last executing test programs: 58.454579987s ago: executing program 1: syz_open_procfs(0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0x0, 0x0, 0x0, 0x0, 0x1}, 0x48) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000200)='./file1\x00', 0x200010, &(0x7f0000000080), 0xfe, 0x55d, &(0x7f0000000980)="$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") r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000540)='memory.swap.current\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000000), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x800006, 0x11, r0, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x60000b, 0x9) open(&(0x7f0000000340)='./bus\x00', 0x8e046, 0x0) mount(&(0x7f0000000380)=@loop={'/dev/loop', 0x0}, 0x0, 0x0, 0x1000, 0x0) r1 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) ioctl$LOOP_SET_STATUS64(r1, 0x4c04, &(0x7f00000007c0)={0x0, 0x0, 0x0, 0x0, 0x1718, 0x0, 0x0, 0x0, 0x0, "ef359f413bb93852f7d6ffff5d29c3ee5e5ca9000f7c41f7adc9a3ebbc50fdc660ee77df701908b9aaa3f6a005b230f400", "f8208406780820d1cbf7896de100cf00000000000000cf71011bbdb70f000000090080000000000000000000040000e7291f00", "b7320900181c1f0000000000b9000000000000000000f0fffffffff2ff00"}) madvise(&(0x7f0000000000/0x600000)=nil, 0x60001c, 0x9) 58.414325271s ago: executing program 4: openat(0xffffffffffffffff, &(0x7f0000000040)='./file1\x00', 0x0, 0x0) ioctl$LOOP_CLR_FD(0xffffffffffffffff, 0x4c01) r0 = openat(0xffffffffffffff9c, 0x0, 0x103042, 0x0) write(r0, &(0x7f0000001080), 0x0) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x0, &(0x7f00000000c0), 0x4) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000240)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) keyctl$session_to_parent(0x12) request_key(&(0x7f0000002740)='asymmetric\x00', &(0x7f0000002780)={'syz', 0x3}, &(0x7f00000027c0)=',*[\\/&)\x00', 0x0) pwrite64(0xffffffffffffffff, &(0x7f0000000240)="66289136f77ee234f23bfe05fd033bcd5d6d76f1ca8228a37bdd2bfb2814b418dca7", 0x22, 0x7fb) open(&(0x7f00000000c0)='./bus\x00', 0xca942, 0x0) setxattr$trusted_overlay_origin(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040), &(0x7f00000001c0), 0x2, 0x2) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000280)={'wlan1\x00'}) 57.45058383s ago: executing program 1: r0 = socket$inet6_sctp(0xa, 0x0, 0x84) recvmmsg(0xffffffffffffffff, &(0x7f0000004500)=[{{0x0, 0x0, &(0x7f0000000800)=[{&(0x7f0000000580)=""/46, 0x2e}], 0x1}}], 0x1, 0x0, 0x0) socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$sock(r1, &(0x7f00000044c0), 0x4000000000001c0, 0x0) recvfrom(r2, &(0x7f0000000040)=""/60, 0x3c, 0x40, 0x0, 0x0) pselect6(0x40, &(0x7f0000000000), 0x0, &(0x7f0000000100)={0xb}, 0x0, 0x0) io_uring_enter(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$VIDIOC_G_TUNER(0xffffffffffffffff, 0xc054561d, &(0x7f0000000080)={0x1, "bbb87f7bd49d05876e59340c3a70b1ab83115021c34cc1dedd3db415e5084c76"}) shutdown(r0, 0x1) 55.862306419s ago: executing program 4: socket$nl_generic(0x10, 0x3, 0x10) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0x1, 0x5, 0x9, 0x84}, 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000300)={0xffffffffffffffff, 0x0, &(0x7f00000000c0), &(0x7f0000000240), 0x800}, 0x38) bind$netlink(0xffffffffffffffff, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000100)={'syztnl1\x00', 0x0}) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f00000001c0)={'ip6_vti0\x00', &(0x7f0000000000)={'syztnl1\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @dev}, @loopback={0xff00000000000000}}}) syz_genetlink_get_family_id$nl80211(&(0x7f0000000500), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000300)={'wlan0\x00'}) ioctl$USBDEVFS_DISCONNECT_CLAIM(0xffffffffffffffff, 0x8108551b, &(0x7f0000000540)={0x3f, 0x0, "c231f40722738d85aa8a68e0247532e8955e04423e3de6825b21a0ebc507a454966ba8217c8155e3f128141c3f16b8e1e4859efc0aafba78a148a5b57a95b4f739bbe74266eed2156e0cbad1b51cdcd8c9ff5720d5fb6da0f01927da8e813c3ddc2eb9279fe3ad2badf7f6bea7dc2da543c6c659dedfa2ca58b905e00de1a5b008deb9bd6140389433721975bb9499284194fcf15a1d254289a1ef521b9633d25566f12cb7908f5800fd73a7cf5054694a5c055bd37a349cb9d0a12dd4de3110750270875c3bc55bacd3f79a5669ee3f06910970fa82e46363d1aa608ca26526557a06e6daa34569c02ead042b217a07147e1f8908d161c925f4c2b76b25f7c2"}) r4 = socket$netlink(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_NEW_INTERFACE(r4, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000280)=ANY=[@ANYBLOB='\x00\x00\x00\x00', @ANYRESDEC=r3, @ANYBLOB="090d0000000000f0ff000700000008000300", @ANYRES32, @ANYRESDEC], 0x58}}, 0x0) 55.453364981s ago: executing program 1: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000440)=0x110001) r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) preadv(r0, &(0x7f0000000240)=[{&(0x7f0000033a80)=""/102386, 0xfffffd6e}], 0x1, 0x0, 0x0) syz_mount_image$ext4(&(0x7f0000000340)='ext4\x00', &(0x7f0000000180)='./bus\x00', 0x4a, &(0x7f00000004c0)={[{@resuid}, {@init_itable}, {@errors_remount}, {@bsdgroups}]}, 0x3, 0x451, &(0x7f0000000f80)="$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") chdir(0x0) set_mempolicy(0x2, &(0x7f0000000140)=0x4000003, 0x2) syz_mount_image$iso9660(&(0x7f0000000a80), &(0x7f0000000ac0)='./file0\x00', 0x400, &(0x7f0000000380)=ANY=[@ANYBLOB='overriderockperm,cruft,dmode=0x0000000000000003,uid=', @ANYRESHEX=0x0, @ANYBLOB=',norock,gid=', @ANYBLOB="b95a49ab247d", @ANYBLOB="2c00b5da148e02d10fa2eeaa"], 0x1, 0xa57, &(0x7f0000000b00)="$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") sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, 0x0}, 0x0) socket$l2tp(0x2, 0x2, 0x73) getsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x0, &(0x7f00000000c0)={@loopback, @broadcast}, 0x0) ioctl$DRM_IOCTL_MODE_SETPROPERTY(0xffffffffffffffff, 0xc01064ab, 0x0) write$cgroup_int(0xffffffffffffffff, &(0x7f0000000200), 0xfdef) 54.446648935s ago: executing program 4: socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)={0x0, 0x3c}, 0x1, 0xffffffea}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000880)=@base={0x9, 0x6, 0x4, 0x7fc}, 0x48) syz_usb_control_io$cdc_ncm(0xffffffffffffffff, 0x0, &(0x7f0000000b40)={0x44, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000a40)={0x20, 0x85, 0x4}, 0x0, 0x0, 0x0}) r3 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$SO_TIMESTAMPING(r3, 0x1, 0x25, &(0x7f0000000080)=0x474c, 0x4) bind$inet(r3, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10) setsockopt$inet_int(r3, 0x0, 0xc, &(0x7f0000000000)=0xb, 0x4) connect$inet(r3, &(0x7f0000000480)={0x2, 0x0, @multicast2}, 0x10) sendmmsg(r3, &(0x7f0000007fc0), 0x2d, 0x0) 52.691127571s ago: executing program 4: socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, &(0x7f0000000040)={0x0, 0x0}, 0x10) bind$inet6(0xffffffffffffffff, &(0x7f0000000100)={0xa, 0x4e23, 0x0, @local, 0x7f}, 0x1c) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = socket$alg(0x26, 0x5, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r2 = openat$cgroup_int(r1, &(0x7f0000000140)='cpu.weight.nice\x00', 0x2, 0x0) sendfile(r2, 0xffffffffffffffff, 0x0, 0xc92) r3 = accept4(0xffffffffffffffff, 0x0, 0x0, 0x0) recvmmsg(r0, &(0x7f0000001440)=[{{0x0, 0x0, &(0x7f0000000940)=[{&(0x7f00000001c0)=""/156, 0x9c}], 0x1}}], 0x1, 0x40000062, 0x0) sendto$inet6(r3, &(0x7f0000000100), 0x0, 0x0, 0x0, 0x0) r4 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000680), 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000001c0)=0x5) preadv(r4, &(0x7f00000007c0)=[{&(0x7f0000001a80)=""/102400, 0x19000}], 0x1, 0x0, 0x0) openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0, 0x0) fanotify_init(0x0, 0x0) lsetxattr$security_capability(&(0x7f00000000c0)='./file0\x00', 0x0, 0x0, 0x0, 0x2) openat$nullb(0xffffffffffffff9c, 0x0, 0x4000000004002, 0x0) mmap(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0xa, 0x4010, r0, 0x9ab17000) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000000), 0x1, 0x0) syz_usb_connect$hid(0xf63067478e218e8, 0x36, 0x0, 0x0) writev(0xffffffffffffffff, &(0x7f0000000240)=[{&(0x7f0000000800)='9', 0x1}], 0x1) socket$inet6_tcp(0xa, 0x1, 0x0) socket$nl_route(0x10, 0x3, 0x0) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) 52.454011054s ago: executing program 0: syz_mount_image$nilfs2(&(0x7f0000000a40), &(0x7f0000000a80)='./file0\x00', 0x0, &(0x7f0000000ac0)=ANY=[@ANYBLOB], 0x1, 0xa1d, &(0x7f0000001540)="$eJzs3U2MG1cdAPBn73rzWeKUhC5paBMKbfnobrNZwkcETdVciJqKW6WKS5SmJSINiFSCVj0kOXGjVRWufIhTLxUgJHpBUU9cKtFIXHoqCHEgClIlDqWQLIr3Pa/3H5uxd5P1ev37SW+fZ/5jvzfe8Xg8M++9BIyteuvv/Px0LaVLb71+9B8P/n3LzTmPtZdotv5Odkw1Ukq1PD0ZXu/9icX8+gevnOyW19Jc62+ZTk9daz93W0rpfNqXLqdm2nPpymvvzD15/MKxi/vffePw1Tuz9gAAMF6+dfnw/O6//OnenR+9ed+RtKk9vxyfN/P09nzcfyQf+Jfj/3paPl3rSJ2mwnKTOdXDchNdlusspxGWm+xR/lR43UaP5TZVlD/RMa/besMoK9txM9XqM8um6/WZmcXf5Kn1u36qNnP29Jnnzg2posBt96/7U0r7JEkax7SwY9h7IIBF8XrhLc7HMwur0361yf7Kv/Z4vfvz4TZY6+1f+aNV/q8u2ONw+2zUramsV/kcbc/T8TpCvH9p0M9/eb14PaLRZz17XUcYlesLveo5scb1WKle9Y/bxUb19ZyX9+EbId75+Yn/01H5HwPdfej8vySNbVoY9g4IWLfifXMLWYnH+/pifFNFfHNFfEtFfGtFfFtFHMbZb1/8SXq1tvQ7P/6mH/R8WDnPdlfOPzZgfeL5yEHLj/f9Dmq15cf7iWE9+/2Jp0995dlnrize/19rb/838va+L08382frcl6gnC+M59Xb9/43l5dT77Hc3aE+d3VZvvV41/LlaruWXid17Gduqcf08uft6LXc3uXLNcNyW3LaHOobj0+2hueV44+yXy3v12RY30ZYj6lQj7Jf2ZnzWA9YibI99rr/v2yf06lRe+70mVOP5umynf5xorHp5vwDa1xvYPX6bf8znZa3/9nent+od+4XdizNr3XuF5ph/lyP+QfzdPme+87Eltb8mZPfO/Ps7V55GHPnXnr5uyfOnDn1Aw888MCD9oNh75mAO232xRe+P3vupZcfOf3CiedPPX/q7MFDhw7OzR366sH52dZx/Wzn0T2wkSx96Q+7JgAAAAAAAAAAAEC/fnjs6JU/v/3l9xbb/y+1/yvt/8udv6X9/49D+//YTr60gy/tAHd2ibeWCR2sToXlGjl9PNR3Vyhnd3jeJ3LeHscvt/8vxcV+XUt97gnzY/+9ZbnQnUCaSLf2PzIVntdZv0/n/GLOf5lgiGpbus/OeVX/1mVbL/1T6JdiNJX/W9kaSj8mpf13r36dyv5/5xrUkdtvLZoTDnsdge7+Ofb9f+cjmKHXQ5LWPi0sGMUDWB+GPf5nOe9Z8rN/+Obmm6ksdu3x5fvL2H8prMZ6H39S+Rtr/M/2+Hd97//CiHnNlZX7759dfa+j2LSn3/Lj+pd+oHcNVv5HufyyNg+l/spf+EUoP14Q6tN/Qvlb+yz/lvXfu7Ly/5vLL2/bww/0W/5ijWv15fVonzf+cDEv1//ieePielj/0rfnwOu/woEab+TyYZyNyjizgxqV8X97ifdhfClPlx1huc8hjncyaP3L/RXle2B3eP1axfeb8X9H29dyXvV5KOP/lu2x2WW63jHd6PLebtR9DYyq98f++p+0irR429fw6yGtMC0sLNzZE1oVhlo4Q3//h/07YdjlD/v9rxLH/43H8HH83xiP4//GeBz/N8bj+HoxHsf/je9nHP83xu8JrxvHB56uiH+yIr6nIn5vRXxvRfxTFfH9FfH7KuL3V8Tvrog/UBH/TEX8sxXxByviD1fEP1cR3+hKe5RxXX8YZ7F9ns8/jI9y/afX539XRRwYXT9988ATz/zm283F9v9T7fMh5TrekTzdyL+df5Sn43Xv1DF9M/Z2nv5riK/38x0wTmL/GfH7/aGKODC6yn1ePt8whmrde+zpt9+qXsf5jJbP5/wLOf9izh/J+UzOZ3N+IOdza1Q/7ownfv27w6/Wln7v7wjxfu8nj+2BYj9RB5dCf/t/9YnnBwa9nz324zeo1Za/wuZgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQ1Nv/Z2fn66ldOmt148+ffz07M05j7WXaLb+TnZMNdrPS+nRnE/k/Of5wfUPXjnZmd/IeS3NpVqqteenp661S9qWUjqf9qXLqZn2XLry2jtzTx6/cOzi/nffOHz1zr0DAAAAsPH9LwAA//9WXw9H") r0 = creat(&(0x7f0000000000)='./bus\x00', 0x0) r1 = open(&(0x7f0000000040)='./bus\x00', 0x64142, 0x0) r2 = openat$adsp1(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$SNDCTL_DSP_SETFMT(r2, 0xc0045005, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000340)={'ip6_vti0\x00', &(0x7f00000002c0)={'syztnl1\x00', 0x0, 0x29, 0x3, 0xe2, 0x0, 0x25, @private0, @private2, 0x0, 0x7800, 0x1, 0x3}}) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x0, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'macvlan0\x00'}) sendmsg$nl_route(r3, 0x0, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000380)) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r6, 0x8933, 0x0) sendmsg$nl_route(r5, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, 0x0, &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) ioctl$sock_ipv6_tunnel_SIOCGET6RD(r0, 0x89f8, 0x0) getsockopt$inet_mreqn(r0, 0x0, 0x20, &(0x7f0000000440)={@remote, @private}, 0x0) r7 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={0x0, 0x40}}, 0x0) r8 = open(&(0x7f0000007f80)='./bus\x00', 0x145142, 0x0) ftruncate(r8, 0x0) sendfile(r1, r8, 0x0, 0x1000000201005) ioctl$FS_IOC_FIEMAP(r0, 0xc020660b, &(0x7f0000000040)=ANY=[]) 51.877605598s ago: executing program 1: bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x651, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) poll(&(0x7f0000000040)=[{}], 0x1, 0x0) timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004}, &(0x7f0000bbdffc)) ioprio_get$pid(0x1, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r1, 0x0, r3, 0x0, 0x9, 0x1) openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000440), 0x2, 0x0) write$RDMA_USER_CM_CMD_QUERY(0xffffffffffffffff, &(0x7f0000000080)={0x13, 0x10, 0xfa00, {&(0x7f0000000480), 0xffffffffffffffff, 0x1}}, 0x18) openat$cgroup_pressure(0xffffffffffffffff, 0x0, 0x2, 0x0) tee(r2, 0xffffffffffffffff, 0x0, 0x0) openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) 51.326348131s ago: executing program 0: syz_open_procfs(0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0x0, 0x0, 0x0, 0x0, 0x1}, 0x48) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000200)='./file1\x00', 0x200010, &(0x7f0000000080), 0xfe, 0x55d, &(0x7f0000000980)="$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") r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000540)='memory.swap.current\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000000), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x800006, 0x11, r0, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x60000b, 0x9) open(&(0x7f0000000340)='./bus\x00', 0x8e046, 0x0) mount(&(0x7f0000000380)=@loop={'/dev/loop', 0x0}, 0x0, 0x0, 0x1000, 0x0) r1 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) ioctl$LOOP_SET_STATUS64(r1, 0x4c04, &(0x7f00000007c0)={0x0, 0x0, 0x0, 0x0, 0x1718, 0x0, 0x0, 0x0, 0x0, "ef359f413bb93852f7d6ffff5d29c3ee5e5ca9000f7c41f7adc9a3ebbc50fdc660ee77df701908b9aaa3f6a005b230f400", "f8208406780820d1cbf7896de100cf00000000000000cf71011bbdb70f000000090080000000000000000000040000e7291f00", "b7320900181c1f0000000000b9000000000000000000f0fffffffff2ff00"}) madvise(&(0x7f0000000000/0x600000)=nil, 0x60001c, 0x9) 49.918025988s ago: executing program 0: r0 = socket$inet6_sctp(0xa, 0x0, 0x84) recvmmsg(0xffffffffffffffff, &(0x7f0000004500)=[{{0x0, 0x0, &(0x7f0000000800)=[{&(0x7f0000000580)=""/46, 0x2e}], 0x1}}], 0x1, 0x0, 0x0) socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$sock(r1, &(0x7f00000044c0), 0x4000000000001c0, 0x0) recvfrom(r2, &(0x7f0000000040)=""/60, 0x3c, 0x40, 0x0, 0x0) pselect6(0x40, &(0x7f0000000000), 0x0, &(0x7f0000000100)={0xb}, 0x0, 0x0) io_uring_enter(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$VIDIOC_G_TUNER(0xffffffffffffffff, 0xc054561d, 0x0) shutdown(r0, 0x1) 48.779360483s ago: executing program 4: r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x8, 0x3, &(0x7f0000000000)=ANY=[@ANYBLOB="7a0a00ff000000007110a38b410000009500000000000000"], &(0x7f0000000480)='syzkaller\x00'}, 0x80) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000000)={'\x00', 0x5}) ioctl$TUNATTACHFILTER(r0, 0x401054d5, &(0x7f0000000240)={0x7, &(0x7f0000000200)=[{0x1, 0x9, 0xff, 0x9}, {0x83, 0x0, 0x5, 0x3}, {0x8, 0x80, 0x6, 0x3}, {0xfff9, 0x80, 0x4, 0xc573}, {0x20, 0x4, 0xcc, 0x9}, {0x1, 0x4, 0x5, 0xfffffffb}, {0xff, 0x81, 0xf9, 0x9}]}) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f0000003580)=ANY=[], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x32, 0xffffffffffffffff, 0x8, &(0x7f0000000000)={0x5}, 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x90) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000001c40)=@newtaction={0xf0, 0x30, 0x1, 0x0, 0x0, {}, [{0xdc, 0x1, [@m_police={0x6c, 0x1, 0x0, 0x0, {{0xb}, {0x40, 0x2, 0x0, 0x1, [[@TCA_POLICE_TBF={0x3c}]]}, {0x4}, {0xc}, {0xc}}}, @m_police={0x6c, 0x2, 0x0, 0x0, {{0xb}, {0x40, 0x2, 0x0, 0x1, [[@TCA_POLICE_TBF={0x3c, 0x1, {0x1}}]]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xf0}, 0x1, 0x0, 0x0, 0x54}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x90) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) select(0x2, 0x0, &(0x7f0000000040), &(0x7f0000000080), &(0x7f00000000c0)) 47.647466115s ago: executing program 1: sched_setscheduler(0x0, 0x0, &(0x7f0000000240)=0x1) socketpair$unix(0x1, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_mount_image$nilfs2(&(0x7f0000000dc0), &(0x7f0000000e00)='./file0\x00', 0x0, &(0x7f0000000e40), 0x1, 0xd99, &(0x7f0000000e80)="$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") sched_setaffinity(0x0, 0x8, &(0x7f0000000040)=0x10001) r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000), 0x200, 0x0) preadv(r0, &(0x7f0000000240)=[{&(0x7f0000033a80)=""/102386, 0xfffffd6e}], 0x1, 0x0, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x5, 0x4, 0xfff, 0x5}, 0x48) openat(0xffffffffffffff9c, &(0x7f0000000440)='./bus\x00', 0x147c42, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./bus\x00', 0x0, 0x0) r3 = socket$rds(0x15, 0x5, 0x0) bind$rds(r3, &(0x7f0000000040)={0x2, 0x0, @local}, 0x10) sendmsg$rds(r3, &(0x7f0000001bc0)={&(0x7f0000000440)={0x2, 0x0, @loopback}, 0x10, 0x0, 0x0, &(0x7f0000001b80)=[@rdma_dest={0x18}], 0x18}, 0x0) ioctl$FS_IOC_FSSETXATTR(r2, 0x401c5820, &(0x7f00000000c0)={0x8}) r4 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r4, &(0x7f0000000040)={0x2, 0x4e22, @empty}, 0x67) setsockopt$SO_BINDTODEVICE(r4, 0x1, 0x19, &(0x7f0000000000)='syz_tun\x00', 0x10) sendto$inet(r4, 0x0, 0x0, 0x20044888, &(0x7f0000000080)={0x2, 0x0, @remote}, 0x10) syz_emit_ethernet(0x3a, &(0x7f00000002c0)={@local, @remote, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x2c, 0x0, 0x0, 0x0, 0x6, 0x0, @remote, @local}, {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x6, 0x6, 0x0, 0x0, 0x0, 0x0, {[@exp_fastopen={0xfe, 0x4}]}}}}}}}, 0x0) link(&(0x7f0000001240)='./bus\x00', &(0x7f0000000bc0)='./file0\x00') bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000001070000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000100)={0x1f, 0xf, &(0x7f0000000540)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083008000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000000000000b7000000000000009500000000000000"], &(0x7f0000000180)='syzkaller\x00', 0x2, 0xeb, &(0x7f0000000200)=""/235, 0x0, 0x11}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00'}, 0x10) openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000019c0)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x3, 0x0, 0x0, {0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x3c, 0x9, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz2\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x1f}]}, @NFT_MSG_NEWSETELEM={0x30, 0x1e, 0xa, 0x801, 0x0, 0x0, {0x1}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz2\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x4}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14, 0x10}}, 0xb4}}, 0x0) 47.099682168s ago: executing program 0: sched_setscheduler(0x0, 0x0, &(0x7f0000000240)=0x1) socketpair$unix(0x1, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_mount_image$nilfs2(&(0x7f0000000dc0), &(0x7f0000000e00)='./file0\x00', 0x0, &(0x7f0000000e40), 0x1, 0xd99, &(0x7f0000000e80)="$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") sched_setaffinity(0x0, 0x8, &(0x7f0000000040)=0x10001) openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000), 0x200, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x5, 0x4, 0xfff, 0x5}, 0x48) openat(0xffffffffffffff9c, &(0x7f0000000440)='./bus\x00', 0x147c42, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000140)='./bus\x00', 0x0, 0x0) r0 = socket$rds(0x15, 0x5, 0x0) bind$rds(r0, &(0x7f0000000040)={0x2, 0x0, @local}, 0x10) sendmsg$rds(r0, &(0x7f0000001bc0)={&(0x7f0000000440)={0x2, 0x0, @loopback}, 0x10, 0x0, 0x0, &(0x7f0000001b80)=[@rdma_dest={0x18}], 0x18}, 0x0) 46.314334062s ago: executing program 0: syz_mount_image$nilfs2(&(0x7f0000000a40), &(0x7f0000000a80)='./file0\x00', 0x0, &(0x7f0000000ac0)=ANY=[@ANYBLOB], 0x1, 0xa1d, &(0x7f0000001540)="$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") r0 = creat(&(0x7f0000000000)='./bus\x00', 0x0) openat$adsp1(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$SNDCTL_DSP_SETFMT(0xffffffffffffffff, 0xc0045005, &(0x7f0000000640)) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'macvlan0\x00'}) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r2, 0x8933, &(0x7f0000000100)={'batadv_slave_0\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000002c0)=ANY=[@ANYBLOB="3c0000001000010800"/20, @ANYRES32=r3, @ANYBLOB="000000000000000014002b8008000100", @ANYRES32, @ANYBLOB="080003001900000008000a00", @ANYRES32=0x0, @ANYBLOB='v'], 0x3c}}, 0x0) ioctl$sock_ipv6_tunnel_SIOCGET6RD(r0, 0x89f8, 0x0) getsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x20, &(0x7f0000000440)={@remote, @private}, 0x0) socket$nl_route(0x10, 0x3, 0x0) r4 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000340)={'bridge0\x00'}) r5 = open(&(0x7f0000007f80)='./bus\x00', 0x0, 0x0) ftruncate(0xffffffffffffffff, 0x2007ffb) sendfile(0xffffffffffffffff, r5, 0x0, 0x1000000201005) ioctl$FS_IOC_FIEMAP(0xffffffffffffffff, 0xc020660b, 0x0) 42.023800783s ago: executing program 2: landlock_create_ruleset(&(0x7f0000000080)={0x8000}, 0x10, 0x0) socket$alg(0x26, 0x5, 0x0) r0 = syz_io_uring_setup(0xd2, 0x0, &(0x7f0000000040)=0x0, &(0x7f0000000080)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_WRITEV={0x2, 0x0, 0x0, @fd_index=0x4, 0x0, 0x0}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) unshare(0x2a020400) r6 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) syz_io_uring_setup(0x4bd7, &(0x7f00000000c0)={0x0, 0x5ab7, 0x80, 0x1, 0x23c, 0x0, r0}, &(0x7f0000000240), &(0x7f0000000280)) ioctl$SNDCTL_DSP_GETISPACE(r6, 0x80045005, 0x0) io_uring_enter(r0, 0x47ba, 0x0, 0x0, 0x0, 0x0) 41.715327916s ago: executing program 3: socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, &(0x7f0000000040)={0x0, 0x0}, 0x10) bind$inet6(0xffffffffffffffff, &(0x7f0000000100)={0xa, 0x4e23, 0x0, @local, 0x7f}, 0x1c) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = socket$alg(0x26, 0x5, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r2 = openat$cgroup_int(r1, &(0x7f0000000140)='cpu.weight.nice\x00', 0x2, 0x0) sendfile(r2, 0xffffffffffffffff, 0x0, 0xc92) r3 = accept4(0xffffffffffffffff, 0x0, 0x0, 0x0) recvmmsg(r0, &(0x7f0000001440)=[{{0x0, 0x0, &(0x7f0000000940)=[{&(0x7f00000001c0)=""/156, 0x9c}], 0x1}}], 0x1, 0x40000062, 0x0) sendto$inet6(r3, &(0x7f0000000100), 0x0, 0x0, 0x0, 0x0) r4 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000680), 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000001c0)=0x5) preadv(r4, &(0x7f00000007c0)=[{&(0x7f0000001a80)=""/102400, 0x19000}], 0x1, 0x0, 0x0) openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0, 0x0) fanotify_init(0x0, 0x0) lsetxattr$security_capability(&(0x7f00000000c0)='./file0\x00', 0x0, 0x0, 0x0, 0x2) openat$nullb(0xffffffffffffff9c, 0x0, 0x4000000004002, 0x0) mmap(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0xa, 0x4010, r0, 0x9ab17000) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000000), 0x1, 0x0) syz_usb_connect$hid(0xf63067478e218e8, 0x36, 0x0, 0x0) writev(0xffffffffffffffff, &(0x7f0000000240)=[{&(0x7f0000000800)='9', 0x1}], 0x1) socket$inet6_tcp(0xa, 0x1, 0x0) socket$nl_route(0x10, 0x3, 0x0) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) 41.66686913s ago: executing program 5: r0 = socket$inet6_sctp(0xa, 0x1, 0x84) io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) bind$inet6(r0, &(0x7f00000001c0)={0xa, 0x4e21, 0x1, @empty}, 0x1c) syz_mount_image$tmpfs(0x0, &(0x7f00000000c0)='./file0\x00', 0x10, 0x0, 0x0, 0x0, &(0x7f0000000000)) sched_setscheduler(0x0, 0x0, &(0x7f0000000080)=0x7) futex(&(0x7f000000cffc), 0xc, 0x1, 0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, 0x90) socket$nl_crypto(0x10, 0x3, 0x15) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000040)=0x10001) r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) preadv(r1, &(0x7f0000000240)=[{&(0x7f0000033a80)=""/102386, 0xfffffd6e}], 0x1, 