last executing test programs: 8m40.849521045s ago: executing program 2 (id=32): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e23}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) ioctl$vim2m_VIDIOC_ENUM_FMT(0xffffffffffffffff, 0xc0405602, &(0x7f0000000000)={0x0, 0xd, 0x2, "134604cea4ddbc704c17bc74772190f5070001ebfffdfffffee793000000e000", 0x41415270}) r3 = shmget$private(0x0, 0x3000, 0x2, &(0x7f0000ffd000/0x3000)=nil) shmat(r3, &(0x7f0000ffc000/0x3000)=nil, 0x4000) shmctl$IPC_RMID(r3, 0x0) remap_file_pages(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x0, 0xfd9, 0x4000000) setsockopt$packet_int(0xffffffffffffffff, 0x107, 0x13, 0x0, 0x0) memfd_create(0x0, 0x1) lseek(0xffffffffffffffff, 0x1, 0x2) r4 = syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000180)={0xffffffffffffffff, 0x0, 0x0, 0xf6, &(0x7f0000000040), &(0x7f0000000400)=""/246, 0x5, 0x0, 0x33, 0x0, &(0x7f00000000c0)="dcc6c5a99fd1a61aa50cee47d19d489c26a2d6a27fa6a1a02809a4bb9e6d7a93c0e951c21c6a78521dbcb7bbb1520cbe3a9bd4", 0x0, 0x4, 0x0, 0x1dee512d}, 0x50) bind$802154_raw(r4, &(0x7f00000003c0)={0x24, @none={0x0, 0x2}}, 0x14) 8m38.808082374s ago: executing program 2 (id=34): syz_open_procfs(0xffffffffffffffff, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) syz_mount_image$ext4(&(0x7f0000000580)='ext4\x00', &(0x7f0000000040)='./bus\x00', 0x1208002, &(0x7f0000001200)={[{@grpquota}, {@delalloc}, {@resuid}, {@data_ordered}, {@dioread_nolock}, {}, {@nomblk_io_submit}, {@noauto_da_alloc}]}, 0x1, 0x5d8, &(0x7f00000005c0)="$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") mkdir(&(0x7f0000000080)='./bus\x00', 0x3) sched_setscheduler(0x0, 0x1, &(0x7f00000001c0)=0x7) prctl$PR_SET_MM_MAP(0x23, 0xe, 0x0, 0x0) getpid() r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000180)) setgroups(0x0, 0x0) read$FUSE(0xffffffffffffffff, 0x0, 0x0) r3 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000001c0)=ANY=[@ANYBLOB="1c0000005e00679a3601ffc4910700004f78d4c1a0731cccff"], 0x1c}}, 0x0) recvmmsg$unix(r3, &(0x7f0000002fc0)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000200)=""/4070, 0xfe6}], 0x1}}], 0x2, 0x42, 0x0) geteuid() 8m34.836429531s ago: executing program 1 (id=39): r0 = openat$sndtimer(0xffffffffffffff9c, 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_INFO(r0, 0x80e85411, 0x0) r1 = fsopen(&(0x7f00000001c0)='binder\x00', 0x1) fsconfig$FSCONFIG_CMD_CREATE(r1, 0x6, 0x0, 0x0, 0x0) fsmount(r1, 0x0, 0xf) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) getpid() sendmsg$NL80211_CMD_SET_INTERFACE(0xffffffffffffffff, 0x0, 0x0) r2 = syz_clone(0x600, 0x0, 0x33, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x0, 0x0) sched_setaffinity(0x0, 0x1, &(0x7f00000002c0)=0x400000bce) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000032680)=""/102400, 0x19000) fsconfig$FSCONFIG_CMD_RECONFIGURE(r1, 0x7, 0x0, 0x0, 0x0) r4 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/diskstats\x00', 0x0, 0x0) r5 = openat$tcp_mem(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/sys/net/ipv4/tcp_rmem\x00', 0x1, 0x0) sendfile(r5, r4, 0x0, 0x7ffff000) ioctl$COMEDI_CMD(0xffffffffffffffff, 0x80506409, &(0x7f0000000180)={0x1, 0x30000, 0x80, 0x800, 0x10, 0x3e8, 0x2, 0x1, 0x20, 0x1, 0x20, 0xffffffff, 0x0, 0x0, 0x0}) 8m29.95494555s ago: executing program 32 (id=27): syz_mount_image$ext4(&(0x7f0000000140)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x18, &(0x7f0000000580)={[{@delalloc}, {@data_err_abort}, {@barrier_val={'barrier', 0x3d, 0x3}}, {}, {@bh}, {@oldalloc}, {@data_err_ignore}, {@nouid32}, {@nobh}, {@user_xattr}, {@nouid32}, {@dioread_nolock}]}, 0x1, 0x55e, &(0x7f0000001bc0)="$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") r0 = open(&(0x7f0000000040)='./bus\x00', 0x80242, 0x10) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000000)={'\x00', 0x2}) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0xac5) socketpair$unix(0x1, 0x5, 0x0, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) syz_emit_ethernet(0x0, 0x0, &(0x7f0000000140)={0x1, 0x2, [0x7b5, 0xae1, 0x5be, 0x54a]}) r1 = gettid() close(0xffffffffffffffff) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) shutdown(r2, 0x2) timer_create(0x0, &(0x7f0000000080)={0x0, 0x21, 0x800000000004, @tid=r1}, &(0x7f0000bbdffc)=0x0) timer_settime(r3, 0x1, &(0x7f0000000240)={{0x0, 0x989680}, {0x0, 0x3938700}}, 0x0) futex(&(0x7f000000cffc)=0x1, 0x86, 0x2, 0x0, 0x0, 0xfffffffc) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.controllers\x00', 0x275a, 0x0) syz_clone3(&(0x7f00000001c0)={0x100001200, 0x0, 0x0, 0x0, {0x11}, 0x0, 0x0, 0x0, 0x0}, 0x58) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) r4 = open(&(0x7f0000000040)='./bus\x00', 0x80242, 0x0) ftruncate(r4, 0x2007ffc) sendfile(r4, r4, 0x0, 0x2000000000006) sendfile(r0, r0, 0x0, 0x2000000000006) 8m29.93671256s ago: executing program 1 (id=43): mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xbecd6000) openat(0xffffffffffffff9c, 0x0, 0x24c01, 0x0) r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000002300), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) r1 = eventfd(0xfffffffd) ioctl$VHOST_SET_LOG_FD(r0, 0x4004af07, &(0x7f0000000240)=r1) ioctl$VHOST_SET_VRING_KICK(r0, 0x4008af20, &(0x7f0000000040)={0x0, r1}) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000380)={0x1, 0x0, 0x0, &(0x7f0000000280)=""/233, 0x0}) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000780)={0x0, 0x1, 0x0, &(0x7f0000000700)=""/88, 0x0}) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f00000005c0)) r2 = syz_open_dev$vim2m(0x0, 0x242, 0x2) ioctl$vim2m_VIDIOC_CREATE_BUFS(r2, 0xc0f8565c, &(0x7f00000001c0)={0x3, 0x6, 0x1, {0x2, @sliced={0x802, [0x4, 0x9, 0x84c, 0xc289, 0x8, 0xfe1b, 0x6, 0x4, 0x4, 0xf, 0xf3, 0x1fc, 0x8, 0x5, 0xe2, 0x4, 0xad9, 0x6bed, 0xffff, 0x7, 0x4, 0x1, 0x3, 0x2, 0xfff8, 0x6, 0x6, 0xa, 0x5, 0x1, 0x4, 0x1, 0x5, 0xff, 0x400, 0x3, 0x0, 0x3, 0xcbe, 0xf, 0x2, 0x5e, 0x9, 0x1, 0x0, 0x8, 0x1, 0x7fff], 0xfffffddc}}, 0xfffffe01}) ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, &(0x7f0000000000)=0x20000) write$eventfd(r1, &(0x7f00000000c0)=0xfffffffffffffffe, 0x8) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f00000bd000), 0x318, 0x0) openat$rfkill(0xffffffffffffff9c, 0x0, 0x406003, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = syz_io_uring_setup(0x497, &(0x7f00000000c0)={0x0, 0x4c0f, 0x400, 0x3, 0x288}, &(0x7f0000000240)=0x0, &(0x7f0000000040)=0x0, &(0x7f0000000000)) syz_io_uring_submit(r4, r5, 0x0, &(0x7f0000000000)) io_uring_enter(r3, 0x12a8f, 0xf264, 0x40, 0x0, 0x0) 8m23.301987684s ago: executing program 33 (id=34): syz_open_procfs(0xffffffffffffffff, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) syz_mount_image$ext4(&(0x7f0000000580)='ext4\x00', &(0x7f0000000040)='./bus\x00', 0x1208002, &(0x7f0000001200)={[{@grpquota}, {@delalloc}, {@resuid}, {@data_ordered}, {@dioread_nolock}, {}, {@nomblk_io_submit}, {@noauto_da_alloc}]}, 0x1, 0x5d8, &(0x7f00000005c0)="$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") mkdir(&(0x7f0000000080)='./bus\x00', 0x3) sched_setscheduler(0x0, 0x1, &(0x7f00000001c0)=0x7) prctl$PR_SET_MM_MAP(0x23, 0xe, 0x0, 0x0) getpid() r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000180)) setgroups(0x0, 0x0) read$FUSE(0xffffffffffffffff, 0x0, 0x0) r3 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000001c0)=ANY=[@ANYBLOB="1c0000005e00679a3601ffc4910700004f78d4c1a0731cccff"], 0x1c}}, 0x0) recvmmsg$unix(r3, &(0x7f0000002fc0)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000200)=""/4070, 0xfe6}], 0x1}}], 0x2, 0x42, 0x0) geteuid() 8m14.677989892s ago: executing program 34 (id=43): mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xbecd6000) openat(0xffffffffffffff9c, 0x0, 0x24c01, 0x0) r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000002300), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) r1 = eventfd(0xfffffffd) ioctl$VHOST_SET_LOG_FD(r0, 0x4004af07, &(0x7f0000000240)=r1) ioctl$VHOST_SET_VRING_KICK(r0, 0x4008af20, &(0x7f0000000040)={0x0, r1}) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000380)={0x1, 0x0, 0x0, &(0x7f0000000280)=""/233, 0x0}) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000780)={0x0, 0x1, 0x0, &(0x7f0000000700)=""/88, 0x0}) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f00000005c0)) r2 = syz_open_dev$vim2m(0x0, 0x242, 0x2) ioctl$vim2m_VIDIOC_CREATE_BUFS(r2, 0xc0f8565c, &(0x7f00000001c0)={0x3, 0x6, 0x1, {0x2, @sliced={0x802, [0x4, 0x9, 0x84c, 0xc289, 0x8, 0xfe1b, 0x6, 0x4, 0x4, 0xf, 0xf3, 0x1fc, 0x8, 0x5, 0xe2, 0x4, 0xad9, 0x6bed, 0xffff, 0x7, 0x4, 0x1, 0x3, 0x2, 0xfff8, 0x6, 0x6, 0xa, 0x5, 0x1, 0x4, 0x1, 0x5, 0xff, 0x400, 0x3, 0x0, 0x3, 0xcbe, 0xf, 0x2, 0x5e, 0x9, 0x1, 0x0, 0x8, 0x1, 0x7fff], 0xfffffddc}}, 0xfffffe01}) ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, &(0x7f0000000000)=0x20000) write$eventfd(r1, &(0x7f00000000c0)=0xfffffffffffffffe, 0x8) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f00000bd000), 0x318, 0x0) openat$rfkill(0xffffffffffffff9c, 0x0, 0x406003, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = syz_io_uring_setup(0x497, &(0x7f00000000c0)={0x0, 0x4c0f, 0x400, 0x3, 0x288}, &(0x7f0000000240)=0x0, &(0x7f0000000040)=0x0, &(0x7f0000000000)) syz_io_uring_submit(r4, r5, 0x0, &(0x7f0000000000)) io_uring_enter(r3, 0x12a8f, 0xf264, 0x40, 0x0, 0x0) 4m19.649052044s ago: executing program 6 (id=315): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = bpf$ITER_CREATE(0xb, &(0x7f0000000100), 0x0) r2 = socket$isdn_base(0x22, 0x3, 0x0) close(r2) r3 = socket$kcm(0x29, 0x5, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='blkio.bfq.io_service_time_recursive\x00', 0x275a, 0x0) write$cgroup_int(r4, &(0x7f0000000000), 0xffffff6a) r5 = socket$kcm(0x29, 0x5, 0x0) sendmsg$kcm(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000ac0)=[{0x0}, {&(0x7f0000000880)="3aa854", 0x3}, {0x0}], 0x3}, 0xc854) setsockopt$sock_int(r5, 0x1, 0x12, &(0x7f0000000180)=0x4c, 0x4) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), r1) sendfile(r3, r4, 0x0, 0xffffffff000) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_GET_PROTOCOL_FEATURES(r4, &(0x7f0000000240)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x14, r6, 0x0, 0x70bd2c, 0x25dfdbfd, {}, ["", "", "", "", "", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x44010}, 0x40000) sendmsg$NL80211_CMD_RELOAD_REGDB(r0, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000340)={0x14, r7, 0x1, 0x70bd2d, 0x25dfdbfe}, 0x14}, 0x1, 0x0, 0x0, 0x20000000}, 0x20008004) r8 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r8, &(0x7f0000000000)={0x2, 0x4e21, @broadcast}, 0x2f) connect$inet(r8, &(0x7f0000000180)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x1b}}, 0x10) sendto$inet(r8, &(0x7f0000000000), 0xffffffffffffff94, 0x0, 0x0, 0x0) setsockopt$inet_tcp_TCP_CONGESTION(r8, 0x6, 0xd, &(0x7f00000000c0)='bbr', 0x3) recvfrom$inet(r8, &(0x7f0000000080)=""/8, 0xfffffffffffffd0b, 0x720, 0x0, 0xfffffffffffffd25) 4m12.746567695s ago: executing program 6 (id=316): r0 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, 0x0) r1 = syz_open_dev$video4linux(&(0x7f00000001c0), 0x3, 0x40483) ioctl$VIDIOC_DQEVENT(r1, 0x80885659, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) r2 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) madvise(&(0x7f0000000000/0x3000)=nil, 0x7fffffffffffffff, 0x15) r3 = syz_open_dev$radio(&(0x7f0000019140), 0x1, 0x2) ioctl$VIDIOC_G_STD(r3, 0x80085617, &(0x7f0000019180)) r4 = syz_open_dev$sndctrl(&(0x7f0000000200), 0x1, 0x0) ioctl$SNDRV_CTL_IOCTL_PCM_INFO(r4, 0xc1205531, &(0x7f0000000540)={0x1, 0x6, 0x0, 0x0, '\x00', '\x00', '\x00', 0x0, 0x0, 0x0, 0x0, "b6855a32474ffa64f778ddcf29c94337"}) rename(0x0, 0x0) r5 = fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) write$sndseq(r5, &(0x7f0000000180)=[{0x0, 0x47, 0xd, 0x20, @tick, {0x40, 0xfe}, {0x10, 0x9}, @raw8}, {0x0, 0x0, 0x0, 0x0, @tick=0x46f, {}, {0x80, 0x1}, @connect={{0x40, 0x7}, {0x80, 0xf6}}}], 0x38) write$dsp(r5, &(0x7f0000019080)="9db979496f5ccb4ae3b658f8783b26d7700be59910d4ae2ccd6e39a9cf1a478e176963b3bfa78d9a12a9b66c7f5a0635d37e", 0x32) r6 = syz_open_procfs(0x0, &(0x7f0000000040)='net/tcp\x00') pread64(r6, &(0x7f0000000080)=""/102356, 0x18fd4, 0x5) 4m7.753418529s ago: executing program 6 (id=322): openat$rdma_cm(0xffffffffffffff9c, 0x0, 0x2, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r0 = syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) sendto(r0, 0x0, 0x0, 0x4000080, 0x0, 0x0) r5 = syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x8002) ioctl$SG_GET_LOW_DMA(r5, 0x227a, 0x0) r6 = openat$comedi(0xffffff9c, &(0x7f0000000100)='/dev/comedi0\x00', 0x101001, 0x0) ioctl$COMEDI_DEVCONFIG(r6, 0x40946400, &(0x7f0000000140)={'pcl724\x00', [0x4000409, 0x2, 0x7fffffff, 0x84e5, 0x2f, 0x2006, 0x7, 0x0, 0x80ffa, 0x0, 0x0, 0xe, 0x1003, 0x1000004, 0xf, 0xfffe, 0xffffffa8, 0x9, 0x1ff, 0x9e6, 0x10000, 0x40000, 0x8, 0x5, 0x3, 0x8, 0x5, 0x8, 0x0, 0x4, 0x7ffd]}) 4m4.190499252s ago: executing program 6 (id=326): sched_setscheduler(0x0, 0x1, 0x0) r0 = socket$igmp6(0xa, 0x3, 0x2) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, 0x0) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x400000000008d}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) openat$iommufd(0xffffffffffffff9c, 0x0, 0x88800, 0x0) syz_clone(0xc001200, 0x0, 0x0, 0x0, 0x0, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000440)=@raw={'raw\x00', 0x8, 0x3, 0x4c8, 0x0, 0xffffffff, 0xffffffff, 0x0, 0xffffffff, 0x3f8, 0xffffffff, 0xffffffff, 0x3f8, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@private0, @mcast2, [], [], 'veth0_macvtap\x00', 'bridge0\x00'}, 0x0, 0x148, 0x170, 0x0, {}, [@common=@unspec=@helper={{0x48}}, @common=@inet=@hashlimit1={{0x58}, {'bond_slave_1\x00', {0x41, 0x1ff, 0x6, 0xb0e2, 0x10001, 0x84e, 0xfffffffb, 0x18, 0x8}, {0x1}}}]}, @common=@unspec=@NFQUEUE0={0x28}}, {{@ipv6={@remote, @ipv4={'\x00', '\xff\xff', @dev}, [], [], 'erspan0\x00', 'gre0\x00', {0xff}, {}, 0x0, 0x0, 0x0, 0x4b}, 0x0, 0x258, 0x288, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'pim6reg\x00', {0x0, 0x0, 0x5, 0x0, 0x0, 0x7, 0x3ff}}}, @common=@inet=@hashlimit3={{0x158}, {'vcan0\x00', {0x3, 0x0, 0x41, 0xfffffffe, 0x2, 0x1000, 0x6, 0x3}}}]}, @common=@unspec=@CONNMARK={0x30}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x528) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4000810}, 0x4080) r5 = socket$inet6(0xa, 0x3, 0x8000000003c) connect$inet6(r5, &(0x7f0000000200)={0xa, 0x4e9f, 0x0, @mcast1, 0x7}, 0x1c) sendmsg(r5, &(0x7f00000000c0)={0x0, 0x952f, &(0x7f0000000100)=[{&(0x7f0000000000)="2c10", 0xfff2}], 0x1, 0x0, 0x0, 0x2c}, 0x44004) 4m2.178715168s ago: executing program 6 (id=340): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x18, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x1f00, 0x6f, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xb2}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r3, 0x84, 0x9, &(0x7f0000000580)={0x0, @in={{0x2, 0x0, @empty}}, 0x0, 0x0, 0x3fc, 0x0, 0x32}, 0x9c) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000013c0)={{0x14}, [], {0x14}}, 0x28}}, 0x0) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r3, 0x84, 0x9, &(0x7f0000000000)={0x0, @in6={{0xa, 0x100, 0x0, @empty}}, 0x0, 0x0, 0x0, 0x0, 0x8a}, 0x9c) bind$inet6(r3, &(0x7f0000000300)={0xa, 0x4e23, 0x0, @loopback, 0x3}, 0x7e) sendto$inet6(r3, &(0x7f0000847fff)='X', 0x34000, 0xe0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) openat$proc_mixer(0xffffffffffffff9c, 0x0, 0x2002, 0x0) openat$proc_mixer(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/asound/card2/oss_mixer\x00', 0x0, 0x0) 3m59.498168352s ago: executing program 6 (id=331): socket$inet_sctp(0x2, 0x1, 0x84) socket$nl_route(0x10, 0x3, 0x0) openat$ptmx(0xffffffffffffff9c, 0x0, 0x100, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) syz_open_dev$dri(0x0, 0x1, 0x0) r2 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000001840), 0x2982, 0x0) setsockopt$inet6_group_source_req(0xffffffffffffffff, 0x29, 0x2e, &(0x7f0000002d00)={0x0, {{0xa, 0x4e22, 0x4001000, @mcast1, 0x3}}, {{0xa, 0x4e23, 0x5, @loopback, 0xae43}}}, 0x108) setsockopt$inet6_MCAST_MSFILTER(0xffffffffffffffff, 0x29, 0x30, &(0x7f00000005c0)={0x3, {{0xa, 0x4e23, 0xc, @mcast1, 0xfffffff8}}, 0x0, 0x1, [{{0xa, 0x8001, 0x2, @loopback, 0x30000}}]}, 0x110) setsockopt$inet6_group_source_req(0xffffffffffffffff, 0x29, 0x2c, &(0x7f0000000180)={0x0, {{0xa, 0x4e22, 0x6ef, @mcast1, 0xfffffffd}}, {{0xa, 0x4e24, 0x21, @loopback, 0xfffffe01}}}, 0x108) r3 = openat$procfs(0xffffffffffffff9c, &(0x7f00000001c0)='/proc/timer_list\x00', 0x0, 0x0) io_setup(0x1, 0x0) io_submit(0x0, 0x0, &(0x7f0000000140)) sendfile(r2, r3, 0x0, 0x20000023896) r4 = syz_open_dev$usbfs(&(0x7f0000000480), 0x77, 0x41341) ioctl$USBDEVFS_IOCTL(r4, 0xc0105512, &(0x7f0000000200)) ioctl$USBDEVFS_IOCTL(r4, 0xc0105512, &(0x7f0000000000)=@usbdevfs_connect) 3m57.499961532s ago: executing program 35 (id=311): syz_mount_image$nilfs2(&(0x7f0000000080), &(0x7f0000000040)='./file2\x00', 0x1200400, &(0x7f0000000000)=ANY=[], 0x1, 0xa74, &(0x7f00000000c0)="$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") socketpair$unix(0x1, 0x2, 0x0, 0x0) socket(0x10, 0x803, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) socket$nl_generic(0x10, 0x3, 0x10) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) userfaultfd(0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) syz_fuse_handle_req(0xffffffffffffffff, 0x0, 0x0, 0x0) r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TIOCSETD(r3, 0x5423, &(0x7f0000000180)=0x15) ioctl$TCSETS(r3, 0xc0384707, &(0x7f0000000500)={0x5, 0x0, 0xfffffffe, 0x5, 0x0, "3eccd8f9d20000000000001000000200000500"}) r4 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0xff, 0x7fff7ffc}]}) close_range(r4, 0xffffffffffffffff, 0x0) 3m43.792186876s ago: executing program 36 (id=331): socket$inet_sctp(0x2, 0x1, 0x84) socket$nl_route(0x10, 0x3, 0x0) openat$ptmx(0xffffffffffffff9c, 0x0, 0x100, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) syz_open_dev$dri(0x0, 0x1, 0x0) r2 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000001840), 0x2982, 0x0) setsockopt$inet6_group_source_req(0xffffffffffffffff, 0x29, 0x2e, &(0x7f0000002d00)={0x0, {{0xa, 0x4e22, 0x4001000, @mcast1, 0x3}}, {{0xa, 0x4e23, 0x5, @loopback, 0xae43}}}, 0x108) setsockopt$inet6_MCAST_MSFILTER(0xffffffffffffffff, 0x29, 0x30, &(0x7f00000005c0)={0x3, {{0xa, 0x4e23, 0xc, @mcast1, 0xfffffff8}}, 0x0, 0x1, [{{0xa, 0x8001, 0x2, @loopback, 0x30000}}]}, 0x110) setsockopt$inet6_group_source_req(0xffffffffffffffff, 0x29, 0x2c, &(0x7f0000000180)={0x0, {{0xa, 0x4e22, 0x6ef, @mcast1, 0xfffffffd}}, {{0xa, 0x4e24, 0x21, @loopback, 0xfffffe01}}}, 0x108) r3 = openat$procfs(0xffffffffffffff9c, &(0x7f00000001c0)='/proc/timer_list\x00', 0x0, 0x0) io_setup(0x1, 0x0) io_submit(0x0, 0x0, &(0x7f0000000140)) sendfile(r2, r3, 0x0, 0x20000023896) r4 = syz_open_dev$usbfs(&(0x7f0000000480), 0x77, 0x41341) ioctl$USBDEVFS_IOCTL(r4, 0xc0105512, &(0x7f0000000200)) ioctl$USBDEVFS_IOCTL(r4, 0xc0105512, &(0x7f0000000000)=@usbdevfs_connect) 2m33.083221022s ago: executing program 5 (id=413): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) io_destroy(0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000000300)=""/102400, 0x19000) capset(&(0x7f0000000040)={0x19980330}, 0x0) r1 = syz_open_dev$sg(&(0x7f0000000140), 0xa, 0x0) r2 = openat$dsp1(0xffffffffffffff9c, &(0x7f0000000000), 0x141202, 0x0) ioctl$SOUND_MIXER_WRITE_VOLUME(r2, 0xc0044d11, &(0x7f00000000c0)=0x53) ioctl$FIBMAP(r1, 0x1, 0x0) r3 = socket$netlink(0x10, 0x3, 0xc) bind$netlink(r3, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r4, &(0x7f00000000c0)={0x0, 0x0, 0x0}, 0x0) pread64(0xffffffffffffffff, 0x0, 0x0, 0x4f) r5 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000940), 0x2, 0x0) poll(&(0x7f0000000140)=[{r5, 0x610}], 0x1, 0x6) syz_usb_connect(0x0, 0x24, 0x0, 0x0) syz_open_dev$I2C(0x0, 0x1, 0x482) 2m28.869766903s ago: executing program 5 (id=419): setsockopt$RXRPC_SECURITY_KEYRING(0xffffffffffffffff, 0x110, 0x2, 0x0, 0x0) getsockopt$inet6_mptcp_buf(0xffffffffffffffff, 0x11c, 0x2, 0x0, 0x0) socket$inet6(0xa, 0x2, 0x0) socket$unix(0x1, 0x2, 0x0) openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r0 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000080)='/dev/comedi4\x00', 0x8000, 0x0) ioctl$COMEDI_DEVCONFIG(r0, 0x40946400, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x3) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r2 = userfaultfd(0x801) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={0x0, 0x50}}, 0x4000800) ioctl$UFFDIO_API(r2, 0xc018aa3f, &(0x7f00000000c0)) mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x1000000, 0x5d032, 0xffffffffffffffff, 0x0) r4 = userfaultfd(0x80801) ioctl$UFFDIO_API(r4, 0xc018aa3f, &(0x7f0000000100)) ioctl$UFFDIO_REGISTER(r4, 0xc020aa00, &(0x7f0000000040)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}, 0x5}) ioctl$UFFDIO_COPY(r2, 0xc028aa03, &(0x7f0000000000)={&(0x7f0000800000/0x800000)=nil, &(0x7f0000199000/0x800000)=nil, 0x800000}) 2m27.256288183s ago: executing program 4 (id=420): syz_open_dev$tty1(0xc, 0x4, 0x1) r0 = socket$pppl2tp(0x18, 0x1, 0x1) r1 = socket$inet6_udp(0xa, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x8) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000200)=@newsa={0xf0, 0x10, 0x713, 0x0, 0x0, {{@in6=@initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @in=@loopback, 0x4e22, 0x6c, 0x0, 0x0, 0x0, 0x0, 0x80, 0xa3}, {@in6=@local, 0x0, 0x33}, @in6=@local, {0x100000000, 0x1000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, {0x3}, {}, 0x0, 0x3501, 0x2, 0x1}}, 0xf0}}, 0x0) write$UHID_INPUT(0xffffffffffffffff, 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x20040081}, 0x0) mknod(0x0, 0x1000, 0x1) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0x0) connect$pppl2tp(r0, &(0x7f0000000000)=@pppol2tp={0x18, 0x1, {0x0, r1, {0x2, 0x4e24, @broadcast}, 0x2, 0x0, 0x3}}, 0x26) r5 = socket$pppl2tp(0x18, 0x1, 0x1) connect$pppl2tp(r5, &(0x7f0000001040)=@pppol2tpin6={0x18, 0x1, {0x0, r3, 0x2, 0x1, 0x3, 0x2, {0xa, 0x4e24, 0xffffff51, @private2={0xfc, 0x2, '\x00', 0x1}, 0x5}}}, 0x32) ioctl$PPPIOCGL2TPSTATS(r0, 0x80487436, 0x0) 2m23.998834557s ago: executing program 4 (id=427): socket$inet(0x2, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000600)={0x9, 0x20000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) prctl$PR_SET_PTRACER(0x59616d61, r0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e22}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) semget$private(0x0, 0x6, 0x0) syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000480)='./file0\x00', 0x18000, &(0x7f0000003b40)=ANY=[@ANYRES32=0x0, @ANYRESDEC, @ANYRES16=0x0, @ANYBLOB="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", @ANYRESDEC, @ANYRES64], 0x8, 0x2eb, &(0x7f00000004c0)="$eJzs3E1PE10UwPHTF0pbAmXx5DGaGG50o5sJVNdKYyAxNpEgNb4kJgNMtenYkpkGU2NEV26NH8IFYcmORPkCbNzpxo07NiYuZGEc0+kMhTKAlNIi/H8JmcPce6b3zgzk3AnD+r23T4t5W8vrFQnHlYRERDZEBiUsvpC3DbtxTLZ6JZf7fnw+f+f+g1uZbHZsUqnxzNSVtFJqYOjDsxcJr9tKr6wNPlr/nv629v/a2fXfU08KtirYqlSuKF1Nl79W9GnTULMFu6gpNWEaum2oQsk2rHp7ud6eN8tzc1Wll2b7k3OWYdtKL1VV0aiqSllVrKqKPNYLJaVpmupPCvaTW5yc1DMtJs+0eTA4IpaV0SMiktjRklvsyoAAAEBXNdf/YVHtrP+XLqxW+u4uD3j1/0osqP6/+qV+rG31f1xEAut///MD63/9YPX/zorodDlU/Y/jYSi2Y1eoEdYarYye9H5+Xa8fLg27AfU/AAAAAAAAAAAAAAAAAAAAAAD/gg3HSTmOk/K3/leviMRFxP8+IDUiIte7MGS00SGuP06Axot70QER8818bj5X33odVkXEFEOGJSW/3PvBU4v9N49UzaB8NBe8/IX5XMRtyeSl4OaPSKpHmvMdZ/xmdmxE1W3P75Hk1vy0pOS/4Px0YH5MLl3ckq9JSj7NSFlMmXXH0ch/OaLUjdvZpvyE2w8AAAAAgJNAU5sC1++atlt7PX9zfd38fCDSWF8PB67Po3Iu2t25AwAAAABwWtjV50XdNA1rjyAh+/dpPYge0ZH9Gf5tlv+3DEc30z0C/8O3NcW9nW0/LaEDnJZdgrC0kjVUm4067Cz8x0a79ZGJ0c5fQTc48+79z/Yd8NpyfJ+Zth5E9r4Bejr2CwgAAABAxzSKfn/PaHcHBAAAAAAAAAAAAAAAAAAAAAAAAAAAAADAKdSJ/47W7TkCAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAx8WfAAAA//+SWQVN") recvmsg(0xffffffffffffffff, 0x0, 0x40012103) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='io.stat\x00', 0x275a, 0x0) write$binfmt_script(r3, &(0x7f0000000040), 0x208e24b) fadvise64(r3, 0x2, 0x0, 0x4) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x0) mount(0x0, &(0x7f00000000c0)='./file0\x00', 0x0, 0x10, 0x0) futex(&(0x7f000000cffc)=0x2, 0x5, 0x0, 0x0, &(0x7f0000000000)=0x7, 0x35000001) syz_mount_image$fuse(&(0x7f0000000000), 0x0, 0x400a8, &(0x7f00000003c0)=ANY=[], 0x5, 0x0, 0x0) mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', 0x0, 0x104000, 0x0) mount$fuse(0x0, &(0x7f00000005c0)='./file0/file0\x00', 0x0, 0x88000, 0x0) 2m20.670771019s ago: executing program 5 (id=429): syz_emit_ethernet(0x56, &(0x7f0000000380)={@local, @remote, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "c4d600", 0x20, 0x6, 0x1, @local, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x8, 0x2, 0x0, 0x0, 0x10, {[@mptcp=@capable={0x1e, 0xc, 0x6, 0x8, 0x1, 0x10000}]}}}}}}}}, 0x0) 2m20.28095416s ago: executing program 4 (id=430): r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r0, &(0x7f00000002c0)={0xa, 0x4e22, 0x0, @local, 0xb}, 0x1c) listen(r0, 0x2) r1 = syz_init_net_socket$ax25(0x3, 0x5, 0xca) bind$ax25(r1, &(0x7f0000000280)={{0x3, @default, 0x1}, [@null, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @bcast, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @bcast, @default, @bcast, @null]}, 0x48) syz_open_procfs(0x0, &(0x7f0000000040)='smaps_rollup\x00') 2m19.472675084s ago: executing program 4 (id=434): openat(0xffffffffffffff9c, &(0x7f0000000540)='mnt\x00', 0x0, 0x0) pipe2(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80800) splice(0xffffffffffffffff, 0x0, r0, 0x0, 0x7c1c, 0x8) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r2 = socket$inet6(0xa, 0x1, 0x8010000000000084) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r3, &(0x7f00000003c0)={0xa, 0x4e24, 0x9, @mcast2, 0x80}, 0x1c) bind$inet6(r2, &(0x7f00000000c0)={0xa, 0x4e21, 0x0, @empty}, 0x1c) syz_open_dev$MSR(&(0x7f0000000180), 0xfffffffffffffc00, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010600000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff1b000000020000000900010073797a30000001000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)={{0x14}, [@NFT_MSG_NEWSET={0x3c, 0x12, 0xa, 0x201, 0x0, 0x0, {0x2, 0x0, 0x20}, [@NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_KEY_TYPE={0x8}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0xa}]}], {0x14}}, 0x64}}, 0x0) connect$inet6(r2, &(0x7f0000000000)={0xa, 0x4e21, 0x0, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x14}}}, 0x1c) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r2, 0x84, 0x9, &(0x7f0000000300)={0x0, @in6={{0xa, 0x0, 0x0, @empty, 0xac800000}}, 0x0, 0x0, 0x318, 0x1, 0x24}, 0x9c) 2m14.895935323s ago: executing program 5 (id=437): r0 = socket$nl_generic(0x10, 0x3, 0x10) socket$nl_rdma(0x10, 0x3, 0x14) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000380)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) socket(0x27, 0x6, 0x80000000) setsockopt$EBT_SO_SET_ENTRIES(0xffffffffffffffff, 0x0, 0x80, &(0x7f00000000c0)=@filter={'filter\x00', 0xe, 0x0, 0x90, [0x0, 0x200000000180, 0x2000000001b0, 0x2000000001e0], 0x0, 0x0, 0x0}, 0x108) r4 = syz_open_dev$vim2m(&(0x7f0000000000), 0x800, 0x2) ioctl$vim2m_VIDIOC_S_CTRL(r4, 0xc008561c, &(0x7f0000000040)={0xf0f024}) ioctl$vim2m_VIDIOC_S_FMT(r4, 0xc0d05605, &(0x7f0000000540)={0x2, @pix={0x3, 0x401, 0x3132564e, 0x1, 0x3, 0x3, 0xc, 0x7, 0x0, 0x0, 0x0, 