last executing test programs: 5m11.729517163s ago: executing program 4 (id=178): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000400)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, 0x0, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={0x0, r3}, 0x18) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f00000000c0)={0x58, 0x2, 0x6, 0x201, 0xa000000, 0x0, {}, [@IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_TIMEOUT={0x8, 0x6, 0x1, 0x0, 0x3}]}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_TYPENAME={0x14, 0x3, 'hash:ip,port,ip\x00'}]}, 0x58}, 0x1, 0x0, 0x0, 0x24000000}, 0x0) 5m10.718499259s ago: executing program 4 (id=179): r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_udp_encap(r0, 0x11, 0x64, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) connect$unix(r2, 0x0, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = syz_open_dev$sndctrl(&(0x7f0000000100), 0x0, 0x0) r4 = getpid() ioctl$SNDRV_CTL_IOCTL_ELEM_ADD(r3, 0xc1105517, &(0x7f0000000340)={{0x0, 0x0, 0x0, 0x0, 'syz0\x00'}, 0x6, 0x0, 0x4, r4, 0x0, 0x0, 'syz1\x00', 0x0}) 5m8.1511312s ago: executing program 4 (id=186): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000040)={'batadv_slave_1\x00', 0x0}) setsockopt$packet_int(r3, 0x107, 0x14, &(0x7f0000000480)=0x102, 0x4) setsockopt$packet_int(r3, 0x107, 0xf, &(0x7f0000000080)=0xf3e, 0x62) sendto$packet(r3, &(0x7f00000000c0)="3f033608260812002c001e0089e9aaa911d7c2290f0086dd1327c9167c643c4a1b7880610cc96655b1b141ab059b24d0fbc50df71548a3f6c5609063382a0c152bfdf9435e3ffe46", 0xe90c, 0xa0c4, &(0x7f0000000540)={0x11, 0x0, r4, 0x1, 0x0, 0x6, @multicast}, 0x14) 5m4.824673819s ago: executing program 4 (id=188): r0 = socket$nl_generic(0x10, 0x3, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x420000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) r4 = syz_genetlink_get_family_id$batadv(&(0x7f0000000080), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000000)={'batadv0\x00', 0x0}) sendmsg$BATADV_CMD_GET_DAT_CACHE(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000002c0)={0x1c, r4, 0x305, 0x0, 0x0, {0x7}, [@BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r5}]}, 0x1c}}, 0x20000000) 5m3.853087216s ago: executing program 4 (id=192): syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f00000001c0)='./file0\x00', 0x21081e, &(0x7f0000000300)={[{@grpquota}, {@nouid32}, {@sysvgroups}, {@noblock_validity}, {@user_xattr}, {@errors_remount}, {@barrier_val={'barrier', 0x3d, 0xa0f}}]}, 0x1, 0x50b, &(0x7f00000007c0)="$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") r0 = open(&(0x7f0000000300)='.\x00', 0x0, 0x188) mkdirat(r0, &(0x7f0000000340)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x0) mkdirat(r0, &(0x7f0000000440)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38//file0\x00', 0x0) mount$bind(&(0x7f00000002c0)='.\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x1010d1, 0x0) r1 = open(&(0x7f0000000300)='.\x00', 0x0, 0x0) r2 = landlock_create_ruleset(&(0x7f00000000c0)={0x100}, 0x10, 0x0) r3 = openat$dir(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0, 0x0) landlock_add_rule$LANDLOCK_RULE_PATH_BENEATH(r2, 0x1, &(0x7f0000000140)={0x100, r3}, 0x0) landlock_restrict_self(r2, 0x0) landlock_restrict_self(r2, 0x0) r4 = open(&(0x7f0000000100)='.\x00', 0x0, 0x0) renameat2(r1, &(0x7f0000000000)='./file0\x00', r4, &(0x7f00000004c0)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38//file0\x00', 0x2) 5m2.46012084s ago: executing program 4 (id=195): r0 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) r1 = userfaultfd(0x801) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000000140)) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000000040)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}, 0x1}) syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x0, &(0x7f0000000100), 0xc06620, 0x4) syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x3) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) 4m47.16765171s ago: executing program 32 (id=195): r0 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) r1 = userfaultfd(0x801) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000000140)) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000000040)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}, 0x1}) syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x0, &(0x7f0000000100), 0xc06620, 0x4) syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x3) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) 4m43.266186607s ago: executing program 0 (id=241): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) syz_clone(0x600, 0x0, 0x33, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) timer_create(0x2, 0x0, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0x10, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000008000850000008200000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7020000004fc500850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r3, 0xfca804a0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) 4m40.515406497s ago: executing program 0 (id=244): r0 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) r1 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000001600), 0x28000, 0x0) ioctl$TIOCMIWAIT(r1, 0x545c, 0x200000000000000) r2 = openat(0xffffffffffffff9c, 0x0, 0x0, 0x73) syz_mount_image$ext4(&(0x7f00000004c0)='ext4\x00', &(0x7f0000000500)='./file0\x00', 0x1000410, &(0x7f0000000100)={[{@grpid}, {@grpquota}]}, 0x4, 0x4eb, &(0x7f0000000540)="$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") getdents64(r2, 0x0, 0x0) open(0x0, 0x0, 0x0) r3 = syz_mount_image$vfat(&(0x7f0000000240), &(0x7f0000000200)='./file0\x00', 0x2, &(0x7f0000000a80)=ANY=[], 0x1, 0x24a, &(0x7f0000001140)="$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") close(r3) syz_clone(0x600c7000, 0x0, 0x2000, 0x0, 0x0, 0x0) arch_prctl$ARCH_GET_XCOMP_GUEST_PERM(0x1024, 0x0) 4m30.971251776s ago: executing program 0 (id=262): r0 = socket$igmp6(0xa, 0x3, 0x2) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000680), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_TRIGGER_SCAN(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000a80)=ANY=[@ANYBLOB="84010000", @ANYRES16=r2, @ANYBLOB="010000000000000000002100000008000300", @ANYRES32=r3, @ANYBLOB="08007d80040002000600eb00fcff0000d4007d8053000200a53b3277c8f0413dec14dd9815d653ec35781c51f89229db8affaa69c77923c23c83225eb5e2f0e524d3c4f54da105a6dc0741cc2b8b9ea497c5301aa6"], 0x184}}, 0x0) sendmmsg$inet6(r0, &(0x7f00000000c0)=[{{&(0x7f00000001c0)={0xa, 0x0, 0x0, @mcast2}, 0x1c, 0x0}}], 0x1, 0x4004) io_setup(0xb0, &(0x7f0000000200)=0x0) r5 = syz_open_dev$video4linux(&(0x7f0000000280), 0x2, 0x101000) io_submit(r4, 0x1, &(0x7f0000004540)=[&(0x7f0000000240)={0x0, 0x0, 0x0, 0x5, 0x0, r5, 0x0}]) ioctl$sock_SIOCINQ(r0, 0x541b, &(0x7f00000003c0)) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, 0x0, 0x2) sendmsg$IPSET_CMD_ADD(r6, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000000)=ANY=[@ANYBLOB="2c0000000906010200003a03d77c0000000000000200020073797a310000000005080000000000000000ad30"], 0x2c}, 0x1, 0x0, 0x0, 0x10000082}, 0x80) 4m27.856247125s ago: executing program 0 (id=265): syz_mount_image$ext4(&(0x7f0000000780)='ext4\x00', &(0x7f0000000240)='./file0\x00', 0x2000480, &(0x7f0000000000)={[{@jqfmt_vfsv0}, {@nogrpid}]}, 0x1, 0x792, &(0x7f0000000f80)="$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") r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cpuacct.usage_sys\x00', 0x275a, 0x0) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/crypto\x00', 0x0, 0x0) read$FUSE(r1, &(0x7f0000000200)={0x2020}, 0x2020) open(&(0x7f0000000080)='./bus\x00', 0x141042, 0x0) write$binfmt_script(r0, &(0x7f0000000040)={'#! ', './file0'}, 0xb) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpuacct.usage_sys\x00', 0x275a, 0x0) write$binfmt_script(r2, &(0x7f0000020240), 0x10010) mount(&(0x7f0000000380)=@loop={'/dev/loop', 0x0}, &(0x7f0000000140)='./bus\x00', 0x0, 0x1000, 0x0) r3 = open(&(0x7f0000000000)='./bus\x00', 0x14113e, 0x0) write$binfmt_script(r3, &(0x7f0000000280), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) clock_gettime(0x0, &(0x7f00000001c0)) 4m25.349945817s ago: executing program 2 (id=270): r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) socket$inet6_sctp(0xa, 0x1, 0x84) r1 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r1, 0xaf01, 0x0) r2 = eventfd(0x6) ioctl$VHOST_SET_VRING_KICK(r1, 0x4008af20, &(0x7f0000000040)={0x1, r2}) r3 = eventfd2(0x9, 0x80000) ioctl$VHOST_SET_VRING_ERR(r1, 0x4008af22, &(0x7f00000002c0)={0x1, r3}) fsopen(&(0x7f0000000000)='exfat\x00', 0x0) socket$kcm(0x10, 0x400000002, 0x0) pipe2$watch_queue(&(0x7f0000000080), 0x80) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xdd}, 0x0, &(0x7f0000000080)={0x3ff, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x1, 0x5}, 0x0, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) 4m25.283908516s ago: executing program 0 (id=271): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r4 = socket$inet_mptcp(0x2, 0x1, 0x106) setsockopt$inet_tcp_TLS_TX(r4, 0x6, 0x1, &(0x7f0000000000)=@gcm_256={{}, "4ad2acf2594a9413", "53e7ca1ecae8f2ddf69564911cdf435c925501eeb83706831df18902d5d04815", "3c0da37a", "8bb693b13dd86500"}, 0x38) 4m24.921862795s ago: executing program 2 (id=274): madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x400000, 0x3, &(0x7f0000000000/0x400000)=nil) r0 = getpid() process_vm_readv(r0, &(0x7f0000008400)=[{&(0x7f0000000300)=""/54, 0x7ffff000}, {&(0x7f0000006180)=""/152, 0x98}], 0x2, &(0x7f0000008640)=[{&(0x7f0000008480)=""/95, 0x7ffff000}], 0x286, 0x0) syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000000)) mount$tmpfs(0x0, &(0x7f00000003c0)='./file0\x00', &(0x7f0000000400), 0x0, &(0x7f00000002c0)={[{@huge_always}]}) chdir(&(0x7f0000000140)='./file0\x00') bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r1, &(0x7f0000000000), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xa, 0x28011, r1, 0x0) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x2800001, 0xc3072, 0xffffffffffffffff, 0x0) sendto$packet(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) unshare(0x60600) 4m21.986918135s ago: executing program 1 (id=278): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket$inet_udp(0x2, 0x2, 0x0) recvmmsg(r3, &(0x7f0000000080)=[{{0x0, 0x0, 0x0}}], 0x40000000000012d, 0x2, 0x0) bind$inet(r3, &(0x7f0000000040)={0x2, 0x4e20, @empty}, 0x10) syz_emit_ethernet(0x2e, &(0x7f00000003c0)={@broadcast, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}, @void, {@ipv4={0x800, @udp={{0x6, 0x4, 0x0, 0x0, 0x20, 0x0, 0x0, 0x2, 0x11, 0x0, @empty, @empty, {[@timestamp={0x44, 0x4, 0x74, 0x0, 0x3}]}}, {0x1, 0x4e20, 0x8}}}}}, 0x0) ioctl$DRM_IOCTL_MODE_GET_LEASE(0xffffffffffffffff, 0xc01064c8, &(0x7f0000000280)={0x0, 0x0, 0x0}) 4m21.878136455s ago: executing program 2 (id=279): prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x20000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) syz_fuse_handle_req(0xffffffffffffffff, 0x0, 0x0, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) getrlimit(0x0, 0x0) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) 4m20.49472518s ago: executing program 1 (id=281): syz_open_procfs(0x0, &(0x7f0000000100)='syscall\x00') r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x1, 0x803, 0x0) getsockopt$TIPC_CONN_TIMEOUT(r1, 0x10f, 0x82, &(0x7f0000000040), &(0x7f00000000c0)=0x4) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=@newlink={0x5c, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x12d25}, [@IFLA_LINKINFO={0x34, 0x12, 0x0, 0x1, @xfrm={{0x9}, {0x24, 0x2, 0x0, 0x1, [@IFLA_XFRM_LINK={0x8}, @IFLA_XFRM_IF_ID={0x8, 0x2, 0x3}, @IFLA_XFRM_LINK={0x8, 0x1, 0x1}, @IFLA_XFRM_LINK={0x8, 0x1, 0x1}]}}}, @IFLA_MASTER={0x8, 0x3, r2}]}, 0x5c}, 0x1, 0x0, 0x0, 0x85}, 0x4000000) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_TLS_RX(r5, 0x6, 0x2, &(0x7f00000001c0)=@gcm_256={{}, "7a2bff2afbc8bdc3", "8d1979fc3368ff05260c4a787caae7b6754bb3d5749ee4f56f53c345ed38f5ef", "cbeb4c0d", "b0d5f2dbe9c76be8"}, 0x38) sendmsg$NL80211_CMD_GET_STATION(r4, &(0x7f0000001140)={0x0, 0x0, &(0x7f0000001100)={&(0x7f0000000100)={0x1c, r3, 0x301, 0x0, 0x0, {{0x5}, {@void, @void}}, [@NL80211_ATTR_LOCAL_MESH_POWER_MODE={0x8}]}, 0x1c}}, 0x0) sendmsg$NL80211_CMD_LEAVE_OCB(0xffffffffffffffff, &(0x7f0000000280)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x28, r3, 0x1, 0x70bd2d, 0x25dfdbfc, {{}, {@val={0x8}, @val={0xc, 0x99, {0x18dabb6, 0x5}}}}, [""]}, 0x28}, 0x1, 0x0, 0x0, 0x20000810}, 0x4000000) 4m20.4778414s ago: executing program 2 (id=282): mkdir(0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_mount_image$exfat(&(0x7f0000001500), &(0x7f00000000c0)='./file0\x00', 0x322040, &(0x7f0000001580), 0x1, 0x14d8, &(0x7f0000002ac0)="$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") r0 = shmget(0x1, 0x4000, 0x200, &(0x7f0000ffb000/0x4000)=nil) shmat(r0, &(0x7f000060d000/0x4000)=nil, 0x5000) syz_clone(0x800000, 0x0, 0x0, 0x0, 0x0, 0x0) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000240)='./file1\x00', 0x4000, &(0x7f00000000c0), 0x2, 0xbb8, &(0x7f00000017c0)="$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") mount$9p_fd(0x0, &(0x7f0000000040)='.\x00', 0x0, 0x10390a7, 0x0) mount(0x0, &(0x7f0000004580)='./file0\x00', &(0x7f0000000100)='ramfs\x00', 0x0, 0x0) chdir(&(0x7f0000000280)='./file0\x00') r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='hugetlb.2MB.usage_in_bytes\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x280000b, 0x28011, r1, 0x0) 4m19.928409499s ago: executing program 2 (id=283): syz_mount_image$ext4(&(0x7f00000004c0)='ext4\x00', &(0x7f0000000500)='./file1\x00', 0x100000a, &(0x7f0000000000), 0x4, 0x4f3, &(0x7f00000012c0)="$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") prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) read$msr(0xffffffffffffffff, 0x0, 0x0) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) openat$dir(0xffffffffffffff9c, &(0x7f0000000540)='./file2\x00', 0x102, 0xa2) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000280)={0x26, 'hash\x00', 0x0, 0x0, 'digest_null-generic\x00'}, 0x58) r2 = accept$alg(r1, 0x0, 0x0) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, 0x0, 0x0) recvmmsg(r2, &(0x7f0000006100), 0x49f, 0x0, 0x0) 4m18.494682284s ago: executing program 1 (id=287): fspick(0xffffffffffffffff, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000040)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = getpid() r4 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) kcmp(r3, r4, 0x2, 0xffffffffffffffff, 0xffffffffffffffff) 4m18.360534133s ago: executing program 0 (id=289): r0 = syz_open_procfs(0x0, &(0x7f0000000040)='net/route\x00') prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) pread64(r0, &(0x7f0000000080)=""/102356, 0x18fd4, 0xc2a) mknod$loop(&(0x7f0000000140)='./file0\x00', 0xfff, 0x0) execve(&(0x7f0000000000)='./file0\x00', &(0x7f0000019140), &(0x7f0000019100)={[&(0x7f0000000200)=' ']}) 4m16.889966948s ago: executing program 33 (id=289): r0 = syz_open_procfs(0x0, &(0x7f0000000040)='net/route\x00') prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) pread64(r0, &(0x7f0000000080)=""/102356, 0x18fd4, 0xc2a) mknod$loop(&(0x7f0000000140)='./file0\x00', 0xfff, 0x0) execve(&(0x7f0000000000)='./file0\x00', &(0x7f0000019140), &(0x7f0000019100)={[&(0x7f0000000200)=' ']}) 4m16.862762028s ago: executing program 1 (id=291): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'bridge0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000280)=@newlink={0x3c, 0x10, 0x44b, 0x0, 0x25dfdbfc, {0x7a, 0x0, 0x0, r2}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bridge={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BR_AGEING_TIME={0x8, 0x8, 0xffffa888}]}}}]}, 0x3c}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000080)={'bridge0\x00', 0x0}) sendmsg$nl_route(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=@newlink={0x3c, 0x10, 0x44b, 0x0, 0x0, {0x7a, 0x0, 0x0, r5}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bridge={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BR_VLAN_FILTERING={0x5, 0x7, 0x7}]}}}]}, 0x3c}}, 0x0) r6 = socket$netlink(0x10, 0x3, 0x0) sendmsg$NL80211_CMD_NEW_KEY(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000000)={0x1c, 0x0, 0x0, 0x0, 0x0, {{}, {@val={0x8}, @void}}}, 0x1c}}, 0x4000004) ioctl$sock_SIOCBRDELBR(r6, 0x89a2, &(0x7f0000000000)='bridge0\x00') socket$packet(0x11, 0x3, 0x300) syz_emit_ethernet(0x3a, &(0x7f0000000080)={@empty, @random="6a2ddcf6177a", @val={@void, {0x8100, 0x1, 0x1, 0x1}}, {@ipv4={0x8864, @tcp={{0x5, 0x4, 0x0, 0x0, 0x28, 0x0, 0x57, 0x0, 0x6, 0x0, @empty, @local}, {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x2, 