.585286][ T6121] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 1495.612800][ T6121] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 1495.633478][T14900] device veth0_vlan entered promiscuous mode [ 1495.655446][T14900] device veth1_vlan entered promiscuous mode [ 1495.670653][ T6121] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 1495.680850][ T6121] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 1495.748044][ T6121] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 1495.858271][ T6121] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 1495.872161][ T6121] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 1495.891627][ T6121] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 1495.928558][T14900] device veth0_macvtap entered promiscuous mode [ 1495.947636][T14900] device veth1_macvtap entered promiscuous mode [ 1495.969278][ T6121] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1495.998618][ T6121] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1496.000467][T14900] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1496.017375][T14900] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1496.039024][T14900] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1496.060834][T14900] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1496.075592][T14900] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1496.087092][T14900] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1496.104924][T14900] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1496.127236][ T4338] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 1496.144039][ T4338] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 1496.156221][ T4338] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 1496.170121][ T4338] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 1496.184907][ T4338] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 1496.202161][T14900] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1496.236278][T14900] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1496.246271][T14900] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1496.257482][T14900] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1496.267679][T14900] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1496.280105][T14900] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1496.298489][T14900] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1496.323229][ T4338] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 1496.337189][ T4338] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 1496.362345][T14900] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1496.375807][T14900] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1496.388124][T14900] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1496.401822][T14900] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1496.418194][ T4338] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1496.436827][ T4338] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1496.558440][ T4338] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 1496.660958][ T6108] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1496.669599][ T6108] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1496.775656][ T5187] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 1500.180499][ T4302] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1500.240645][ T4302] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1500.349320][ T4338] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 1502.433899][T15134] netlink: 'syz.4.1934': attribute type 10 has an invalid length. [ 1502.441951][T15134] netlink: 40 bytes leftover after parsing attributes in process `syz.4.1934'. [ 1503.237679][T15142] Bluetooth: MGMT ver 1.22 [ 1509.662140][T15166] loop0: detected capacity change from 0 to 256 [ 1510.811505][T15166] loop0: detected capacity change from 0 to 128 [ 1510.818628][T15166] FAT-fs (loop0): Unrecognized mount option "obj_type=)" or missing value [ 1511.191447][T15166] loop0: detected capacity change from 0 to 1024 [ 1512.503278][T15184] netlink: 12 bytes leftover after parsing attributes in process `syz.6.1950'. [ 1514.714842][T15222] loop4: detected capacity change from 0 to 256 [ 1514.769045][T15222] FAT-fs (loop4): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 1515.827032][T15238] loop6: detected capacity change from 0 to 128 [ 1515.835379][T15238] UDF-fs: error (device loop6): udf_read_tagged: read failed, block=256, location=256 [ 1515.931158][T15242] UDF-fs: error (device loop6): udf_bitmap_new_block: bitmap for partition 0 corrupted (block 264 marked as free, partition length is 40) [ 1516.633628][T15247] dlm: no local IP address has been set [ 1516.639293][T15247] dlm: cannot start dlm midcomms -107 [ 1519.344399][T15267] lo speed is unknown, defaulting to 1000 [ 1522.865745][T15285] loop0: detected capacity change from 0 to 256 [ 1524.139880][T15275] sctp: failed to load transform for md5: -2 [ 1524.256666][T15285] FAT-fs (loop0): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 1524.627582][ T27] audit: type=1326 audit(1732333223.544:154): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15297 comm="syz.8.1977" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f89b997e819 code=0x7fc00000 [ 1524.996768][ T27] audit: type=1326 audit(1732333223.914:155): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15297 comm="syz.8.1977" exe="/root/syz-executor" sig=0 arch=c000003e syscall=317 compat=0 ip=0x7f89b997e819 code=0x7fc00000 [ 1525.265679][ T27] audit: type=1326 audit(1732333224.184:156): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15297 comm="syz.8.1977" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f89b997e819 code=0x7fc00000 [ 1525.579179][T15323] netlink: 32 bytes leftover after parsing attributes in process `syz.9.1981'. [ 1525.588480][T15323] netlink: 32 bytes leftover after parsing attributes in process `syz.9.1981'. [ 1526.148876][T15325] loop0: detected capacity change from 0 to 512 [ 1526.628517][T15325] EXT4-fs (loop0): Test dummy encryption mode enabled [ 1526.846559][T15325] EXT4-fs error (device loop0): ext4_find_inline_data_nolock:164: inode #12: comm syz.0.1980: inline data xattr refers to an external xattr inode [ 1526.864128][T15325] EXT4-fs error (device loop0): ext4_orphan_get:1405: comm syz.0.1980: couldn't read orphan inode 12 (err -117) [ 1526.878678][T15325] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback. [ 1526.911399][T15325] EXT4-fs (loop0): unmounting filesystem. [ 1527.124225][T15270] I/O error, dev loop0, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 1527.175720][ T27] audit: type=1326 audit(1732333224.544:157): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15314 comm="syz.9.1981" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f4c5697e819 code=0x0 [ 1533.172400][T15387] loop0: detected capacity change from 0 to 256 [ 1533.681666][T15388] dccp_invalid_packet: P.Data Offset(224) too large [ 1533.760270][T15378] loop9: detected capacity change from 0 to 2048 [ 1534.565221][T15378] loop9: p1 < > p3 p4 < > [ 1534.580966][T15378] loop9: p3 start 4259840 is beyond EOD, truncated [ 1537.545173][T15410] loop4: detected capacity change from 0 to 1024 [ 1537.592258][T15410] ext3: Unknown parameter 'dont_hash' [ 1544.348241][T15445] input: syz0 as /devices/virtual/input/input18 [ 1545.443172][T15445] input: failed to attach handler leds to device input18, error: -6 [ 1545.943098][T15479] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore [ 1545.952112][T15479] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 1546.898646][T15485] loop4: detected capacity change from 0 to 128 [ 1546.966157][T15488] loop9: detected capacity change from 0 to 512 [ 1547.108192][T15488] EXT4-fs (loop9): Test dummy encryption mode enabled [ 1548.482290][T15490] loop0: detected capacity change from 0 to 1024 [ 1548.568105][T15488] EXT4-fs error (device loop9): ext4_find_inline_data_nolock:164: inode #12: comm syz.9.2025: inline data xattr refers to an external xattr inode [ 1548.776762][T15488] EXT4-fs error (device loop9): ext4_orphan_get:1405: comm syz.9.2025: couldn't read orphan inode 12 (err -117) [ 1548.796352][T15488] EXT4-fs (loop9): mounted filesystem without journal. Quota mode: writeback. [ 1548.926951][T15498] x_tables: ip_tables: osf match: only valid for protocol 6 [ 1549.323561][ T8806] hfsplus: b-tree write err: -5, ino 4 [ 1550.397150][T15505] fscrypt (loop9): Missing crypto API support for AES-256-CTS-CBC (API name: "cts(cbc(aes))") [ 1550.567568][T11343] EXT4-fs (loop9): unmounting filesystem. [ 1551.085219][ T1275] ieee802154 phy0 wpan0: encryption failed: -22 [ 1553.702709][T15528] loop8: detected capacity change from 0 to 16 [ 1553.767541][T15528] erofs: (device loop8): mounted with root inode @ nid 36. [ 1554.087649][ T4264] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 1555.874233][ T4264] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 1555.893329][ T4264] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 1555.912543][ T4264] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 1555.930690][ T4264] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 1555.939260][ T4264] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 1556.429448][T15548] erofs: (device loop8): z_erofs_readahead: readahead error at page 22 @ nid 36 [ 1556.438767][T15548] erofs: (device loop8): z_erofs_readahead: readahead error at page 21 @ nid 36 [ 1556.448747][T15548] erofs: (device loop8): z_erofs_readahead: readahead error at page 20 @ nid 36 [ 1556.458008][T15548] erofs: (device loop8): z_erofs_readahead: readahead error at page 18 @ nid 36 [ 1556.467434][T15548] erofs: (device loop8): z_erofs_readahead: readahead error at page 12 @ nid 36 [ 1556.476637][T15548] erofs: (device loop8): z_erofs_readahead: readahead error at page 10 @ nid 36 [ 1556.491540][T15548] erofs: (device loop8): z_erofs_readahead: readahead error at page 6 @ nid 36 [ 1556.504307][T15548] syz.8.2020: attempt to access beyond end of device [ 1556.504307][T15548] loop8: rw=524288, sector=6520, nr_sectors = 16 limit=16 [ 1556.521082][T15548] syz.8.2020: attempt to access beyond end of device [ 1556.521082][T15548] loop8: rw=524288, sector=34359736328, nr_sectors = 16 limit=16 [ 1556.683328][T15548] syz.8.2020: attempt to access beyond end of device [ 1556.683328][T15548] loop8: rw=524288, sector=720, nr_sectors = 16 limit=16 [ 1556.698322][T15548] syz.8.2020: attempt to access beyond end of device [ 1556.698322][T15548] loop8: rw=524288, sector=536576856, nr_sectors = 16 limit=16 [ 1556.714156][T15548] syz.8.2020: attempt to access beyond end of device [ 1556.714156][T15548] loop8: rw=524288, sector=8, nr_sectors = 16 limit=16 [ 1556.888202][T15548] syz.8.2020: attempt to access beyond end of device [ 1556.888202][T15548] loop8: rw=524288, sector=13478624032, nr_sectors = 8 limit=16 [ 1558.643360][ T4265] Bluetooth: hci1: command 0x0409 tx timeout [ 1559.060590][T15530] lo speed is unknown, defaulting to 1000 [ 1559.172532][T15555] loop0: detected capacity change from 0 to 512 [ 1559.518104][T15555] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback. [ 1559.527845][T15555] ext4 filesystem being mounted at /20/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 1560.692036][ T4265] Bluetooth: hci1: command 0x041b tx timeout [ 1561.614301][T15576] loop4: detected capacity change from 0 to 512 [ 1561.679549][T15576] EXT4-fs (loop4): Test dummy encryption mode enabled [ 1561.722437][T15576] EXT4-fs error (device loop4): __ext4_iget:5055: inode #11: block 1: comm syz.4.2031: invalid block [ 1561.722703][T15576] EXT4-fs error (device loop4): ext4_orphan_get:1405: comm syz.4.2031: couldn't read orphan inode 11 (err -117) [ 1561.723060][T15576] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 1561.987461][T14761] EXT4-fs (loop0): unmounting filesystem. [ 1562.838775][T15585] fscrypt (loop4): Missing crypto API support for AES-256-XTS (API name: "xts(aes)") [ 1562.849090][ T4265] Bluetooth: hci1: command 0x040f tx timeout [ 1563.287868][T15530] chnl_net:caif_netlink_parms(): no params data found [ 1564.414818][ T4256] EXT4-fs (loop4): unmounting filesystem. [ 1564.921902][T14127] Bluetooth: hci1: command 0x0419 tx timeout [ 1568.541217][T14127] Bluetooth: hci4: command 0x0406 tx timeout [ 1568.676350][ T4265] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 1568.695814][ T4265] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 1568.711925][ T4265] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 1568.722808][ T4265] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 1568.734701][ T4265] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 1568.743796][ T4265] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 1569.038797][ T5187] netdevsim netdevsim6 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1569.124021][T15636] lo speed is unknown, defaulting to 1000 [ 1569.148560][T15530] bridge0: port 1(bridge_slave_0) entered blocking state [ 1569.178216][T15530] bridge0: port 1(bridge_slave_0) entered disabled state [ 1569.195290][T15530] device bridge_slave_0 entered promiscuous mode [ 1569.216268][T15639] lo speed is unknown, defaulting to 1000 [ 1569.223331][T15530] bridge0: port 2(bridge_slave_1) entered blocking state [ 1569.230449][T15530] bridge0: port 2(bridge_slave_1) entered disabled state [ 1569.272596][T15530] device bridge_slave_1 entered promiscuous mode [ 1569.823813][ T5187] netdevsim netdevsim6 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1570.108460][T15530] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1570.162068][T15530] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1570.758132][T15530] team0: Port device team_slave_0 added [ 1570.769114][T15530] team0: Port device team_slave_1 added [ 1570.847285][ T4265] Bluetooth: hci0: command 0x0409 tx timeout [ 1570.906146][ T5187] netdevsim netdevsim6 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1573.530613][ T4265] Bluetooth: hci0: command 0x041b tx timeout [ 1573.804362][ T5187] netdevsim netdevsim6 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1573.925156][T15530] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1573.939862][T15530] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1574.051108][T15530] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1574.429767][T15530] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1574.448180][T15530] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1575.601139][T14127] Bluetooth: hci0: command 0x040f tx timeout [ 1575.855728][T15530] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1576.022994][T15680] lo speed is unknown, defaulting to 1000 [ 1577.758073][T14127] Bluetooth: hci0: command 0x0419 tx timeout [ 1577.819538][T15530] device hsr_slave_0 entered promiscuous mode [ 1577.856250][T15530] device hsr_slave_1 entered promiscuous mode [ 1577.870621][T15530] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1577.898211][T15530] Cannot create hsr debugfs directory [ 1578.083878][T15639] chnl_net:caif_netlink_parms(): no params data found [ 1580.738454][T15639] bridge0: port 1(bridge_slave_0) entered blocking state [ 1580.775507][T15639] bridge0: port 1(bridge_slave_0) entered disabled state [ 1580.861836][T15639] device bridge_slave_0 entered promiscuous mode [ 1581.039223][T15717] xt_CT: No such helper "syz1" [ 1581.258414][T15725] loop4: detected capacity change from 0 to 512 [ 1581.268080][T15639] bridge0: port 2(bridge_slave_1) entered blocking state [ 1581.302659][T15639] bridge0: port 2(bridge_slave_1) entered disabled state [ 1581.320089][T15639] device bridge_slave_1 entered promiscuous mode [ 1588.580963][T15639] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1588.738931][T15775] loop8: detected capacity change from 0 to 1024 [ 1588.918471][T15775] EXT4-fs (loop8): mounted filesystem without journal. Quota mode: writeback. [ 1588.996217][T15784] 9pnet_fd: Insufficient options for proto=fd [ 1589.394010][T15765] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1590.577252][ T9216] EXT4-fs (loop8): unmounting filesystem. [ 1590.660721][T15639] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1593.897387][T15816] loop8: detected capacity change from 0 to 512 [ 1595.086053][T15816] EXT4-fs (loop8): Test dummy encryption mode enabled [ 1595.100798][T15816] EXT4-fs error (device loop8): ext4_find_inline_data_nolock:164: inode #12: comm syz.8.2065: inline data xattr refers to an external xattr inode [ 1595.121059][T15816] EXT4-fs error (device loop8): ext4_orphan_get:1405: comm syz.8.2065: couldn't read orphan inode 12 (err -117) [ 1595.134153][T15816] EXT4-fs (loop8): mounted filesystem without journal. Quota mode: writeback. [ 1595.164335][T15816] EXT4-fs (loop8): unmounting filesystem. [ 1596.577418][T15639] team0: Port device team_slave_0 added [ 1597.513082][T15639] team0: Port device team_slave_1 added [ 1597.742501][T15840] Bluetooth: MGMT ver 1.22 [ 