0x0, 0x0) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x0) r2 = userfaultfd(0x80001) ioctl$UFFDIO_API(r2, 0xc018aa3f, &(0x7f00000000c0)) r3 = syz_usb_connect$cdc_ecm(0x6, 0x62, &(0x7f0000000800)={{0x12, 0x1, 0x0, 0x2, 0x0, 0x0, 0x40, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x50, 0x1, 0x1, 0x0, 0x80, 0x7, [{{0x9, 0x4, 0x0, 0x7f, 0x2, 0x2, 0x6, 0x0, 0xd2, {{0xb, 0x24, 0x6, 0x0, 0x0, "e2d91248abe2"}, {0x5, 0x24, 0x0, 0x6}, {0xd, 0x24, 0xf, 0x1, 0x0, 0x8, 0x0, 0x1}, [@ncm={0x6, 0x24, 0x1a, 0x0, 0x24}]}, {[{{0x9, 0x5, 0x81, 0x3, 0x40, 0x1a, 0x0, 0x2d}}], {{0x9, 0x5, 0x82, 0x2, 0x400, 0x40, 0x5}}, {{0x9, 0x5, 0x3, 0x2, 0x400, 0xfd, 0x1, 0x18}}}}}]}}]}}, &(0x7f0000000a40)={0xa, &(0x7f0000000200)={0xa, 0x6, 0x250, 0xff, 0x8, 0x2, 0x8, 0x6}, 0x36, &(0x7f00000002c0)={0x5, 0xf, 0x36, 0x3, [@ss_cap={0xa, 0x10, 0x3, 0x2, 0x1, 0x7f, 0x30, 0x6}, @ssp_cap={0x1c, 0x10, 0xa, 0x4, 0x4, 0x4, 0xf00, 0x1000, [0x30, 0x30, 0xff00c0, 0xc0]}, @wireless={0xb, 0x10, 0x1, 0x0, 0xc6, 0x7f, 0x80, 0x2, 0x1}]}, 0x4, [{0x4, &(0x7f0000000400)=@lang_id={0x4, 0x3, 0x448}}, {0xac, &(0x7f0000000880)=@string={0xac, 0x3, "de013f0df29ee0dec3835a9bb4a20eae634dbd4c3302893913dcac06378adc500c142bcf352c31decc3183b1847bddbce8b8b4fb197c27dfffb01513a160607e67a0fb1b67253430b8623dcf070c47e06efa66cf22c05a6a0ee8bea240d367f55e014c5911c2e076392fe3ea9762fb15ac027e24747b33992aec020dcb65858792dfdae8d4b191963f6cd15c6300978e8a236c434affd6289382b7aa1df992986b099cab393af58e9261"}}, {0x4, &(0x7f0000000940)=@string={0x4, 0x3, "d10a"}}, {0x83, &(0x7f0000000980)=@string={0x83, 0x3, "36801464b125d5755bdd3145af2a6ae58c560d6d870069bc24942ff5e021ddfbac483a83bfdfdc3a190ef55a8cf1b51730d277319a703f35792739da61e42c361361163c13dec9f6981f43247345e167a42f702dcca0efe02df40f893795e319203a49c29eb311328b3c0351eed20c372ab50ada84e0f54bae041f8917e960dce5"}}]}) syz_open_procfs$namespace(0x0, &(0x7f0000000300)='ns/cgroup\x00') syz_usb_control_io(r3, &(0x7f0000000d80)={0x2c, &(0x7f0000000ac0)={0x0, 0x14, 0x47, {0x47, 0xc, "82ac19710c7709374fc3bcd9ae091c467bb821e1b111dcb8b7f3d5cfec2886dfd3a801aae9082237d529de72541e1ad5a6535cdb735e4b5ff91168d450acd14257875dae89"}}, &(0x7f0000000b40)={0x0, 0x3, 0x72, @string={0x72, 0x3, "6d28bffdd3b7382fab26aaadf7d604fcb47dd143c3f931b19dc3c9f4af1805e3a74e310b03456bec677f1e16d0b491243fc9db8c41685878ee47a4d3dbe6ed5cb1c046c26fa9535075f56693acc6b697a9189ab89b19d8b05fe0375a1e08000000000700"/112}}, &(0x7f0000000c40)={0x0, 0xf, 0xa5, {0x5, 0xf, 0xa5, 0x4, [@ext_cap={0x7, 0x10, 0x2, 0xffe153132654ceac, 0x3, 0x4, 0xf801}, @ss_container_id={0x14, 0x10, 0x4, 0x9, "af063413262353d2581d9d1615ba4047"}, @ss_cap={0xa, 0x10, 0x3, 0x0, 0xa, 0x4, 0x6, 0x101}, @generic={0x7b, 0x10, 0xb, "c47a9edf6d91b771536d87eebdf90440d9b5a947abef9dbe6f81b1ef3c35f6c9c7a8ce8075acae2eb17d55c98cfe13d2f3a1f7312d5f41c5c4d38d62d01120eba82923421f9edf1d9c604711413415a2b0c5bf1fd1a708fee4ad62f7c79ad0a9644df04076eb2e300c0dab0862a9dae0276a2a0a870ab456"}]}}, &(0x7f0000000d00)={0x20, 0x29, 0xf, {0xf, 0x29, 0x1, 0x60, 0x80, 0x40, "2118be17", "a1c45893"}}, &(0x7f0000000d40)={0x20, 0x2a, 0xc, {0xc, 0x2a, 0x1, 0x0, 0x9, 0x5, 0x4, 0x4000, 0x3c3}}}, &(0x7f0000001200)={0x84, &(0x7f0000000dc0)={0x40, 0x13, 0x61, "c0287540d50e3aaf029c44021631083b183ca23695413aa95bdb777f8e0691e1a885c60ae5d7926b8734fc293fac28c7ad45d2ec69b825e8b173e1dabcfef2b2952fc7253cac31b1c220c8e758268aa1c25231c111351f34267c4c0a084ad6d1f7"}, &(0x7f0000000e40)={0x0, 0xa, 0x1, 0x4}, &(0x7f0000000e80)={0x0, 0x8, 0x1}, &(0x7f0000000ec0)={0x20, 0x0, 0x4, {0x1, 0x2}}, &(0x7f0000000f00)={0x20, 0x0, 0x4, {0x0, 0x8}}, &(0x7f0000000f40)={0x40, 0x7, 0x2}, &(0x7f0000000f80)={0x40, 0x9, 0x1}, &(0x7f0000000fc0)={0x40, 0xb, 0x2, "9571"}, &(0x7f0000001000)={0x40, 0xf, 0x2, 0x58}, &(0x7f0000001040)={0x40, 0x13, 0x6, @local}, 0x0, &(0x7f00000010c0)={0x40, 0x19, 0x2, "e159"}, &(0x7f0000001100)={0x40, 0x1a, 0x2, 0x3}, &(0x7f0000001140)={0x40, 0x1c, 0x1, 0x6}, &(0x7f0000001180)={0x40, 0x1e, 0x1, 0x7f}, &(0x7f00000011c0)={0x40, 0x21, 0x1, 0x7}}) ioctl$UFFDIO_COPY(r2, 0xc028aa03, &(0x7f00000003c0)={&(0x7f0000fff000/0x1000)=nil, &(0x7f000053d000/0x1000)=nil, 0x1000, 0x2}) ioctl$UFFDIO_COPY(r2, 0xc028aa05, &(0x7f0000000180)={&(0x7f00002b9000/0x400000)=nil, &(0x7f00003ab000/0x2000)=nil, 0x400000, 0x2, 0x2}) r4 = syz_open_dev$tty20(0xc, 0x4, 0x0) r5 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$TIOCSTI(r5, 0x5412, &(0x7f00000000c0)=0x9) ioctl$TIOCSTI(r4, 0x5412, &(0x7f0000000140)=0x17) sendto$inet6(r0, &(0x7f0000847fff)='X', 0x34000, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x2, [@struct]}}, &(0x7f0000000700)=""/247, 0x26, 0xf7, 0x1}, 0x20) socket$netlink(0x10, 0x3, 0x4) 40.797033472s ago: executing program 2: bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x651, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) poll(&(0x7f0000000040)=[{}], 0x1, 0x0) timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004}, &(0x7f0000bbdffc)) ioprio_get$pid(0x1, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r1, 0x0, r3, 0x0, 0x9, 0x1) openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000440), 0x2, 0x0) write$RDMA_USER_CM_CMD_QUERY(0xffffffffffffffff, &(0x7f0000000080)={0x13, 0x10, 0xfa00, {&(0x7f0000000480), 0xffffffffffffffff, 0x1}}, 0x18) openat$cgroup_pressure(0xffffffffffffffff, 0x0, 0x2, 0x0) tee(r2, 0xffffffffffffffff, 0x0, 0x0) openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) 37.849976859s ago: executing program 5: socket$nl_netfilter(0x10, 0x3, 0xc) socketpair$unix(0x1, 0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x6, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x6) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) socket$unix(0x1, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000040)=0x10001) preadv(0xffffffffffffffff, &(0x7f0000000240)=[{&(0x7f0000033a80)=""/102386, 0xfffffd6e}], 0x1, 0x0, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) syz_open_dev$sg(&(0x7f00000003c0), 0x0, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) keyctl$session_to_parent(0x12) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, &(0x7f0000fbe000)={0x0, 0x0}, 0x10) getsockopt$sock_buf(r0, 0x1, 0x3b, &(0x7f0000000140)=""/45, &(0x7f0000001400)=0x2d) keyctl$session_to_parent(0x12) r1 = openat$ttyS3(0xffffffffffffff9c, &(0x7f00000098c0), 0x0, 0x0) ioctl$TCSETSW2(r1, 0x402c542c, &(0x7f00000003c0)={0x8, 0x0, 0xffffffc0, 0x0, 0x0, "83843c556dec3a9a90800124b904cfc27929a3", 0x0, 0x1}) setsockopt$inet_tcp_TCP_REPAIR(0xffffffffffffffff, 0x6, 0x13, &(0x7f00000000c0)=0x1, 0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x1000002, 0x200000005c831, 0xffffffffffffffff, 0x0) r2 = syz_io_uring_setup(0x4b6, &(0x7f0000000080), &(0x7f0000ff0000), &(0x7f0000000000)) io_uring_register$IORING_REGISTER_BUFFERS(r2, 0x0, &(0x7f0000000040)=[{0x0}, {0x0}], 0x2) io_uring_register$IORING_REGISTER_BUFFERS_UPDATE(r2, 0x10, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000540)=[{0x0}, {&(0x7f0000000340), 0xa002a0}], &(0x7f00000005c0), 0x2}, 0x20) 37.720351652s ago: executing program 5: socket$nl_generic(0x10, 0x3, 0x10) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0x1, 0x5, 0x9, 0x84}, 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000300)={0xffffffffffffffff, 0x0, &(0x7f00000000c0), &(0x7f0000000240), 0x800, r3}, 0x38) bind$netlink(0xffffffffffffffff, 0x0, 0x0) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000100)={'syztnl1\x00', 0x0}) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f00000001c0)={'ip6_vti0\x00', &(0x7f0000000000)={'syztnl1\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @dev}, @loopback={0xff00000000000000}}}) syz_genetlink_get_family_id$nl80211(&(0x7f0000000500), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000300)={'wlan0\x00'}) ioctl$USBDEVFS_DISCONNECT_CLAIM(0xffffffffffffffff, 0x8108551b, &(0x7f0000000540)={0x3f, 0x0, "c231f40722738d85aa8a68e0247532e8955e04423e3de6825b21a0ebc507a454966ba8217c8155e3f128141c3f16b8e1e4859efc0aafba78a148a5b57a95b4f739bbe74266eed2156e0cbad1b51cdcd8c9ff5720d5fb6da0f01927da8e813c3ddc2eb9279fe3ad2badf7f6bea7dc2da543c6c659dedfa2ca58b905e00de1a5b008deb9bd6140389433721975bb9499284194fcf15a1d254289a1ef521b9633d25566f12cb7908f5800fd73a7cf5054694a5c055bd37a349cb9d0a12dd4de3110750270875c3bc55bacd3f79a5669ee3f06910970fa82e46363d1aa608ca26526557a06e6daa34569c02ead042b217a07147e1f8908d161c925f4c2b76b25f7c2"}) r5 = socket$netlink(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_NEW_INTERFACE(r5, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000280)=ANY=[@ANYBLOB='\x00\x00\x00\x00', @ANYRESDEC=r4, @ANYBLOB="090d0000000000f0ff000700000008000300", @ANYRES32, @ANYRESDEC], 0x58}}, 0x0) 37.578340291s ago: executing program 2: openat(0xffffffffffffff9c, &(0x7f00000001c0)='./file2\x00', 0x0, 0x0) quotactl$Q_SETQUOTA(0xffffffff80000801, &(0x7f0000002b80)=@loop={'/dev/loop', 0x0}, 0x0, &(0x7f0000006140)={0x5}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = syz_open_procfs(0x0, 0x0) preadv(r3, &(0x7f0000000640)=[{&(0x7f00000000c0)=""/135, 0x87}], 0x1, 0xbef, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) fstat(r4, &(0x7f00000005c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_mount_image$erofs(&(0x7f0000000180), &(0x7f0000000140)='./file1\x00', 0x1000801, &(0x7f0000000640)=ANY=[@ANYRES32=r6, @ANYBLOB="297c00f9c21980234eab918ac814309e197710e2d610b50fc9faea1f120ff000"/44, @ANYBLOB="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", @ANYRES16, @ANYRESHEX, @ANYBLOB="5d89e7f5ae235b3811fba8decf2b4bb7fe0fac57f981e4b693da3fb8d287ed3907380c372c58a72b23c7d425333cc64cbcc94797dce0b3b8c01cc49a50b174ba4ddd5af70bc618f171e871cc0a64eb6c5dece5d1b4ac40507673dde64359ad207e61f888d5970927486f9dd02d0db9d1492fc496e9b9e04d50dd85f94ab68d8fcdb204903f01ff93204cc4823f34e4874345777951b0af0d024c721187a93cabea1ce932d550724d733d389982b8a231575ff2db878168424a7bf3d6d66ba9f01005eec07304826949af824bf6be05e0df735aabc9bf914cd1d58c0cc4bff14262324d9229cc587b80ad6f4461bf6caeaa59da1541b2297645a59b16caf14257723220f3a89b50113ad1007e1d89a18bd9c20bd19d4c6921e42bfca1105faa27978d9575a0a1fa6ec537c2c276526115f16e7b5d37cc67541b19b7f3c39e1eba80861872ad726c57ff7f8d0c1eea3253a9358d5a11473533d4ff6c6a2b409405a28c95bf34466bab3a3d8ef8726dcebf32427599644db825612de642444f7231bc7cd265a916babf0fe35d5282503f03401bee44cd14e31359ecddb71c57aac9d6245fa6098d4c5f53d0929b9fd40dee456e58dc4512afb9028d4c6047c2c12fb4eff20e5203583c1f5c84e037e68fd9573c98f9653768ff2f01b5e65066bd16bd90a10d82188d37927a6151f6fc4528a540937909837e07cec45691027708fdba69c06becbd7fdefb0f4a878f595e0ff14a7db81ea9e34e65c34c629f84c375d47be49e392c3dea92d9d06aaceb12d20a88b21d07f7751901d0abc34a540fde1e87f08dd461460e0e896a03f19ec7dc2898d03bd1eca8cfbebac1e317fbc990dc902b3c7d6c7f462e7cde3b9676f892154fe48e4018fdfe867af5608060a6d5f73e7aa2f10b78dbed36521a7e0b9c2ffb0313ae465dcf7adcd37eae04f70a8ce09a13fa0ae50655fccab9e71b08c308b5bcf513534addc2d231b7d5f54df58b503df72e744e39f728a05d796e00930b5f7986dbc73250a819a555ce96c4755d8b5bccd8fb64ca884bf483f41b35ee005b3509f3bd32268f83058be9fa32a82f448f7369c97bd0f144075dd949a5a8605cad4447ec55ffc959eee521f239496f15e00af0bca0122cfde70e4220a565a3e82f27ae5dca790ebf1fe595299e2e7504571adce95f73f5c670140d82b703b938f89d313ffed88bb4a99f35f533f63a0e498b78d722fee3a0be39de6cb986a353e862c888e78e63722b1eef9a419e8f20aac584303a86c236483d6bb3e1759744739cb16e596093f4a42915b89dc61cb51375c120b2b5cefa69e09d98374ab4c26df424414018da546835e427af0e66944a7b295abef518ff612a2942c30c27cec6d65b7b2c749a240fe2a2c9e0324f8731de2ff282f2608c77f7d81fd6c7b5787aa099edde78237528aba04cc5fec525bbdb13800991795f15a12bbd0821ed9e9d6cb97b7934d37f9167a59b0bd55d504fbc974b45911e26ddce1d088213a1acadd96f27259f422db2ce5fa9ddbb22338a3ca9c7eb010b892170dc916ec7d3b598d1235f676741b91c0217848bb4bd23f86489eebfdcd39aff312f8e5443e7848b01a922bb7063a6ed20d863302e5b1f37869bf4c6d1203c4295cbdaad13a817d3c8cc7ca5538892e20b88c0c3c0931f34007113b5676e1d5fa81ab38079efb5864f47adc9817488bb4cf89862c72744eda97290c086475633a3cb5b1f4223b578d8bc4157bc7c93f5c2aa8ae89804664868c867f40761d1772961ae65102e529ae0248dc1fdce340a25fccf2a63a8508c74aa7ff33374ee2f10c7a90fcdb4811acf2e5d5ecc64ab17ea9678b293712a95cbe007b4705d74dc0ad5a62e1634d6d62b83c99cedaac37bac65e17ddf9efd7886d4d4f1aeeb37b1a7e99497de17573d7dfadbed7a8410150a6b0e399d0c6329029a9f2f58ac4817f54cbc2deb106b684050dfee8936c180202468d8c458c88f7cbe4935e76e4bb430417dc8d3168a46e5e4656dd4903f22d7be690822180032afb12bef9b19f8a7ef8d3fc37cf88cbc663f6feb411c18bc959d4ea9ba883840ff2669abac2232c29ab9b11e061a0fa6b532591f24f97275223e0cf9af63ce7bfd09f6c81af3c4d061768cff80dc7703fad721c788fc06fa8ce2fe7582c642c85b00d7438ff73714a7be331ade251644b0b6ea98cd88dc23143876b77662fefd432aec5376cbc5d5412c5a85da613800f1460d7c4f956c567fd4b6d87d9d65b5061d06bbfc7921bb54cb3ba93358199d1273b34c142314e252f3af935c03d23350fe036d67da9ab140c77330263ba9cfe37d13d403d73db0bc9157918a3b6027ff8c96700daf14909d28a67b7a7006a1ffa3e3e87815201913d91f39ea07a1c6f0adcf67795eb2b0fe692c31dcd8b0d1560e1893305436fabe7318f481a0f1f04655ff4cbfdc1b49eb23f291913f143aea21e1da0f5210539afde9df7925529641a9f82a3f603b0740fdeb20a1c736964779ae4950add5d05821394c939f1177740e8c8936a55bae1540637864374c910f09ca59b718b3840c3f20fb412212c0b6417771df24bc80ef6f58b9db2cdbd7b98582a9cf0ac18880cb15f38940aaa0c9583a15dd200c95b82e39c706d03746d993de038a308446b824f59f5284e48e489267e7c0025324a9fb037c47dd1ea262ae5ccfd112f18448b87a06a251d174b0ea32843177b4488663bf6ec561118babc828831bd12bc0f57fa6861a77e98c76d39492d4afc7c802a870fd5042441ec0cc9a4aec8a73bc1b0da2ca3d3f02b26bf53e713f796c2c467aa10404ec08324125438882815c3b6d53fcb6ea59cf90f83357c9485a07409418c5bdf6046c387ba717cdbb7f8313c6aa060e38a1f9e54773694a634855c45e98e5b6451f5c77b7e4f9cda54e61f04c64e91e019d774bb879b5767ce9db4d3ebd5e271651c8c8f210609b6a5299debefc69071ca9a7d8e1b04d9c9d94da22fe0ccb96d00043a578ea1fc211e41b9978b7a3bb8d49989347b1d66efbc2452b05ec3ed3c468c89544332a346f9d26675d20b379df45db62cc4e02d39b96e832b1a23e5468da52c2bbbd67821a9dce341c3d3b3d0b2b1617a8b18424fd3c8d7f8b3129dadf3415fb002a20a9b5e8921abcb13bcc012276951cc4390124863cb3848e3dc906e70fe5307fc941497d2a29bd9e0c2b3f651407bed79651379611fa6414cf7626f0fbce33dc1ccfdf68731b19b451b0c497cb5de54b0e902b6e30817cf3dbe3e6e9724ff460069a9e9a431338778c6756370fa3ccb630b9a9c1974c143ef57b5d15d7616d9a53c4c98c3d764b279cd84c69e70971eb3ba0fca65adadcaa1d0acf5340ee5290f99e4a7264334437585e36e177b8b3047456686d9331d9db3008f2d9daa89c110a8e87ae46516b25e77ff5d7287fd7bba40a592c1d16d6b5da8ea5ba1d95e74ef8d1dd5c1e68fec796c794137b1b1af5d345a3273386625604420d4371efab87b50f55818345a381d17b5ec4c25d8e6711e0ab090c3c15bf2e82aa1fc5d84479940a14150b846cff95df1ad75bbfd06304fbb8fec5b08c7d0cd18d51f0bfd0e65ab122625707790b9aeaee0f7d71a1c86ef07fa73176c38ab1a2f309b58c298095fb1a9f2b4b8e1fbd1923e89cde4532d246130ac78a8ed97b91545e6950c8103eb33a06fc05a011f5dfd42ca5d095c4649b1fd0cdd28e11e592dcb9a163b189b8f72080b92084e2b956acc8398861bcda5de79f37c2cc2aed9e7e92582e9cadd21aa4c95ee095c3f931a56a2493225187867762fc840fc94cfed1be9f1b9037570f5cf30adc133fbdf6384c93fe4535eb9566b87f1c74c95d66c7d8b8f3063ab8e529bfc0ac3e0611918ba6d7b8a082f5b0d19bad8831e25596e427590690b89c817ed270695cc8390dc885819127464c30a1fc48bd27aa53feb96c9a167d37e51e988632e2edc7ba18fda3699971550b58eeb0e2e339a3e5791e030b7d9bc27124d812c1ed28fe56b3c46a9fd2516381b9815652afdacbe8c40032cdcd5e0f741bc33e3484299a05bbf6686527285f61754a4b00611970881bd0cffbd9adb294440493ebe786e0c2a92aa81687aebf1ae465500135135fc59f3f1f182ee8685678f82ab37039589143d58e3625e4cd667cdb3c16731e8b3e57467ccc912e75165113b5d848acaba29967b9c81106cbd754b5b6cde787304a8c4a783be68e3fd33508caebc354cd2893473e906cf87a902153bdf09a876e0e046a664f73c9ab107c5f17ec18ae19624b6d0ca730c235c2f6ad9ce8471f3657dec8e51a69e02018298dc0644684bd71e8113488b50c507c8946cc0d9538f20ac85b6e931420266461d972f685640a1e443de0609ae5ada31d2ee54ed7ac578000d38a42e34be56e96cf8ddbbfaf70ab039b5bf29d30620a2d1989eec002356c920ce728360e821084d8a1537a6db35a762b4d419da11ca314eb3509af713882b6b3e034400744ba3483909b9054d179e988dcfe5e61baae6a83bfb54149b5eae5a23edfff352281a182d841b684136b1284eb4d625692113521e0876759913e7e53091c799bbfc2f7d46ed651ca4086f75583009da2689cbad5408cb8ed416ba726a06d2d1aca9435eab19d865d819fb36f8ffa72c5513188df5b9cfbe2fb1833090d2837681a441fe9b879fb87dd2d8f2b5be4609ecbb67ee10cdcd910e22439c1ca278ef0c536a54806784b9b4a83966f3227349716d635fc86fb2868b9a0026c97e7f152822e21f09e4faba0e5654986541b6a2a97150f92174b036a036e647036726fd41681a3b34c6bdc88bc4e6a357681998b19dafe34ba848c1d532d797a37cbdd5f13407c26ad2232adc7eb472053b285a489fd3c8bd640765c3d95791b56a95c6dd5d672a8b743dedc4f70e14e0866075e9698cbec82395a270c2f3be27fc5fa14ebd716c80dc70e481c3b68266a90cb39b5a42747d6a4eab190e0c6176eb1e905f8e194e588b0c6107f8541355dc551fb81466f710024bb119bd9e5303b2128e7dba2443db7a349a7849480ecd21f2e02406ffad5b69f012cd26a78076741739f7101be48cdd031a638766b775137200981e6896239a100b9aa4eeefdbea6f1dfa793364de99fa941cb050e0f14c8a9261578dbbed9e66fe1f7c42d2fa1bdfb8a42c1a2cff75ed0c1dbec8098f8eb7fc0509fc76fc1e2a3ce9284a9d8c98aa1bfef7bb4702a40e9963c976b59dbd1b18a02316e627484cf892ec8bed26336fe6a121fcdca6795efe6074031d50df3d9bf7702f0fb9678461449e17dc8763e748a6e1b706d3ffda60e81835b89231d6716b8ffc24bd2bd3846cbd2ef495baa980ff3ea27b8e366f8bb2a7968a315cc13a3b46265549acafa7bfb652880145cfa747c22c947b2b7a9cf7cad5dd17d9e78bbf911c424c51ffddbe603e889094bbaeec5384369ac086941b3c9bffc0704e4db3c2cd6ffd585be7312df9d0ce57e52ea9db6d13affbffe82595dbd7ef7306b42112f7291eae482a55afe0e1b374b30c46b34619337d46d4c0f86f08813015cc740c0a2afacd06eb2e515ad4bc086db45f6f6e8cee80d7ded5229f3dc00fd21b89624773b6c52a8a3373e040240cc2433b824210db21f24b5ee784f13edcd60968021b1e4156afff2556bb067487dc8f0401bb63d6773000262b317f3490fc98e646d4f2af2cc1af93cfafd9254017c7a573525706e056b003213f342fbe04e210d3076fef859c33551a494be4c7139e87a260a1d9879a649ecdcb330e6", @ANYBLOB, @ANYRESDEC=r5], 0x2, 0x1e7, &(0x7f00000001c0)="$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") open(&(0x7f0000000180)='./bus\x00', 0x0, 0x0) mknodat$loop(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x1) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) r7 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f00000006c0)='sched_switch\x00', r7}, 0x10) mkdir(&(0x7f0000000540)='./file0\x00', 0x0) mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000002100), 0x0, 0x0) read$FUSE(0xffffffffffffffff, &(0x7f00000077c0)={0x2020}, 0x2020) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x90) openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000a00), 0x0) 31.607653432s ago: executing program 2: mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', 0x0) pipe2$9p(0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000040)=0x10001) r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) preadv(r0, &(0x7f0000000240)=[{&(0x7f0000001a80)=""/102386, 0x18ff2}], 0x1, 0x0, 0x0) timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000300)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) r1 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r1, 0xaf01, 0x0) ioctl$VHOST_SET_MEM_TABLE(r1, 0x4008af03, 0x0) ioctl$VHOST_SET_FEATURES(r1, 0x4008af00, &(0x7f0000000080)=0x200000000) r2 = dup2(r1, r1) ioctl$VHOST_VSOCK_SET_RUNNING(r2, 0x4004af61, &(0x7f0000000040)=0x1) 31.606972446s ago: executing program 5: bpf$PROG_LOAD(0x5, 0x0, 0x0) syz_mount_image$ext4(&(0x7f00000001c0)='ext4\x00', &(0x7f0000000040)='./bus\x00', 0x4400, &(0x7f0000000640), 0x1, 0x75c, &(0x7f0000001100)="$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") chdir(&(0x7f0000000080)='./file0\x00') sendmsg$NFQNL_MSG_CONFIG(0xffffffffffffffff, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x88, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_mount_image$ext4(&(0x7f0000000780)='ext4\x00', &(0x7f0000000240)='./file0\x00', 0x2000480, &(0x7f0000000280), 0x1, 0x76a, &(0x7f0000001b00)="$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") r3 = open(&(0x7f0000000100)='./bus\x00', 0x143142, 0x0) r4 = open(&(0x7f0000000000)='./bus\x00', 0x60142, 0x0) write$FUSE_OPEN(r4, &(0x7f0000000080)={0x20}, 0x20) sendfile(r4, r3, 0x0, 0x2c62) fallocate(0xffffffffffffffff, 0x0, 0x0, 0x10000) prctl$PR_GET_IO_FLUSHER(0x3a) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='memory.events\x00', 0x26e1, 0x0) bpf$ENABLE_STATS(0x20, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f00000002c0)=ANY=[@ANYBLOB="180000022000f55d00000020e4ffffff000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r5 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$TIOCSSOFTCAR(r5, 0x5453, 0x0) 31.528259288s ago: executing program 3: socket$kcm(0x10, 0x2, 0x0) mknod(&(0x7f0000000040)='./file0\x00', 0x0, 0x0) process_vm_readv(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000040)=0x10001) r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) preadv(r0, &(0x7f0000000240)=[{&(0x7f0000033a80)=""/102386, 0xfffffd6e}], 0x1, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_mount_image$iso9660(&(0x7f0000000340), &(0x7f0000000000)='./file0\x00', 0x0, &(0x7f0000001340)=ANY=[@ANYBLOB="636865636b3d72656c617865642c696f636861727365743d6d6163726f6d616e69616e2c636865636b3d72656c617865642c63727566742c6d6f64653d3078303030303030303030303030303030392c73657373696f6e3d3078303030303030303030303030303031622c636865636b3d7374726963742c6d61703d6f66662c696f636861727365743dd3733835302c696f636861727365743d6d616b7475726b6973682c6f76657272696465726f636b7065726d2c6e6f726f636b2c004ae06fa283f99c21a320dc0f15086a8539a6dabd6b09354e5786391791abddd4211dba37dbfa646b16540358f652e048f1886045f669aba4487f602b4e2847119088446bf192f8e5d7b75abdec44b4c419d29751e6c0ce20fa09a4ca6f39e58a1a55946effd11f4134202118d01ee0955d0f3b719ba122e2d617aaa1d795fd13ec3ec42180bea3c400777383f55591da914decc417447b51bc62b714bea5aeff98165ab36839c3035ff217e6f8f63415e19f826543cc1af25d953388d9168249c8e54480eda140d9f1c48a064856a48908b4591a96172ddda7535fea6ab7f304b19f1ef2f5"], 0x1, 0x9fb, &(0x7f0000002540)="$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") r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f00000000c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-camellia-asm\x00'}, 0x58) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f00000001c0)="0a0775b005e381e5b3b60ced5c54dbb7", 0x10) r2 = accept$alg(r1, 0x0, 0x0) sendmmsg$alg(r2, &(0x7f0000004f80)=[{0x0, 0x0, &(0x7f0000000fc0)=[{&(0x7f0000005380)="c700ae867af181dc0452ee584771c0c044dc3dedcc695e961e687c5c3eaa0fdc7268a494e27c05cad87d89aa6930693238e2c23cf0935850f3b8f7a9a440f102a14d42bb2fde965a5116a981f867bde50ac5fb96847616a773929a9c6caca058", 0x60}], 0x1, &(0x7f0000001000)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x0) recvmmsg(r2, &(0x7f0000005040)=[{{0x0, 0x0, &(0x7f0000000380)=[{&(0x7f0000000000)=""/34, 0x22}], 0x1}}], 0x1, 0x0, 0x0) syz_mount_image$sysv(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x2010000, &(0x7f0000000240)=ANY=[@ANYRES32, @ANYRES32=0x0, @ANYRES16, @ANYBLOB="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", @ANYRES64, @ANYRES32], 0x1, 0x9ebf, &(0x7f000000b4c0)="$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") creat(&(0x7f0000002780)='./file0\x00', 0x0) r3 = open(&(0x7f0000000240)='./file0\x00', 0x62042, 0x0) ftruncate(r3, 0x2007fff) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000002c0)={0xffffffffffffffff}) sendmsg$tipc(0xffffffffffffffff, &(0x7f0000001800)={0x0, 0x0, &(0x7f0000000200)}, 0x40041) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$OSF_MSG_ADD(r5, &(0x7f0000001640)={0x0, 0x0, &(0x7f0000001600)={0x0, 0x268}}, 0x0) ioctl$F2FS_IOC_MOVE_RANGE(r4, 0x541b, &(0x7f0000000240)) socket$netlink(0x10, 0x3, 0x10) creat(&(0x7f00000001c0)='./file0\x00', 0x0) lsetxattr$security_ima(&(0x7f0000000100)='./file0\x00', &(0x7f0000000300), &(0x7f0000000b80)=@ng={0x4, 0x11}, 0x2, 0x0) open(&(0x7f0000000040)='./file0\x00', 0x0, 0x122) syz_open_dev$radio(&(0x7f0000000040), 0x0, 0x2) 