0x5, 0x5}}}}}}, 0x0) 4m16.861327498s ago: executing program 2 (id=292): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) r3 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r3, &(0x7f00000014c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=ANY=[@ANYBLOB="020d0000100000000000000000000000080012000200020000000000000000003000326a02030000001b00000000000002000000000000000000000000000000fc020000000000000000000000000000030005000000000002000000ac1414aa0000000000000000030006000000000002"], 0x80}}, 0x0) syz_io_uring_setup(0x360b, 0x0, 0x0, &(0x7f00000005c0)) 4m16.610035507s ago: executing program 34 (id=292): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) r3 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r3, &(0x7f00000014c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=ANY=[@ANYBLOB="020d0000100000000000000000000000080012000200020000000000000000003000326a02030000001b00000000000002000000000000000000000000000000fc020000000000000000000000000000030005000000000002000000ac1414aa0000000000000000030006000000000002"], 0x80}}, 0x0) syz_io_uring_setup(0x360b, 0x0, 0x0, &(0x7f00000005c0)) 4m16.196048426s ago: executing program 1 (id=295): syz_mount_image$ext4(&(0x7f0000000100)='ext4\x00', &(0x7f0000000200)='./file1\x00', 0x21081e, &(0x7f0000000280)={[{@grpquota}, {@abort}, {@errors_remount}]}, 0x1, 0x4fa, &(0x7f00000005c0)="$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") rename(&(0x7f00000003c0)='./file0\x00', &(0x7f0000000f40)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') r0 = fsopen(&(0x7f0000000180)='ext4\x00', 0x1) creat(&(0x7f0000000040)='./bus\x00', 0x0) mount(&(0x7f0000000380)=@loop={'/dev/loop', 0x0}, &(0x7f0000000140)='./bus\x00', 0x0, 0x1000, 0x0) syz_mount_image$exfat(&(0x7f0000000080), &(0x7f0000000200)='./bus\x00', 0x10090, &(0x7f00000000c0)=ANY=[], 0x1, 0x14d6, &(0x7f0000002a40)="$eJzs3Hu0jtX2OPA511qPW9Kb5L7mmg9v2lgkSS5JckmSJElySwhJkoTEJrckJLnfktxDcoud3O+35JYkR5IkISHJ+g2dc76+53S+o/P7nX5ff+z5GWONveZ+3jnf+ey5x36f5x1jv991GlK1frVKdZkZ/iP41y+pAJAJAPoDwHUAEAFAqeylsl8+nllj6n/2JOLP9ciMq92BuJpk/umbzD99k/mnbzL/9E3mn77J/NM3mX/6JvMXIj3bPjPP9bLS75L3/9Mzef1P32T+6ZvMP32T+advMv/0Teafvsn80zeZf/om8xciPbva7z/Lurrrav/+CSGEEEIIIYQQQgghhBBCCCGEEEIIIYQQQgghhBBCCCGEEEIIIYQQQgghhBBCCCGEEEIIIYQQQgghhBBCCCGEEEIIIYQQQgghhBBCCCGEEEIIIYQQQgghhBBCCCGEEEIIIYQQQgghhBBCCCGEEEIIIYQQQgghhBBCCCGEEEIIIYRIH86HKwwA/H1/tfsSQgghhBBCCCHEnydkvNodCCGEEEIIIYQQ4v8/BAUaDESQATJCJsgMWeAayArXQja4DhJwPWSHGyAH3Ag5IRfkhjyQF/JBfrBA4IAhhgJQEJJwExSCmyEFCkMRKAoeikFxuAVKwK1QEm6DUnA7lIY7oAyUhXJQHu6ECnAXVIS7oRLcA5WhClSFanAvVIf7oAbcDzXhAagFD0JteAjqwMNQFx6BevAo1IfHoAE8Dg2hETSGJtD0/yn/JegGL0N36AGp0BN6wSvQG/pAX+gH/eFVGACvwUB4HQbBYBgCb8BQeBOGwVswHEbASBgFo2EMjIVxMB4mwER4GybBOzAZ3oUpMBWmwXSYATNhFrwHs2EOzIX3YR58APNhASyERbAYPoQlsBTS4CNYBh/DclgBK2EVrIY1sBbWwXrYABthE2yGLbAVtsF2+AR2wKewE3bBbtgDe+Ez2Aefw374Ag7Al/+X+ef+Kb8zAgIqVGjQYAbMgJkwE2bBLJgVs2I2zIYJTGB2zI45MAfmxJyYG3NjXsyL+TE/EhIyMhbAApjEJBbCQpiCKVgEi6BHj8WxOJbAW7EklsRSWApLY2ksg2WxLJbH8lgBK2BFrIiVsBJWxspYFavivXgv3oc1sAbWxJpYC2thbayNdbAO1sW6WA/rYX2sjw2wATbEhtgYG2NTbIrNsBk2x+bYEltiK2yFbbANtsW22A7bYWtsjx2wA3bEjtgJO2Fn7IJd8CV8CV/Gl7EHVlY9sRf2wt7YG/tiP+yHr+IAfA1fw9dxEA7GIfgGvoFv4jA8i8NxBI7EkVhBjcGxOA5ZTcCJOBEn4SScjJNxCk7FqTgdZ+BMnIWzcDbOwTn4Ps7DD/ADXIALcBEuxsW4BJdiGqbhMjyHy3EFrsRVuBrX4Gpch+txHW7ETbgRt+AW3Ibb8BP8BEfhp7gLd+Ee3IOf4Wf4OX6Og/AAHsCDeBAP4SE8jIfxCB7Bo3gUj+ExPI7H8QSewJN4Ck/jKTyDZ/AsnsPzeB4v4AW8iC/k/abensIbBoG6zCijMqgMKpPKpLKoLCqryqqyqWwqoRIqu8qucqgcKqfKqXKr3Cqvyqvyq/yKFClWsSqgCqikSqpCqpBKUSmqiCqivPKquCquSqgSqqQqqUqp21VpdYcqo8qqFr68Kq8qqJa+orpbVVKVVGVVRVVV1VQ1VV1VVzVUDVVT1VS1VC1VWz2k6qie2BcfUZcnU18NxgZqCDZUjVRj1US9iU+oZmoYNlctVEv1lBqBw7GNaubbqmdUOzUW26vn1Dh8XnVUE7CTelF1Vl1UV/WS6qaa++6qh5qCPVUvNR17qz6qr+qnZmMVdXliVdXrapAarIaoN9QifFMNU2+p4WqEGqlGqdFqjBqrxqnxaoKaqN5Wk9Q7arJ6V01RU9U0NV3NUDPVLPWemq3mqLnqfTVPfaDmqwVqoVqkFqsP1RK1VKWpj9Qy9bFarlaolWqVWq3WqLVqnVqvNqiNapParLaorWqb2q4+UTvUp2qn2qV2qz1qr/pM7VOfq/3qC3VAfakOqr+oQ+ordVh9rY6ob9RR9a06pr5Tx9X36oT6QZ1Up9Rp9aM6o35SZ9U5dV79rC6oX9RF9au6pIICjVpprY2OdAadUWfSmXUWfY3Oqq/V2fR1OqGv19n1DTqHvlHn1Ll0bp1H59X5dH5tNWmnWce6gC6ok/omXUjfrFN0YV1EF9VeF9PF9S26hL5Vl9S36VL6dl1a36HL6LK6nC6v79QV9F26or5bV9L36Mq6iq6qq+l7dXV9n66h79c19QO6ln5Q19YP6Tr6YV1XP6Lr6Ud1ff2YbqAf1w11I91YN9FN9RO6mX5SN9ctdEv9lG6lW+s2+mndVj+j2+lndXv9nO6gn9cd9Qu6k35Rd9ZddFf9q76kg+6ue+hU3VP30q/o3rqP7qv76f76VT1Av6YH6tf1ID1YD9Fv6KH6TT1Mv6WH6xF6pB6lR+sxeqwep8frCXqifltP0u/oyfpdPUVP1dP0dD1Dz9R9/1Zp7r+R/86/yB/427Nv09v1J7oPAOzUu/RuvUfv1Xv1Pr1P79f79QF9QB/UB/UhfUgf1of1EX1EH9VH9TF9TB/Xx/UJfUKf1Kf0z/pHfUb/pM/qc/qc/llf0Bf0xb/9DMCgUUYbYyKTwWQ0mUxmk8VcY7Kaa002c51JmOtNdnODyWFuNDlNLpPb5DF5TT6T31hDxhk2sSlgCpqkuckUMjebFFPYFDFFjTfFTHFzy3+c/0f9NTVNTTPTzDQ3zU1L09K0Mq1MG9PGtDVtTTvTzrQ37U0H08F0NB1NJ9PJdDadTVfT1XQz3Ux3092kmlTTy7xieps+pq/pZ/qbV80AM8AMNAPNIDPIDDFDzFAz1Awzw8xwM9yMNCPNaDPajDVjzXgz3kw0E80kM8lMNpPNFDPFTDPTzAwzw8wys8xsM9vMNXPNPDPPzDfzzUKz0Cw2i80Ss8SkmTSzzCwzy80Ks8KsMqvMGrPGrDPrzAazwWwym8wWs8UsN9vNdrPD7DA7zU6z2+w2e81es8/sM/vNfnPAHDAHzUFzyBwyh81hc8QcMUfNUXPMHDPHzXFzwpwwJ81Jc9qcNmfMGXPWnDXnzXlzwVwwF81Fc8lcunzZF6lIRSYyUYYoQ5QpyhRlibJEWaOsUbYoW5SIElH2KHuUI7oxyhnlinJHeaK8Ub4of2QjilzEURwViApGyeimqFB0c5QSFY6KREUjHxWLike3RCWiW6OS0W1Rqej2qHR0R1QmKhuVi8pHd0YVoruiitHdUaXonqhyVCWqGlWL7o2qR/dFNaL7o5rRA1Gt6MGodvRQVCd6OKobPRLVix6N6kePRQ2ix6OGUaOocdQkavqn1g/hbK4nfXfbw6banraXfcX2tn1sX9vP9rev2gH2NTvQvm4H2cF2iH3DDrVv2mH2LTvcjrAj7Sg72o6xY+04O95OsBPt23aSfcdOtu/aKXaqnWan2xl2pp1l37Oz7Rw7175v59kP7Hy7wC60i+xi+6FdYpfaNPuRXWY/tsvtCrvSrrKr7Rq71q6z6+0Gu9FuspvtFrvVbrPb7Sd2h/3U7rS77G67x+61n9l99nO7335hD9gv7UH7F3vIfmUP26/tEfuNPWq/tcfsd/a4/d6esD/Yk/aUPW1/tGfsT/asPWfP25/tBfuLvWh/tZdsuHxxf/nlnQwZykAZKBNloiyUhbJSVspG2ShBCcpO2SkH5aCclJNyU27KS3kpP+Wny5iYClABSlKSClEhSqEUKkJFyJOn4lScSlAJKkklqRSVotJUmspQGSpH5ehOupPuorvobrqb7qF7qApVoWpUjapTdapBNagm1aRaVItqU22qQ3WoLtWlelSP6lN9akANqCE1pMbUmJpSU2pGzag5NaeW1JJaUStqQ22oLbWldtSO2lN76kAdqCN1pE7UiTpTZ+pKXakbdaPu1J1SKZV6US/qTb2pL/Wl/tSfBtAAGkgDaRANoiE0hIbSUBpGw2g4jaCRNIpG0xgaS+NoPE2giTSRJtEkmkyTaQpNoWk0jWbQDJpFs2g2zaa5NJfm0TyaT/NpIS2kxbSYltASSqM0WkbLaDktp5W0klbTalpLa2k9raeNtJE202baSltpO22nHbSDdtJO2k27aS/tpX20j/bTfjpAB+ggHaRDdIgO02E6QkfoKB2lY3SMjtNxOkEn6CSdpNN0ms7QGTpLZ+k8nacL9AtdpF/pEgXK5DK7LO4al9Vd67K569w/x7ldHpfX5XP5nXU5Xa5/iMk5l+IKuyKuqPOumCvubvldXMaVdeVceXenq+DuchV/F1d397ka7n5X0z3gqrl7/yGu5R50td1jro573NV1jVw918TVd4+5Bu5x19A1co1dE9fKtXZt3NOurXvGtXPP/i5e4pa69W6D2+g2uX3uc3fe/eyOue/cBfeL6+56uP7uVTfAveYGutfdIDf4d/FIN8qNdmPcWDfOjXcTfhdPc9PdDDfTzXLvudluzu/ixe5DN8+luflugVvoFv0WX+4pzX3klrmPXTLbCrfSrXKr3Rq31q37r15XuS1uq9vm9rrP3A73qdvpdrndbs9v8eXz2O++cAfcl+6o+9Ydcl+5w+64O+K++S2+fH7H3ffuhPvBnXSn3Gn3ozvjfnJn3bnfzv/yuf/ofnWXXHDAyIo1G444A2fkTJyZs/A1nJWv5Wx8HSf4es7ON3AOvpFzci7OzXk4L+fj/GyZ2DFzzAW4ICf5Ji7EN3MKF+YiXJQ9F+PifAuX4Fu5JN/Gpfh2Ls13cBkuy+W4PN/JFfgursh3cyW+hytzFa7K1fhers73cQ2+n2vyA1yLH+Ta/BDX4Ye5Lj/C9fhRrs+PcQN+nBtyI27MTbgpP8HN+Eluzi24JT/Frbg1t+GnuS0/w+34WW7Pz3EHfp478gvciV/kztyFu/JL3A0BgHtwKvfkXvwK9+Y+3Jf7cX9+lQfwazyQX+dBPJiH8Bs8lN/kYfwWD+cRPJJH8Wgew2N5HI/nCTyR3+ZJ/A5P5nd5Ck/laTydZ/BMnsXv8Wyew3P5fZ7HH/B8XsALeREv5g95CS/lNP6Il/HHvJxX8Epexat5Da/ldbyeN/BG3sSbeQtv5W28nT/hHfwp7+RdvJv38F7+jPfx57yfv+AD/CUf5L/wIf6KD/PXfIS/4aP8LR/j7/g4f88n+Ac+yaf4NP/IZ/gnPsvn+Dz/zBf4F77Iv/IlDgwxxirWsYmjOEOcMc4UZ46zxNfEWeNr42zxdXEivj7OHt8Q54hvjHPGueLccZ44b5wvzh/bmGIXcxzHBeKCcTK+KS4U3xynxIXjInHR2MfF4uLxLXGJ+Na4ZHxbXCq+PS4d3xGXicvGjz1QPr4zrhDfFVeM744rxffEleMqcdW4WnxvXD2+L64R3x/XjB+IS8YPxrXjh+I68cNx3fiRuF78aFw/fixuED8eN4wbxY3jJnHT+Im4Wfxk3DxuEbeMn4pbxa3jNvHTcdv4mbhd/OwfHk+Ne8a94lfiV+IQ7tcLk4uSi5MfJpcklybTkh8llyU/Ti5PrkiuTK5Krk6uSa5NrkuuT25IbkxuSm5ObkluTW5LhlAtI3j0ymtvfOQz+Iw+k8/ss/hrfFZ/rc/mr/MJf73P7m/wOfyNPqfP5XP7PD6vz+fze+vJO88+9gV8QZ/0N/lC/maf4gv7Ir6o976YL+6b+Ka+qW/mn/TNfQvf0j/ln/KtfWv/tH/aP+Pb+Wd9e/+c7+Cf9x39C/4F/6Lv7Lv4rv4l382/7Lv7Hj7Vp/pevpfv7Xv7vr6v7+/7+wF+gB/oB/pBfpAf4of4oX6oH+aH+eF+uB/pR/rRfrQf68f68X68n+gn+kl+kp/sJ/spfoqf5qf5GX6Gn+Vn+dl+tp/r5/p5KfP8fD/fL/QL/WK/2C/xS3yaT/PL/DK/3C/3K/1Kv9qv9mv9Wr/er/cb/Ua/2W/2W/1Wv91v9zv8Dr/T7/S7/W6/1+/1+/w+v9/v9wf8AX/QH/SH/CF/2H/tj/hv/FH/rT/mv/PH/ff+hP/Bn/Sn/Gn/oz/jf/Jn/Tl/3v/sL/hf/EX/q7/kg5+YeDsxKfFOYnLi3cSUxNTEtMT0xIzEzMSsxHuJ2Yk5ibmJ9xPzEh8k5icWJBYmFiUWJz5MLEksTaQlPkosS3ycWJ5YkViZWJVYnViTCCHfjjgUCAVDMtwUCoWbQ0ooHIqEosGHYqF4uCWUCLeGkuG2UCrcHkqHO0KZUDaUC4+HhqFRaByahKbhidAsPBmahxahZXgqtAqtQ5vwdGgbngntwrOhfXgudAjPh47hhdApvBg6hy6ha3gpdAsvh+6hR0gNPUOv8EroHfqEvqFf6B9eDQPCa2FgeD0MCoPDkPBGGBreDMPCW2F4GBFGhlFhdBgTxoZxYXyYECaGt8Ok8E6YHN4NU8LUMC1MDzPCzDArvBdmhzlhbng/zAsfhPlhQVgYFoXF4cOwJCwNaeGjsCx8HJaHFWFlWBVWhzVhbVgX1ocNYWPYFDaHLWFr2Ba2h0/CjvBp2Bl2hd1hT9gbPgv7wudhf/giHAhfhoPhL+FQ+CocDl+HI+GbcDR8G46F78Lx8H0A9UM4GU6F0+HHcCb8FM6Gc+F8+DlcCL+Ei+HXcEn+Z00IIYQQ4t+i/+B4z3/xPfW3dVkvALj20zxH/rnm5px/3fdReVslAOCZHp0e+fuqXDk1NfVvj12uISq4AAASkOHv+b9tEn/dr4CW0BraQgso8S/766O6XOA/qJ+8HSDLf8vJBFfi0OPv9W/9H+qPmfeH9RcApBS8kpMZrsRX+i/5P9TP1ewP6mf+aiJA8/+WkxWuxFfqF4cn4Vlo+w+PFEIIIYQQQggh/qqPKtfhj+5vL9+f5zVXcjLClfiP7s+FEEIIIYQQQghx9T3fpevTT7Rt26KDbGQjG9n81+Zq/2USQgghhBBC/NmuXPRf7U6EEEIIIYQQQgghhBBCCCGEEEIIIYQQQgghhBBCCCGEEEIIIYQQQoj063/j48Su9jkKIYQQQgghhBBCCCGEEEIIIYQQQgghhBBCCCGEEEIIIYQQQgghhBBCCCGEEEIIIYQQV9v/CQAA//9vzzJq") r1 = open(0x0, 0x44240, 0x100) ioctl$LOOP_SET_BLOCK_SIZE(r1, 0x4c09, 0xffc) fsconfig$FSCONFIG_SET_STRING(r0, 0x1, &(0x7f0000000000)='source', &(0x7f0000000040), 0x0) unshare(0x22020400) socket$packet(0x11, 0x3, 0x300) ioctl$TIOCSETD(r1, 0x5423, 0x0) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) 4m14.38273488s ago: executing program 1 (id=297): fanotify_init(0x10, 0x1000) mkdir(&(0x7f0000000400)='./file0\x00', 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mount(0x0, &(0x7f0000000240)='./file0\x00', &(0x7f0000000280)='tracefs\x00', 0x0, 0x0) mount$tmpfs(0x0, &(0x7f0000000040)='./file0\x00', 0x0, 0x2204c3b, &(0x7f0000000180)={[{@gid}]}) 3m58.424578657s ago: executing program 35 (id=297): fanotify_init(0x10, 0x1000) mkdir(&(0x7f0000000400)='./file0\x00', 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mount(0x0, &(0x7f0000000240)='./file0\x00', &(0x7f0000000280)='tracefs\x00', 0x0, 0x0) mount$tmpfs(0x0, &(0x7f0000000040)='./file0\x00', 0x0, 0x2204c3b, &(0x7f0000000180)={[{@gid}]}) 2m36.452751023s ago: executing program 7 (id=479): unshare(0x24020400) r0 = getpid() r1 = syz_pidfd_open(r0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x6c) pipe2$9p(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r3, &(0x7f0000000000)=ANY=[@ANYBLOB="1500000065ffff"], 0x15) r4 = dup(r3) mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000240), 0x0, &(0x7f0000000580)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r2, @ANYBLOB=',wfdno=', @ANYRESHEX=r4]) write$FUSE_DIRENTPLUS(r4, &(0x7f0000000280)=ANY=[@ANYBLOB="b0"], 0xb0) write$FUSE_NOTIFY_RETRIEVE(r4, &(0x7f00000000c0)={0x14c}, 0x137) mount$9p_fd(0x0, &(0x7f0000000400)='./file0\x00', &(0x7f0000000140), 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r2, @ANYBLOB=',wfdno=', @ANYRESHEX=r3]) chdir(&(0x7f0000000000)='./file0\x00') mount$cgroup2(0x0, &(0x7f00000006c0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0, 0x0, 0x0) setns(r1, 0x24020000) 2m33.978632455s ago: executing program 7 (id=484): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000380)={0xffffffffffffffff}) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x0, 0x0) write(0xffffffffffffffff, 0x0, 0x0) r2 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r2, &(0x7f0000000000)=@nameseq={0x1e, 0x1, 0x0, {0x41}}, 0x10) listen(r2, 0x0) r3 = socket$tipc(0x1e, 0x5, 0x0) sendmsg$tipc(r3, &(0x7f00000002c0)={&(0x7f0000000080)=@nameseq={0x1e, 0x2, 0x0, {0x41}}, 0x10, 0x0}, 0x0) r4 = socket$igmp6(0xa, 0x3, 0x2) recvmsg(r3, &(0x7f0000001540)={0x0, 0x0, &(0x7f00000014c0)=[{&(0x7f0000000140)=""/130, 0x82}], 0x1}, 0x0) dup3(r4, r2, 0x0) 2m31.138922925s ago: executing program 7 (id=493): ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, 0x0) prlimit64(0x0, 0xe, &(0x7f00000001c0)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) r3 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_RTHDRDSTOPTS(r3, 0x29, 0x37, &(0x7f0000001040), 0x8) getsockopt$inet6_opts(r3, 0x29, 0x37, 0x0, &(0x7f0000001000)) 2m27.330211954s ago: executing program 7 (id=501): bpf$PROG_LOAD(0x5, &(0x7f00002a0fb8)={0x3, 0x4, &(0x7f0000001240)=ANY=[@ANYBLOB="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"], &(0x7f0000000140)='GPL\x00', 0x0, 0xe0, &(0x7f0000000180)=""/153, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0xfffffc1a, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x15) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r1, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x0) recvmsg$unix(r0, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000080), 0x100}, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r3, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) recvmsg$unix(r2, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000080), 0x100}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r5, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) recvmsg$unix(r4, &(0x7f0000003ec0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000003e00)=[@cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @cred={{0x1c}}], 0xc0}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r7, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) recvmsg(r6, &(0x7f00000005c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001dc0)=""/4096, 0x1000}, 0x0) bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000740)={0x3, 0x4, 0x4, 0xa, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) 2m26.941499533s ago: executing program 7 (id=503): socket$unix(0x1, 0x2, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f00000038c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x2e) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000540)='rcu_utilization\x00', r0}, 0x10) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$tipc2(0x0, 0xffffffffffffffff) socket$unix(0x1, 0x1, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={0x0, 0x80}}, 0x0) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r2, 0x84, 0x76, &(0x7f0000444ff8)={0x0, 0x7}, 0x8) setsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r2, 0x84, 0x75, &(0x7f0000000000)={0x0, 0xcc}, 0x8) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r2, 0x84, 0x64, &(0x7f0000000280)=[@in6={0xa, 0x4e23, 0x0, @loopback}], 0x1c) sendmmsg$inet6(r2, &(0x7f0000000480)=[{{&(0x7f0000000080)={0xa, 0x4e23, 0x0, @loopback, 0x80020}, 0x1c, &(0x7f0000000500)=[{&(0x7f00000034c0)='\x00', 0x1}], 0x1}}], 0x1, 0x34000811) setsockopt$inet_sctp6_SCTP_RESET_STREAMS(r2, 0x84, 0x77, &(0x7f0000000040)=ANY=[@ANYRES32=0x0, @ANYRES16=r2, @ANYRES16=r2], 0x1000f) 2m26.060788191s ago: executing program 7 (id=506): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$can_j1939(0x1d, 0x2, 0x7) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, &(0x7f0000000000)={'vcan0\x00', 0x0}) bind$can_j1939(r1, &(0x7f0000000240)={0x1d, r3, 0x4, {0x0, 0x0, 0x4}}, 0x18) connect$can_j1939(r1, &(0x7f0000000480)={0x1d, r3, 0xfffffffffffffffe, {0x1, 0xff, 0x2}}, 0x18) r4 = socket$can_j1939(0x1d, 0x2, 0x7) r5 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$ifreq_SIOCGIFINDEX_vcan(r5, 0x8933, &(0x7f0000000380)={'vcan0\x00', 0x0}) r7 = socket$can_j1939(0x1d, 0x2, 0x7) bind$can_j1939(r7, &(0x7f0000000080)={0x1d, r6, 0x0, {0x0, 0x0, 0x4}}, 0x18) sendmsg$can_j1939(r7, &(0x7f00000001c0)={&(0x7f0000000040), 0x18, &(0x7f0000000180)={&(0x7f00000000c0)="92", 0x1a000}}, 0xee) ioctl$ifreq_SIOCGIFINDEX_vcan(r4, 0x8933, &(0x7f0000000000)={'vcan0\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000140)=@newtfilter={0x24, 0x11, 0x1, 0x74bd2c, 0x0, {0x0, 0x0, 0x74, r8, {0x2, 0x4}, {0xa, 0x4}, {0xa}}}, 0x24}, 0x1, 0xf0ffffffffffff, 0x0, 0x40804}, 0x0) 2m10.802889787s ago: executing program 36 (id=506): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$can_j1939(0x1d, 0x2, 0x7) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, &(0x7f0000000000)={'vcan0\x00', 0x0}) bind$can_j1939(r1, &(0x7f0000000240)={0x1d, r3, 0x4, {0x0, 0x0, 0x4}}, 0x18) connect$can_j1939(r1, &(0x7f0000000480)={0x1d, r3, 0xfffffffffffffffe, {0x1, 0xff, 0x2}}, 0x18) r4 = socket$can_j1939(0x1d, 0x2, 0x7) r5 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$ifreq_SIOCGIFINDEX_vcan(r5, 0x8933, &(0x7f0000000380)={'vcan0\x00', 0x0}) r7 = socket$can_j1939(0x1d, 0x2, 0x7) bind$can_j1939(r7, &(0x7f0000000080)={0x1d, r6, 0x0, {0x0, 0x0, 0x4}}, 0x18) sendmsg$can_j1939(r7, &(0x7f00000001c0)={&(0x7f0000000040), 0x18, &(0x7f0000000180)={&(0x7f00000000c0)="92", 0x1a000}}, 0xee) ioctl$ifreq_SIOCGIFINDEX_vcan(r4, 0x8933, &(0x7f0000000000)={'vcan0\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000140)=@newtfilter={0x24, 0x11, 0x1, 0x74bd2c, 0x0, {0x0, 0x0, 0x74, r8, {0x2, 0x4}, {0xa, 0x4}, {0xa}}}, 0x24}, 0x1, 0xf0ffffffffffff, 0x0, 0x40804}, 0x0) 17.327933188s ago: executing program 9 (id=765): ioctl$TIOCSLCKTRMIOS(0xffffffffffffffff, 0x5457, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e) ioctl$IOCTL_VMCI_CTX_SET_CPT_STATE(0xffffffffffffffff, 0x7b2, &(0x7f0000000180)={&(0x7f0000000bc0)=[0x3, 0x9, 0x9, 0x8, 0x4, 0x7, 0x0, 0xc, 0xdfdc, 0xfffffffe, 0x7fff, 0x4, 0x88, 0x6, 0x3, 0x100, 0x5, 0x0, 0x0, 0x2, 0x60e78c88, 0x7945, 0x4, 0x3, 0x4, 0x1, 0xff, 0x400, 0x238, 0x3ff, 0x9, 0x9, 0x1d9, 0x400, 0x60, 0xbe, 0x3, 0x3, 0x1, 0x4, 0x8, 0xfa, 0x372, 0xd, 0xfc28, 0x7fffffff, 0x5, 0x4, 0x8, 0x2, 0xfffffffc, 0x1, 0xc, 0x3ff, 0xb3, 0xffff, 0x6c65, 0x61f, 0xc, 0xfffffffa, 0x200, 0x9, 0x401, 0x3, 0xa8b9, 0x7, 0x4, 0x7fff, 0x4, 0xda, 0xc905, 0x81, 0xffff, 0x7fffffff, 0x200, 0x200, 0x7, 0x80000001, 0x81, 0xe, 0x1, 0x3, 0x1, 0x3c, 0x1ff, 0x4, 0x401, 0xa, 0x7fffffff, 0xc29, 0x1, 0x8, 0x10, 0x4, 0xa7, 0xfffffe01, 0xfffffffc, 0xfffff000, 0x3, 0x7fff, 0x3b, 0x5, 0x9, 0x2e62, 0x9, 0x48996ecc, 0x9, 0x6, 0x1, 0x6, 0xb, 0x4954, 0xa15, 0x8, 0xffff, 0x4, 0x1ff, 0x7, 0xfffffffb, 0xff, 0x3, 0x6, 0x10001, 0x7, 0x6, 0x9, 0x0, 0x4c, 0x8, 0x2, 0x1ff, 0x5, 0x1, 0x6, 0x76, 0x7, 0x1, 0x4, 0x4, 0xfd, 0xfffffff4, 0x8000, 0x8, 0x5, 0x2, 0x0, 0xfffffc19, 0x1, 0x80000001, 0xfff, 0x28, 0x3, 0x100, 0x5, 0x80000000, 0x7, 0x4, 0xffffffc0, 0x1, 0x1, 0x0, 0x200, 0xe6400000, 0x130, 0x5d, 0x7, 0x3ff, 0xea, 0x6, 0x6, 0x9, 0xffffa203, 0xfffffff9, 0x1, 0x10, 0x1, 0x7, 0x6, 0x5, 0x5, 0x3, 0x7ff, 0x9, 0x3, 0x66ea, 0x8, 0x101, 0x9, 0x9, 0xdb7, 0x7f, 0x401, 0x0, 0x13af, 0x3, 0x6c5d, 0x100, 0x9, 0x4a, 0x7fffffff, 0xffff, 0x53, 0x4, 0x6, 0x0, 0x2, 0x4, 0x3e7b, 0x401, 0x200, 0x5a, 0x2, 0x66, 0x14, 0x80, 0x37b4, 0x380, 0x6, 0xa7d2, 0x2e, 0x0, 0x0, 0x76ba, 0x7, 0x0, 0x41, 0x200, 0x0, 0x8bd, 0x5, 0xc0, 0xfffffffc, 0x200, 0x2, 0x2c9398c6, 0x34, 0xfff, 0x43d9c3a, 0xfffffeff, 0x0, 0x0, 0xffff0000, 0x9e0, 0x9, 0xfffff8bb, 0xc43, 0x9, 0x1, 0x8, 0xaa, 0x1, 0x2, 0x2b9, 0x8, 0x97c, 0x37c1476d, 0xf8, 0x7, 0x3, 0x7, 0x8, 0x4, 0x9, 0x80, 0x5, 0x8, 0x7, 0x3, 0x1, 0x430, 0x0, 0x7, 0x4, 0x5, 0x34, 0x80, 0x3, 0x3, 0x8, 0xffffffff, 0x4, 0x309d, 0x9, 0xfffffffa, 0xa181, 0xb3, 0x9, 0x0, 0xbbe8, 0x9, 0x0, 0x6, 0x80000001, 0x2, 0x800, 0x6, 0x3, 0x3, 0x40000000, 0xb, 0x1, 0xe3f, 0x8001, 0x5, 0x0, 0x1, 0x0, 0x3, 0x4, 0xb259, 0xb, 0x4, 0x8, 0x5, 0x3, 0xffffff6b, 0x100, 0x1, 0x3, 0xdd72, 0x7, 0x7, 0x1, 0x9, 0xc, 0x6, 0x10000, 0x6, 0x3, 0x10, 0x1, 0x5, 0x9, 0x8, 0x7, 0x0, 0x8, 0x401, 0xb6d, 0x50b79399, 0x1, 0x7f, 0xffff0001, 0x4, 0x7, 0x200, 0x1, 0x6, 0x100, 0xbd99, 0x9, 0x7, 0x7, 0x6, 0xf8c, 0x9, 0x9, 0x9, 0x6, 0x200, 0x8, 0x101, 0xffffffed, 0x4e7a, 0xa9e, 0x0, 0xfffffffd, 0x0, 0x7, 0x3, 0x0, 0x2, 0x42, 0xfe, 0x0, 0x3, 0xb, 0x8000000, 0xf, 0x5, 0xc, 0xffff, 0xb3, 0x2, 0x2, 0x77, 0x7fff, 0x7ff, 0x9, 0x2800000, 0x3, 0xfffffff7, 0x1a9, 0x3, 0x8, 0xf, 0x8, 0x10000, 0x7, 0xa, 0x6, 0x3, 0x3, 0x9, 0x0, 0x9, 0xcb0, 0x60d03cd, 0x6, 0x8, 0xf, 0x7fff, 0x3, 0x0, 0xffffffff, 0xd, 0x78aa, 0x14e, 0x5, 0x4, 0x100, 0x568, 0x8000, 0x6, 0x8001, 0x0, 0x9, 0x7, 0x2, 0x6, 0x5, 0x4, 0x1, 0x10000, 0x672e, 0x5, 0x10, 0x5, 0x80000001, 0x1, 0x3, 0xd, 0x0, 0x12, 0xd, 0x7, 0x10, 0x7, 0xbee, 0x4, 0x25, 0x200, 0x1ff, 0xe, 0x8, 0x7, 0x62348c76, 0x4, 0x401, 0x5, 0xfffffff8, 0x2, 0x74, 0x4, 0x6, 0x80000000, 0x5, 0x9, 0x3, 0x2, 0x9, 0x1, 0xfdbf333, 0x0, 0x9, 0xfffffffa, 0x1000000, 0x7, 0xf, 0x4, 0x1000, 0x0, 0x3, 0x7, 0x8, 0x2, 0x1ff, 0xffffffff, 0x9, 0x6, 0x6, 0x5, 0xc, 0x2c4, 0x0, 0x7f, 0x80, 0x144, 0x8, 0x8, 0x6, 0x4, 0x50, 0x1ff, 0x4, 0xf, 0x9c8, 0x579733b1, 0x1, 0xffff, 0x4, 0xec, 0x793, 0x0, 0x8000, 0x7b, 0x4, 0x4, 0x9, 0x7, 0x2, 0xfffffffb, 0xfffffffa, 0x7fff, 0x4, 0xdae, 0x4, 0x3, 0x0, 0x987, 0xa1, 0x7ff, 0x80000000, 0x3, 0x161a, 0xb6c3, 0xc, 0x9, 0x1, 0x41a, 0x9, 0x81, 0x16, 0x61, 0x6, 0x4, 0x800, 0x9, 0x10000, 0x5, 0x200, 0x2, 0x2, 0x3, 0x1, 0x2, 0x5, 0x21, 0x2, 0xc0000, 0x8, 0x7f, 0x9, 0x7, 0x2, 0x0, 0x3, 0x7, 0xff, 0x9, 0x7, 0x8, 0x4, 0x3, 0xf, 0xad8c, 0xb, 0x9, 0x2, 0x1, 0x7, 0x9, 0x3, 0x2, 0x5a6, 0x3, 0x1, 0x6, 0xfffffff8, 0xeb7e, 0x7a0, 0x3, 0x2, 0x1, 0x9, 0x401, 0x0, 0x401, 0xfd5, 0xf, 0x1, 0xffffffff, 0x5, 0x8, 0x9709, 0x200, 0x10f, 0x3, 0x8a9, 0x5e80, 0x100, 0xc, 0x9, 0xfffffff9, 0x9, 0x1, 0xe9ea, 0x7, 0x7, 0xc, 0x900, 0x8, 0x40, 0x0, 0x8, 0x8, 0x9, 0x9, 0x1, 0x3, 0x401, 0x2, 0x5, 0x6, 0x0, 0xdc, 0x9, 0x2, 0x0, 0x22e, 0x100, 0x2, 0x80000001, 0x6, 0x2, 0x7fff, 0xd, 0x1, 0x1000, 0x400, 0x1, 0x3d76843d, 0x7, 0x7f, 0x8001, 0x9, 0x6, 0x4, 0x5, 0xffffffff, 0x401, 0x4, 0x5, 0x2, 0xfffffffb, 0x9, 0x2, 0x0, 0xb, 0x5, 0x1, 0x1, 0x3d1, 0xfffffff9, 0x7, 0x8, 0x4, 0x6, 0x400, 0x4, 0x2, 0x0, 0x5, 0x9, 0xa, 0x2, 0xc, 0x92f8, 0x0, 0x4, 0x7, 0x5d55, 0x800, 0x80, 0x7, 0x4, 0x3, 0x10000, 0x2, 0x120, 0xffffffff, 0x8, 0xff, 0xfffffffe, 0x3, 0x8, 0xffff7fff, 0xa, 0xd, 0x9, 0x3, 0x5, 0x2, 0xfffffffd, 0xfffffffc, 0xfffffffa, 0x6, 0x35, 0x7, 0x6, 0x2, 0x10, 0x5, 0x6, 0x3088, 0x3, 0x3f6, 0x4, 0x3, 0x3, 0x3, 0x3, 0x101, 0xaac000, 0x56e0, 0x40, 0xf, 0x80, 0x0, 0xe, 0x1, 0x8, 0x0, 0x1000, 0x1, 0x0, 0x0, 0x2, 0xffff0000, 0x2, 0x1, 0x7, 0x800, 0x277, 0x3, 0x6, 0x4, 0x2, 0x6, 0x68, 0xf9, 0x0, 0x714, 0xc3, 0x6, 0x5, 0x9, 0x6, 0x8, 0x4, 0x7ff, 0x9, 0x5, 0xffffffb3, 0x8, 0xff, 0x8, 0xa93, 0x2, 0x4, 0x5, 0x9, 0x7, 0x2, 0x2, 0x6, 0x6, 0x1, 0x8dd, 0x4, 0x5e42, 0x5f8a, 0x0, 0x101, 0xb, 0x9, 0x10000, 0x1, 0x2, 0x0, 0x3, 0x80000000, 0x60, 0xffffffff, 0x4, 0x5, 0x7, 0x9, 0x0, 0x1, 0xf80b, 0x7f, 0x26, 0x6, 0x6, 0x0, 0x7, 0xfffffff7, 0x8, 0x561c, 0x80000000, 0x100, 0x1, 0x0, 0x80, 0x10001, 0x5, 0xfffffff8, 0x4, 0x9, 0xe, 0xad, 0x95a7, 0xff, 0xc7815645, 0x1, 0x0, 0x8, 0xc, 0xb, 0x44, 0x3, 0x1, 0x800, 0x1, 0x0, 0x10000, 0x0, 0x71f1, 0x8001, 0x3, 0xb2, 0x7fff, 0x7fffffff, 0xf66, 0x66, 0x1, 0x4, 0x7, 0x7f, 0x7, 0x3, 0x0, 0x9, 0x8, 0x2, 0xffffffff, 0x7, 0x7, 0x8001, 0x2, 0x7, 0x1, 0x1, 0x8, 0x3, 0xb, 0x3, 0x2, 0x9, 0x8, 0x7, 0x0, 0x400, 0x8000, 0x7, 0xfffffff9, 0x800, 0x9, 0x9, 0x40, 0x1, 0x4, 0x9d, 0x0, 0x8, 0x6, 0x2, 0x9, 0x1, 0xfff, 0x5, 0x7f, 0x401, 0x5, 0x4dd, 0x7, 0x0, 0x4, 0xf, 0x800, 0x7, 0x6, 0xa4f, 0x6, 0x8000, 0x9, 0x8, 0x6, 0x9, 0x8, 0x2f, 0x3, 0x6, 0x9, 0x40, 0x8000, 0x5, 0x8ae9, 0x820, 0x7, 0xffffffff, 0x4, 0x75, 0x1, 0x80, 0x1, 0x0, 0x0, 0x7fffffff, 0x2, 0xa0000, 0xffffff01, 0x7, 0x5, 0x9ee, 0x1, 0x5, 0x3, 0x7, 0x0, 0x7f, 0xf9, 0x2, 0x8, 0x500, 0x3, 0xe, 0xffff426d, 0xfffffffc, 0x2, 0x5, 0x1, 0x1, 0x8, 0x6, 0x7, 0x3, 0x9, 0x3, 0x35, 0x10001, 0x7, 0x4, 0x80000000, 0x8, 0x9, 0xb, 0x344, 0x5, 0x9, 0x9, 0xc, 0x1, 0x40, 0x8, 0x1b44, 0xfffffffe, 0x5, 0x8, 0x8001, 0x4, 0x0, 0xd7f9, 0x10001, 0x2, 0x60, 0x0, 0x8, 0x401, 0xfffffffb, 0x9, 0x1, 0x2, 0x8, 0x100, 0x0, 0x2, 0x1, 0x2, 0x1, 0x9, 0x1000, 0xf43c, 0x24, 0x1000, 0x8001, 0x8, 0x0, 0x4, 0x2, 0x1, 0xf0, 0xfff], 0x6, 0x400, 0x2}) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000004c0), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_IRQFD(0xffffffffffffffff, 0x4020ae76, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) bind$rxrpc(0xffffffffffffffff, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x400000, 0x3, &(0x7f0000000000/0x400000)=nil) mremap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x2000, 0x7, &(0x7f0000003000/0x2000)=nil) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x8) 15.292407534s ago: executing program 9 (id=769): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x2c, &(0x7f0000000000)='/proc/sys/net/\x00\x00v4\x00\x00s/\x92ync_\x00le\xf44.\xab%nN\xd4\xa2\x88\x00\xd1l,'}, 0x30) r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) fchdir(r3) r4 = openat$dir(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x180) getdents(r4, &(0x7f0000000140)=""/30, 0x1e) getdents64(r4, &(0x7f0000000280)=""/100, 0x64) 14.325651371s ago: executing program 6 (id=770): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_int(r0, 0x29, 0x6, &(0x7f0000000100), 0x4) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xe, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setaffinity(0x0, 0x0, 0x0) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2000003, 0x28031, 0xffffffffffffffff, 0x8000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) prctl$PR_SET_MM(0x23, 0x0, &(0x7f0000004000/0x3000)=nil) setrlimit(0x9, &(0x7f0000000000)) io_setup(0x2004, &(0x7f0000000680)) connect$inet6(r0, &(0x7f0000000280)={0xa, 0x0, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x6}, 0x1c) 12.536421767s ago: executing program 8 (id=771): ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000000)={'sit0\x00', &(0x7f00000002c0)={'syztnl1\x00', 0x0, 0x0, 0x0, 0x0, 0x0, {{0x22, 0x4, 0x0, 0x0, 0x88, 0x0, 0x0, 0x0, 0x0, 0x0, @broadcast, @remote, {[@timestamp={0x44, 0x18, 0x0, 0x0, 0x0, [0x401, 0x0, 0x0, 0x0, 0x0]}, @timestamp_prespec={0x44, 0x2c, 0xc0, 0x3, 0x0, [{@multicast1}, {@dev, 0x659}, {@empty}, {@multicast1, 0xffd200}, {@loopback}]}, @timestamp_prespec={0x44, 0x2c, 0x0, 0x3, 0x0, [{@dev}, {@multicast2}, {@private=0xa010101}, {}, {@broadcast, 0x1052b1}]}, @noop]}}}}}) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='hugetlb.2MB.usage_in_bytes\x00', 0x275a, 0x0) write$binfmt_script(r2, &(0x7f0000000240), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x280000b, 0x28011, r2, 0x0) r3 = dup(r1) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000080)={0x0, 0x2, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000300)=[@text64={0x40, 0x0}], 0xffff, 0x0, 0x0, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f00000001c0)={0x0, 0xd000}) ioctl$KVM_NMI(r4, 0xae9a) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'wlan1\x00'}) ioctl$KVM_RUN(r4, 0xae80, 0x0) 12.483425297s ago: executing program 9 (id=772): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x18}, 0x1, 0x0, 0x0, 0x8001}, 0x4000) write(0xffffffffffffffff, 0x0, 0x0) prlimit64(0x0, 0x7, &(0x7f0000000140), 0x0) socket$isdn_base(0x22, 0x3, 0x0) 10.738498184s ago: executing program 6 (id=773): sendmsg$TEAM_CMD_OPTIONS_SET(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000280)=ANY=[], 0x58}}, 0x0) syz_io_uring_setup(0x2c0c, &(0x7f0000000400)={0x0, 0x0, 0x4002}, &(0x7f00000000c0), &(0x7f00000004c0)) r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) r1 = eventfd(0x4) ioctl$VHOST_SET_LOG_FD(r0, 0x4004af07, &(0x7f0000000240)=r1) ioctl$VHOST_SET_VRING_KICK(r0, 0x4008af20, &(0x7f0000000040)={0x1, r1}) r2 = userfaultfd(0x80001) ioctl$UFFDIO_API(r2, 0xc018aa3f, &(0x7f0000000380)) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f00000002c0)={0x0, 0x1, 0x0, &(0x7f0000000600)=""/42, 0x0, 0xffff1000}) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000280)={0x1, 0x1, &(0x7f0000000380)=""/236, &(0x7f00000000c0)=""/87, &(0x7f0000000480)=""/66}) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000680)={0x1, 0x0, [{0x0, 0xfffffeac, &(0x7f00000001c0)=""/115}]}) ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, &(0x7f0000000000)=0x1) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0xb, 0x12, r3, 0x2000000) 10.737843014s ago: executing program 9 (id=774): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, 0x0) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000000)='blkio.bfq.io_serviced\x00', 0x0, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r1, 0x6, 0x13, 0x0, 0x0) connect$inet6(r1, &(0x7f0000000200)={0xa, 0x0, 0x0, @loopback}, 0x1c) r2 = socket$inet6(0xa, 0x800000000000002, 0x0) close(r2) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r2, 0x6, 0x1e, &(0x7f0000000480)=0x400000001, 0x4) setsockopt$inet6_tcp_int(r3, 0x6, 0x22, &(0x7f0000356000)=0x1, 0x4) connect$inet6(r3, &(0x7f0000000340)={0xa, 0x0, 0x0, @loopback}, 0x1c) r4 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r4, &(0x7f00000014c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000180)=ANY=[@ANYBLOB="020d00051400000000000000000000000800120000000200c06b6e000000000006000000000000000000000000000000e00000020000000000000000000000000000000000000000000000000000000105000500008000000a00000000000000000000000000000000000000000000010000000000000000050006"], 0xa0}}, 0x0) sendto$inet6(r2, 0x0, 0x4, 0x0, 0x0, 0x0) 10.605478383s ago: executing program 5 (id=775): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x3, &(0x7f0000000240)=@framed, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000400)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) socket$inet_icmp_raw(0x2, 0x3, 0x1) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0xb, 0x31, 0xffffffffffffffff, 0x0) r3 = io_uring_setup(0x6282, &(0x7f0000000080)) io_uring_register$IORING_REGISTER_BUFFERS(r3, 0x0, &(0x7f00000002c0)=[{&(0x7f0000001700)=""/4095, 0x440000}], 0x100000000000011a) 10.452373003s ago: executing program 3 (id=776): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xd, &(0x7f0000000140)={0x80000002, 0x5}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f00000001c0)=0x8) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x6770c000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$inet_sctp(0x2, 0x5, 0x84) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$inet_pktinfo(r3, 0x29, 0x50, 0x0, &(0x7f00000004c0)=0x7fff) 9.547155071s ago: executing program 9 (id=777): mount$tmpfs(0x0, 0x0, 0x0, 0x0, 0x0) mkdir(0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f00000000c0)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x5) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x3) syz_clone(0x0, 0x0, 0xfffffe11, 0x0, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) r1 = syz_open_dev$MSR(&(0x7f0000000140), 0x0, 0x0) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x89f7, &(0x7f0000000040)={'bridge_slave_0\x00', @random="4f33e363a4b1"}) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) syz_mount_image$udf(&(0x7f0000000040), &(0x7f00000000c0)='./file0\x00', 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB='noadinicb,nostrict,mode=00000000000000000000004,uid=forget,noadinicb,umask=00000000000000040002000,lastblock=00000000000000000013,undelete,partition=00000000000000000005,\x00'], 0x43, 0xc11, &(0x7f0000000d00)="$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") r2 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000000), 0x80000, 0x0) r3 = dup(r2) ioctl$PTP_EXTTS_REQUEST2(r3, 0x43403d05, 0x0) 9.529736821s ago: executing program 5 (id=778): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, 0x0, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r3, &(0x7f00000035c0)={0x0, 0x0, &(0x7f0000003580)={&(0x7f0000000440)=@newsa={0x138, 0x10, 0x1, 0x8000000, 0x0, {{@in6=@private1={0xfc, 0x1, '\x00', 0x1}, @in6=@empty, 0x0, 0x0, 0x2000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {@in=@broadcast, 0x0, 0x6c}, @in=@remote, {0x200000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000000000000000}, {0x0, 0x4, 0xd, 0xa}, {}, 0x0, 0x0, 0xa, 0x1, 0x6}, [@algo_comp={0x48, 0x3, {{'deflate\x00'}}}]}, 0x138}}, 0x20000000) 9.34174239s ago: executing program 6 (id=779): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='blkio.bfq.io_serviced\x00', 0x275a, 0x0) syz_emit_ethernet(0x36, &(0x7f0000000100)=ANY=[@ANYBLOB="000002f0d31209000000bc2e79e995"], 0x0) write$binfmt_script(r2, &(0x7f0000000100), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r2, 0x0) preadv(r2, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffff23}], 0x3e, 0x0, 0x0) syz_emit_ethernet(0x4a, &(0x7f0000000000)=ANY=[@ANYBLOB="aaaaaaaaaaaaffffffffffff86dd600a847500140600fe8000"/35, @ANYRES32=0x41424344], 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe6000/0x18000)=nil, &(0x7f0000000040)=[@text16={0x10, &(0x7f0000000180)="66b9800000c00f326635000800000f300f0f1c9a65660ff3b20618baa000ec672e660f38803d004000000f285473f61366b9800000c00f326635004000000f300f20e06635800000000f22e0f30fa6c8", 0x50}], 0x1, 0x0, 0x0, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f00000004c0)=[@text32={0x20, 0x0}], 0x1, 0x0, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={0x0}, 0x10) ioctl$KVM_X86_SETUP_MCE(r3, 0x4008ae9c, &(0x7f0000000140)={0x7, 0x0, 0xb}) ioctl$KVM_RUN(r3, 0xae80, 0x0) 8.404271769s ago: executing program 3 (id=780): syz_genetlink_get_family_id$nl80211(&(0x7f0000000680), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'wlan0\x00'}) sendmsg$NL80211_CMD_TRIGGER_SCAN(0xffffffffffffffff, 0x0, 0x0) syz_mount_image$hfsplus(&(0x7f0000000180), &(0x7f0000000000)='\xe9\x1fq\x89Y\x1e\x923aK\x00', 0x4812, &(0x7f0000002140)=ANY=[], 0x11, 0x6b1, &(0x7f0000000240)="$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") seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000280)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fffffff}]}) bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x0) bpf$MAP_LOOKUP_BATCH(0x19, 0x0, 0x0) userfaultfd(0x2) syz_mount_image$vfat(&(0x7f0000000040), &(0x7f00000000c0)='./file0\x00', 