0x3}}) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x810}, 0x20004000) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000003c0)={'netdevsim0\x00', 0x0}) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000001800)={0x6, 0x3, &(0x7f00000006c0)=@framed, &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', r5}, 0x80) 2m13.44960748s ago: executing program 5 (id=439): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r0 = getpid() syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) sched_setscheduler(r0, 0x2, &(0x7f0000000000)=0x3) syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) r1 = syz_open_dev$MSR(&(0x7f0000000240), 0xfffffffffffffffa, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) bind$inet6(0xffffffffffffffff, 0x0, 0x0) getdents64(0xffffffffffffffff, 0x0, 0x0) r2 = getpid() r3 = syz_pidfd_open(r2, 0x0) r4 = syz_open_dev$dvb_demux(&(0x7f0000001e00), 0x0, 0x2000) syz_open_dev$dvb_demux(&(0x7f0000000080), 0x0, 0x41) ioctl$DVB_DEMUX_DMX_SET_FILTER(r4, 0x403c6f2b, &(0x7f0000001e40)={0x6, {"2ac78e02ff04856af9fb71f0d3fe13be", "3dfab043e15fad27a639f105b5e9f977", "47eb0b1889b90f105d66b3e5a7c94742"}, 0x4, 0x4}) openat$sndseq(0xffffffffffffff9c, 0x0, 0x48100) close_range(r3, 0xffffffffffffffff, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f0000000000)={'wlan1\x00'}) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(r5, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x200008c1) 2m8.888295037s ago: executing program 5 (id=442): r0 = socket(0x2, 0x3, 0x6) bind$inet(r0, &(0x7f0000000080)={0x2, 0xfffa, @local}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x48800, 0x0, 0x0) syz_open_dev$radio(0x0, 0x1, 0x2) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) ioctl$ifreq_SIOCGIFINDEX_wireguard(r0, 0x8933, &(0x7f0000000180)={'wg2\x00'}) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) close(r0) fcntl$setlease(0xffffffffffffffff, 0x400, 0x1) connect$inet6(0xffffffffffffffff, &(0x7f0000000040)={0xa, 0x4001, 0x0, @ipv4={'\x00', '\xff\xff', @remote}}, 0x1c) r2 = syz_open_procfs(0x0, &(0x7f0000000140)='io\x00') preadv(r2, &(0x7f00000000c0)=[{&(0x7f0000002140)=""/4096, 0x1000}], 0x1, 0x141, 0x0) io_uring_setup(0x1fb8, 0x0) sendto$inet(r0, &(0x7f0000000040)="8c06004d4f95846d3f815de9af3735c10f427b", 0x13, 0x0, &(0x7f0000002400)={0x2, 0x0, @multicast2}, 0x10) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24004045) io_uring_setup(0xb94, &(0x7f0000000100)={0x0, 0x635c, 0x100, 0x2, 0x10a}) preadv(0xffffffffffffffff, &(0x7f00000001c0)=[{&(0x7f00000006c0)=""/4074, 0xfea}], 0x1, 0x8000740, 0x0) 2m7.524389667s ago: executing program 4 (id=443): pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) utimensat(r0, &(0x7f0000000040)='./file0\x00', &(0x7f00000000c0)={{0x77359400}, {0x0, 0xea60}}, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x8) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) landlock_restrict_self(0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x80) r4 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000200), 0x2, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r4, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r4, &(0x7f0000002140)={0x2020, 0x0, 0x0}, 0x2020) syz_fuse_handle_req(r4, &(0x7f0000008400)="92756f43b31ffe542788ef586b7c5a344424e3acac2590be6bbe37adface4a8f2e534ffe76a83a93f0b3680a72fddfde83f96d01982384e8d689219cb9669b14dbaa1b799f82ea1fc926126a4163618e16d4f94143a4e0f27c44fcef3920a0b3805ed4e78098d8689cc7791bd86648070718d238664332948d87866c8d2590fc0f017f9853abd9ed60b99f1aa6ae2dbd24ab6dbcebdb055246815ace147cc50fa3b2861148fcda374d5b203e51d72c45e4dde3e9ee9a47ffe458baf7bb49035135a8194aa1f0a83fa2abed56398f90daff679634619453f533f22583a6e0a4dc09e9de46684d5e0136e229510f3702cf3a4cd0065d3e5d3c419e38a80b070ca55010e082a9c510fd18cc0b26bb5e8e459e747befbc5c6b60ace80bf41417b7b78cf57e5b3984f0cdddc615c5e0000454d3f4a196fb6d18aa629cf0b0245f95ba958d86dc175616f8cd3ac473057dc3a5ff7107973326350107f4468e7ecd48d689b82c12d22ae5f1858302a1b4cfde8fd347a99ddcde40d1c49d9b5099fbccf09e782212be4b2ce36a2bc3c9ee794abffe72a5501e6c4f3f7f68b74761ffd6620609224a3bf11f655dadb5c8a5813b02fb46830e9ac6825f5d0e89910352eb3a58c0dd82d094f94dd2c85666f684a8f437bbd0e66b9f4d366117b67a054d212c4fbc287848cb0578391335d5d616b14d99a2e3df8e8a152d5de99bcefcaab5bb5cc71f3ddd66b379c104648e190e0b28a180d3aecc5423575d4ba7dbf31215c717da7b87dd454b6efcd36c91aaa631127f5bd88723d221752f102bc0c7ac6c5c7a1ad6747af40d01b6d39eab7b0e1292b44683c586386ad00acf60fb8f9bac551a6eb5bab7317b5d89f64db10bd9018dfa6d65d93862e851afbc30fd70fe5f0de322462045177231852ca80e4e78da4fea0c79ba354333026c8bc77d308a8d256a19ec45d2088c196691d3f9aac28ded36004a65ee1ce49ba9599ceee84534bb61d02d04a6732f1e27d72962f74b59f3522bf844c5022986d55934e48b8681b7f5b7532391448caeef00315d28320a46d8bd7813544e1e4bf994e14a519c2654ff20b42bdb69c262897e28eca528f0999840b00ed8256597d27cfc20d71d5f40d0bbca759f7594c6034aa1e16a84ed152fad0fdc1c303a7f61225712714f823afc5ea241d482d3585759623af8c97ca6a84a2033b3d7314ea0ef7ba9b288b362a294c92c8b9736829c16f61c5a1ee04aca965d71162292274595ea62c9c2918e8279c99f5d2830c617c58211fd7452330184b9428d5ec1d5cd75ddcc6de3326fdc70e891104b3b013c30ffccfaf3308d9671b01f6b080a930dac2052c6f39817a662121d90d40d6a1facfb50bec7d408030b6d0ae3e744f3bcc327c35dc43cf86b743db78ff2e593b19923235ed6467f299b08718fe1840c16a748935dff941150fb08b30573b37bf9af5c86cc8d9e229a832e4ef25ec91f71120f2b3e9062485976c280a2d172386029e2f2a4801197fca0a13514edacf5ddbac5a62e8bb13dd1572657a821a8739297f72e29239d1cdddf3e30cbe9af3141f2275ee4ae85d86ec888fe9a6751f252057e95b8beb055e276439581afee93cd44f1e92f70e5f725451d3ab662918ffbb1269509fbd511e95a00ec717f9d60d643864abd6ad1cc4dd7f933379a6078a86c2158db8076e7b660366fca7b1c46d09d2c8e67a6494bfb4c2c6750e76593895b5e2b2bc78093840c3c4a807826bc2750a96b4e1dd5b82b492bb2215518c92064d1763c37132604e52e73fac3f4511f791753aeecfbb19816e0da7a1bfbea9eeaa0f256eaedcb119a61f7d0ea0f5cd4969d45cb014800f2c888d5c2217cf0f69a7507779883b57352bb8883cc584891950d6e792537074f4fc4337aa19b9bf60e18edd939d289fb4a6b7aa6c66da20774e249ca4f779d3c910b1a9a8e4c38af6adecc87d5481d181fd66023ffff246f4e2556b218fe8110acebe20b1675f1de6f265b6d1d8514a53522396bf0e2f2b153c498e48b36d16f8b9bd56f45d7f5b9397d7f1339117a176d0bad0b68e800682416d3e18fe2197c7f8dc20600feb95cc6ba86ad47f113e159bd4389e30eab2874bd27eebc56020c4dab9973b13f3e82aa62a7e0a151d73de48cb811e32be63ffd303f5a6ea6f097ed763fbf36c430821e451146de79922348354ce285af0997bf3c66e6ef02942e24b8f1ccdd542f09cfe65c0da0094c0b5fd26bbc061538b41e5ed2cbb390ee29b10a4b7a696009e1b5b86c44c0a561a257c15415feaeb1433ea275ed6e4b228503fe71ee5942665164faaed6697112206be0fe7863aebd4bbe951d5dea1da294dba0793196385f4d5141c9d6c4b0fa22b2e200cfb70b52aca31655e71e5a576ccb8ccb5b1364748aa981edbb81a813b1aebc67be1f7619e7e197622d981280429f6ca5145c5b3b05e6bace9191e5c58fbf140f71f594cbfd4db0e9f6923f1758ff9474a61a720a5d4f09c622c3ce3f5d0d3a1d191111168108f41f12b16e9eaf3617c353715cd35260560cbfd0555d51ce5c40bbdb7c95ceaeadadb8902974de50b0863348183864f5ea682e678286a06a6f396af29a7c7fb33a3579e25835963612f3c0d4cf369d85959a0adeda94d35824050e6fba7f83f90867583f713d7783323c7010e94c9be331f860db395dbde6face5bfdb616fcefa9c6b01f6963daa840a31ff554a458c0c50cb5e09f91f54f63234589decaf45bbfbaef0dcbff4ae6e65ca26a530261c491ef8eb9a855a1d7463391c9b66be96cf24c3c321ee5a5bdc857f60b582683c6ae1e3775b62a9f19ff8fa51380ca8a2a3c6de79012f5727ba12025e7e6723a23a81e067ca6e54c7b38ff64880d235d21e7ee5258953dcbf9e2a962f006ca4ffe870859242c850cbae4222b3b72c4f86934379ba2ead1dcde906241b994d95c88355af5a9a30ace9c933a6942f341ad221dd825846a8fd44c03e2eaa9311c26e15a1bd7cbba961a22ef23d7ebba0e34cec5ef09b1ce72814a97e33bd29f3d9ec80a4f45d1d29486accf15c11f1a800bd84918e7626f678275d7c7acb02cc0e6e34bb766ba6b75c3ad14fca9352e09c3b69390c045cfc842ff9ade8ca693c07fadc7047a946e6e570c3afc5b501c964103397f5ddadc2d59a048348dd42f07cfe31bc9b5ae453f5086bb41bba4c8a3e518e30b0855184b053f923025dd72ce1bcbf41231978b34a8547c71d7313992165078903c61d312b0d9469413c9fd97ccdf0ea270fb6c47ec8861a1c8d909eeace761b5a06ba46e25785ff87f867777abb237c6c980687991f1ed0157d58492260c712cec34c1fc0962103955db4d5090b6e8409cf3c3c79d0e691cf4fbc0b2251a016dcd456969cd32e5429533bf0d6f8bda84c05f0e2040de8b53bfb8676eec4b76c3df6f46b1e43732035dda577e75f640777f6ae90fd2f1af42ba462dac732019c599bfef01acd6a0d4d1796bcb8f58519d6f9ad9a3206704a94d472516b988141f44ecd2e6f28a49aa0c449db87972fc995a97379914546ea43143ea2cf779a9cbe81f111fe89129db3610492164ab2598eca7e60d9a6963d8ba03a86729db86e420fd96d61b8fb11edc2b339b57a740074ae5b775eaf60cd85dc934e604bf2b4bd58ee01205b4df57ac20ff8db45a05982b579643882407050c005102a2e71f1e56dc76dbf5331112e83e48bfb5cf2a78a893190d78426175c162ffaa7278a43b9932318fc17fb8cb0dfac610b1ad235b91f9cb7623b155117e07f7b876a3c37627aa31eafed141cc0c5491c4f621a66b6d837a144d78719c46511c04a093cf65fce9fabe5bd6d499eceb63538ece3cf19053550a239bf978c08c879f9954485a4e3e0d5bedb84b407ced85c4dfc4d75af116815992c29f0bc927c4a990c38ae4fcc9feb90fec1b1b555e04d010423010855394d5ccfc8ed21164190cd8f83be5debb70290c3547f07e4dc42814f1e001798e6ceee2558b0c6ff8c1759f90269ee226131116332b99ac8dd104c92088e1f91ace3198c0f59bfb75c4e4a697660eed43a29c831a552de37fce6dce96fa51b6e2111f3071a4e94422d15e102e5f67da7ca6cae6bed7743ebffacb8a811a143605791d17232181a517e872f71262c3c73668f0ef83aad498f67fa26bae698cf78f24c2dbecd399a190e6b8d0684e929f2e8083765eb2c67793a1adbb89d36b58bfb197cdc5f3c894ac9d886e8f3b0936fabd233c09de8fab8099f72a74d908ba5c5e4d39790b0bf9e45b710f5587b7c937c76690c5c5fce621a53a9fd03b0a4ee6d8d1abbe2ed561820a77f12a08cad0755540ab6dd1604b7c30a8652995ab80b85e919011de9438a4637eb0291124ed4b745e782cff98510cb03be79c2a81351abf276584d75cdd96b9c97e73eb71000b3ab7c3c19c2cab4497298fcb3052b5d4503d05e7f310318be6f848547b1a4f4db82caee190801478be28065036aa4d91f290c1f396343e73a5fe8bb5ccf0a317177ed1f77acda1a4a49dccfcab8d1b5d79f015f788b6d5e9f8228a8bcdc0696e6b19f5edffbcd7e9509c87fbe1f726b93bf8c6d8d37428763e142560c46c9e894f7317859000c25abc4f3691ebcd020171e0d4911b5d97a238109aedeb00b2eb475c1e7b45175f8aa85193b5c0f43b434c15de01610c4d022646cd6e3637f349a434a77f571ac1c5d698452d1b991e267f78dca5e592ecd31ccafcad84e4e98d134b4adc525b81bd6843428883023a6ea407201738c8bf16b541ff7280274a34d4cf14819f2dbae167ca0cae8471c495e006b45194ad91c4516f21cbb10e0d26fd5d734cd7725df5b3fbe92955f4a9bb3b9b813aeeff79d6ed5db92def19d060a208c3ec8c42c110786f1e1496c50a7249b03fc792764366894a35320b99d0bef9fd0b6a246c36a357c6b985dc83a37a8d9b8b9ad643dea94860cbe763bb73cc8422b69d4d12332242c8954075fb7117a6679638073617abcdb4619855b2036af160647f66b3531645a3bf047ae290d6ae2249f114e7a8464278bae1486022bcc7c37390c8d9a0efb0e1cfa0da8ef7a5e072f99a47ecc75e4e442880375193db49bb82ba34901286ca473ed5b63e4048db4dc455e74b3fdd2e7898ca3f4c3a02d435cde6141eea645055123a7dcf0d22057f8d425701afc55859f5147954e719d58c7486b1e02ac16cb799b77632c66bb78e6e52e11017c1736424fa4d433f1e19b4c881d23f0b2a12d5fae3ae24339088088d9b496ad97bd9f6e20a8597d1452a0c72dcf43dbbda8f18166585c06d21fbffe5fe7b55f71c9b9f1b34a02bd05ca63c7c1b1bebbb9dd24fb10291b04c665d45154dd28b85d821ce7e613119128996785e1006a8dabc4899b10d2671107d5a0658ed363b9d4b39d02f8cc5e350fbf0a31048adecd1f9e2ca749bd86f195eb48e9b4605f050de03d642940d79184618f7f88a9a0a4683ad84d6134e395305bc1d4d9d17cc334b97653529d6682a87a5fac80a6d46d6e72fc22e58be7b8f8617b3372ef2622110ab1ec448717118b257acffe55d18c7855e9e8710ad977a6792b2315a189eb4468c68641e9b60c0dab7016ac1ad63cd8004b6eca8fc88b1e4263acc00499255c16b11487a0af858075f9c892dc8044c4146e5a5677c4a2cb24bde5e078985020d4ab1e4c87492e76b7e6f4bbd71d84bab1885c9702849e70cf728776b1a94c2a8fb8c7ca01b6111ef6f2032a290949bfe473fe215273b8b5b3ad540f187490f63077dccbca6f62f0a7a66717c596cdef412f2560b10685ede967b3ee68b8c951959aeb1d7564c3b9d806b2ce858381393a79916b78f7e90beadae30ffc0b2b614380f1c2cc551a44565209db3516be379ef566ab00c673fd8aaeeecdcf1168c1960e9a477b9e13757498a44ff089351d1f27abf9fd76816f924504647d1247715ca861ebe624172c322146d66eb2b247f8ecb3e1b5ddca89b287c57510cec40fcf89d802cf4368a861af320e01e34f7a6177d4bc549181b5e87ecdfe02f78c9a59a3bf91ebb6364023ec06410e7b4476ec4e3685bfa3bfe9ef9ecc12dcd899abe0f3c7f16b4686801c0c0a949aa26bed57df56f2bc54ef19af7fcbc7b0d691075f42a4a67acf980b568acb2342f42249f7c1ee3527c13182b096064ecd250887a942d26f637e1c4041b139659d2462a68680bb04387a3b399e396b9fe74de10356125fa47d0a20827370cbf36a79b6fffade91c439dd6cfff4bbe0dd3efefb61c491ee32f935d62307cba369ac8c20f6fe3d4857ce6d240ece5e4d149f0587155a8350fcc18efae2ff11cdbe15218a82499a1996df8b5462ee170b284321e76bbe5c3f4158387644d95f087c598e3d46fbe27f63fa784bda239512113424045a2c5dbc6bc3662ca730a86d13cf8f6fe2743224ca7b535caf6b4701a7dae9cfad3d7290104bbba15b6a064ae6e909a099f75fbe47c9e654d8e3b8dc0f3dbffe829e6c56f7a241e565136812a857f59ab565a9991c6b1d8abcc94c6b33bba314f6e5060e657e4647f969a551dd6c51dfca0ff5d9e4f401fedbc2c927eb1ed95ef25f4e5accba4999322ba1539499310dd5875433a22835cfd42fd77fd4680b7fe767d7aa5c33acde04a65bd3a663fcde4c80e9f2af498f13bf9abbaa1c1265edc691e94abdcc92270c05811cd2a8104eb18efbfec9e4ba9ae5cde211b9b93082ce034b6cd5fbe9cfbac4f7e2404ef159766124f73017cc3600f3c81cd78db25fc3459629eaf20dfdb062c7e502aa69412381d847a9d254d5befc451cda3606f0bc8ae62e0aee928f9ed0b21d705a8d31b899e16445ee064563d32f7b6bb5ad197023cf528d9b329ec67815c6ddf27d2a6ffa7328bb993407cde3d166159fd49fe469254b84c2916daea8df9d69bef019f1351b9bce193e30278835b82ea5f60dc0bdd7f7452b7a820ae7cd6dc29d7ac6a6c1b6411711a96338b1e769146b2a385d282bfaae61b041166efafab2d89a4567b9460cc22d752f8e9aacaaa0db7c84879f5359662d55df6570d4214740851c74574ced733807cbb54571110410892394c3dea07bd4154d0e5689d57c3360207dac951f96a358e9c466a5c5113f3a632e184f57f075edef4dcc9721b963beb95df09dedf848260cbc1ebfdc7408218eaba6d2c51928cd37c4c0c9f321fbb0994a56947cfd9643056db5dbea60a241f8f004c932bc8e645b2ec2eb9bc4e9e2f4156293234d05e70cb26b8a370b0206c756bda6defc11c5eb386640f535a4ffb714168defc6d82f40d8f5ba8768537ead5773c53bd779ca899a2dd31c9138569ff5107c2fb12b804375c3b3dc9b828bfd550328adf358f71e86a0c49fb119f5ef9e06c13855cbfc7d1a62ca2ea655ed912a6dc7bb8b18656e8923fc7a1702ab36947d79384d681c31923e98cf40209f776bc2b219a7ccd139e756a905aa351e6eaae90770c8a193f96cd5c66e4d77a357985556e14333716d80204a5c390e0d76f4081afe917f99ad8a0976b3342f51854b374b4baa9a7f22124d2b82749446e30d9795acb9c3c3a305a6d273ac528e8e9c95c37a78e765fdda55982c2961fbc85a14fc095a78b4654ee6dfc3298749a639ab9c8e155af3a77f8a409ce174532a492ef550a140f774d77d732b3b4ca5bc41fa4488ce5957ce219b032ae1f585273748d81b19edcf3e6cb9a93ec24e41c6b3c472f9baf3ca46cb8b9a91df18acebe7d83bd4473750c4f26806da2f95b9ea48b342460af729ab15e9f033eda67feec645f985d4b9489cf6ceec1b100d007bf46c74be53c7ea17296f9c5b5cbae736491213c93b513009ebdecfcd60d46d7b86c6e3b5e288f2ba5867c07936e7bd1b00de52191eb8630ff82ccafb27a59295164751811bf74eff1e5e2abdf3c93bc5dc9814be83b2562477935e2fa30db7ebb6ec380170cf10c1f98f8c5eb71c730c2b31b55a1dd1c12a64802ab95b63c529e0a96cec8f38680221d6089926d8309796c79994d63b67bfb62f66b4a502f30ed12be41e896e88bc45a160a526fbd5f002e677322f116ec5740d7563cd23ee853c008b84998e38fdf158556e28a532573956e7c00f91f08ca245c295a3d5e003a99ea727f61d12893b435d4c8f2f5cce00c6a3091e2a47f290c07168975c53d7529b71d10faf42d2bac9db8d53669cf59c709c25e9e40b5feaed4c37dde8b84c4961c00712326fb6aaa06e80d766b40b72480f3971def61d1d129676df2478e778d899ed317426ec33e496d1fdd2ec27128f8faee92828e13da72d6aee8330a7988ea1cc8b64ec4d8b20990864c16c52c4be6d00b304b87d97bffdd9c66a740b517223089d9f3f414abedc53c768dab9220b980e6c18d5f20ba8994cc8886d7bdee213442f456d79fce1b1eb48fbf600a666c8ade24d118e6328251cf7b57a6285c650e019850f392b1c29aec5c8fc489a3819d60d5de377d4c11b8ee5625b7c02c5d50d2af3397006f2e2a41a06f039229eef5878ed91f9f6be7e988924dbaeb8455f616275e8698d93fb536e2c839b203aa69bceceddbf9c53f8addba53d50ca0f7a4729a42ac6eb757f1b408ad4a0147546173e62f7621eb18a9e1681510cceb48e0a30ab7a1bf71d56742d5f034f2d725e7ea68a011dbb100fa6eefe4ee093873de366d34f4240ca027a25c5b979c9ac47dd1dcb6ed82c4aee09dcc23cf329a8644f89b5cf00e5683934b1837574e9b39b31b1009f276e15aa040959fdf100838ca3f5ab17e45036668d06044e3a13f3a0a6f68579e50d5b0164f900d7bcfcde78396cf30f0b1dff76dc397ab1a5a44b207eb1eaaf73b945c575029ae2dce20724991e6550155ded6a42672609f2439c5aab4882b2ffaf7da787b71d05d15516bd68c6f1a9d79b675395845f24ee853f877e72c14b6c6702f7b8775ca1bfabbbcf4019f7bccf07f1c211531dfc66a7a1df79e92a20dd1cbe1b22e1209e7e3ecb9d3c2450fc22a57bfe09bd735f61c361cdac2488ae0adc7885edc0712655daaf535e1de96ccbe7869d531d8bf3db512fbd17c772332a3f8cf1e052ee0202eb99a36a0f8d7219888acbb57090cdaf3b28e1e62e8fc2ec237bdf18592a7afe4d8390dcb5e7fcc31bf4f797e6f5710070902265cc2e8c459b7da1451046abd6c8c5b02c0be2d2f505a65376266563ac7b59ef3b4e2570a6cb0bd94d46ad861317c743ce1de12bfa2295a98cdded4414d87a1580b1e4675bbdf73a22cac4a1d8d456d089e0b60cbfd16158f073bd1dac481db49fa5d8801d0fb0844b4afec1bab4e61fa0f381fa667880a1cd8163953be7b591cc9dfd7f91902370b783ae8a0f3c7cbefa7d229a37c00f523529e159b11d2e240629b64af2d11404773e991207a722c320221ce23baed7cbe40a440c5680814b122cfba9092fe03478f85adcbdeacb76d6cbf2491eafae98327b278e267821a0e1cd06ef90cb0328e246c19d8c63b9332291a89bc9f989effc675c79a870ac024756c6f5a7e32babd69625d61487ae7399490b70dd0fade7d70ad9b0757300a2dde77abaff4f63a0303853589d44efa968e10d36561f04408ad0cc227fc6b2f904cead189a0fcca9b2e6cbde5498652e0b3bc9d8b7921474403718feb5cc750dc70f5a9b1a0ae2c642015b6a1a8ab0572182b4e39e0c869cbdc60c9465f5d564d18ba2f5b3bc3e05a458744077430c5ea031ee02dd8f0a65d7dd8d90dd9b8717f77d202239a5778719423fb2aec7ca86eb07c39de65a34b988d65377a7473e9145f16d79593e96903330bbf3a8024fc15519d9baa0fae2018786f4b1846fca355ff0fccf65cccad1896309a5ccf2056dd542c929850cc91cd655962360fe316557ab3fb378328f77a07d9da24447d3fa2020b382ed2e808ec9529a01273434c64b0b7c35a06a019e4ab51cdc9c0f266ab25b6984338a0ba910d1060283b636c5d7e8a3f969c1ee1c99b54bba7ff3679fbeecbb70349f076480a867cc4ee4cacaea39c80f642533599486d2ffb77b8c9109a9d25fa0b06e58eca764f7d56469eb9547036bbea9d5c3d35b4c1fbc3d39a372c2b7ad184965cad3819c8928f1588d00949949c0c4c93d30ac7f6665247c0108bd89dff3aafe780ac66febfacc8c6a3cc387d09da6de700487a80e2c8d56df94d7ebd3e1d9e06411a6c5f7eb6da41c6f52997b5ad47ba985261103fdf12eb4a2828b248f652ef00b6abccab2eb161b878b9dbc0aa911405b6f67adda83c16187748d7b524ffe6381f489f432d592e6171bd9ccb2cd52f977143f57fbf2ab0b823d449ae55f02440972334344cda01837b93afa4f46a2fdefe27e92764cf9596780846de2e3b1ea83e62ee43b1c05aee675e25363504addfaa68e7c53ed685413f5ba951f120d0a646e474872c81e5a887464c19f8460ae814ffff24cb51dd2dca28d597ab2ea60949f8dbbe67f263e722fdb51bce4e328a19f5ff1218e1f63b8da6d40dbd5490964499b2522ea323310634893ead661407966207a66ab13adfcf1a725ed14339c46011c0e0401f2386b47cd9f902fdf84bc85e74d3ae7cc544e4d65670a554a537712c6ee9f75191631d2a4c4da06fc38423b1d5b828d7201235b2974164f52aa16bee70ee509250752f4fdd6b9f8d021943df8320682a6f80ff0d67ab7a4ceea807bd5b3b7b6380b0c7f0caa67b0208ba71317f0355a3b755af0e2c007186389438615df80b7b25104a733fc90625b62682198733c0f1625dfaa08cf81e3df043094b7b5a098b3b36f803b5b0f10a057bf814ae3579932c0a5f208985bab3d817f975283b8838ae5cb709be72b58df7425e059fdbf4e0ee51b3da01fe0b44963c1196baee5ec5909ad80d9d1660f3edd90374952a0bf8b3bece2c2f944593f4de7de5e05ded096b8f4f05d65dfc2e806f78220d84b3db564fb12f4e5e8f5eab316591f004e9374cce8e787263bc3827affe6793c130b8621d3bbb2a86fd87f070ea21718281ee7aec4bb3bb71af4bf5721cecd139c4be8c9df4ec8dfb09a5cf1d86a25d39faa9f064a997c214f334e4410917fc3b4d67ada8d87a38c0f86b02bf653dddaeb5b75b300f8bcfd792858bef8ab23e063421939c59212964c9ed5dd56e215db58cef53d31a966bb8ce4ed56287fecb3a85ba435e0b41b20ba1164b9c9f2c49fa0f7b17a89e0ec47eefe992d63ee29c8c0a1ece2664fee8edadd43636a54c48519b4fcf55b0d9103602b92441a5f85cf8c5e406d0f5815f8f37309934bd78fbc2acf0a03b051b4528db4f7c09de7d0aabafca3736b8259c818ca338ca6754e0747717c2794d664a1cacc1e9c52764a308e6df73d975638630b74cce6c49b1bac16454e96852c4f9d8ed118e86d2f1c8dc33bccd4a07be128db5e80f5684ddcc1158e744411acde590f902f0987cfb750bb5bfeed53bff076868986b566d7701f48ddfcacbd325c8d930bcef26713bf60585d5c991e2a6cc33ccbc27f7ddfba18f998497c2eb378cc8f2cc07a1b4f141c5e0fb6f52e18242e505bcf6dd20e33a469d056a0b4fd5e72d0da9d0bcce1e2f9e9dc7d1c7b6cb0f3604287eca", 0x2000, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000440)={0x90, 0x0, 0x2, {0x2, 0x0, 0x0, 0x3, 0x4000, 0x265, {0x3, 0x0, 0x1, 0x0, 0x2, 0x0, 0x0, 0x1, 0x3ff, 0x6000, 0x0, 0x0, 0x0, 0x800}}}, 0x0, 0x0, 0x0, 0x0, 0x0}) write$FUSE_INIT(r4, &(0x7f0000001240)={0x50, 0x0, r5, {0x7, 0x2b, 0xfff, 0x83120, 0x3, 0x7, 0x1ff, 0x9, 0x0, 0x0, 0x10, 0xc}}, 0x50) r6 = openat(0xffffffffffffff9c, &(0x7f0000000640)='./file0/file0\x00', 0x4a300, 0xcd) ioctl$FIBMAP(r6, 0x801070cf, 0x0) 2m6.033856446s ago: executing program 4 (id=445): socket$kcm(0x10, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x800201000087}, 0x0) sched_setscheduler(0x0, 0x1, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r1 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r1, 0x1, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) setsockopt$CAN_RAW_FILTER(0xffffffffffffffff, 0x65, 0x1, &(0x7f0000000140)=[{{0x0, 0x0, 0x1}, {0x0, 0x0, 0x1, 0x1}}], 0x8) r3 = socket$alg(0x26, 0x5, 0x0) bind$alg(r3, &(0x7f0000000300)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-twofish-3way\x00'}, 0x58) setsockopt$ALG_SET_KEY(r3, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r4 = accept4(r3, 0x0, 0x0, 0x800) sendmmsg$alg(r4, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048"}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) 2m2.569269847s ago: executing program 9 (id=452): r0 = socket$nl_generic(0x10, 0x3, 0x10) socket$nl_rdma(0x10, 0x3, 0x14) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000380)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) socket(0x27, 0x6, 0x80000000) setsockopt$EBT_SO_SET_ENTRIES(0xffffffffffffffff, 0x0, 0x80, &(0x7f00000000c0)=@filter={'filter\x00', 0xe, 0x0, 0x90, [0x0, 0x200000000180, 0x2000000001b0, 0x2000000001e0], 0x0, 0x0, 0x0}, 0x108) r4 = syz_open_dev$vim2m(&(0x7f0000000000), 0x800, 0x2) ioctl$vim2m_VIDIOC_S_CTRL(r4, 0xc008561c, &(0x7f0000000040)={0xf0f024}) ioctl$vim2m_VIDIOC_S_FMT(r4, 0xc0d05605, &(0x7f0000000540)={0x2, @pix={0x3, 0x401, 0x3132564e, 0x1, 0x3, 0x3, 0xc, 0x7, 0x0, 0x0, 0x0, 0x3}}) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x810}, 0x20004000) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000003c0)={'netdevsim0\x00', 0x0}) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000001800)={0x6, 0x3, &(0x7f00000006c0)=@framed, &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', r5}, 0x80) 2m0.079893789s ago: executing program 9 (id=455): openat(0xffffffffffffff9c, 0x0, 0x2, 0x48) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, 0x0, 0x0) setsockopt$SO_BINDTODEVICE(0xffffffffffffffff, 0x1, 0x19, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = open(&(0x7f00000001c0)='./file1\x00', 0x14927e, 0xa0) fallocate(r4, 0x0, 0x0, 0x1001f0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./bus\x00', 0x180) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x4c) mount$overlay(0x0, &(0x7f0000000100)='./bus\x00', &(0x7f00000001c0), 0x8, &(0x7f0000000180)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file0'}}]}) chdir(&(0x7f0000000000)='./bus\x00') fsetxattr$trusted_overlay_origin(r4, &(0x7f0000000240), &(0x7f0000000280), 0x2, 0x2) openat(0xffffffffffffff9c, &(0x7f0000000440)='./file1\x00', 0x42, 0x0) 1m56.088059487s ago: executing program 9 (id=458): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x3000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file1\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = openat$ipvs(0xffffffffffffff9c, 0x0, 0x2, 0x0) sendfile(r3, 0xffffffffffffffff, 0x0, 0x106f) r4 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'batadv_slave_0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000200)=@newtfilter={0x24, 0x2c, 0xf3f, 0x30bd29, 0x25dfdbfd, {0x0, 0x0, 0x0, r5, {0xffe0, 0xfff3}, {}, {0x7, 0x4}}}, 0x24}, 0x1, 0x0, 0x0, 0x20041090}, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) r6 = syz_open_dev$media(&(0x7f0000000040), 0x7fdffffe, 0x0) ioctl$MEDIA_IOC_REQUEST_ALLOC(r6, 0x80047c05, &(0x7f0000000080)=0xffffffffffffffff) r8 = socket$alg(0x26, 0x5, 0x0) bind$alg(r8, &(0x7f0000000000)={0x26, 'hash\x00', 0x0, 0x0, 'sha1\x00'}, 0x58) accept$packet(0xffffffffffffffff, 0x0, 0x0) ioctl$VIDIOC_G_EXT_CTRLS(0xffffffffffffffff, 0xc0205648, &(0x7f0000000000)={0xf010000, 0x0, 0x0, r7, 0x0, 0x0}) 1m52.374371858s ago: executing program 9 (id=460): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) io_destroy(0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000000300)=""/102400, 0x19000) capset(&(0x7f0000000040)={0x19980330}, 0x0) r1 = syz_open_dev$sg(&(0x7f0000000140), 0xa, 0x0) r2 = openat$dsp1(0xffffffffffffff9c, &(0x7f0000000000), 0x141202, 0x0) ioctl$SOUND_MIXER_WRITE_VOLUME(r2, 0xc0044d11, &(0x7f00000000c0)=0x53) ioctl$FIBMAP(r1, 0x1, 0x0) r3 = socket$netlink(0x10, 0x3, 0xc) bind$netlink(r3, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r4, &(0x7f00000000c0)={0x0, 0x0, 0x0}, 0x0) pread64(0xffffffffffffffff, 0x0, 0x0, 0x4f) r5 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000940), 0x2, 0x0) poll(&(0x7f0000000140)=[{r5, 0x610}], 0x1, 0x6) syz_usb_connect(0x0, 0x24, 0x0, 0x0) syz_open_dev$I2C(0x0, 0x1, 0x482) 1m51.931031297s ago: executing program 37 (id=442): r0 = socket(0x2, 0x3, 0x6) bind$inet(r0, &(0x7f0000000080)={0x2, 0xfffa, @local}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x48800, 0x0, 0x0) syz_open_dev$radio(0x0, 0x1, 0x2) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) ioctl$ifreq_SIOCGIFINDEX_wireguard(r0, 0x8933, &(0x7f0000000180)={'wg2\x00'}) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) close(r0) fcntl$setlease(0xffffffffffffffff, 0x400, 0x1) connect$inet6(0xffffffffffffffff, &(0x7f0000000040)={0xa, 0x4001, 0x0, @ipv4={'\x00', '\xff\xff', @remote}}, 0x1c) r2 = syz_open_procfs(0x0, &(0x7f0000000140)='io\x00') preadv(r2, &(0x7f00000000c0)=[{&(0x7f0000002140)=""/4096, 0x1000}], 0x1, 0x141, 0x0) io_uring_setup(0x1fb8, 0x0) sendto$inet(r0, &(0x7f0000000040)="8c06004d4f95846d3f815de9af3735c10f427b", 0x13, 0x0, &(0x7f0000002400)={0x2, 0x0, @multicast2}, 0x10) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24004045) io_uring_setup(0xb94, &(0x7f0000000100)={0x0, 0x635c, 0x100, 0x2, 0x10a}) preadv(0xffffffffffffffff, &(0x7f00000001c0)=[{&(0x7f00000006c0)=""/4074, 0xfea}], 0x1, 0x8000740, 0x0) 1m50.176777656s ago: executing program 38 (id=445): socket$kcm(0x10, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x800201000087}, 0x0) sched_setscheduler(0x0, 0x1, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r1 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r1, 0x1, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) setsockopt$CAN_RAW_FILTER(0xffffffffffffffff, 0x65, 0x1, &(0x7f0000000140)=[{{0x0, 0x0, 0x1}, {0x0, 0x0, 0x1, 0x1}}], 0x8) r3 = socket$alg(0x26, 0x5, 0x0) bind$alg(r3, &(0x7f0000000300)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-twofish-3way\x00'}, 0x58) setsockopt$ALG_SET_KEY(r3, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r4 = accept4(r3, 0x0, 0x0, 0x800) sendmmsg$alg(r4, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048"}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) 1m48.733384005s ago: executing program 9 (id=469): ioctl$NS_GET_PARENT(0xffffffffffffffff, 0xb702, 0x0) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5) prlimit64(0x0, 0xe, &(0x7f0000000100)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000000)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) open$dir(0x0, 0x480000, 0x84) mkdirat(0xffffffffffffff9c, &(0x7f0000000440)='./file1\x00', 0x100) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mkdir(&(0x7f0000000000)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000380)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './bus'}}]}) chdir(&(0x7f0000000140)='./bus\x00') r4 = open(&(0x7f0000000580)='./bus\x00', 0x84242, 0x1df2a23c5997fa5f) write$FUSE_CREATE_OPEN(r4, &(0x7f0000000180)={0xa0, 0x0, 0x0, {{0x4, 0x0, 0x5, 0x7, 0x3, 0xfffffffd, {0x400000080001, 0xfd, 0x20ff, 0x8, 0xe, 0xd615, 0x9, 0x3, 0xfffffffc, 0x6000, 0x0, 0x0, 0x0, 0x5, 0x7}}, {0x0, 0x13}}}, 0xa0) sendfile(r4, r4, &(0x7f0000000080), 0x7f03) 1m44.968189661s ago: executing program 9 (id=471): sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x40080d0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f05ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mkdirat(0xffffffffffffff9c, 0x0, 0x40) mkdirat(0xffffffffffffff9c, 0x0, 0x1a0) chdir(&(0x7f00000000c0)='./bus\x00') r3 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x42, 0x0) r4 = creat(&(0x7f0000000580)='./file1\x00', 0x0) r5 = fanotify_init(0xf00, 0x1) fanotify_mark(r5, 0x105, 0x40009975, r4, 0x0) fallocate(r3, 0x0, 0x1000000, 0x3) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x27ffff7, 0x4012011, r3, 0x0) 1m29.834923403s ago: executing program 39 (id=471): sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x40080d0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f05ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mkdirat(0xffffffffffffff9c, 0x0, 0x40) mkdirat(0xffffffffffffff9c, 0x0, 0x1a0) chdir(&(0x7f00000000c0)='./bus\x00') r3 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x42, 0x0) r4 = creat(&(0x7f0000000580)='./file1\x00', 0x0) r5 = fanotify_init(0xf00, 0x1) fanotify_mark(r5, 0x105, 0x40009975, r4, 0x0) fallocate(r3, 0x0, 0x1000000, 0x3) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x27ffff7, 0x4012011, r3, 0x0) 34.847182351s ago: executing program 7 (id=538): syz_emit_ethernet(0x6e, 0x0, 0x0) socket$kcm(0x10, 0x2, 0x10) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x8001}, 0x20050840) prlimit64(0x0, 0xe, &(0x7f0000000200)={0x8, 0x8a}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x3) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xa, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, '\x00', 0x0, @fallback=0x45, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$IP_VS_SO_SET_ADD(r1, 0x0, 0x482, &(0x7f0000000080)={0x84, @local, 0x15, 0x3, 'sh\x00', 0x28, 0x5, 0x72}, 0x2c) socket$kcm(0xa, 0x2, 0x0) r2 = socket$inet_sctp(0x2, 0x5, 0x84) setsockopt$IP_VS_SO_SET_ADDDEST(r2, 0x0, 0x487, &(0x7f0000000000)={{0x84, @private=0xa010102, 0x4e24, 0x3, 'lc\x00', 0x5, 0x8, 0x77}, {@remote, 0x4e20, 0x10000, 0xc, 0x2}}, 0x44) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r3, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000040)=ANY=[@ANYBLOB="2c0000000b060102"], 0x2c}, 0x1, 0x0, 0x0, 0x10000047}, 0x0) sendmmsg$alg(0xffffffffffffffff, 0x0, 0x0, 0x4814) socket$kcm(0xa, 0x2, 0x0) syz_usb_connect(0x4, 0x2d, 0x0, 0x0) alarm(0x7fffffff) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(0xffffffffffffffff, 0x84, 0x7b, &(0x7f0000000000)={0x0, 0x8000}, 0xfffffffffffffdc5) 30.203703611s ago: executing program 7 (id=542): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) ioctl$TIOCGSID(0xffffffffffffffff, 0x5429, 0x0) sched_rr_get_interval(0x0, &(0x7f00000000c0)) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) socket$alg(0x26, 0x5, 0x0) bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000280)=ANY=[@ANYRES32, @ANYBLOB, @ANYRES32], 0x50) prctl$PR_SET_MM_MAP(0x23, 0xe, 0x0, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24004045) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f00000009c0)=@newtfilter={0x24, 0x2c, 0x100, 0x70bd2c, 0x25dfdbff, {0x0, 0x0, 0x0, 0x0, {0xffe0, 0xffff}, {0xb, 0xffe0}, {0x6, 0x3}}}, 0x24}, 0x1, 0x0, 0x0, 0x4050}, 0x20000840) r3 = syz_open_dev$dvb_demux(&(0x7f0000000080), 0x0, 0x41) ioctl$DVB_DEMUX_DMX_SET_PES_FILTER(r3, 0x40146f2c, &(0x7f00000000c0)={0x1, 0x0, 0x3, 0x0, 0x4}) ioctl$DVB_DEMUX_DMX_REMOVE_PID(r3, 0x40026f34, &(0x7f0000000040)=0x1) ioctl$DVB_DEMUX_DMX_ADD_PID(r3, 0x40026f33, &(0x7f0000000500)=0x7) ioctl$DVB_DEMUX_DMX_SET_PES_FILTER(r3, 0x40146f2c, &(0x7f0000000000)={0x101, 0x0, 0x2, 0x1, 0x4}) 28.736875769s ago: executing program 7 (id=544): r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r0, &(0x7f00000002c0)={0xa, 0x4e22, 0x0, @local, 0xb}, 0x1c) listen(r0, 0x2) r1 = syz_init_net_socket$ax25(0x3, 0x5, 0xca) bind$ax25(r1, &(0x7f0000000280)={{0x3, @default, 0x1}, [@null, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @bcast, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @bcast, @default, @bcast, @null]}, 0x48) r2 = syz_open_procfs(0x0, &(0x7f0000000040)='smaps_rollup\x00') lseek(r2, 0x2000, 0x0) io_uring_setup(0xf06, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000200)={0x8, 0x8a}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x3) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) r4 = socket$kcm(0x10, 0x2, 0x0) ioctl$sock_SIOCGIFVLAN_ADD_VLAN_CMD(r4, 0x8982, &(0x7f0000000400)={0x0, 'batadv0\x00', {0x5}}) socket$inet_udp(0x2, 0x2, 0x0) r5 = syz_init_net_socket$rose(0xb, 0x5, 0x0) connect$rose(r5, &(0x7f0000000040)=@short={0xb, @dev={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @null, 0x1, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}}, 0x1c) syz_emit_ethernet(0x56, &(0x7f0000000380)={@local, @remote, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "c4d600", 0x20, 0x6, 0x1, @local, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x8, 0x2, 0x0, 0x0, 0x10, {[@mptcp=@capable={0x1e, 0xc, 0x6, 0x8, 0x1, 0x10000}]}}}}}}}}, 0x0) 26.710100352s ago: executing program 7 (id=545): openat(0xffffffffffffff9c, &(0x7f0000000540)='mnt\x00', 0x0, 0x0) pipe2(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80800) splice(0xffffffffffffffff, 0x0, r0, 0x0, 0x7c1c, 0x8) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r2 = socket$inet6(0xa, 0x1, 0x8010000000000084) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r3, &(0x7f00000003c0)={0xa, 0x4e24, 0x9, @mcast2, 0x80}, 0x1c) bind$inet6(r2, &(0x7f00000000c0)={0xa, 0x4e21, 0x0, @empty}, 0x1c) syz_open_dev$MSR(&(0x7f0000000180), 0xfffffffffffffc00, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) bind$netlink(r4, &(0x7f0000000200)={0x10, 0x0, 0x0, 0x80065c9}, 0xc) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r5, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010600000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff1b000000020000000900010073797a30000001000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r5, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)={{0x14}, [@NFT_MSG_NEWSET={0x3c, 0x12, 0xa, 0x201, 0x0, 0x0, {0x2, 0x0, 0x20}, [@NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_KEY_TYPE={0x8}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0xa}]}], {0x14}}, 0x64}}, 0x0) connect$inet6(r2, &(0x7f0000000000)={0xa, 0x4e21, 0x0, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x14}}}, 0x1c) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r2, 0x84, 0x9, &(0x7f0000000300)={0x0, @in6={{0xa, 0x0, 0x0, @empty, 0xac800000}}, 0x0, 0x0, 0x318, 0x1, 0x24}, 0x9c) 26.707940896s ago: executing program 0 (id=555): syz_mount_image$hfs(&(0x7f0000002c80), &(0x7f0000000080)='./file0\x00', 0x4490, &(0x7f0000002cc0)=ANY=[], 0xfd, 0x28f, &(0x7f0000002940)="$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") munmap(&(0x7f00003fe000/0xc00000)=nil, 0xc00000) r0 = socket$inet6(0xa, 0x2, 0x0) socket$alg(0x26, 0x5, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() r2 = socket$can_bcm(0x1d, 0x2, 0x2) sendmsg$can_bcm(r2, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r1, 0x0, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(r3, 0x8983, &(0x7f0000000100)={0x0, 'erspan0\x00', {0x1}, 0x26}) ioctl$vim2m_VIDIOC_TRY_FMT(0xffffffffffffffff, 0xc0d05640, &(0x7f0000000440)={0x1, @pix_mp={0x5, 0x8000000, 0x55595659, 0x6, 0x8, [{0x2, 0x1f}, {0x8, 0x7fff}, {0x7, 0x6}, {0x42, 0x2}, {0x3}, {0x3ff, 0x4}, {0x81, 0x3ff}, {0x8, 0xe37}], 0x1, 0x0, 0x0, 0x0, 0x5}}) setsockopt$inet6_mreq(r0, 0x29, 0x1b, &(0x7f0000000100)={@remote}, 0x14) openat(0xffffffffffffff9c, &(0x7f0000000400)='./file1\x00', 0x143142, 0x40) truncate(&(0x7f0000000900)='./file1\x00', 0x3000000) 23.337974986s ago: executing program 8 (id=548): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000040)={0x0}}, 0x20004800) socket$vsock_stream(0x28, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) connect$inet6(0xffffffffffffffff, &(0x7f0000000200)={0xa, 0x0, 0xfffffffd, @empty}, 0x1c) open(0x0, 0x1298c2, 0x0) r4 = socket$inet6(0xa, 0x3, 0x6) setsockopt$inet6_buf(r4, 0x29, 0x39, &(0x7f0000000040)="ff02040000ffffffffffffffff1f2be82db1af0000000000", 0x18) connect$inet6(r4, &(0x7f0000000080)={0xa, 0x4e2b, 0xb, @private1={0xfc, 0x1, '\x00', 0x6}, 0x6}, 0x1c) sendmmsg$inet6(r4, &(0x7f0000002940)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000000}}], 0x62, 0x6000000000000000) r5 = syz_open_dev$usbfs(&(0x7f0000000240), 0xb, 0x101301) ioctl$USBDEVFS_CONTROL(r5, 0xc0185500, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28012, 0xffffffffffffffff, 0x0) 23.335446926s ago: executing program 0 (id=559): syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100), 0x101e01, 0x0) r2 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000340), 0x0, 0x0) bpf$ENABLE_STATS(0x20, 0x0, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[], 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000180)={0xffffffffffffffff, 0x2000000, 0xe, 0x0, &(0x7f0000000200)="63eced8e46dc3f0adf33c9f7b986", 0x0, 0x3800, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) ioctl$FS_IOC_FSSETXATTR(r2, 0x7040, 0x0) ioctl$TIOCSETD(r1, 0x5423, 0x0) syz_open_dev$sg(0x0, 0x200000000a2, 0xa0104) openat$dsp1(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r3 = epoll_create1(0x0) epoll_create1(0x0) ioctl$RTC_PIE_OFF(r2, 0x7006) epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, 0xffffffffffffffff, &(0x7f00000000c0)={0x2000}) r4 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000040)=[{0x6, 0x0, 0x0, 0x7fffffff}]}) close_range(r4, 0xffffffffffffffff, 0x0) 21.882876394s ago: executing program 7 (id=551): bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="0600000004000000ff0f00000700000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/26], 0x50) close(0x3) ioperm(0x1, 0x9, 0x4) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000240)=ANY=[], 0x2c}, 0x1, 0x0, 0x0, 0x40001}, 0x20008000) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xb4e02000) r1 = syz_clone(0x2000, 0x0, 0xff36, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r1, 0x1, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) r3 = openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000080), 0x92103, 0x0) r4 = fsopen(&(0x7f0000000100)='mqueue\x00', 0x1) fsconfig$FSCONFIG_CMD_CREATE(r4, 0x8, 0x0, 0x0, 0x0) ioctl$SW_SYNC_IOC_CREATE_FENCE(r3, 0xc0285700, 0x0) ioctl$SYNC_IOC_MERGE(0xffffffffffffffff, 0xc0303e03, &(0x7f0000000040)={"6538535a2270f2bfb7a7624449262a0d764e59779d15ef996f25c5c3f2c04f8d"}) mount$nfs(0x0, &(0x7f0000000640)='.\x00', &(0x7f0000000680), 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB='ac', @ANYRES32]) mremap(&(0x7f0000000000/0x9000)=nil, 0x600a00, 0x200000, 0x3, &(0x7f0000a00000/0x600000)=nil) 18.946103276s ago: executing program 7 (id=552): pipe(&(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = fsopen(&(0x7f0000000080)='autofs\x00', 0x0) mount$overlay(0x0, 0x0, 0x0, 0x40000, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20008b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x3) ioctl$BLKTRACESETUP(r0, 0xc0481273, 0x0) sched_setparam(0x0, &(0x7f00000000c0)=0x7f) sched_setaffinity(0x0, 0xfffffffffffffd7a, &(0x7f0000000580)=0x8000000002) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f000001aa40)=""/102392, 0x18ff8) socket(0x2, 0x80805, 0x0) syz_open_dev$I2C(0x0, 0x1, 0x402) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r3, &(0x7f0000d84000)={0xa, 0x2, 0x0, @empty}, 0x1c) setsockopt$inet6_tcp_TCP_MD5SIG(r3, 0x6, 0xe, &(0x7f0000000300)={@in6={{0xa, 0x0, 0x6, @remote, 0xfffffffc}}, 0x0, 0x0, 0x6, 0x0, "3f114438efdaca16d374b49a365be44d5e860ea3ba676c0b5047b80e2c3535d5bd9db3c8572560f4d1be5cd41f7716082ee3589f099942e6f1c395ddb8160381baadf27900"}, 0xd8) setsockopt$inet6_tcp_TCP_MD5SIG(r3, 0x6, 0xe, &(0x7f0000000100)={@in6={{0xa, 0x0, 0x20000000, @remote, 0x1}}, 0x0, 0x0, 0x0, 0x0, "ddfd3b7ed7c6a1c172a987ae5ce3cafd64c9a736831a5912d606798fb75c9981c4b3ac0e06891ff18bc5543ed57215a3c45f9154dfa319e52a15a2b9acf80c07fb1a854dad742eef6187f2304844c296"}, 0xd8) sendto$inet6(r3, 0x0, 0x0, 0x20004002, &(0x7f0000b63fe4)={0xa, 0x2, 0xa15f}, 0x1c) fsconfig$FSCONFIG_SET_FD(r1, 0x5, &(0x7f00000005c0)='fd', 0x0, r0) fsconfig$FSCONFIG_CMD_CREATE(r1, 0x6, 0x0, 0x0, 0x0) r4 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) close_range(r4, 0xffffffffffffffff, 0x0) 18.477074694s ago: executing program 0 (id=553): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) io_destroy(0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000000300)=""/102400, 0x19000) capset(&(0x7f0000000040)={0x19980330}, 0x0) r1 = syz_open_dev$sg(&(0x7f0000000140), 0xa, 0x0) r2 = openat$dsp1(0xffffffffffffff9c, &(0x7f0000000000), 0x141202, 0x0) ioctl$SOUND_MIXER_WRITE_VOLUME(r2, 0xc0044d11, &(0x7f00000000c0)=0x53) ioctl$FIBMAP(r1, 0x1, 0x0) r3 = socket$netlink(0x10, 0x3, 0xc) bind$netlink(r3, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r4, &(0x7f00000000c0)={0x0, 0x0, 0x0}, 0x0) pread64(0xffffffffffffffff, 0x0, 0x0, 0x4f) r5 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000940), 0x2, 0x0) poll(&(0x7f0000000140)=[{r5, 0x610}], 0x1, 0x6) syz_usb_connect(0x0, 0x24, 0x0, 0x0) syz_open_dev$I2C(0x0, 0x1, 0x482) 15.764964926s ago: executing program 3 (id=556): r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r0, &(0x7f00000002c0)={0xa, 0x4e22, 0x0, @local, 0xb}, 0x1c) listen(r0, 0x2) r1 = syz_init_net_socket$ax25(0x3, 0x5, 0xca) bind$ax25(r1, &(0x7f0000000280)={{0x3, @default, 0x1}, [@null, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @bcast, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @bcast, @default, @bcast, @null]}, 0x48) r2 = syz_open_procfs(0x0, &(0x7f0000000040)='smaps_rollup\x00') lseek(r2, 0x2000, 0x0) io_uring_setup(0xf06, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000200)={0x8, 0x8a}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x3) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) r4 = socket$kcm(0x10, 0x2, 0x0) ioctl$sock_SIOCGIFVLAN_ADD_VLAN_CMD(r4, 0x8982, &(0x7f0000000400)={0x0, 'batadv0\x00', {0x5}}) socket$inet_udp(0x2, 0x2, 0x0) r5 = syz_init_net_socket$rose(0xb, 0x5, 0x0) connect$rose(r5, &(0x7f0000000040)=@short={0xb, @dev={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @null, 0x1, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}}, 0x1c) syz_emit_ethernet(0x56, &(0x7f0000000380)={@local, @remote, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "c4d600", 0x20, 0x6, 0x1, @local, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x8, 0x2, 0x0, 0x0, 0x10, {[@mptcp=@capable={0x1e, 0xc, 0x6, 0x8, 0x1, 0x10000}]}}}}}}}}, 0x0) 15.637008155s ago: executing program 2 (id=461): socket$kcm(0x10, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x800201000087}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r0 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r0, 0x1, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f0000000300)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-twofish-3way\x00'}, 0x58) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, 0x0, 0x0) 15.377100392s ago: executing program 8 (id=557): r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r0, &(0x7f00000002c0)={0xa, 0x4e22, 0x0, @local, 0xb}, 0x1c) listen(r0, 0x2) r1 = syz_init_net_socket$ax25(0x3, 0x5, 0xca) bind$ax25(r1, &(0x7f0000000280)={{0x3, @default, 0x1}, [@null, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @bcast, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @bcast, @default, @bcast, @null]}, 0x48) r2 = syz_open_procfs(0x0, &(0x7f0000000040)='smaps_rollup\x00') lseek(r2, 0x2000, 0x0) io_uring_setup(0xf06, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000200)={0x8, 0x8a}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x3) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) r4 = socket$kcm(0x10, 0x2, 0x0) ioctl$sock_SIOCGIFVLAN_ADD_VLAN_CMD(r4, 0x8982, &(0x7f0000000400)={0x0, 'batadv0\x00', {0x5}}) socket$inet_udp(0x2, 0x2, 0x0) r5 = syz_init_net_socket$rose(0xb, 0x5, 0x0) connect$rose(r5, &(0x7f0000000040)=@short={0xb, @dev={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @null, 0x1, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}}, 0x1c) syz_emit_ethernet(0x56, &(0x7f0000000380)={@local, @remote, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "c4d600", 0x20, 0x6, 0x1, @local, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x8, 0x2, 0x0, 0x0, 0x10, {[@mptcp=@capable={0x1e, 0xc, 0x6, 0x8, 0x1, 0x10000}]}}}}}}}}, 0x0) 14.538212382s ago: executing program 0 (id=558): syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) sched_setscheduler(0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f0000000240), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup/cgroup.procs\x00', 0x2, 0x0) read$FUSE(r1, &(0x7f0000000440)={0x2020}, 0x2020) write$cgroup_pid(r1, &(0x7f00000000c0), 0x12) r2 = fsopen(&(0x7f0000000000)='cgroup2\x00', 0x0) fsconfig$FSCONFIG_SET_BINARY(r2, 0x6, 0x0, 0x0, 0x0) r3 = fsmount(r2, 0x1, 0x0) r4 = openat$cgroup_subtree(r3, &(0x7f0000000100), 0x2, 0x0) write$cgroup_subtree(r4, &(0x7f0000000300)=ANY=[@ANYBLOB='-cpu'], 0x5) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) read$FUSE(r1, 0x0, 0x0) r5 = socket$kcm(0x10, 0x3, 0x10) sendmsg$kcm(r5, 0x0, 0x0) sendmsg$DEVLINK_CMD_SB_TC_POOL_BIND_GET(0xffffffffffffffff, &(0x7f0000000600)={0x0, 0x0, &(0x7f00000005c0)={0x0}, 0x1, 0x0, 0x0, 0x804}, 0x20000) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) 13.831193619s ago: executing program 2 (id=560): bpf$PROG_BIND_MAP(0xa, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r3, 0xc02064b2, &(0x7f0000000040)={0x5, 0x6576, 0x9}) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TIPC_CMD_SET_NODE_ADDR(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={0x0}, 0x1, 0x0, 0x0, 0x11}, 0x20040010) mmap(&(0x7f0000001000/0x4000)=nil, 0x4000, 0x4, 0x11, r3, 0x100000000) syz_clone(0x4000, 0x0, 0x0, 0x0, 0x0, 0x0) io_setup(0x1, &(0x7f0000002500)=0x0) syz_genetlink_get_family_id$ethtool(&(0x7f00000001c0), 0xffffffffffffffff) io_submit(r5, 0x0, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000840)={0x0, 0x0, &(0x7f0000000000)={0x0, 0x80}, 0x1, 0x0, 0x0, 0x20044081}, 0x0) mmap$xdp(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x3000009, 0x46031, 0xffffffffffffffff, 0x0) 13.828318277s ago: executing program 3 (id=571): r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r0, &(0x7f00000002c0)={0xa, 0x4e22, 0x0, @local, 0xb}, 0x1c) listen(r0, 0x2) r1 = syz_init_net_socket$ax25(0x3, 0x5, 0xca) bind$ax25(r1, &(0x7f0000000280)={{0x3, @default, 0x1}, [@null, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @bcast, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @bcast, @default, @bcast, @null]}, 0x48) r2 = syz_open_procfs(0x0, &(0x7f0000000040)='smaps_rollup\x00') lseek(r2, 0x2000, 0x0) io_uring_setup(0xf06, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000200)={0x8, 0x8a}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x3) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) r4 = socket$kcm(0x10, 0x2, 0x0) ioctl$sock_SIOCGIFVLAN_ADD_VLAN_CMD(r4, 0x8982, &(0x7f0000000400)={0x0, 'batadv0\x00', {0x5}}) socket$inet_udp(0x2, 0x2, 0x0) r5 = syz_init_net_socket$rose(0xb, 0x5, 0x0) connect$rose(r5, &(0x7f0000000240)=@short={0xb, @dev={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, 0x1, @null}, 0x1c) syz_emit_ethernet(0x56, &(0x7f0000000380)={@local, @remote, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "c4d600", 0x20, 0x6, 0x1, @local, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x8, 0x2, 0x0, 0x0, 0x10, {[@mptcp=@capable={0x1e, 0xc, 0x6, 0x8, 0x1, 0x10000}]}}}}}}}}, 0x0) 12.12224507s ago: executing program 8 (id=561): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './bus\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = signalfd(0xffffffffffffffff, &(0x7f00000003c0), 0x8) ioctl$FIGETBSZ(r3, 0x2, &(0x7f0000000000)) mkdir(0x0, 0x5) sendmsg$ETHTOOL_MSG_LINKINFO_SET(0xffffffffffffffff, 0x0, 0x4000054) ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, 0x0) r4 = inotify_init1(0x800) fcntl$setsig(r4, 0xa, 0xe) rt_sigtimedwait(&(0x7f0000000040)={[0xffffffffffff7ff8]}, 0x0, 0x0, 0x8) inotify_add_watch(r4, 0x0, 0xa4000960) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$sock_inet6_SIOCADDRT(r5, 0x890b, &(0x7f00000002c0)={@local, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @dev={0xfe, 0x80, '\x00', 0x29}, 0x1, 0x6, 0x0, 0x100, 0x7ff, 0x80000}) ioctl$sock_inet6_SIOCADDRT(r3, 0x890b, 0x0) 12.108827697s ago: executing program 3 (id=562): prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) syz_open_dev$evdev(0x0, 0x0, 0x802) io_setup(0x4, 0x0) madvise(&(0x7f0000000000/0x3000)=nil, 0x7fffffffffffffff, 0x3) bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0x16, 0x0, 0x4, 0xffff, 0x0, 0x1}, 0x50) r3 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_int(r3, 0x0, 0xf, &(0x7f0000000000)=0x5, 0x4) r4 = socket$inet6(0xa, 0x2, 0x0) io_destroy(0x0) sendmmsg$inet(r4, &(0x7f00000016c0)=[{{&(0x7f0000000680)={0x2, 0x4e24, @loopback}, 0x10, 0x0}}], 0x1, 0x4084) 10.436139635s ago: executing program 8 (id=563): mkdirat(0xffffffffffffff9c, 0x0, 0x4) openat$fuse(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000300)) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f0000000240), 0x0, 0x0) read$msr(r0, &(0x7f0000032680)=""/102400, 0x19000) setsockopt(0xffffffffffffffff, 0x84, 0x7d, &(0x7f00000002c0), 0x0) setsockopt$inet_sctp6_SCTP_HMAC_IDENT(0xffffffffffffffff, 0x84, 0x16, 0x0, 0xa) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000540)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x1}}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x101, 0x0, 0x0, {0x1, 0x0, 0x6}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x2c, 0x3, 0xa, 0x101, 0x0, 0x0, {0x1}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz2\x00'}]}, @NFT_MSG_NEWRULE={0x44, 0x6, 0xa, 0x101, 0x0, 0x0, {0x1, 0x0, 0x1}, [@NFTA_RULE_CHAIN_ID={0x8}, @NFTA_RULE_EXPRESSIONS={0x28, 0x4, 0x0, 0x1, [{0x10, 0x1, 0x0, 0x1, @masq={{0x9}, @void}}, {0x14, 0x1, 0x0, 0x1, @notrack={{0xc}, @val={0x4, 0x2, 0x0, 0x1, ["", "", "", "", ""]}}}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x7}}}, 0xb8}, 0x1, 0x0, 0x0, 0x4000001}, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) close(0xffffffffffffffff) r2 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(0xffffffffffffffff, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty}, 0x1c) r3 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r3, &(0x7f0000000000)={0x2, 0x4e22, @empty}, 0x10) r4 = accept(r2, 0x0, 0x0) sendmsg$TEAM_CMD_OPTIONS_SET(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)=ANY=[], 0xfffffdef}, 0x1, 0x0, 0x0, 0x80}, 0xf4) 10.435830548s ago: executing program 1 (id=465): socket$tipc(0x1e, 0x5, 0x0) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bpf$PROG_LOAD(0x5, 0x0, 0x0) capset(0x0, &(0x7f0000000180)={0x6, 0x0, 0x0, 0x0, 0xfffffffa, 0x2}) syz_open_procfs(0xffffffffffffffff, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f00000001c0)=0x7) getpid() r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000001c0)=ANY=[@ANYBLOB="1c0000005e00679a3601ffc4910700004f78d4c1a0731cccff"], 0x1c}}, 0x0) recvmmsg$unix(r3, &(0x7f0000002fc0)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000200)=""/4070, 0xfed}, {&(0x7f0000002140)=""/130, 0x82}], 0x2}}], 0x110, 0x42, 0x0) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x6, 0x11, &(0x7f0000000640)=ANY=[@ANYBLOB="18020000000000000000000004000000850000007b000000b7080000000000007b8af8ff00000000b7080000080000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32, @ANYBLOB="0000000000000000b70500000800000085000000a500000095"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 9.553104737s ago: executing program 3 (id=564): prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) syz_open_dev$evdev(0x0, 0x0, 0x802) io_setup(0x4, 0x0) madvise(&(0x7f0000000000/0x3000)=nil, 0x7fffffffffffffff, 0x3) bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0x16, 0x0, 0x4, 0xffff, 0x0, 0x1}, 0x50) r3 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_int(r3, 0x0, 0xf, &(0x7f0000000000)=0x5, 0x4) io_destroy(0x0) sendmmsg$inet(0xffffffffffffffff, &(0x7f00000016c0)=[{{&(0x7f0000000680)={0x2, 0x4e24, @loopback}, 0x10, 0x0}}], 0x1, 0x4084) bind$inet(r3, &(0x7f00000001c0)={0x2, 0x1, @remote}, 0x10) 9.257906797s ago: executing program 0 (id=565): fcntl$notify(0xffffffffffffffff, 0x402, 0x8000002d) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x200000087}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) syz_mount_image$btrfs(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, &(0x7f0000001600), 0xfc, 0x559e, &(0x7f0000005680)="$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") r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e24}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) fchmodat(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0xfffffffb) syz_mount_image$fuse(0x0, &(0x7f00000000c0)='./bus\x00', 0x400, 0x0, 0x1, 0x0, 0x0) prctl$PR_SET_PTRACER(0x59616d61, r0) r3 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r3, 0x0, 0x0) sendto$inet6(r3, 0x0, 0x0, 0x40011, 0x0, 0x0) mount$overlay(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000b80), 0x0, &(0x7f0000000180)={[{@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file0'}}]}) socket$nl_generic(0x10, 0x3, 0x10) fchownat(0xffffffffffffff9c, 0x0, 0xee01, 0x0, 0x1000) r4 = fsopen(&(0x7f0000000000)='cgroup2\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r4, 0x8, 0x0, 0x0, 0x0) 9.094209022s ago: executing program 2 (id=566): syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100), 0x101e01, 0x0) r2 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000340), 0x0, 0x0) bpf$ENABLE_STATS(0x20, 0x0, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[], 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000180)={0xffffffffffffffff, 0x2000000, 0xe, 0x0, &(0x7f0000000200)="63eced8e46dc3f0adf33c9f7b986", 0x0, 0x3800, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) ioctl$FS_IOC_FSSETXATTR(r2, 0x7040, 0x0) ioctl$TIOCSETD(r1, 0x5423, 0x0) syz_open_dev$sg(0x0, 0x200000000a2, 0xa0104) openat$dsp1(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r3 = epoll_create1(0x0) epoll_create1(0x0) ioctl$RTC_PIE_OFF(r2, 0x7006) epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, 0xffffffffffffffff, &(0x7f00000000c0)={0x2000}) r4 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000040)=[{0x6, 0x0, 0x0, 0x7fffffff}]}) close_range(r4, 0xffffffffffffffff, 0x0) 8.171182595s ago: executing program 1 (id=567): socket$inet6_tcp(0xa, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x3000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file1\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x0, 0x0) openat$ipvs(0xffffffffffffff9c, 0x0, 0x2, 0x0) ioctl$DVB_DEMUX_DMX_REMOVE_PID(0xffffffffffffffff, 0x40026f34, 0x0) r3 = socket$alg(0x26, 