31.312574026s ago: executing program 2: socket$packet(0x11, 0x2, 0x300) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_COALESCE_GET(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000680)={&(0x7f0000000300)={0x34, r1, 0x1, 0x0, 0x0, {0x1c}, [@HEADER={0x20, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'netdevsim0\x00'}]}]}, 0x34}}, 0x0) openat$sndseq(0xffffffffffffff9c, &(0x7f0000000100), 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000640)={0x0, 0x0, 0x0, &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x90) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000680)={0xf8adeca09ee5f389, 0x1a, &(0x7f0000000440)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0xfffffff7, 0x0, 0x0, 0x0, 0x8}, {}, {}, [@ringbuf_output={{}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x200}}, @generic={0xff, 0xf, 0xd, 0x2, 0x7}, @alu={0x4, 0x0, 0x7, 0x3, 0x0, 0xffffffffffffffc0, 0x8}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x2}}}, &(0x7f00000002c0)='GPL\x00', 0x2, 0x8c, &(0x7f0000000540)=""/140, 0x41000, 0x54, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000300)={0x8, 0x5}, 0x8, 0x10, &(0x7f0000000380)={0x2, 0x8, 0x8, 0x3}, 0x10, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000600), 0x10, 0xed}, 0x90) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000140)={@map, 0x14, 0x0, 0x1, &(0x7f0000000040)=[0x0, 0x0, 0x0], 0x3, 0x0, &(0x7f0000000080)=[0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f00000000c0)=[0x0, 0x0, 0x0], &(0x7f0000000100)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0}, 0x40) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000a40)={@map, r2, 0x5, 0x2024, 0x0, @prog_id, r3}, 0x20) bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000000040)={@map, 0xffffffffffffffff, 0x10, 0x0, 0xffffffffffffffff, @link_id, r3}, 0x20) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000001a40)={0xffffffffffffffff, 0x58, &(0x7f00000019c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0}}, 0xfffffffffffffe9d) r5 = bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000001b00), 0x4) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000001b40)={0xffffffffffffffff, 0xffffffffffffffff}, 0x4) bpf$PROG_LOAD(0x5, &(0x7f0000001c00)={0x1b, 0xa, &(0x7f00000018c0)=@raw=[@generic={0xa7, 0x5, 0x4, 0x2, 0x1}, @map_idx={0x18, 0xa, 0x5, 0x0, 0xe}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x5}, @exit, @generic={0x0, 0x1, 0x4, 0x200, 0x4}, @generic={0xfe, 0x9, 0x6, 0x81, 0xecf}, @initr0={0x18, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x3}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x3}], &(0x7f0000001940)='GPL\x00', 0x2, 0x13, &(0x7f0000001980)=""/19, 0x41000, 0x40, '\x00', r4, 0x29, 0xffffffffffffffff, 0x8, &(0x7f0000001a80)={0x6, 0x5}, 0x8, 0x10, &(0x7f0000001ac0)={0x3, 0x9, 0xfffffffa, 0x5}, 0x10, 0xffffffffffffffff, r5, 0x2, &(0x7f0000001b80)=[r6, 0xffffffffffffffff, 0xffffffffffffffff], &(0x7f0000001bc0)=[{0x4, 0x4, 0xe, 0x7}, {0x4, 0x2, 0x1, 0x4}], 0x10, 0x6}, 0x90) bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000400)=0xffffffffffffffff, 0x4) bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f00000004c0)={0xffffffffffffffff, 0x4, 0x18}, 0xc) 30.026851672s ago: executing program 5: socket$packet(0x11, 0x2, 0x300) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_COALESCE_GET(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000680)={&(0x7f0000000300)={0x34, r1, 0x1, 0x0, 0x0, {0x1c}, [@HEADER={0x20, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'netdevsim0\x00'}]}]}, 0x34}}, 0x0) openat$sndseq(0xffffffffffffff9c, &(0x7f0000000100), 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000640)={0x0, 0x0, 0x0, &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x90) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000680)={0x0, 0x19, &(0x7f0000000440)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0xfffffff7, 0x0, 0x0, 0x0, 0x8}, {}, {}, [@ringbuf_output={{}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x200}}, @alu={0x4, 0x0, 0x7}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x2}}}, &(0x7f00000002c0)='GPL\x00', 0x2, 0x8c, &(0x7f0000000540)=""/140, 0x41000, 0x54, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000300)={0x8, 0x5}, 0x8, 0x10, &(0x7f0000000380)={0x2, 0x8, 0x8, 0x3}, 0x10, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000600), 0x10, 0xed}, 0x90) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000140)={@map, 0x14, 0x0, 0x1, &(0x7f0000000040)=[0x0, 0x0, 0x0], 0x3, 0x0, &(0x7f0000000080)=[0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f00000000c0)=[0x0, 0x0, 0x0], &(0x7f0000000100)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0}, 0x40) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000a40)={@map, r2, 0x5, 0x2024, 0x0, @prog_id, r3}, 0x20) bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000000040)={@map, 0xffffffffffffffff, 0x10, 0x0, 0xffffffffffffffff, @link_id, r3}, 0x20) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000001a40)={0xffffffffffffffff, 0x58, &(0x7f00000019c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0}}, 0xfffffffffffffe9d) r5 = bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000001b00), 0x4) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000001b40)={0xffffffffffffffff, 0xffffffffffffffff}, 0x4) bpf$PROG_LOAD(0x5, &(0x7f0000001c00)={0x1b, 0xa, &(0x7f00000018c0)=@raw=[@generic={0xa7, 0x5, 0x4, 0x2, 0x1}, @map_idx={0x18, 0xa, 0x5, 0x0, 0xe}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x5}, @exit, @generic={0x0, 0x1, 0x4, 0x200, 0x4}, @generic={0xfe, 0x9, 0x6, 0x81, 0xecf}, @initr0={0x18, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x3}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x3}], &(0x7f0000001940)='GPL\x00', 0x2, 0x13, &(0x7f0000001980)=""/19, 0x41000, 0x40, '\x00', r4, 0x29, 0xffffffffffffffff, 0x8, &(0x7f0000001a80)={0x6, 0x5}, 0x8, 0x10, &(0x7f0000001ac0)={0x3, 0x9, 0xfffffffa, 0x5}, 0x10, 0xffffffffffffffff, r5, 0x2, &(0x7f0000001b80)=[r6, 0xffffffffffffffff, 0xffffffffffffffff], &(0x7f0000001bc0)=[{0x4, 0x4, 0xe, 0x7}, {0x4, 0x2, 0x1, 0x4}], 0x10, 0x6}, 0x90) bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000400)=0xffffffffffffffff, 0x4) bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f00000004c0)={0xffffffffffffffff, 0x4, 0x18}, 0xc) 29.434969825s ago: executing program 3: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x0, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="600000000206010200000000000000000000000014000780050014000700000008001240000500000900020073797a3200000000050001000700000011000300686173683a6e65742c6e6574000000000500050002000000050004"], 0x60}}, 0x0) openat$dir(0xffffffffffffff9c, 0x0, 0x0, 0x0) socketpair(0x0, 0x0, 0x0, 0x0) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) 27.819122058s ago: executing program 3: bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0x0, 0x0, 0x0, 0x9, 0x1}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x0, 0xd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000200)='./file1\x00', 0x200010, &(0x7f0000000080), 0xfe, 0x55d, &(0x7f0000000980)="$eJzs3d9rW1UcAPDvTX/sp66DMdQHKezByVy6tv6Y4MN8FB0O9H2G9q6Mpsto0rHWgduDe9mLDEHEgfgH+O7j8B/wrxjoYMgo+uBL5aY3XbYmbZZlSzSfD9ztnPuj55yce07OyUm4AQytyeyfQsSrEfFNEnGo6dho5AcnN89bf3htLtuS2Nj47M8kknxf4/wk//9AHnklIn79OuJEYXu61dW1xVK5nC7n8ana0uWp6urayYtLpYV0Ib00Mzt7+p3Zmfffe7dnZX3z3N/ff3r3o9O3jq1/9/P9w7eTOBMH82PN5XgG15sjkzGZvyZjceaJE6d7kNggSfqdAboykrfzscj6gEMxkrd64P/vq4jYAIZUov3DkGqMAxpz+x7Ng/8zHny4OQHaXv7Rzc9GYm99brR/PXlsZpTNdyd6kH6Wxi9/3LmdbdG7zyEAdnX9RkScGh3d3v8lef/XvVMdnPNkGvo/eHHuZuOft1qNfwpb459oMf450KLtdmP39l+43+KypFefUmfjvw9ajn+3Fq0mRvLYS/Ux31hy4WI5zfq2lyPieIztyeI7reecXr+30e5Y8/gv27L0G2PBPB/3R/c8fs18qVZ6ljI3e3Aj4rWW499kq/6TFvWfvR7nOkzjaHrn9XbHdi//87XxU8QbLev/0YpWsvP65FT9fphq3BXb/XXz6G/t0u93+bP6379z+SeS5vXa6tOn8ePef9J2x7q9/8eTz+vh8Xzf1VKttjwdMZ58sn3/zKNrG/HG+Vn5jx/buf9rdf/vi4gvOiz/zSM32546CPU//1T1//SBex9/+UO79Dur/7froeP5nk76v04z+CyvHQAAAAAAAAyaQkQcjKRQ3AoXCsXi5vc7jsT+QrlSrZ24UFm5NB/138pOxFihsdJ9qOn7ENP592Eb8Zkn4rMRcTgivh3ZV48X5yrl+X4XHgAAAAAAAAAAAAAAAAAAAAbEgTa//8/8PtLykvEXm0PgufLIbxheu7b/XjzpCRhI3v9heHXV/vf1Ph/Ai+f9H4bUWL8zAPST938YXto/DC/tH4aX9g8AAAAAAAAAAAAAAAAAAAAAAAAAAAA9de7s2WzbWH94bS6Lz19ZXVmsXDk5n1YXi0src8W5yvLl4kKlslBOi3OVpd3+XrlSuTw9EytXp2pptTZVXV07v1RZuVQ7f3GptJCeTz1tCAAAAAAAAAAAAAAAAAAAALarrq4tlsrldFlAoKvA6GBkQ6ApcKsHrbvPHRMAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAANPk3AAD//0unNek=") r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000540)='memory.swap.current\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000000), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x800006, 0x11, r0, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x60000b, 0x9) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x17) open(&(0x7f0000000340)='./bus\x00', 0x8e046, 0x0) mount(&(0x7f0000000380)=@loop={'/dev/loop', 0x0}, &(0x7f0000000140)='./bus\x00', 0x0, 0x1000, 0x0) r1 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) ioctl$LOOP_SET_STATUS64(r1, 0x4c04, &(0x7f00000007c0)={0x0, 0x0, 0x0, 0x0, 0x1718, 0x0, 0x0, 0x0, 0x0, "ef359f413bb93852f7d6ffff5d29c3ee5e5ca9000f7c41f7adc9a3ebbc50fdc660ee77df701908b9aaa3f6a005b230f400", "f8208406780820d1cbf7896de100cf00000000000000cf71011bbdb70f000000090080000000000000000000040000e7291f00", "b7320900181c1f0000000000b9000000000000000000f0fffffffff2ff00"}) madvise(&(0x7f0000000000/0x600000)=nil, 0x60001c, 0x0) 27.005844293s ago: executing program 3: r0 = socket$inet6_sctp(0xa, 0x1, 0x84) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000300)={&(0x7f0000000080)='sched_switch\x00'}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000b40), 0x2b842ac, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) openat$fuse(0xffffffffffffff9c, &(0x7f0000000140), 0x42, 0x0) epoll_create1(0x0) openat$sw_sync(0xffffffffffffff9c, 0x0, 0x0, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) pselect6(0x40, &(0x7f00000000c0), 0x0, 0x0, 0x0, 0x0) r4 = add_key$user(&(0x7f00000003c0), &(0x7f0000000440), &(0x7f00000000c0), 0xc9, 0xfffffffffffffffd) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TIPC_NL_NET_SET(r5, &(0x7f0000000600)={0x0, 0x0, &(0x7f00000005c0)={0x0}}, 0x46880) r6 = add_key$user(0x0, &(0x7f00000007c0)={'syz', 0x2}, &(0x7f0000000800), 0x0, 0xffffffffffffffff) keyctl$dh_compute(0x17, &(0x7f0000000000)={r6, r4, r6}, &(0x7f0000001400)=""/86, 0x56, &(0x7f00000000c0)={&(0x7f0000000100)={'crct10dif-generic\x00'}}) ioctl$FS_IOC_RESVSP(0xffffffffffffffff, 0x40305828, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2}) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000080)=[@in={0x2, 0x4e20, @empty}], 0x10) ioctl$ifreq_SIOCGIFINDEX_wireguard(0xffffffffffffffff, 0x8933, &(0x7f0000000200)={'wg2\x00'}) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000280)={0x0, 0x38, &(0x7f0000000180)=[@in6={0xa, 0x4e20, 0x0, @loopback={0x0, 0xac14140b}}, @in6={0xa, 0x4e20, 0x0, @ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x0, 0x0}}}]}, &(0x7f00000002c0)=0x10) 18.756322144s ago: executing program 4: prlimit64(0x0, 0x0, &(0x7f0000000140)={0x6, 0x8b}, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000040)=0x10001) r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) preadv(r0, &(0x7f0000000240)=[{&(0x7f0000033a80)=""/102386, 0xfffffd6e}], 0x1, 0x0, 0x0) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x0, 0x200000005c831, 0xffffffffffffffff, 0x0) r1 = syz_io_uring_setup(0x4b6, &(0x7f0000000080), &(0x7f0000ff0000), &(0x7f0000000000)) io_uring_register$IORING_REGISTER_BUFFERS(r1, 0x0, &(0x7f0000000040)=[{0x0}, {0x0}], 0x2) io_uring_register$IORING_REGISTER_BUFFERS_UPDATE(r1, 0x10, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000540)=[{0x0}, {&(0x7f0000000340), 0xa002a0}], &(0x7f00000005c0), 0x2}, 0x20) 17.6251923s ago: executing program 1: mkdirat(0xffffffffffffff9c, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x89}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x0, 0x0) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0x0, 0x8, 0x10001, 0x0, 0x1}, 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000ac0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000020000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000700)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f0000000d00)='sched_switch\x00', r4}, 0x10) r5 = creat(&(0x7f0000000300)='./bus\x00', 0x0) r6 = open(&(0x7f0000000080)='./bus\x00', 0x0, 0x0) r7 = open(&(0x7f0000000000)='./bus\x00', 0x14d35e, 0x0) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x27fffff, 0x4002011, r7, 0x0) fallocate(r7, 0x0, 0x0, 0x1000f4) dup3(r6, r5, 0x0) io_setup(0x6, &(0x7f0000000240)=0x0) io_submit(r8, 0x3f0a, &(0x7f0000000540)=[&(0x7f00000000c0)={0xf04aef, 0x3d8, 0x8, 0x0, 0x0, r5, &(0x7f0000000000), 0x200a00}]) write$P9_RVERSION(0xffffffffffffffff, 0x0, 0x15) r9 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x3) ioctl$FS_IOC_GETFSLABEL(r9, 0x541b, &(0x7f0000000100)) socketpair$tipc(0x1e, 0x2, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000400)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) 16.289630755s ago: executing program 0: bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x5, 0x4, 0x8, 0x5}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000001500000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000002a00000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000300)='rcu_utilization\x00', r2}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x4) r4 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000500)={0x1b, 0x0, 0x0, 0x66, 0x0, 0x1, 0x8000, '\x00', 0x0, 0xffffffffffffffff, 0x2, 0x2, 0x1}, 0x48) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x0, 0x0, 0x0, &(0x7f0000000100)='GPL\x00', 0x10001, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, 0x6, 0xffffffffffffffff, 0x8, &(0x7f0000000200)={0x3, 0x2}, 0x8, 0x10, &(0x7f0000000240)={0x4, 0x6, 0x0, 0x7}, 0x10, 0x0, 0xffffffffffffffff, 0x2, &(0x7f0000000680)=[0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0x1, r4, 0xffffffffffffffff, 0xffffffffffffffff], &(0x7f00000006c0)=[{0x0, 0x1, 0x0, 0x1}, {0x0, 0x3, 0x3, 0x3}]}, 0x90) r5 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, 0x0, 0x0) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000000440)={0xffffffffffffffff, 0x0, 0x0}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0xe, 0x8, &(0x7f0000000200)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, [@map_fd={0x18, 0x6}, @call={0x85, 0x0, 0x0, 0xaf}, @map_idx_val={0x18, 0x3, 0x6, 0x0, 0xf, 0x0, 0x0, 0x0, 0x8}]}, &(0x7f00000002c0)='GPL\x00', 0x0, 0x1000, &(0x7f0000000e80)=""/4096, 0x40f00, 0x2, '\x00', 0x0, 0x4, r5, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x1, &(0x7f0000000680)=[0xffffffffffffffff, 0xffffffffffffffff, 0x1, 0xffffffffffffffff], &(0x7f00000006c0)=[{0x0, 0x0, 0x7, 0xb}]}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0xc, 0x17, &(0x7f0000000600)=@framed={{0x18, 0x0, 0x0, 0x0, 0x101, 0x0, 0x0, 0x0, 0x8}, [@exit, @alu={0x4, 0x1, 0x2, 0x0, 0x2}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}}, @ringbuf_output={{}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0xfffffffc}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x2}}]}, &(0x7f0000000040)='syzkaller\x00', 0x4, 0xee, &(0x7f00000006c0)=""/238, 0x40f00, 0x0, '\x00', 0x0, 0x1, 0xffffffffffffffff, 0x8, &(0x7f00000002c0)={0x6, 0x5}, 0x8, 0x10, &(0x7f00000003c0)={0x6, 0xe, 0x9, 0xf66}, 0x10, 0x0, r1, 0x4, &(0x7f0000000400)=[0xffffffffffffffff, 0xffffffffffffffff], &(0x7f00000007c0)=[{0x0, 0x2, 0x7, 0x8}, {0x0, 0x4, 0xc, 0x9}, {0x3, 0x4, 0x2, 0x3}, {0x3, 0x0, 0xb}]}, 0x90) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r6, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r7, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r6, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f00000005c0)={0xffffffffffffffff, 0x20, &(0x7f0000000580)={&(0x7f0000000a40)=""/4096, 0x1000, 0x0, &(0x7f00000004c0)=""/172, 0xac}}, 0x10) unshare(0x62040200) syz_init_net_socket$bt_l2cap(0x1f, 0x0, 0x0) recvmsg$kcm(0xffffffffffffffff, 0x0, 0x40000100) syz_io_uring_setup(0x6c5d, &(0x7f0000000340)={0x0, 0x3c16}, 0x0, 0x0) syz_open_dev$evdev(&(0x7f0000000000), 0x0, 0x80000) ioctl$EVIOCSCLOCKID(0xffffffffffffffff, 0x400445a0, &(0x7f00000001c0)=0x7fffffff) ioctl$TCSETSF(0xffffffffffffffff, 0x5404, 0x0) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, 0x0) 1.74681995s ago: executing program 3: r0 = socket$inet6_sctp(0xa, 0x1, 0x84) io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) bind$inet6(r0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xb, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) futex(&(0x7f000000cffc), 0xc, 0x1, 0x0, &(0x7f0000048000), 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, 0x90) socket$nl_crypto(0x10, 0x3, 0x15) sched_setaffinity(0x0, 0x8, &(0x7f0000000040)=0x10001) r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) preadv(r1, &(0x7f0000000240)=[{&(0x7f0000033a80)=""/102386, 0xfffffd6e}], 0x1, 0x0, 0x0) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x0) r2 = userfaultfd(0x0) ioctl$UFFDIO_API(r2, 0xc018aa3f, &(0x7f00000000c0)) r3 = syz_usb_connect$cdc_ecm(0x6, 0x6d, &(0x7f0000000800)={{0x12, 0x1, 0x300, 0x2, 0x0, 0x0, 0x40, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x5b, 0x1, 0x1, 0xcb, 0x80, 0x7, [{{0x9, 0x4, 0x0, 0x7f, 0x2, 0x2, 0x6, 0x0, 0xd2, {{0x8, 0x24, 0x6, 0x0, 0x0, "e2d912"}, {0x5}, {0xd, 0x24, 0xf, 0x1, 0x4, 0x8, 0x9, 0x1}, [@ncm={0x6, 0x24, 0x1a, 0xfc1c, 0x24}, @country_functional={0xe, 0x24, 0x7, 0x93, 0x1, [0x100, 0x7, 0x400, 0x81]}]}, {[{{0x9, 0x5, 0x81, 0x3, 0x40, 0x1a, 0x0, 0x2d}}], {{0x9, 0x5, 0x82, 0x2, 0x400, 0x40, 0x5}}, {{0x9, 0x5, 0x3, 0x2, 0x400, 0xfd, 0x1, 0x18}}}}}]}}]}}, &(0x7f0000000a40)={0xa, &(0x7f0000000200)={0xa, 0x6, 0x250, 0xff, 0x8, 0x2, 0x8, 0x6}, 0x36, &(0x7f00000002c0)={0x5, 0xf, 0x36, 0x3, [@ss_cap={0xa, 0x10, 0x3, 0x2, 0x1, 0x7f, 0x30, 0x6}, @ssp_cap={0x1c, 0x10, 0xa, 0x4, 0x4, 0x4, 0xf00, 0x1000, [0x30, 0x30, 0xff00c0, 0xc0]}, @wireless={0xb, 0x10, 0x1, 0x0, 0xc6, 0x7f, 0x80, 0x2, 0x1}]}, 0x4, [{0x4, &(0x7f0000000400)=@lang_id={0x4, 0x3, 0x448}}, {0xac, &(0x7f0000000880)=@string={0xac, 0x3, "de013f0df29ee0dec3835a9bb4a20eae634dbd4c3302893913dcac06378adc500c142bcf352c31decc3183b1847bddbce8b8b4fb197c27dfffb01513a160607e67a0fb1b67253430b8623dcf070c47e06efa66cf22c05a6a0ee8bea240d367f55e014c5911c2e076392fe3ea9762fb15ac027e24747b33992aec020dcb65858792dfdae8d4b191963f6cd15c6300978e8a236c434affd6289382b7aa1df992986b099cab393af58e9261"}}, {0x4, &(0x7f0000000940)=@string={0x4, 0x3, "d10a"}}, {0x83, &(0x7f0000000980)=@string={0x83, 0x3, "36801464b125d5755bdd3145af2a6ae58c560d6d870069bc24942ff5e021ddfbac483a83bfdfdc3a190ef55a8cf1b51730d277319a703f35792739da61e42c361361163c13dec9f6981f43247345e167a42f702dcca0efe02df40f893795e319203a49c29eb311328b3c0351eed20c372ab50ada84e0f54bae041f8917e960dce5"}}]}) syz_open_procfs$namespace(0x0, &(0x7f0000000300)='ns/cgroup\x00') syz_usb_control_io(r3, &(0x7f0000000d80)={0x2c, &(0x7f0000000ac0)={0x0, 0x14, 0x47, {0x47, 0xc, "82ac19710c7709374fc3bcd9ae091c467bb821e1b111dcb8b7f3d5cfec2886dfd3a801aae9082237d529de72541e1ad5a6535cdb735e4b5ff91168d450acd14257875dae89"}}, &(0x7f0000000b40)={0x0, 0x3, 0x72, @string={0x72, 0x3, "6d28bffdd3b7382fab26aaadf7d604fcb47dd143c3f931b19dc3c9f4af1805e3a74e310b03456bec677f1e16d0b491243fc9db8c41685878ee47a4d3dbe6ed5cb1c046c26fa9535075f56693acc6b697a9189ab89b19d8b05fe0375a1e08000000000700"/112}}, &(0x7f0000000c40)={0x0, 0xf, 0xa5, {0x5, 0xf, 0xa5, 0x4, [@ext_cap={0x7, 0x10, 0x2, 0xffe153132654ceac, 0x3, 0x4, 0xf801}, @ss_container_id={0x14, 0x10, 0x4, 0x9, "af063413262353d2581d9d1615ba4047"}, @ss_cap={0xa, 0x10, 0x3, 0x0, 0xa, 0x4, 0x6, 0x101}, @generic={0x7b, 0x10, 0xb, "c47a9edf6d91b771536d87eebdf90440d9b5a947abef9dbe6f81b1ef3c35f6c9c7a8ce8075acae2eb17d55c98cfe13d2f3a1f7312d5f41c5c4d38d62d01120eba82923421f9edf1d9c604711413415a2b0c5bf1fd1a708fee4ad62f7c79ad0a9644df04076eb2e300c0dab0862a9dae0276a2a0a870ab456"}]}}, &(0x7f0000000d00)={0x20, 0x29, 0xf, {0xf, 0x29, 0x1, 0x60, 0x80, 0x40, "2118be17", "a1c45893"}}, &(0x7f0000000d40)={0x20, 0x2a, 0xc, {0xc, 0x2a, 0x1, 0x0, 0x9, 0x5, 0x4, 0x4000, 0x3c3}}}, &(0x7f0000001200)={0x84, &(0x7f0000000dc0)={0x40, 0x13, 0x61, "c0287540d50e3aaf029c44021631083b183ca23695413aa95bdb777f8e0691e1a885c60ae5d7926b8734fc293fac28c7ad45d2ec69b825e8b173e1dabcfef2b2952fc7253cac31b1c220c8e758268aa1c25231c111351f34267c4c0a084ad6d1f7"}, &(0x7f0000000e40)={0x0, 0xa, 0x1, 0x4}, &(0x7f0000000e80)={0x0, 0x8, 0x1}, &(0x7f0000000ec0)={0x20, 0x0, 0x4, {0x1, 0x2}}, &(0x7f0000000f00)={0x20, 0x0, 0x4, {0x0, 0x8}}, &(0x7f0000000f40)={0x40, 0x7, 0x2}, &(0x7f0000000f80)={0x40, 0x9, 0x1}, &(0x7f0000000fc0)={0x40, 0xb, 0x2, "9571"}, &(0x7f0000001000)={0x40, 0xf, 0x2, 0x58}, &(0x7f0000001040)={0x40, 0x13, 0x6, @local}, 0x0, &(0x7f00000010c0)={0x40, 0x19, 0x2, "e159"}, &(0x7f0000001100)={0x40, 0x1a, 0x2, 0x3}, &(0x7f0000001140)={0x40, 0x1c, 0x1, 0x6}, &(0x7f0000001180)={0x40, 0x1e, 0x1, 0x7f}, &(0x7f00000011c0)={0x40, 0x21, 0x1, 0x7}}) ioctl$UFFDIO_COPY(r2, 0xc028aa03, &(0x7f00000003c0)={&(0x7f0000fff000/0x1000)=nil, &(0x7f000053d000/0x1000)=nil, 0x1000, 0x2}) ioctl$UFFDIO_COPY(r2, 0xc028aa05, &(0x7f0000000180)={&(0x7f00002b9000/0x400000)=nil, &(0x7f00003ab000/0x2000)=nil, 0x400000, 0x2, 0x2}) r4 = syz_open_dev$tty20(0xc, 0x4, 0x0) r5 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$TIOCSTI(r5, 0x5412, &(0x7f00000000c0)=0x9) ioctl$TIOCSTI(r4, 0x5412, &(0x7f0000000140)=0x17) sendto$inet6(r0, &(0x7f0000847fff)='X', 0x34000, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) 1.283343578s ago: executing program 2: pipe2$9p(&(0x7f0000001900), 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x61) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$PROG_BIND_MAP(0xa, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) sched_setscheduler(0x0, 0x0, &(0x7f0000000080)=0x7) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) socket$inet6(0xa, 0x80000, 0x7f) openat$hwrng(0xffffffffffffff9c, 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0xf, 0x4, 0x4, 0x12}, 0x48) r4 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0xe, 0x4, &(0x7f0000000180)=ANY=[@ANYBLOB="18020000801000000000000004000000850000002700000095"], &(0x7f0000000000)='syzkaller\x00'}, 0x90) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000080)={@map=r3, r4, 0x5}, 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000740)={{r3}, &(0x7f00000006c0), &(0x7f0000000700)=r2}, 0x20) sendmsg$inet(r1, &(0x7f0000000980)={0x0, 0x6000, &(0x7f0000000900)=[{&(0x7f0000000640)='U', 0xa00120}], 0x1}, 0x3) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000005e00)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$F2FS_IOC_MOVE_RANGE(r5, 0x541b, &(0x7f0000000000)) open(0x0, 0x0, 0x7) open(0x0, 0x400141042, 0x0) write$FUSE_BMAP(0xffffffffffffffff, 0x0, 0x0) 0s ago: executing program 5: socket$netlink(0x10, 0x3, 0x0) syz_init_net_socket$llc(0x1a, 0x801, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=@newchain={0x110, 0x64, 0x400, 0x70bd28, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, {0x7, 0x8}, {0x3}, {0x1, 0x7}}, [@filter_kind_options=@f_flow={{0x9}, {0x98, 0x2, [@TCA_FLOW_EMATCHES={0x84, 0xb, 0x0, 0x1, [@TCA_EMATCH_TREE_LIST={0x80, 0x2, 0x0, 0x1, [@TCF_EM_CMP={0x18, 0x1, 0x0, 0x0, {{}, {0x0, 0x4, 0x0, 0x0, 0x8, 0x2, 0x2}}}, @TCF_EM_U32={0x1c, 0x3, 0x0, 0x0, {{0x0, 0x3, 0x2}, {0x0, 0x9, 0x7, 0x1}}}, @TCF_EM_META={0x2c, 0x0, 0x0, 0x0, {{0x3}, [@TCA_EM_META_LVALUE={0x8, 0x2, [@TCF_META_TYPE_INT]}, @TCA_EM_META_HDR={0xc}, @TCA_EM_META_RVALUE={0x5, 0x3, [@TCF_META_TYPE_VAR='T']}, @TCA_EM_META_LVALUE={0x4, 0x2, [@TCF_META_TYPE_VAR]}]}}, @TCF_EM_IPSET={0x10, 