0x10840, &(0x7f0000000f00)=ANY=[@ANYBLOB="696f636861727365743d757466382c73686f72746e616d653d77696e6e74000000000000ffff756e695f786ce174653d312c686f72746e616d653d77696e39352c6e6f6e756d7461696c3d302c726f6469722c757466383d302c73686f72746e616d653d6d697865642c6e6f6e756d7461696c3d302c00e41e9f8c0303a4c129"], 0x1, 0x26c, &(0x7f0000000340)="$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") r0 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) r1 = socket$inet(0x2, 0xa, 0x5) setsockopt$sock_int(r1, 0x1, 0x2e, &(0x7f0000000180)=0x7b, 0x4) recvmmsg(r1, &(0x7f00000066c0), 0xa0d, 0x0, 0x0) 5.988999273s ago: executing program 5 (id=781): r0 = socket$xdp(0x2c, 0x3, 0x0) r1 = socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$XDP_RX_RING(r0, 0x11b, 0x2, &(0x7f0000001980)=0x100, 0x4) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, &(0x7f0000000280)={'batadv_slave_1\x00', 0x0}) setsockopt$XDP_UMEM_FILL_RING(r0, 0x11b, 0x5, &(0x7f0000000140)=0x1, 0x4) r3 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_COMPLETION_RING(r0, 0x11b, 0x6, &(0x7f00000001c0)=0x100, 0x4) setsockopt$XDP_UMEM_REG(r3, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000000000)=""/74, 0x328000, 0x1000}, 0x1c) setsockopt$XDP_UMEM_COMPLETION_RING(r3, 0x11b, 0x6, &(0x7f0000000080)=0x1, 0x4) r4 = socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$XDP_RX_RING(r3, 0x11b, 0x2, &(0x7f0000001980)=0x100, 0x4) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r4, 0x8933, &(0x7f0000000580)={'batadv_slave_0\x00', 0x0}) setsockopt$XDP_UMEM_FILL_RING(r3, 0x11b, 0x5, &(0x7f0000000140)=0x1, 0x4) bind$xdp(r3, &(0x7f0000000100)={0x2c, 0x0, r5}, 0x10) bind$xdp(r0, &(0x7f0000000240)={0x2c, 0x1, r2, 0x0, r3}, 0x10) 5.839275663s ago: executing program 8 (id=782): r0 = socket$inet(0x2, 0x3, 0x4) setsockopt$inet_opts(r0, 0x0, 0x4, &(0x7f0000000000)="8907040400", 0x5) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f00000000c0)='ip6_vti0\x00', 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x200000087}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r4}, 0x10) connect$inet(r0, &(0x7f0000000080)={0x2, 0x4e20, @private=0xa010100}, 0x10) sendmmsg$inet(r0, &(0x7f0000000f40)=[{{&(0x7f0000000040)={0x2, 0x0, @broadcast}, 0x10, 0x0}}], 0x68000, 0x0) 5.090055911s ago: executing program 9 (id=783): mkdirat(0xffffffffffffff9c, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) chdir(&(0x7f0000000140)='./bus\x00') r3 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r3, 0xaf01, 0x0) ppoll(&(0x7f0000000080), 0x0, &(0x7f0000000780)={0x0, 0x3938700}, &(0x7f00000001c0)={[0x8]}, 0x8) 4.825707681s ago: executing program 6 (id=784): socket$alg(0x26, 0x5, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r3) rt_tgsigqueueinfo(r3, r3, 0x10, 0x0) ptrace$peeksig(0x4209, r3, &(0x7f0000000340)={0x4000000000, 0x1}, 0x0) 4.749740331s ago: executing program 8 (id=785): socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) socket$inet_mptcp(0x2, 0x1, 0x106) socket$nl_route(0x10, 0x3, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) socket$rds(0x15, 0x5, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) socket$inet6_mptcp(0xa, 0x1, 0x106) socket$inet6_udp(0xa, 0x2, 0x0) socket$packet(0x11, 0x4000000000002, 0x300) socket$inet6_sctp(0xa, 0x5, 0x84) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) r2 = socket$key(0xf, 0x3, 0x2) sendmsg$nl_route(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000580)=ANY=[@ANYBLOB="4c0000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="93630100200501001c00128009000100766c616e000000000c000280060001000000000008000500", @ANYRES32=r2, @ANYBLOB='\b\x00\n\x00', @ANYRES8=r1], 0x4c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) 4.74504737s ago: executing program 3 (id=786): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000001100)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r2, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x0) recvmsg$unix(r1, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0), 0x100}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r4, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) recvmsg$unix(r3, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000700), 0x100}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r6, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) recvmsg$unix(r5, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000900), 0x100}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r8, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) recvmsg(r7, &(0x7f00000005c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001dc0)=""/4096, 0x1000}, 0x0) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f00000000c0)={r0, 0x58, &(0x7f0000000000)={0x0, 0x0}}, 0x10) bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000180)={r9}, 0xc) 4.730601341s ago: executing program 5 (id=787): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r4 = syz_io_uring_setup(0x3678, &(0x7f000000a9c0)={0x0, 0xfffffffd, 0x100, 0x0, 0xffffffff}, &(0x7f000000aa40), &(0x7f000000aa80)) io_uring_register$IORING_REGISTER_BUFFERS_UPDATE(r4, 0x2, &(0x7f0000002800)={0x0, 0x0, 0x0, 0x0}, 0x20) io_uring_register$IORING_REGISTER_FILES2(r4, 0x6, &(0x7f0000001480)={0x0, 0x0, 0x20000000, 0x0, 0x0}, 0x20) 3.171183767s ago: executing program 5 (id=788): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x2800, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000300)='blkio.bfq.io_merged_recursive\x00', 0x275a, 0x0) syz_emit_ethernet(0x36, &(0x7f0000000100)=ANY=[@ANYBLOB="000002f0d31209000000bc2e79e995"], 0x0) write$binfmt_script(r2, &(0x7f0000000100), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r2, 0x0) preadv(r2, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffff23}], 0x3e, 0x0, 0x0) syz_emit_ethernet(0x4a, &(0x7f0000000000)=ANY=[@ANYBLOB="aaaaaaaaaaaaffffffffffff86dd600a847500140600fe8000000000000000000000000000bb", @ANYRES32=0x41424344], 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000327000/0x18000)=nil, &(0x7f0000000040)=[@text16={0x10, &(0x7f0000000180)="66b9800000c00f326635000800000f300f0f1c9a65660ff3b20618baa000ec672e660f38803d004000000f285473f61366b9800000c00f326635004000000f300f20e06635800000000f22e0f30fa6c8", 0x50}], 0x1, 0x0, 0x0, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f00000004c0)=[@text32={0x20, 0x0}], 0x1, 0x0, 0x0, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000000180)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={0x0}, 0x10) ioctl$KVM_RUN(r3, 0xae80, 0x0) 3.065951347s ago: executing program 3 (id=789): r0 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000000), 0x80082, 0x0) ppoll(&(0x7f0000000200)=[{r0, 0x1002}], 0x1, 0x0, 0x0, 0x0) r1 = syz_init_net_socket$x25(0x9, 0x5, 0x0) getsockopt$inet_opts(r1, 0x0, 0x4, 0x0, 0x0) write$vga_arbiter(r0, &(0x7f0000000040)=@other={'lock', ' ', 'io+mem'}, 0xc) r2 = syz_io_uring_setup(0x10e, &(0x7f0000000140)={0x0, 0xfad6}, &(0x7f00000003c0)=0x0, &(0x7f0000000280)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r3, r4, &(0x7f00000002c0)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3}) r5 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f00000000c0)={'wlan1\x00'}) sendmsg$NL80211_CMD_CONNECT(0xffffffffffffffff, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f00000002c0)={'wlan0\x00'}) sendmsg$NL80211_CMD_FRAME(r5, 0x0, 0x0) io_uring_enter(r2, 0x47f5, 0x0, 0x0, 0x0, 0x0) write$vga_arbiter(r0, &(0x7f0000000080)=@other={'decodes', ' ', 'none'}, 0xd) 3.059501477s ago: executing program 6 (id=790): semget$private(0x0, 0x4, 0x100) r0 = msgget$private(0x0, 0x0) msgsnd(r0, &(0x7f0000000280)={0x0, "f3d0cf55b5459752b3c8b5cd66226f0e944671ce21ac49a9f02a2a2b1d6bc6be3bbd62f0993735f78503a2351c3be8fa7825bc99aa97e76ce620923dfe13534e846ca5f49d9ada8b0ab439fc9fb0eb92e0b3743afde1c7a6b00225ba626fc135eb5cc6"}, 0x6b, 0x800) msgrcv(r0, &(0x7f0000000300)={0x0, ""/4096}, 0x1008, 0x3, 0x1000) msgsnd(r0, &(0x7f00000013c0)={0x2, "4e471e0dd2c3bed5263ef73c6578d59963a66a623dc3c9ca1fc66e72f8833af51f356068ee0c"}, 0x2e, 0x800) msgsnd(r0, &(0x7f0000001400), 0x8, 0x0) r1 = semget(0x3, 0x0, 0x0) semop(r1, 0x0, 0x0) msgget$private(0x0, 0x0) semtimedop(0x0, 0x0, 0x0, 0x0) msgrcv(0x0, 0x0, 0x0, 0x2, 0x0) msgctl$MSG_STAT(0x0, 0xb, 0x0) msgsnd(0x0, 0x0, 0x0, 0x0) msgsnd(0x0, &(0x7f0000002840)={0x2}, 0x8, 0x0) msgrcv(0x0, 0x0, 0x0, 0xf506f25677fcb851, 0x0) 2.991343297s ago: executing program 8 (id=791): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0x11, 0xc, 0x0, &(0x7f0000000500)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000040)='sched_switch\x00', r3}, 0x10) munmap(&(0x7f0000002000/0x1000)=nil, 0x1000) r4 = socket$kcm(0xa, 0x5, 0x0) sendmsg$inet(r4, &(0x7f0000000380)={&(0x7f0000000040)={0xa, 0x0, @local}, 0x1c, &(0x7f0000000180)=[{&(0x7f0000000080)="a2", 0x34000}], 0x1, 0x0, 0x0, 0x2000}, 0x60) 2.608347656s ago: executing program 5 (id=792): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0}, 0x10) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) sched_setaffinity(0x0, 0xfffffef7, &(0x7f0000000740)=0x410000002) listen(0xffffffffffffffff, 0x0) stat(0x0, 0x0) r2 = socket$packet(0x11, 0x3, 0x300) setsockopt$SO_ATTACH_FILTER(r2, 0x1, 0x1a, &(0x7f0000fbe000)={0x1, &(0x7f0000000100)=[{0x80000006}]}, 0x10) r3 = socket$kcm(0x10, 0x2, 0x4) sendmsg$kcm(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000700)=[{&(0x7f0000000800)="39000000140081ae10003c000500018311001f9f660fcf066505acb612f691f3bd3508abca1be6eeb89c44ebb37358582bdbb7d553b4e92155", 0x39}], 0x1}, 0x0) 1.446818933s ago: executing program 8 (id=793): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000400)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_DEBUG_GET(r4, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000300)={0x2c, r5, 0x1, 0x0, 0x0, {0x1e}, [@HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'team0\x00'}]}]}, 0x2c}}, 0x0) 1.310868463s ago: executing program 3 (id=794): accept4$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x3) syz_clone(0x0, 0x0, 0xfffffe11, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x6, 0x4, 0x8, 0x8, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0xc, &(0x7f0000000000)=@framed={{}, [@ringbuf_output={{0x18, 0x5, 0x1, 0x0, r2}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x1d}}]}, &(0x7f0000000200)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000780)={r3, 0x18000000000002a0, 0xe, 0x2000000, &(0x7f0000000040)="5a6e41dea43e63a3f70cff11c72b", 0x0, 0x2e00, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) mmap(&(0x7f0000002000/0x2000)=nil, 0x2000, 0x0, 0x10, 0xffffffffffffffff, 0x0) ioctl$SNDRV_SEQ_IOCTL_DELETE_PORT(0xffffffffffffffff, 0x40a85321, &(0x7f0000000300)={{0x2, 0x44}, 'port0\x00', 0x80, 0x0, 0xfe43, 0x3, 0x7, 0x5, 0xffffffff, 0x0, 0x1, 0x7}) 1.217782913s ago: executing program 6 (id=795): syz_open_procfs(0xffffffffffffffff, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="1801000000c167000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) r4 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r4, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f00000000c0)=@newsa={0x10c, 0x10, 0x7, 0x0, 0x0, {{@in6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @in=@multicast2, 0xffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xee00}, {@in6=@dev, 0x0, 0x2b}, @in6=@mcast1, {}, {0x0, 0x200000, 0x7}, {}, 0x0, 0x0, 0xa, 0x2, 0x0, 0x70}, [@coaddr={0x14, 0xe, @in6=@remote}, @extra_flags={0x8, 0x18, 0x9}]}, 0x10c}}, 0x0) 19.19634ms ago: executing program 8 (id=796): bpf$MAP_CREATE(0x0, 0x0, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="1801000000000000000000000000ea04850000005000000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000040)='sched_switch\x00', r0}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) socket$inet6_mptcp(0xa, 0x1, 0x106) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f07ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = socket$kcm(0x21, 0x2, 0x2) sendmsg$kcm(r4, &(0x7f0000000140)={&(0x7f0000000440)=@rxrpc=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x0, @loopback}}, 0x80, 0x0, 0x0, &(0x7f0000001a00)=ANY=[@ANYBLOB="180000000000000010010000010000007d95df16a39b1a6c900000000000000001000005040500002b24ec10064b6f2f000000fb718aef932f3889d1fdda5b00000009860f5878c37ffe36e1165814d435be5b317c6c8189767d2f97879f07a515bb7c169f46933d9338f4ab04834e6f618988c5944741afe403461323110f62055394412158e7a3adb164d641aa40d4ab077fe34232aa8b319d760400000061d7da0c86d70000001010"], 0x10b8}, 0x0) 0s ago: executing program 3 (id=797): socket$inet6(0xa, 0x6, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_open_dev$usbmon(&(0x7f00000005c0), 0x0, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000005000/0x18000)=nil, &(0x7f0000000380)=[@text32={0x20, &(0x7f00000001c0)="b8050000000f01c10f46a78900000066ba2100b067ee66ba2000b000ee6d2f2f800000c00f3266bac0000f3066b808008ed0660f38806f008ee0", 0x3a}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) ioctl$KVM_CREATE_PIT2(r1, 0x4040ae77, &(0x7f0000000040)) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_PIT(r1, 0x8048ae66, &(0x7f0000000080)={[{0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff}]}) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x2004cb, 0x200000000000, 0x0, 0x0, 0xfffffffffffffffd], 0x0, 0x200}) socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000000)) ioctl$KVM_RUN(r2, 0xae80, 0x0) kernel console output (not intermixed with test programs): n failed: -22 [ 136.906778][ T4841] loop2: detected capacity change from 0 to 1024 [ 136.914117][ T4841] journal_path: Lookup failure for './file1' [ 136.920160][ T4841] EXT4-fs: error: could not find journal device path [ 138.947819][ T4858] Zero length message leads to an empty skb [ 139.236837][ T4863] I/O error, dev loop5, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 1 [ 139.247672][ T4863] F2FS-fs (loop5): Unable to read 1th superblock [ 139.255146][ T4863] I/O error, dev loop5, sector 8 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 1 [ 139.264550][ T4863] F2FS-fs (loop5): Unable to read 2th superblock [ 139.554639][ T4256] Bluetooth: hci0: command 0x0406 tx timeout [ 141.445957][ T4875] loop4: detected capacity change from 0 to 128 [ 142.565547][ T4887] loop3: detected capacity change from 0 to 128 [ 142.667157][ T4887] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none. [ 142.671483][ T4889] device syz_tun entered promiscuous mode [ 142.683190][ T4887] ext4 filesystem being mounted at /24/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 142.704127][ T4889] device batadv_slave_0 entered promiscuous mode [ 142.713321][ T4331] usb 2-1: new high-speed USB device number 3 using dummy_hcd [ 142.716964][ T4321] IPv6: ADDRCONF(NETDEV_CHANGE): hsr1: link becomes ready [ 142.791050][ T4889] loop2: detected capacity change from 0 to 2048 [ 142.801056][ T4889] UDF-fs: bad mount option "m|de=00000000000000000007616=00000000000000000000" or missing value [ 142.863753][ T4492] I/O error, dev loop2, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 142.933040][ T4331] usb 2-1: Using ep0 maxpacket: 16 [ 142.942508][ T4331] usb 2-1: config 0 has an invalid interface number: 41 but max is 0 [ 142.973702][ T4331] usb 2-1: config 0 has no interface number 0 [ 142.989127][ T4331] usb 2-1: config 0 interface 41 altsetting 2 bulk endpoint 0x4 has invalid maxpacket 16 [ 143.024139][ T4331] usb 2-1: config 0 interface 41 altsetting 2 bulk endpoint 0x82 has invalid maxpacket 64 [ 143.051562][ T4331] usb 2-1: config 0 interface 41 has no altsetting 0 [ 143.089607][ T4331] usb 2-1: New USB device found, idVendor=0fe6, idProduct=9800, bcdDevice=d1.9a [ 143.099960][ T4331] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 143.108469][ T4331] usb 2-1: Product: syz [ 143.112862][ T4331] usb 2-1: Manufacturer: syz [ 143.118394][ T4331] usb 2-1: SerialNumber: syz [ 143.143841][ T4331] usb 2-1: config 0 descriptor?? [ 143.152250][ T4885] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 143.174404][ T4885] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 143.211512][ T26] audit: type=1326 audit(1738643879.762:4): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4902 comm="syz.4.160" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7ff3f8cda9 code=0x7ffc0000 [ 143.258551][ T26] audit: type=1326 audit(1738643879.792:5): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4902 comm="syz.4.160" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7ff3f8cda9 code=0x7ffc0000 [ 143.311722][ T26] audit: type=1326 audit(1738643879.792:6): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4902 comm="syz.4.160" exe="/root/syz-executor" sig=0 arch=c000003e syscall=293 compat=0 ip=0x7f7ff3f8cda9 code=0x7ffc0000 [ 143.360510][ T26] audit: type=1326 audit(1738643879.792:7): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4902 