1599.083116][T15639] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1599.090117][T15639] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1599.205768][T15639] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1599.219005][T15639] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1599.226136][T15639] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1599.252101][ C0] vkms_vblank_simulate: vblank timer overrun [ 1599.259249][T15639] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1601.868516][T15639] device hsr_slave_0 entered promiscuous mode [ 1601.885295][T15639] device hsr_slave_1 entered promiscuous mode [ 1601.922127][T15639] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1601.939984][T15639] Cannot create hsr debugfs directory [ 1602.147501][T15880] loop0: detected capacity change from 0 to 512 [ 1602.169087][T15530] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 1602.205071][T15880] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 1602.218645][T15530] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 1602.292514][T15880] EXT4-fs (loop0): 1 truncate cleaned up [ 1602.298223][T15880] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none. [ 1602.376661][T15530] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 1602.454477][ T5187] device hsr_slave_0 left promiscuous mode [ 1602.481306][ T5187] device hsr_slave_1 left promiscuous mode [ 1602.507791][ T5187] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1602.541281][ T5187] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1602.622924][ T5187] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1602.640319][ T5187] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1602.676574][ T5187] device bridge_slave_1 left promiscuous mode [ 1603.258461][T14761] EXT4-fs (loop0): unmounting filesystem. [ 1603.268414][ T5187] bridge0: port 2(bridge_slave_1) entered disabled state [ 1603.353236][T15893] loop0: detected capacity change from 0 to 512 [ 1603.381922][T15893] EXT4-fs: Ignoring removed i_version option [ 1603.388998][T15893] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 1603.399564][ T5187] device bridge_slave_0 left promiscuous mode [ 1603.406658][ T5187] bridge0: port 1(bridge_slave_0) entered disabled state [ 1603.522591][T15893] EXT4-fs (loop0): 1 truncate cleaned up [ 1603.536661][T15893] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback. [ 1603.714615][ T5187] device veth1_macvtap left promiscuous mode [ 1603.721063][ T5187] device veth0_macvtap left promiscuous mode [ 1604.200892][T14761] EXT4-fs (loop0): unmounting filesystem. [ 1604.335357][ T5187] device veth1_vlan left promiscuous mode [ 1604.770059][T15909] loop8: detected capacity change from 0 to 164 [ 1605.751844][ T5187] device veth0_vlan left promiscuous mode [ 1606.627651][T15923] loop8: detected capacity change from 0 to 256 [ 1607.722162][T15935] loop8: detected capacity change from 0 to 16 [ 1607.748609][T15935] erofs: (device loop8): mounted with root inode @ nid 36. [ 1607.813434][ T27] audit: type=1800 audit(1732333306.704:158): pid=15935 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.8.2084" name="file1" dev="loop8" ino=86 res=0 errno=0 [ 1608.282552][ T4265] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 1608.300896][ T4265] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 1608.310443][ T4265] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 1608.324607][ T4265] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 1608.335821][ T4265] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 1608.343998][ T4265] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 1608.555871][ C0] vkms_vblank_simulate: vblank timer overrun [ 1608.713983][T15946] binder: 15940:15946 ioctl c018620c 20001180 returned -22 [ 1610.657200][ T4264] Bluetooth: hci5: command 0x0409 tx timeout [ 1610.738796][ C0] vkms_vblank_simulate: vblank timer overrun [ 1610.855262][ C0] vkms_vblank_simulate: vblank timer overrun [ 1611.239279][ T5187] team0 (unregistering): Port device team_slave_1 removed [ 1611.375452][ T5187] team0 (unregistering): Port device team_slave_0 removed [ 1611.459688][ T5187] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1611.533882][ T5187] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1612.358495][ T5187] bond0 (unregistering): Released all slaves [ 1612.464926][T15530] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 1612.601764][ T1275] ieee802154 phy0 wpan0: encryption failed: -22 [ 1612.681109][ T4264] Bluetooth: hci5: command 0x041b tx timeout [ 1612.714410][T15933] lo speed is unknown, defaulting to 1000 [ 1612.741468][T15970] loop8: detected capacity change from 0 to 2048 [ 1612.774805][T15970] UDF-fs: error (device loop8): udf_process_sequence: Primary Volume Descriptor not found! [ 1612.798858][T15970] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 1614.828885][ T4264] Bluetooth: hci5: command 0x040f tx timeout [ 1614.856940][T15988] loop8: detected capacity change from 0 to 512 [ 1614.920577][T15988] EXT4-fs: Ignoring removed i_version option [ 1614.932032][T15988] EXT4-fs (loop8): encrypted files will use data=ordered instead of data journaling mode [ 1614.958059][T15988] EXT4-fs (loop8): 1 truncate cleaned up [ 1614.964085][T15988] EXT4-fs (loop8): mounted filesystem without journal. Quota mode: writeback. [ 1615.704343][ T9216] EXT4-fs (loop8): unmounting filesystem. [ 1616.841360][ T4264] Bluetooth: hci5: command 0x0419 tx timeout [ 1617.435531][T15933] chnl_net:caif_netlink_parms(): no params data found [ 1617.631638][T16017] loop8: detected capacity change from 0 to 2048 [ 1617.885067][T16017] GPT:first_usable_lbas don't match. [ 1617.890552][T16017] GPT:34 != 290 [ 1617.894336][T16017] GPT: Use GNU Parted to correct GPT errors. [ 1617.901014][T16017] loop8: p1 p2 p3 [ 1618.356929][ T3621] GPT:first_usable_lbas don't match. [ 1618.373341][ T3621] GPT:34 != 290 [ 1618.376869][ T3621] GPT: Use GNU Parted to correct GPT errors. [ 1618.426961][ T3621] loop8: p1 p2 p3 [ 1619.180738][T15453] udevd[15453]: inotify_add_watch(7, /dev/loop8p1, 10) failed: No such file or directory [ 1619.229537][T15270] udevd[15270]: inotify_add_watch(7, /dev/loop8p2, 10) failed: No such file or directory [ 1619.320848][T15933] bridge0: port 1(bridge_slave_0) entered blocking state [ 1619.335229][T15453] udevd[15453]: inotify_add_watch(7, /dev/loop8p3, 10) failed: No such file or directory [ 1619.346684][T15933] bridge0: port 1(bridge_slave_0) entered disabled state [ 1619.389855][T15933] device bridge_slave_0 entered promiscuous mode [ 1619.527496][T15308] udevd[15308]: inotify_add_watch(7, /dev/loop8p3, 10) failed: No such file or directory [ 1619.527554][T15270] udevd[15270]: inotify_add_watch(7, /dev/loop8p2, 10) failed: No such file or directory [ 1619.581419][T15453] udevd[15453]: inotify_add_watch(7, /dev/loop8p1, 10) failed: No such file or directory [ 1619.625284][T15933] bridge0: port 2(bridge_slave_1) entered blocking state [ 1619.647604][T15933] bridge0: port 2(bridge_slave_1) entered disabled state [ 1619.679626][T15933] device bridge_slave_1 entered promiscuous mode [ 1619.965552][T15933] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1620.005946][T15933] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1620.670352][T15933] team0: Port device team_slave_0 added [ 1620.962298][T16052] loop4: detected capacity change from 0 to 164 [ 1622.055633][T15933] team0: Port device team_slave_1 added [ 1622.286320][T15933] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1622.322130][T15933] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1622.348126][ C1] vkms_vblank_simulate: vblank timer overrun [ 1622.443976][T15933] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1622.512667][T15639] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 1622.580371][T15933] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1622.591184][T15933] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1622.626083][T15933] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1622.714760][T15639] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 1622.961377][T15639] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 1623.571933][T15639] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 1623.763531][T15933] device hsr_slave_0 entered promiscuous mode [ 1623.784682][T15933] device hsr_slave_1 entered promiscuous mode [ 1623.856667][T15933] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1623.875580][T15933] Cannot create hsr debugfs directory [ 1625.366063][ T5187] netdevsim netdevsim9 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1625.623343][ T5187] netdevsim netdevsim9 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1626.633070][ T5187] netdevsim netdevsim9 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1626.810820][T16079] loop4: detected capacity change from 0 to 2048 [ 1627.569858][ T5187] netdevsim netdevsim9 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1629.512201][T14127] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 1629.523731][T14127] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 1629.532547][T14127] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 1629.543197][ T4265] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 1629.550844][ T4265] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 1629.558681][ T4265] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 1631.276511][T16112] lo speed is unknown, defaulting to 1000 [ 1631.641147][ T4264] Bluetooth: hci0: command 0x0409 tx timeout [ 1632.002988][T16138] loop0: detected capacity change from 0 to 164 [ 1632.911431][T16112] chnl_net:caif_netlink_parms(): no params data found [ 1633.048202][T15933] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 1633.175727][T16153] loop4: detected capacity change from 0 to 512 [ 1633.202044][T16157] Bluetooth: MGMT ver 1.22 [ 1633.233012][T16153] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 1633.400739][T15933] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 1633.424116][T16151] sp0: Synchronizing with TNC [ 1633.607477][T15933] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 1633.647655][T16166] EXT4-fs (loop4): Couldn't remount RDWR because of unprocessed orphan inode list. Please umount/remount instead [ 1634.435779][ T4256] EXT4-fs (loop4): unmounting filesystem. [ 1634.447223][T16112] bridge0: port 1(bridge_slave_0) entered blocking state [ 1634.460208][T16112] bridge0: port 1(bridge_slave_0) entered disabled state [ 1634.484287][T16112] device bridge_slave_0 entered promiscuous mode [ 1634.493517][T15933] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 1634.517982][T16170] loop8: detected capacity change from 0 to 64 [ 1634.661413][T16173] loop4: detected capacity change from 0 to 1024 [ 1634.716234][T16173] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 1634.986272][T16180] netlink: 'syz.8.2126': attribute type 1 has an invalid length. [ 1635.081111][T16146] Bluetooth: hci0: Opcode 0x0c03 failed: -110 [ 1635.761442][T16112] bridge0: port 2(bridge_slave_1) entered blocking state [ 1635.781204][T16112] bridge0: port 2(bridge_slave_1) entered disabled state [ 1635.812420][T16112] device bridge_slave_1 entered promiscuous mode [ 1637.298663][ T4256] EXT4-fs (loop4): unmounting filesystem. [ 1637.300101][T16112] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1637.328928][T16112] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1637.722327][T16112] team0: Port device team_slave_0 added [ 1638.719939][T15933] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1639.842306][T16202] netlink: 16 bytes leftover after parsing attributes in process `syz.4.2121'. [ 1639.966160][T16112] team0: Port device team_slave_1 added [ 1640.051099][T15933] 8021q: adding VLAN 0 to HW filter on device team0 [ 1640.118860][ T5269] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 1640.311374][ T5269] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 1641.540871][ T4303] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 1641.565791][ T4303] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 1641.618490][ T4303] bridge0: port 1(bridge_slave_0) entered blocking state [ 1641.625728][ T4303] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1641.890649][ T4303] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 1641.988327][ T4303] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 1642.084573][ T4303] bridge0: port 2(bridge_slave_1) entered blocking state [ 1642.091835][ T4303] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1642.281352][ T4303] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 1642.312297][ T4303] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 1642.386625][ T4303] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 1642.416329][ T4303] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 1642.446949][ T4303] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 1642.555844][ T4303] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 1642.592807][ T4303] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 1642.636338][ T4303] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 1642.665623][T16112] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1642.674894][T16112] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1642.749212][T16112] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1642.821822][T16112] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1642.828822][T16112] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1643.513152][T16112] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1643.926900][T15933] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 1643.993586][T15933] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 1644.155486][ T4303] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 1644.171778][ T4303] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 1644.185559][ T4303] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 1644.201796][ T4303] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 1644.245757][T16244] lo speed is unknown, defaulting to 1000 [ 1647.041993][T16112] device hsr_slave_0 entered promiscuous mode [ 1647.077713][T16112] device hsr_slave_1 entered promiscuous mode [ 1647.169553][T16112] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1647.180057][T16112] Cannot create hsr debugfs directory [ 1647.898018][ T5187] device hsr_slave_0 left promiscuous mode [ 1647.931357][ T5187] device hsr_slave_1 left promiscuous mode [ 1647.950533][ T5187] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1648.001907][ T5187] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1648.202027][ T5187] device bridge_slave_1 left promiscuous mode [ 1648.221312][ T5187] bridge0: port 2(bridge_slave_1) entered disabled state [ 1648.230008][ T5187] device bridge_slave_0 left promiscuous mode [ 1648.920369][ T5187] bridge0: port 1(bridge_slave_0) entered disabled state [ 1649.122121][ T5187] device hsr_slave_0 left promiscuous mode [ 1649.146468][ T5187] device hsr_slave_1 left promiscuous mode [ 1649.177169][ T5187] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1649.194207][ T5187] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1649.222217][ T5187] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1649.251705][ T5187] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1649.683325][T16289] binder: 16282:16289 ioctl c018620c 20001180 returned -22 [ 1649.755556][ T5187] device macvlan1 left promiscuous mode [ 1649.786998][ T5187] bridge0: port 3(macvlan1) entered disabled state [ 1649.824353][T16274] loop0: detected capacity change from 0 to 2048 [ 1649.852322][ T5187] device bridge_slave_1 left promiscuous mode [ 1649.860936][ T5187] bridge0: port 2(bridge_slave_1) entered disabled state [ 1649.873829][ T5187] bridge0: port 1(bridge_slave_0) entered disabled state [ 1649.903779][T16274] loop0: p1 < > p3 p4 < > [ 1649.917476][T16274] loop0: p3 start 4259840 is beyond EOD, truncated [ 1649.950558][T16279] dccp_invalid_packet: P.Data Offset(224) too large [ 1650.071991][ T5187] device veth1_macvtap left promiscuous mode [ 1650.101197][ T5187] device veth0_macvtap left promiscuous mode [ 1650.136914][ T5187] device veth1_vlan left promiscuous mode [ 1650.163343][ T5187] device veth0_vlan left promiscuous mode [ 1652.166782][T16305] loop4: detected capacity change from 0 to 16 [ 1652.281769][T16305] erofs: (device loop4): mounted with root inode @ nid 36. [ 1652.647334][T16311] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 1655.266259][ T5187] team0 (unregistering): Port device team_slave_1 removed [ 1655.332294][ T5187] team0 (unregistering): Port device team_slave_0 removed [ 1655.390731][ T5187] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1655.447561][ T5187] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1655.664403][ T5187] bond0 (unregistering): Released all slaves [ 1656.608111][ T5187] team0 (unregistering): Port device team_slave_1 removed [ 1656.694696][ T5187] team0 (unregistering): Port device team_slave_0 removed [ 1656.764619][ T5187] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1656.841864][ T5187] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1657.736760][ T5187] bond0 (unregistering): Released all slaves [ 1657.912264][T15933] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1658.022449][ T4416] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 1658.030147][ T4416] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 1658.076749][ T4416] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 1658.093697][T16353] loop8: detected capacity change from 0 to 512 [ 1658.102140][ T4416] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 1658.188652][T16353] EXT4-fs (loop8): ext4_check_descriptors: Checksum for group 0 failed (17031!