0x0, 0x0, 0x0, {{0x3}, {0x0, 0x3}}}, @TCF_EM_IPT={0xc, 0x0, 0x0, 0x0, {{0x0, 0x9, 0x6}}}]}]}, @TCA_FLOW_RSHIFT={0x8}, @TCA_FLOW_DIVISOR={0x8}]}}, @TCA_RATE={0x6, 0x5, {0x1}}, @filter_kind_options=@f_route={{0xa}, {0x1c, 0x2, [@TCA_ROUTE4_CLASSID={0x8, 0x1, {0xfea1651accd9ae14}}, @TCA_ROUTE4_TO={0x8, 0x2, 0x82}, @TCA_ROUTE4_CLASSID={0x8}]}}, @TCA_CHAIN={0x8, 0xb, 0x5}, @TCA_RATE={0x6, 0x5, {0x5, 0x3f}}, @TCA_CHAIN={0x8, 0xb, 0x200}]}, 0x110}, 0x1, 0x0, 0x0, 0x40891}, 0x4040814) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x40000000000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x3, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f00000006c0)='sched_switch\x00', r3}, 0x10) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.events\x00', 0x100002, 0x0) write$cgroup_int(r4, &(0x7f0000000200), 0x43451) bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x17, 0x0, 0x0, 0xff}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000380)={0x3, 0xc, 0x0, 0x0}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000500)={&(0x7f00000004c0)='ext4_mb_release_inode_pa\x00'}, 0x10) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x7a05, 0x1700) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(0xffffffffffffffff, 0xc01064b5, 0x0) prlimit64(0x0, 0x0, &(0x7f0000000140)={0x8}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) kernel console output (not intermixed with test programs): _slave_0): Enslaving as an active interface with an up link [ 84.315258][ T5127] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 84.340283][ T5115] bridge0: port 2(bridge_slave_1) entered blocking state [ 84.347634][ T5115] bridge0: port 2(bridge_slave_1) entered disabled state [ 84.355064][ T5115] bridge_slave_1: entered allmulticast mode [ 84.363094][ T5115] bridge_slave_1: entered promiscuous mode [ 84.402633][ T5113] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 84.409817][ T5113] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 84.436211][ T5113] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 84.467406][ T5123] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 84.474687][ T5123] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 84.501829][ T5123] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 84.546356][ T5125] team0: Port device team_slave_0 added [ 84.557396][ T5125] team0: Port device team_slave_1 added [ 84.566672][ T5112] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 84.592840][ T5113] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 84.600098][ T5113] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 84.628089][ T5113] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 84.667385][ T5127] team0: Port device team_slave_0 added [ 84.674632][ T5123] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 84.682021][ T5123] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 84.709650][ T5123] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 84.724827][ T5115] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 84.737300][ T5112] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 84.782068][ T5125] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 84.789381][ T5125] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 84.815469][ T5125] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 84.831714][ T5127] team0: Port device team_slave_1 added [ 84.859147][ T5115] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 84.891254][ T5112] team0: Port device team_slave_0 added [ 84.898390][ T5125] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 84.906309][ T5125] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 84.932612][ T5125] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 85.008711][ T5112] team0: Port device team_slave_1 added [ 85.044099][ T5127] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 85.051412][ T5127] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 85.077961][ T5127] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 85.101612][ T5127] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 85.108617][ T5127] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 85.147596][ T5127] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 85.284088][ T5123] hsr_slave_0: entered promiscuous mode [ 85.291665][ T5123] hsr_slave_1: entered promiscuous mode [ 85.304289][ T5115] team0: Port device team_slave_0 added [ 85.316451][ T5113] hsr_slave_0: entered promiscuous mode [ 85.329556][ T5113] hsr_slave_1: entered promiscuous mode [ 85.336214][ T5113] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 85.345115][ T5113] Cannot create hsr debugfs directory [ 85.351519][ T5112] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 85.358471][ T5112] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 85.384538][ T5112] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 85.402941][ T5125] hsr_slave_0: entered promiscuous mode [ 85.410591][ T5125] hsr_slave_1: entered promiscuous mode [ 85.416856][ T5125] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 85.424631][ T5125] Cannot create hsr debugfs directory [ 85.450327][ T5115] team0: Port device team_slave_1 added [ 85.473102][ T5112] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 85.480570][ T5112] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 85.507807][ T5112] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 85.566978][ T5127] hsr_slave_0: entered promiscuous mode [ 85.573756][ T5127] hsr_slave_1: entered promiscuous mode [ 85.582240][ T5127] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 85.590055][ T5127] Cannot create hsr debugfs directory [ 85.648708][ T5115] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 85.656064][ T5115] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 85.683704][ T5115] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 85.776348][ T5115] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 85.783654][ T5115] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 85.811544][ T5115] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 85.822707][ T5120] Bluetooth: hci0: command tx timeout [ 85.899401][ T5120] Bluetooth: hci1: command tx timeout [ 85.904879][ T5120] Bluetooth: hci3: command tx timeout [ 85.910659][ T5120] Bluetooth: hci2: command tx timeout [ 85.971498][ T5112] hsr_slave_0: entered promiscuous mode [ 85.978300][ T5112] hsr_slave_1: entered promiscuous mode [ 85.984346][ T5128] Bluetooth: hci5: command tx timeout [ 85.990638][ T5120] Bluetooth: hci4: command tx timeout [ 85.996323][ T5112] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 86.004752][ T5112] Cannot create hsr debugfs directory [ 86.316865][ T5115] hsr_slave_0: entered promiscuous mode [ 86.323785][ T5115] hsr_slave_1: entered promiscuous mode [ 86.332864][ T5115] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 86.340536][ T5115] Cannot create hsr debugfs directory [ 86.640086][ T5123] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 86.660428][ T5123] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 86.672983][ T5123] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 86.713934][ T5123] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 86.850173][ T5125] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 86.865136][ T5125] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 86.877382][ T5125] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 86.890057][ T5125] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 86.982568][ T5113] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 87.003373][ T5113] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 87.018004][ T5113] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 87.032503][ T5113] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 87.144890][ T5127] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 87.191433][ T5127] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 87.204760][ T5127] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 87.216222][ T5127] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 87.418567][ T5112] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 87.433946][ T5112] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 87.446880][ T5112] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 87.481655][ T5112] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 87.531620][ T5125] 8021q: adding VLAN 0 to HW filter on device bond0 [ 87.574708][ T5123] 8021q: adding VLAN 0 to HW filter on device bond0 [ 87.720569][ T5125] 8021q: adding VLAN 0 to HW filter on device team0 [ 87.727865][ T5115] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 87.747003][ T5115] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 87.778963][ T5115] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 87.790571][ T5115] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 87.809039][ T57] bridge0: port 1(bridge_slave_0) entered blocking state [ 87.816552][ T57] bridge0: port 1(bridge_slave_0) entered forwarding state [ 87.833662][ T5123] 8021q: adding VLAN 0 to HW filter on device team0 [ 87.898697][ T5181] bridge0: port 2(bridge_slave_1) entered blocking state [ 87.900058][ T5120] Bluetooth: hci0: command tx timeout [ 87.906112][ T5181] bridge0: port 2(bridge_slave_1) entered forwarding state [ 87.930817][ T5181] bridge0: port 1(bridge_slave_0) entered blocking state [ 87.938046][ T5181] bridge0: port 1(bridge_slave_0) entered forwarding state [ 87.951480][ T5181] bridge0: port 2(bridge_slave_1) entered blocking state [ 87.958642][ T5181] bridge0: port 2(bridge_slave_1) entered forwarding state [ 87.979918][ T5128] Bluetooth: hci3: command tx timeout [ 87.980100][ T5126] Bluetooth: hci1: command tx timeout [ 87.986189][ T5120] Bluetooth: hci2: command tx timeout [ 88.021198][ T5113] 8021q: adding VLAN 0 to HW filter on device bond0 [ 88.062784][ T5120] Bluetooth: hci4: command tx timeout [ 88.062870][ T5126] Bluetooth: hci5: command tx timeout [ 88.163358][ T5113] 8021q: adding VLAN 0 to HW filter on device team0 [ 88.186331][ T5127] 8021q: adding VLAN 0 to HW filter on device bond0 [ 88.214501][ T5181] bridge0: port 1(bridge_slave_0) entered blocking state [ 88.221734][ T5181] bridge0: port 1(bridge_slave_0) entered forwarding state [ 88.247980][ T5112] 8021q: adding VLAN 0 to HW filter on device bond0 [ 88.282939][ T5179] bridge0: port 2(bridge_slave_1) entered blocking state [ 88.290337][ T5179] bridge0: port 2(bridge_slave_1) entered forwarding state [ 88.338726][ T5125] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 88.406017][ T5127] 8021q: adding VLAN 0 to HW filter on device team0 [ 88.505751][ T5112] 8021q: adding VLAN 0 to HW filter on device team0 [ 88.534070][ T57] bridge0: port 1(bridge_slave_0) entered blocking state [ 88.541656][ T57] bridge0: port 1(bridge_slave_0) entered forwarding state [ 88.561617][ T57] bridge0: port 2(bridge_slave_1) entered blocking state [ 88.568872][ T57] bridge0: port 2(bridge_slave_1) entered forwarding state [ 88.637186][ T5178] bridge0: port 1(bridge_slave_0) entered blocking state [ 88.644477][ T5178] bridge0: port 1(bridge_slave_0) entered forwarding state [ 88.727979][ T5181] bridge0: port 2(bridge_slave_1) entered blocking state [ 88.735340][ T5181] bridge0: port 2(bridge_slave_1) entered forwarding state [ 88.836179][ T5115] 8021q: adding VLAN 0 to HW filter on device bond0 [ 88.872946][ T5115] 8021q: adding VLAN 0 to HW filter on device team0 [ 88.897308][ T57] bridge0: port 1(bridge_slave_0) entered blocking state [ 88.904602][ T57] bridge0: port 1(bridge_slave_0) entered forwarding state [ 88.948331][ T5168] bridge0: port 2(bridge_slave_1) entered blocking state [ 88.955610][ T5168] bridge0: port 2(bridge_slave_1) entered forwarding state [ 88.988525][ T5125] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 89.054399][ T5123] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 89.303599][ T5125] veth0_vlan: entered promiscuous mode [ 89.442166][ T5125] veth1_vlan: entered promiscuous mode [ 89.656656][ T5125] veth0_macvtap: entered promiscuous mode [ 89.702168][ T5125] veth1_macvtap: entered promiscuous mode [ 89.794732][ T5127] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 89.825672][ T5113] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 89.847414][ T5125] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 89.917496][ T5125] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 89.979304][ T5126] Bluetooth: hci0: command tx timeout [ 89.998505][ T5125] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 90.017704][ T5125] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 90.027355][ T5125] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 90.036268][ T5125] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 90.059348][ T5126] Bluetooth: hci2: command tx timeout [ 90.060934][ T5120] Bluetooth: hci3: command tx timeout [ 90.065200][ T5126] Bluetooth: hci1: command tx timeout [ 90.112131][ T5112] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 90.142528][ T5126] Bluetooth: hci4: command tx timeout [ 90.142543][ T5120] Bluetooth: hci5: command tx timeout [ 90.168570][ T5115] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 90.188488][ T5127] veth0_vlan: entered promiscuous mode [ 90.225139][ T5127] veth1_vlan: entered promiscuous mode [ 90.369892][ T5123] veth0_vlan: entered promiscuous mode [ 90.429787][ T5123] veth1_vlan: entered promiscuous mode [ 90.553141][ T5112] veth0_vlan: entered promiscuous mode [ 90.565710][ T5115] veth0_vlan: entered promiscuous mode [ 90.576924][ T2390] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 90.590523][ T2390] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 90.648065][ T5127] veth0_macvtap: entered promiscuous mode [ 90.663894][ T5112] veth1_vlan: entered promiscuous mode [ 90.684602][ T5127] veth1_macvtap: entered promiscuous mode [ 90.712736][ T62] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 90.737390][ T5115] veth1_vlan: entered promiscuous mode [ 90.744850][ T62] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 90.764790][ T5127] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 90.775737][ T5127] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 90.792392][ T5127] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 90.811585][ T5123] veth0_macvtap: entered promiscuous mode [ 90.829805][ T5123] veth1_macvtap: entered promiscuous mode [ 90.910962][ T5127] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 90.928536][ T5127] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 90.941545][ T5127] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 90.959406][ T5127] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 90.968311][ T5127] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 90.977525][ T5127] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 90.986322][ T5127] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 90.999983][ T5123] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 91.011880][ T5123] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 91.023048][ T5123] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 91.034109][ T5123] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 91.047413][ T5123] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 91.060308][ T5123] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 91.070863][ T5123] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 91.081276][ T5123] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 91.092477][ T5123] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 91.104805][ T5123] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 91.125453][ T5115] veth0_macvtap: entered promiscuous mode [ 91.138080][ T5113] veth0_vlan: entered promiscuous mode [ 91.166131][ T5123] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 91.198835][ T5123] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 91.207595][ T5123] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 91.225374][ T5123] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 91.275988][ T5115] veth1_macvtap: entered promiscuous mode [ 91.307911][ T5113] veth1_vlan: entered promiscuous mode [ 91.377686][ T29] audit: type=1326 audit(1718918805.741:2): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5221 comm="syz-executor.3" exe="/root/syz-executor.3" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7efe9207cf29 code=0x0 [ 91.696003][ T780] cfg80211: failed to load regulatory.db [ 92.290517][ T5112] veth0_macvtap: entered promiscuous mode [ 92.342070][ T5115] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 92.354339][ T5115] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 92.368208][ T5115] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 92.382312][ T5115] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 92.394426][ T5115] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 92.406222][ T5115] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 92.425902][ T5115] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 92.469116][ T5113] veth0_macvtap: entered promiscuous mode [ 92.531902][ T5112] veth1_macvtap: entered promiscuous mode [ 92.564029][ T5113] veth1_macvtap: entered promiscuous mode [ 92.586586][ T5115] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 92.602027][ T2478] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 92.608291][ T5115] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 92.611219][ T2478] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 92.639031][ T5115] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 92.655012][ T5115] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 92.666691][ T5115] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 92.677937][ T5115] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 92.707492][ T5115] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 92.775787][ T5115] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 92.787198][ T5115] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 92.796903][ T5115] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 92.805984][ T5115] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 92.934725][ T2434] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 92.953847][ T2434] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 92.994606][ T5112] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 93.013080][ T5112] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 93.033410][ T5112] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 93.044246][ T5112] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 93.056042][ T5112] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 93.073034][ T5112] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 93.083680][ T5112] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 93.096038][ T5112] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 93.131839][ T5112] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 93.143907][ T5113] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 93.163309][ T5113] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 93.183385][ T5113] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 93.213709][ T5113] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 93.234149][ T5113] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 93.246904][ T5113] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 93.246929][ T5113] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 93.246949][ T5113] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 93.246965][ T5113] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 93.246983][ T5113] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 93.250467][ T5113] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 93.335658][ T2414] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 93.359610][ T2414] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 93.382387][ T5113] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 93.404851][ T5113] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 93.415185][ T5113] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 93.453465][ T5113] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 93.475904][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 93.552171][ T5113] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 93.611577][ T5113] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 93.670177][ T0] NOHZ tick-stop error: local softirq work is pending, handler #8a!!! [ 93.758943][ T0] NOHZ tick-stop error: local softirq work is pending, handler #82!!! [ 93.782881][ T0] NOHZ tick-stop error: local softirq work is pending, handler #102!!! [ 93.829073][ T0] NOHZ tick-stop error: local softirq work is pending, handler #02!!! [ 93.885301][ T0] NOHZ tick-stop error: local softirq work is pending, handler #182!!! [ 93.988183][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 93.989175][ T0] NOHZ tick-stop error: local softirq work is pending, handler #10a!!! [ 94.091087][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 94.139320][ T5113] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 94.152243][ T5113] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 94.174383][ T5113] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 94.283183][ T5112] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 94.314488][ T5112] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 94.325980][ T5112] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 94.336661][ T5112] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 94.347088][ T5112] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 94.363743][ T5112] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 94.375473][ T5112] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 94.397861][ T5112] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 94.463454][ T5112] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 94.482153][ T5112] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 94.500721][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 94.574842][ T5112] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 95.142976][ T2478] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 95.162021][ T5112] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 95.199023][ T2478] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 95.226498][ T5112] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 95.238488][ T5112] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 95.248150][ T5112] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 95.743076][ T5113] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 95.767634][ T5113] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 95.778450][ T5113] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 95.787780][ T5113] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 96.068505][ T2414] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 97.417865][ T5252] Zero length message leads to an empty skb [ 98.174089][ T2414] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 98.600264][ T29] audit: type=1326 audit(1718918812.971:3): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5257 comm="syz-executor.4" exe="/root/syz-executor.4" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f306367cf29 code=0x0 [ 98.865902][ T2390] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 99.198241][ T2390] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 99.565746][ T5260] loop1: detected capacity change from 0 to 1024 [ 101.204894][ T5273] loop4: detected capacity change from 0 to 16 [ 101.645597][ T5273] erofs: (device loop4): mounted with root inode @ nid 36. [ 101.663355][ T5273] syz-executor.4: attempt to access beyond end of device [ 