comm="syz.4.160" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7ff3f8cda9 code=0x7ffc0000 [ 143.392662][ T4268] EXT4-fs (loop3): unmounting filesystem. [ 143.418721][ T26] audit: type=1326 audit(1738643879.792:8): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4902 comm="syz.4.160" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7ff3f8cda9 code=0x7ffc0000 [ 143.454350][ T4885] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 143.456623][ T26] audit: type=1326 audit(1738643879.792:9): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4902 comm="syz.4.160" exe="/root/syz-executor" sig=0 arch=c000003e syscall=186 compat=0 ip=0x7f7ff3f8cda9 code=0x7ffc0000 [ 143.477366][ T4885] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 143.626690][ T26] audit: type=1326 audit(1738643879.792:10): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4902 comm="syz.4.160" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7ff3f8cda9 code=0x7ffc0000 [ 143.675955][ T26] audit: type=1326 audit(1738643879.792:11): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4902 comm="syz.4.160" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7ff3f8cda9 code=0x7ffc0000 [ 143.738383][ T26] audit: type=1326 audit(1738643879.792:12): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4902 comm="syz.4.160" exe="/root/syz-executor" sig=0 arch=c000003e syscall=289 compat=0 ip=0x7f7ff3f8cda9 code=0x7ffc0000 [ 143.764470][ T26] audit: type=1326 audit(1738643879.792:13): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4902 comm="syz.4.160" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7ff3f8cda9 code=0x7ffc0000 [ 143.987674][ T4908] loop3: detected capacity change from 0 to 8192 [ 144.160149][ T4331] CoreChips 2-1:0.41 (unnamed net_device) (uninitialized): sr_get_phy_addr : Error reading PHYID register:ffffffe0 [ 144.319123][ T4908] device geneve2 entered promiscuous mode [ 144.484904][ T4915] loop0: detected capacity change from 0 to 1764 [ 144.629382][ T4919] Driver unsupported XDP return value 0 on prog (id 68) dev N/A, expect packet loss! [ 145.534728][ T4458] I/O error, dev loop0, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 146.757799][ T4331] CoreChips 2-1:0.41 (unnamed net_device) (uninitialized): Failed to send software reset:ffffffb9 [ 146.768550][ T4331] CoreChips 2-1:0.41 (unnamed net_device) (uninitialized): Failed to reset PHY: -71 [ 146.785368][ T4331] CoreChips: probe of 2-1:0.41 failed with error -71 [ 146.798943][ T4331] usb 2-1: USB disconnect, device number 3 [ 146.906564][ T4926] netlink: 4 bytes leftover after parsing attributes in process `syz.3.166'. [ 146.941418][ C1] vxcan0: j1939_tp_txtimer: 0xffff88802a620c00: tx aborted with unknown reason: -2 [ 146.958553][ C1] vxcan0: j1939_xtp_rx_abort_one: 0xffff88802a623000: 0x00000: (250) Any other reason (if a Connection Abort reason is identified that is not listed in the table use code 250) [ 146.976635][ C1] vxcan0: j1939_xtp_rx_abort_one: 0xffff88802a620c00: 0x00000: (250) Any other reason (if a Connection Abort reason is identified that is not listed in the table use code 250) [ 147.572009][ T4939] sch_tbf: burst 4398 is lower than device lo mtu (65550) ! [ 147.596423][ T4940] loop0: detected capacity change from 0 to 512 [ 147.608671][ T4940] ext4: Unknown parameter 'context' [ 150.280685][ T4951] bridge0: port 3(vlan2) entered blocking state [ 150.397350][ T4951] bridge0: port 3(vlan2) entered disabled state [ 151.236272][ T4978] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 151.336961][ T4978] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 151.346849][ T4978] device bridge_slave_0 left promiscuous mode [ 151.354972][ T4978] bridge0: port 1(bridge_slave_0) entered disabled state [ 153.154507][ T4978] device bridge_slave_1 left promiscuous mode [ 153.209633][ T4978] bridge0: port 2(bridge_slave_1) entered disabled state [ 153.404142][ T4978] bond0: (slave bond_slave_0): Releasing backup interface [ 153.429541][ T4978] bond0: (slave bond_slave_1): Releasing backup interface [ 156.393931][ T4978] team0: Port device team_slave_0 removed [ 156.498985][ T4978] team0: Port device team_slave_1 removed [ 156.544129][ T4978] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 156.607911][ T5005] loop0: detected capacity change from 0 to 512 [ 156.614937][ T5005] EXT4-fs: Ignoring removed i_version option [ 156.621253][ T4978] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 156.622033][ T5005] EXT4-fs: Ignoring removed mblk_io_submit option [ 156.636444][ T5005] ext4: Unknown parameter 'seclabel' [ 156.645973][ T5003] netlink: 'syz.3.187': attribute type 29 has an invalid length. [ 156.672581][ T4978] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 156.682035][ T4978] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 157.470219][ T4492] I/O error, dev loop0, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 157.795264][ T5020] loop4: detected capacity change from 0 to 512 [ 157.817791][ T5003] netlink: 'syz.3.187': attribute type 29 has an invalid length. [ 158.480676][ T5018] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 158.491560][ T5020] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 158.535294][ T5020] ext4 filesystem being mounted at /40/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 158.963962][ T4259] EXT4-fs error (device loop4): ext4_readdir:260: inode #12: block 32: comm syz-executor: path /40/file0/file0: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=3, rec_len=0, size=2048 fake=0 [ 159.399729][ T4259] EXT4-fs (loop4): Remounting filesystem read-only [ 161.008367][ T5046] netlink: 4 bytes leftover after parsing attributes in process `syz.2.199'. [ 161.029879][ T5046] device ipvlan2 entered promiscuous mode [ 161.123207][ T2120] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 161.272035][ T5051] loop3: detected capacity change from 0 to 512 [ 161.288847][ T5051] ext4: Unknown parameter 'fowner<00000000000000000000' [ 161.313079][ T2120] usb 1-1: Using ep0 maxpacket: 16 [ 161.320487][ T2120] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 161.341333][ T2120] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 161.388906][ T2120] usb 1-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 161.410056][ T5051] loop3: detected capacity change from 0 to 256 [ 161.429429][ T2120] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 161.445704][ T5051] exfat: Unknown parameter 'Sh_&a^@RY cayrFzQ>P߁*ٹV8d|CpI77"TUTCH{W.H K;^ j_]75qYbYF' [ 161.474638][ T2120] usb 1-1: Product: syz [ 161.480438][ T2120] usb 1-1: Manufacturer: syz [ 161.485785][ T2120] usb 1-1: SerialNumber: syz [ 161.583775][ T5057] netlink: 24 bytes leftover after parsing attributes in process `syz.2.203'. [ 161.786046][ T2120] usb 1-1: 0:2 : does not exist [ 161.806479][ T2120] usb 1-1: 5:0: failed to get current value for ch 0 (-22) [ 161.830355][ T5059] loop3: detected capacity change from 0 to 512 [ 162.151954][ T2120] usb 1-1: USB disconnect, device number 2 [ 162.503999][ T4492] udevd[4492]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 163.780515][ T5071] loop2: detected capacity change from 0 to 128 [ 163.854213][ T5071] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 163.909927][ T5071] ext4 filesystem being mounted at /45/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 165.538555][ T4262] sysfs: cannot create duplicate filename '/devices/virtual/bluetooth/hci4/hci4:201' [ 165.548616][ T4262] CPU: 0 PID: 4262 Comm: kworker/u5:4 Not tainted 6.1.128-syzkaller #0 [ 165.556970][ T4262] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 12/27/2024 [ 165.567079][ T4262] Workqueue: hci4 hci_rx_work [ 165.571834][ T4262] Call Trace: [ 165.575139][ T4262] [ 165.578098][ T4262] dump_stack_lvl+0x1e3/0x2cb [ 165.582809][ T4262] ? nf_tcp_handle_invalid+0x642/0x642 [ 165.588314][ T4262] ? panic+0x764/0x764 [ 165.592440][ T4262] sysfs_create_dir_ns+0x2c6/0x390 [ 165.597599][ T4262] ? sysfs_warn_dup+0xa0/0xa0 [ 165.602315][ T4262] kobject_add_internal+0x6df/0xd10 [ 165.607554][ T4262] kobject_add+0x14e/0x210 [ 165.611998][ T4262] ? device_add+0x3c2/0xfd0 [ 165.616538][ T4262] ? kobject_init+0x1d0/0x1d0 [ 165.621240][ T4262] ? __raw_spin_lock_init+0x41/0x100 [ 165.626566][ T4262] ? get_device_parent+0x128/0x400 [ 165.631712][ T4262] device_add+0x476/0xfd0 [ 165.636082][ T4262] hci_conn_add_sysfs+0xe4/0x1f0 [ 165.641045][ T4262] le_conn_complete_evt+0xcc6/0x1320 [ 165.646355][ T4262] ? hci_le_big_info_adv_report_evt+0x390/0x390 [ 165.652613][ T4262] ? __mutex_unlock_slowpath+0x218/0x750 [ 165.658271][ T4262] ? mutex_unlock+0x10/0x10 [ 165.662786][ T4262] ? skb_pull_data+0x10e/0x220 [ 165.667576][ T4262] hci_le_enh_conn_complete_evt+0x181/0x410 [ 165.673490][ T4262] hci_event_packet+0xa40/0x1510 [ 165.678446][ T4262] ? hci_remote_host_features_evt+0x210/0x210 [ 165.684538][ T4262] ? bis_list+0x290/0x290 [ 165.688887][ T4262] ? do_raw_spin_unlock+0x137/0x8a0 [ 165.694110][ T4262] ? kcov_remote_start+0x4ae/0x7c0 [ 165.699247][ T4262] ? lockdep_hardirqs_on+0x30/0x130 [ 165.704468][ T4262] ? hci_send_to_monitor+0x99/0x4d0 [ 165.709684][ T4262] hci_rx_work+0x3a6/0xd10 [ 165.714125][ T4262] ? process_one_work+0x7a9/0x11d0 [ 165.719261][ T4262] process_one_work+0x8a9/0x11d0 [ 165.724231][ T4262] ? worker_detach_from_pool+0x260/0x260 [ 165.729892][ T4262] ? _raw_spin_lock_irqsave+0x120/0x120 [ 165.735527][ T4262] ? kthread_data+0x4e/0xc0 [ 165.740060][ T4262] ? wq_worker_running+0x97/0x190 [ 165.745102][ T4262] worker_thread+0xa47/0x1200 [ 165.749833][ T4262] ? _raw_spin_unlock+0x40/0x40 [ 165.754727][ T4262] ? release_firmware_map_entry+0x186/0x186 [ 165.760653][ T4262] ? _raw_spin_unlock+0x40/0x40 [ 165.765541][ T4262] kthread+0x28d/0x320 [ 165.769624][ T4262] ? worker_clr_flags+0x190/0x190 [ 165.774675][ T4262] ? kthread_blkcg+0xd0/0xd0 [ 165.779280][ T4262] ret_from_fork+0x1f/0x30 [ 165.783729][ T4262] [ 166.546678][ T4263] EXT4-fs (loop2): unmounting filesystem. [ 166.622027][ T4262] kobject_add_internal failed for hci4:201 with -EEXIST, don't try to register things with the same name in the same directory. [ 166.635430][ T4262] Bluetooth: hci4: failed to register connection device [ 168.148891][ T5105] xt_CT: You must specify a L4 protocol and not use inversions on it [ 169.137911][ T5117] loop1: detected capacity change from 0 to 256 [ 169.238809][ T5117] FAT-fs (loop1): Directory bread(block 64) failed [ 169.250922][ T5117] FAT-fs (loop1): Directory bread(block 65) failed [ 169.252774][ T5116] netlink: 'syz.0.216': attribute type 10 has an invalid length. [ 169.286330][ T5117] FAT-fs (loop1): Directory bread(block 66) failed [ 169.299072][ T5117] FAT-fs (loop1): Directory bread(block 67) failed [ 169.339496][ T5116] 8021q: adding VLAN 0 to HW filter on device team0 [ 169.355961][ T5117] FAT-fs (loop1): Directory bread(block 68) failed [ 169.362541][ T5117] FAT-fs (loop1): Directory bread(block 69) failed [ 169.418000][ T5117] FAT-fs (loop1): Directory bread(block 70) failed [ 169.454135][ T5117] FAT-fs (loop1): Directory bread(block 71) failed [ 169.460869][ T5117] FAT-fs (loop1): Directory bread(block 72) failed [ 169.503929][ T5116] bond0: (slave team0): Enslaving as an active interface with an up link [ 169.514811][ T5117] FAT-fs (loop1): Directory bread(block 73) failed [ 169.523466][ T5120] netlink: 'syz.0.216': attribute type 4 has an invalid length. [ 169.531166][ T5120] netlink: 152 bytes leftover after parsing attributes in process `syz.0.216'. [ 170.170691][ T5124] syz.1.217: attempt to access beyond end of device [ 170.170691][ T5124] loop1: rw=2051, sector=1224, nr_sectors = 608 limit=256 [ 170.185236][ T5124] syz.1.217: attempt to access beyond end of device [ 170.185236][ T5124] loop1: rw=2051, sector=1864, nr_sectors = 1472 limit=256 [ 171.573528][ T5132] process 'syz.2.220' launched './file1' with NULL argv: empty string added [ 171.619329][ T5134] syz.1.219 uses obsolete (PF_INET,SOCK_PACKET) [ 171.968587][ T5145] loop3: detected capacity change from 0 to 2048 [ 172.018728][ T5145] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 172.122144][ T5145] netlink: 4 bytes leftover after parsing attributes in process `syz.3.222'. [ 172.166697][ T5147] xt_CT: No such helper "snmp" [ 172.502668][ T26] kauditd_printk_skb: 135 callbacks suppressed [ 172.502690][ T26] audit: type=1800 audit(1738643909.052:149): pid=5155 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.223" name="SYSV00000000" dev="hugetlbfs" ino=0 res=0 errno=0 [ 173.456632][ T5157] netlink: 4 bytes leftover after parsing attributes in process `syz.2.225'. [ 175.960961][ T5187] CIFS: No dialect specified on mount. Default has changed to a more secure dialect, SMB2.1 or later (e.g. SMB3.1.1), from CIFS (SMB1). To use the less secure SMB1 dialect to access old servers which do not support SMB3.1.1 (or even SMB3 or SMB2.1) specify vers=1.0 on mount. [ 175.987341][ T5187] CIFS mount error: No usable UNC path provided in device string! [ 175.987341][ T5187] [ 175.997723][ T5187] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string! [ 176.896303][ T4256] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 176.905975][ T4256] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 176.915407][ T4256] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 176.923832][ T4256] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 176.934926][ T4256] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 176.942332][ T4256] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 176.994907][ T4259] EXT4-fs (loop4): unmounting filesystem. [ 177.988885][ T4259] syz-executor (4259) used greatest stack depth: 19640 bytes left [ 178.129218][ T1108] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 179.413215][ T4256] Bluetooth: hci1: command 0x0409 tx timeout [ 179.741041][ T1108] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 180.081504][ T5216] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(4) [ 180.088451][ T5216] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 180.107041][ T5216] vhci_hcd vhci_hcd.0: Device attached [ 180.393379][ T4331] usb 35-1: new low-speed USB device number 2 using vhci_hcd [ 180.962905][ T1108] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 181.259323][ T1108] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 181.298282][ T5217] vhci_hcd: connection reset by peer [ 181.327996][ T4321] vhci_hcd: stop threads [ 181.354207][ T4321] vhci_hcd: release socket [ 181.409350][ T4321] vhci_hcd: disconnect device [ 181.474530][ T4256] Bluetooth: hci1: command 0x041b tx timeout [ 182.306004][ T5193] chnl_net:caif_netlink_parms(): no params data found [ 184.651571][ T4256] Bluetooth: hci1: command 0x040f tx timeout [ 184.900678][ T5244] loop0: detected capacity change from 0 to 512 [ 184.977571][ T5193] bridge0: port 1(bridge_slave_0) entered blocking state [ 185.003237][ T5193] bridge0: port 1(bridge_slave_0) entered disabled state [ 185.032829][ T5193] device bridge_slave_0 entered promiscuous mode [ 185.064320][ T5193] bridge0: port 2(bridge_slave_1) entered blocking state [ 185.067591][ T5244] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback. [ 185.073542][ T5193] bridge0: port 2(bridge_slave_1) entered disabled state [ 185.098897][ T5244] ext4 filesystem being mounted at /46/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 185.103885][ T5193] device bridge_slave_1 entered promiscuous mode [ 185.429036][ T5193] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 185.563471][ T4331] vhci_hcd: vhci_device speed not set [ 186.715091][ T5193] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 186.921466][ T5193] team0: Port device team_slave_0 added [ 186.961574][ T5193] team0: Port device team_slave_1 added [ 186.992320][ T4262] Bluetooth: hci1: command 0x0419 tx timeout [ 187.289104][ T5193] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 187.318427][ T5281] loop1: detected capacity change from 0 to 256 [ 187.325668][ T5281] exfat: Unknown parameter 'Sh_&a^@RY cayrFzQ>P߁*ٹV8d|CpI77"TUTCH{W.H K;^ j_]75qYbYF' [ 187.335155][ T5193] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 187.404452][ T4492] I/O error, dev loop1, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 187.444849][ T5193] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 187.524148][ T5279] loop1: detected capacity change from 0 to 512 [ 187.544774][ T5193] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 187.551964][ T5193] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 187.587561][ T5193] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 187.798976][ T5193] device hsr_slave_0 entered promiscuous mode [ 187.806070][ T5193] device hsr_slave_1 entered promiscuous mode [ 