0x5, 0x0) bind$alg(r3, &(0x7f0000000300)={0x26, 'hash\x00', 0x0, 0x0, 'sha3-384\x00'}, 0x58) r4 = accept4(r3, 0x0, 0x0, 0x800) recvmmsg$unix(r4, &(0x7f0000003700)=[{{0x0, 0x700, 0x0, 0x0, 0x0, 0x500}}], 0x600, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, 0x0, &(0x7f0000000000)) r5 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x3000009, 0x12, r5, 0x0) syz_io_uring_submit(0x0, 0x0, 0x0, &(0x7f0000000000)) 5.289870144s ago: executing program 1 (id=568): pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) utimensat(r0, &(0x7f0000000040)='./file0\x00', &(0x7f00000000c0)={{0x77359400}, {0x0, 0xea60}}, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x8) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) landlock_restrict_self(0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x80) r4 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000200), 0x2, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r4, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r4, &(0x7f0000002140)={0x2020, 0x0, 0x0}, 0x2020) syz_fuse_handle_req(r4, &(0x7f0000008400)="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", 0x2000, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000440)={0x90, 0x0, 0x2, {0x2, 0x0, 0x0, 0x3, 0x4000, 0x265, {0x3, 0x0, 0x1, 0x0, 0x2, 0x0, 0x0, 0x1, 0x3ff, 0x6000, 0x0, 0x0, 0x0, 0x800}}}, 0x0, 0x0, 0x0, 0x0, 0x0}) write$FUSE_INIT(r4, &(0x7f0000001240)={0x50, 0x0, r5, {0x7, 0x2b, 0xfff, 0x83120, 0x3, 0x7, 0x1ff, 0x9, 0x0, 0x0, 0x10, 0xc}}, 0x50) r6 = openat(0xffffffffffffff9c, &(0x7f0000000640)='./file0/file0\x00', 0x4a300, 0xcd) ioctl$FIBMAP(r6, 0x801070cf, 0x0) 5.289494748s ago: executing program 8 (id=569): seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000018c0)={0x0, 0x0}) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000200)=0x7) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) r3 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000000), 0x800, 0x0) ioctl$RTC_IRQP_READ(r3, 0x8008700b, &(0x7f00000002c0)) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r4, 0x0) r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000680)={0x10, 0x4, &(0x7f0000000380)=ANY=[@ANYBLOB="1802000000c400000000000000000000850000003e00000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x41000}, 0x94) r6 = bpf$MAP_CREATE(0x0, &(0x7f00000023c0)=ANY=[@ANYBLOB="1200000004000000080000000b"], 0x48) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000540)=ANY=[@ANYRES32=r6, @ANYRES32=r5, @ANYBLOB='\a'], 0x10) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000500)={r6, &(0x7f0000000240), &(0x7f00000004c0)=@tcp6=r4}, 0x20) sendmmsg$inet6(r4, &(0x7f0000002440)=[{{0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000600)="e2", 0x1}], 0x1}, 0x18020000}, {{0x0, 0x0, &(0x7f0000000480)}}], 0x56, 0x10) 4.059629682s ago: executing program 8 (id=570): r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r0, &(0x7f00000002c0)={0xa, 0x4e22, 0x0, @local, 0xb}, 0x1c) listen(r0, 0x2) r1 = syz_init_net_socket$ax25(0x3, 0x5, 0xca) bind$ax25(r1, &(0x7f0000000280)={{0x3, @default, 0x1}, [@null, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @bcast, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @bcast, @default, @bcast, @null]}, 0x48) r2 = syz_open_procfs(0x0, &(0x7f0000000040)='smaps_rollup\x00') lseek(r2, 0x2000, 0x0) io_uring_setup(0xf06, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000200)={0x8, 0x8a}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x3) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) r4 = socket$kcm(0x10, 0x2, 0x0) ioctl$sock_SIOCGIFVLAN_ADD_VLAN_CMD(r4, 0x8982, &(0x7f0000000400)={0x0, 'batadv0\x00', {0x5}}) socket$inet_udp(0x2, 0x2, 0x0) r5 = syz_init_net_socket$rose(0xb, 0x5, 0x0) connect$rose(r5, &(0x7f0000000040)=@short={0xb, @dev={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @null, 0x1, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}}, 0x1c) syz_emit_ethernet(0x56, &(0x7f0000000380)={@local, @remote, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "c4d600", 0x20, 0x6, 0x1, @local, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x8, 0x2, 0x0, 0x0, 0x10, {[@mptcp=@capable={0x1e, 0xc, 0x6, 0x8, 0x1, 0x10000}]}}}}}}}}, 0x0) 2.399445007s ago: executing program 40 (id=552): pipe(&(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = fsopen(&(0x7f0000000080)='autofs\x00', 0x0) mount$overlay(0x0, 0x0, 0x0, 0x40000, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20008b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x3) ioctl$BLKTRACESETUP(r0, 0xc0481273, 0x0) sched_setparam(0x0, &(0x7f00000000c0)=0x7f) sched_setaffinity(0x0, 0xfffffffffffffd7a, &(0x7f0000000580)=0x8000000002) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f000001aa40)=""/102392, 0x18ff8) socket(0x2, 0x80805, 0x0) syz_open_dev$I2C(0x0, 0x1, 0x402) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r3, &(0x7f0000d84000)={0xa, 0x2, 0x0, @empty}, 0x1c) setsockopt$inet6_tcp_TCP_MD5SIG(r3, 0x6, 0xe, &(0x7f0000000300)={@in6={{0xa, 0x0, 0x6, @remote, 0xfffffffc}}, 0x0, 0x0, 0x6, 0x0, "3f114438efdaca16d374b49a365be44d5e860ea3ba676c0b5047b80e2c3535d5bd9db3c8572560f4d1be5cd41f7716082ee3589f099942e6f1c395ddb8160381baadf27900"}, 0xd8) setsockopt$inet6_tcp_TCP_MD5SIG(r3, 0x6, 0xe, &(0x7f0000000100)={@in6={{0xa, 0x0, 0x20000000, @remote, 0x1}}, 0x0, 0x0, 0x0, 0x0, "ddfd3b7ed7c6a1c172a987ae5ce3cafd64c9a736831a5912d606798fb75c9981c4b3ac0e06891ff18bc5543ed57215a3c45f9154dfa319e52a15a2b9acf80c07fb1a854dad742eef6187f2304844c296"}, 0xd8) sendto$inet6(r3, 0x0, 0x0, 0x20004002, &(0x7f0000b63fe4)={0xa, 0x2, 0xa15f}, 0x1c) fsconfig$FSCONFIG_SET_FD(r1, 0x5, &(0x7f00000005c0)='fd', 0x0, r0) fsconfig$FSCONFIG_CMD_CREATE(r1, 0x6, 0x0, 0x0, 0x0) r4 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) close_range(r4, 0xffffffffffffffff, 0x0) 2.38723094s ago: executing program 0 (id=573): r0 = syz_open_dev$I2C(0x0, 0x0, 0x80) ioctl$EVIOCGKEYCODE_V2(0xffffffffffffffff, 0x80284504, 0x0) ioctl$I2C_SMBUS(r0, 0x720, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x0, 0x0) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) openat$ptmx(0xffffffffffffff9c, 0x0, 0x60081, 0x0) syz_open_dev$sndctrl(0x0, 0x2, 0x0) madvise(&(0x7f0000c00000/0x400000)=nil, 0x400000, 0xe) r4 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r4}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) r5 = userfaultfd(0x801) ioctl$UFFDIO_API(r5, 0xc018aa3f, 0x0) syz_io_uring_setup(0x50d0, &(0x7f0000000000)={0x0, 0xfffffffd, 0x2, 0x2, 0x332}, &(0x7f0000000100), &(0x7f0000000180), &(0x7f0000000000)) 2.384552437s ago: executing program 3 (id=574): openat$ptmx(0xffffffffffffff9c, 0x0, 0x240, 0x0) syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) socket(0x2b, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x3) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000002c0)) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) getsockopt$rose(0xffffffffffffffff, 0x104, 0x4, 0x0, 0x0) r0 = syz_open_dev$MSR(&(0x7f0000000100), 0x0, 0x0) r1 = pidfd_getfd(0xffffffffffffffff, 0xffffffffffffffff, 0x0) mknodat(r1, &(0x7f0000000040)='./file0\x00', 0x4, 0x4) read$msr(r0, &(0x7f0000001a40)=""/102392, 0x18ff8) socket$nl_generic(0x10, 0x3, 0x10) semctl$IPC_SET(0x0, 0x0, 0x1, 0x0) r2 = open_tree(0xffffffffffffff9c, 0x0, 0x9901) mount_setattr(r2, &(0x7f0000001d80)='.\x00', 0x0, &(0x7f0000000080)={0xb, 0x0, 0x40000}, 0x20) r3 = open$dir(&(0x7f0000000100)='./file0\x00', 0x80000, 0x113) write$vga_arbiter(0xffffffffffffffff, &(0x7f0000000240)=@target={'target ', {'PCI:', '15', ':', 'd', ':', '6', '.', 'c'}}, 0x14) mmap$xdp(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x12, r3, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x2, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000300000000000000fe020010850000000700000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x100, 0x70, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000005c0)={r4, 0x0, 0x30, 0x0, @val=@uprobe_multi={&(0x7f0000000140)='./file0\x00', 0x0}}, 0x40) 2.383110603s ago: executing program 1 (id=575): r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r0, &(0x7f00000002c0)={0xa, 0x4e22, 0x0, @local, 0xb}, 0x1c) listen(r0, 0x2) r1 = syz_init_net_socket$ax25(0x3, 0x5, 0xca) bind$ax25(r1, &(0x7f0000000280)={{0x3, @default, 0x1}, [@null, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @bcast, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @bcast, @default, @bcast, @null]}, 0x48) r2 = syz_open_procfs(0x0, &(0x7f0000000040)='smaps_rollup\x00') lseek(r2, 0x2000, 0x0) io_uring_setup(0xf06, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000200)={0x8, 0x8a}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x3) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) r4 = socket$kcm(0x10, 0x2, 0x0) ioctl$sock_SIOCGIFVLAN_ADD_VLAN_CMD(r4, 0x8982, &(0x7f0000000400)={0x0, 'batadv0\x00', {0x5}}) socket$inet_udp(0x2, 0x2, 0x0) r5 = syz_init_net_socket$rose(0xb, 0x5, 0x0) connect$rose(r5, &(0x7f0000000240)=@short={0xb, @dev={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, 0x1, @null}, 0x1c) syz_emit_ethernet(0x56, &(0x7f0000000380)={@local, @remote, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "c4d600", 0x20, 0x6, 0x1, @local, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x8, 0x2, 0x0, 0x0, 0x10, {[@mptcp=@capable={0x1e, 0xc, 0x6, 0x8, 0x1, 0x10000}]}}}}}}}}, 0x0) 2.381504877s ago: executing program 2 (id=576): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x6, 0x100000b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0xb02, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r1 = socket$nl_generic(0x10, 0x3, 0x10) bind$bt_l2cap(0xffffffffffffffff, 0x0, 0x0) syz_emit_vhci(0x0, 0x16) r2 = syz_genetlink_get_family_id$nbd(&(0x7f00000000c0), 0xffffffffffffffff) r3 = syz_init_net_socket$nfc_llcp(0x27, 0x3, 0x1) r4 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(r4, 0x0, &(0x7f0000000000)) bind$nfc_llcp(r3, 0x0, 0x0) r5 = syz_init_net_socket$nfc_llcp(0x27, 0x3, 0x1) bind$nfc_llcp(r5, 0x0, 0x0) close(r4) getsockopt$inet6_buf(0xffffffffffffffff, 0x29, 0xcc, 0x0, 0x0) sendmsg$NBD_CMD_CONNECT(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000003c0)=ANY=[@ANYBLOB='h\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="010000000000000000000100000008000100400000000c000200700f0000000000000c00060003000000000000000a000a00272d5d29212b0000140007"], 0x6c}}, 0x0) bpf$LINK_GET_FD_BY_ID(0x1e, &(0x7f0000000100)=0xffffffffffffffff, 0x4) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1) sendmsg$TIPC_NL_KEY_SET(r1, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4000004}, 0x4) 0s ago: executing program 3 (id=577): prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) syz_open_dev$evdev(0x0, 0x0, 0x802) io_setup(0x4, 0x0) madvise(&(0x7f0000000000/0x3000)=nil, 0x7fffffffffffffff, 0x3) bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0x16, 0x0, 0x4, 0xffff, 0x0, 0x1}, 0x50) r3 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_int(r3, 0x0, 0xf, &(0x7f0000000000)=0x5, 0x4) r4 = socket$inet6(0xa, 0x2, 0x0) io_destroy(0x0) sendmmsg$inet(r4, &(0x7f00000016c0)=[{{&(0x7f0000000680)={0x2, 0x4e24, @loopback}, 0x10, 0x0}}], 0x1, 0x4084) kernel console output (not intermixed with test programs): ntered blocking state [ 253.459319][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 253.491802][ T49] bridge0: port 2(bridge_slave_1) entered blocking state [ 253.498988][ T49] bridge0: port 2(bridge_slave_1) entered forwarding state [ 253.577476][ T998] hsr_slave_0: left promiscuous mode [ 253.587767][ T998] hsr_slave_1: left promiscuous mode [ 253.601901][ T998] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 253.611811][ T998] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 253.624878][ T998] hsr_slave_0: left promiscuous mode [ 253.632134][ T998] hsr_slave_1: left promiscuous mode [ 253.638471][ T998] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 253.648352][ T998] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 253.662440][ T998] hsr_slave_0: left promiscuous mode [ 253.669056][ T998] hsr_slave_1: left promiscuous mode [ 253.679184][ T998] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 253.688639][ T998] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 253.898463][ T998] team0 (unregistering): Port device team_slave_1 removed [ 253.922663][ T998] team0 (unregistering): Port device team_slave_0 removed [ 254.305329][ T998] team0 (unregistering): Port device team_slave_1 removed [ 254.328068][ T998] team0 (unregistering): Port device team_slave_0 removed [ 254.616201][ T998] team0 (unregistering): Port device team_slave_1 removed [ 254.632894][ T998] team0 (unregistering): Port device team_slave_0 removed [ 254.776980][ T6514] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 254.814543][ T6514] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 254.838134][ T6514] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 254.891936][ T6514] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 255.033473][ T6602] netdevsim netdevsim8 netdevsim0: renamed from eth0 [ 255.064208][ T6602] netdevsim netdevsim8 netdevsim1: renamed from eth1 [ 255.090208][ T1296] ieee802154 phy0 wpan0: encryption failed: -22 [ 255.096787][ T1296] ieee802154 phy1 wpan1: encryption failed: -22 [ 255.135062][ T6602] netdevsim netdevsim8 netdevsim2: renamed from eth2 [ 255.184928][ T6602] netdevsim netdevsim8 netdevsim3: renamed from eth3 [ 255.425958][ T6514] 8021q: adding VLAN 0 to HW filter on device bond0 [ 255.536810][ T6514] 8021q: adding VLAN 0 to HW filter on device team0 [ 255.594180][ T1094] bridge0: port 1(bridge_slave_0) entered blocking state [ 255.601400][ T1094] bridge0: port 1(bridge_slave_0) entered forwarding state [ 255.643504][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 255.650707][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 255.682757][ T6602] 8021q: adding VLAN 0 to HW filter on device bond0 [ 255.752426][ T6560] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 255.847791][ T6602] 8021q: adding VLAN 0 to HW filter on device team0 [ 255.957261][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 255.964494][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 256.003666][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 256.010929][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 256.535825][ T6514] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 256.624069][ T6560] veth0_vlan: entered promiscuous mode [ 256.729880][ T6560] veth1_vlan: entered promiscuous mode [ 256.743226][ T6602] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 256.789930][ T6560] veth0_macvtap: entered promiscuous mode [ 256.817585][ T6560] veth1_macvtap: entered promiscuous mode [ 256.891788][ T6560] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 256.926968][ T6560] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 256.960637][ T998] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 256.969582][ T998] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 257.020486][ T998] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 257.040790][ T1094] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 257.227162][ T998] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 257.249870][ T998] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 257.301875][ T49] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 257.309761][ T49] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 257.446273][ T6514] veth0_vlan: entered promiscuous mode [ 257.513504][ T6514] veth1_vlan: entered promiscuous mode [ 259.221732][ T6921] No such timeout policy "syz1" [ 259.234258][ T6514] veth0_macvtap: entered promiscuous mode [ 260.393627][ T6514] veth1_macvtap: entered promiscuous mode [ 260.490133][ T6514] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 260.572737][ T6514] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 260.616868][ T76] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 260.666465][ T76] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 260.700887][ T76] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 260.816545][ T76] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 260.899228][ T6602] veth0_vlan: entered promiscuous mode [ 261.003038][ T6602] veth1_vlan: entered promiscuous mode [ 261.792603][ T6946] netlink: 4 bytes leftover after parsing attributes in process `syz.3.158'. [ 263.336656][ T6602] veth0_macvtap: entered promiscuous mode [ 263.391128][ T6602] veth1_macvtap: entered promiscuous mode [ 263.621949][ T5842] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 263.633204][ T5842] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 263.648574][ T5842] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 263.932520][ T5842] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 263.950366][ T5842] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 264.784918][ T6602] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 264.836997][ T6602] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 264.926764][ T6947] syz.4.172 (6947) used greatest stack depth: 18944 bytes left [ 265.273500][ T6967] netlink: 24 bytes leftover after parsing attributes in process `syz.5.164'. [ 266.676247][ T5842] Bluetooth: hci2: command tx timeout [ 267.526406][ T6395] netdevsim netdevsim8 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 268.849534][ T5842] Bluetooth: hci2: command tx timeout [ 269.704111][ T6395] netdevsim netdevsim8 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 269.716985][ T6395] netdevsim netdevsim8 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 269.770652][ T6395] netdevsim netdevsim8 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 270.098743][ T6991] loop4: detected capacity change from 0 to 40427 [ 270.129774][ T6991] F2FS-fs (loop4): Invalid log_blocksize (268), supports only 12 [ 270.137686][ T6991] F2FS-fs (loop4): Can't find valid F2FS filesystem in 1th superblock [ 270.148837][ T6991] F2FS-fs (loop4): invalid crc value [ 270.284574][ T6991] F2FS-fs (loop4): f2fs_recover_fsync_data: recovery fsync data, check_only: 0 [ 270.374829][ T160] netdevsim netdevsim6 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 270.552678][ T6991] F2FS-fs (loop4): Try to recover 1th superblock, ret: 0 [ 270.559843][ T6991] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5 [ 271.523184][ T30] audit: type=1800 audit(1774934082.387:6): pid=7004 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.171" name="bus" dev="loop4" ino=10 res=0 errno=0 [ 271.543531][ T5842] Bluetooth: hci2: command tx timeout [ 272.061258][ T7002] No such timeout policy "syz1" [ 273.557273][ T51] Bluetooth: hci2: command tx timeout [ 274.796172][ T160] netdevsim netdevsim6 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 275.649822][ T160] netdevsim netdevsim6 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 275.700174][ T7014] could not allocate digest TFM handle blake2s-224-generic [ 275.814814][ T7020] pimreg: entered allmulticast mode [ 276.156726][ T160] netdevsim netdevsim6 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 276.620521][ T6080] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 276.630475][ T6080] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 276.832045][ T7029] loop7: detected capacity change from 0 to 512 [ 277.040111][ T1112] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 277.071177][ T1112] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 277.117630][ T7029] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 277.242309][ T7029] ext4 filesystem being mounted at /4/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 279.356897][ T160] bridge_slave_1: left allmulticast mode [ 279.369331][ T6560] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 279.450350][ T5842] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 279.463445][ T5842] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 279.472523][ T5842] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 279.481750][ T160] bridge_slave_1: left promiscuous mode [ 279.498222][ T5842] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 279.506210][ T5842] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 279.560841][ T160] bridge0: port 2(bridge_slave_1) entered disabled state [ 280.419604][ T160] bridge_slave_0: left allmulticast mode [ 280.430983][ T160] bridge_slave_0: left promiscuous mode [ 280.437295][ T160] bridge0: port 1(bridge_slave_0) entered disabled state [ 281.571857][ T5842] Bluetooth: hci0: command tx timeout [ 283.631355][ T5842] Bluetooth: hci0: command tx timeout [ 284.615174][ T7082] loop3: detected capacity change from 0 to 40427 [ 284.808592][ T790] IPVS: starting estimator thread 0... [ 285.231898][ T7086] IPVS: using max 23 ests per chain, 55200 per kthread [ 285.249321][ T7082] F2FS-fs (loop3): Invalid log_blocksize (268), supports only 12 [ 285.257252][ T7082] F2FS-fs (loop3): Can't find valid F2FS filesystem in 1th superblock [ 286.200023][ T5842] Bluetooth: hci0: command tx timeout [ 286.253481][ T7082] F2FS-fs (loop3): invalid crc value [ 286.937074][ T7082] F2FS-fs (loop3): f2fs_recover_fsync_data: recovery fsync data, check_only: 0 [ 288.330677][ T5842] Bluetooth: hci0: command tx timeout [ 288.403634][ T160] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 289.001143][ T160] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 289.195137][ T160] bond0 (unregistering): Released all slaves [ 289.649585][ T6954] chnl_net:caif_netlink_parms(): no params data found [ 291.169997][ T7112] loop3: detected capacity change from 0 to 32771 [ 291.177528][ T7112] gfs2: Unknown parameter 'g”·;?—EűŁ#-Yąä§8' [ 292.449198][ T160] hsr_slave_0: left promiscuous mode [ 293.303176][ T160] hsr_slave_1: left promiscuous mode [ 293.309982][ T160] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 293.317943][ T160] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 293.342068][ T160] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 293.349492][ T160] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 293.832149][ T7127] loop4: detected capacity change from 0 to 32771 [ 293.839479][ T7127] gfs2: Unknown parameter 'g”·;?—EűŁ#-Yąä§8' [ 294.065963][ T160] veth1_macvtap: left promiscuous mode [ 294.225583][ T160] veth0_macvtap: left promiscuous mode [ 294.252218][ T160] veth1_vlan: left promiscuous mode [ 294.710174][ T160] veth0_vlan: left promiscuous mode [ 296.125750][ T7143] loop5: detected capacity change from 0 to 256 [ 296.410542][ T7148] loop3: detected capacity change from 0 to 512 [ 296.422484][ T7148] EXT4-fs: Ignoring removed nomblk_io_submit option [ 297.896943][ T7150] Process accounting resumed [ 298.045627][ T7149] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 298.056885][ T7149] block device autoloading is deprecated and will be removed. [ 298.156878][ T7148] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=8857e02c, mo2=0002] [ 298.225992][ T7148] EXT4-fs error (device loop3): ext4_free_branches:1020: inode #11: comm syz.3.203: invalid indirect mapped block 2683928664 (level 1) [ 298.240692][ T7148] loop3: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 298.250441][ C1] EXT4-fs (loop3): error count since last fsck: 1 [ 298.266205][ C1] EXT4-fs (loop3): initial error at time 1774934109: ext4_free_branches:1020: inode 11 [ 298.275940][ C1] EXT4-fs (loop3): last error at time 1774934109: ext4_free_branches:1020: inode 11 [ 298.432449][ T7148] EXT4-fs (loop3): Remounting filesystem read-only [ 298.443605][ T7148] EXT4-fs (loop3): 1 truncate cleaned up [ 298.509188][ T7148] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 299.271849][ T7162] loop4: detected capacity change from 0 to 128 [ 299.569984][ T7162] syz.4.205: attempt to access beyond end of device [ 299.569984][ T7162] loop4: rw=2049, sector=138, nr_sectors = 112 limit=128 [ 299.893443][ T5829] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 300.255409][ T160] team0 (unregistering): Port device team_slave_1 removed [ 300.391104][ T160] team0 (unregistering): Port device team_slave_0 removed [ 301.205336][ T30] audit: type=1800 audit(1774934112.397:7): pid=7179 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.209" name="bus" dev="tmpfs" ino=346 res=0 errno=0 [ 301.805669][ T7169] faux_driver regulatory: loading /lib/firmware/regulatory.db failed with error -4 [ 301.815610][ T7169] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -4 [ 301.827194][ T7169] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db [ 305.383144][ T7200] evm: overlay not supported [ 306.085061][ T7199] loop7: detected capacity change from 0 to 1024 [ 306.210643][ T6954] bridge0: port 1(bridge_slave_0) entered blocking state [ 306.217836][ T6954] bridge0: port 1(bridge_slave_0) entered disabled state [ 306.265352][ T49] hfsplus: b-tree write err: -5, ino 3 [ 306.300750][ T6954] bridge_slave_0: entered allmulticast mode [ 306.338747][ T6954] bridge_slave_0: entered promiscuous mode [ 306.384311][ T6954] bridge0: port 2(bridge_slave_1) entered blocking state [ 306.415941][ T6954] bridge0: port 2(bridge_slave_1) entered disabled state [ 306.451003][ T6954] bridge_slave_1: entered allmulticast mode [ 306.459338][ T6954] bridge_slave_1: entered promiscuous mode [ 307.935821][ T6954] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 308.018303][ T6954] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 308.454541][ T7221] netlink: zone id is out of range [ 308.461826][ T7221] netlink: zone id is out of range [ 308.467358][ T7221] netlink: zone id is out of range [ 308.472580][ T7221] netlink: zone id is out of range [ 308.477720][ T7221] netlink: zone id is out of range [ 308.482893][ T7221] netlink: zone id is out of range [ 308.488033][ T7221] netlink: zone id is out of range [ 308.493210][ T7221] netlink: zone id is out of range [ 308.498320][ T7221] netlink: zone id is out of range [ 308.503497][ T7221] netlink: zone id is out of range [ 308.877710][ T7230] loop4: detected capacity change from 0 to 8 [ 308.888791][ T7230] MTD: Attempt to mount non-MTD device "/dev/loop4" [ 308.923593][ T7230] cramfs: Error -5 while decompressing! [ 308.929400][ T7230] cramfs: ffffffff9b2af562(26)->ffff888046116000(4096) [ 308.936806][ T7230] cramfs: Error -3 while decompressing! [ 308.943471][ T7230] cramfs: ffffffff9b2af57c(16)->ffff888046117000(4096) [ 308.951546][ T7230] cramfs: Error -5 while decompressing! [ 308.957230][ T7230] cramfs: ffffffff9b2af562(26)->ffff888046116000(4096) [ 308.987667][ T30] audit: type=1800 audit(1774934120.157:8): pid=7230 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.4.218" name="file2" dev="loop4" ino=348 res=0 errno=0 [ 309.622809][ T5853] udevd[5853]: incorrect cramfs checksum on /dev/loop4 [ 309.642532][ T6954] team0: Port device team_slave_0 added [ 309.772517][ T5853] udevd[5853]: incorrect cramfs checksum on /dev/loop4 [ 309.858770][ T6954] team0: Port device team_slave_1 added [ 310.282772][ T6954] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 311.018320][ T6954] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 311.294409][ T6954] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 311.598599][ T6954] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 311.607253][ T6954] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 311.634832][ T6954] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 