101.663355][ T5273] loop4: rw=0, sector=8, nr_sectors = 32 limit=16 [ 101.685692][ T5273] syz-executor.4: attempt to access beyond end of device [ 101.685692][ T5273] loop4: rw=0, sector=8, nr_sectors = 32 limit=16 [ 101.704948][ T5273] syz-executor.4: attempt to access beyond end of device [ 101.704948][ T5273] loop4: rw=0, sector=8, nr_sectors = 32 limit=16 [ 101.720450][ T5273] syz-executor.4: attempt to access beyond end of device [ 101.720450][ T5273] loop4: rw=0, sector=8, nr_sectors = 32 limit=16 [ 101.769252][ T5260] EXT4-fs: error -4 creating inode table initialization thread [ 102.030222][ T5260] EXT4-fs (loop1): mount failed [ 102.318433][ T5282] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 102.348673][ T5282] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 102.491014][ T2452] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 102.528268][ T2452] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 103.182244][ T29] audit: type=1326 audit(1718918817.461:4): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5292 comm="syz-executor.1" exe="/root/syz-executor.1" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fc6c027cf29 code=0x0 [ 103.750813][ T2452] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 103.789012][ T2452] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 103.840949][ T35] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 103.885832][ T35] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 103.971356][ T5305] usb usb9: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 105.055779][ T5306] loop3: detected capacity change from 0 to 4096 [ 105.156983][ T5303] loop4: detected capacity change from 0 to 8192 [ 105.248219][ T5303] loop4: p1 p2 p3 [ 105.367198][ T5318] NILFS (loop3): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 105.691679][ T29] audit: type=1326 audit(1718918820.041:5): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5314 comm="syz-executor.1" exe="/root/syz-executor.1" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fc6c027cf29 code=0x0 [ 107.713165][ T4542] loop4: p1 p2 p3 [ 108.027502][ T5313] syz-executor.5 (5313) used greatest stack depth: 19856 bytes left [ 110.462236][ T5347] loop0: detected capacity change from 0 to 256 [ 112.362976][ T5347] exFAT-fs (loop0): failed to load upcase table (idx : 0x00011f41, chksum : 0xe1a8932d, utbl_chksum : 0xe619d30d) [ 112.644060][ T5176] udevd[5176]: inotify_add_watch(7, /dev/loop4p1, 10) failed: No such file or directory [ 112.723952][ T5177] udevd[5177]: inotify_add_watch(7, /dev/loop4p3, 10) failed: No such file or directory [ 112.740806][ T5285] udevd[5285]: inotify_add_watch(7, /dev/loop4p2, 10) failed: No such file or directory [ 112.808248][ T29] audit: type=1326 audit(1718918827.171:6): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5369 comm="syz-executor.2" exe="/root/syz-executor.2" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fad3527cf29 code=0x0 [ 114.233778][ T5383] loop5: detected capacity change from 0 to 32768 [ 114.329790][ T5383] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop5 (7:5) scanned by syz-executor.5 (5383) [ 114.493079][ T5176] udevd[5176]: inotify_add_watch(7, /dev/loop4p1, 10) failed: No such file or directory [ 114.532372][ T5383] BTRFS info (device loop5): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 114.544098][ T5383] BTRFS info (device loop5): using crc32c (crc32c-intel) checksum algorithm [ 114.553067][ T5383] BTRFS info (device loop5): using free-space-tree [ 115.061800][ T5177] udevd[5177]: inotify_add_watch(7, /dev/loop4p3, 10) failed: No such file or directory [ 115.074848][ T5285] udevd[5285]: inotify_add_watch(7, /dev/loop4p2, 10) failed: No such file or directory [ 119.647215][ T29] audit: type=1326 audit(1718918833.771:7): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5379 comm="syz-executor.5" exe="/root/syz-executor.5" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa566a7cf29 code=0x7fc00000 [ 119.888036][ T5383] BTRFS error (device loop5): open_ctree failed [ 119.888882][ T29] audit: type=1326 audit(1718918833.931:8): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5379 comm="syz-executor.5" exe="/root/syz-executor.5" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7fa566a7cf29 code=0x7fc00000 [ 120.718392][ T5442] loop4: detected capacity change from 0 to 16 [ 122.702612][ T5442] erofs: (device loop4): mounted with root inode @ nid 36. [ 122.725070][ T5440] syz-executor.4: attempt to access beyond end of device [ 122.725070][ T5440] loop4: rw=0, sector=8, nr_sectors = 32 limit=16 [ 122.740519][ T5440] syz-executor.4: attempt to access beyond end of device [ 122.740519][ T5440] loop4: rw=0, sector=8, nr_sectors = 32 limit=16 [ 122.758447][ T5440] syz-executor.4: attempt to access beyond end of device [ 122.758447][ T5440] loop4: rw=0, sector=8, nr_sectors = 32 limit=16 [ 122.775062][ T5440] syz-executor.4: attempt to access beyond end of device [ 122.775062][ T5440] loop4: rw=0, sector=8, nr_sectors = 32 limit=16 [ 122.866297][ T5436] loop3: detected capacity change from 0 to 128 [ 124.532950][ T5457] loop4: detected capacity change from 0 to 2048 [ 124.656804][ T5457] NILFS (loop4): invalid segment: Checksum error in segment payload [ 124.751250][ T5457] NILFS (loop4): trying rollback from an earlier position [ 124.766542][ T5459] loop5: detected capacity change from 0 to 1764 [ 124.891515][ T5464] loop0: detected capacity change from 0 to 128 [ 124.917855][ T5457] NILFS (loop4): recovery complete [ 124.977609][ T5462] loop3: detected capacity change from 0 to 4096 [ 124.988340][ T5470] NILFS (loop4): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 126.307148][ T29] audit: type=1800 audit(1718918840.671:9): pid=5476 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz-executor.4" name="bus" dev="loop4" ino=12 res=0 errno=0 [ 126.360711][ T5481] NILFS (loop3): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 126.368120][ T5479] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 127.717493][ T29] audit: type=1800 audit(1718918842.091:10): pid=5489 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz-executor.3" name="bus" dev="loop3" ino=18 res=0 errno=0 [ 127.906819][ T5192] IPVS: starting estimator thread 0... [ 127.965970][ T5492] loop2: detected capacity change from 0 to 1764 [ 128.049063][ T5493] IPVS: using max 22 ests per chain, 52800 per kthread [ 128.630641][ T5492] loop2: detected capacity change from 0 to 128 [ 128.676791][ T5492] VFS: Found a Xenix FS (block size = 512) on device loop2 [ 128.737284][ T5492] sysv_free_block: trying to free block not in datazone [ 129.389315][ T5508] loop3: detected capacity change from 0 to 32768 [ 129.457796][ T5508] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop3 (7:3) scanned by syz-executor.3 (5508) [ 129.495797][ T5508] BTRFS info (device loop3): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 129.506127][ T5508] BTRFS info (device loop3): using crc32c (crc32c-intel) checksum algorithm [ 129.514976][ T5508] BTRFS info (device loop3): using free-space-tree [ 129.563134][ T5112] sysv_free_inode: inode 0,1,2 or nonexistent inode [ 129.668571][ T5507] loop0: detected capacity change from 0 to 4096 [ 130.002482][ T5526] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 130.225895][ T29] audit: type=1800 audit(1718918844.601:11): pid=5529 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz-executor.0" name="bus" dev="loop0" ino=18 res=0 errno=0 [ 130.873627][ T29] audit: type=1804 audit(1718918844.631:12): pid=5529 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor.0" name="/root/syzkaller-testdir1161044738/syzkaller.uQ0a1O/7/file0/bus" dev="loop0" ino=18 res=1 errno=0 [ 132.378066][ T29] audit: type=1326 audit(1718918846.741:13): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5503 comm="syz-executor.3" exe="/root/syz-executor.3" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efe9207cf29 code=0x7fc00000 [ 132.894312][ T1240] ieee802154 phy0 wpan0: encryption failed: -22 [ 132.906632][ T1240] ieee802154 phy1 wpan1: encryption failed: -22 [ 133.764093][ T5549] loop1: detected capacity change from 0 to 128 [ 133.915808][ T5125] BTRFS info (device loop3): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 134.035172][ T5559] loop5: detected capacity change from 0 to 2048 [ 134.149002][ T5559] NILFS (loop5): invalid segment: Checksum error in segment payload [ 134.184976][ T5559] NILFS (loop5): trying rollback from an earlier position [ 134.264086][ T5192] IPVS: starting estimator thread 0... [ 134.324418][ T5561] loop4: detected capacity change from 0 to 1764 [ 134.343196][ T5559] NILFS (loop5): recovery complete [ 134.424130][ T5566] NILFS (loop5): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 134.449174][ T5564] IPVS: using max 22 ests per chain, 52800 per kthread [ 134.565084][ T29] audit: type=1800 audit(1718918848.941:14): pid=5567 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz-executor.5" name="bus" dev="loop5" ino=12 res=0 errno=0 [ 134.818099][ T5561] loop4: detected capacity change from 0 to 128 [ 134.863983][ T5571] loop2: detected capacity change from 0 to 128 [ 135.105091][ T5561] VFS: Found a Xenix FS (block size = 512) on device loop4 [ 135.127838][ T5561] sysv_free_block: trying to free block not in datazone [ 137.728380][ T29] audit: type=1326 audit(1718918850.671:15): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5573 comm="syz-executor.1" exe="/root/syz-executor.1" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fc6c027cf29 code=0x0 [ 137.861429][ T5123] sysv_free_inode: inode 0,1,2 or nonexistent inode [ 138.828244][ T5596] syz-executor.5 (5596) used greatest stack depth: 19440 bytes left [ 139.257817][ T5589] loop3: detected capacity change from 0 to 2048 [ 139.334092][ T5589] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 139.371929][ T5594] loop1: detected capacity change from 0 to 4096 [ 139.439038][ T5589] ext4 filesystem being mounted at /root/syzkaller-testdir2070406267/syzkaller.y919uM/13/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 139.716234][ T5603] loop5: detected capacity change from 0 to 32768 [ 139.774659][ T5603] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop5 (7:5) scanned by syz-executor.5 (5603) [ 139.880802][ T5603] BTRFS info (device loop5): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 139.891223][ T5603] BTRFS info (device loop5): using crc32c (crc32c-intel) checksum algorithm [ 139.900046][ T5603] BTRFS info (device loop5): using free-space-tree [ 140.267991][ T5617] NILFS (loop1): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 140.295971][ T5608] loop2: detected capacity change from 0 to 512 [ 140.483152][ T5608] ======================================================= [ 140.483152][ T5608] WARNING: The mand mount option has been deprecated and [ 140.483152][ T5608] and is ignored by this kernel. Remove the mand [ 140.483152][ T5608] option from the mount to silence this warning. [ 140.483152][ T5608] ======================================================= [ 140.815799][ T29] audit: type=1326 audit(1718918855.191:16): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5602 comm="syz-executor.5" exe="/root/syz-executor.5" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa566a7cf29 code=0x7fc00000 [ 140.816884][ T5608] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support! [ 140.927172][ T5608] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 141.132880][ T29] audit: type=1800 audit(1718918855.281:17): pid=5629 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz-executor.1" name="bus" dev="loop1" ino=18 res=0 errno=0 [ 141.207492][ T29] audit: type=1326 audit(1718918855.341:18): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5602 comm="syz-executor.5" exe="/root/syz-executor.5" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7fa566a7cf29 code=0x7fc00000 [ 141.208020][ T5113] BTRFS info (device loop5): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 141.249517][ T5608] EXT4-fs (loop2): 1 truncate cleaned up [ 141.300024][ T5608] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 141.695377][ T5125] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 142.263986][ T5112] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 147.132708][ T5680] loop4: detected capacity change from 0 to 32768 [ 147.182712][ T5680] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop4 (7:4) scanned by syz-executor.4 (5680) [ 147.210776][ T5680] BTRFS info (device loop4): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 147.221667][ T5680] BTRFS info (device loop4): using crc32c (crc32c-intel) checksum algorithm [ 147.230552][ T5680] BTRFS info (device loop4): using free-space-tree [ 147.347605][ T5688] loop2: detected capacity change from 0 to 128 [ 147.425296][ T5695] loop1: detected capacity change from 0 to 512 [ 147.446601][ T5695] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 148.675267][ T5695] EXT4-fs (loop1): 1 truncate cleaned up [ 148.691954][ T5695] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 149.138861][ T29] audit: type=1326 audit(1718918863.491:19): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5679 comm="syz-executor.4" exe="/root/syz-executor.4" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f306367cf29 code=0x7fc00000 [ 149.198185][ T5119] IPVS: starting estimator thread 0... [ 149.391473][ T29] audit: type=1326 audit(1718918863.651:20): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5679 comm="syz-executor.4" exe="/root/syz-executor.4" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f306367cf29 code=0x7fc00000 [ 149.424018][ T5714] IPVS: using max 22 ests per chain, 52800 per kthread [ 149.544566][ T5713] loop0: detected capacity change from 0 to 4096 [ 150.599463][ T5120] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 150.640699][ T5120] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 150.662412][ T5120] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 150.684652][ T5120] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 150.692735][ T5120] Bluetooth: hci6: unexpected cc 0x0c25 length: 249 > 3 [ 150.701454][ T5120] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 150.776032][ T29] audit: type=1326 audit(1718918863.651:21): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5679 comm="syz-executor.4" exe="/root/syz-executor.4" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f306367cf29 code=0x7fc00000 [ 151.005655][ T29] audit: type=1326 audit(1718918863.651:22): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5679 comm="syz-executor.4" exe="/root/syz-executor.4" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f306367cf29 code=0x7fc00000 [ 151.093467][ T5725] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 151.192828][ T29] audit: type=1326 audit(1718918863.651:23): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5679 comm="syz-executor.4" exe="/root/syz-executor.4" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f306367cf29 code=0x7fc00000 [ 151.219384][ T5127] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 151.257926][ T29] audit: type=1326 audit(1718918863.651:24): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5679 comm="syz-executor.4" exe="/root/syz-executor.4" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f306367cf29 code=0x7fc00000 [ 151.307087][ T5727] loop2: detected capacity change from 0 to 512 [ 151.378112][ T5727] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 151.388535][ T29] audit: type=1326 audit(1718918863.651:25): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5679 comm="syz-executor.4" exe="/root/syz-executor.4" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f306367cf29 code=0x7fc00000 [ 152.599661][ T5727] EXT4-fs (loop2): 1 truncate cleaned up [ 152.611558][ T5727] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 152.678874][ T29] audit: type=1326 audit(1718918863.651:26): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5679 comm="syz-executor.4" exe="/root/syz-executor.4" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f306367cf29 code=0x7fc00000 [ 152.781228][ T29] audit: type=1326 audit(1718918863.651:27): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5679 comm="syz-executor.4" exe="/root/syz-executor.4" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f306367cf29 code=0x7fc00000 [ 152.803986][ C1] vkms_vblank_simulate: vblank timer overrun [ 152.920845][ T5125] syz-executor.3 (5125) used greatest stack depth: 18640 bytes left [ 152.998134][ T29] audit: type=1326 audit(1718918863.651:28): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5679 comm="syz-executor.4" exe="/root/syz-executor.4" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f306367cf29 code=0x7fc00000 [ 153.020916][ C1] vkms_vblank_simulate: vblank timer overrun [ 153.029006][ T5120] Bluetooth: hci6: command tx timeout [ 153.164915][ T5112] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 153.303802][ T5743] loop5: detected capacity change from 0 to 1764 [ 153.337910][ T5123] BTRFS info (device loop4): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 153.490778][ T12] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 155.829329][ T5120] Bluetooth: hci6: command tx timeout [ 157.761353][ T12] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 158.448849][ T5120] Bluetooth: hci6: command tx timeout [ 158.458696][ T29] kauditd_printk_skb: 60 callbacks suppressed [ 158.458743][ T29] audit: type=1326 audit(1718918872.751:89): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5773 comm="syz-executor.1" exe="/root/syz-executor.1" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fc6c027cf29 code=0x0 [ 160.857332][ T5120] Bluetooth: hci6: command tx timeout [ 161.335540][ T5792] loop4: detected capacity change from 0 to 512 [ 163.379587][ T5176] I/O error, dev loop4, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 0 [ 163.402212][ T12] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 163.600208][ T5805] loop4: detected capacity change from 0 to 64 [ 163.616805][ T5802] loop5: detected capacity change from 0 to 4096 [ 163.988193][ T5808] loop2: detected capacity change from 0 to 32768 [ 164.007056][ T29] audit: type=1326 audit(1718918878.381:90): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5806 comm="syz-executor.1" exe="/root/syz-executor.1" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fc6c027cf29 code=0x0 [ 164.425646][ T5808] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop2 (7:2) scanned by syz-executor.2 (5808) [ 164.547589][ T12] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 164.654424][ T5808] BTRFS info (device loop2): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 164.664816][ T5808] BTRFS info (device loop2): using crc32c (crc32c-intel) checksum algorithm [ 164.673667][ T5808] BTRFS info (device loop2): using free-space-tree [ 164.880340][ T5813] NILFS (loop5): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 166.001331][ T29] audit: type=1800 audit(1718918880.381:91): pid=5831 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz-executor.5" name="bus" dev="loop5" ino=18 res=0 errno=0 [ 166.055424][ T29] audit: type=1804 audit(1718918880.401:92): pid=5831 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor.5" name="/root/syzkaller-testdir1468779410/syzkaller.uw78fH/18/file0/bus" dev="loop5" ino=18 res=1 errno=0 [ 166.525179][ T5717] chnl_net:caif_netlink_parms(): no params data found [ 166.669087][ T5840] loop1: detected capacity change from 0 to 16 [ 168.279063][ T5836] sched: RT throttling activated [ 168.726432][ T5840] erofs: (device loop1): mounted with root inode @ nid 36. [ 168.738172][ T5839] syz-executor.1: attempt to access beyond end of device [ 168.738172][ T5839] loop1: rw=0, sector=8, nr_sectors = 32 limit=16 [ 168.754210][ T5839] syz-executor.1: attempt to access beyond end of device [ 168.754210][ T5839] loop1: rw=0, sector=8, nr_sectors = 32 limit=16 [ 168.771031][ T5839] syz-executor.1: attempt to access beyond end of device [ 168.771031][ T5839] loop1: rw=0, sector=8, nr_sectors = 32 limit=16 [ 168.785737][ T5839] syz-executor.1: attempt to access beyond end of device [ 168.785737][ T5839] loop1: rw=0, sector=8, nr_sectors = 32 limit=16 [ 168.825773][ T5112] BTRFS info (device loop2): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 169.687194][ T5850] Bluetooth: MGMT ver 1.22 [ 169.694942][ T5850] loop1: detected capacity change from 0 to 8 [ 169.807912][ T5850] Page size > filesystem block size (0). This is currently not supported! [ 169.965507][ T5848] loop2: detected capacity change from 0 to 4096 [ 170.021619][ T5848] ntfs3: loop2: Different NTFS sector size (1024) and media sector size (512). [ 170.164395][ T29] audit: type=1800 audit(1718918884.531:93): pid=5852 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz-executor.4" name="bus" dev="sda1" ino=1964 res=0 errno=0 [ 170.212300][ T5855] loop1: detected capacity change from 0 to 256 [ 170.229785][ T29] audit: type=1804 audit(1718918884.611:94): pid=5852 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor.4" name="/root/syzkaller-testdir2182893643/syzkaller.LouRkN/20/bus" dev="sda1" ino=1964 res=1 errno=0 [ 170.367993][ T5855] exFAT-fs (loop1): failed to load upcase table (idx : 0x000104d0, chksum : 0x60d18cac, utbl_chksum : 0xe619d30d) [ 170.438291][ T5848] ntfs3: loop2: Failed to initialize $Extend/$ObjId. [ 170.639457][ T29] audit: type=1326 audit(1718918884.961:95): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5859 comm="syz-executor.0" exe="/root/syz-executor.0" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f3e4727cf29 code=0x0 [ 173.021797][ T5717] bridge0: port 1(bridge_slave_0) entered blocking state [ 173.109209][ T5717] bridge0: port 1(bridge_slave_0) entered disabled state [ 173.142420][ T5717] bridge_slave_0: entered allmulticast mode [ 173.182660][ T5717] bridge_slave_0: entered promiscuous mode [ 173.215961][ T12] bridge_slave_1: left allmulticast mode [ 173.236229][ T12] bridge_slave_1: left promiscuous mode [ 173.278394][ T12] bridge0: port 2(bridge_slave_1) entered disabled state [ 173.377812][ T12] bridge_slave_0: left allmulticast mode [ 173.436493][ T12] bridge_slave_0: left promiscuous mode [ 173.457076][ T12] bridge0: port 1(bridge_slave_0) entered disabled state [ 173.719952][ T5875] loop1: detected capacity change from 0 to 1764 [ 173.868980][ T29] audit: type=1326 audit(1718918888.241:96): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5879 comm="syz-executor.2" exe="/root/syz-executor.2" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fad3527cf29 code=0x0 [ 174.763189][ T5887] loop0: detected capacity change from 0 to 1024 [ 175.036748][ T5889] loop2: detected capacity change from 0 to 32768 [ 175.053107][ T5889] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop2 (7:2) scanned by syz-executor.2 (5889) [ 175.106143][ T5889] BTRFS info (device loop2): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 175.116792][ T5889] BTRFS info (device loop2): using crc32c (crc32c-intel) checksum algorithm [ 175.125615][ T5889] BTRFS info (device loop2): using free-space-tree [ 175.141970][ T5887] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 175.404175][ T5875] loop1: detected capacity change from 0 to 128 [ 175.699527][ T5875] VFS: Found a Xenix FS (block size = 512) on device loop1 [ 175.829138][ T29] audit: type=1326 audit(1718918890.201:97): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5888 comm="syz-executor.2" exe="/root/syz-executor.2" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fad3527cf29 