187.813355][ T5193] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 187.821306][ T5193] Cannot create hsr debugfs directory [ 187.827693][ T4492] I/O error, dev loop1, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 189.127834][ T5292] kvm: emulating exchange as write [ 189.306989][ T5193] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 189.449514][ T5193] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 189.700634][ T5193] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 190.344461][ T5193] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 190.447078][ T4267] EXT4-fs (loop0): unmounting filesystem. [ 192.257234][ T5325] netlink: 132 bytes leftover after parsing attributes in process `syz.0.262'. [ 192.302193][ T5193] 8021q: adding VLAN 0 to HW filter on device bond0 [ 192.380526][ T5328] netlink: 24 bytes leftover after parsing attributes in process `syz.0.262'. [ 192.566927][ T4533] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 192.581213][ T4533] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 192.609568][ T5193] 8021q: adding VLAN 0 to HW filter on device team0 [ 193.503316][ T75] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 193.543618][ T75] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 193.583343][ T75] bridge0: port 1(bridge_slave_0) entered blocking state [ 193.590518][ T75] bridge0: port 1(bridge_slave_0) entered forwarding state [ 193.666513][ T5333] loop0: detected capacity change from 0 to 2048 [ 193.682317][ T1108] device hsr_slave_0 left promiscuous mode [ 193.745439][ T1108] device hsr_slave_1 left promiscuous mode [ 193.756323][ T1108] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 193.786891][ T5333] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none. [ 193.793231][ T1108] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 193.864933][ T1108] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 193.872423][ T1108] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 193.950793][ T1108] device bridge_slave_1 left promiscuous mode [ 193.991672][ T1108] bridge0: port 2(bridge_slave_1) entered disabled state [ 194.031137][ T1108] device bridge_slave_0 left promiscuous mode [ 194.055313][ T1108] bridge0: port 1(bridge_slave_0) entered disabled state [ 194.356848][ T5342] EXT4-fs error (device loop0): __ext4_get_inode_loc:4506: comm syz.0.265: Invalid inode table block 753057133605429349 in block_group 0 [ 194.568849][ T1277] ieee802154 phy0 wpan0: encryption failed: -22 [ 194.603045][ T1277] ieee802154 phy1 wpan1: encryption failed: -22 [ 194.992501][ T5342] EXT4-fs error (device loop0): ext4_map_blocks:744: inode #18: block 62218: comm syz.0.265: lblock 0 mapped to illegal pblock 62218 (length 1) [ 195.020915][ T5332] EXT4-fs error (device loop0): __ext4_get_inode_loc:4506: comm syz.0.265: Invalid inode table block 753057133605429349 in block_group 0 [ 195.070147][ T5342] EXT4-fs (loop0): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 1 with error 117 [ 195.083407][ T5342] EXT4-fs (loop0): This should not happen!! Data will be lost [ 195.083407][ T5342] [ 195.101481][ T5342] EXT4-fs error (device loop0): __ext4_get_inode_loc:4506: comm syz.0.265: Invalid inode table block 753057133605429349 in block_group 0 [ 195.150686][ T5342] EXT4-fs error (device loop0): __ext4_get_inode_loc:4506: comm syz.0.265: Invalid inode table block 753057133605429349 in block_group 0 [ 195.182335][ T5347] xt_CT: No such helper "snmp_trap" [ 195.964685][ T1108] device veth1_macvtap left promiscuous mode [ 195.991813][ T1108] device veth0_macvtap left promiscuous mode [ 196.040248][ T1108] device veth1_vlan left promiscuous mode [ 196.053529][ T1108] device veth0_vlan left promiscuous mode [ 196.122552][ T4267] EXT4-fs error (device loop0): ext4_map_blocks:634: inode #2: block 16: comm syz-executor: lblock 0 mapped to illegal pblock 16 (length 1) [ 196.148632][ T4267] EXT4-fs warning (device loop0): htree_dirblock_to_tree:1083: inode #2: lblock 0: comm syz-executor: error -117 reading directory block [ 196.193366][ T4262] Bluetooth: hci2: command 0x0406 tx timeout [ 196.234363][ T4267] EXT4-fs error (device loop0): __ext4_get_inode_loc:4506: comm syz-executor: Invalid inode table block 753057133605429349 in block_group 0 [ 196.273697][ T4267] EXT4-fs error (device loop0) in ext4_reserve_inode_write:5885: Corrupt filesystem [ 196.342992][ T4267] EXT4-fs error (device loop0): ext4_dirty_inode:6089: inode #18: comm syz-executor: mark_inode_dirty error [ 196.406635][ T4321] EXT4-fs error (device loop0): __ext4_get_inode_loc:4506: comm kworker/u4:6: Invalid inode table block 753057133605429349 in block_group 0 [ 196.512531][ T4267] EXT4-fs (loop0): Inode 18 (ffff88805adb1410): i_reserved_data_blocks (1) not cleared! [ 196.545988][ T4267] EXT4-fs (loop0): unmounting filesystem. [ 196.594566][ T4262] Bluetooth: hci0: command 0x0406 tx timeout [ 196.594613][ T4256] Bluetooth: hci4: command 0x0406 tx timeout [ 201.029061][ T5403] loop2: detected capacity change from 0 to 256 [ 201.098750][ T4492] I/O error, dev loop2, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 201.255045][ T5403] loop2: detected capacity change from 0 to 4096 [ 201.331058][ T5403] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 201.509783][ T4263] EXT4-fs error (device loop2): ext4_readdir:260: inode #12: block 80: comm syz-executor: path /70/file1/file0: bad entry in directory: rec_len is smaller than minimal - offset=12, inode=6, rec_len=0, size=4096 fake=0 [ 201.535717][ T1108] team0 (unregistering): Port device team_slave_1 removed [ 201.567279][ T4263] EXT4-fs error (device loop2): ext4_ext_check_inode:520: inode #17: comm syz-executor: pblk 0 bad header/extent: invalid magic - magic 4c8, entries 1, max 4(0), depth 0(0) [ 201.612771][ T4263] EXT4-fs error (device loop2): ext4_ext_check_inode:520: inode #17: comm syz-executor: pblk 0 bad header/extent: invalid magic - magic 4c8, entries 1, max 4(0), depth 0(0) [ 201.657950][ T1108] team0 (unregistering): Port device team_slave_0 removed [ 201.804003][ T1108] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 201.900786][ T1108] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 202.545472][ T1108] bond0 (unregistering): Released all slaves [ 202.630874][ T75] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 202.640439][ T75] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 202.649970][ T75] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 202.669587][ T75] bridge0: port 2(bridge_slave_1) entered blocking state [ 202.676779][ T75] bridge0: port 2(bridge_slave_1) entered forwarding state [ 202.686914][ T75] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 202.696115][ T75] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 202.790102][ T4263] device syz_tun left promiscuous mode [ 202.830989][ T5417] : renamed from vlan0 [ 202.958621][ T4533] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 202.975621][ T4267] syz-executor (4267) used greatest stack depth: 19352 bytes left [ 203.008225][ T4533] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 203.084552][ T4263] EXT4-fs (loop2): unmounting filesystem. [ 203.171158][ T4533] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 203.242259][ T4490] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 203.283829][ T4490] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 204.219525][ T4490] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 204.269002][ T4490] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 204.315072][ T4490] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 204.324070][ T4490] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 204.338033][ T5193] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 204.604138][ T5432] netlink: 'syz.1.291': attribute type 8 has an invalid length. [ 204.664647][ T5432] bridge0: port 3(syz_tun) entered blocking state [ 204.706614][ T5432] bridge0: port 3(syz_tun) entered disabled state [ 204.751953][ T5432] device syz_tun entered promiscuous mode [ 204.810597][ T5432] bridge0: port 3(syz_tun) entered blocking state [ 204.817225][ T5432] bridge0: port 3(syz_tun) entered forwarding state [ 206.112675][ T5451] loop1: detected capacity change from 0 to 512 [ 206.352044][ T5451] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 206.363297][ T5451] ext4 filesystem being mounted at /69/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 206.379043][ T4490] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 206.413189][ T4490] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 206.451246][ T5193] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 206.547758][ T5451] EXT4-fs error (device loop1): ext4_get_first_dir_block:3591: inode #12: block 32: comm syz.1.295: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=3, rec_len=0, size=2048 fake=0 [ 206.697936][ T4262] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 206.714586][ T4262] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 206.723646][ T4262] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 206.731763][ T4262] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 206.741877][ T4262] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 206.752182][ T4262] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 206.761343][ T5451] EXT4-fs (loop1): Remounting filesystem read-only [ 206.769271][ T5451] EXT4-fs error (device loop1): ext4_get_first_dir_block:3594: inode #12: comm syz.1.295: directory missing '.' [ 206.789425][ T5451] EXT4-fs (loop1): Remounting filesystem read-only [ 206.817284][ T4260] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 206.828443][ T4260] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 206.838166][ T4260] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 206.856124][ T4260] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 206.864328][ T4260] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 206.872899][ T4260] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 207.014413][ T4255] EXT4-fs error (device loop1): ext4_readdir:260: inode #12: block 32: comm syz-executor: path /69/file1/file0: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=3, rec_len=0, size=2048 fake=0 [ 207.051899][ T4255] EXT4-fs (loop1): Remounting filesystem read-only [ 207.144717][ T1108] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 207.280314][ T1108] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 207.391921][ T1108] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 207.560511][ T1108] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 207.735651][ T75] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 207.745002][ T75] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 207.760477][ T5193] device veth0_vlan entered promiscuous mode [ 207.842112][ T75] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 207.866683][ T75] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 207.911201][ T75] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 207.929422][ T75] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 207.956468][ T5193] device veth1_vlan entered promiscuous mode [ 207.996430][ T5469] chnl_net:caif_netlink_parms(): no params data found [ 208.015231][ T5464] chnl_net:caif_netlink_parms(): no params data found [ 208.240988][ T5193] device veth0_macvtap entered promiscuous mode [ 208.289144][ T4533] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 208.300012][ T4533] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 208.346987][ T4533] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 208.377588][ T4533] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 208.586864][ T4533] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 208.623457][ T5193] device veth1_macvtap entered promiscuous mode [ 208.644659][ T5469] bridge0: port 1(bridge_slave_0) entered blocking state [ 208.651803][ T5469] bridge0: port 1(bridge_slave_0) entered disabled state [ 208.665357][ T5469] device bridge_slave_0 entered promiscuous mode [ 208.745394][ T5469] bridge0: port 2(bridge_slave_1) entered blocking state [ 208.752540][ T5469] bridge0: port 2(bridge_slave_1) entered disabled state [ 208.766122][ T5469] device bridge_slave_1 entered promiscuous mode [ 208.775624][ T5464] bridge0: port 1(bridge_slave_0) entered blocking state [ 208.782775][ T5464] bridge0: port 1(bridge_slave_0) entered disabled state [ 208.791773][ T5464] device bridge_slave_0 entered promiscuous mode [ 208.834513][ T4262] Bluetooth: hci2: command 0x0409 tx timeout [ 208.858085][ T5193] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 208.873286][ T5193] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 208.890054][ T5193] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 208.900649][ T5193] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 208.911916][ T5193] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 208.925858][ T4260] Bluetooth: hci3: command 0x0409 tx timeout [ 208.934593][ T5193] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 208.946419][ T5193] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 208.954587][ T5464] bridge0: port 2(bridge_slave_1) entered blocking state [ 208.961703][ T5464] bridge0: port 2(bridge_slave_1) entered disabled state [ 208.979669][ T5464] device bridge_slave_1 entered promiscuous mode [ 209.040317][ T4742] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 209.055632][ T4742] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 209.084539][ T5469] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 209.105973][ T5193] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 209.132988][ T5193] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 209.142862][ T5193] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 209.172963][ T5193] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 209.182842][ T5193] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 209.193921][ T5193] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 209.205636][ T5193] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 209.259006][ T5469] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 209.279121][ T4742] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 209.293510][ T4742] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 209.304395][ T5193] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 209.322968][ T5193] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 209.331974][ T5193] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 209.354299][ T5193] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 209.401734][ T5464] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 209.493556][ T5464] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 209.582804][ T5469] team0: Port device team_slave_0 added [ 209.649504][ T5469] team0: Port device team_slave_1 added [ 209.682865][ T5464] team0: Port device team_slave_0 added [ 209.763336][ T5464] team0: Port device team_slave_1 added [ 209.825171][ T5469] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 209.832842][ T5469] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 209.861067][ T5469] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 209.983933][ T5469] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 209.990943][ T5469] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 210.017913][ T5469] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 210.038812][ T4742] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 210.054349][ T5464] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 210.061354][ T5464] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 210.099772][ T4742] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 210.121749][ T5464] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 210.187265][ T4321] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 210.226510][ T5464] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 210.233628][ T5464] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 210.293128][ T5464] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 210.543358][ T5469] device hsr_slave_0 entered promiscuous mode [ 210.554037][ T5469] device hsr_slave_1 entered promiscuous mode [ 210.615918][ T4490] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 210.639703][ T4490] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 210.684751][ T1108] device hsr_slave_0 left promiscuous mode [ 210.705533][ T1108] device hsr_slave_1 left promiscuous mode [ 210.722780][ T1108] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 210.751422][ T1108] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 210.773837][ T1108] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 210.781321][ T1108] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 