=33349) [ 1658.216066][T16355] loop0: detected capacity change from 0 to 1024 [ 1658.229079][T16353] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a802e12c, mo2=0002] [ 1658.250119][T16353] System zones: 1-12 [ 1658.263166][ T6112] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 1658.266420][T16353] EXT4-fs (loop8): orphan cleanup on readonly fs [ 1658.292109][T16353] EXT4-fs error (device loop8): ext4_validate_block_bitmap:438: comm syz.8.2143: bg 0: block 361: padding at end of block bitmap is not set [ 1658.307060][ T6112] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 1658.347126][T16355] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback. [ 1658.371860][T15933] device veth0_vlan entered promiscuous mode [ 1658.385672][T16353] EXT4-fs (loop8): Remounting filesystem read-only [ 1658.419123][ T6112] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 1658.442147][T16353] EXT4-fs error (device loop8) in ext4_mb_clear_bb:6170: Corrupt filesystem [ 1658.466184][T16353] EXT4-fs (loop8): Remounting filesystem read-only [ 1658.467137][ T6112] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 1658.482499][T16353] EXT4-fs error (device loop8): ext4_free_branches:1030: inode #11: comm syz.8.2143: invalid indirect mapped block 12 (level 1) [ 1658.511707][T15933] device veth1_vlan entered promiscuous mode [ 1658.614093][T16353] EXT4-fs (loop8): Remounting filesystem read-only [ 1658.623346][T16353] EXT4-fs error (device loop8): ext4_free_branches:1030: inode #11: comm syz.8.2143: invalid indirect mapped block 2 (level 2) [ 1658.681397][ T6108] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 1658.698147][ T6108] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 1658.739364][T16353] EXT4-fs (loop8): Remounting filesystem read-only [ 1658.757741][ T6108] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 1658.776678][ T6108] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 1658.793725][T15933] device veth0_macvtap entered promiscuous mode [ 1658.805754][T16353] EXT4-fs (loop8): 1 truncate cleaned up [ 1658.816241][T15933] device veth1_macvtap entered promiscuous mode [ 1659.051159][T16353] EXT4-fs (loop8): mounted filesystem without journal. Quota mode: none. [ 1659.512696][T16353] EXT4-fs error (device loop8): ext4_map_blocks:634: inode #2: block 5: comm syz.8.2143: lblock 0 mapped to illegal pblock 5 (length 1) [ 1659.627204][T16353] EXT4-fs warning (device loop8): dx_probe:823: inode #2: lblock 0: comm syz.8.2143: error -117 reading directory block [ 1659.759654][T14761] EXT4-fs (loop0): unmounting filesystem. [ 1659.937189][ T4416] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 1659.947819][ T4416] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 1659.948729][ T9216] EXT4-fs (loop8): unmounting filesystem. [ 1659.973226][T15933] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1660.011090][T15933] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1660.098630][T15933] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1660.223841][T15933] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1660.409248][T15933] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1660.901875][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 1660.919166][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 1660.934882][T15933] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1660.959099][T15933] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1661.035836][T15933] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1661.175038][T15933] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1661.324269][T15933] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1661.516144][T15933] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1661.629467][T15933] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1661.760262][T15933] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1661.827108][T15933] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1662.120635][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 1662.144118][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 1663.207891][ T5269] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1663.246126][ T5269] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1665.524939][T16414] device bond0 entered promiscuous mode [ 1665.530552][T16414] device bond_slave_0 entered promiscuous mode [ 1665.537035][T16414] device bond_slave_1 entered promiscuous mode [ 1665.544218][T16414] device macvlan2 entered promiscuous mode [ 1665.551392][T16414] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 1665.564846][ T6121] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 1665.662228][ T5269] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1665.670746][ T5269] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1665.707103][T16112] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 1665.749839][T16112] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 1665.784941][ T4715] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 1665.972605][T16416] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 1665.980718][T16416] Bluetooth: hci4: Opcode 0x0406 failed: -4 [ 1665.996493][T16416] Bluetooth: hci4: Suspend notifier action (1) failed: -4 [ 1666.005031][T16416] Bluetooth: hci5: Opcode 0x0c1a failed: -4 [ 1666.012642][T16416] Bluetooth: hci5: Opcode 0x0406 failed: -4 [ 1666.020022][T16416] Bluetooth: hci5: Suspend notifier action (1) failed: -4 [ 1666.621326][T16112] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 1666.648865][T16112] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 1667.773818][ T4265] Bluetooth: hci4: command 0x0c1a tx timeout [ 1667.798312][T14127] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 1667.813825][T14127] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 1667.831505][T14127] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 1668.562644][ T4265] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 1668.574008][T14127] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 1668.581633][ T4265] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 1668.602330][ T4264] Bluetooth: hci5: command 0x0c1a tx timeout [ 1669.692304][T16432] lo speed is unknown, defaulting to 1000 [ 1669.801417][ T4265] Bluetooth: hci4: command 0x0406 tx timeout [ 1669.867109][T16112] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1669.973476][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 1669.986214][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 1669.999795][T16112] 8021q: adding VLAN 0 to HW filter on device team0 [ 1670.698307][ T4264] Bluetooth: hci1: command 0x0409 tx timeout [ 1670.708582][ T4265] Bluetooth: hci5: command 0x0406 tx timeout [ 1670.788911][ T4302] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 1670.871865][ T4302] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 1670.880936][ T4302] bridge0: port 1(bridge_slave_0) entered blocking state [ 1670.888127][ T4302] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1670.968692][ T4302] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 1671.076277][ T4302] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 1671.507109][ T4302] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 1671.521941][ T4302] bridge0: port 2(bridge_slave_1) entered blocking state [ 1671.529115][ T4302] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1671.537756][ T27] audit: type=1326 audit(1732333370.454:159): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16465 comm="syz.4.2161" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5e4fb7e819 code=0x7ffc0000 [ 1671.562796][ T27] audit: type=1326 audit(1732333370.454:160): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16465 comm="syz.4.2161" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5e4fb7e819 code=0x7ffc0000 [ 1671.595943][ T27] audit: type=1326 audit(1732333370.454:161): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16465 comm="syz.4.2161" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f5e4fb7e819 code=0x7ffc0000 [ 1671.619128][ T27] audit: type=1326 audit(1732333370.454:162): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16465 comm="syz.4.2161" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5e4fb7e819 code=0x7ffc0000 [ 1671.684628][ T27] audit: type=1326 audit(1732333370.454:163): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16465 comm="syz.4.2161" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5e4fb7e819 code=0x7ffc0000 [ 1671.774817][T16464] loop8: detected capacity change from 0 to 2048 [ 1671.804253][ T27] audit: type=1326 audit(1732333370.454:164): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16465 comm="syz.4.2161" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f5e4fb7e819 code=0x7ffc0000 [ 1671.835822][ T27] audit: type=1326 audit(1732333370.454:165): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16465 comm="syz.4.2161" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5e4fb7e819 code=0x7ffc0000 [ 1671.875963][ T4302] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 1671.880305][ T27] audit: type=1326 audit(1732333370.454:166): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16465 comm="syz.4.2161" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5e4fb7e819 code=0x7ffc0000 [ 1671.910872][ T4302] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 1671.925890][T16464] loop8: p1 < > p3 p4 < > [ 1671.931850][T16470] dccp_invalid_packet: P.Data Offset(224) too large [ 1671.939086][T16464] loop8: p3 start 4259840 is beyond EOD, truncated [ 1671.962711][ T6121] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 1671.973091][T16477] loop0: detected capacity change from 0 to 512 [ 1672.021326][ T27] audit: type=1326 audit(1732333370.454:167): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16465 comm="syz.4.2161" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f5e4fb7e819 code=0x7ffc0000 [ 1672.057709][ T6121] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 1672.146221][ T27] audit: type=1326 audit(1732333370.454:168): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16465 comm="syz.4.2161" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5e4fb7e819 code=0x7ffc0000 [ 1672.185391][T16477] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback. [ 1672.206340][T16477] ext4 filesystem being mounted at /66/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 1672.235910][ T6121] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 1672.244519][ T6121] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 1672.278344][ T6121] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 1672.284345][T16477] EXT4-fs error (device loop0): ext4_validate_block_bitmap:438: comm syz.0.2162: bg 0: block 256: padding at end of block bitmap is not set [ 1672.305371][T16477] EXT4-fs error (device loop0): ext4_acquire_dquot:6801: comm syz.0.2162: Failed to acquire dquot type 1 [ 1672.379372][ T4416] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 1672.442670][ T4416] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 1672.491185][ T4302] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 1672.499889][ T4302] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 1672.510831][T14761] EXT4-fs (loop0): unmounting filesystem. [ 1672.565109][T16112] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 1672.635288][T16432] chnl_net:caif_netlink_parms(): no params data found [ 1672.761319][ T4264] Bluetooth: hci1: command 0x041b tx timeout [ 1673.044072][T16432] bridge0: port 1(bridge_slave_0) entered blocking state [ 1673.058770][T16432] bridge0: port 1(bridge_slave_0) entered disabled state [ 1673.091716][T16432] device bridge_slave_0 entered promiscuous mode [ 1673.110586][T16432] bridge0: port 2(bridge_slave_1) entered blocking state [ 1673.121220][T16432] bridge0: port 2(bridge_slave_1) entered disabled state [ 1673.129552][T16432] device bridge_slave_1 entered promiscuous mode [ 1674.271469][ T1275] ieee802154 phy0 wpan0: encryption failed: -22 [ 1674.881159][ T4264] Bluetooth: hci1: command 0x040f tx timeout [ 1675.013029][T16432] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1675.199310][ T4302] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 1675.254603][ T4302] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 1675.270599][T16112] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1676.539198][T16432] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1677.116734][T16520] netlink: 16 bytes leftover after parsing attributes in process `syz.0.2165'. [ 1677.230260][ T4715] device hsr_slave_0 left promiscuous mode [ 1677.251013][ T4265] Bluetooth: hci1: command 0x0419 tx timeout [ 1678.192415][ T4715] device hsr_slave_1 left promiscuous mode [ 1678.431379][ T4715] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1678.449283][ T4715] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1678.477272][ T4715] device bridge_slave_1 left promiscuous mode [ 1678.494510][ T4715] bridge0: port 2(bridge_slave_1) entered disabled state [ 1678.528492][ T4715] device bridge_slave_0 left promiscuous mode [ 1678.550928][ T4715] bridge0: port 1(bridge_slave_0) entered disabled state [ 1679.884510][ T27] kauditd_printk_skb: 26 callbacks suppressed [ 1679.884531][ T27] audit: type=1400 audit(1732333377.784:191): apparmor="DENIED" operation="stack_onexec" info="label not found" error=-2 profile="unconfined" name="#(%#{//(P\)//&@},['%%&A#*" pid=16536 comm="syz.8.2169" [ 1680.212763][T16552] loop4: detected capacity change from 0 to 2048 [ 1680.302152][T16552] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 1681.331193][ T4256] EXT4-fs (loop4): unmounting filesystem. [ 1683.545813][ T4715] team0 (unregistering): Port device team_slave_1 removed [ 1684.533952][ T4715] team0 (unregistering): Port device team_slave_0 removed [ 1684.682237][ T4715] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1684.799258][ T4715] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1685.640111][ T4715] bond0 (unregistering): Released all slaves [ 1685.830017][T16589] Process accounting resumed [ 1686.049329][T16432] team0: Port device team_slave_0 added [ 1686.253222][T16432] team0: Port device team_slave_1 added [ 1688.972496][T16432] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1688.979559][T16432] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1690.270996][T16432] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1690.402409][T16432] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1690.468581][T16432] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1690.556302][T16432] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1692.524720][T16652] loop4: detected capacity change from 0 to 512 [ 1692.624889][T16432] device hsr_slave_0 entered promiscuous mode [ 1692.652772][T16652] EXT4-fs (loop4): 1 orphan inode deleted [ 1692.658572][T16652] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 1692.681521][ T5187] Quota error (device loop4): do_check_range: Getting dqdh_entries 15 out of range 0-14 [ 1692.706778][T16652] ext4 filesystem being mounted at /525/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 1692.711125][ T5187] EXT4-fs error (device loop4): ext4_release_dquot:6824: comm kworker/u4:17: Failed to release dquot type 1 [ 1692.732720][T16432] device hsr_slave_1 entered promiscuous mode [ 1692.791333][T16432] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1692.809417][T16432] Cannot create hsr debugfs directory [ 1693.150514][ T4256] EXT4-fs (loop4): unmounting filesystem. [ 1693.219040][ C0] vkms_vblank_simulate: vblank timer overrun [ 1693.346142][ C0] vkms_vblank_simulate: vblank timer overrun [ 1693.469850][T16669] loop4: detected capacity change from 0 to 512 [ 1694.720051][T16674] fuse: Bad value for 'fd' [ 1694.820639][T15453] I/O error, dev loop4, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 1695.423945][ T4264] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 1695.445012][ T4264] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 1695.458253][ T4264] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 1695.478197][ T4264] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 1695.498042][ T4264] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 1695.527135][ T4264] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 1697.642508][ T4265] Bluetooth: hci0: command 0x0409 tx timeout [ 1697.719611][T16671] lo speed is unknown, defaulting to 1000 [ 