code=0x7fc00000 [ 175.893286][ T5875] sysv_free_block: trying to free block not in datazone [ 176.148652][ T29] audit: type=1326 audit(1718918890.361:98): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5888 comm="syz-executor.2" exe="/root/syz-executor.2" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7fad3527cf29 code=0x7fc00000 [ 176.344182][ T5915] loop5: detected capacity change from 0 to 16 [ 176.364550][ T5915] erofs: (device loop5): mounted with root inode @ nid 36. [ 176.386008][ T5915] syz-executor.5: attempt to access beyond end of device [ 176.386008][ T5915] loop5: rw=0, sector=8, nr_sectors = 32 limit=16 [ 176.405839][ T5915] syz-executor.5: attempt to access beyond end of device [ 176.405839][ T5915] loop5: rw=0, sector=8, nr_sectors = 32 limit=16 [ 176.428997][ T5915] syz-executor.5: attempt to access beyond end of device [ 176.428997][ T5915] loop5: rw=0, sector=8, nr_sectors = 32 limit=16 [ 176.447265][ T5915] syz-executor.5: attempt to access beyond end of device [ 176.447265][ T5915] loop5: rw=0, sector=8, nr_sectors = 32 limit=16 [ 177.013687][ T29] audit: type=1326 audit(1718918890.361:99): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5888 comm="syz-executor.2" exe="/root/syz-executor.2" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fad3527cf29 code=0x7fc00000 [ 177.038981][ T29] audit: type=1326 audit(1718918890.361:100): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5888 comm="syz-executor.2" exe="/root/syz-executor.2" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fad3527cf29 code=0x7fc00000 [ 177.083640][ T5112] BTRFS info (device loop2): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 177.109282][ T29] audit: type=1326 audit(1718918890.361:101): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5888 comm="syz-executor.2" exe="/root/syz-executor.2" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fad3527cf29 code=0x7fc00000 [ 177.148031][ T5127] sysv_free_inode: inode 0,1,2 or nonexistent inode [ 177.259347][ T29] audit: type=1326 audit(1718918890.361:102): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5888 comm="syz-executor.2" exe="/root/syz-executor.2" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fad3527cf29 code=0x7fc00000 [ 177.407476][ T29] audit: type=1326 audit(1718918890.361:103): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5888 comm="syz-executor.2" exe="/root/syz-executor.2" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fad3527cf29 code=0x7fc00000 [ 177.419186][ T5917] loop5: detected capacity change from 0 to 2048 [ 177.465892][ T29] audit: type=1326 audit(1718918890.361:104): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5888 comm="syz-executor.2" exe="/root/syz-executor.2" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fad3527cf29 code=0x7fc00000 [ 177.489448][ T29] audit: type=1326 audit(1718918890.361:105): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5888 comm="syz-executor.2" exe="/root/syz-executor.2" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fad3527cf29 code=0x7fc00000 [ 177.545536][ T5917] NILFS (loop5): invalid segment: Checksum error in segment payload [ 177.583134][ T29] audit: type=1326 audit(1718918890.361:106): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5888 comm="syz-executor.2" exe="/root/syz-executor.2" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fad3527cf29 code=0x7fc00000 [ 177.616441][ T5917] NILFS (loop5): trying rollback from an earlier position [ 177.737386][ T5917] NILFS (loop5): recovery complete [ 178.042920][ T5115] EXT4-fs error (device loop0): ext4_readdir:260: inode #11: block 38: comm syz-executor.0: path /root/syzkaller-testdir1161044738/syzkaller.uQ0a1O/20/file1/lost+found: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=327680, rec_len=0, size=1024 fake=0 [ 178.220680][ T5924] NILFS (loop5): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 178.237363][ T5115] EXT4-fs error (device loop0): ext4_empty_dir:3127: inode #11: block 38: comm syz-executor.0: bad entry in directory: rec_len is smaller than minimal - offset=6144, inode=327680, rec_len=0, size=1024 fake=0 [ 178.341524][ T5115] EXT4-fs error (device loop0): ext4_readdir:260: inode #11: block 38: comm syz-executor.0: path /root/syzkaller-testdir1161044738/syzkaller.uQ0a1O/20/file1/lost+found: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=327680, rec_len=0, size=1024 fake=0 [ 178.387713][ T5115] EXT4-fs error (device loop0): ext4_empty_dir:3127: inode #11: block 38: comm syz-executor.0: bad entry in directory: rec_len is smaller than minimal - offset=6144, inode=327680, rec_len=0, size=1024 fake=0 [ 178.457958][ T5115] EXT4-fs error (device loop0): ext4_readdir:260: inode #11: block 38: comm syz-executor.0: path /root/syzkaller-testdir1161044738/syzkaller.uQ0a1O/20/file1/lost+found: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=327680, rec_len=0, size=1024 fake=0 [ 178.540377][ T5928] loop1: detected capacity change from 0 to 8 [ 178.569628][ T5115] EXT4-fs error (device loop0): ext4_empty_dir:3127: inode #11: block 38: comm syz-executor.0: bad entry in directory: rec_len is smaller than minimal - offset=6144, inode=327680, rec_len=0, size=1024 fake=0 [ 178.644413][ T5115] EXT4-fs error (device loop0): ext4_readdir:260: inode #11: block 38: comm syz-executor.0: path /root/syzkaller-testdir1161044738/syzkaller.uQ0a1O/20/file1/lost+found: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=327680, rec_len=0, size=1024 fake=0 [ 178.671813][ T5928] Page size > filesystem block size (0). This is currently not supported! [ 178.730580][ T5115] EXT4-fs error (device loop0): ext4_empty_dir:3127: inode #11: block 38: comm syz-executor.0: bad entry in directory: rec_len is smaller than minimal - offset=6144, inode=327680, rec_len=0, size=1024 fake=0 [ 178.784879][ T5115] EXT4-fs error (device loop0): ext4_readdir:260: inode #11: block 38: comm syz-executor.0: path /root/syzkaller-testdir1161044738/syzkaller.uQ0a1O/20/file1/lost+found: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=327680, rec_len=0, size=1024 fake=0 [ 178.848072][ T5932] loop1: detected capacity change from 0 to 256 [ 178.886112][ T5115] EXT4-fs error (device loop0): ext4_empty_dir:3127: inode #11: block 38: comm syz-executor.0: bad entry in directory: rec_len is smaller than minimal - offset=6144, inode=327680, rec_len=0, size=1024 fake=0 [ 178.933101][ T5932] exFAT-fs (loop1): failed to load upcase table (idx : 0x000104d0, chksum : 0x60d18cac, utbl_chksum : 0xe619d30d) [ 179.011032][ T12] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 179.048245][ T12] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 179.081121][ T12] bond0 (unregistering): Released all slaves [ 179.170147][ T5717] bridge0: port 2(bridge_slave_1) entered blocking state [ 179.210510][ T5717] bridge0: port 2(bridge_slave_1) entered disabled state [ 179.250687][ T5717] bridge_slave_1: entered allmulticast mode [ 179.259363][ T5717] bridge_slave_1: entered promiscuous mode [ 179.511399][ T5938] loop4: detected capacity change from 0 to 256 [ 179.819718][ T5938] FAT-fs (loop4): Unrecognized mount option "codeate=1" or missing value [ 180.728937][ T5176] I/O error, dev loop4, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 0 [ 180.989442][ T5717] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 181.089011][ T29] kauditd_printk_skb: 60 callbacks suppressed [ 181.089061][ T29] audit: type=1326 audit(1718918895.461:167): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5946 comm="syz-executor.5" exe="/root/syz-executor.5" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fa566a7cf29 code=0x0 [ 181.132049][ T5938] loop4: detected capacity change from 0 to 4096 [ 181.323193][ T5938] ntfs3: loop4: Different NTFS sector size (1024) and media sector size (512). [ 182.302933][ T5717] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 182.708549][ T5938] ntfs3: loop4: Failed to read $UpCase (-4). [ 183.103577][ T5962] loop5: detected capacity change from 0 to 32768 [ 183.131963][ T5962] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop5 (7:5) scanned by syz-executor.5 (5962) [ 183.152314][ T5962] BTRFS info (device loop5): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 183.162692][ T5962] BTRFS info (device loop5): using crc32c (crc32c-intel) checksum algorithm [ 183.171570][ T5962] BTRFS info (device loop5): using free-space-tree [ 183.269317][ T5971] loop2: detected capacity change from 0 to 16 [ 183.298966][ T5971] erofs: (device loop2): mounted with root inode @ nid 36. [ 183.320556][ T5971] syz-executor.2: attempt to access beyond end of device [ 183.320556][ T5971] loop2: rw=0, sector=8, nr_sectors = 32 limit=16 [ 183.341164][ T5971] syz-executor.2: attempt to access beyond end of device [ 183.341164][ T5971] loop2: rw=0, sector=8, nr_sectors = 32 limit=16 [ 183.367443][ T5971] syz-executor.2: attempt to access beyond end of device [ 183.367443][ T5971] loop2: rw=0, sector=8, nr_sectors = 32 limit=16 [ 183.386928][ T5971] syz-executor.2: attempt to access beyond end of device [ 183.386928][ T5971] loop2: rw=0, sector=8, nr_sectors = 32 limit=16 [ 185.099849][ T29] audit: type=1326 audit(1718918899.391:168): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5961 comm="syz-executor.5" exe="/root/syz-executor.5" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa566a7cf29 code=0x7fc00000 [ 185.281725][ T29] audit: type=1326 audit(1718918899.541:169): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5961 comm="syz-executor.5" exe="/root/syz-executor.5" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7fa566a7cf29 code=0x7fc00000 [ 185.383583][ T5113] BTRFS info (device loop5): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 185.599740][ T6003] loop4: detected capacity change from 0 to 2048 [ 185.652855][ T6003] NILFS (loop4): invalid segment: Checksum error in segment payload [ 185.702053][ T5179] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 185.749144][ T6003] NILFS (loop4): trying rollback from an earlier position [ 185.784281][ T5115] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 185.786505][ T6003] NILFS (loop4): recovery complete [ 185.815052][ T5717] team0: Port device team_slave_0 added [ 185.852642][ T6009] NILFS (loop4): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 185.894843][ T29] audit: type=1800 audit(1718918900.271:170): pid=6003 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz-executor.4" name="bus" dev="loop4" ino=12 res=0 errno=0 [ 185.916185][ T5179] usb 2-1: Using ep0 maxpacket: 8 [ 185.933619][ T5179] usb 2-1: config index 0 descriptor too short (expected 6427, got 27) [ 185.963018][ T5179] usb 2-1: config 0 has an invalid interface number: 21 but max is 0 [ 185.990762][ T5179] usb 2-1: config 0 has no interface number 0 [ 186.020642][ T5179] usb 2-1: config 0 interface 21 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 186.069564][ T29] audit: type=1800 audit(1718918900.451:171): pid=6016 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz-executor.4" name="bus" dev="loop4" ino=12 res=0 errno=0 [ 186.105086][ T5179] usb 2-1: config 0 interface 21 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 0 [ 186.190782][ T12] hsr_slave_0: left promiscuous mode [ 186.216437][ T5179] usb 2-1: New USB device found, idVendor=06cd, idProduct=0202, bcdDevice=92.d4 [ 186.300681][ T12] hsr_slave_1: left promiscuous mode [ 186.327072][ T5179] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 186.418189][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 186.506869][ T12] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 186.519316][ T5179] usb 2-1: config 0 descriptor?? [ 186.564706][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 186.610383][ T12] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 186.770815][ T12] veth1_macvtap: left promiscuous mode [ 186.797555][ T5995] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 186.821351][ T12] veth0_macvtap: left promiscuous mode [ 186.832691][ T12] veth1_vlan: left promiscuous mode [ 186.838653][ T12] veth0_vlan: left promiscuous mode [ 186.847104][ T5995] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 186.869278][ T25] usb 2-1: USB disconnect, device number 2 [ 188.281386][ T6032] loop1: detected capacity change from 0 to 256 [ 188.349786][ T6032] FAT-fs (loop1): Unrecognized mount option "codeate=1" or missing value [ 188.459292][ T5176] I/O error, dev loop1, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 0 [ 188.643729][ T6035] loop4: detected capacity change from 0 to 2048 [ 188.691692][ T6035] NILFS (loop4): invalid segment: Checksum error in segment payload [ 188.720365][ T6032] loop1: detected capacity change from 0 to 4096 [ 188.728244][ T6035] NILFS (loop4): trying rollback from an earlier position [ 188.764932][ T6032] ntfs3: loop1: Different NTFS sector size (1024) and media sector size (512). [ 188.770707][ T6035] NILFS (loop4): recovery complete [ 188.828980][ T6036] NILFS (loop4): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 188.867714][ T29] audit: type=1800 audit(1718918903.241:172): pid=6035 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz-executor.4" name="bus" dev="loop4" ino=12 res=0 errno=0 [ 188.896428][ T6032] ntfs3: loop1: Failed to initialize $Extend/$ObjId. [ 188.961946][ T5126] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 188.971356][ T5126] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 188.979583][ T5126] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 189.001170][ T5126] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 189.032811][ T29] audit: type=1800 audit(1718918903.311:173): pid=6040 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz-executor.4" name="bus" dev="loop4" ino=12 res=0 errno=0 [ 189.054020][ T5126] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 189.065230][ T5126] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 189.272599][ T6043] loop5: detected capacity change from 0 to 2048 [ 189.384694][ T6043] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 189.421268][ T6043] ext4 filesystem being mounted at /root/syzkaller-testdir1468779410/syzkaller.uw78fH/26/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 190.805286][ T5113] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 190.973959][ T6052] loop2: detected capacity change from 0 to 32768 [ 190.984445][ T6052] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop2 (7:2) scanned by syz-executor.2 (6052) [ 191.033639][ T6052] BTRFS info (device loop2): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 191.043907][ T6052] BTRFS info (device loop2): using crc32c (crc32c-intel) checksum algorithm [ 191.052708][ T6052] BTRFS info (device loop2): using free-space-tree [ 191.100624][ T5126] Bluetooth: hci2: command tx timeout [ 191.427467][ T6074] loop5: detected capacity change from 0 to 1764 [ 191.516666][ T6076] loop4: detected capacity change from 0 to 128 [ 191.538123][ T12] team0 (unregistering): Port device team_slave_1 removed [ 191.580466][ T29] audit: type=1326 audit(1718918905.951:174): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6051 comm="syz-executor.2" exe="/root/syz-executor.2" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fad3527cf29 code=0x7fc00000 [ 191.613168][ T25] IPVS: starting estimator thread 0... [ 191.691148][ T12] team0 (unregistering): Port device team_slave_0 removed [ 191.709230][ T6079] IPVS: using max 22 ests per chain, 52800 per kthread [ 191.828027][ T29] audit: type=1326 audit(1718918906.111:175): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6051 comm="syz-executor.2" exe="/root/syz-executor.2" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7fad3527cf29 code=0x7fc00000 [ 191.856974][ T29] audit: type=1326 audit(1718918906.111:176): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6051 comm="syz-executor.2" exe="/root/syz-executor.2" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fad3527cf29 code=0x7fc00000 [ 191.863815][ T6074] loop5: detected capacity change from 0 to 128 [ 191.892570][ T5112] BTRFS info (device loop2): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 191.932334][ T29] audit: type=1326 audit(1718918906.111:177): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6051 comm="syz-executor.2" exe="/root/syz-executor.2" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fad3527cf29 code=0x7fc00000 [ 191.963490][ T6074] VFS: Found a Xenix FS (block size = 512) on device loop5 [ 192.036283][ T6074] sysv_free_block: trying to free block not in datazone [ 193.179027][ T5126] Bluetooth: hci2: command tx timeout [ 193.458393][ T5717] team0: Port device team_slave_1 added [ 193.603173][ T5717] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 193.628243][ T5717] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 193.678013][ T5717] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 193.718303][ T5113] sysv_free_inode: inode 0,1,2 or nonexistent inode [ 193.788553][ T5717] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 193.809249][ T5717] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 193.906774][ T5717] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 194.066077][ T1240] ieee802154 phy0 wpan0: encryption failed: -22 [ 194.072590][ T1240] ieee802154 phy1 wpan1: encryption failed: -22 [ 194.250301][ T5179] usb 6-1: new high-speed USB device number 2 using dummy_hcd [ 195.260345][ T5126] Bluetooth: hci2: command tx timeout [ 195.419410][ T5179] usb 6-1: Using ep0 maxpacket: 8 [ 195.648311][ T5179] usb 6-1: config index 0 descriptor too short (expected 6427, got 27) [ 195.668585][ T5179] usb 6-1: config 0 has an invalid interface number: 21 but max is 0 [ 196.515051][ T6094] loop1: detected capacity change from 0 to 1764 [ 196.546690][ T5179] usb 6-1: config 0 has no interface number 0 [ 196.554100][ T5717] hsr_slave_0: entered promiscuous mode [ 196.609073][ T5179] usb 6-1: config 0 interface 21 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 196.633291][ T5717] hsr_slave_1: entered promiscuous mode [ 197.083137][ T5179] usb 6-1: config 0 interface 21 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 0 [ 197.093377][ T5179] usb 6-1: New USB device found, idVendor=06cd, idProduct=0202, bcdDevice=92.d4 [ 197.102600][ T5179] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 197.118595][ T5179] usb 6-1: config 0 descriptor?? [ 197.125314][ T5179] usb 6-1: can't set config #0, error -71 [ 197.133658][ T5179] usb 6-1: USB disconnect, device number 2 [ 197.170829][ T5717] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 197.178422][ T5717] Cannot create hsr debugfs directory [ 197.349032][ T5126] Bluetooth: hci2: command tx timeout [ 198.976050][ T12] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 199.248244][ T6134] loop1: detected capacity change from 0 to 128 [ 199.272936][ T12] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 199.515665][ T6134] IPVS: set_ctl: invalid protocol: 0 172.20.20.170:65535 [ 199.686044][ T12] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 201.870911][ T12] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 201.960996][ T6153] loop4: detected capacity change from 0 to 256 [ 202.003322][ T6153] FAT-fs (loop4): Unrecognized mount option "codeate=1" or missing value [ 202.079159][ T5285] I/O error, dev loop4, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 0 [ 202.195692][ T6037] chnl_net:caif_netlink_parms(): no params data found [ 202.262816][ T6153] loop4: detected capacity change from 0 to 4096 [ 202.324732][ T6153] ntfs3: loop4: Different NTFS sector size (1024) and media sector size (512). [ 202.473081][ T6153] ntfs3: loop4: Failed to initialize $Extend/$ObjId. [ 202.749955][ T6160] loop5: detected capacity change from 0 to 128 [ 203.197790][ T5192] IPVS: starting estimator thread 0... [ 203.251265][ T12] bridge_slave_1: left allmulticast mode [ 203.257931][ T12] bridge_slave_1: left promiscuous mode [ 203.259534][ T6155] loop1: detected capacity change from 0 to 32768 [ 203.273229][ T12] bridge0: port 2(bridge_slave_1) entered disabled state [ 203.301400][ T6155] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop1 (7:1) scanned by syz-executor.1 (6155) [ 203.342129][ T12] bridge_slave_0: left allmulticast mode [ 203.348442][ T12] bridge_slave_0: left promiscuous mode [ 203.359161][ T6164] IPVS: using max 16 ests per chain, 38400 per kthread [ 203.375008][ T12] bridge0: port 1(bridge_slave_0) entered disabled state [ 203.427020][ T6155] BTRFS info (device loop1): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 203.462231][ T6155] BTRFS info (device loop1): using sha256 (sha256-ni) checksum algorithm [ 203.499511][ T6155] BTRFS info (device loop1): using free-space-tree [ 203.587813][ T6167] loop2: detected capacity change from 0 to 1764 [ 205.179803][ T6196] BTRFS info (device loop1): setting incompat feature flag for SIMPLE_QUOTA (0x10000) [ 205.802953][ T5127] BTRFS info (device loop1): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 205.866113][ T6167] loop2: detected capacity change from 0 to 128 [ 205.891910][ T6167] VFS: Found a Xenix FS (block size = 512) on device loop2 [ 205.957906][ T6167] sysv_free_block: trying to free block not in datazone [ 206.462486][ T53] Bluetooth: hci1: command 0x0406 tx timeout [ 206.462552][ T5135] Bluetooth: hci0: command 0x0406 tx timeout [ 206.475220][ T5136] Bluetooth: hci5: command 0x0406 tx timeout [ 206.475872][ T5124] Bluetooth: hci3: command 0x0406 tx timeout [ 206.516828][ T6200] random: crng reseeded on system resumption [ 206.665954][ T5112] sysv_free_inode: inode 0,1,2 or nonexistent inode [ 208.713771][ T12] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 208.747661][ T12] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 208.767442][ T12] bond0 (unregistering): Released all slaves [ 208.914949][ T6222] loop1: detected capacity change from 0 to 128 [ 208.928989][ T6037] bridge0: port 1(bridge_slave_0) entered blocking state [ 208.948506][ T6037] bridge0: port 1(bridge_slave_0) entered disabled state [ 209.009898][ T6037] bridge_slave_0: entered allmulticast mode [ 209.035967][ T6037] bridge_slave_0: entered promiscuous mode [ 209.112006][ T6037] bridge0: port 2(bridge_slave_1) entered blocking state [ 209.145142][ T6037] bridge0: port 2(bridge_slave_1) entered disabled state [ 209.329157][ T6037] bridge_slave_1: entered allmulticast mode [ 209.345344][ T6037] bridge_slave_1: entered promiscuous mode [ 210.196452][ T6235] loop4: detected capacity change from 0 to 256 [ 210.357247][ T6235] FAT-fs (loop4): Unrecognized mount option "codeate=1" or missing value [ 210.479134][ T6237] loop1: detected capacity change from 0 to 8 [ 210.539485][ T6237] Page size > filesystem block size (0). This is currently not supported! [ 210.661798][ T6037] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 210.754520][ T6037] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 210.804875][ T6247] loop1: detected capacity change from 0 to 256 [ 210.849399][ T6247] exFAT-fs (loop1): failed to load upcase table (idx : 0x000104d0, chksum : 0x60d18cac, utbl_chksum : 0xe619d30d) [ 210.916382][ T6235] loop4: detected capacity change from 0 to 4096 [ 210.957422][ T6235] ntfs3: loop4: Different NTFS sector size (1024) and media sector size (512). [ 211.106650][ T6235] ntfs3: loop4: Failed to initialize $Extend/$ObjId. [ 212.859904][ T12] hsr_slave_0: left promiscuous mode [ 212.893751][ T12] hsr_slave_1: left promiscuous mode [ 212.911597][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 212.939246][ T12] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 