210.803962][ T1108] device bridge_slave_1 left promiscuous mode [ 210.810258][ T1108] bridge0: port 2(bridge_slave_1) entered disabled state [ 210.855278][ T1108] device bridge_slave_0 left promiscuous mode [ 210.861946][ T1108] bridge0: port 1(bridge_slave_0) entered disabled state [ 210.914288][ T4260] Bluetooth: hci2: command 0x041b tx timeout [ 210.943830][ T1108] device veth1_macvtap left promiscuous mode [ 210.949949][ T1108] device veth0_macvtap left promiscuous mode [ 210.977787][ T1108] device veth1_vlan left promiscuous mode [ 210.993224][ T4260] Bluetooth: hci3: command 0x041b tx timeout [ 211.000049][ T1108] device veth0_vlan left promiscuous mode [ 211.909746][ T1108] team0 (unregistering): Port device team_slave_1 removed [ 211.978721][ T1108] team0 (unregistering): Port device team_slave_0 removed [ 212.032761][ T1108] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 212.122282][ T1108] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 212.668234][ T1108] bond0 (unregistering): (slave team0): Releasing backup interface [ 212.885646][ T1108] bond0 (unregistering): Released all slaves [ 212.989162][ T5464] device hsr_slave_0 entered promiscuous mode [ 212.993425][ T4260] Bluetooth: hci2: command 0x040f tx timeout [ 213.002288][ T5464] device hsr_slave_1 entered promiscuous mode [ 213.018848][ T5464] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 213.058902][ T5464] Cannot create hsr debugfs directory [ 213.071285][ T4533] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 213.073094][ T4260] Bluetooth: hci3: command 0x040f tx timeout [ 215.324675][ T5469] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 215.423037][ T4260] Bluetooth: hci2: command 0x0419 tx timeout [ 215.423195][ T4262] Bluetooth: hci3: command 0x0419 tx timeout [ 215.485147][ T5469] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 215.536882][ T5469] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 215.650575][ T5532] loop5: detected capacity change from 0 to 512 [ 216.058451][ T5532] EXT4-fs: Ignoring removed orlov option [ 216.453940][ T5469] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 216.467414][ T5532] EXT4-fs warning (device loop5): dx_probe:878: Directory (ino: 2) htree depth 0x0002 exceedsupported value [ 216.485054][ T5532] EXT4-fs warning (device loop5): dx_probe:881: Enable large directory feature to access it [ 216.503068][ T5532] EXT4-fs warning (device loop5): dx_probe:966: inode #2: comm syz.5.298: Corrupt directory, running e2fsck is recommended [ 216.634717][ T5464] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 216.714557][ T5464] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 216.762329][ T5464] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 216.785119][ T5532] EXT4-fs (loop5): Cannot turn on journaled quota: type 1: error -2 [ 216.807462][ T5464] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 216.837724][ T5532] EXT4-fs error (device loop5): ext4_xattr_ibody_find:2186: inode #15: comm syz.5.298: corrupted in-inode xattr [ 217.681406][ T5469] 8021q: adding VLAN 0 to HW filter on device bond0 [ 217.699053][ T4398] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 217.715436][ T5532] EXT4-fs (loop5): Remounting filesystem read-only [ 217.745570][ T5532] EXT4-fs error (device loop5): ext4_orphan_get:1405: comm syz.5.298: couldn't read orphan inode 15 (err -117) [ 217.755772][ T4398] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 217.804037][ T5532] EXT4-fs (loop5): Remounting filesystem read-only [ 217.817353][ T5469] 8021q: adding VLAN 0 to HW filter on device team0 [ 217.983594][ T5532] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: writeback. [ 218.065369][ T4378] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 218.937333][ T4378] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 218.977311][ T4378] bridge0: port 1(bridge_slave_0) entered blocking state [ 218.984517][ T4378] bridge0: port 1(bridge_slave_0) entered forwarding state [ 219.064054][ T4378] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 219.120414][ T4378] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 219.142633][ T5193] EXT4-fs (loop5): unmounting filesystem. [ 219.166008][ T4378] bridge0: port 2(bridge_slave_1) entered blocking state [ 219.173282][ T4378] bridge0: port 2(bridge_slave_1) entered forwarding state [ 219.380753][ T4378] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 219.457666][ T4378] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 219.728996][ T4378] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 220.203279][ T4378] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 220.307745][ T4378] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 220.317299][ T4378] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 220.326487][ T4378] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 220.335932][ T4378] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 220.344626][ T4378] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 220.353796][ T4378] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 220.385153][ T5464] 8021q: adding VLAN 0 to HW filter on device bond0 [ 220.397016][ T5469] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 220.434723][ T5469] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 220.656362][ T4377] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 220.667190][ T4377] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 220.728488][ T5464] 8021q: adding VLAN 0 to HW filter on device team0 [ 221.750889][ T4377] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 221.769252][ T4377] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 221.819826][ T4377] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 221.874176][ T4377] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 221.936440][ T4377] bridge0: port 1(bridge_slave_0) entered blocking state [ 221.943748][ T4377] bridge0: port 1(bridge_slave_0) entered forwarding state [ 221.953134][ T4377] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 221.962133][ T4377] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 221.971693][ T4377] bridge0: port 2(bridge_slave_1) entered blocking state [ 221.978907][ T4377] bridge0: port 2(bridge_slave_1) entered forwarding state [ 222.442617][ T4377] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 222.846646][ T4377] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 222.927462][ T4377] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 222.981092][ T4377] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 223.093316][ T4377] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 223.101791][ T4377] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 223.142239][ T4377] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 223.177533][ T4377] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 223.199967][ T4377] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 223.216291][ T4377] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 223.231490][ T4377] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 223.250458][ T4377] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 223.275638][ T5464] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 224.521903][ T4742] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 224.534264][ T4742] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 224.639797][ T5469] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 224.790208][ T4262] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 224.805152][ T4262] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 224.815371][ T4262] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 225.112577][ T4262] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 225.136101][ T4262] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 225.148350][ T4262] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 225.687008][ T4255] bridge0: port 3(syz_tun) entered disabled state [ 225.756737][ T4255] device syz_tun left promiscuous mode [ 225.762334][ T4255] bridge0: port 3(syz_tun) entered disabled state [ 226.015748][ T4255] EXT4-fs (loop1): unmounting filesystem. [ 226.662250][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 226.723680][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 226.785544][ T5464] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 226.805344][ T4260] Bluetooth: hci4: Ignoring HCI_Connection_Complete for existing connection [ 226.818350][ T4260] Bluetooth: hci4: unexpected event 0x06 length: 4 > 3 [ 227.324050][ T4260] Bluetooth: hci5: command 0x0409 tx timeout [ 228.075084][ T5593] chnl_net:caif_netlink_parms(): no params data found [ 229.440066][ T4260] Bluetooth: hci5: command 0x041b tx timeout [ 229.498736][ T1108] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 230.697446][ T1108] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 230.775093][ T4490] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 230.805929][ T4490] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 230.988144][ T1108] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 231.009995][ T5469] device veth0_vlan entered promiscuous mode [ 231.037879][ T5593] bridge0: port 1(bridge_slave_0) entered blocking state [ 231.056141][ T5593] bridge0: port 1(bridge_slave_0) entered disabled state [ 231.072274][ T5593] device bridge_slave_0 entered promiscuous mode [ 231.081026][ T4396] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 231.091779][ T4396] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 231.148762][ T4396] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 231.296855][ T4396] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 231.438149][ T5593] bridge0: port 2(bridge_slave_1) entered blocking state [ 231.485820][ T5593] bridge0: port 2(bridge_slave_1) entered disabled state [ 231.523260][ T4260] Bluetooth: hci5: command 0x040f tx timeout [ 231.608665][ T5593] device bridge_slave_1 entered promiscuous mode [ 231.830881][ T1108] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 232.027992][ T5469] device veth1_vlan entered promiscuous mode [ 232.079189][ T4398] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 232.091704][ T4398] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 234.392730][ T4262] Bluetooth: hci5: command 0x0419 tx timeout [ 234.813691][ T4398] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 234.929428][ T5469] device veth0_macvtap entered promiscuous mode [ 235.085079][ T5469] device veth1_macvtap entered promiscuous mode [ 235.165966][ T4398] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 235.176620][ T4398] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 235.185832][ T4398] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 235.194588][ T4398] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 235.706005][ T5593] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 235.887594][ T5593] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 236.014800][ T5685] 9pnet: Could not find request transport: f [ 236.069213][ T5593] team0: Port device team_slave_0 added [ 236.111879][ T5469] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 236.144607][ T5469] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 236.193319][ T5469] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 236.273054][ T5469] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 236.300282][ T5469] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 236.346030][ T5469] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 236.417709][ T5469] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 236.483058][ T5593] team0: Port device team_slave_1 added [ 236.514644][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 236.573112][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 236.698622][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 236.714081][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 236.762318][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 236.799908][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 236.840803][ T5469] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 236.902048][ T5469] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 236.922982][ T5469] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 236.942964][ T5469] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 236.953204][ T5469] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 236.965357][ T5469] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 237.227018][ T5469] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 237.324546][ T4490] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 237.336554][ T4490] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 237.349289][ T5469] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 237.362237][ T5469] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 237.381361][ T5469] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 237.392739][ T5469] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 237.451725][ T5464] device veth0_vlan entered promiscuous mode [ 237.509465][ T5593] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 237.576910][ T5593] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 237.605797][ T5593] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 237.620329][ T5593] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 237.628373][ T5593] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 237.716882][ T5593] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 237.753437][ T5464] device veth1_vlan entered promiscuous mode [ 237.781871][ T5715] netlink: 'syz.5.326': attribute type 27 has an invalid length. [ 237.842693][ T1108] tipc: Left network mode [ 237.915762][ T5715] netlink: 'syz.5.326': attribute type 27 has an invalid length. [ 238.891267][ T5464] device veth0_macvtap entered promiscuous mode [ 238.944021][ T26] audit: type=1804 audit(1738643975.492:150): pid=5726 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.5.329" name="/newroot/12/file1" dev="fuse" ino=1 res=1 errno=0 [ 238.996629][ T26] audit: type=1800 audit(1738643975.502:151): pid=5726 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.5.329" name="/" dev="fuse" ino=1 res=0 errno=0 [ 239.021153][ T5572] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 239.044865][ T5572] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 239.066603][ T26] audit: type=1804 audit(1738643975.522:152): pid=5726 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.5.329" name="/newroot/12/file1" dev="fuse" ino=1 res=1 errno=0 [ 239.080063][ T5572] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 239.149054][ T5593] device hsr_slave_0 entered promiscuous mode [ 239.165131][ T5593] device hsr_slave_1 entered promiscuous mode [ 239.172103][ T26] audit: type=1800 audit(1738643975.522:153): pid=5726 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.5.329" name="/" dev="fuse" ino=1 res=0 errno=0 [ 239.198093][ T5593] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 239.209730][ T5593] Cannot create hsr debugfs directory [ 239.298545][ T5464] device veth1_macvtap entered promiscuous mode [ 239.622751][ T5740] hub 2-0:1.0: USB hub found [ 239.631515][ T5740] hub 2-0:1.0: 1 port detected [ 240.315482][ T5464] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 240.338827][ T5464] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 240.390247][ T5464] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 240.401253][ T5464] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 240.419527][ T5464] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 240.430285][ T5464] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 240.462258][ T5464] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 240.986629][ T5464] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 241.019074][ T5464] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 241.036098][ T4398] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 241.181397][ T4398] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 241.194967][ T4322] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 241.351758][ T4322] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 241.393960][ T5464] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 241.408736][ T5464] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 241.418932][ T5464] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 241.437503][ T5464] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 241.450860][ T5464] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 241.461851][ T5464] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 241.472119][ T5464] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 