313.357461][ T7259] netlink: 8 bytes leftover after parsing attributes in process `syz.7.223'. [ 314.465583][ T7055] chnl_net:caif_netlink_parms(): no params data found [ 314.680171][ T7267] loop4: detected capacity change from 0 to 1024 [ 315.497717][ T160] netdevsim netdevsim8 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 315.535019][ T7269] loop7: detected capacity change from 0 to 1024 [ 315.625065][ T7092] hfsplus: b-tree write err: -5, ino 3 [ 315.763414][ T7092] hfsplus: b-tree write err: -5, ino 3 [ 315.770098][ T6954] hsr_slave_0: entered promiscuous mode [ 315.822960][ T6954] hsr_slave_1: entered promiscuous mode [ 315.829442][ T6954] debugfs: 'hsr0' already exists in 'hsr' [ 315.871169][ T6954] Cannot create hsr debugfs directory [ 315.996333][ T7273] delete_channel: no stack [ 316.518300][ T1296] ieee802154 phy0 wpan0: encryption failed: -22 [ 316.525444][ T1296] ieee802154 phy1 wpan1: encryption failed: -22 [ 319.010184][ T6027] IPVS: starting estimator thread 0... [ 319.117384][ T7284] IPVS: using max 22 ests per chain, 52800 per kthread [ 319.256130][ T160] netdevsim netdevsim8 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 319.451429][ T7272] netdevsim netdevsim4: loading /lib/firmware/. failed with error -22 [ 319.459852][ T7272] netdevsim netdevsim4: Direct firmware load for . failed with error -22 [ 319.513075][ T7272] netdevsim netdevsim4: Falling back to sysfs fallback for: . [ 321.379664][ T160] netdevsim netdevsim8 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 322.736467][ T7319] loop7: detected capacity change from 0 to 512 [ 322.991063][ T7319] EXT4-fs error (device loop7): ext4_orphan_get:1397: inode #15: comm syz.7.237: inode has both inline data and extents flags [ 323.600538][ T7319] loop7: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 323.601021][ T7319] EXT4-fs error (device loop7): ext4_orphan_get:1400: comm syz.7.237: couldn't read orphan inode 15 (err -117) [ 323.622009][ C0] EXT4-fs (loop7): error count since last fsck: 1 [ 323.622047][ C0] EXT4-fs (loop7): initial error at time 1774934134: ext4_orphan_get:1397: inode 15 [ 323.622102][ C0] EXT4-fs (loop7): last error at time 1774934134: ext4_orphan_get:1397: inode 15 [ 323.699450][ T7319] loop7: lost filesystem error report for type 5 error -117 [ 323.702778][ T7319] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 323.777975][ T7329] loop5: detected capacity change from 0 to 1024 [ 325.614811][ T160] netdevsim netdevsim8 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 325.698436][ T6560] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 325.773279][ T7055] bridge0: port 1(bridge_slave_0) entered blocking state [ 325.827144][ T7055] bridge0: port 1(bridge_slave_0) entered disabled state [ 325.852545][ T7092] hfsplus: b-tree write err: -5, ino 3 [ 325.877474][ T7055] bridge_slave_0: entered allmulticast mode [ 325.881854][ T5842] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 325.895238][ T5842] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 325.903916][ T5842] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 325.911974][ T7055] bridge_slave_0: entered promiscuous mode [ 325.927869][ T5842] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 325.948328][ T5842] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 326.032489][ T7055] bridge0: port 2(bridge_slave_1) entered blocking state [ 326.080660][ T7055] bridge0: port 2(bridge_slave_1) entered disabled state [ 326.101631][ T7055] bridge_slave_1: entered allmulticast mode [ 326.357312][ T7055] bridge_slave_1: entered promiscuous mode [ 326.507452][ T7344] loop5: detected capacity change from 0 to 1024 [ 326.682489][ T7347] netlink: 28 bytes leftover after parsing attributes in process `syz.3.241'. [ 327.663333][ T7055] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 327.869421][ T36] hfsplus: b-tree write err: -5, ino 3 [ 327.892578][ T7055] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 327.961920][ T7350] loop3: detected capacity change from 0 to 1024 [ 328.030696][ T51] Bluetooth: hci6: command tx timeout [ 328.159883][ T7352] loop4: detected capacity change from 0 to 256 [ 328.211744][ T7092] hfsplus: b-tree write err: -5, ino 3 [ 328.216913][ T7354] loop5: detected capacity change from 0 to 2048 [ 328.805767][ T7357] NILFS (loop5): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 330.155677][ T51] Bluetooth: hci6: command tx timeout [ 331.532714][ T7055] team0: Port device team_slave_0 added [ 331.567718][ T7055] team0: Port device team_slave_1 added [ 331.826449][ T7055] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 331.840647][ T7055] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 331.951145][ T7055] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 332.192292][ T5842] Bluetooth: hci6: command tx timeout [ 332.239706][ T160] bridge_slave_1: left allmulticast mode [ 332.253590][ T160] bridge_slave_1: left promiscuous mode [ 332.264791][ T160] bridge0: port 2(bridge_slave_1) entered disabled state [ 332.961736][ T160] bridge_slave_0: left allmulticast mode [ 332.967440][ T160] bridge_slave_0: left promiscuous mode [ 332.998061][ T160] bridge0: port 1(bridge_slave_0) entered disabled state [ 334.095163][ T5842] Bluetooth: hci3: command 0x0406 tx timeout [ 334.129437][ T6027] IPVS: starting estimator thread 0... [ 334.232401][ T7395] IPVS: using max 23 ests per chain, 55200 per kthread [ 334.270836][ T51] Bluetooth: hci6: command tx timeout [ 334.490683][ T160] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 334.522319][ T160] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 334.533272][ T160] bond0 (unregistering): Released all slaves [ 334.568204][ T7055] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 334.587638][ T7055] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 334.641700][ T7055] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 334.768797][ T7055] hsr_slave_0: entered promiscuous mode [ 334.881903][ T7055] hsr_slave_1: entered promiscuous mode [ 334.897125][ T7055] debugfs: 'hsr0' already exists in 'hsr' [ 334.903011][ T7055] Cannot create hsr debugfs directory [ 334.989996][ T7401] loop3: detected capacity change from 0 to 64 [ 335.518716][ T7405] loop5: detected capacity change from 0 to 1024 [ 337.058612][ T12] hfsplus: b-tree write err: -5, ino 3 [ 338.441297][ T7413] CIFS: No dialect specified on mount. Default has changed to a more secure dialect, SMB2.1 or later (e.g. SMB3.1.1), from CIFS (SMB1). To use the less secure SMB1 dialect to access old servers which do not support SMB3.1.1 (or even SMB3 or SMB2.1) specify vers=1.0 on mount. [ 338.467679][ T7413] CIFS mount error: No usable UNC path provided in device string! [ 338.467679][ T7413] [ 338.478011][ T7413] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string! [ 340.018497][ T5842] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 340.033626][ T5842] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 340.043361][ T5842] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 340.074714][ T5842] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 340.105620][ T5842] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 340.214881][ T7429] netlink: 28 bytes leftover after parsing attributes in process `syz.7.254'. [ 342.270634][ T5842] Bluetooth: hci2: command tx timeout [ 343.433593][ T7440] loop7: detected capacity change from 0 to 256 [ 343.661062][ T7334] chnl_net:caif_netlink_parms(): no params data found [ 344.360674][ T5842] Bluetooth: hci2: command tx timeout [ 344.428431][ T160] hsr_slave_0: left promiscuous mode [ 344.460460][ T160] hsr_slave_1: left promiscuous mode [ 344.491499][ T160] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 344.498899][ T160] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 344.575383][ T160] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 344.600454][ T160] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 344.648304][ T160] veth1_macvtap: left promiscuous mode [ 344.660497][ T160] veth0_macvtap: left promiscuous mode [ 344.666100][ T160] veth1_vlan: left promiscuous mode [ 344.686321][ T160] veth0_vlan: left promiscuous mode [ 345.947616][ T7463] loop4: detected capacity change from 0 to 512 [ 345.960113][ T7463] EXT4-fs: Ignoring removed nomblk_io_submit option [ 346.042095][ T7463] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=8857e02c, mo2=0002] [ 346.083150][ T7463] EXT4-fs error (device loop4): ext4_free_branches:1020: inode #11: comm syz.4.262: invalid indirect mapped block 2683928664 (level 1) [ 346.097218][ T7463] loop4: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 346.100414][ C1] EXT4-fs (loop4): error count since last fsck: 1 [ 346.116002][ C1] EXT4-fs (loop4): initial error at time 1774934157: ext4_free_branches:1020: inode 11 [ 346.125719][ C1] EXT4-fs (loop4): last error at time 1774934157: ext4_free_branches:1020: inode 11 [ 346.175105][ T7463] EXT4-fs (loop4): Remounting filesystem read-only [ 346.192831][ T7463] EXT4-fs (loop4): 1 truncate cleaned up [ 346.285796][ T7463] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 346.534249][ T5842] Bluetooth: hci2: command tx timeout [ 348.045234][ T7474] loop3: detected capacity change from 0 to 1024 [ 348.426610][ T5834] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 348.591134][ T5842] Bluetooth: hci2: command tx timeout [ 348.960251][ T6080] hfsplus: b-tree write err: -5, ino 3 [ 350.170913][ T7487] loop3: detected capacity change from 0 to 512 [ 350.300754][ T7487] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 351.584779][ T160] team0 (unregistering): Port device team_slave_1 removed [ 351.643051][ T160] team0 (unregistering): Port device team_slave_0 removed [ 352.102664][ T7459] veth0: entered promiscuous mode [ 352.108157][ T7459] vlan2: entered promiscuous mode [ 352.132891][ T7477] faux_driver regulatory: loading /lib/firmware/regulatory.db failed with error -4 [ 352.266665][ T7477] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -4 [ 352.310762][ T7477] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db [ 352.641272][ T5829] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 352.690149][ T7334] bridge0: port 1(bridge_slave_0) entered blocking state [ 352.697465][ T7334] bridge0: port 1(bridge_slave_0) entered disabled state [ 352.705350][ T7334] bridge_slave_0: entered allmulticast mode [ 352.761384][ T7334] bridge_slave_0: entered promiscuous mode [ 352.780332][ T7334] bridge0: port 2(bridge_slave_1) entered blocking state [ 352.801702][ T7334] bridge0: port 2(bridge_slave_1) entered disabled state [ 352.809091][ T7334] bridge_slave_1: entered allmulticast mode [ 352.842245][ T7334] bridge_slave_1: entered promiscuous mode [ 352.903185][ T7334] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 352.918989][ T7334] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 352.993831][ T7334] team0: Port device team_slave_0 added [ 353.024018][ T7334] team0: Port device team_slave_1 added [ 353.094636][ T7334] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 353.109575][ T7334] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 353.138006][ T7334] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 353.156486][ T7334] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 353.171520][ T7334] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 353.208031][ T7334] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 353.322371][ T160] bridge_slave_1: left allmulticast mode [ 353.328058][ T160] bridge_slave_1: left promiscuous mode [ 353.335366][ T160] bridge0: port 2(bridge_slave_1) entered disabled state [ 353.345129][ T160] bridge_slave_0: left allmulticast mode [ 353.351370][ T160] bridge_slave_0: left promiscuous mode [ 353.357160][ T160] bridge0: port 1(bridge_slave_0) entered disabled state [ 353.371413][ T160] bridge_slave_1: left allmulticast mode [ 353.377079][ T160] bridge_slave_1: left promiscuous mode [ 353.384620][ T160] bridge0: port 2(bridge_slave_1) entered disabled state [ 353.396139][ T160] bridge_slave_0: left allmulticast mode [ 353.403124][ T160] bridge_slave_0: left promiscuous mode [ 353.408947][ T160] bridge0: port 1(bridge_slave_0) entered disabled state [ 353.571908][ T160] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 353.586760][ T160] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 353.599974][ T160] bond0 (unregistering): Released all slaves [ 353.712863][ T160] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 353.726857][ T160] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 353.738261][ T160] bond0 (unregistering): Released all slaves [ 353.759488][ T7334] hsr_slave_0: entered promiscuous mode [ 353.774161][ T7334] hsr_slave_1: entered promiscuous mode [ 353.781380][ T7334] debugfs: 'hsr0' already exists in 'hsr' [ 353.787147][ T7334] Cannot create hsr debugfs directory [ 353.807037][ T7420] chnl_net:caif_netlink_parms(): no params data found [ 353.963006][ T160] hsr_slave_0: left promiscuous mode [ 353.969090][ T160] hsr_slave_1: left promiscuous mode [ 353.975422][ T160] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 353.984077][ T160] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 353.992749][ T160] hsr_slave_0: left promiscuous mode [ 354.000218][ T160] hsr_slave_1: left promiscuous mode [ 354.006364][ T160] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 354.014369][ T160] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 354.116498][ T160] team0 (unregistering): Port device team_slave_1 removed [ 354.135885][ T160] team0 (unregistering): Port device team_slave_0 removed [ 354.348846][ T160] team0 (unregistering): Port device team_slave_1 removed [ 354.366501][ T160] team0 (unregistering): Port device team_slave_0 removed [ 354.576154][ T7420] bridge0: port 1(bridge_slave_0) entered blocking state [ 354.593758][ T7420] bridge0: port 1(bridge_slave_0) entered disabled state [ 354.601223][ T7420] bridge_slave_0: entered allmulticast mode [ 354.610243][ T7420] bridge_slave_0: entered promiscuous mode [ 354.633509][ T7420] bridge0: port 2(bridge_slave_1) entered blocking state [ 354.659850][ T7420] bridge0: port 2(bridge_slave_1) entered disabled state [ 354.667613][ T7420] bridge_slave_1: entered allmulticast mode [ 354.675332][ T7420] bridge_slave_1: entered promiscuous mode [ 354.794032][ T7420] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 354.822458][ T7420] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 354.939311][ T7420] team0: Port device team_slave_0 added [ 354.949109][ T7420] team0: Port device team_slave_1 added [ 355.087040][ T7420] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 355.110568][ T7420] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 355.167736][ T7420] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 355.244288][ T7420] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 355.253425][ T7420] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 355.280212][ T7420] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 355.408861][ T7420] hsr_slave_0: entered promiscuous mode [ 355.415824][ T7420] hsr_slave_1: entered promiscuous mode [ 355.422534][ T7420] debugfs: 'hsr0' already exists in 'hsr' [ 355.429061][ T7420] Cannot create hsr debugfs directory [ 355.743379][ T7334] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 355.766421][ T7334] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 355.807962][ T7334] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 355.823870][ T7334] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 356.073673][ T7334] 8021q: adding VLAN 0 to HW filter on device bond0 [ 356.108942][ T7334] 8021q: adding VLAN 0 to HW filter on device team0 [ 356.200472][ T160] bridge0: port 1(bridge_slave_0) entered blocking state [ 356.207673][ T160] bridge0: port 1(bridge_slave_0) entered forwarding state [ 356.242490][ T160] bridge0: port 2(bridge_slave_1) entered blocking state [ 356.249694][ T160] bridge0: port 2(bridge_slave_1) entered forwarding state [ 356.269465][ T7420] netdevsim netdevsim8 netdevsim0: renamed from eth0 [ 356.307737][ T7420] netdevsim netdevsim8 netdevsim1: renamed from eth1 [ 356.331654][ T7420] netdevsim netdevsim8 netdevsim2: renamed from eth2 [ 356.360733][ T7420] netdevsim netdevsim8 netdevsim3: renamed from eth3 [ 356.380326][ T7334] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 356.599745][ T7420] 8021q: adding VLAN 0 to HW filter on device bond0 [ 356.654801][ T7420] 8021q: adding VLAN 0 to HW filter on device team0 [ 356.678572][ T13] bridge0: port 1(bridge_slave_0) entered blocking state [ 356.686002][ T13] bridge0: port 1(bridge_slave_0) entered forwarding state [ 356.721048][ T1112] bridge0: port 2(bridge_slave_1) entered blocking state [ 356.728237][ T1112] bridge0: port 2(bridge_slave_1) entered forwarding state [ 356.885028][ T7334] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 357.209080][ T7420] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 357.465395][ T7334] veth0_vlan: entered promiscuous mode [ 357.504078][ T7334] veth1_vlan: entered promiscuous mode [ 357.596219][ T7334] veth0_macvtap: entered promiscuous mode [ 357.624276][ T7334] veth1_macvtap: entered promiscuous mode [ 357.669315][ T7334] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 357.715291][ T7334] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 357.760568][ T13] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 357.776575][ T6080] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 357.804054][ T6080] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 357.816805][ T6080] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 357.997312][ T83] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 358.028649][ T83] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 358.059411][ T7420] veth0_vlan: entered promiscuous mode [ 358.099998][ T7420] veth1_vlan: entered promiscuous mode [ 358.163454][ T7092] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 358.187909][ T7092] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 358.203756][ T7420] veth0_macvtap: entered promiscuous mode [ 358.232790][ T7420] veth1_macvtap: entered promiscuous mode [ 358.284575][ T7420] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 358.315668][ T7420] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 358.421610][ T160] netdevsim netdevsim8 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 358.459462][ T160] netdevsim netdevsim8 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 359.631459][ T7616] netlink: 4 bytes leftover after parsing attributes in process `syz.3.280'. [ 361.142677][ T7626] loop5: detected capacity change from 0 to 512 [ 361.150208][ T7626] EXT4-fs: Ignoring removed mblk_io_submit option [ 361.157048][ T7626] ext3: Unknown parameter 'context' [ 361.765626][ T7092] netdevsim netdevsim8 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 361.946191][ T83] netdevsim netdevsim8 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 365.677689][ T7643] loop5: detected capacity change from 0 to 8 [ 366.127260][ T7648] loop7: detected capacity change from 0 to 32768 [ 366.466339][ T7648] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop7 (7:7) scanned by syz.7.275 (7648) [ 366.474678][ T6080] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 367.063918][ T7658] SQUASHFS error: lzo decompression failed, data probably corrupt [ 367.072107][ T7658] SQUASHFS error: Failed to read block 0x0: -5 [ 367.078497][ T7658] SQUASHFS error: Failed to read block 0xff: -5 [ 367.085538][ T7658] SQUASHFS error: lzo decompression failed, data probably corrupt [ 367.093505][ T7658] SQUASHFS error: Failed to read block 0x0: -5 [ 367.240938][ T7658] SQUASHFS error: lzo decompression failed, data probably corrupt [ 367.248858][ T7658] SQUASHFS error: Failed to read block 0x0: -5 [ 367.412636][ T7658] SQUASHFS error: Failed to read block 0x6a4: -5 [ 367.419197][ T7658] SQUASHFS error: Unable to read metadata cache entry [6a2] [ 367.421045][ T30] audit: type=1800 audit(1774934178.287:9): pid=7658 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.5.272" name="file2" dev="loop5" ino=3 res=0 errno=0 [ 367.426614][ T7658] SQUASHFS error: read_indexes: reading block [6a2:0] [ 367.454849][ T6080] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 367.468892][ T7658] SQUASHFS error: Failed to read block 0x0: -5 [ 367.475578][ T7658] SQUASHFS error: Unable to read metadata cache entry [6a2] [ 367.482920][ T7658] SQUASHFS error: read_indexes: reading block [6a2:0] [ 367.489751][ T7658] SQUASHFS error: Failed to read block 0x0: -5 [ 368.163528][ T30] audit: type=1800 audit(1774934178.447:10): pid=7658 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.5.272" name="file2" dev="loop5" ino=3 res=0 errno=0 [ 368.242108][ T7648] BTRFS info (device loop7): first mount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 368.252578][ T7648] BTRFS info (device loop7): using sha256 checksum algorithm [ 368.473894][ T7648] BTRFS info (device loop7): enabling ssd optimizations [ 368.481089][ T7648] BTRFS info (device loop7): turning on async discard [ 368.487858][ T7648] BTRFS info (device loop7): enabling free space tree [ 368.504486][ T83] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 368.530209][ T83] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 370.771906][ T7701] netlink: 20 bytes leftover after parsing attributes in process `syz.8.58'. [ 371.011939][ T7701] workqueue: Failed to create a rescuer kthread for wq "nbd64-recv": -EINTR [ 371.027923][ T7703] netlink: 4 bytes leftover after parsing attributes in process `syz.5.293'. [ 371.105276][ T7701] block (null): Could not allocate knbd recv work queue. [ 371.362869][ T7701] nbd: failed to add new device [ 375.234643][ T7716] loop3: detected capacity change from 0 to 1024 [ 375.495391][ T6560] BTRFS info (device loop7): last unmount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 375.903389][ T7719] md: superblock version 12389 not known [ 375.912345][ T7719] md: couldn't set array info. -22 [ 375.945670][ T12] hfsplus: b-tree write err: -5, ino 3 [ 377.467466][ T30] audit: type=1800 audit(1774934187.857:11): pid=7721 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.8.284" name="bus" dev="overlay" ino=32 res=0 errno=0 [ 377.923823][ T7719] loop6: detected capacity change from 0 to 512 [ 377.937201][ T7719] EXT4-fs: Ignoring removed nomblk_io_submit option [ 378.054691][ T1296] ieee802154 phy0 wpan0: encryption failed: -22 [ 378.091523][ T1296] ieee802154 phy1 wpan1: encryption failed: -22 [ 378.197053][ T7719] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=8857e02c, mo2=0002] [ 378.266012][ T7719] EXT4-fs error (device loop6): ext4_free_branches:1020: inode #11: comm syz.6.285: invalid indirect mapped block 2683928664 (level 1) [ 378.281280][ T7719] loop6: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 378.300410][ C0] EXT4-fs (loop6): error count since last fsck: 1 [ 378.316027][ C0] EXT4-fs (loop6): initial error at time 1774934189: ext4_free_branches:1020: inode 11 [ 378.325766][ C0] EXT4-fs (loop6): last error at time 1774934189: ext4_free_branches:1020: inode 11 [ 378.407298][ T7719] EXT4-fs (loop6): Remounting filesystem read-only [ 378.426966][ T7719] EXT4-fs (loop6): 1 truncate cleaned up [ 378.454212][ T7719] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 380.392250][ T7740] CIFS mount error: No usable UNC path provided in device string! [ 380.392250][ T7740] [ 380.402517][ T7740] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string! [ 381.310289][ T7746] program syz.7.283 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 382.263708][ T7334] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 382.900613][ T7757] loop6: detected capacity change from 0 to 64 [ 383.150941][ T7761] futex_wake_op: syz.4.296 tries to shift op by -1; fix this program [ 386.620772][ T7783] xt_hashlimit: size too large, truncated to 1048576 [ 387.282709][ T7782] loop6: detected capacity change from 0 to 256 [ 391.070750][ T7815] loop5: detected capacity change from 0 to 1024 [ 391.497657][ T7828] comedi comedi0: pcl724: I/O port conflict (0x4000409,4) [ 392.272612][ T7829] loop7: detected capacity change from 0 to 1024 [ 395.820289][ T1094] hfsplus: b-tree write err: -5, ino 3 [ 396.027462][ T7829] hfsplus: failed to load extents file [ 397.826351][ T7845] loop8: detected capacity change from 0 to 2048 [ 397.965144][ T7846] loop5: detected capacity change from 0 to 32768 [ 397.972803][ T7846] btrfs: Deprecated parameter 'usebackuproot' [ 397.979084][ T7846] BTRFS warning: 'usebackuproot' is deprecated, use 'rescue=usebackuproot' instead [ 398.078720][ T7846] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop5 (7:5) scanned by syz.5.309 (7846) [ 398.118940][ T7845] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 398.155233][ T7846] BTRFS info (device loop5): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 398.165485][ T7846] BTRFS info (device loop5): using crc32c checksum algorithm [ 398.173007][ T7846] BTRFS warning (device loop5): space cache v1 is being deprecated and will be removed in a future release, please use -o space_cache=v2 [ 398.289513][ T7851] loop7: detected capacity change from 0 to 2048 [ 398.495282][ T7859] NILFS (loop7): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 400.267655][ T1169] BTRFS warning (device loop5): checksum verify failed on logical 5332992 mirror 1 wanted 0x0a5e5d25 found 0xb0e5ffa5 level 0 [ 400.398065][ T7883] loop3: detected capacity change from 0 to 128 [ 401.081082][ T7846] BTRFS warning (device loop5): couldn't read tree root [ 401.088165][ T7846] BTRFS warning (device loop5): try to load backup roots slot 1 [ 401.117753][ T998] BTRFS warning (device loop5): checksum verify failed on logical 5324800 mirror 1 wanted 0x9f73850b found 0x32d10ca2 level 0 [ 401.237127][ T7846] BTRFS warning (device loop5): couldn't read tree root [ 401.244299][ T7846] BTRFS warning (device loop5): try to load backup roots slot 2 [ 401.257453][ T998] BTRFS warning (device loop5): checksum verify failed on logical 5255168 mirror 1 wanted 0x9df47653 found 0x6344b7f5 level 1 [ 401.414629][ T7883] EXT4-fs (loop3): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 401.428916][ T7883] ext4 filesystem being mounted at /78/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 401.810575][ T7846] BTRFS warning (device loop5): couldn't read tree root [ 401.818424][ T7846] BTRFS warning (device loop5): try to load backup roots slot 3 [ 402.347503][ T7846] BTRFS error (device loop5): open_ctree failed: -4 [ 402.596181][ T24] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 403.938690][ T24] usb 5-1: Using ep0 maxpacket: 32 [ 405.547602][ T7912] comedi comedi0: pcl724: I/O port conflict (0x4000409,4) [ 406.143291][ T24] usb 5-1: device descriptor read/all, error -71 [ 406.276612][ T5829] EXT4-fs (loop3): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 406.736504][ T7914] loop8: detected capacity change from 0 to 1024 [ 407.250490][ T7925] xt_hashlimit: size too large, truncated to 1048576 [ 408.400114][ T7932] loop3: detected capacity change from 0 to 1024 [ 409.387926][ T1169] hfsplus: b-tree write err: -5, ino 3 [ 410.964913][ T160] hfsplus: b-tree write err: -5, ino 3 [ 411.245062][ T7952] netlink: 4 bytes leftover after