1697.723253][T16690] loop4: detected capacity change from 0 to 1764 [ 1697.772779][T16691] loop0: detected capacity change from 0 to 190 [ 1697.866637][T16691] ntfs: (device loop0): is_boot_sector_ntfs(): Invalid boot sector checksum. [ 1697.963861][T16691] ntfs: (device loop0): ntfs_read_locked_inode(): $STANDARD_INFORMATION attribute is missing. [ 1697.975071][T16691] ntfs: (device loop0): ntfs_read_locked_inode(): Failed with error code -2. Marking corrupt inode 0x1 as bad. Run chkdsk. [ 1697.988451][T16691] ntfs: (device loop0): load_system_files(): Failed to load $MFTMirr. Will not be able to remount read-write. Run ntfsfix and/or chkdsk. [ 1698.026713][T16691] ntfs: volume version 3.1. [ 1698.197035][T16691] ntfs: (device loop0): ntfs_read_locked_inode(): Inode is an extent inode! [ 1698.311702][T16691] ntfs: (device loop0): ntfs_read_locked_inode(): Failed with error code -5. Marking corrupt inode 0x2 as bad. Run chkdsk. [ 1698.611384][T16691] ntfs: (device loop0): load_system_files(): Failed to load $LogFile. Will not be able to remount read-write. Mount in Windows. [ 1698.711389][T16691] ntfs: (device loop0): ntfs_read_locked_inode(): $INDEX_ALLOCATION attribute is not present but $INDEX_ROOT indicated it is. [ 1698.781283][T16691] ntfs: (device loop0): ntfs_read_locked_inode(): Failed with error code -2. Marking corrupt inode 0x5 as bad. Run chkdsk. [ 1698.881152][T16691] ntfs: (device loop0): load_system_files(): Failed to load root directory. [ 1698.924755][T16432] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1699.153972][T16691] netlink: 'syz.0.2195': attribute type 1 has an invalid length. [ 1700.036993][ T4265] Bluetooth: hci0: command 0x041b tx timeout [ 1700.308289][T16432] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1700.361474][T16708] syz.4.2198 (16708): drop_caches: 2 [ 1702.125440][ T4265] Bluetooth: hci0: command 0x040f tx timeout [ 1702.594411][T16728] loop0: detected capacity change from 0 to 128 [ 1702.705376][T16432] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1702.814655][T16735] fuse: Bad value for 'fd' [ 1703.008387][T16726] netlink: 200 bytes leftover after parsing attributes in process `syz.0.2201'. [ 1703.126619][T16671] chnl_net:caif_netlink_parms(): no params data found [ 1703.567646][T16432] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1704.221357][ T4265] Bluetooth: hci0: command 0x0419 tx timeout [ 1705.076960][T16671] bridge0: port 1(bridge_slave_0) entered blocking state [ 1705.088863][T16671] bridge0: port 1(bridge_slave_0) entered disabled state [ 1705.102847][T16671] device bridge_slave_0 entered promiscuous mode [ 1705.348518][T16671] bridge0: port 2(bridge_slave_1) entered blocking state [ 1705.368874][T16671] bridge0: port 2(bridge_slave_1) entered disabled state [ 1706.474320][T16671] device bridge_slave_1 entered promiscuous mode [ 1706.493503][T16760] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready [ 1706.502548][T16760] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready [ 1706.512215][ T4712] lo speed is unknown, defaulting to 1000 [ 1706.518036][ T4712] lo speed is unknown, defaulting to 1000 [ 1706.776635][ T4712] lo speed is unknown, defaulting to 1000 [ 1706.786552][T16671] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1706.887946][T16671] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1707.153576][ T4264] Bluetooth: hci4: unexpected event 0x01 length: 13 > 1 [ 1707.636497][T16432] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 1708.459012][T16432] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 1708.552135][T16783] rdma_rxe: rxe_register_device failed with error -23 [ 1708.559092][T16783] rdma_rxe: failed to add team_slave_1 [ 1709.317213][T16671] team0: Port device team_slave_0 added [ 1709.356870][T16432] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 1709.402206][T16671] team0: Port device team_slave_1 added [ 1709.464448][T16432] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 1710.462129][T16800] fuse: Bad value for 'fd' [ 1711.830600][ T4264] Bluetooth: hci4: unexpected event for opcode 0x202d [ 1712.111984][T16671] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1712.119106][T16671] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1712.253918][T16803] loop4: detected capacity change from 0 to 2048 [ 1712.483411][T16671] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1712.532609][T16671] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1713.728061][T16815] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2216'. [ 1713.823000][ T4264] Bluetooth: hci4: unexpected event for opcode 0x2016 [ 1713.823395][T16671] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1714.007577][T16803] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 1714.330323][T16671] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1715.690705][ T4256] EXT4-fs (loop4): unmounting filesystem. [ 1715.744958][T16826] loop8: detected capacity change from 0 to 512 [ 1715.804376][T16828] "syz.0.2219" (16828) uses obsolete ecb(arc4) skcipher [ 1715.835375][T16828] loop0: detected capacity change from 0 to 128 [ 1715.843810][T16828] EXT4-fs: Ignoring removed i_version option [ 1716.062745][T16432] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1716.108079][T16432] 8021q: adding VLAN 0 to HW filter on device team0 [ 1716.209771][T16432] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 1716.220830][T16432] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 1718.179373][ T4264] Bluetooth: hci0: command 0x0405 tx timeout [ 1718.181480][ T4265] Bluetooth: hci4: command 0x0406 tx timeout [ 1718.197509][T11071] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 1718.205924][T11071] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 1718.211424][ T4265] Bluetooth: hci4: Controller not accepting commands anymore: ncmd = 0 [ 1718.214088][T11071] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 1718.222765][ T4265] Bluetooth: hci4: Injecting HCI hardware error event [ 1718.231245][T11071] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 1718.246005][T14127] Bluetooth: hci4: hardware error 0x00 [ 1718.247271][T11071] bridge0: port 1(bridge_slave_0) entered blocking state [ 1718.259133][T11071] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1718.268155][T11071] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 1718.273934][T16828] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback. [ 1718.293811][T16828] ext4 filesystem being mounted at /84/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 1718.294126][T16826] EXT4-fs (loop8): 1 truncate cleaned up [ 1718.331343][T16826] EXT4-fs (loop8): mounted filesystem without journal. Quota mode: none. [ 1718.359946][T11071] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 1718.411575][T11071] bridge0: port 2(bridge_slave_1) entered blocking state [ 1718.418755][T11071] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1718.638183][T16828] EXT4-fs (loop0): unmounting filesystem. [ 1718.660403][T11071] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 1718.724602][T11071] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 1718.744000][T11071] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 1719.317251][T11071] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 1719.351447][T11071] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 1719.525301][ T9216] EXT4-fs (loop8): unmounting filesystem. [ 1719.572979][T11071] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 1719.902714][T11071] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 1720.038652][T11071] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 1720.259708][T11071] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 1720.290702][T11071] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 1720.372864][T14127] Bluetooth: hci4: Opcode 0x0c03 failed: -110 [ 1720.751217][T11071] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 1720.781768][T11071] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 1720.816271][T11071] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 1721.185302][T16671] device hsr_slave_0 entered promiscuous mode [ 1721.252905][T16671] device hsr_slave_1 entered promiscuous mode [ 1721.267670][T16671] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1721.289967][T16671] Cannot create hsr debugfs directory [ 1721.373793][T16432] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1721.601512][ T6126] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 1721.609081][ T6126] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 1726.501252][ T6108] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 1726.510827][ T6108] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 1726.959393][T16936] netlink: 16 bytes leftover after parsing attributes in process `syz.8.2235'. [ 1726.968797][T16936] netlink: 64 bytes leftover after parsing attributes in process `syz.8.2235'. [ 1727.776482][T16909] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 1728.293000][T16943] loop8: detected capacity change from 0 to 1764 [ 1729.425427][T16953] ip6t_rpfilter: unknown options [ 1731.054567][T16955] loop4: detected capacity change from 0 to 4096 [ 1731.084906][T16952] netlink: 20 bytes leftover after parsing attributes in process `syz.8.2239'. [ 1731.449172][T16955] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 1731.811485][ T4256] EXT4-fs (loop4): unmounting filesystem. [ 1732.890905][ T4264] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 1732.908534][ T4264] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 1732.919313][ T4264] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 1732.927599][ T4264] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 1732.935627][ T4264] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 1732.943384][ T4264] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 1735.009873][T16966] lo speed is unknown, defaulting to 1000 [ 1735.147022][T16985] loop4: detected capacity change from 0 to 2048 [ 1735.409237][T16985] UDF-fs: error (device loop4): udf_process_sequence: Primary Volume Descriptor not found! [ 1735.728258][ T4264] Bluetooth: hci1: command 0x0409 tx timeout [ 1735.738305][ T1275] ieee802154 phy0 wpan0: encryption failed: -22 [ 1735.784306][T16985] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 1735.988669][ T4715] device hsr_slave_0 left promiscuous mode [ 1736.025496][ T4715] device hsr_slave_1 left promiscuous mode [ 1736.128019][ T4715] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1736.415961][ T4715] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1737.362082][ T4715] device bridge_slave_1 left promiscuous mode [ 1737.368446][ T4715] bridge0: port 2(bridge_slave_1) entered disabled state [ 1737.448074][ T4715] device bridge_slave_0 left promiscuous mode [ 1737.475108][ T4715] bridge0: port 1(bridge_slave_0) entered disabled state [ 1737.567787][ T4715] device hsr_slave_0 left promiscuous mode [ 1737.574689][ T4715] device hsr_slave_1 left promiscuous mode [ 1737.596450][ T4715] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1737.606681][ T4715] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1737.620246][ T4715] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1737.635231][ T4715] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1737.645921][ T4715] device bridge_slave_1 left promiscuous mode [ 1737.657149][ T4715] bridge0: port 2(bridge_slave_1) entered disabled state [ 1737.668787][ T4715] device bridge_slave_0 left promiscuous mode [ 1737.699898][ T4715] bridge0: port 1(bridge_slave_0) entered disabled state [ 1737.802550][ T27] kauditd_printk_skb: 1 callbacks suppressed [ 1737.802566][ T27] audit: type=1326 audit(1732333436.724:192): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17016 comm="syz.0.2249" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6234d7e819 code=0x7ffc0000 [ 1737.834447][ T4264] Bluetooth: hci1: command 0x041b tx timeout [ 1738.203697][ T4715] device veth1_macvtap left promiscuous mode [ 1738.607807][ T4715] device veth0_macvtap left promiscuous mode [ 1738.626518][ T27] audit: type=1326 audit(1732333436.904:193): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17016 comm="syz.0.2249" exe="/root/syz-executor" sig=0 arch=c000003e syscall=222 compat=0 ip=0x7f6234d7e819 code=0x7ffc0000 [ 1738.651579][ T27] audit: type=1326 audit(1732333436.904:194): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17016 comm="syz.0.2249" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6234d7e819 code=0x7ffc0000 [ 1738.682913][T17022] loop0: detected capacity change from 0 to 164 [ 1738.690531][ T4715] device veth1_vlan left promiscuous mode [ 1738.778601][ T4715] device veth0_vlan left promiscuous mode [ 1738.801191][ T27] audit: type=1326 audit(1732333436.904:195): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17016 comm="syz.0.2249" exe="/root/syz-executor" sig=0 arch=c000003e syscall=223 compat=0 ip=0x7f6234d7e819 code=0x7ffc0000 [ 1738.828214][T17022] isofs_fill_super: bread failed, dev=loop0, iso_blknum=41, block=82 [ 1738.901046][ T27] audit: type=1326 audit(1732333436.904:196): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17016 comm="syz.0.2249" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6234d7e819 code=0x7ffc0000 [ 1738.961824][T15453] I/O error, dev loop0, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 1739.006224][ T27] audit: type=1326 audit(1732333436.914:197): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17016 comm="syz.0.2249" exe="/root/syz-executor" sig=0 arch=c000003e syscall=226 compat=0 ip=0x7f6234d7e819 code=0x7ffc0000 [ 1739.164580][ T27] audit: type=1326 audit(1732333436.914:198): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17016 comm="syz.0.2249" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6234d7e819 code=0x7ffc0000 [ 1739.324715][ T27] audit: type=1326 audit(1732333436.954:199): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17016 comm="syz.0.2249" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f6234d7e819 code=0x7ffc0000 [ 1739.358645][ T27] audit: type=1326 audit(1732333436.964:200): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17016 comm="syz.0.2249" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6234d7e819 code=0x7ffc0000 [ 1739.762042][ T27] audit: type=1326 audit(1732333436.984:201): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17016 comm="syz.0.2249" exe="/root/syz-executor" sig=0 arch=c000003e syscall=222 compat=0 ip=0x7f6234d7e819 code=0x7ffc0000 [ 1739.921300][ T4264] Bluetooth: hci1: command 0x040f tx timeout [ 1741.010701][T17046] fuse: Bad value for 'fd' [ 1741.822241][ T4715] team0 (unregistering): Port device team_slave_1 removed [ 1741.973525][ T4715] team0 (unregistering): Port device team_slave_0 removed [ 1742.112133][ T4715] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1742.201283][ T4264] Bluetooth: hci1: command 0x0419 tx timeout [ 1742.252838][ T4715] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1743.216956][ T4715] bond0 (unregistering): Released all slaves [ 1744.057780][ T4715] team0 (unregistering): Port device team_slave_1 removed [ 1744.133438][ T4715] team0 (unregistering): Port device team_slave_0 removed [ 1744.206724][ T4715] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1744.286392][ T4715] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1745.194076][ T4715] bond0 (unregistering): Released all slaves [ 1745.579663][T17058] loop4: detected capacity change from 0 to 256 [ 1745.596900][T17058] exFAT-fs (loop4): failed to load upcase table (idx : 0x00010000, chksum : 0xb89b369d, utbl_chksum : 0xe619d30d) [ 1745.806673][T17067] bridge0: port 3(gretap0) entered blocking state [ 1745.813862][T17067] bridge0: port 3(gretap0) entered disabled state [ 1745.821902][T17067] device gretap0 entered promiscuous mode [ 1745.828631][T17067] bridge0: port 3(gretap0) entered blocking state [ 1745.838184][T17067] bridge0: port 3(gretap0) entered forwarding state [ 1745.855529][T17067] device gretap0 left promiscuous mode [ 1745.861285][T17067] bridge0: port 3(gretap0) entered disabled state [ 1746.771921][T17068] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 1746.781488][T17068] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 1746.789008][T17068] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 1747.060527][T16966] chnl_net:caif_netlink_parms(): no params data found [ 1748.373886][T17096] binder: 17086:17096 ioctl c018620c 20001180 returned -22 [ 1749.815226][T16966] bridge0: port 1(bridge_slave_0) entered blocking state [ 1749.869960][T16966] bridge0: port 1(bridge_slave_0) entered disabled state [ 1749.892342][T16966] device bridge_slave_0 entered promiscuous mode [ 1750.112244][T16966] bridge0: port 2(bridge_slave_1) entered blocking state [ 1750.215540][T16966] bridge0: port 2(bridge_slave_1) entered disabled state [ 1750.317436][T16966] device bridge_slave_1 entered promiscuous mode [ 1750.785955][T16966] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1751.374535][T16966] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1752.839382][T16966] team0: Port device team_slave_0 added [ 1753.009303][T16966] team0: Port device team_slave_1 added [ 1753.209551][ T4264] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 1753.227107][ T4264] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 1753.239275][ T4264] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 1753.255745][ T4264] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 1753.267118][ T4264] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 1753.274865][ T4264] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 1753.481549][T16966] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1753.488551][T16966] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1753.583076][T16966] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1753.625284][T17139] lo speed is unknown, defaulting to 1000 [ 1753.642943][T16966] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1753.649935][T16966] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1753.694248][T16966] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1754.777002][T17153] netlink: 24 bytes leftover after parsing attributes in process `syz.8.2268'. [ 1754.980819][T16966] device hsr_slave_0 entered promiscuous mode [ 1755.002294][T16966] device hsr_slave_1 entered promiscuous mode [ 1755.009319][T16966] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1755.021169][T16966] Cannot create hsr debugfs directory [ 1755.105927][T17165] binder: 17161:17165 ioctl c018620c 20001180 returned -22 [ 1755.353600][ T4264] Bluetooth: hci0: command 0x0409 tx timeout [ 1755.985459][T17173] loop8: detected capacity change from 0 to 2048 [ 1756.022931][T17173] UDF-fs: error (device loop8): udf_read_tagged: tag checksum failed, block 99: 0x27 != 0x4d [ 1756.055486][T17173] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 1756.064980][T17155] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 1756.287512][T17139] chnl_net:caif_netlink_parms(): no params data found [ 1757.122702][T17194] loop4: detected capacity change from 0 to 1024 [ 1757.294502][T17194] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 1757.618287][ T4264] Bluetooth: hci0: command 0x041b tx timeout [ 1757.776757][ T4256] EXT4-fs (loop4): unmounting filesystem. [ 1759.089922][T17139] bridge0: port 1(bridge_slave_0) entered blocking state [ 1759.119766][T17139] bridge0: port 1(bridge_slave_0) entered disabled state [ 1759.323534][T17139] device bridge_slave_0 entered promiscuous mode [ 1759.641073][ T4264] Bluetooth: hci0: command 0x040f tx timeout [ 1760.094358][T17219] Bluetooth: MGMT ver 1.22 [ 1760.189210][T17139] bridge0: port 2(bridge_slave_1) entered blocking state [ 1760.198932][T17139] bridge0: port 2(bridge_slave_1) entered disabled state [ 1760.213791][T17139] device bridge_slave_1 entered promiscuous mode [ 1760.341602][T17223] binder: 17220:17223 ioctl c018620c 20001180 returned -22 [ 1761.139353][T17139] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1761.169921][T17139] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1761.245071][T17139] team0: Port device team_slave_0 added [ 1761.344884][T17139] team0: Port device team_slave_1 added [ 1761.459606][T17234] fuse: Bad value for 'fd' [ 1761.721106][ T4264] Bluetooth: hci0: command 0x0419 tx timeout [ 1762.033790][T17226] xt_recent: Unsupported userspace flags (00000042) [ 1762.303316][T17139] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1762.310326][T17139] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1762.429637][T17240] loop8: detected capacity change from 0 to 512 [ 1762.449339][T17240] UDF-fs: warning (device loop8): udf_load_vrs: No VRS found [ 1762.497959][T17139] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1762.539424][T17240] UDF-fs: Scanning with blocksize 512 failed [ 1762.547610][T17139] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1762.564899][T17139] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1762.592080][T17139] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1762.592947][T17240] UDF-fs: warning (device loop8): udf_load_vrs: No VRS found [ 1762.724351][T17242] futex_wake_op: syz.0.2282 tries to shift op by 36; fix this program [ 1762.747514][ T27] kauditd_printk_skb: 18 callbacks suppressed [ 1762.747636][ T27] audit: type=1326 audit(1732333461.624:220): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17236 comm="syz.0.2282" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6234d7e819 code=0x7ffc0000 [ 1762.962087][ T27] audit: type=1326 audit(1732333461.624:221): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17236 comm="syz.0.2282" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6234d7e819 code=0x7ffc0000 [ 1763.357531][T17240] UDF-fs: Scanning with blocksize 1024 failed [ 1763.384166][ T27] audit: type=1326 audit(1732333461.624:222): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17236 comm="syz.0.2282" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f6234d7e819 code=0x7ffc0000 [ 1763.425715][T17240] UDF-fs: warning (device loop8): udf_load_vrs: No VRS found [ 1763.451077][T17240] UDF-fs: Scanning with blocksize 2048 failed [ 1763.467897][ T27] audit: type=1326 audit(1732333461.634:223): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17236 comm="syz.0.2282" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6234d7e819 code=0x7ffc0000 [ 1763.521710][T17240] UDF-fs: error (device loop8): udf_read_tagged: read failed, block=256, location=256 [ 1763.564781][T17240] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 1763.576876][ T27] audit: type=1326 audit(1732333461.634:224): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17236 comm="syz.0.2282" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6234d7e819 code=0x7ffc0000 [ 1763.644538][ T27] audit: type=1326 audit(1732333461.634:225): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17236 comm="syz.0.2282" exe="/root/syz-executor" sig=0 arch=c000003e syscall=0 compat=0 ip=0x7f6234d7e819 code=0x7ffc0000 [ 1763.679340][ T27] audit: type=1326 audit(1732333461.634:226): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17236 comm="syz.0.2282" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6234d7e819 code=0x7ffc0000 [ 1763.716198][ T27] audit: type=1326 audit(1732333461.634:227): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17236 comm="syz.0.2282" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6234d7e819 code=0x7ffc0000 [ 1763.787795][ T27] audit: type=1326 audit(1732333461.644:228): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17236 comm="syz.0.2282" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6234d7e819 code=0x7ffc0000 [ 1763.837114][ T27] audit: type=1326 audit(1732333461.654:229): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17236 comm="syz.0.2282" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6234d7e819 code=0x7ffc0000 [ 1765.524617][T17139] device hsr_slave_0 entered promiscuous mode [ 1765.572098][T17139] device hsr_slave_1 entered promiscuous mode [ 1765.582481][T17139] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1765.590317][T17139] Cannot create hsr debugfs directory [ 1766.149603][T17257] loop8: detected capacity change from 0 to 40427 [ 1766.297272][T17257] F2FS-fs (loop8): Invalid log_blocksize (268), supports only 12 [ 1766.305153][T17257] F2FS-fs (loop8): Can't find valid F2FS filesystem in 1th superblock [ 1766.325471][T17257] F2FS-fs (loop8): invalid crc value [ 1766.876945][T17257] F2FS-fs (loop8): Found nat_bits in checkpoint [ 1766.985200][T17257] F2FS-fs (loop8): Try to recover 1th superblock, ret: 0 [ 1766.992480][T17257] F2FS-fs (loop8): Mounted with checkpoint version = 48b305e5 [ 1767.557438][T17275] binder: 17267:17275 ioctl c018620c 20001180 returned -22 [ 1769.240509][ T9010] F2FS-fs (loop8): f2fs_check_nid_range: out-of-range nid=1, run fsck to fix. [ 1769.638929][ T9010] F2FS-fs (loop8): f2fs_check_nid_range: out-of-range nid=2, run fsck to fix. [ 1769.914443][T17292] loop0: detected capacity change from 0 to 128 [ 1770.013342][T17292] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none. [ 1770.091528][T17292] ext4 filesystem being mounted at /111/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 1770.259194][T17283] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 1770.419385][T16966] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 1771.508032][T14761] EXT4-fs (loop0): unmounting filesystem. [ 1772.250459][T16966] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 1773.170114][T16966] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 1773.539334][T17333] loop8: detected capacity change from 0 to 1024 [ 1773.618240][T17333] hfsplus: xattr searching failed [ 1773.695502][ T4715] device hsr_slave_0 left promiscuous mode [ 1773.713765][ T4715] device hsr_slave_1 left promiscuous mode [ 1773.785696][ T4715] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1773.816737][ T4715] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1773.838642][ T4715] device bridge_slave_1 left promiscuous mode [ 1773.846061][ T4715] bridge0: port 2(bridge_slave_1) entered disabled state [ 1773.915458][ T4715] device bridge_slave_0 left promiscuous mode [ 1773.998718][ T4715] bridge0: port 1(bridge_slave_0) entered disabled state [ 1774.041497][ T27] kauditd_printk_skb: 2 callbacks suppressed [ 1774.041519][ T27] audit: type=1326 audit(1732333472.934:232): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17328 comm="syz.0.2294" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f6234d7e819 code=0x0 [ 1774.104427][ T4715] device hsr_slave_0 left promiscuous mode [ 1774.138774][ T4715] device hsr_slave_1 left promiscuous mode [ 1774.171385][ T4715] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1774.244098][ T4715] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1774.291829][ T4715] device bridge_slave_1 left promiscuous mode [ 1774.306620][ T4715] bridge0: port 2(bridge_slave_1) entered disabled state [ 1774.346280][ T4715] device bridge_slave_0 left promiscuous mode [ 1774.390406][ T4715] bridge0: port 1(bridge_slave_0) entered disabled state [ 1774.402922][ T4345] hfsplus: b-tree write err: -5, ino 4 [ 1775.614598][T17361] ip6t_rpfilter: unknown options [ 1776.200005][T17360] loop4: detected capacity change from 0 to 2048 [ 1776.255959][T17360] loop4: p1 < > p3 p4 < > [ 1776.274884][T17360] loop4: p3 start 4259840 is beyond EOD, truncated [ 1776.528876][T17360] dccp_invalid_packet: P.Data Offset(224) too large [ 1776.718884][ T4715] team0 (unregistering): Port device team_slave_1 removed [ 1776.783118][ T4715] team0 (unregistering): Port device team_slave_0 removed [ 1776.840789][ T4715] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1776.894746][ T4715] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1777.125426][ T4715] bond0 (unregistering): Released all slaves [ 1777.722974][ T4715] team0 (unregistering): Port device team_slave_1 removed [ 1777.831034][ T4715] team0 (unregistering): Port device team_slave_0 removed [ 1778.009065][ T4715] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1778.158490][ T4715] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1778.841603][ T4397] usb 5-1: new high-speed USB device number 5 using dummy_hcd [ 1779.052834][ T4397] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 8 [ 1779.067840][ T4397] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 895 [ 1779.078264][ T4397] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x88 has invalid maxpacket 41090, setting to 1024 [ 1779.096391][ T4397] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x88 has invalid maxpacket 1024 [ 1779.118130][ T4397] usb 5-1: New USB device found, idVendor=054c, idProduct=06c3, bcdDevice= 0.00 [ 1779.128561][ T4397] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 1779.155244][ T4397] usb 5-1: SerialNumber: syz [ 1779.179814][ T4397] usb 5-1: config 0 descriptor?? [ 1779.185802][T17371] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 1779.193257][T17371] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 1779.227653][ C1] port100 5-1:0.0: NFC: Urb failure (status -71) [ 1779.235640][ C1] port100 5-1:0.0: NFC: Urb failure (status -71) [ 1779.244890][ T4397] port100 5-1:0.0: NFC: Could not get supported command types [ 1779.459002][ C1] vkms_vblank_simulate: vblank timer overrun [ 1779.577375][ C1] vkms_vblank_simulate: vblank timer overrun [ 1780.043981][ T4715] bond0 (unregistering): Released all slaves [ 1780.164499][T16966] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 1780.323740][T17375] netlink: 19 bytes leftover after parsing attributes in process `syz.0.2302'. [ 1780.675083][ C1] vkms_vblank_simulate: vblank timer overrun [ 1780.931544][T16966] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1781.023571][ T4397] usb 5-1: USB disconnect, device number 5 [ 1781.342294][T17379] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 1782.089976][ T4458] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 1782.115546][ T4458] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 1782.137077][T17398] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready [ 1782.148399][T17398] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 1782.157618][T17398] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 1782.165273][T17398] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 1782.310823][T16966] 8021q: adding VLAN 0 to HW filter on device team0 [ 1782.369686][ T4430] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 1782.391401][ T4430] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 1782.419978][ T4430] bridge0: port 1(bridge_slave_0) entered blocking state [ 1782.427211][ T4430] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1782.463075][ T4430] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 1782.483492][T17139] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 1782.730599][T17139] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 1782.883854][T17412] loop4: detected capacity change from 0 to 1764 [ 1783.546193][T17139] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 1783.673287][T17139] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 1783.728996][ T4345] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 1783.754648][ T4345] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 1783.783329][ T4345] bridge0: port 2(bridge_slave_1) entered blocking state [ 1783.790536][ T4345] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1783.822459][T17414] loop0: detected capacity change from 0 to 512 [ 1783.921439][T17414] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 1784.008579][T16966] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 1784.095845][T17414] EXT4-fs (loop0): 1 truncate cleaned up [ 1784.098007][T16966] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 1784.120471][T17414] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none. [ 1784.152704][ T4345] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 1784.172985][ T4345] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 1784.211516][ T4345] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 1784.257296][ T4345] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 1784.285512][ T4345] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 1784.323844][ T4345] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 1784.347821][ T4345] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 1784.366514][ T4345] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 1784.388587][ T4345] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 1784.407340][ T4345] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 1784.428785][ T4345] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 1784.437287][ T4345] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 1785.927334][T14761] EXT4-fs (loop0): unmounting filesystem. [ 1786.183035][T17139] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1786.228440][ T4430] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 1786.241858][ T4430] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 1786.264062][T17139] 8021q: adding VLAN 0 to HW filter on device team0 [ 1786.422813][ T4345] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 1787.541554][ T4345] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 1787.994601][ T4345] bridge0: port 1(bridge_slave_0) entered blocking state [ 1788.001798][ T4345] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1788.071408][ T4345] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 1788.080562][ T4345] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 1788.094342][ T4345] bridge0: port 2(bridge_slave_1) entered blocking state [ 1788.101564][ T4345] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1788.115115][T17440] bridge0: port 4(gretap0) entered blocking state [ 1788.121953][T17440] bridge0: port 4(gretap0) entered disabled state [ 1788.129421][T17440] device gretap0 entered promiscuous mode [ 1788.135786][T17440] bridge0: port 4(gretap0) entered blocking state [ 