212.954142][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 212.970628][ T12] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 213.295535][ T12] veth1_macvtap: left promiscuous mode [ 213.351471][ T12] veth0_macvtap: left promiscuous mode [ 213.433069][ T12] veth1_vlan: left promiscuous mode [ 213.539773][ T12] veth0_vlan: left promiscuous mode [ 213.870658][ T6273] loop2: detected capacity change from 0 to 256 [ 213.915947][ T6273] exFAT-fs (loop2): failed to load upcase table (idx : 0x00011f41, chksum : 0xe1a8932d, utbl_chksum : 0xe619d30d) [ 214.226122][ T12] team0 (unregistering): Port device team_slave_1 removed [ 214.275474][ T12] team0 (unregistering): Port device team_slave_0 removed [ 214.675595][ T6037] team0: Port device team_slave_0 added [ 214.879628][ T5126] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 214.888710][ T5126] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 214.896690][ T5126] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 214.906210][ T5126] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 214.920234][ T5126] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 214.931244][ T5126] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 215.001834][ T6037] team0: Port device team_slave_1 added [ 215.020329][ T6280] loop5: detected capacity change from 0 to 2048 [ 215.097481][ T6280] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 215.123503][ T6280] ext4 filesystem being mounted at /root/syzkaller-testdir1468779410/syzkaller.uw78fH/35/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 215.513747][ T6037] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 215.815945][ T6037] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 215.815993][ T6037] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 215.861303][ T6286] loop4: detected capacity change from 0 to 4096 [ 216.107003][ T6037] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 216.107026][ T6037] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 216.107059][ T6037] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 216.122141][ T6296] NILFS (loop4): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 217.020249][ T5126] Bluetooth: hci4: command tx timeout [ 219.099046][ T5126] Bluetooth: hci4: command tx timeout [ 219.714760][ T6292] loop1: detected capacity change from 0 to 128 [ 220.016687][ T6037] hsr_slave_0: entered promiscuous mode [ 220.031667][ T6037] hsr_slave_1: entered promiscuous mode [ 220.040711][ T6037] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 220.040790][ T6037] Cannot create hsr debugfs directory [ 220.575280][ T12] IPVS: stop unused estimator thread 0... [ 220.654341][ T6293] tty tty24: ldisc open failed (-12), clearing slot 23 [ 220.680289][ T6294] tty tty24: ldisc open failed (-12), clearing slot 23 [ 220.830789][ T5113] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 220.969459][ T12] bridge_slave_1: left allmulticast mode [ 220.977372][ T12] bridge_slave_1: left promiscuous mode [ 220.991443][ T12] bridge0: port 2(bridge_slave_1) entered disabled state [ 221.189173][ T5126] Bluetooth: hci4: command tx timeout [ 221.224527][ T12] bridge_slave_0: left allmulticast mode [ 221.429420][ T12] bridge_slave_0: left promiscuous mode [ 223.151636][ T12] bridge0: port 1(bridge_slave_0) entered disabled state [ 223.269489][ T5126] Bluetooth: hci4: command tx timeout [ 223.566600][ T6327] loop4: detected capacity change from 0 to 2048 [ 225.491844][ T6327] NILFS (loop4): invalid segment: Checksum error in segment payload [ 225.519095][ T6327] NILFS (loop4): trying rollback from an earlier position [ 225.620897][ T6327] NILFS (loop4): recovery complete [ 225.828645][ T12] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 225.839482][ T6338] NILFS (loop4): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 225.919251][ T29] audit: type=1800 audit(1718918940.291:178): pid=6327 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz-executor.4" name="bus" dev="loop4" ino=12 res=0 errno=0 [ 225.921042][ T6343] loop2: detected capacity change from 0 to 256 [ 225.951341][ T6343] FAT-fs (loop2): Unrecognized mount option "codeate=1" or missing value [ 226.169458][ T57] usb 2-1: new high-speed USB device number 3 using dummy_hcd [ 226.227962][ T12] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 226.283731][ T29] audit: type=1800 audit(1718918940.591:179): pid=6347 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz-executor.4" name="bus" dev="loop4" ino=12 res=0 errno=0 [ 226.370336][ T12] bond0 (unregistering): Released all slaves [ 226.659560][ T57] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0xFF has an invalid bInterval 0, changing to 7 [ 226.717377][ T57] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0xFF has invalid wMaxPacketSize 0 [ 226.788041][ T57] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 226.833889][ T6343] loop2: detected capacity change from 0 to 4096 [ 226.842993][ T6343] ntfs3: loop2: Different NTFS sector size (1024) and media sector size (512). [ 226.893245][ T6343] ntfs3: loop2: Failed to initialize $Extend/$ObjId. [ 226.900120][ T57] usb 2-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 226.935676][ T57] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 226.971422][ T57] usb 2-1: config 0 descriptor?? [ 227.382366][ T6355] loop5: detected capacity change from 0 to 4096 [ 227.404690][ T12] hsr_slave_0: left promiscuous mode [ 227.418135][ T12] hsr_slave_1: left promiscuous mode [ 227.424982][ T57] plantronics 0003:047F:FFFF.0001: ignoring exceeding usage max [ 227.436240][ T12] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 227.484712][ T57] plantronics 0003:047F:FFFF.0001: No inputs registered, leaving [ 227.485117][ T12] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 227.559623][ T57] plantronics 0003:047F:FFFF.0001: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.1-1/input0 [ 227.583895][ T6360] usb usb9: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 227.584031][ T6361] NILFS (loop5): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 227.657258][ T6357] loop4: detected capacity change from 0 to 8192 [ 227.691049][ T6357] loop4: p1 p2 p3 [ 227.696163][ T29] audit: type=1800 audit(1718918942.071:180): pid=6362 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz-executor.5" name="bus" dev="loop5" ino=18 res=0 errno=0 [ 227.750173][ T29] audit: type=1804 audit(1718918942.101:181): pid=6362 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor.5" name="/root/syzkaller-testdir1468779410/syzkaller.uw78fH/40/file0/bus" dev="loop5" ino=18 res=1 errno=0 [ 228.165424][ T12] team0 (unregistering): Port device team_slave_1 removed [ 228.225353][ T12] team0 (unregistering): Port device team_slave_0 removed [ 228.832703][ T6267] chnl_net:caif_netlink_parms(): no params data found [ 231.281997][ T5182] usb 2-1: USB disconnect, device number 3 [ 232.788216][ T6402] loop2: detected capacity change from 0 to 2048 [ 233.571224][ T6402] NILFS (loop2): invalid segment: Checksum error in segment payload [ 233.650525][ T6394] loop4: detected capacity change from 0 to 1764 [ 233.714063][ T6402] NILFS (loop2): trying rollback from an earlier position [ 233.811273][ T5285] I/O error, dev loop4, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 0 [ 233.859287][ T6402] NILFS (loop2): recovery complete [ 233.891542][ T6410] NILFS (loop2): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 233.930381][ T6267] bridge0: port 1(bridge_slave_0) entered blocking state [ 233.965979][ T29] audit: type=1800 audit(1718918948.321:182): pid=6402 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz-executor.2" name="bus" dev="loop2" ino=12 res=0 errno=0 [ 234.009048][ T6267] bridge0: port 1(bridge_slave_0) entered disabled state [ 234.009289][ T6267] bridge_slave_0: entered allmulticast mode [ 234.011025][ T6267] bridge_slave_0: entered promiscuous mode [ 234.040144][ T6267] bridge0: port 2(bridge_slave_1) entered blocking state [ 234.040274][ T6267] bridge0: port 2(bridge_slave_1) entered disabled state [ 234.043348][ T6267] bridge_slave_1: entered allmulticast mode [ 234.045001][ T6267] bridge_slave_1: entered promiscuous mode [ 234.094633][ T29] audit: type=1800 audit(1718918948.421:183): pid=6415 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz-executor.2" name="bus" dev="loop2" ino=12 res=0 errno=0 [ 234.264896][ T6394] loop4: detected capacity change from 0 to 128 [ 234.362254][ T6394] VFS: Found a Xenix FS (block size = 512) on device loop4 [ 234.402616][ T6394] sysv_free_block: trying to free block not in datazone [ 234.445700][ T6267] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 234.506362][ T6267] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 234.925726][ T6267] team0: Port device team_slave_0 added [ 235.090980][ T6267] team0: Port device team_slave_1 added [ 235.112327][ T5123] sysv_free_inode: inode 0,1,2 or nonexistent inode [ 235.219303][ T6037] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 235.401712][ T6037] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 235.462778][ T6433] loop2: detected capacity change from 0 to 4096 [ 235.494490][ T6267] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 235.581871][ T6267] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 235.598392][ T6437] NILFS (loop2): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 235.666331][ T6438] usb usb9: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 235.719457][ T6267] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 235.787522][ T29] audit: type=1800 audit(1718918950.151:184): pid=6441 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz-executor.2" name="bus" dev="loop2" ino=18 res=0 errno=0 [ 235.831229][ T6037] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 235.851787][ T6436] loop4: detected capacity change from 0 to 8192 [ 235.869935][ T29] audit: type=1804 audit(1718918950.151:185): pid=6441 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor.2" name="/root/syzkaller-testdir2732955125/syzkaller.qzj9BH/47/file0/bus" dev="loop2" ino=18 res=1 errno=0 [ 235.932029][ T6267] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 235.960943][ T6267] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 236.040690][ T6436] loop4: p1 p2 p3 [ 236.055867][ T6267] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 236.156045][ T6037] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 236.757744][ T6452] loop2: detected capacity change from 0 to 256 [ 236.781390][ T6267] hsr_slave_0: entered promiscuous mode [ 236.802476][ T6267] hsr_slave_1: entered promiscuous mode [ 236.844433][ T6267] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 236.854643][ T6452] FAT-fs (loop2): Unrecognized mount option "codeate=1" or missing value [ 236.882468][ T6267] Cannot create hsr debugfs directory [ 237.030378][ T6453] loop4: detected capacity change from 0 to 2048 [ 237.375308][ T6452] loop2: detected capacity change from 0 to 4096 [ 237.385127][ T6452] ntfs3: loop2: Different NTFS sector size (1024) and media sector size (512). [ 237.599822][ T6452] ntfs3: loop2: Failed to initialize $Extend/$ObjId. [ 237.742342][ T6453] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 238.445728][ T6037] 8021q: adding VLAN 0 to HW filter on device bond0 [ 238.468916][ T5168] usb 2-1: new high-speed USB device number 4 using dummy_hcd [ 239.042618][ T5168] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0xFF has an invalid bInterval 0, changing to 7 [ 239.270881][ T6267] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 239.340319][ T5168] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0xFF has invalid wMaxPacketSize 0 [ 239.349269][ T6267] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 239.357422][ T5168] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 239.398492][ T5168] usb 2-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 239.439024][ T5168] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 239.457477][ T6037] 8021q: adding VLAN 0 to HW filter on device team0 [ 239.490130][ T5168] usb 2-1: config 0 descriptor?? [ 239.504857][ T6267] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 239.557184][ T6267] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 239.621525][ T5116] bridge0: port 1(bridge_slave_0) entered blocking state [ 239.628824][ T5116] bridge0: port 1(bridge_slave_0) entered forwarding state [ 239.766727][ T5182] bridge0: port 2(bridge_slave_1) entered blocking state [ 239.773984][ T5182] bridge0: port 2(bridge_slave_1) entered forwarding state [ 239.820646][ T6465] EXT4-fs error (device loop4): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 239.958196][ T5168] plantronics 0003:047F:FFFF.0002: ignoring exceeding usage max [ 240.020440][ T5168] plantronics 0003:047F:FFFF.0002: No inputs registered, leaving [ 240.124617][ T5168] plantronics 0003:047F:FFFF.0002: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.1-1/input0 [ 240.365006][ T6267] 8021q: adding VLAN 0 to HW filter on device bond0 [ 240.634425][ T6267] 8021q: adding VLAN 0 to HW filter on device team0 [ 240.732909][ T5119] bridge0: port 1(bridge_slave_0) entered blocking state [ 240.740144][ T5119] bridge0: port 1(bridge_slave_0) entered forwarding state [ 240.986841][ T57] bridge0: port 2(bridge_slave_1) entered blocking state [ 240.994071][ T57] bridge0: port 2(bridge_slave_1) entered forwarding state [ 241.195486][ T5123] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 241.222937][ T6037] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 241.552791][ T6500] loop5: detected capacity change from 0 to 2048 [ 241.586302][ T6037] veth0_vlan: entered promiscuous mode [ 241.625753][ T6500] NILFS (loop5): invalid segment: Checksum error in segment payload [ 241.691607][ T6500] NILFS (loop5): trying rollback from an earlier position [ 241.768366][ T6037] veth1_vlan: entered promiscuous mode [ 242.247601][ T6500] NILFS (loop5): recovery complete [ 242.429455][ T6510] NILFS (loop5): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 242.552450][ T29] audit: type=1800 audit(1718918956.931:186): pid=6500 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz-executor.5" name="bus" dev="loop5" ino=12 res=0 errno=0 [ 242.599433][ T57] usb 2-1: USB disconnect, device number 4 [ 242.697371][ T29] audit: type=1800 audit(1718918957.041:187): pid=6514 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz-executor.5" name="bus" dev="loop5" ino=12 res=0 errno=0 [ 242.743222][ T6037] veth0_macvtap: entered promiscuous mode [ 242.829750][ T6037] veth1_macvtap: entered promiscuous mode [ 243.012787][ T6037] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 243.052451][ T6037] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 243.105287][ T6037] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 243.141572][ T6037] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 243.188900][ T6037] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 243.208829][ T6037] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 243.239036][ T6037] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 243.277427][ T6037] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 243.332178][ T6037] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 243.344344][ T6534] loop4: detected capacity change from 0 to 1764 [ 243.427143][ T6037] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 243.454362][ T6535] loop5: detected capacity change from 0 to 4096 [ 243.501301][ T6037] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 243.556247][ T6037] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 243.598899][ T6037] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 243.609538][ T6540] NILFS (loop5): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 243.644673][ T6037] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 243.671367][ T29] audit: type=1800 audit(1718918958.051:188): pid=6531 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz-executor.5" name="bus" dev="loop5" ino=18 res=0 errno=0 [ 243.709113][ T6037] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 243.741519][ T6037] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 243.777365][ T29] audit: type=1804 audit(1718918958.151:189): pid=6531 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor.5" name="/root/syzkaller-testdir1468779410/syzkaller.uw78fH/47/file0/bus" dev="loop5" ino=18 res=1 errno=0 [ 243.829337][ T6037] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 243.885351][ T6037] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 244.018356][ T6037] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 244.051623][ T6037] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 244.093170][ T6037] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 244.116610][ T6037] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 244.133486][ T6529] loop4: detected capacity change from 0 to 128 [ 244.185103][ T6529] VFS: Found a Xenix FS (block size = 512) on device loop4 [ 244.242693][ T6529] sysv_free_block: trying to free block not in datazone [ 244.375744][ T6267] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 244.879164][ T5282] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 244.920337][ T5282] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 244.974804][ T6267] veth0_vlan: entered promiscuous mode [ 245.043887][ T5123] sysv_free_inode: inode 0,1,2 or nonexistent inode [ 245.123053][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 245.143185][ T6267] veth1_vlan: entered promiscuous mode [ 245.155945][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 245.422589][ T6551] loop4: detected capacity change from 0 to 2048 [ 245.458193][ T6267] veth0_macvtap: entered promiscuous mode [ 245.505458][ T6551] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 245.508738][ T6267] veth1_macvtap: entered promiscuous mode [ 245.563510][ T6551] ext4 filesystem being mounted at /root/syzkaller-testdir2182893643/syzkaller.LouRkN/51/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 248.082398][ T6267] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 248.526294][ T6267] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 248.600540][ T6267] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 248.646164][ T6572] loop1: detected capacity change from 0 to 1024 [ 248.652801][ T6267] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 248.687158][ T6267] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 248.729793][ T6267] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 248.754894][ T6577] loop5: detected capacity change from 0 to 128 [ 248.775183][ T6267] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 248.861328][ T6572] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 248.873778][ T6267] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 249.002865][ T6267] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 249.027611][ T6267] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 249.067139][ T6267] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 249.100737][ T5123] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 249.174670][ T6267] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 249.215710][ T6267] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 249.262630][ T29] audit: type=1800 audit(1718918963.631:190): pid=6572 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz-executor.1" name="bus" dev="loop1" ino=19 res=0 errno=0 [ 249.270672][ T6267] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 249.299794][ T6267] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 249.314892][ T29] audit: type=1804 audit(1718918963.631:191): pid=6572 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor.1" name="/root/syzkaller-testdir3490196875/syzkaller.J2I9I8/51/file1/bus" dev="loop1" ino=19 res=1 errno=0 [ 249.370380][ T6267] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 249.400386][ T6267] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 249.438879][ T6267] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 249.476023][ T6267] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 249.556071][ T6267] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 249.603642][ T6267] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 249.673862][ T6267] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 249.708034][ T5127] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 249.715516][ T6267] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 249.741309][ T6267] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 249.805772][ T6267] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 249.858936][ T6267] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 251.176039][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 251.228875][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 251.256374][ T6609] loop5: detected capacity change from 0 to 2048 [ 251.530719][ T6609] NILFS (loop5): invalid segment: Checksum error in segment payload [ 252.504210][ T6609] NILFS (loop5): trying rollback from an earlier position [ 252.560148][ T6621] loop1: detected capacity change from 0 to 512 [ 252.582560][ T35] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 252.619627][ T35] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 252.638997][ T6609] NILFS (loop5): recovery complete [ 252.657068][ T6621] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 252.720469][ T6624] NILFS (loop5): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 253.896301][ T6609] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 253.929021][ T6621] EXT4-fs (loop1): 1 truncate cleaned up [ 253.960259][ T6609] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 253.968514][ T6621] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 253.988161][ T29] audit: type=1804 audit(1718918968.341:192): pid=6629 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor.5" name="/root/syzkaller-testdir1468779410/syzkaller.uw78fH/51/file0/bus" dev="loop5" ino=12 res=1 errno=0 [ 254.046418][ T6609] net_ratelimit: 2 callbacks suppressed [ 254.046437][ T6609] A link change request failed with some changes committed already. Interface batadv_slave_0 may have been left with an inconsistent configuration, please check. [ 254.338651][ T6636] loop3: detected capacity change from 0 to 1764 [ 254.637735][ T6645] random: crng reseeded on system resumption [ 254.825889][ T6646] netlink: 32 bytes leftover after parsing attributes in process `syz-executor.2'. [ 254.910351][ T6636] loop3: detected capacity change from 0 to 128 [ 254.915807][ T6648] loop0: detected capacity change from 0 to 2048 [ 254.993006][ T6636] VFS: Found a Xenix FS (block size = 512) on device loop3 [ 255.014405][ T6636] sysv_free_block: trying to free block not in datazone [ 255.059788][ T5127] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 255.071678][ T6636] sysv_free_inode: inode 0,1,2 or nonexistent inode [ 255.091415][ T6648] NILFS (loop0): invalid segment: Checksum error in segment payload [ 255.143219][ T6648] NILFS (loop0): trying rollback from an earlier position [ 255.219507][ T6648] NILFS (loop0): recovery complete [ 255.295157][ T6655] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 255.329180][ T29] audit: type=1800 audit(1718918969.711:193): pid=6648 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz-executor.0" name="bus" dev="loop0" ino=12 res=0 errno=0 [ 255.458642][ T29] audit: type=1800 audit(1718918969.761:194): pid=6657 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz-executor.0" name="bus" dev="loop0" ino=12 res=0 errno=0 [ 255.513248][ T1240] ieee802154 