parsing attributes in process `syz.8.329'. [ 412.817326][ T7958] hub 9-0:1.0: USB hub found [ 412.825496][ T7958] hub 9-0:1.0: 1 port detected [ 412.947038][ T7964] futex_wake_op: syz.5.332 tries to shift op by -1; fix this program [ 414.366447][ T7973] netlink: 12 bytes leftover after parsing attributes in process `syz.3.334'. [ 415.290206][ T7974] loop8: detected capacity change from 0 to 32768 [ 415.326694][ T7974] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop8 (7:8) scanned by syz.8.335 (7974) [ 415.448368][ T7974] BTRFS info (device loop8): first mount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 415.460510][ T7974] BTRFS info (device loop8): using sha256 checksum algorithm [ 415.884325][ T7994] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 415.972612][ T7994] iommufd_mock iommufd_mock1: Adding to iommu group 1 [ 416.670033][ T7974] BTRFS info (device loop8): enabling ssd optimizations [ 416.677106][ T7974] BTRFS info (device loop8): turning on async discard [ 416.683935][ T7974] BTRFS info (device loop8): enabling free space tree [ 417.396999][ T51] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 417.406569][ T51] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 417.414983][ T51] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 417.423046][ T51] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 417.431086][ T51] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 418.761548][ T8012] syz.5.338 uses obsolete (PF_INET,SOCK_PACKET) [ 419.690728][ T8021] loop4: detected capacity change from 0 to 512 [ 419.825879][ T8020] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 419.835816][ T8020] block device autoloading is deprecated and will be removed. [ 420.217120][ T51] Bluetooth: hci0: command tx timeout [ 420.322438][ T8021] EXT4-fs (loop4): mounting ext3 file system using the ext4 subsystem [ 420.340716][ T8021] EXT4-fs (loop4): ext4_check_descriptors: Inode table for group 0 overlaps block group descriptors [ 420.353099][ T8021] EXT4-fs (loop4): group descriptors corrupted! [ 420.501005][ T7420] BTRFS info (device loop8): last unmount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 421.983138][ T8038] loop5: detected capacity change from 0 to 1024 [ 422.354440][ T51] Bluetooth: hci0: command tx timeout [ 423.375506][ T8049] loop3: detected capacity change from 0 to 1024 [ 424.321803][ T8053] loop4: detected capacity change from 0 to 128 [ 424.540628][ T51] Bluetooth: hci0: command tx timeout [ 425.422315][ T8053] EXT4-fs (loop4): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 426.306188][ T8053] ext4 filesystem being mounted at /90/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 426.700573][ T51] Bluetooth: hci0: command tx timeout [ 428.626300][ T8076] loop8: detected capacity change from 0 to 32768 [ 428.701933][ T8076] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop8 (7:8) scanned by syz.8.352 (8076) [ 428.721087][ T8076] BTRFS info (device loop8): first mount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 428.731292][ T8076] BTRFS info (device loop8): using sha256 checksum algorithm [ 428.744893][ T5834] EXT4-fs (loop4): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 428.901272][ T8001] chnl_net:caif_netlink_parms(): no params data found [ 428.982633][ T8076] BTRFS info (device loop8): enabling ssd optimizations [ 428.989631][ T8076] BTRFS info (device loop8): turning on async discard [ 428.996570][ T8076] BTRFS info (device loop8): enabling free space tree [ 429.761304][ T5842] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 429.783395][ T5842] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 430.002915][ T8105] loop3: detected capacity change from 0 to 32768 [ 430.028236][ T5141] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 430.049235][ T8105] BTRFS info: device /dev/loop3 (7:3) using temp-fsid 507df7b0-e96b-46ee-98cf-c486d63ebf40 [ 430.059694][ T8105] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop3 (7:3) scanned by syz.3.354 (8105) [ 430.080058][ T8105] BTRFS info (device loop3): first mount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 430.090267][ T8105] BTRFS info (device loop3): using sha256 checksum algorithm [ 430.136738][ T5141] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 430.158569][ T5141] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 431.434558][ T7420] BTRFS info (device loop8): last unmount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 431.602541][ T8105] BTRFS info (device loop3): enabling ssd optimizations [ 431.609524][ T8105] BTRFS info (device loop3): turning on async discard [ 431.617444][ T8105] BTRFS info (device loop3): enabling free space tree [ 432.015115][ T8141] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 432.259292][ T5141] Bluetooth: hci3: command tx timeout [ 433.543065][ T8001] bridge0: port 1(bridge_slave_0) entered blocking state [ 434.270560][ T5141] Bluetooth: hci3: command tx timeout [ 434.414719][ T8001] bridge0: port 1(bridge_slave_0) entered disabled state [ 434.432990][ T8001] bridge_slave_0: entered allmulticast mode [ 434.555803][ T5829] BTRFS info (device loop3): last unmount of filesystem 507df7b0-e96b-46ee-98cf-c486d63ebf40 [ 434.586959][ T8001] bridge_slave_0: entered promiscuous mode [ 434.748403][ T8154] loop8: detected capacity change from 0 to 1024 [ 434.914376][ T8154] EXT4-fs: Ignoring removed oldalloc option [ 435.110800][ T8154] EXT4-fs: Ignoring removed bh option [ 435.762110][ T8154] EXT4-fs (loop8): bad geometry: bigalloc file system with non-zero first_data_block [ 435.762110][ T8154] [ 436.192297][ T8161] loop8: detected capacity change from 0 to 1024 [ 436.351729][ T5141] Bluetooth: hci3: command tx timeout [ 436.359143][ T8161] EXT4-fs (loop8): bad geometry: bigalloc file system with non-zero first_data_block [ 436.359143][ T8161] [ 436.687869][ T8001] bridge0: port 2(bridge_slave_1) entered blocking state [ 436.900730][ T8001] bridge0: port 2(bridge_slave_1) entered disabled state [ 436.908100][ T8001] bridge_slave_1: entered allmulticast mode [ 437.881324][ T8001] bridge_slave_1: entered promiscuous mode [ 438.299232][ T8173] loop3: detected capacity change from 0 to 512 [ 438.431076][ T5141] Bluetooth: hci3: command tx timeout [ 438.540220][ T8173] [EXT4 FS bs=2048, gc=1, bpg=16384, ipg=32, mo=a856c018, mo2=0082] [ 438.549009][ T8173] System zones: 0-2, 18-18, 34-35 [ 438.684710][ T8173] EXT4-fs error (device loop3): __ext4_iget:5393: inode #3: block 127754: comm syz.3.364: invalid block [ 438.696087][ T8173] loop3: lost file I/O error report for ino 3 type 5 pos 0x0 len 0x0 error -117 [ 438.700389][ C1] EXT4-fs (loop3): error count since last fsck: 1 [ 438.715906][ C1] EXT4-fs (loop3): initial error at time 1774934249: __ext4_iget:5393: inode 3: block 127754 [ 438.726197][ C1] EXT4-fs (loop3): last error at time 1774934249: __ext4_iget:5393: inode 3: block 127754 [ 438.861111][ T8173] EXT4-fs error (device loop3): ext4_quota_enable:7219: comm syz.3.364: Bad quota inode: 3, type: 0 [ 438.872453][ T8173] loop3: lost filesystem error report for type 5 error -117 [ 439.516793][ T1296] ieee802154 phy0 wpan0: encryption failed: -22 [ 439.566071][ T1296] ieee802154 phy1 wpan1: encryption failed: -22 [ 439.736387][ T160] netdevsim netdevsim6 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 439.892082][ T8173] EXT4-fs warning (device loop3): ext4_enable_quotas:7257: Failed to enable quota tracking (type=0, err=-117, ino=3). Please run e2fsck to fix. [ 439.914174][ T8173] EXT4-fs (loop3): mount failed [ 440.016967][ T8183] loop4: detected capacity change from 0 to 1024 [ 442.085693][ T8001] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 442.134280][ T8001] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 442.181847][ T36] hfsplus: b-tree write err: -5, ino 3 [ 442.652725][ T160] netdevsim netdevsim6 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 445.822975][ T160] netdevsim netdevsim6 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 445.909360][ T8001] team0: Port device team_slave_0 added [ 446.388341][ T8001] team0: Port device team_slave_1 added [ 446.668244][ T8001] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 446.706438][ T8001] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 446.876570][ T8001] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 448.352492][ T160] netdevsim netdevsim6 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 449.070814][ T8001] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 449.077818][ T8001] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 449.359416][ T8001] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 450.002238][ T8242] netlink: 4 bytes leftover after parsing attributes in process `syz.5.373'. [ 450.540941][ T8001] hsr_slave_0: entered promiscuous mode [ 450.753275][ T8001] hsr_slave_1: entered promiscuous mode [ 451.841007][ T8001] debugfs: 'hsr0' already exists in 'hsr' [ 451.850610][ T8001] Cannot create hsr debugfs directory [ 452.121957][ T8246] No such timeout policy "syz1" [ 452.140812][ T8248] loop3: detected capacity change from 0 to 256 [ 452.221671][ T8103] chnl_net:caif_netlink_parms(): no params data found [ 452.268822][ T8248] exFAT-fs (loop3): failed to load upcase table (idx : 0x00010000, chksum : 0x205ab87c, utbl_chksum : 0xe619d30d) [ 456.034368][ T160] bridge_slave_1: left allmulticast mode [ 456.040074][ T160] bridge_slave_1: left promiscuous mode [ 456.088969][ T160] bridge0: port 2(bridge_slave_1) entered disabled state [ 456.224022][ T8280] netlink: 4 bytes leftover after parsing attributes in process `syz.8.380'. [ 456.729304][ T160] bridge_slave_0: left allmulticast mode [ 456.735314][ T160] bridge_slave_0: left promiscuous mode [ 459.304689][ T160] bridge0: port 1(bridge_slave_0) entered disabled state [ 460.949897][ T8293] input: syz1 as /devices/virtual/input/input6 [ 463.194398][ T160] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 463.215812][ T160] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 463.241489][ T160] bond0 (unregistering): Released all slaves [ 463.338528][ T8295] warning: `syz.4.384' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 466.424395][ T8317] nfs: Unknown parameter 'ac˙˙˙˙' [ 470.640059][ T5842] Bluetooth: hci2: command 0x0406 tx timeout [ 470.912066][ T8322] loop5: detected capacity change from 0 to 32768 [ 470.965143][ T8322] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop5 (7:5) scanned by syz.5.392 (8322) [ 470.982041][ T8322] BTRFS info (device loop5): first mount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 470.992280][ T8322] BTRFS info (device loop5): using sha256 checksum algorithm [ 472.137548][ T8322] workqueue: Failed to create a rescuer kthread for wq "btrfs-delayed-meta": -EINTR [ 472.137957][ T8322] workqueue: Failed to create a rescuer kthread for wq "btrfs-qgroup-rescan": -EINTR [ 472.163045][ T8322] BTRFS error (device loop5): open_ctree failed: -12 [ 472.200575][ T8103] bridge0: port 1(bridge_slave_0) entered blocking state [ 472.207763][ T8103] bridge0: port 1(bridge_slave_0) entered disabled state [ 472.251687][ T8103] bridge_slave_0: entered allmulticast mode [ 472.259912][ T8103] bridge_slave_0: entered promiscuous mode [ 473.668210][ T8103] bridge0: port 2(bridge_slave_1) entered blocking state [ 473.701703][ T8103] bridge0: port 2(bridge_slave_1) entered disabled state [ 473.740691][ T8103] bridge_slave_1: entered allmulticast mode [ 473.766029][ T8103] bridge_slave_1: entered promiscuous mode [ 476.037984][ T5842] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 476.048332][ T5842] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 476.083358][ T5842] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 476.271252][ T5842] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 476.315191][ T5842] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 477.980620][ T8393] overlayfs: failed to resolve './file1': -2 [ 478.430482][ T5141] Bluetooth: hci6: command tx timeout [ 479.327627][ T160] hsr_slave_0: left promiscuous mode [ 479.529935][ T8404] netlink: 20 bytes leftover after parsing attributes in process `syz.4.405'. [ 480.297150][ T160] hsr_slave_1: left promiscuous mode [ 480.303608][ T160] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 480.311663][ T160] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 480.369427][ T160] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 480.400426][ T160] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 480.513803][ T5141] Bluetooth: hci6: command tx timeout [ 480.807471][ T160] veth1_macvtap: left promiscuous mode [ 480.830542][ T160] veth0_macvtap: left promiscuous mode [ 480.836306][ T160] veth1_vlan: left promiscuous mode [ 481.621358][ T160] veth0_vlan: left promiscuous mode [ 481.938900][ T5843] udevd[5843]: inotify_add_watch(7, /dev/nbd64, 10) failed: No such file or directory [ 482.172266][ T5853] udevd[5853]: inotify_add_watch(7, /dev/nbd64, 10) failed: No such file or directory [ 482.600466][ T5141] Bluetooth: hci6: command tx timeout [ 484.718889][ T5141] Bluetooth: hci6: command tx timeout [ 485.585965][ T160] team0 (unregistering): Port device team_slave_1 removed [ 485.605217][ T160] team0 (unregistering): Port device team_slave_0 removed [ 485.835107][ T8103] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 485.866347][ T8103] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 486.049102][ T8103] team0: Port device team_slave_0 added [ 486.079610][ T8103] team0: Port device team_slave_1 added [ 486.211185][ T8103] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 486.218181][ T8103] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 486.245494][ T8103] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 486.273881][ T8103] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 486.282615][ T8103] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 486.312669][ T8103] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 486.457934][ T8103] hsr_slave_0: entered promiscuous mode [ 486.468638][ T8103] hsr_slave_1: entered promiscuous mode [ 486.476330][ T8103] debugfs: 'hsr0' already exists in 'hsr' [ 486.482588][ T8103] Cannot create hsr debugfs directory [ 486.640276][ T160] netdevsim netdevsim7 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 486.729068][ T160] netdevsim netdevsim7 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 486.818585][ T160] netdevsim netdevsim7 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 487.028867][ T160] netdevsim netdevsim7 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 487.068094][ T8377] chnl_net:caif_netlink_parms(): no params data found [ 487.341286][ T160] bridge_slave_1: left allmulticast mode [ 487.346982][ T160] bridge_slave_1: left promiscuous mode [ 487.353483][ T160] bridge0: port 2(bridge_slave_1) entered disabled state [ 487.363230][ T160] bridge_slave_0: left allmulticast mode [ 487.368883][ T160] bridge_slave_0: left promiscuous mode [ 487.375952][ T160] bridge0: port 1(bridge_slave_0) entered disabled state [ 487.394009][ T160] bridge_slave_1: left allmulticast mode [ 487.399711][ T160] bridge_slave_1: left promiscuous mode [ 487.406719][ T160] bridge0: port 2(bridge_slave_1) entered disabled state [ 487.419223][ T160] bridge_slave_0: left allmulticast mode [ 487.429235][ T160] bridge_slave_0: left promiscuous mode [ 487.435575][ T160] bridge0: port 1(bridge_slave_0) entered disabled state [ 487.581316][ T5842] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 487.592412][ T5842] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 487.606750][ T5842] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 487.616697][ T5842] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 487.624561][ T5842] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 487.633176][ T160] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 487.654151][ T160] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 487.665228][ T160] bond0 (unregistering): Released all slaves [ 487.796414][ T160] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 487.809273][ T160] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 487.820701][ T160] bond0 (unregistering): Released all slaves [ 487.836031][ T8377] bridge0: port 1(bridge_slave_0) entered blocking state [ 487.843443][ T8377] bridge0: port 1(bridge_slave_0) entered disabled state [ 487.851183][ T8377] bridge_slave_0: entered allmulticast mode [ 487.858808][ T8377] bridge_slave_0: entered promiscuous mode [ 487.867268][ T8377] bridge0: port 2(bridge_slave_1) entered blocking state [ 487.892424][ T8377] bridge0: port 2(bridge_slave_1) entered disabled state [ 487.899692][ T8377] bridge_slave_1: entered allmulticast mode [ 487.908092][ T8377] bridge_slave_1: entered promiscuous mode [ 488.054620][ T8377] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 488.109135][ T8377] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 488.176451][ T8377] team0: Port device team_slave_0 added [ 488.234084][ T8377] team0: Port device team_slave_1 added [ 488.255055][ T160] hsr_slave_0: left promiscuous mode [ 488.269486][ T160] hsr_slave_1: left promiscuous mode [ 488.275791][ T160] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 488.291171][ T160] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 488.305181][ T160] hsr_slave_0: left promiscuous mode [ 488.311570][ T160] hsr_slave_1: left promiscuous mode [ 488.317821][ T160] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 488.327359][ T160] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 488.335612][ T160] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 488.344418][ T160] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 488.359937][ T160] veth1_macvtap: left promiscuous mode [ 488.365646][ T160] veth0_macvtap: left promiscuous mode [ 488.371471][ T160] veth1_vlan: left promiscuous mode [ 488.376753][ T160] veth0_vlan: left promiscuous mode [ 488.721064][ T160] team0 (unregistering): Port device team_slave_1 removed [ 488.751168][ T160] team0 (unregistering): Port device team_slave_0 removed [ 488.928073][ T160] pimreg (unregistering): left allmulticast mode [ 489.087466][ T160] team0 (unregistering): Port device team_slave_1 removed [ 489.104319][ T160] team0 (unregistering): Port device team_slave_0 removed [ 489.279366][ T8377] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 489.286798][ T8377] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 489.313953][ T8377] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 489.343743][ T8377] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 489.351190][ T8377] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 489.382944][ T8377] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 489.457783][ T8377] hsr_slave_0: entered promiscuous mode [ 489.465130][ T8377] hsr_slave_1: entered promiscuous mode [ 489.472510][ T8377] debugfs: 'hsr0' already exists in 'hsr' [ 489.478261][ T8377] Cannot create hsr debugfs directory [ 489.704924][ T8452] chnl_net:caif_netlink_parms(): no params data found [ 489.711836][ T5842] Bluetooth: hci0: command tx timeout [ 489.909457][ T8452] bridge0: port 1(bridge_slave_0) entered blocking state [ 489.918845][ T8452] bridge0: port 1(bridge_slave_0) entered disabled state [ 489.926485][ T8452] bridge_slave_0: entered allmulticast mode [ 489.934597][ T8452] bridge_slave_0: entered promiscuous mode [ 489.992202][ T8452] bridge0: port 2(bridge_slave_1) entered blocking state [ 489.999876][ T8452] bridge0: port 2(bridge_slave_1) entered disabled state [ 490.007624][ T8452] bridge_slave_1: entered allmulticast mode [ 490.019603][ T8452] bridge_slave_1: entered promiscuous mode [ 490.069275][ T8452] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 490.095360][ T8452] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 490.136698][ T8452] team0: Port device team_slave_0 added [ 490.154435][ T8452] team0: Port device team_slave_1 added [ 490.220037][ T160] IPVS: stop unused estimator thread 0... [ 490.246802][ T8452] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 490.255653][ T8452] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 490.283488][ T8452] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 490.313943][ T8452] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 490.321306][ T8452] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 490.349132][ T8452] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 490.479084][ T8452] hsr_slave_0: entered promiscuous mode [ 490.486158][ T8452] hsr_slave_1: entered promiscuous mode [ 490.495597][ T8452] debugfs: 'hsr0' already exists in 'hsr' [ 490.502554][ T8452] Cannot create hsr debugfs directory [ 490.509122][ T8377] netdevsim netdevsim9 netdevsim0: renamed from eth0 [ 490.528533][ T8377] netdevsim netdevsim9 netdevsim1: renamed from eth1 [ 490.578051][ T8377] netdevsim netdevsim9 netdevsim2: renamed from eth2 [ 490.590149][ T8377] netdevsim netdevsim9 netdevsim3: renamed from eth3 [ 490.683705][ T76] bridge_slave_1: left allmulticast mode [ 490.689383][ T76] bridge_slave_1: left promiscuous mode [ 490.695342][ T76] bridge0: port 2(bridge_slave_1) entered disabled state [ 490.705681][ T76] bridge_slave_0: left allmulticast mode [ 490.712149][ T76] bridge_slave_0: left promiscuous mode [ 490.717913][ T76] bridge0: port 1(bridge_slave_0) entered disabled state [ 490.839634][ T76] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 490.851332][ T76] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 490.861959][ T76] bond0 (unregistering): Released all slaves [ 490.999023][ T76] hsr_slave_0: left promiscuous mode [ 491.007037][ T76] hsr_slave_1: left promiscuous mode [ 491.014555][ T76] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 491.022532][ T76] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 491.168212][ T76] team0 (unregistering): Port device team_slave_1 removed [ 491.185381][ T76] team0 (unregistering): Port device team_slave_0 removed [ 491.436697][ T8452] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 491.468283][ T8452] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 491.487225][ T8452] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 491.521759][ T8452] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 491.554706][ T8377] 8021q: adding VLAN 0 to HW filter on device bond0 [ 491.608903][ T8377] 8021q: adding VLAN 0 to HW filter on device team0 [ 491.628978][ T36] bridge0: port 1(bridge_slave_0) entered blocking state [ 491.636161][ T36] bridge0: port 1(bridge_slave_0) entered forwarding state [ 491.665787][ T36] bridge0: port 2(bridge_slave_1) entered blocking state [ 491.672988][ T36] bridge0: port 2(bridge_slave_1) entered forwarding state [ 491.793552][ T5842] Bluetooth: hci0: command tx timeout [ 491.801553][ T8452] 8021q: adding VLAN 0 to HW filter on device bond0 [ 491.840115][ T8452] 8021q: adding VLAN 0 to HW filter on device team0 [ 491.857612][ T1112] bridge0: port 1(bridge_slave_0) entered blocking state [ 491.864834][ T1112] bridge0: port 1(bridge_slave_0) entered forwarding state [ 491.904989][ T1112] bridge0: port 2(bridge_slave_1) entered blocking state [ 491.912228][ T1112] bridge0: port 2(bridge_slave_1) entered forwarding state [ 492.178840][ T8377] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 492.458228][ T8452] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 492.582824][ T8452] veth0_vlan: entered promiscuous mode [ 492.600248][ T8452] veth1_vlan: entered promiscuous mode [ 492.652174][ T8452] veth0_macvtap: entered promiscuous mode [ 492.667707][ T8452] veth1_macvtap: entered promiscuous mode [ 492.701936][ T8452] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 492.722607][ T8452] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 492.744255][ T998] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 492.783480][ T76] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 492.810941][ T76] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 492.819913][ T76] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 492.975902][ T6081] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 492.990829][ T6081] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 493.037724][ T8377] veth0_vlan: entered promiscuous mode [ 493.095358][ T6081] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 493.108594][ T8377] veth1_vlan: entered promiscuous mode [ 493.117402][ T6081] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 493.209866][ T8377] veth0_macvtap: entered promiscuous mode [ 493.313165][ T8377] veth1_macvtap: entered promiscuous mode [ 493.384046][ T8377] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 493.405381][ T8377] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 493.437895][ T6081] netdevsim netdevsim9 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 493.648208][ T8521] loop5: detected capacity change from 0 to 32768 [ 494.329989][ T5842] Bluetooth: hci0: command tx timeout [ 494.438516][ T8521] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop5 (7:5) scanned by syz.5.424 (8521) [ 494.452386][ T8527] Illegal XDP return value 4294967274 on prog (id 16) dev N/A, expect packet loss! [ 494.465577][ T8527] ubi31: attaching mtd0 [ 494.472357][ T8527] ubi31: scanning is finished [ 494.484174][ T8521] BTRFS info (device loop5): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 494.496868][ T8521] BTRFS info (device loop5): using sha256 checksum algorithm [ 495.344927][ T6081] netdevsim netdevsim9 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 496.358307][ T5842] Bluetooth: hci0: command tx timeout [ 496.417886][ T8521] workqueue: Failed to create a rescuer kthread for wq "btrfs-delalloc": -EINTR [ 496.418941][ T8521] workqueue: Failed to create a rescuer kthread for wq "btrfs-flush_delalloc": -EINTR [ 496.428513][ T8521] workqueue: Failed to create a rescuer kthread for wq "btrfs-cache": -EINTR [ 496.441035][ T8521] workqueue: Failed to create a rescuer kthread for wq "btrfs-fixup": -EINTR [ 496.450172][ T8521] workqueue: Failed to create a rescuer kthread for wq "btrfs-endio": -EINTR [ 496.459449][ T8521] workqueue: Failed to create a rescuer kthread for wq "btrfs-endio-meta": -EINTR [ 496.468684][ T8521] workqueue: Failed to create a rescuer kthread for wq "btrfs-rmw": -EINTR [ 496.478505][ T8521] workqueue: Failed to create a rescuer kthread for wq "btrfs-endio-write": -EINTR [ 496.487634][ T8521] workqueue: Failed to create a rescuer kthread for wq "btrfs-freespace-write": -EINTR [ 496.497570][ T8521] workqueue: Failed to create a rescuer kthread for wq "btrfs-delayed-meta": -EINTR [ 496.507675][ T8521] workqueue: Failed to create a rescuer kthread for wq "btrfs-qgroup-rescan": -EINTR [ 496.514183][ T8524] bridge0: port 3(syz_tun) entered blocking state [ 496.537432][ T8524] bridge0: port 3(syz_tun) entered disabled state [ 496.547525][ T8524] syz_tun: entered allmulticast mode [ 496.574025][ T8524] syz_tun: entered promiscuous mode [ 496.582927][ T8524] bridge0: port 3(syz_tun) entered blocking state [ 496.590050][ T8524] bridge0: port 3(syz_tun) entered forwarding state [ 497.015687][ T8521] BTRFS error (device loop5): open_ctree failed: -12 [ 497.298464][ T7092] netdevsim netdevsim9 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 497.326165][ T7092] netdevsim netdevsim9 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 