1788.142332][T17440] bridge0: port 4(gretap0) entered forwarding state [ 1788.157147][T17441] device gretap0 left promiscuous mode [ 1788.167628][T17441] bridge0: port 4(gretap0) entered disabled state [ 1788.209182][T17443] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready [ 1788.223411][T17443] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 1788.232561][T17443] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 1788.240087][T17443] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 1788.263437][T17446] netlink: 16 bytes leftover after parsing attributes in process `syz.0.2311'. [ 1788.272685][T17446] netlink: 64 bytes leftover after parsing attributes in process `syz.0.2311'. [ 1788.431679][ T4345] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 1788.457046][ T4345] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 1788.621189][ T4715] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 1788.640667][ T4715] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 1788.690662][ T4715] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 1788.709913][ T4715] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 1789.798740][ T4430] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 1789.819675][ T4430] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 1789.874057][ T4430] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 1789.883856][ T4430] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 1789.919819][T17139] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 1789.975152][T17139] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 1790.058358][ T4430] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 1790.201434][ T4430] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 1791.040530][ T4265] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 1791.083900][ T4265] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 1791.106551][ T4265] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 1791.122513][ T4265] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 1791.131846][ T4265] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 1791.139184][ T4265] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 1791.872752][T17480] netlink: 'syz.8.2317': attribute type 21 has an invalid length. [ 1791.880762][T17480] netlink: 156 bytes leftover after parsing attributes in process `syz.8.2317'. [ 1791.917079][T17476] lo speed is unknown, defaulting to 1000 [ 1793.230433][T17139] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1793.270701][ T4458] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 1793.289899][ T4458] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 1793.483369][ T4264] Bluetooth: hci1: command 0x0409 tx timeout [ 1794.431446][T17476] chnl_net:caif_netlink_parms(): no params data found [ 1794.772712][T17526] fuse: Bad value for 'fd' [ 1795.776988][ T4264] Bluetooth: hci1: command 0x041b tx timeout [ 1796.854056][T17532] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1796.865277][ T1275] ieee802154 phy0 wpan0: encryption failed: -22 [ 1797.589234][T17476] bridge0: port 1(bridge_slave_0) entered blocking state [ 1797.606656][T17476] bridge0: port 1(bridge_slave_0) entered disabled state [ 1797.640638][T17476] device bridge_slave_0 entered promiscuous mode [ 1797.801423][ T4265] Bluetooth: hci1: command 0x040f tx timeout [ 1797.821325][T17476] bridge0: port 2(bridge_slave_1) entered blocking state [ 1797.828465][T17476] bridge0: port 2(bridge_slave_1) entered disabled state [ 1797.868541][T17476] device bridge_slave_1 entered promiscuous mode [ 1798.845373][ T4345] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 1798.859811][ T4345] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 1799.210411][T17476] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1799.979569][ T4265] Bluetooth: hci1: command 0x0419 tx timeout [ 1800.079099][T17476] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1800.287281][T17139] device veth0_vlan entered promiscuous mode [ 1802.178256][ T4458] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 1802.198512][ T4458] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 1802.237356][T17139] device veth1_vlan entered promiscuous mode [ 1802.499902][T17476] team0: Port device team_slave_0 added [ 1802.596116][ T4458] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 1802.604600][ T4458] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 1802.649060][T17139] device veth0_macvtap entered promiscuous mode [ 1802.848028][T17476] team0: Port device team_slave_1 added [ 1802.959560][ T4458] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 1802.997868][ T4458] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 1803.462382][ T4458] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 1803.881267][ T4265] Bluetooth: hci1: command 0x0405 tx timeout [ 1803.955458][T17139] device veth1_macvtap entered promiscuous mode [ 1803.987758][T17476] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1804.001046][T17476] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1804.072312][T17476] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1804.096283][T17476] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1804.103578][T17476] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1804.727765][T17476] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1804.848275][T17603] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1805.069941][T17139] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1805.141250][T17139] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1805.178414][T17139] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1805.209575][T17139] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1805.237501][T17139] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1805.275455][T17139] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1805.306701][T17139] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1805.349254][T17139] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1805.511056][T17139] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1805.540818][T17139] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1805.719813][T17476] device hsr_slave_0 entered promiscuous mode [ 1805.749371][T17476] device hsr_slave_1 entered promiscuous mode [ 1805.790039][T17476] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1805.839051][T17476] Cannot create hsr debugfs directory [ 1806.300864][T17316] device hsr_slave_0 left promiscuous mode [ 1806.719369][T17316] device hsr_slave_1 left promiscuous mode [ 1806.758207][T17316] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1806.775951][T17316] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1806.815504][T17316] device bridge_slave_1 left promiscuous mode [ 1807.007882][T17316] bridge0: port 2(bridge_slave_1) entered disabled state [ 1807.192072][T17316] device bridge_slave_0 left promiscuous mode [ 1807.202702][T17316] bridge0: port 1(bridge_slave_0) entered disabled state [ 1808.423318][T17648] fuse: Bad value for 'fd' [ 1811.138840][T17316] team0 (unregistering): Port device team_slave_1 removed [ 1812.217704][T17316] team0 (unregistering): Port device team_slave_0 removed [ 1812.397462][T17316] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1812.483031][ C1] vkms_vblank_simulate: vblank timer overrun [ 1812.490618][ T4264] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 1812.505644][ T4264] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 1812.514406][ T4264] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 1812.522735][ T4264] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 1812.530364][ T4264] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 1812.538022][ T4264] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 1812.602085][T17316] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1814.601126][ T4264] Bluetooth: hci5: command 0x0409 tx timeout [ 1814.846794][T17316] bond0 (unregistering): Released all slaves [ 1815.022996][ T5269] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 1815.033271][ T5269] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 1815.045702][ T5269] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 1815.057572][ T5269] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 1815.141273][T17691] lo speed is unknown, defaulting to 1000 [ 1817.044366][ T4264] Bluetooth: hci5: command 0x041b tx timeout [ 1817.863004][T17691] chnl_net:caif_netlink_parms(): no params data found [ 1819.081918][ T4264] Bluetooth: hci5: command 0x040f tx timeout [ 1822.604891][ T4264] Bluetooth: hci5: command 0x0419 tx timeout [ 1822.621938][T17691] bridge0: port 1(bridge_slave_0) entered blocking state [ 1822.629081][T17691] bridge0: port 1(bridge_slave_0) entered disabled state [ 1822.669097][T17691] device bridge_slave_0 entered promiscuous mode [ 1822.709628][T17691] bridge0: port 2(bridge_slave_1) entered blocking state [ 1822.744734][T17691] bridge0: port 2(bridge_slave_1) entered disabled state [ 1822.776569][T17691] device bridge_slave_1 entered promiscuous mode [ 1822.935339][T17691] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1822.968835][T17691] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1823.236968][T17691] team0: Port device team_slave_0 added [ 1823.293279][T17691] team0: Port device team_slave_1 added [ 1824.490704][T17691] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1824.528953][T17691] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1824.601849][T17691] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1824.739705][T17691] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1824.760726][T17691] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1824.879431][T17691] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1825.156907][T17691] device hsr_slave_0 entered promiscuous mode [ 1825.198005][T17691] device hsr_slave_1 entered promiscuous mode [ 1825.233166][T17691] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1825.258075][T17691] Cannot create hsr debugfs directory [ 1825.447056][T17476] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 1825.494766][T17476] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 1825.595884][T17476] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 1825.926615][T17476] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 1826.855099][T17841] loop8: detected capacity change from 0 to 64 [ 1826.902513][T17841] hfs: get root inode failed [ 1830.311329][T17476] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1830.556364][T16957] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 1830.602048][T16957] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 1830.648885][T17476] 8021q: adding VLAN 0 to HW filter on device team0 [ 1831.153873][ T4430] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 1831.452142][ T4430] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 1831.460732][ T4430] bridge0: port 1(bridge_slave_0) entered blocking state [ 1831.468006][ T4430] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1831.566633][ T4430] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 1831.617324][ C0] vkms_vblank_simulate: vblank timer overrun [ 1831.925033][T16957] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 1831.951279][T16957] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 1833.828722][T16957] bridge0: port 2(bridge_slave_1) entered blocking state [ 1833.835983][T16957] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1834.356588][T17476] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 1834.408316][T17476] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 1835.363350][ T4458] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 1835.380209][ T4458] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 1835.407235][ T4458] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 1835.444009][ T4458] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 1835.454909][ T4458] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 1835.475597][ T4458] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 1835.493188][ T4458] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 1835.514034][ T4458] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 1835.533637][ T4458] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 1835.546859][ T4458] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 1835.555776][ T4458] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 1835.564390][ T4458] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 1836.115761][T17691] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 1836.155479][T17691] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 1836.184476][T17691] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 1836.271471][T17316] device hsr_slave_0 left promiscuous mode [ 1836.314792][T17316] device hsr_slave_1 left promiscuous mode [ 1836.323222][T17316] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1836.333489][T17316] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1836.359522][T17316] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1836.368799][T17316] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1836.393284][T17316] device bridge_slave_1 left promiscuous mode [ 1836.412543][T17316] bridge0: port 2(bridge_slave_1) entered disabled state [ 1836.459820][T17316] device bridge_slave_0 left promiscuous mode [ 1836.491344][T17316] bridge0: port 1(bridge_slave_0) entered disabled state [ 1836.565857][T17316] device veth1_macvtap left promiscuous mode [ 1836.593333][T17316] device veth0_macvtap left promiscuous mode [ 1836.599511][T17316] device veth1_vlan left promiscuous mode [ 1836.615720][T17902] loop8: detected capacity change from 0 to 512 [ 1836.631154][T17316] device veth0_vlan left promiscuous mode [ 1836.646442][T17885] loop4: detected capacity change from 0 to 40427 [ 1836.667978][T17902] EXT4-fs (loop8): encrypted files will use data=ordered instead of data journaling mode [ 1836.701005][T17885] F2FS-fs (loop4): Invalid log_blocksize (268), supports only 12 [ 1836.708791][T17885] F2FS-fs (loop4): Can't find valid F2FS filesystem in 1th superblock [ 1836.738142][T17902] EXT4-fs (loop8): 1 truncate cleaned up [ 1836.757325][T17902] EXT4-fs (loop8): mounted filesystem without journal. Quota mode: none. [ 1836.777261][T17885] F2FS-fs (loop4): invalid crc value [ 1836.862806][T17885] F2FS-fs (loop4): Found nat_bits in checkpoint [ 1836.964341][T17885] F2FS-fs (loop4): Try to recover 1th superblock, ret: 0 [ 1836.985988][T17885] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5 [ 1837.161570][T17885] syz.4.2374: attempt to access beyond end of device [ 1837.161570][T17885] loop4: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 1837.982046][ T9216] EXT4-fs (loop8): unmounting filesystem. [ 1838.009357][T11071] F2FS-fs (loop4): f2fs_check_nid_range: out-of-range nid=1, run fsck to fix. [ 1838.023300][T11071] F2FS-fs (loop4): f2fs_check_nid_range: out-of-range nid=2, run fsck to fix. [ 1841.120492][T17316] team0 (unregistering): Port device team_slave_1 removed [ 1841.219227][T17316] team0 (unregistering): Port device team_slave_0 removed [ 1841.315709][T17316] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1841.404773][T17316] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1841.682666][ C0] vkms_vblank_simulate: vblank timer overrun [ 1842.050234][ C0] vkms_vblank_simulate: vblank timer overrun [ 1843.036931][T17316] bond0 (unregistering): Released all slaves [ 1843.135261][T17691] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 1843.241220][ T4458] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 1843.248797][ T4458] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 1843.415105][T17476] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1843.916427][T17957] fuse: Bad value for 'fd' [ 1844.941193][ T4345] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 1845.003385][ T4345] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 1845.150621][T17476] device veth0_vlan entered promiscuous mode [ 1845.209899][ T4715] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 1845.226900][ T4715] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 1845.349641][ T4715] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 1845.379358][ T4715] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 1845.626005][T17476] device veth1_vlan entered promiscuous mode [ 1845.679558][ T4345] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 1845.702446][ T4345] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 1845.719998][ T4345] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 1846.581739][ T4345] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 1846.619927][T17476] device veth0_macvtap entered promiscuous mode [ 1846.673429][T17476] device veth1_macvtap entered promiscuous mode [ 1846.867136][T17691] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1846.946186][T17476] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1846.962005][T17476] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1846.972415][T17476] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1846.983199][T17476] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1847.017105][T17476] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1847.035562][ T4430] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 1847.045877][ T4430] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 1847.077984][ T4430] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 1847.117178][ T4430] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 1847.143188][T17691] 8021q: adding VLAN 0 to HW filter on device team0 [ 1847.163454][T17476] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1847.186279][T17476] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1847.198207][T17476] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1847.219429][T17476] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1847.234474][T17476] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1847.281775][ T4715] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 1847.299779][ T4715] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 1847.368840][ T4715] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 1847.391813][ T4715] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 1847.430792][ T4715] bridge0: port 1(bridge_slave_0) entered blocking state [ 1847.438010][ T4715] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1847.467703][ T4715] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 1847.764199][T17476] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1847.783541][T17476] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1847.905999][T17476] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1848.006580][T17986] loop8: detected capacity change from 0 to 1024 [ 1848.043240][T17476] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1848.207831][ T4715] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 1848.265705][ T4715] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 1848.369916][ T4715] bridge0: port 2(bridge_slave_1) entered blocking state [ 1848.377175][ T4715] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1848.681108][ T4345] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 1848.711886][T17986] EXT4-fs (loop8): mounted filesystem without journal. Quota mode: writeback. [ 1848.733771][ T4345] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 1848.975993][ T9216] EXT4-fs (loop8): unmounting filesystem. [ 1849.123117][ T4345] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 1849.175177][ T4345] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 1849.193139][ T4345] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 1849.212060][ T4345] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 1849.231547][ T4345] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 1849.293364][ T4345] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 1849.341906][ T4345] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 1849.370806][ T4345] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 1849.386691][T17691] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 1849.412904][ T4345] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 1849.962343][T18015] binder: 18005:18015 ioctl c018620c 20001180 returned -22 [ 1853.465031][T17691] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1853.499174][ T4416] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 1853.521208][ T4416] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 1853.593018][T18027] Process accounting resumed [ 1854.042955][ T4265] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 1854.058240][ T4265] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 1854.068260][ T4265] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 1854.079242][ T4265] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 1854.089766][ T4265] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 1854.097488][ T4265] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 1854.255405][T18043] fuse: Bad value for 'fd' [ 1854.354751][ T6108] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1854.893977][T18039] lo speed is unknown, defaulting to 1000 [ 1855.168475][T18053] loop4: detected capacity change from 0 to 512 [ 1855.176806][T18053] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 1855.195376][T18053] EXT4-fs (loop4): 1 truncate cleaned up [ 1855.204858][T18053] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 1855.290729][ T6108] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1855.429585][T18057] Bluetooth: MGMT ver 1.22 [ 1856.371109][ T4264] Bluetooth: hci0: command 0x0409 tx timeout [ 1856.768402][ T6108] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1856.806154][ T4256] EXT4-fs (loop4): unmounting filesystem. [ 1856.909160][T18039] chnl_net:caif_netlink_parms(): no params data found [ 1857.145729][ T6108] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1857.159060][T18071] loop4: detected capacity change from 0 to 8 [ 1857.276628][T18071] SQUASHFS error: Failed to read block 0x4de: -5 [ 1857.323805][T18071] SQUASHFS error: Failed to read block 0x4de: -5 [ 1857.330527][ T27] audit: type=1800 audit(1732333556.244:233): pid=18071 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.4.2399" name="file1" dev="loop4" ino=5 res=0 errno=0 [ 1857.335705][ T8806] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 1857.435374][ T8806] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 1857.544798][ T8806] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 1857.588107][ T8806] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 1857.622635][T18039] bridge0: port 1(bridge_slave_0) entered blocking state [ 1857.629755][T18039] bridge0: port 1(bridge_slave_0) entered disabled state [ 1857.638317][T18039] device bridge_slave_0 entered promiscuous mode [ 1857.647202][T18039] bridge0: port 2(bridge_slave_1) entered blocking state [ 1857.655421][T18039] bridge0: port 2(bridge_slave_1) entered disabled state [ 1857.657295][T18073] SQUASHFS error: Failed to read block 0x4de: -5 [ 1857.663998][T18039] device bridge_slave_1 entered promiscuous mode [ 1857.695205][T18073] SQUASHFS error: Failed to read block 0x4de: -5 [ 1857.707563][T18073] SQUASHFS error: Failed to read block 0x4de: -5 [ 1857.714222][ T8806] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 1857.722413][ T8806] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 1857.730155][T18073] SQUASHFS error: Failed to read block 0x4de: -5 [ 1857.746545][T17691] device veth0_vlan entered promiscuous mode [ 1857.765869][T18071] SQUASHFS error: Failed to read block 0x4de: -5 [ 1857.771725][T18039] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1857.779142][T18071] SQUASHFS error: Failed to read block 0x4de: -5 [ 1857.785658][T18039] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1857.805108][T17691] device veth1_vlan entered promiscuous mode [ 1857.820407][T18071] SQUASHFS error: Failed to read block 0x4de: -5 [ 1857.845195][T18071] SQUASHFS error: Failed to read block 0x4de: -5 [ 1857.860350][T18071] SQUASHFS error: Failed to read block 0x4de: -5 [ 1857.874244][T18071] SQUASHFS error: Failed to read block 0x4de: -5 [ 1857.880828][T18073] SQUASHFS error: Failed to read block 0x4de: -5 [ 1857.891425][T18073] SQUASHFS error: Failed to read block 0x4de: -5 [ 1857.903267][ T8806] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 1857.925666][T18071] SQUASHFS error: Failed to read block 0x4de: -5 [ 1857.927877][ T8806] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 1857.948186][T18071] SQUASHFS error: Failed to read block 0x4de: -5 [ 1857.955198][T18071] SQUASHFS error: Failed to read block 0x4de: -5 [ 1857.967692][T18071] SQUASHFS error: Failed to read block 0x4de: -5 [ 1858.006108][T18039] team0: Port device team_slave_0 added [ 1858.027854][T18039] team0: Port device team_slave_1 added [ 1858.138426][ T8806] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 1858.147204][ T8806] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 1858.160094][T17691] device veth0_macvtap entered promiscuous mode [ 1858.172560][T18039] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1858.179535][T18039] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1858.206236][T18039] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1858.245680][T17691] device veth1_macvtap entered promiscuous mode [ 1858.256131][T18039] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1858.263868][T18039] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1858.294597][ T1275] ieee802154 phy0 wpan0: encryption failed: -22 [ 1858.302372][T18039] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1858.377264][T17691] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1858.388257][T17691] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1858.398417][T17691] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1858.415006][T17691] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1858.425186][T17691] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1858.435995][T17691] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1858.446490][ T4264] Bluetooth: hci0: command 0x041b tx timeout [ 1858.457505][T17691] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1858.468248][T18039] device hsr_slave_0 entered promiscuous mode [ 1858.478609][T18039] device hsr_slave_1 entered promiscuous mode [ 1858.486067][T18039] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1858.493820][T18039] Cannot create hsr debugfs directory [ 1858.529259][ T4345] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 1858.539340][ T4345] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 1858.547671][ T4345] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 1858.556631][ T4345] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 1858.567987][T17691] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1858.579132][T17691] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1858.589373][T17691] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1858.600030][T17691] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1858.610099][T17691] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1858.621351][T17691] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1858.633306][T17691] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1858.682278][ T4345] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 1858.691112][ T4345] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 1858.702413][T17691] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1858.711838][T17691] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1858.720584][T17691] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1858.729561][T17691] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1859.025240][ T8806] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1859.033739][ T8806] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1859.074351][ T4303] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 1859.138202][ T8806] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1859.160126][ T6108] device hsr_slave_0 left promiscuous mode [ 1859.160989][ T8806] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1859.174397][ T6108] device hsr_slave_1 left promiscuous mode [ 1859.186759][ T6108] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1859.196497][ T6108] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1859.206705][ T6108] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1859.217678][ T6108] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1859.227750][ T6108] device bridge_slave_1 left promiscuous mode [ 1859.235589][ T6108] bridge0: port 2(bridge_slave_1) entered disabled state [ 1859.254307][ T6108] device bridge_slave_0 left promiscuous mode [ 1859.260542][ T6108] bridge0: port 1(bridge_slave_0) entered disabled state [ 1859.297456][ T6108] device veth1_macvtap left promiscuous mode [ 1859.303770][ T6108] device veth0_macvtap left promiscuous mode [ 1859.309829][ T6108] device veth1_vlan left promiscuous mode [ 1859.319395][ T6108] device veth0_vlan left promiscuous mode [ 1860.122148][ T6108] team0 (unregistering): Port device team_slave_1 removed [ 1860.198343][ T6108] team0 (unregistering): Port device team_slave_0 removed [ 1860.276549][ T6108] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1860.348580][ T6108] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1860.521522][ T4264] Bluetooth: hci0: command 0x040f tx timeout [ 1861.237245][ T6108] bond0 (unregistering): Released all slaves [ 1861.341758][ T8806] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 1861.947088][T18039] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 1862.066743][T18039] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 1862.101680][T18039] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 1862.126607][T18039] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 1862.565685][T18106] loop5: detected capacity change from 0 to 1024 [ 1862.604256][T14127] Bluetooth: hci0: command 0x0419 tx timeout [ 1862.988493][T18106] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: writeback. [ 1863.259133][T18039] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1863.290321][T17691] EXT4-fs (loop5): unmounting filesystem. [ 1863.385506][ T6126] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 1863.405860][ T6126] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 1863.454973][T18039] 8021q: adding VLAN 0 to HW filter on device team0 [ 1863.547596][T16957] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 1863.573599][T16957] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 1863.621616][T16957] bridge0: port 1(bridge_slave_0) entered blocking state [ 1863.628875][T16957] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1863.670573][T16957] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 1864.626495][ T9010] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 1864.659186][ T9010] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 1864.669158][ T9010] bridge0: port 2(bridge_slave_1) entered blocking state [ 1864.676365][ T9010] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1864.794743][T18125] loop5: detected capacity change from 0 to 512 [ 1864.857913][T18125] EXT4-fs (loop5): Invalid log cluster size: 589825 [ 1864.886358][ T6108] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1864.998025][T18123] loop4: detected capacity change from 0 to 512 [ 1865.002739][ T8824] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 1865.014483][ T8824] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 1865.024241][ T8824] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 1865.038036][ T8824] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 1865.051380][ T8824] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 1865.450442][T18123] EXT4-fs (loop4): ext4_check_descriptors: Checksum for group 0 failed (17031!