phy0 wpan0: encryption failed: -22 [ 255.563396][ T1240] ieee802154 phy1 wpan1: encryption failed: -22 [ 256.109632][ T6666] loop0: detected capacity change from 0 to 1024 [ 256.427949][ T6666] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 256.876354][ T29] audit: type=1800 audit(1718918971.251:195): pid=6666 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz-executor.0" name="bus" dev="loop0" ino=19 res=0 errno=0 [ 256.965490][ T29] audit: type=1804 audit(1718918971.251:196): pid=6666 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor.0" name="/root/syzkaller-testdir1522485380/syzkaller.L5MJxG/4/file1/bus" dev="loop0" ino=19 res=1 errno=0 [ 257.016991][ T6037] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 259.839926][ T6705] loop1: detected capacity change from 0 to 4096 [ 260.029070][ T6713] NILFS (loop1): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 260.161440][ T29] audit: type=1800 audit(1718918974.521:197): pid=6714 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz-executor.1" name="bus" dev="loop1" ino=18 res=0 errno=0 [ 260.206299][ T6712] loop0: detected capacity change from 0 to 4096 [ 260.297789][ T29] audit: type=1804 audit(1718918974.531:198): pid=6714 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor.1" name="/root/syzkaller-testdir3490196875/syzkaller.J2I9I8/55/file0/bus" dev="loop1" ino=18 res=1 errno=0 [ 260.392674][ T6719] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 260.516752][ T29] audit: type=1800 audit(1718918974.841:199): pid=6712 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz-executor.0" name="bus" dev="loop0" ino=18 res=0 errno=0 [ 260.577285][ T29] audit: type=1804 audit(1718918974.841:200): pid=6712 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor.0" name="/root/syzkaller-testdir1522485380/syzkaller.L5MJxG/6/file0/bus" dev="loop0" ino=18 res=1 errno=0 [ 261.185297][ T6727] loop0: detected capacity change from 0 to 2048 [ 261.273651][ T6727] NILFS (loop0): invalid segment: Checksum error in segment payload [ 261.323874][ T6727] NILFS (loop0): trying rollback from an earlier position [ 261.486783][ T6727] NILFS (loop0): recovery complete [ 261.523306][ T6728] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 261.682340][ T6709] loop3: detected capacity change from 0 to 32768 [ 261.703367][ T29] audit: type=1804 audit(1718918976.071:201): pid=6729 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor.0" name="/root/syzkaller-testdir1522485380/syzkaller.L5MJxG/7/file0/bus" dev="loop0" ino=12 res=1 errno=0 [ 261.991896][ T6709] bcachefs (loop3): mounting version 1.7: mi_btree_bitmap opts=metadata_checksum=none,data_checksum=xxhash,compression=zstd,nojournal_transaction_names [ 262.017702][ T6709] bcachefs (loop3): recovering from clean shutdown, journal seq 10 [ 262.164476][ T6709] bcachefs (loop3): alloc_read... done [ 262.190309][ T6709] bcachefs (loop3): stripes_read... done [ 262.221175][ T6709] bcachefs (loop3): snapshots_read... done [ 262.266386][ T6709] bcachefs (loop3): journal_replay... done [ 262.299039][ T6709] bcachefs (loop3): resume_logged_ops... done [ 262.342072][ T6709] bcachefs (loop3): going read-write [ 262.387519][ T6709] bcachefs (loop3): done starting filesystem [ 262.923133][ T6741] loop2: detected capacity change from 0 to 2048 [ 262.972106][ T6741] NILFS (loop2): invalid segment: Checksum error in segment payload [ 262.988895][ T6741] NILFS (loop2): trying rollback from an earlier position [ 263.037678][ T6741] NILFS (loop2): recovery complete [ 263.081682][ T6742] NILFS (loop2): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 263.160579][ T29] audit: type=1800 audit(1718918977.541:202): pid=6741 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz-executor.2" name="bus" dev="loop2" ino=12 res=0 errno=0 [ 263.251958][ T29] audit: type=1800 audit(1718918977.631:203): pid=6745 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz-executor.2" name="bus" dev="loop2" ino=12 res=0 errno=0 [ 263.609946][ T6749] loop5: detected capacity change from 0 to 1764 [ 263.947907][ T6749] loop5: detected capacity change from 0 to 128 [ 264.042828][ T6749] VFS: Found a Xenix FS (block size = 512) on device loop5 [ 264.068634][ T6749] sysv_free_block: trying to free block not in datazone [ 264.357354][ T5113] sysv_free_inode: inode 0,1,2 or nonexistent inode [ 264.582656][ T6758] loop5: detected capacity change from 0 to 1024 [ 264.636526][ T6758] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 264.949328][ T29] audit: type=1800 audit(1718918979.331:204): pid=6758 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz-executor.5" name="bus" dev="loop5" ino=19 res=0 errno=0 [ 265.025348][ T29] audit: type=1804 audit(1718918979.401:205): pid=6762 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor.5" name="/root/syzkaller-testdir1468779410/syzkaller.uw78fH/55/file1/bus" dev="loop5" ino=19 res=1 errno=0 [ 265.241938][ T6267] bcachefs (loop3): shutting down [ 265.247546][ T6267] bcachefs (loop3): going read-only [ 265.267300][ T6267] bcachefs (loop3): finished waiting for writes to stop [ 265.272604][ T5113] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 265.304953][ T6267] bcachefs (loop3): flushing journal and stopping allocators, journal seq 11 [ 265.319355][ T6267] bcachefs (loop3): flushing journal and stopping allocators complete, journal seq 11 [ 265.763305][ T6267] bcachefs (loop3): shutdown complete, journal seq 12 [ 265.932561][ T6267] bcachefs (loop3): marking filesystem clean [ 266.245315][ T6267] bcachefs (loop3): shutdown complete [ 268.319937][ T6777] random: crng reseeded on system resumption [ 273.314703][ T6788] loop2: detected capacity change from 0 to 16 [ 275.142271][ T6788] erofs: (device loop2): erofs_read_superblock: cannot read erofs superblock [ 275.663400][ T6794] loop5: detected capacity change from 0 to 2048 [ 275.783442][ T6797] loop3: detected capacity change from 0 to 1764 [ 275.837654][ T6794] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 275.921330][ T6794] ext4 filesystem being mounted at /root/syzkaller-testdir1468779410/syzkaller.uw78fH/59/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 276.948381][ T5113] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 277.100090][ T6797] loop3: detected capacity change from 0 to 128 [ 277.149632][ T6797] VFS: Found a Xenix FS (block size = 512) on device loop3 [ 277.195844][ T6797] sysv_free_block: trying to free block not in datazone [ 277.272466][ T29] audit: type=1804 audit(1718918991.651:206): pid=6797 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor.3" name="/root/syzkaller-testdir2169317720/syzkaller.Tapm46/6/file0" dev="loop3" ino=2 res=1 errno=0 [ 277.486319][ T6267] sysv_free_inode: inode 0,1,2 or nonexistent inode [ 279.216709][ T6815] loop3: detected capacity change from 0 to 1024 [ 279.270566][ T6815] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 279.525227][ T29] audit: type=1800 audit(1718918993.901:207): pid=6819 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz-executor.3" name="bus" dev="loop3" ino=19 res=0 errno=0 [ 279.600263][ T6819] loop3: detected capacity change from 1024 to 11 [ 279.643578][ T6815] syz-executor.3: attempt to access beyond end of device [ 279.643578][ T6815] loop3: rw=14337, sector=224, nr_sectors = 2 limit=11 [ 279.670417][ T6815] Buffer I/O error on dev loop3, logical block 112, lost sync page write [ 279.685844][ T6815] EXT4-fs error (device loop3): ext4_ext_insert_extent:2178: inode #18: block 112: comm syz-executor.3: IO error syncing itable block [ 279.711495][ T6815] EXT4-fs error (device loop3): ext4_check_bdev_write_error:225: comm syz-executor.3: Error while async write back metadata [ 279.735416][ T6815] syz-executor.3: attempt to access beyond end of device [ 279.735416][ T6815] loop3: rw=14337, sector=224, nr_sectors = 2 limit=11 [ 279.759943][ T6815] Buffer I/O error on dev loop3, logical block 112, lost sync page write [ 279.768597][ T6815] EXT4-fs error (device loop3): ext4_ext_insert_extent:2178: inode #18: block 112: comm syz-executor.3: IO error syncing itable block [ 279.794978][ T6815] EXT4-fs error (device loop3): ext4_check_bdev_write_error:225: comm syz-executor.3: Error while async write back metadata [ 279.813621][ T6815] syz-executor.3: attempt to access beyond end of device [ 279.813621][ T6815] loop3: rw=14337, sector=224, nr_sectors = 2 limit=11 [ 279.833158][ T6815] Buffer I/O error on dev loop3, logical block 112, lost sync page write [ 279.852868][ T6815] EXT4-fs error (device loop3): ext4_ext_insert_extent:2178: inode #18: block 112: comm syz-executor.3: IO error syncing itable block [ 279.921666][ T6267] EXT4-fs error (device loop3) in ext4_reserve_inode_write:5731: Out of memory [ 279.939167][ T6267] EXT4-fs error (device loop3): ext4_dirty_inode:5935: inode #2: comm syz-executor.3: mark_inode_dirty error [ 279.979886][ T2414] EXT4-fs error (device loop3): ext4_check_bdev_write_error:225: comm kworker/u8:7: Error while async write back metadata [ 280.002990][ T2414] kworker/u8:7: attempt to access beyond end of device [ 280.002990][ T2414] loop3: rw=14337, sector=224, nr_sectors = 2 limit=11 [ 280.022622][ T2414] Buffer I/O error on dev loop3, logical block 112, lost sync page write [ 280.035102][ T2414] EXT4-fs error (device loop3): ext4_split_extent_at:3204: inode #18: block 112: comm kworker/u8:7: IO error syncing itable block [ 280.052452][ T2414] EXT4-fs (loop3): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 32 with error 5 [ 280.067562][ T2414] EXT4-fs (loop3): This should not happen!! Data will be lost [ 280.067562][ T2414] [ 280.091147][ T5282] EXT4-fs error (device loop3): ext4_check_bdev_write_error:225: comm kworker/u8:13: Error while async write back metadata [ 280.109540][ T5282] kworker/u8:13: attempt to access beyond end of device [ 280.109540][ T5282] loop3: rw=14337, sector=224, nr_sectors = 2 limit=11 [ 280.134155][ T5282] Buffer I/O error on dev loop3, logical block 112, lost sync page write [ 280.145828][ T5282] EXT4-fs (loop3): Delayed block allocation failed for inode 18 at logical offset 44 with max blocks 4 with error 5 [ 280.160983][ T5282] EXT4-fs (loop3): This should not happen!! Data will be lost [ 280.160983][ T5282] [ 280.180483][ T6267] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 280.205084][ T6816] kmmpd-loop3: attempt to access beyond end of device [ 280.205084][ T6816] loop3: rw=14337, sector=128, nr_sectors = 2 limit=11 [ 280.220611][ T6816] Buffer I/O error on dev loop3, logical block 64, lost sync page write [ 288.588351][ T5131] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 288.604101][ T5131] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 288.615952][ T5131] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 288.631666][ T5131] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 288.639497][ T5131] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 288.647876][ T5131] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 289.749900][ T5131] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 289.760772][ T5131] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 289.775750][ T5131] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 289.797105][ T5131] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 289.805180][ T5131] Bluetooth: hci6: unexpected cc 0x0c25 length: 249 > 3 [ 289.819493][ T5131] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 290.706630][ T5131] Bluetooth: hci4: command tx timeout [ 291.083562][ T5126] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 291.092431][ T5126] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 291.109020][ T5126] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 291.118066][ T5126] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 291.126395][ T5126] Bluetooth: hci7: unexpected cc 0x0c25 length: 249 > 3 [ 291.138877][ T5126] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 291.899112][ T5131] Bluetooth: hci6: command tx timeout [ 292.780222][ T5131] Bluetooth: hci4: command tx timeout [ 293.179041][ T5131] Bluetooth: hci7: command tx timeout [ 293.988896][ T5131] Bluetooth: hci6: command tx timeout [ 294.861790][ T5131] Bluetooth: hci4: command tx timeout [ 295.275700][ T5131] Bluetooth: hci7: command tx timeout [ 296.059106][ T5131] Bluetooth: hci6: command tx timeout [ 296.939113][ T5131] Bluetooth: hci4: command tx timeout [ 297.343873][ T5131] Bluetooth: hci7: command tx timeout [ 298.139186][ T5131] Bluetooth: hci6: command tx timeout [ 299.419529][ T5131] Bluetooth: hci7: command tx timeout [ 305.766387][ T5126] Bluetooth: hci8: unexpected cc 0x0c03 length: 249 > 1 [ 305.790065][ T5126] Bluetooth: hci8: unexpected cc 0x1003 length: 249 > 9 [ 305.811574][ T5126] Bluetooth: hci8: unexpected cc 0x1001 length: 249 > 9 [ 305.831331][ T5126] Bluetooth: hci8: unexpected cc 0x0c23 length: 249 > 4 [ 305.839607][ T5126] Bluetooth: hci8: unexpected cc 0x0c25 length: 249 > 3 [ 305.847186][ T5126] Bluetooth: hci8: unexpected cc 0x0c38 length: 249 > 2 [ 306.151410][ T5131] Bluetooth: hci9: unexpected cc 0x0c03 length: 249 > 1 [ 306.166274][ T5131] Bluetooth: hci9: unexpected cc 0x1003 length: 249 > 9 [ 306.176431][ T5131] Bluetooth: hci9: unexpected cc 0x1001 length: 249 > 9 [ 306.187045][ T5131] Bluetooth: hci9: unexpected cc 0x0c23 length: 249 > 4 [ 306.205870][ T5131] Bluetooth: hci9: unexpected cc 0x0c25 length: 249 > 3 [ 306.217425][ T5131] Bluetooth: hci9: unexpected cc 0x0c38 length: 249 > 2 [ 307.331100][ T5131] Bluetooth: hci10: unexpected cc 0x0c03 length: 249 > 1 [ 307.342978][ T5131] Bluetooth: hci10: unexpected cc 0x1003 length: 249 > 9 [ 307.361974][ T5131] Bluetooth: hci10: unexpected cc 0x1001 length: 249 > 9 [ 307.373592][ T5131] Bluetooth: hci10: unexpected cc 0x0c23 length: 249 > 4 [ 307.384953][ T5131] Bluetooth: hci10: unexpected cc 0x0c25 length: 249 > 3 [ 307.403129][ T5131] Bluetooth: hci10: unexpected cc 0x0c38 length: 249 > 2 [ 307.899309][ T5131] Bluetooth: hci8: command tx timeout [ 308.299390][ T5131] Bluetooth: hci9: command tx timeout [ 309.499203][ T5131] Bluetooth: hci10: command tx timeout [ 309.980764][ T5131] Bluetooth: hci8: command tx timeout [ 310.381671][ T5131] Bluetooth: hci9: command tx timeout [ 311.579535][ T5131] Bluetooth: hci10: command tx timeout [ 312.059283][ T5126] Bluetooth: hci8: command tx timeout [ 312.459257][ T5126] Bluetooth: hci9: command tx timeout [ 313.659344][ T5126] Bluetooth: hci10: command tx timeout [ 313.899116][ T5126] Bluetooth: hci2: command 0x0406 tx timeout [ 314.140838][ T5131] Bluetooth: hci8: command tx timeout [ 314.539325][ T5131] Bluetooth: hci9: command tx timeout [ 315.739436][ T5131] Bluetooth: hci10: command tx timeout [ 316.949771][ T1240] ieee802154 phy0 wpan0: encryption failed: -22 [ 316.956302][ T1240] ieee802154 phy1 wpan1: encryption failed: -22 [ 354.452377][ T5126] Bluetooth: hci11: unexpected cc 0x0c03 length: 249 > 1 [ 354.463921][ T5126] Bluetooth: hci11: unexpected cc 0x1003 length: 249 > 9 [ 354.473577][ T5126] Bluetooth: hci11: unexpected cc 0x1001 length: 249 > 9 [ 354.502285][ T5126] Bluetooth: hci11: unexpected cc 0x0c23 length: 249 > 4 [ 354.513536][ T5126] Bluetooth: hci11: unexpected cc 0x0c25 length: 249 > 3 [ 354.524895][ T5126] Bluetooth: hci11: unexpected cc 0x0c38 length: 249 > 2 [ 354.803454][ T5126] Bluetooth: hci12: unexpected cc 0x0c03 length: 249 > 1 [ 354.820319][ T5126] Bluetooth: hci12: unexpected cc 0x1003 length: 249 > 9 [ 354.832991][ T5126] Bluetooth: hci12: unexpected cc 0x1001 length: 249 > 9 [ 354.842654][ T5126] Bluetooth: hci12: unexpected cc 0x0c23 length: 249 > 4 [ 354.853917][ T5126] Bluetooth: hci12: unexpected cc 0x0c25 length: 249 > 3 [ 354.863380][ T5126] Bluetooth: hci12: unexpected cc 0x0c38 length: 249 > 2 [ 356.221219][ T5131] Bluetooth: hci13: unexpected cc 0x0c03 length: 249 > 1 [ 356.233213][ T5131] Bluetooth: hci13: unexpected cc 0x1003 length: 249 > 9 [ 356.243784][ T5131] Bluetooth: hci13: unexpected cc 0x1001 length: 249 > 9 [ 356.252903][ T5131] Bluetooth: hci13: unexpected cc 0x0c23 length: 249 > 4 [ 356.261310][ T5131] Bluetooth: hci13: unexpected cc 0x0c25 length: 249 > 3 [ 356.269700][ T5131] Bluetooth: hci13: unexpected cc 0x0c38 length: 249 > 2 [ 356.629110][ T5131] Bluetooth: hci11: command tx timeout [ 356.939245][ T5131] Bluetooth: hci12: command tx timeout [ 358.299623][ T5131] Bluetooth: hci13: command tx timeout [ 358.701642][ T5131] Bluetooth: hci11: command tx timeout [ 359.019101][ T5131] Bluetooth: hci12: command tx timeout [ 360.383111][ T5131] Bluetooth: hci13: command tx timeout [ 360.782049][ T5131] Bluetooth: hci11: command tx timeout [ 361.108873][ T5131] Bluetooth: hci12: command tx timeout [ 362.461393][ T5131] Bluetooth: hci13: command tx timeout [ 362.859276][ T5131] Bluetooth: hci11: command tx timeout [ 363.179071][ T5131] Bluetooth: hci12: command tx timeout [ 364.539366][ T5131] Bluetooth: hci13: command tx timeout [ 370.781774][ T5126] Bluetooth: hci14: unexpected cc 0x0c03 length: 249 > 1 [ 370.792190][ T5126] Bluetooth: hci14: unexpected cc 0x1003 length: 249 > 9 [ 370.828917][ T5126] Bluetooth: hci14: unexpected cc 0x1001 length: 249 > 9 [ 370.846931][ T5126] Bluetooth: hci14: unexpected cc 0x0c23 length: 249 > 4 [ 370.858738][ T5126] Bluetooth: hci14: unexpected cc 0x0c25 length: 249 > 3 [ 370.869222][ T5126] Bluetooth: hci14: unexpected cc 0x0c38 length: 249 > 2 [ 371.115802][ T5131] Bluetooth: hci15: unexpected cc 0x0c03 length: 249 > 1 [ 371.129141][ T5131] Bluetooth: hci15: unexpected cc 0x1003 length: 249 > 9 [ 371.146622][ T5131] Bluetooth: hci15: unexpected cc 0x1001 length: 249 > 9 [ 371.157041][ T5131] Bluetooth: hci15: unexpected cc 0x0c23 length: 249 > 4 [ 371.174114][ T5131] Bluetooth: hci15: unexpected cc 0x0c25 length: 249 > 3 [ 371.186403][ T5131] Bluetooth: hci15: unexpected cc 0x0c38 length: 249 > 2 [ 372.441101][ T5131] Bluetooth: hci16: unexpected cc 0x0c03 length: 249 > 1 [ 372.450418][ T5131] Bluetooth: hci16: unexpected cc 0x1003 length: 249 > 9 [ 372.462217][ T5131] Bluetooth: hci16: unexpected cc 0x1001 length: 249 > 9 [ 372.471964][ T5131] Bluetooth: hci16: unexpected cc 0x0c23 length: 249 > 4 [ 372.491355][ T5131] Bluetooth: hci16: unexpected cc 0x0c25 length: 249 > 3 [ 372.501961][ T5131] Bluetooth: hci16: unexpected cc 0x0c38 length: 249 > 2 [ 372.949131][ T5126] Bluetooth: hci14: command tx timeout [ 373.263671][ T5126] Bluetooth: hci15: command tx timeout [ 374.553590][ T5131] Bluetooth: hci16: command tx timeout [ 375.029018][ T5126] Bluetooth: hci14: command tx timeout [ 375.349108][ T5126] Bluetooth: hci15: command tx timeout [ 376.619488][ T5126] Bluetooth: hci16: command tx timeout [ 377.103840][ T5126] Bluetooth: hci14: command tx timeout [ 377.419133][ T5126] Bluetooth: hci15: command tx timeout [ 378.399678][ T1240] ieee802154 phy0 wpan0: encryption failed: -22 [ 378.406066][ T1240] ieee802154 phy1 wpan1: encryption failed: -22 [ 378.699495][ T5126] Bluetooth: hci16: command tx timeout [ 379.179000][ T5126] Bluetooth: hci14: command tx timeout [ 379.500359][ T5126] Bluetooth: hci15: command tx timeout [ 380.779564][ T5126] Bluetooth: hci16: command tx timeout [ 407.179635][ T30] INFO: task dhcpcd:4756 blocked for more than 143 seconds. [ 407.187491][ T30] Not tainted 6.10.0-rc3-syzkaller-00044-g2ccbdf43d5e7 #0 [ 407.204073][ T30] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 407.214091][ T30] task:dhcpcd state:D stack:20672 pid:4756 tgid:4756 ppid:4755 flags:0x00000002 2024/06/20 21:32:01 SYZFATAL: failed to recv *flatrpc.HostMessageRaw: EOF [ 407.233451][ T30] Call Trace: [ 407.237113][ T30] [ 407.260999][ T30] __schedule+0x17e8/0x4a20 [ 407.265950][ T30] ? srso_alias_return_thunk+0x5/0xfbef5 [ 407.329006][ T30] ? __pfx___schedule+0x10/0x10 [ 407.335928][ T30] ? __pfx_lock_release+0x10/0x10 [ 407.341149][ T30] ? __mutex_trylock_common+0x92/0x2e0 [ 407.346676][ T30] ? schedule+0x90/0x320 [ 407.369042][ T30] schedule+0x14b/0x320 [ 407.373327][ T30] schedule_preempt_disabled+0x13/0x30 [ 407.399099][ T30] __mutex_lock+0x6a4/0xd70 [ 407.403842][ T30] ? __mutex_lock+0x527/0xd70 [ 407.408591][ T30] ? netlink_dump+0x5d3/0xe50 [ 407.436165][ T30] ? __pfx___mutex_lock+0x10/0x10 [ 407.441839][ T30] ? __pfx___alloc_skb+0x10/0x10 [ 407.446864][ T30] ? __entry_text_end+0x1020c5/0x1020c9 [ 407.479141][ T30] ? __mutex_trylock_common+0x183/0x2e0 [ 407.484810][ T30] netlink_dump+0x5d3/0xe50 [ 407.499113][ T30] ? __pfx_netlink_dump+0x10/0x10 [ 407.504271][ T30] ? __pfx_lock_acquire+0x10/0x10 [ 407.518888][ T30] __netlink_dump_start+0x59d/0x780 [ 407.524223][ T30] ? __pfx_rtnl_dump_ifinfo+0x10/0x10 [ 407.538879][ T30] rtnetlink_rcv_msg+0xda2/0x1180 [ 407.544036][ T30] ? __pfx_rtnl_dump_ifinfo+0x10/0x10 [ 407.568851][ T30] ? rtnetlink_rcv_msg+0x208/0x1180 [ 407.574187][ T30] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 407.588872][ T30] ? is_bpf_text_address+0x285/0x2a0 [ 407.599042][ T30] ? srso_alias_return_thunk+0x5/0xfbef5 [ 407.604766][ T30] ? mark_lock+0x9a/0x350 [ 407.629079][ T30] ? srso_alias_return_thunk+0x5/0xfbef5 [ 407.634841][ T30] ? __lock_acquire+0x1346/0x1fd0 [ 407.665108][ T30] ? __pfx_rtnl_dumpit+0x10/0x10 [ 407.670286][ T30] ? __pfx_rtnl_dump_ifinfo+0x10/0x10 [ 407.675722][ T30] netlink_rcv_skb+0x1e5/0x430 [ 407.698895][ T30] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 407.704486][ T30] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 407.718978][ T30] ? netlink_deliver_tap+0x2e/0x1b0 [ 407.724263][ T30] netlink_unicast+0x7ec/0x980 [ 407.751124][ T30] ? __pfx_netlink_unicast+0x10/0x10 [ 407.757114][ T30] ? srso_alias_return_thunk+0x5/0xfbef5 [ 407.784679][ T30] ? srso_alias_return_thunk+0x5/0xfbef5 [ 407.799087][ T30] ? srso_alias_return_thunk+0x5/0xfbef5 [ 407.804804][ T30] ? srso_alias_return_thunk+0x5/0xfbef5 [ 407.836064][ T30] ? __check_object_size+0x49c/0x900 [ 407.841891][ T30] ? srso_alias_return_thunk+0x5/0xfbef5 [ 407.871198][ T30] ? srso_alias_return_thunk+0x5/0xfbef5 [ 407.877147][ T30] netlink_sendmsg+0x8db/0xcb0 [ 407.888914][ T30] ? __pfx_netlink_sendmsg+0x10/0x10 [ 407.894270][ T30] ? srso_alias_return_thunk+0x5/0xfbef5 [ 407.918844][ T30] ? aa_sock_msg_perm+0x91/0x160 [ 407.923862][ T30] ? srso_alias_return_thunk+0x5/0xfbef5 [ 407.938912][ T30] ? srso_alias_return_thunk+0x5/0xfbef5 [ 407.944615][ T30] ? security_socket_sendmsg+0x87/0xb0 [ 407.958883][ T30] ? __pfx_netlink_sendmsg+0x10/0x10 [ 407.988947][ T30] __sock_sendmsg+0x223/0x270 [ 407.993734][ T30] __sys_sendto+0x3a4/0x4f0 [ 407.998399][ T30] ? __pfx___sys_sendto+0x10/0x10 [ 408.025313][ T30] ? srso_alias_return_thunk+0x5/0xfbef5 [ 408.039072][ T30] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 408.045465][ T30] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 408.068919][ T30] ? exc_page_fault+0x590/0x8c0 [ 408.073862][ T30] __x64_sys_sendto+0xde/0x100 [ 408.078692][ T30] do_syscall_64+0xf3/0x230 [ 408.099942][ T30] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 408.105924][ T30] RIP: 0033:0x7f9f1164aad7 [ 408.119284][ T30] RSP: 002b:00007ffc169434e8 EFLAGS: 00000246 ORIG_RAX: 000000000000002c [ 408.127768][ T30] RAX: ffffffffffffffda RBX: 00007ffc16944610 RCX: 00007f9f1164aad7 [ 408.158918][ T30] RDX: 0000000000000014 RSI: 00007ffc16944530 RDI: 0000000000000018 [ 408.167002][ T30] RBP: 00007ffc169445a0 R08: 00007ffc16944514 R09: 000000000000000c [ 408.198838][ T30] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000012 [ 408.206939][ T30] R13: 00007ffc16944514 R14: 00007ffc16944530 R15: 0000000000000105 [ 408.231033][ T30] [ 408.234316][ T30] INFO: task syz-executor.4:6688 blocked for more than 144 seconds. [ 408.2