497.427948][ T8544] loop4: detected capacity change from 0 to 2048 [ 497.461543][ T8527] ubi31 error: ubi_attach_mtd_dev: cannot spawn "ubi_bgt31d", error -4 [ 497.554870][ T49] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 497.636769][ T8544] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 497.781696][ T8550] program syz.5.413 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 497.840575][ T49] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 499.372865][ T8559] loop3: detected capacity change from 0 to 1024 [ 500.291139][ T160] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 500.999791][ T1296] ieee802154 phy0 wpan0: encryption failed: -22 [ 501.008089][ T1296] ieee802154 phy1 wpan1: encryption failed: -22 [ 501.221055][ T160] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 501.399262][ T6081] hfsplus: b-tree write err: -5, ino 3 [ 503.904532][ T8577] loop8: detected capacity change from 0 to 1024 [ 504.490971][ T3463] hfsplus: b-tree write err: -5, ino 3 [ 506.429991][ T8595] netlink: 4 bytes leftover after parsing attributes in process `syz.3.418'. [ 508.680739][ T8605] loop8: detected capacity change from 0 to 128 [ 509.751803][ T8610] loop4: detected capacity change from 0 to 128 [ 509.843336][ T8609] syz.4.427: attempt to access beyond end of device [ 509.843336][ T8609] loop4: rw=1, sector=145, nr_sectors = 896 limit=128 [ 510.496262][ T8605] EXT4-fs (loop8): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 510.534301][ T8611] loop9: detected capacity change from 0 to 512 [ 510.610144][ T8605] ext4 filesystem being mounted at /27/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 510.621436][ T8611] EXT4-fs: Ignoring removed nobh option [ 510.745961][ T8611] EXT4-fs (loop9): encrypted files will use data=ordered instead of data journaling mode [ 512.165139][ T8631] loop0: detected capacity change from 0 to 512 [ 512.175172][ T8631] EXT4-fs: Ignoring removed nomblk_io_submit option [ 514.038539][ T8611] workqueue: Failed to create a rescuer kthread for wq "ext4-rsv-conversion": -EINTR [ 514.040174][ T8611] EXT4-fs: failed to create workqueue [ 514.684790][ T8611] EXT4-fs (loop9): mount failed [ 514.740768][ T8631] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=8857e02c, mo2=0002] [ 514.836822][ T8631] EXT4-fs error (device loop0): ext4_free_branches:1020: inode #11: comm syz.0.431: invalid indirect mapped block 2683928664 (level 1) [ 514.851175][ T8631] loop0: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 514.860357][ C1] EXT4-fs (loop0): error count since last fsck: 1 [ 514.876008][ C1] EXT4-fs (loop0): initial error at time 1774934326: ext4_free_branches:1020: inode 11 [ 514.885753][ C1] EXT4-fs (loop0): last error at time 1774934326: ext4_free_branches:1020: inode 11 [ 514.983612][ T8631] EXT4-fs (loop0): Remounting filesystem read-only [ 515.007361][ T8631] EXT4-fs (loop0): 1 truncate cleaned up [ 515.028717][ T8631] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 516.890270][ T7420] EXT4-fs (loop8): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 517.230747][ T8647] netlink: 4 bytes leftover after parsing attributes in process `syz.4.434'. [ 520.153389][ T8452] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 522.212651][ T8657] loop9: detected capacity change from 0 to 1024 [ 522.402281][ T8665] program syz.8.436 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 523.077481][ T1112] hfsplus: b-tree write err: -5, ino 3 [ 523.748851][ T8676] sd 0:0:1:0: PR command failed: 1026 [ 523.754749][ T8676] sd 0:0:1:0: Sense Key : Illegal Request [current] [ 523.761891][ T8676] sd 0:0:1:0: Add. Sense: Invalid command operation code [ 524.673869][ T8680] loop9: detected capacity change from 0 to 32768 [ 524.688227][ T8680] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1281 transid 8 /dev/loop9 (7:9) scanned by syz.9.444 (8680) [ 525.294710][ T30] audit: type=1400 audit(1774934336.487:12): apparmor="DENIED" operation="setprocattr" info="current" error=-22 profile="unconfined" pid=8679 comm="syz.9.444" [ 526.220818][ T8692] EXT4-fs (nbd8): unable to read superblock [ 527.837249][ T8702] loop0: detected capacity change from 0 to 128 [ 528.981385][ T8702] EXT4-fs (loop0): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 529.086520][ T8702] ext4 filesystem being mounted at /6/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 531.520607][ T8723] loop3: detected capacity change from 0 to 40427 [ 531.601819][ T8723] F2FS-fs (loop3): invalid crc value [ 534.240398][ T8723] F2FS-fs (loop3): f2fs_recover_fsync_data: recovery fsync data, check_only: 0 [ 534.251013][ T8723] F2FS-fs (loop3): Start checkpoint disabled! [ 534.266415][ T8452] EXT4-fs (loop0): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 534.285619][ T8723] F2FS-fs (loop3): f2fs_disable_checkpoint() finish, err:0 [ 534.622861][ T8738] netlink: 4 bytes leftover after parsing attributes in process `syz.8.457'. [ 534.938474][ T8746] loop0: detected capacity change from 0 to 1024 [ 538.323327][ T1169] hfsplus: b-tree write err: -5, ino 3 [ 538.654507][ T8762] program syz.9.460 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 540.148376][ T8769] loop0: detected capacity change from 0 to 512 [ 540.248969][ T8769] EXT4-fs (loop0): blocks per group (95) and clusters per group (32768) inconsistent [ 540.973530][ T6027] IPVS: starting estimator thread 0... [ 541.540628][ T8778] IPVS: using max 22 ests per chain, 52800 per kthread [ 541.729178][ T5141] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 541.752315][ T5141] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 541.769506][ T5141] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 541.801509][ T5141] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 541.840877][ T5141] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 542.753907][ T8791] netlink: 12 bytes leftover after parsing attributes in process `syz.0.467'. [ 544.619578][ T30] audit: type=1800 audit(1774934355.327:13): pid=8792 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.9.469" name="bus" dev="overlay" ino=86 res=0 errno=0 [ 544.640166][ T5141] Bluetooth: hci3: command tx timeout [ 546.777417][ T5842] Bluetooth: hci3: command tx timeout [ 546.821814][ T5141] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 546.841436][ T5141] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 546.970292][ T51] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 546.990096][ T51] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 546.998268][ T51] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 549.177324][ T5842] Bluetooth: hci3: command tx timeout [ 549.177349][ T51] Bluetooth: hci7: command tx timeout [ 549.226708][ T8822] loop3: detected capacity change from 0 to 1024 [ 550.360398][ T76] hfsplus: b-tree write err: -5, ino 3 [ 551.340990][ T51] Bluetooth: hci3: command tx timeout [ 551.346537][ T51] Bluetooth: hci7: command tx timeout [ 552.912332][ T8849] sd 0:0:1:0: PR command failed: 1026 [ 552.918115][ T8849] sd 0:0:1:0: Sense Key : Illegal Request [current] [ 552.925217][ T8849] sd 0:0:1:0: Add. Sense: Invalid command operation code [ 553.401913][ T5842] Bluetooth: hci7: command tx timeout [ 553.509466][ T8848] EXT4-fs (nbd3): unable to read superblock [ 554.271222][ T76] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 555.510632][ T5842] Bluetooth: hci7: command tx timeout [ 556.972240][ T76] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 558.113904][ T8877] nfs: Unknown parameter 'ac˙˙˙˙' [ 559.315428][ T8779] chnl_net:caif_netlink_parms(): no params data found [ 562.300961][ T1296] ieee802154 phy0 wpan0: encryption failed: -22 [ 562.307319][ T1296] ieee802154 phy1 wpan1: encryption failed: -22 [ 562.311100][ T8900] loop8: detected capacity change from 0 to 32768 [ 562.340154][ T8900] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1281 transid 8 /dev/loop8 (7:8) scanned by syz.8.489 (8900) [ 562.357590][ T51] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 562.396812][ T51] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 562.510497][ T51] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 562.530803][ T51] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 562.538680][ T51] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 562.604479][ T76] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 563.153658][ T30] audit: type=1400 audit(1774934374.327:14): apparmor="DENIED" operation="setprocattr" info="current" error=-22 profile="unconfined" pid=8899 comm="syz.8.489" [ 564.187062][ T76] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 564.591856][ T5842] Bluetooth: hci4: command tx timeout [ 566.160380][ T8930] EXT4-fs (nbd0): unable to read superblock [ 566.569576][ T8779] bridge0: port 1(bridge_slave_0) entered blocking state [ 566.606193][ T8779] bridge0: port 1(bridge_slave_0) entered disabled state [ 566.620716][ T8779] bridge_slave_0: entered allmulticast mode [ 566.655861][ T8779] bridge_slave_0: entered promiscuous mode [ 566.670597][ T5842] Bluetooth: hci4: command tx timeout [ 566.691125][ T8779] bridge0: port 2(bridge_slave_1) entered blocking state [ 566.698285][ T8779] bridge0: port 2(bridge_slave_1) entered disabled state [ 566.705774][ T8779] bridge_slave_1: entered allmulticast mode [ 566.739050][ T8779] bridge_slave_1: entered promiscuous mode [ 567.605316][ T8937] loop0: detected capacity change from 0 to 512 [ 567.618339][ T8937] EXT4-fs: Ignoring removed nobh option [ 568.042464][ T8937] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 568.129779][ T8937] EXT4-fs (loop0): 1 truncate cleaned up [ 568.170850][ T8799] chnl_net:caif_netlink_parms(): no params data found [ 568.186205][ T8937] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 568.217336][ T8779] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 568.478865][ T8941] loop3: detected capacity change from 0 to 32768 [ 568.515287][ T8779] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 568.526192][ T8941] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop3 (7:3) scanned by syz.3.498 (8941) [ 568.591066][ T8941] BTRFS info (device loop3): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 568.601440][ T8941] BTRFS info (device loop3): using sha256 checksum algorithm [ 568.750761][ T5842] Bluetooth: hci4: command tx timeout [ 568.761446][ T8941] BTRFS info (device loop3): enabling ssd optimizations [ 568.768607][ T8941] BTRFS info (device loop3): turning on async discard [ 568.776311][ T8941] BTRFS info (device loop3): enabling free space tree [ 569.300459][ T8963] overlayfs: missing 'workdir' [ 569.832423][ T8779] team0: Port device team_slave_0 added [ 569.949910][ T76] bridge_slave_1: left allmulticast mode [ 569.980363][ T76] bridge_slave_1: left promiscuous mode [ 569.986188][ T76] bridge0: port 2(bridge_slave_1) entered disabled state [ 570.022663][ T76] bridge_slave_0: left allmulticast mode [ 570.028348][ T76] bridge_slave_0: left promiscuous mode [ 570.053602][ T8452] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 570.085484][ T76] bridge0: port 1(bridge_slave_0) entered disabled state [ 570.100075][ T5829] BTRFS info (device loop3): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 570.844307][ T5842] Bluetooth: hci4: command tx timeout [ 572.835812][ T8985] sd 0:0:1:0: PR command failed: 1026 [ 572.841319][ T8985] sd 0:0:1:0: Sense Key : Illegal Request [current] [ 572.848054][ T8985] sd 0:0:1:0: Add. Sense: Invalid command operation code [ 573.601627][ T8993] loop3: detected capacity change from 0 to 32768 [ 573.634832][ T8993] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1281 transid 8 /dev/loop3 (7:3) scanned by syz.3.503 (8993) [ 573.850458][ T30] audit: type=1400 audit(1774934385.047:15): apparmor="DENIED" operation="setprocattr" info="current" error=-22 profile="unconfined" pid=8992 comm="syz.3.503" [ 574.427712][ T5853] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1281 transid 8 /dev/loop3 (7:3) scanned by udevd (5853) [ 574.491122][ T76] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 574.536064][ T76] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 574.558574][ T76] bond0 (unregistering): Released all slaves [ 574.906189][ T8779] team0: Port device team_slave_1 added [ 577.295886][ T9013] loop0: detected capacity change from 0 to 512 [ 577.322711][ T9013] EXT4-fs: Ignoring removed nobh option [ 577.381951][ T9013] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 577.572596][ T8779] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 577.579590][ T8779] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 577.605832][ T8779] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 577.607535][ T9013] EXT4-fs (loop0): 1 truncate cleaned up [ 577.650077][ T9013] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 577.737632][ T8779] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 577.767789][ T8779] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 577.804050][ T8779] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 577.856863][ T8902] chnl_net:caif_netlink_parms(): no params data found [ 577.934454][ T8799] bridge0: port 1(bridge_slave_0) entered blocking state [ 577.955809][ T8799] bridge0: port 1(bridge_slave_0) entered disabled state [ 577.976443][ T8799] bridge_slave_0: entered allmulticast mode [ 577.991164][ T8799] bridge_slave_0: entered promiscuous mode [ 578.023497][ T8799] bridge0: port 2(bridge_slave_1) entered blocking state [ 578.031894][ T8799] bridge0: port 2(bridge_slave_1) entered disabled state [ 578.039232][ T8799] bridge_slave_1: entered allmulticast mode [ 578.048580][ T8799] bridge_slave_1: entered promiscuous mode [ 578.737239][ T8452] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 580.085663][ T9043] overlayfs: failed to resolve './file1': -2 [ 580.751117][ T9046] netlink: 4 bytes leftover after parsing attributes in process `syz.0.508'. [ 584.098509][ T8799] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 585.614478][ T8779] hsr_slave_0: entered promiscuous mode [ 585.631787][ T8779] hsr_slave_1: entered promiscuous mode [ 585.638355][ T8779] debugfs: 'hsr0' already exists in 'hsr' [ 585.644824][ T8779] Cannot create hsr debugfs directory [ 585.665094][ T8799] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 585.682131][ T9064] loop8: detected capacity change from 0 to 256 [ 586.699168][ T9068] netlink: 4 bytes leftover after parsing attributes in process `syz.0.516'. [ 587.398005][ T9064] exFAT-fs (loop8): failed to load upcase table (idx : 0x00010000, chksum : 0x205ab87c, utbl_chksum : 0xe619d30d) [ 588.970531][ T30] audit: type=1800 audit(1774934399.297:16): pid=9072 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.517" name="bus" dev="overlay" ino=746 res=0 errno=0 [ 589.922427][ T76] hsr_slave_0: left promiscuous mode [ 589.933355][ T76] hsr_slave_1: left promiscuous mode [ 589.970726][ T76] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 589.978167][ T76] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 590.066436][ T76] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 590.118472][ T76] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 590.120484][ T9081] EXT4-fs (nbd8): unable to read superblock [ 590.407764][ T76] veth1_macvtap: left promiscuous mode [ 590.419653][ T76] veth0_macvtap: left promiscuous mode [ 590.452138][ T76] veth1_vlan: left promiscuous mode [ 590.483176][ T76] veth0_vlan: left promiscuous mode [ 591.452535][ T9088] binder: Binderfs stats mode cannot be changed during a remount [ 591.743548][ T76] team0 (unregistering): Port device team_slave_1 removed [ 591.800704][ T76] team0 (unregistering): Port device team_slave_0 removed [ 592.143361][ T8799] team0: Port device team_slave_0 added [ 592.723235][ T8799] team0: Port device team_slave_1 added [ 592.749788][ T8902] bridge0: port 1(bridge_slave_0) entered blocking state [ 592.768789][ T8902] bridge0: port 1(bridge_slave_0) entered disabled state [ 592.780663][ T8902] bridge_slave_0: entered allmulticast mode [ 592.789833][ T8902] bridge_slave_0: entered promiscuous mode [ 592.871658][ T8902] bridge0: port 2(bridge_slave_1) entered blocking state [ 592.883460][ T8902] bridge0: port 2(bridge_slave_1) entered disabled state [ 592.891643][ T8902] bridge_slave_1: entered allmulticast mode [ 592.903338][ T8902] bridge_slave_1: entered promiscuous mode [ 592.919716][ T8799] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 592.938992][ T8799] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 592.971378][ T8799] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 593.027289][ T8799] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 593.035422][ T8799] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 593.062204][ T8799] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 593.116419][ T8902] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 593.133291][ T8902] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 593.188928][ T76] IPVS: stop unused estimator thread 0... [ 593.302344][ T8902] team0: Port device team_slave_0 added [ 593.332011][ T8799] hsr_slave_0: entered promiscuous mode [ 593.339020][ T8799] hsr_slave_1: entered promiscuous mode [ 593.345824][ T8799] debugfs: 'hsr0' already exists in 'hsr' [ 593.351784][ T8799] Cannot create hsr debugfs directory [ 593.390570][ T8902] team0: Port device team_slave_1 added [ 593.482309][ T8902] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 593.489310][ T8902] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 593.516590][ T8902] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 593.651208][ T76] netdevsim netdevsim9 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 593.672591][ T8902] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 593.679594][ T8902] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 593.707469][ T8902] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 593.825218][ T76] netdevsim netdevsim9 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 593.978900][ T76] netdevsim netdevsim9 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 594.046635][ T8902] hsr_slave_0: entered promiscuous mode [ 594.066679][ T8902] hsr_slave_1: entered promiscuous mode [ 594.073961][ T8902] debugfs: 'hsr0' already exists in 'hsr' [ 594.079716][ T8902] Cannot create hsr debugfs directory [ 594.169013][ T76] netdevsim netdevsim9 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 594.516416][ T8779] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 594.667949][ T8779] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 594.766094][ T8779] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 594.785610][ T8779] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 594.939916][ T76] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 595.036364][ T76] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 595.113844][ T8779] 8021q: adding VLAN 0 to HW filter on device bond0 [ 595.158544][ T76] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 595.181562][ T8779] 8021q: adding VLAN 0 to HW filter on device team0 [ 595.198405][ T6081] bridge0: port 1(bridge_slave_0) entered blocking state [ 595.205645][ T6081] bridge0: port 1(bridge_slave_0) entered forwarding state [ 595.228935][ T1112] bridge0: port 2(bridge_slave_1) entered blocking state [ 595.236224][ T1112] bridge0: port 2(bridge_slave_1) entered forwarding state [ 595.277899][ T76] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 595.564330][ T76] bridge_slave_1: left allmulticast mode [ 595.570051][ T76] bridge_slave_1: left promiscuous mode [ 595.591808][ T76] bridge0: port 2(bridge_slave_1) entered disabled state [ 595.612807][ T76] bridge_slave_0: left allmulticast mode [ 595.618506][ T76] bridge_slave_0: left promiscuous mode [ 595.630719][ T76] bridge0: port 1(bridge_slave_0) entered disabled state [ 595.646367][ T76] bridge_slave_1: left allmulticast mode [ 595.655032][ T76] bridge_slave_1: left promiscuous mode [ 595.662797][ T76] bridge0: port 2(bridge_slave_1) entered disabled state [ 595.679282][ T76] bridge_slave_0: left allmulticast mode [ 595.687154][ T76] bridge_slave_0: left promiscuous mode [ 595.695116][ T76] bridge0: port 1(bridge_slave_0) entered disabled state [ 596.021211][ T76] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 596.044562][ T76] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 596.055600][ T76] bond0 (unregistering): Released all slaves [ 596.276620][ T76] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 596.288605][ T76] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 596.300023][ T76] bond0 (unregistering): Released all slaves [ 596.659990][ T8779] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 596.865691][ T8779] veth0_vlan: entered promiscuous mode [ 596.943509][ T8779] veth1_vlan: entered promiscuous mode [ 597.055005][ T76] hsr_slave_0: left promiscuous mode [ 597.063837][ T76] hsr_slave_1: left promiscuous mode [ 597.070062][ T76] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 597.078424][ T76] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 597.094191][ T76] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 597.102646][ T76] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 597.120783][ T76] hsr_slave_0: left promiscuous mode [ 597.127024][ T76] hsr_slave_1: left promiscuous mode [ 597.133966][ T76] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 597.142670][ T76] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 597.152206][ T76] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 597.159613][ T76] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 597.183293][ T76] veth1_macvtap: left promiscuous mode [ 597.188859][ T76] veth0_macvtap: left promiscuous mode [ 597.199126][ T76] veth1_vlan: left promiscuous mode [ 597.205904][ T76] veth0_vlan: left promiscuous mode [ 597.213946][ T76] veth1_macvtap: left promiscuous mode [ 597.219456][ T76] veth0_macvtap: left promiscuous mode [ 597.227393][ T76] veth1_vlan: left promiscuous mode [ 597.233724][ T76] veth0_vlan: left promiscuous mode [ 597.669863][ T76] team0 (unregistering): Port device team_slave_1 removed [ 597.688492][ T76] team0 (unregistering): Port device team_slave_0 removed [ 597.979217][ T76] team0 (unregistering): Port device team_slave_1 removed [ 597.998656][ T76] team0 (unregistering): Port device team_slave_0 removed [ 598.225491][ T8779] veth0_macvtap: entered promiscuous mode [ 598.239277][ T8779] veth1_macvtap: entered promiscuous mode [ 598.315411][ T8779] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 598.344266][ T8779] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 598.393220][ T1112] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 598.479580][ T1112] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 598.542013][ T1112] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 598.594783][ T1112] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 598.744554][ T8902] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 598.812608][ T998] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 598.821049][ T8902] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 598.831446][ T998] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 598.867075][ T8902] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 598.882013][ T8902] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 598.949550][ T76] IPVS: stop unused estimator thread 0... [ 598.989678][ T8799] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 599.048412][ T8799] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 599.079054][ T8799] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 599.093578][ T7092] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 599.121081][ T7092] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 599.160186][ T8799] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 599.307040][ T51] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 599.319406][ T51] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 599.329994][ T51] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 599.340264][ T51] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 599.348865][ T51] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 599.728538][ T8902] 8021q: adding VLAN 0 to HW filter on device bond0 [ 599.744230][ T8799] 8021q: adding VLAN 0 to HW filter on device bond0 [ 599.825822][ T8799] 8021q: adding VLAN 0 to HW filter on device team0 [ 599.838585][ T8902] 8021q: adding VLAN 0 to HW filter on device team0 [ 599.895281][ T13] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 599.944944][ T998] bridge0: port 1(bridge_slave_0) entered blocking state [ 599.952165][ T998] bridge0: port 1(bridge_slave_0) entered forwarding state [ 599.975736][ T1112] bridge0: port 1(bridge_slave_0) entered blocking state [ 599.982960][ T1112] bridge0: port 1(bridge_slave_0) entered forwarding state [ 600.056999][ T13] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 600.095535][ T1112] bridge0: port 2(bridge_slave_1) entered blocking state [ 600.102788][ T1112] bridge0: port 2(bridge_slave_1) entered forwarding state [ 600.124124][ T1112] bridge0: port 2(bridge_slave_1) entered blocking state [ 600.131328][ T1112] bridge0: port 2(bridge_slave_1) entered forwarding state [ 600.167099][ T13] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 600.256299][ T9217] chnl_net:caif_netlink_parms(): no params data found [ 600.345163][ T13] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 600.646526][ T9217] bridge0: port 1(bridge_slave_0) entered blocking state [ 600.691951][ T9217] bridge0: port 1(bridge_slave_0) entered disabled state [ 600.699264][ T9217] bridge_slave_0: entered allmulticast mode [ 600.722818][ T9217] bridge_slave_0: entered promiscuous mode [ 600.815504][ T9217] bridge0: port 2(bridge_slave_1) entered blocking state [ 600.833726][ T9217] bridge0: port 2(bridge_slave_1) entered disabled state [ 600.846111][ T9217] bridge_slave_1: entered allmulticast mode [ 600.871214][ T9217] bridge_slave_1: entered promiscuous mode [ 600.877790][ T5842] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 600.892758][ T5842] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 600.905235][ T5842] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 600.914098][ T5842] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 600.921996][ T5842] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 601.155426][ T9217] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 601.189062][ T13] bridge_slave_1: left allmulticast mode [ 601.210422][ T13] bridge_slave_1: left promiscuous mode [ 601.218179][ T13] bridge0: port 2(bridge_slave_1) entered disabled state [ 601.245404][ T13] bridge_slave_0: left allmulticast mode [ 601.270547][ T13] bridge_slave_0: left promiscuous mode [ 601.276378][ T13] bridge0: port 1(bridge_slave_0) entered disabled state [ 601.395284][ T51] Bluetooth: hci5: command tx timeout [ 601.552157][ T13] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 601.564043][ T13] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 601.581105][ T13] bond0 (unregistering): Released all slaves [ 601.601067][ T9217] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 601.796656][ T9217] team0: Port device team_slave_0 added [ 601.809812][ T9217] team0: Port device team_slave_1 added [ 601.958050][ T8902] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 601.978984][ T9217] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 602.000957][ T9217] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 602.050444][ T9217] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 602.082111][ T9217] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 602.089109][ T9217] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 602.130024][ T9217] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 602.186715][ T13] hsr_slave_0: left promiscuous mode [ 602.197334][ T13] hsr_slave_1: left promiscuous mode [ 602.204341][ T13] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 602.212905][ T13] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 602.221805][ T13] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 602.229188][ T13] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 602.244143][ T13] veth1_macvtap: left promiscuous mode [ 602.249637][ T13] veth0_macvtap: left promiscuous mode [ 602.255599][ T13] veth1_vlan: left promiscuous mode [ 602.261906][ T13] veth0_vlan: left promiscuous mode [ 602.624815][ T13] team0 (unregistering): Port device team_slave_1 removed [ 602.652340][ T13] team0 (unregistering): Port device team_slave_0 removed [ 602.991846][ T51] Bluetooth: hci3: command tx timeout [ 603.012402][ T9217] hsr_slave_0: entered promiscuous mode [ 603.044687][ T9217] hsr_slave_1: entered promiscuous mode [ 603.051469][ T9217] debugfs: 'hsr0' already exists in 'hsr' [ 603.057220][ T9217] Cannot create hsr debugfs directory [ 603.471901][ T51] Bluetooth: hci5: command tx timeout [ 603.490137][ T9246] chnl_net:caif_netlink_parms(): no params data found [ 603.585855][ T8902] veth0_vlan: entered promiscuous mode [ 603.626913][ T8902] veth1_vlan: entered promiscuous mode [ 603.866857][ T9246] bridge0: port 1(bridge_slave_0) entered blocking state [ 603.874168][ T9246] bridge0: port 1(bridge_slave_0) entered disabled state [ 603.886664][ T9246] bridge_slave_0: entered allmulticast mode [ 603.900963][ T9246] bridge_slave_0: entered promiscuous mode [ 603.909922][ T9246] bridge0: port 2(bridge_slave_1) entered blocking state [ 603.917515][ T9246] bridge0: port 2(bridge_slave_1) entered disabled state [ 603.925129][ T9246] bridge_slave_1: entered allmulticast mode [ 603.935011][ T9246] bridge_slave_1: entered promiscuous mode [ 604.007896][ T8902] veth0_macvtap: entered promiscuous mode [ 604.063191][ T8902] veth1_macvtap: entered promiscuous mode [ 604.092235][ T9246] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 604.144938][ T9246] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 604.288768][ T8902] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 604.304331][ T8902] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 604.313911][ T9246] team0: Port device team_slave_0 added [ 604.323863][ T9246] team0: Port device team_slave_1 added [ 604.357536][ T998] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 604.381287][ T9217] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 604.395080][ T9217] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 604.407107][ T9217] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 604.420975][ T998] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 604.429740][ T9217] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 604.466044][ T998] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 604.477365][ T998] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 604.493894][ T9246] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 604.500977][ T9246] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 604.534777][ T9246] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 604.548615][ T9246] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 604.556150][ T9246] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 604.586550][ T9246] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 604.798158][ T9246] hsr_slave_0: entered promiscuous mode [ 604.805574][ T9246] hsr_slave_1: entered promiscuous mode [ 604.812598][ T9246] debugfs: 'hsr0' already exists in 'hsr' [ 604.818330][ T9246] Cannot create hsr debugfs directory [ 604.881785][ T13] bridge_slave_1: left allmulticast mode [ 604.887480][ T13] bridge_slave_1: left promiscuous mode [ 604.893715][ T13] bridge0: port 2(bridge_slave_1) entered disabled state [ 604.903616][ T13] bridge_slave_0: left allmulticast mode [ 604.909284][ T13] bridge_slave_0: left promiscuous mode [ 604.916062][ T13] bridge0: port 1(bridge_slave_0) entered disabled state [ 605.071225][ T51] Bluetooth: hci3: command tx timeout [ 605.107273][ T13] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 605.118436][ T13] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 605.129160][ T13] bond0 (unregistering): Released all slaves [ 605.220884][ T1112] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 605.232026][ T1112] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 605.273321][ T13] hsr_slave_0: left promiscuous mode [ 605.279380][ T13] hsr_slave_1: left promiscuous mode [ 605.286438][ T13] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 605.294445][ T13] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 605.467951][ T13] team0 (unregistering): Port device team_slave_1 removed [ 605.486731][ T13] team0 (unregistering): Port device team_slave_0 removed [ 605.550656][ T51] Bluetooth: hci5: command tx timeout [ 605.717622][ T83] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 605.730882][ T83] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 605.966434][ T9321] loop8: detected capacity change from 0 to 2048 [ 606.173208][ T9329] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 607.085103][ T9321] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 607.150494][ T51] Bluetooth: hci3: command tx timeout [ 607.674465][ T51] Bluetooth: hci5: command tx timeout [ 607.753919][ T9321] ext4 filesystem being mounted at /53/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 607.784837][ T9338] netlink: 20 bytes leftover after parsing attributes in process `syz.3.534'. [ 608.300725][ T9217] 8021q: adding VLAN 0 to HW filter on device bond0 [ 609.173967][ T9345] vivid-002: ================= START STATUS ================= [ 609.183742][ T9345] vivid-002: Radio HW Seek Mode: Bounded [ 609.189724][ T9345] vivid-002: Radio Programmable HW Seek: false [ 609.196548][ T9345] vivid-002: RDS Rx I/O Mode: Block I/O [ 609.202379][ T9345] vivid-002: Generate RBDS Instead of RDS: false [ 609.208907][ T9345] vivid-002: RDS Reception: true [ 609.214121][ T9345] vivid-002: RDS Program Type: 0 inactive [ 609.220128][ T9345] vivid-002: RDS PS Name: inactive [ 609.225859][ T9345] vivid-002: RDS Radio Text: inactive [ 609.232174][ T9345] vivid-002: RDS Traffic Announcement: false inactive [ 609.238986][ T9345] vivid-002: RDS Traffic Program: false inactive [ 609.245526][ T9345] vivid-002: RDS Music: false inactive [ 609.251134][ T9345] vivid-002: ================== END STATUS ================== [ 609.281342][ T5842] Bluetooth: hci3: command tx timeout [ 609.348541][ T9217] 8021q: adding VLAN 0 to HW filter on device team0 [ 609.577537][ T7420] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 609.656790][ T9350] random: crng reseeded on system resumption [ 610.300051][ T9354] EXT4-fs (nbd7): unable to read superblock [ 610.560422][ T5842] Bluetooth: hci0: command 0x0406 tx timeout [ 610.564081][ T7092] bridge0: port 1(bridge_slave_0) entered blocking state [ 610.575390][ T7092] bridge0: port 1(bridge_slave_0) entered forwarding state [ 610.778150][ T9355] loop3: detected capacity change from 0 to 512 [ 610.807886][ T7092] bridge0: port 2(bridge_slave_1) entered blocking state [ 610.815099][ T7092] bridge0: port 2(bridge_slave_1) entered forwarding state [ 610.839680][ T5853] udevd[5853]: inotify_add_watch(7, /dev/nbd64, 10) failed: No such file or directory [ 610.849513][ T9355] EXT4-fs (loop3): blocks per group (95) and clusters per group (32768) inconsistent [ 610.894594][ T5853] udevd[5853]: inotify_add_watch(7, /dev/nbd64, 10) failed: No such file or directory [ 611.237443][ T9217] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 612.013233][ T9358] loop8: detected capacity change from 0 to 1024 [ 612.871903][ T6081] hfsplus: b-tree write err: -5, ino 25 [ 612.877742][ T6081] hfsplus: b-tree write err: -5, ino 4 [ 612.984320][ T6081] hfsplus: b-tree write err: -5, ino 2 [ 613.080651][ T6081] hfsplus: b-tree write err: -5, ino 17 [ 613.393644][ T9370] loop3: detected capacity change from 0 to 4096 [ 613.406148][ T9370] EXT4-fs: inline encryption not supported [ 613.491581][ T9370] EXT4-fs: Project quota feature not enabled. Cannot enable project quota enforcement. [ 613.550674][ T9371] IPVS: sync thread started: state = BACKUP, mcast_ifn = vcan0, syncid = 2, id = 0 [ 613.632991][ T9246] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 613.743481][ T9246] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 614.180994][ T9246] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 614.273725][ T9246] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 617.024883][ T9217] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 617.212004][ T9401] netlink: 24 bytes leftover after parsing attributes in process `syz.7.538'. [ 617.527123][ T9403] program syz.3.537 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 617.609881][ T5909] IPVS: starting estimator thread 0... [ 618.490603][ T9402] IPVS: using max 23 ests per chain, 55200 per kthread [ 618.589423][ T9246] 8021q: adding VLAN 0 to HW filter on device bond0 [ 619.776292][ T9413] netlink: 20 bytes leftover after parsing attributes in process `syz.0.540'. [ 620.782978][ T9421] loop8: detected capacity change from 0 to 512 [ 620.783265][ T9246] 8021q: adding VLAN 0 to HW filter on device team0 [ 621.650604][ T9421] EXT4-fs (loop8): blocks per group (95) and clusters per group (32768) inconsistent [ 622.021174][ T7092] bridge0: port 1(bridge_slave_0) entered blocking state [ 622.028349][ T7092] bridge0: port 1(bridge_slave_0) entered forwarding state [ 622.742925][ T5932] IPVS: starting estimator thread 0... [ 622.795689][ T9217] veth0_vlan: entered promiscuous mode [ 622.850647][ T9432] IPVS: using max 23 ests per chain, 55200 per kthread [ 622.904592][ T9217] veth1_vlan: entered promiscuous mode [ 622.947714][ T5854] udevd[5854]: inotify_add_watch(7, /dev/nbd64, 10) failed: No such file or directory [ 622.975491][ T5853] udevd[5853]: inotify_add_watch(7, /dev/nbd64, 10) failed: No such file or directory [ 623.337790][ T1112] bridge0: port 2(bridge_slave_1) entered blocking state [ 623.345077][ T1112] bridge0: port 2(bridge_slave_1) entered forwarding state [ 623.578734][ T9217] veth0_macvtap: entered promiscuous mode [ 623.624987][ T9217] veth1_macvtap: entered promiscuous mode [ 623.716109][ T1296] ieee802154 phy0 wpan0: encryption failed: -22 [ 623.729852][ T1296] ieee802154 phy1 wpan1: encryption failed: -22 [ 623.756942][ T9217] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 623.784769][ T9440] loop0: detected capacity change from 0 to 64 [ 624.135522][ T9441] loop8: detected capacity change from 0 to 32768 [ 624.827843][ T9217] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 624.963895][ T9451] netlink: 4 bytes leftover after parsing attributes in process `syz.7.545'. [ 625.200325][ T6081] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 625.230754][ T9441] XFS (loop8): Mounting V5 Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 625.261870][ T1112] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 626.519621][ T49] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 626.686878][ T9441] XFS (loop8): Ending clean mount [ 626.705688][ T49] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 626.724324][ T9441] XFS (loop8): Quotacheck needed: Please wait. [ 626.990000][ T9441] XFS (loop8): Quotacheck: Done. [ 627.134168][ T7420] XFS (loop8): Unmounting Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 627.292108][ T9246] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 628.793337][ T9246] veth0_vlan: entered promiscuous mode [ 628.808415][ T9246] veth1_vlan: entered promiscuous mode [ 628.891345][ T9475] fuse: Bad value for 'group_id' [ 628.896324][ T9475] fuse: Bad value for 'group_id' [ 628.957745][ T9475] loop3: detected capacity change from 0 to 512 [ 628.968889][ T9475] EXT4-fs: Ignoring removed nomblk_io_submit option [ 629.958064][ T9479] nfs: Unknown parameter 'ac˙˙˙˙' [ 631.171714][ T9475] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=8857e02c, mo2=0002] [ 631.211861][ T9475] EXT4-fs error (device loop3): ext4_free_branches:1020: inode #11: comm syz.3.550: invalid indirect mapped block 2683928664 (level 1) [ 631.226030][ T9475] loop3: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 631.230597][ C0] EXT4-fs (loop3): error count since last fsck: 1 [ 631.246218][ C0] EXT4-fs (loop3): initial error at time 1774934442: ext4_free_branches:1020: inode 11 [ 631.255970][ C0] EXT4-fs (loop3): last error at time 1774934442: ext4_free_branches:1020: inode 11 [ 631.291222][ T9475] EXT4-fs (loop3): Remounting filesystem read-only [ 631.328175][ T9475] EXT4-fs (loop3): 1 truncate cleaned up [ 631.343749][ T9475] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 631.435031][ T9475] EXT4-fs warning (device loop3): ext4_empty_dir:3087: inode #2: comm syz.3.550: directory missing '.' [ 631.950572][ T9246] veth0_macvtap: entered promiscuous mode [ 632.035762][ T5829] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 632.133303][ T1169] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 632.154804][ T1169] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 632.493681][ T9246] veth1_macvtap: entered promiscuous mode [ 632.541174][ T9246] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 632.559199][ T9246] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 632.995265][ T9489] program syz.0.553 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 633.157659][ T1169] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 633.221180][ T1169] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 633.290186][ T49] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 633.350352][ T49] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 633.359459][ T49] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 633.731810][ T13] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 635.794441][ T76] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 635.857838][ T76] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 636.592206][ T998] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 636.701217][ T998] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 643.217357][ T9544] loop0: detected capacity change from 0 to 32768 [ 643.240998][ T9544] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop0 (7:0) scanned by syz.0.565 (9544) [ 643.260563][ T9544] BTRFS info (device loop0): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 643.270894][ T9544] BTRFS info (device loop0): using sha256 checksum algorithm [ 644.227470][ T9544] BTRFS info (device loop0): enabling ssd optimizations [ 644.234557][ T9544] BTRFS info (device loop0): turning on async discard [ 644.241592][ T9544] BTRFS info (device loop0): enabling free space tree [ 646.246837][ T9578] overlayfs: missing 'workdir' [ 647.174697][ T9584] sd 0:0:1:0: PR command failed: 1026 [ 647.180647][ T9584] sd 0:0:1:0: Sense Key : Illegal Request [current] [ 647.187824][ T9584] sd 0:0:1:0: Add. Sense: Invalid command operation code [ 647.942076][ T8452] BTRFS info (device loop0): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 648.961381][ T9602] netlink: 20 bytes leftover after parsing attributes in process `syz.2.576'. [ 649.499364][ T9600] workqueue: Failed to create a rescuer kthread for wq "nfc2_nci_rx_wq": -EINTR [ 650.439380][ T9602] ------------[ cut here ]------------ [ 650.456483][ T9602] !rwb [ 650.456504][ T9602] WARNING: block/blk-wbt.c:785 at wbt_init_enable_default+0x164/0x1c0, CPU#0: syz.2.576/9602 [ 650.469469][ T9602] Modules linked in: [ 650.473709][ T9602] CPU: 0 UID: 0 PID: 9602 Comm: syz.2.576 Not tainted syzkaller #0 PREEMPT(full) [ 650.482980][ T9602] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 650.494474][ T9602] RIP: 0010:wbt_init_enable_default+0x164/0x1c0 [ 650.502604][ T9602] Code: 4d 21 fd 5b 5d 41 5c 41 5d 41 5e e9 31 b8 28 fc 4c 89 f7 e8 4e e6 8c fd eb 83 4c 89 f7 e8 44 e6 8c fd eb d0 e8 cd 4d 21 fd 90 <0f> 0b 90 e9 e9 fe ff ff e8 bf 4d 21 fd 90 0f 0b 90 48 b8 00 00 00 [ 650.523416][ T9602] RSP: 0018:ffffc9000357f180 EFLAGS: 00010287 [ 650.529881][ T9602] RAX: 0000000000018dff RBX: ffff888053f94000 RCX: ffffc9000fdc2000 [ 650.537939][ T9602] RDX: 0000000000080000 RSI: ffffffff84e788f3 RDI: ffffffff8c1b1a20 [ 650.546928][ T9602] RBP: 0000000000000000 R08: 0000000000000001 R09: 0000000000000000 [ 650.555591][ T9602] R10: 0000000000000001 R11: 0000000000000000 R12: ffff888027d342b8 [ 650.563653][ T9602] R13: ffff888032bebd2c R14: ffff888053f94390 R15: ffff888027d342c8 [ 650.571670][ T9602] FS: 00007f67380976c0(0000) GS:ffff88812433c000(0000) knlGS:0000000000000000 [ 650.580705][ T9602] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 650.587326][ T9602] CR2: 00007f69c23b7d58 CR3: 000000005f1dd000 CR4: 0000000000350ef0 [ 650.596438][ T9602] Call Trace: [ 650.599737][ T9602] [ 650.603149][ T9602] blk_register_queue+0x42c/0x590 [ 650.608247][ T9602] __add_disk+0x73f/0xe40 [ 650.612681][ T9602] add_disk_fwnode+0x118/0x5c0 [ 650.617493][ T9602] nbd_dev_add+0x77a/0xb10 [ 650.622014][ T9602] ? find_held_lock+0x2b/0x80 [ 650.626736][ T9602] ? __pfx_nbd_dev_add+0x10/0x10 [ 650.631765][ T9602] ? nbd_genl_connect+0x131a/0x1a40 [ 650.637042][ T9602] ? srso_alias_return_thunk+0x5/0xfbef5 [ 650.642764][ T9602] ? srso_alias_return_thunk+0x5/0xfbef5 [ 650.649697][ T9602] ? __radix_tree_lookup+0x217/0x2b0 [ 650.655944][ T9602] nbd_genl_connect+0xb8d/0x1a40 [ 650.660981][ T9602] ? rcu_is_watching+0x12/0xc0 [ 650.665800][ T9602] ? __pfx_nbd_genl_connect+0x10/0x10 [ 650.671516][ T9602] ? srso_alias_return_thunk+0x5/0xfbef5 [ 650.677204][ T9602] ? __nla_parse+0x40/0x60 [ 650.681729][ T9602] ? srso_alias_return_thunk+0x5/0xfbef5 [ 650.687413][ T9602] ? srso_alias_return_thunk+0x5/0xfbef5 [ 650.693161][ T9602] ? genl_family_rcv_msg_attrs_parse.isra.0+0x1aa/0x280 [ 650.700168][ T9602] genl_family_rcv_msg_doit+0x214/0x300 [ 650.705853][ T9602] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 650.712035][ T9602] ? srso_alias_return_thunk+0x5/0xfbef5 [ 650.717809][ T9602] ? genl_get_cmd+0x3ef/0x720 [ 650.722607][ T9602] ? __dev_queue_xmit+0x5af/0x4800 [ 650.727761][ T9602] ? srso_alias_return_thunk+0x5/0xfbef5 [ 650.733624][ T9602] ? __radix_tree_lookup+0x217/0x2b0 [ 650.738977][ T9602] genl_rcv_msg+0x560/0x800 [ 650.743603][ T9602] ? __pfx_genl_rcv_msg+0x10/0x10 [ 650.748682][ T9602] ? srso_alias_return_thunk+0x5/0xfbef5 [ 650.755648][ T9602] ? __pfx_nbd_genl_connect+0x10/0x10 [ 650.761953][ T9602] netlink_rcv_skb+0x159/0x420 [ 650.766768][ T9602] ? __pfx_genl_rcv_msg+0x10/0x10 [ 650.771907][ T9602] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 650.777232][ T9602] ? rcu_is_watching+0x12/0xc0 [ 650.782109][ T9602] ? __rcu_read_unlock+0x26a/0x5e0 [ 650.787287][ T9602] ? srso_alias_return_thunk+0x5/0xfbef5 [ 650.793000][ T9602] ? rcu_is_watching+0x12/0xc0 [ 650.797787][ T9602] genl_rcv+0x28/0x40 [ 650.801856][ T9602] netlink_unicast+0x5aa/0x870 [ 650.806633][ T9602] ? __pfx_netlink_unicast+0x10/0x10 [ 650.812008][ T9602] netlink_sendmsg+0x8b0/0xda0 [ 650.816785][ T9602] ? __pfx_netlink_sendmsg+0x10/0x10 [ 650.822270][ T9602] ? srso_alias_return_thunk+0x5/0xfbef5 [ 650.828091][ T9602] ? aa_sock_msg_perm.isra.0+0x100/0x1b0 [ 650.833812][ T9602] ____sys_sendmsg+0x9e1/0xb70 [ 650.838595][ T9602] ? __pfx_netlink_sendmsg+0x10/0x10 [ 650.843941][ T9602] ? __pfx_____sys_sendmsg+0x10/0x10 [ 650.849250][ T9602] ? __pfx_futex_wake_mark+0x10/0x10 [ 650.855557][ T9602] ___sys_sendmsg+0x190/0x1e0 [ 650.860914][ T9602] ? __pfx____sys_sendmsg+0x10/0x10 [ 650.866138][ T9602] ? srso_alias_return_thunk+0x5/0xfbef5 [ 650.871879][ T9602] ? srso_alias_return_thunk+0x5/0xfbef5 [ 650.877553][ T9602] __sys_sendmsg+0x170/0x220 [ 650.882264][ T9602] ? __pfx___sys_sendmsg+0x10/0x10 [ 650.887403][ T9602] ? srso_alias_return_thunk+0x5/0xfbef5 [ 650.893122][ T9602] ? srso_alias_return_thunk+0x5/0xfbef5 [ 650.898781][ T9602] ? srso_alias_return_thunk+0x5/0xfbef5 [ 650.904570][ T9602] do_syscall_64+0x106/0xf80 [ 650.909174][ T9602] ? irqentry_exit+0x138/0x670 [ 650.913994][ T9602] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 650.920083][ T9602] RIP: 0033:0x7f673719c819 [ 650.924625][ T9602] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 650.944320][ T9602] RSP: 002b:00007f6738097028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 650.952895][ T9602] RAX: ffffffffffffffda RBX: 00007f6737416180 RCX: 00007f673719c819 [ 650.961892][ T9602] RDX: 0000000000000004 RSI: 0000200000000240 RDI: 0000000000000005 [ 650.969869][ T9602] RBP: 00007f6737232c91 R08: 0000000000000000 R09: 0000000000000000 [ 650.978566][ T9602] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 650.986599][ T9602] R13: 00007f6737416218 R14: 00007f6737416180 R15: 00007ffe1e381078 [ 650.994689][ T9602] [ 650.997708][ T9602] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 651.004998][ T9602] CPU: 0 UID: 0 PID: 9602 Comm: syz.2.576 Not tainted syzkaller #0 PREEMPT(full) [ 651.014207][ T9602] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 651.024261][ T9602] Call Trace: [ 651.027536][ T9602] [ 651.030456][ T9602] dump_stack_lvl+0x100/0x190 [ 651.035153][ T9602] vpanic+0x552/0x970 [ 651.039137][ T9602] ? __pfx_vpanic+0x10/0x10 [ 651.043649][ T9602] panic+0xd1/0xe0 [ 651.047372][ T9602] ? __pfx_panic+0x10/0x10 [ 651.051887][ T9602] check_panic_on_warn.cold+0x19/0x34 [ 651.057271][ T9602] ? wbt_init_enable_default+0x164/0x1c0 [ 651.062944][ T9602] __warn.cold+0x191/0x348 [ 651.067395][ T9602] __report_bug+0x296/0x3d0 [ 651.071920][ T9602] ? wbt_init_enable_default+0x164/0x1c0 [ 651.077570][ T9602] ? __pfx___report_bug+0x10/0x10 [ 651.082636][ T9602] ? wbt_init_enable_default+0x164/0x1c0 [ 651.088285][ T9602] report_bug+0xb2/0x220 [ 651.092544][ T9602] ? wbt_init_enable_default+0x164/0x1c0 [ 651.098195][ T9602] handle_bug+0x16a/0x2a0 [ 651.102627][ T9602] exc_invalid_op+0x17/0x50 [ 651.107146][ T9602] asm_exc_invalid_op+0x1a/0x20 [ 651.112005][ T9602] RIP: 0010:wbt_init_enable_default+0x164/0x1c0 [ 651.118258][ T9602] Code: 4d 21 fd 5b 5d 41 5c 41 5d 41 5e e9 31 b8 28 fc 4c 89 f7 e8 4e e6 8c fd eb 83 4c 89 f7 e8 44 e6 8c fd eb d0 e8 cd 4d 21 fd 90 <0f> 0b 90 e9 e9 fe ff ff e8 bf 4d 21 fd 90 0f 0b 90 48 b8 00 00 00 [ 651.137905][ T9602] RSP: 0018:ffffc9000357f180 EFLAGS: 00010287 [ 651.143984][ T9602] RAX: 0000000000018dff RBX: ffff888053f94000 RCX: ffffc9000fdc2000 [ 651.152043][ T9602] RDX: 0000000000080000 RSI: ffffffff84e788f3 RDI: ffffffff8c1b1a20 [ 651.160013][ T9602] RBP: 0000000000000000 R08: 0000000000000001 R09: 0000000000000000 [ 651.167982][ T9602] R10: 0000000000000001 R11: 0000000000000000 R12: ffff888027d342b8 [ 651.175987][ T9602] R13: ffff888032bebd2c R14: ffff888053f94390 R15: ffff888027d342c8 [ 651.184061][ T9602] ? wbt_init_enable_default+0x163/0x1c0 [ 651.189719][ T9602] blk_register_queue+0x42c/0x590 [ 651.194854][ T9602] __add_disk+0x73f/0xe40 [ 651.199220][ T9602] add_disk_fwnode+0x118/0x5c0 [ 651.203989][ T9602] nbd_dev_add+0x77a/0xb10 [ 651.208411][ T9602] ? find_held_lock+0x2b/0x80 [ 651.213102][ T9602] ? __pfx_nbd_dev_add+0x10/0x10 [ 651.218038][ T9602] ? nbd_genl_connect+0x131a/0x1a40 [ 651.223313][ T9602] ? srso_alias_return_thunk+0x5/0xfbef5 [ 651.228949][ T9602] ? srso_alias_return_thunk+0x5/0xfbef5 [ 651.234589][ T9602] ? __radix_tree_lookup+0x217/0x2b0 [ 651.239895][ T9602] nbd_genl_connect+0xb8d/0x1a40 [ 651.244840][ T9602] ? rcu_is_watching+0x12/0xc0 [ 651.249615][ T9602] ? __pfx_nbd_genl_connect+0x10/0x10 [ 651.255000][ T9602] ? srso_alias_return_thunk+0x5/0xfbef5 [ 651.260642][ T9602] ? __nla_parse+0x40/0x60 [ 651.265084][ T9602] ? srso_alias_return_thunk+0x5/0xfbef5 [ 651.270722][ T9602] ? srso_alias_return_thunk+0x5/0xfbef5 [ 651.276359][ T9602] ? genl_family_rcv_msg_attrs_parse.isra.0+0x1aa/0x280 [ 651.283332][ T9602] genl_family_rcv_msg_doit+0x214/0x300 [ 651.288895][ T9602] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 651.294987][ T9602] ? srso_alias_return_thunk+0x5/0xfbef5 [ 651.300628][ T9602] ? genl_get_cmd+0x3ef/0x720 [ 651.305319][ T9602] ? __dev_queue_xmit+0x5af/0x4800 [ 651.310437][ T9602] ? srso_alias_return_thunk+0x5/0xfbef5 [ 651.316076][ T9602] ? __radix_tree_lookup+0x217/0x2b0 [ 651.321381][ T9602] genl_rcv_msg+0x560/0x800 [ 651.325896][ T9602] ? __pfx_genl_rcv_msg+0x10/0x10 [ 651.330935][ T9602] ? srso_alias_return_thunk+0x5/0xfbef5 [ 651.336580][ T9602] ? __pfx_nbd_genl_connect+0x10/0x10 [ 651.341972][ T9602] netlink_rcv_skb+0x159/0x420 [ 651.346738][ T9602] ? __pfx_genl_rcv_msg+0x10/0x10 [ 651.351770][ T9602] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 651.357052][ T9602] ? rcu_is_watching+0x12/0xc0 [ 651.361915][ T9602] ? __rcu_read_unlock+0x26a/0x5e0 [ 651.367049][ T9602] ? srso_alias_return_thunk+0x5/0xfbef5 [ 651.372691][ T9602] ? rcu_is_watching+0x12/0xc0 [ 651.377469][ T9602] genl_rcv+0x28/0x40 [ 651.381465][ T9602] netlink_unicast+0x5aa/0x870 [ 651.386235][ T9602] ? __pfx_netlink_unicast+0x10/0x10 [ 651.391533][ T9602] netlink_sendmsg+0x8b0/0xda0 [ 651.396307][ T9602] ? __pfx_netlink_sendmsg+0x10/0x10 [ 651.401609][ T9602] ? srso_alias_return_thunk+0x5/0xfbef5 [ 651.407277][ T9602] ? aa_sock_msg_perm.isra.0+0x100/0x1b0 [ 651.412945][ T9602] ____sys_sendmsg+0x9e1/0xb70 [ 651.417713][ T9602] ? __pfx_netlink_sendmsg+0x10/0x10 [ 651.423002][ T9602] ? __pfx_____sys_sendmsg+0x10/0x10 [ 651.428299][ T9602] ? __pfx_futex_wake_mark+0x10/0x10 [ 651.433598][ T9602] ___sys_sendmsg+0x190/0x1e0 [ 651.438290][ T9602] ? __pfx____sys_sendmsg+0x10/0x10 [ 651.443494][ T9602] ? srso_alias_return_thunk+0x5/0xfbef5 [ 651.449149][ T9602] ? srso_alias_return_thunk+0x5/0xfbef5 [ 651.454817][ T9602] __sys_sendmsg+0x170/0x220 [ 651.459428][ T9602] ? __pfx___sys_sendmsg+0x10/0x10 [ 651.464561][ T9602] ? srso_alias_return_thunk+0x5/0xfbef5 [ 651.470203][ T9602] ? srso_alias_return_thunk+0x5/0xfbef5 [ 651.475871][ T9602] ? srso_alias_return_thunk+0x5/0xfbef5 [ 651.481525][ T9602] do_syscall_64+0x106/0xf80 [ 651.486121][ T9602] ? irqentry_exit+0x138/0x670 [ 651.490890][ T9602] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 651.496793][ T9602] RIP: 0033:0x7f673719c819 [ 651.501211][ T9602] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 651.520824][ T9602] RSP: 002b:00007f6738097028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 651.529248][ T9602] RAX: ffffffffffffffda RBX: 00007f6737416180 RCX: 00007f673719c819 [ 651.537215][ T9602] RDX: 0000000000000004 RSI: 0000200000000240 RDI: 0000000000000005 [ 651.545185][ T9602] RBP: 00007f6737232c91 R08: 0000000000000000 R09: 0000000000000000 [ 651.553156][ T9602] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 651.561121][ T9602] R13: 00007f6737416218 R14: 00007f6737416180 R15: 00007ffe1e381078 [ 651.569119][ T9602] [ 651.572252][ T9602] Kernel Offset: disabled [ 651.576567][ T9602] Rebooting in 86400 seconds..