=33349) [ 1866.747880][T18131] loop5: detected capacity change from 0 to 512 [ 1867.186827][T18131] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: writeback. [ 1867.196155][T18131] ext4 filesystem being mounted at /3/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 1867.228802][T18123] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a802e12c, mo2=0002] [ 1867.265069][T18123] System zones: 1-12 [ 1867.270109][T18123] EXT4-fs (loop4): orphan cleanup on readonly fs [ 1867.346581][T18123] EXT4-fs error (device loop4): ext4_validate_block_bitmap:438: comm syz.4.2408: bg 0: block 361: padding at end of block bitmap is not set [ 1867.365537][T18123] EXT4-fs (loop4): Remounting filesystem read-only [ 1867.367078][ T6108] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1867.377313][T18123] EXT4-fs error (device loop4) in ext4_mb_clear_bb:6170: Corrupt filesystem [ 1867.397317][T18123] EXT4-fs (loop4): Remounting filesystem read-only [ 1867.404939][T18123] EXT4-fs error (device loop4): ext4_free_branches:1030: inode #11: comm syz.4.2408: invalid indirect mapped block 12 (level 1) [ 1867.424137][T18123] EXT4-fs (loop4): Remounting filesystem read-only [ 1867.430719][T18123] EXT4-fs error (device loop4): ext4_free_branches:1030: inode #11: comm syz.4.2408: invalid indirect mapped block 2 (level 2) [ 1867.467448][T18123] EXT4-fs (loop4): Remounting filesystem read-only [ 1867.475571][T18123] EXT4-fs (loop4): 1 truncate cleaned up [ 1867.497351][T18123] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 1867.550140][ T8824] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 1867.569890][T17691] EXT4-fs (loop5): unmounting filesystem. [ 1867.606545][ T8824] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 1867.616095][T18123] EXT4-fs error (device loop4): ext4_map_blocks:634: inode #2: block 5: comm syz.4.2408: lblock 0 mapped to illegal pblock 5 (length 1) [ 1867.662123][ T8824] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 1867.691740][ T8824] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 1867.699737][T18123] EXT4-fs warning (device loop4): dx_probe:823: inode #2: lblock 0: comm syz.4.2408: error -117 reading directory block [ 1867.824533][ T6108] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1867.855911][ T27] audit: type=1326 audit(1732333566.774:234): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18137 comm="syz.8.2412" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f89b997e819 code=0x0 [ 1867.886582][ T4302] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 1868.156790][ T4302] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 1868.985968][T18140] loop8: detected capacity change from 0 to 512 [ 1869.014662][ T4256] EXT4-fs (loop4): unmounting filesystem. [ 1869.037231][T18140] EXT4-fs: Mount option(s) incompatible with ext3 [ 1869.142857][ T4264] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 1869.156943][ T4264] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 1869.171065][ T4264] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 1869.198384][ T4264] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 1869.206472][ T4264] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 1869.221452][ T4264] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 1869.310973][ T4361] usb 6-1: new high-speed USB device number 2 using dummy_hcd [ 1869.315471][ T6108] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1869.511040][ T4361] usb 6-1: Using ep0 maxpacket: 8 [ 1869.528197][ T4361] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1869.574792][ T4361] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 1869.589840][T18144] lo speed is unknown, defaulting to 1000 [ 1869.623373][ T4361] usb 6-1: Duplicate descriptor for config 1 interface 0 altsetting 0, skipping [ 1869.859431][ T4361] usb 6-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 1869.870982][ T4361] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1869.879397][ T4361] usb 6-1: Product: syz [ 1869.883819][ T4361] usb 6-1: Manufacturer: syz [ 1869.888461][ T4361] usb 6-1: SerialNumber: syz [ 1870.753399][ T4361] usb 6-1: 0:2 : does not exist [ 1870.826581][ T4361] usb 6-1: USB disconnect, device number 2 [ 1870.969132][T18158] loop8: detected capacity change from 0 to 512 [ 1871.078435][T18158] EXT4-fs (loop8): mounted filesystem without journal. Quota mode: writeback. [ 1871.103925][T17106] udevd[17106]: error opening ATTR{/sys/devices/platform/dummy_hcd.5/usb6/6-1/6-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1871.128813][T18158] ext4 filesystem being mounted at /345/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 1871.146078][T18158] EXT4-fs error (device loop8): ext4_validate_block_bitmap:438: comm syz.8.2416: bg 0: block 256: padding at end of block bitmap is not set [ 1871.170093][T18144] chnl_net:caif_netlink_parms(): no params data found [ 1871.177425][T18158] Quota error (device loop8): write_blk: dquota write failed [ 1871.194735][T18158] Quota error (device loop8): find_free_dqentry: Can't write quota data block 5 [ 1871.490181][T18166] loop4: detected capacity change from 0 to 2048 [ 1871.499944][T18166] EXT4-fs: Ignoring removed orlov option [ 1871.509942][T14127] Bluetooth: hci1: command 0x0409 tx timeout [ 1871.710227][T18166] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 1871.959266][T18158] Quota error (device loop8): qtree_write_dquot: Error -28 occurred while creating quota [ 1872.014188][T18158] EXT4-fs error (device loop8): ext4_acquire_dquot:6801: comm syz.8.2416: Failed to acquire dquot type 1 [ 1872.037511][T18165] Quota error (device loop8): do_check_range: Getting block 4128768 out of range 0-5 [ 1872.284140][ T4256] EXT4-fs (loop4): unmounting filesystem. [ 1872.383255][ T9216] EXT4-fs (loop8): unmounting filesystem. [ 1872.477074][T17316] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 1872.485172][T17316] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 1872.493534][T18144] bridge0: port 1(bridge_slave_0) entered blocking state [ 1872.500682][T18144] bridge0: port 1(bridge_slave_0) entered disabled state [ 1872.515103][T18144] device bridge_slave_0 entered promiscuous mode [ 1872.555976][T18039] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1872.567221][T18144] bridge0: port 2(bridge_slave_1) entered blocking state [ 1872.575066][T18144] bridge0: port 2(bridge_slave_1) entered disabled state [ 1872.583272][T18144] device bridge_slave_1 entered promiscuous mode [ 1872.647009][T18144] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1872.683844][T18144] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1872.722488][T18144] team0: Port device team_slave_0 added [ 1872.769453][T18144] team0: Port device team_slave_1 added [ 1872.792626][T16957] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 1872.802695][T16957] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 1872.857288][T18144] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1872.870330][T18144] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1872.904870][T18144] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1872.968214][T18144] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1872.976256][T18144] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1873.004024][T18144] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1873.017428][T16957] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 1873.027087][T16957] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 1873.039949][T18039] device veth0_vlan entered promiscuous mode [ 1873.107303][T16957] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 1873.118194][T16957] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 1873.167220][T18039] device veth1_vlan entered promiscuous mode [ 1873.212062][T18144] device hsr_slave_0 entered promiscuous mode [ 1873.219151][T18144] device hsr_slave_1 entered promiscuous mode [ 1873.226434][T18144] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1873.235128][T18144] Cannot create hsr debugfs directory [ 1873.381356][T18039] device veth0_macvtap entered promiscuous mode [ 1873.397602][T16957] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 1873.407793][T16957] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 1873.431758][T18039] device veth1_macvtap entered promiscuous mode [ 1873.461936][T16957] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 1873.470351][T16957] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 1873.561299][T14127] Bluetooth: hci1: command 0x041b tx timeout [ 1873.640116][T18039] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1873.651942][T18039] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1873.662528][T18039] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1873.680237][T18039] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1873.695558][T18039] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1873.708063][T18039] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1873.725980][T18039] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1873.750157][ T4302] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 1873.760257][ T4302] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 1873.823069][ T6108] device hsr_slave_0 left promiscuous mode [ 1873.830115][ T6108] device hsr_slave_1 left promiscuous mode [ 1873.844035][ T6108] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1873.852082][ T6108] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1873.860080][ T6108] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1873.868392][ T6108] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1873.876783][ T6108] device bridge_slave_1 left promiscuous mode [ 1873.886216][ T6108] bridge0: port 2(bridge_slave_1) entered disabled state [ 1873.900600][ T6108] device bridge_slave_0 left promiscuous mode [ 1873.908317][ T6108] bridge0: port 1(bridge_slave_0) entered disabled state [ 1873.950523][ T6108] device bond0 left promiscuous mode [ 1873.955936][ T6108] device bond_slave_0 left promiscuous mode [ 1873.963016][ T6108] device bond_slave_1 left promiscuous mode [ 1873.969699][ T6108] device veth1_macvtap left promiscuous mode [ 1873.977517][ T6108] device veth0_macvtap left promiscuous mode [ 1873.983912][ T6108] device veth1_vlan left promiscuous mode [ 1873.989980][ T6108] device veth0_vlan left promiscuous mode [ 1875.052692][ T6108] team0 (unregistering): Port device team_slave_1 removed [ 1875.121584][ T6108] team0 (unregistering): Port device team_slave_0 removed [ 1875.197638][ T6108] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1875.271319][ T6108] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1875.641177][T14127] Bluetooth: hci1: command 0x040f tx timeout [ 1876.148083][ T6108] bond0 (unregistering): Released all slaves [ 1876.274870][T18039] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1876.285625][T18039] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1876.295628][T18039] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1876.306196][T18039] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1876.317737][T18039] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1876.337413][T16957] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 1876.346739][T16957] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 1876.364272][T18039] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1876.374690][T18039] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1876.383638][T18039] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1876.393171][T18039] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1876.578362][ T4458] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1876.635931][ T4458] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1876.908396][ T9010] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 1876.955595][ T4430] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1876.967720][ T4430] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1877.127487][ T4430] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 1878.586673][ T4264] Bluetooth: hci1: command 0x0419 tx timeout [ 1879.694264][T18258] ip6t_rpfilter: unknown options [ 1879.744234][T18256] loop8: detected capacity change from 0 to 1024 [ 1880.481753][T18260] loop4: detected capacity change from 0 to 4096 [ 1880.909808][T18256] EXT4-fs: Ignoring removed orlov option [ 1880.939134][T18260] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 1880.945136][T18256] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 1880.995113][T18254] EXT4-fs (loop4): shut down requested (0) [ 1881.021173][T18256] EXT4-fs (loop8): Test dummy encryption mode enabled [ 1881.333328][ T4256] EXT4-fs (loop4): unmounting filesystem. [ 1881.339371][T18256] EXT4-fs (loop8): mounted filesystem without journal. Quota mode: writeback. [ 1881.446327][T18267] netlink: 'syz.5.2425': attribute type 21 has an invalid length. [ 1881.454706][T18267] netlink: 156 bytes leftover after parsing attributes in process `syz.5.2425'. [ 1882.132967][T18144] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 1882.174940][T18144] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 1882.216409][T18144] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 1882.239602][T18144] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 1882.413821][T18144] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1882.444341][ T9010] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 1882.467271][ T9010] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 1882.487690][T18144] 8021q: adding VLAN 0 to HW filter on device team0 [ 1882.512731][ T4345] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 1882.532279][ T4345] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 1882.557413][ T4345] bridge0: port 1(bridge_slave_0) entered blocking state [ 1882.564597][ T4345] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1882.605664][ T4345] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 1882.622329][ T4345] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 1882.642100][ T4345] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 1882.661395][ T4345] bridge0: port 2(bridge_slave_1) entered blocking state [ 1882.668548][ T4345] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1882.693112][ T4345] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 1882.723049][ T4345] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 1882.739107][ T4345] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 1882.771086][ T4345] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 1882.799470][ T4345] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 1882.861753][ T4345] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 1882.891712][ T4345] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 1882.910514][ T4345] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 1882.965292][ T4345] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 1882.986930][T18144] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 1883.017905][T18144] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 1883.035593][ T4345] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 1883.061892][ T4345] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 1883.405179][ T4345] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 1883.417910][ T4345] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 1883.430725][T18144] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1883.973450][ T4345] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 1883.987207][ T4345] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 1884.016294][ T9216] EXT4-fs (loop8): unmounting filesystem. [ 1884.026128][ T4345] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 1884.036870][ T4345] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 1884.056292][T18144] device veth0_vlan entered promiscuous mode [ 1884.074393][ T4345] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 1884.085412][ T4345] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 1884.103511][T18144] device veth1_vlan entered promiscuous mode [ 1884.159063][ T9010] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 1884.169153][ T9010] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 1884.184908][ T9010] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 1884.196865][ T9010] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 1884.214119][T18144] device veth0_macvtap entered promiscuous mode [ 1884.233765][T18144] device veth1_macvtap entered promiscuous mode [ 1884.258043][T18144] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1884.275409][T18144] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1884.288142][T18144] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1884.303826][T18144] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1884.315057][T18144] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1884.328183][T18144] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1884.346895][T18144] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1884.355990][ T4458] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 1884.368850][ T4458] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 1884.392599][ T4458] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 1884.402564][ T4458] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 1884.414843][T18144] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1884.426261][T18144] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1884.445445][T18144] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1884.458626][T18144] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1884.472319][T18144] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1884.485405][T18144] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1884.501515][T18144] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1884.510432][ T4458] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 1884.526286][ T4458] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 1884.545025][T18144] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1884.555330][T18144] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1884.569175][T18144] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1884.579401][T18144] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1884.689640][T16957] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1884.714655][T16957] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1884.725595][ T4345] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1884.751190][ T4345] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1884.751956][ T4458] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 1884.775817][ T4458] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 1885.178966][T18340] fuse: Bad value for 'fd' [ 1919.724172][ T1275] ieee802154 phy0 wpan0: encryption failed: -22 [ 1937.161242][T14127] Bluetooth: hci5: command 0x0406 tx timeout [ 1978.121081][ T4264] Bluetooth: hci0: command 0x0406 tx timeout [ 1981.165530][ T1275] ieee802154 phy0 wpan0: encryption failed: -22 [ 1993.481156][ T4264] Bluetooth: hci1: command 0x0406 tx timeout [ 2042.603843][ T1275] ieee802154 phy0 wpan0: encryption failed: -22 [ 2104.046550][ T1275] ieee802154 phy0 wpan0: encryption failed: -22 [ 2165.485913][ T1275] ieee802154 phy0 wpan0: encryption failed: -22