241.484787][ T5464] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 241.497479][ T5464] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 241.524380][ T4322] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 241.535445][ T4322] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 241.547764][ T4322] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 241.570645][ T5464] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 241.582096][ T5464] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 241.592152][ T5464] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 241.601244][ T5464] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 241.700749][ T4377] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 241.737537][ T4377] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 241.786056][ T4322] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 242.265533][ T4378] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 243.452951][ T4378] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 244.274806][ T4377] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 244.724347][ T5593] netdevsim netdevsim8 netdevsim0: renamed from eth0 [ 245.042781][ T5593] netdevsim netdevsim8 netdevsim1: renamed from eth1 [ 245.065719][ T5593] netdevsim netdevsim8 netdevsim2: renamed from eth2 [ 245.975241][ T75] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 246.018059][ T5593] netdevsim netdevsim8 netdevsim3: renamed from eth3 [ 246.043137][ T75] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 246.261556][ T75] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 246.289940][ T4297] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 247.066488][ T4297] hid-generic 0000:0000:0000.0001: hidraw0: HID v0.00 Device [syz1] on syz0 [ 247.102711][ T1108] device hsr_slave_0 left promiscuous mode [ 247.118734][ T1108] device hsr_slave_1 left promiscuous mode [ 247.177045][ T1108] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 247.194622][ T1108] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 247.222160][ T1108] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 247.239092][ T1108] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 247.248766][ T1108] device bridge_slave_1 left promiscuous mode [ 247.255673][ T1108] bridge0: port 2(bridge_slave_1) entered disabled state [ 247.265218][ T1108] device bridge_slave_0 left promiscuous mode [ 247.272654][ T1108] bridge0: port 1(bridge_slave_0) entered disabled state [ 247.337948][ T1108] device veth0_macvtap left promiscuous mode [ 247.344246][ T1108] device veth1_vlan left promiscuous mode [ 247.350070][ T1108] device veth0_vlan left promiscuous mode [ 247.373288][ T4297] usb 6-1: new high-speed USB device number 2 using dummy_hcd [ 247.577917][ T4297] usb 6-1: Using ep0 maxpacket: 16 [ 247.587144][ T4297] usb 6-1: config 0 has no interfaces? [ 247.592670][ T4297] usb 6-1: New USB device found, idVendor=056a, idProduct=0029, bcdDevice= 0.00 [ 247.613252][ T4297] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 247.635897][ T4297] usb 6-1: config 0 descriptor?? [ 247.852747][ T4331] usb 6-1: USB disconnect, device number 2 [ 248.165745][ T1108] team0 (unregistering): Port device team_slave_1 removed [ 248.264727][ T1108] team0 (unregistering): Port device team_slave_0 removed [ 248.320248][ T1108] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 248.423941][ T1108] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 249.581513][ T26] audit: type=1326 audit(1738643986.132:154): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5832 comm="syz.3.350" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efdb1f8cda9 code=0x7ffc0000 [ 249.611832][ T26] audit: type=1326 audit(1738643986.162:155): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5832 comm="syz.3.350" exe="/root/syz-executor" sig=0 arch=c000003e syscall=290 compat=0 ip=0x7efdb1f8cda9 code=0x7ffc0000 [ 249.654344][ T26] audit: type=1326 audit(1738643986.162:156): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5832 comm="syz.3.350" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efdb1f8cda9 code=0x7ffc0000 [ 249.710268][ T26] audit: type=1326 audit(1738643986.162:157): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5832 comm="syz.3.350" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efdb1f8cda9 code=0x7ffc0000 [ 249.763058][ T26] audit: type=1326 audit(1738643986.192:158): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5832 comm="syz.3.350" exe="/root/syz-executor" sig=0 arch=c000003e syscall=271 compat=0 ip=0x7efdb1f8cda9 code=0x7ffc0000 [ 249.813349][ T26] audit: type=1326 audit(1738643986.192:159): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5832 comm="syz.3.350" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efdb1f8cda9 code=0x7ffc0000 [ 249.848054][ T26] audit: type=1326 audit(1738643986.192:160): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5832 comm="syz.3.350" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efdb1f8cda9 code=0x7ffc0000 [ 249.893134][ T26] audit: type=1326 audit(1738643986.192:161): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5832 comm="syz.3.350" exe="/root/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7efdb1f8b85f code=0x7ffc0000 [ 249.936983][ T26] audit: type=1326 audit(1738643986.202:162): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5832 comm="syz.3.350" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efdb1f8cda9 code=0x7ffc0000 [ 249.982357][ T26] audit: type=1326 audit(1738643986.212:163): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5832 comm="syz.3.350" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efdb1f8cda9 code=0x7ffc0000 [ 250.994974][ T1108] bond0 (unregistering): Released all slaves [ 251.527727][ T5593] 8021q: adding VLAN 0 to HW filter on device bond0 [ 251.594436][ T4377] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 251.638231][ T4377] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 251.683900][ T5593] 8021q: adding VLAN 0 to HW filter on device team0 [ 251.704795][ T4377] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 251.731434][ T4377] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 251.782807][ T4377] bridge0: port 1(bridge_slave_0) entered blocking state [ 251.790091][ T4377] bridge0: port 1(bridge_slave_0) entered forwarding state [ 251.937193][ T4377] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 252.925799][ T4392] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 252.954324][ T4392] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 253.053806][ T4392] bridge0: port 2(bridge_slave_1) entered blocking state [ 253.061132][ T4392] bridge0: port 2(bridge_slave_1) entered forwarding state [ 253.092799][ T4392] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 253.119439][ T4392] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 253.176814][ T4392] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 253.203561][ T4392] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 253.230081][ T4392] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 253.317092][ T4392] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 253.337772][ T4392] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 253.358227][ T4392] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 253.373975][ T4392] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 254.244707][ T5593] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 254.403966][ T5593] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 254.453630][ T4378] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 254.486948][ T4378] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 255.654669][ T1277] ieee802154 phy0 wpan0: encryption failed: -22 [ 255.661089][ T1277] ieee802154 phy1 wpan1: encryption failed: -22 [ 257.328650][ T4322] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 257.434323][ T4322] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 259.070613][ T5593] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 259.213891][ T26] kauditd_printk_skb: 4 callbacks suppressed [ 259.213909][ T26] audit: type=1326 audit(1738643995.772:168): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5909 comm="syz.3.367" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7efdb1f8cda9 code=0x0 [ 260.162299][ T4262] Bluetooth: hci1: Controller not accepting commands anymore: ncmd = 0 [ 260.178686][ T4262] Bluetooth: hci1: Injecting HCI hardware error event [ 260.196694][ T4262] Bluetooth: hci1: hardware error 0x00 [ 260.352417][ T5938] loop7: detected capacity change from 0 to 1024 [ 260.450363][ T5938] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 260.647689][ T5950] loop6: detected capacity change from 0 to 256 [ 261.001964][ T4322] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 261.047868][ T4322] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 261.915024][ T4490] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 261.934049][ T4490] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 261.969674][ T5593] device veth0_vlan entered promiscuous mode [ 262.008848][ T4490] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 262.077261][ T4490] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 262.129934][ T5593] device veth1_vlan entered promiscuous mode [ 262.236181][ T4490] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 262.247087][ T4490] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 262.273145][ T4262] Bluetooth: hci1: Opcode 0x0c03 failed: -110 [ 262.279284][ T5593] device veth0_macvtap entered promiscuous mode [ 263.102486][ T4396] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 263.167234][ T5593] device veth1_macvtap entered promiscuous mode [ 263.227341][ T26] audit: type=1326 audit(1738643999.782:169): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5980 comm="syz.6.381" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fa4dab8cda9 code=0x0 [ 263.264860][ T5984] loop5: detected capacity change from 0 to 16 [ 263.273398][ T5593] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 263.304263][ T5593] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 263.319272][ T5984] erofs: (device loop5): mounted with root inode @ nid 36. [ 263.327000][ T5593] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 263.465870][ T5593] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 263.484136][ T5593] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 263.502358][ T5593] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 263.524377][ T5593] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 263.547758][ T5593] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 263.560425][ T5593] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 263.589037][ T4322] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 264.278463][ T4322] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 264.326393][ T5593] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 264.357544][ T5593] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 264.392402][ T5593] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 264.403010][ T5593] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 264.433207][ T5593] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 264.452970][ T5593] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 264.462846][ T5593] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 264.487129][ T5593] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 264.545338][ T5593] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 264.573366][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 264.633462][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 264.766128][ T5593] netdevsim netdevsim8 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 264.803821][ T5593] netdevsim netdevsim8 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 264.848397][ T5593] netdevsim netdevsim8 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 264.892970][ T5593] netdevsim netdevsim8 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 265.864823][ T6008] loop5: detected capacity change from 0 to 128 [ 265.967126][ T6008] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: none. [ 266.004562][ T6008] ext4 filesystem being mounted at /28/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 266.043737][ T4490] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 266.095543][ T4490] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 266.172336][ T4490] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 266.230346][ T4377] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 266.259848][ T4377] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 266.307821][ T4378] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 266.575726][ T6008] fscrypt (loop5, inode 12): Missing crypto API support for AES-256-CTS-CBC (API name: "cts(cbc(aes))") [ 266.616958][ T6008] fscrypt (loop5, inode 12): Missing crypto API support for AES-256-CTS-CBC (API name: "cts(cbc(aes))") [ 267.105907][ T5193] EXT4-fs (loop5): unmounting filesystem. [ 267.636913][ T6049] mmap: syz.5.389 (6049) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 276.244798][ T4296] libceph: connect (1)[c::]:6789 error -101 [ 276.251656][ T4296] libceph: mon0 (1)[c::]:6789 connect error [ 276.310117][ T6107] syz.6.400 (6107): drop_caches: 2 [ 276.332539][ T6099] ceph: No mds server is up or the cluster is laggy [ 276.564044][ T6126] bridge0: port 3(vlan0) entered blocking state [ 276.572003][ T6126] bridge0: port 3(vlan0) entered disabled state [ 276.682723][ T6130] loop8: detected capacity change from 0 to 256 [ 278.544130][ T6139] loop7: detected capacity change from 0 to 256 [ 278.606402][ T6139] FAT-fs (loop7): bogus number of FAT sectors [ 278.612541][ T6139] FAT-fs (loop7): Can't find a valid FAT filesystem [ 278.622333][ T6142] loop5: detected capacity change from 0 to 512 [ 278.654612][ T6142] EXT4-fs: Ignoring removed oldalloc option [ 278.759529][ T6143] loop6: detected capacity change from 0 to 2048 [ 278.801005][ T6142] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=2816c018, mo2=0002] [ 278.813649][ T6142] System zones: 1-3, 19-19, 35-38 [ 278.829002][ T6152] loop7: detected capacity change from 0 to 256 [ 278.834267][ T6143] EXT4-fs (loop6): mounted filesystem without journal. Quota mode: none. [ 278.848039][ T6142] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: writeback. [ 278.886821][ T6142] ext4 filesystem being mounted at /31/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 278.916311][ T6152] exfat: Unknown parameter 'Sh_&a^@RY cayrFzQ>P߁*ٹV8d|CpI77"TUTCH{W.H K;^ j_]75qYbYF' [ 280.174995][ T5464] EXT4-fs (loop6): unmounting filesystem. [ 280.226882][ T6139] loop7: detected capacity change from 0 to 512 [ 280.311252][ T5193] EXT4-fs (loop5): unmounting filesystem. [ 280.653377][ T6173] loop6: detected capacity change from 0 to 1024 [ 280.660628][ T6173] EXT4-fs: Ignoring removed nobh option [ 282.064119][ T6173] EXT4-fs: Ignoring removed bh option [ 282.113887][ T6173] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 282.275887][ T6191] loop8: detected capacity change from 0 to 16 [ 282.292664][ T6173] EXT4-fs (loop6): mounted filesystem without journal. Quota mode: writeback. [ 282.353598][ T6191] erofs: (device loop8): mounted with root inode @ nid 36. [ 283.545349][ T5464] EXT4-fs (loop6): unmounting filesystem. [ 283.901568][ T6224] loop6: detected capacity change from 0 to 16 [ 284.014590][ T6224] erofs: (device loop6): mounted with root inode @ nid 36. [ 288.456085][ T5724] usb 8-1: new high-speed USB device number 2 using dummy_hcd [ 289.543256][ T4298] usb 6-1: new high-speed USB device number 3 using dummy_hcd [ 290.053033][ T4298] usb 6-1: Using ep0 maxpacket: 8 [ 290.075539][ T6271] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 290.130268][ T6271] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 290.191811][ T6284] bridge0: port 2(bridge_slave_1) entered disabled state [ 290.200794][ T6284] bridge0: port 1(bridge_slave_0) entered disabled state [ 290.363029][ T5724] usb 8-1: Using ep0 maxpacket: 8 [ 290.369926][ T5724] usb 8-1: config 0 has an invalid interface number: 60 but max is 0 [ 290.383022][ T5724] usb 8-1: config 0 has no interface number 0 [ 290.389197][ T5724] usb 8-1: New USB device found, idVendor=17cc, idProduct=1010, bcdDevice=16.0a [ 290.400077][ T5724] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 290.427350][ T5724] usb 8-1: config 0 descriptor?? [ 291.469884][ T4298] usb 6-1: unable to get BOS descriptor or descriptor too short [ 291.483742][ T4298] usb 6-1: unable to read config index 0 descriptor/start: -71 [ 291.491365][ T4298] usb 6-1: can't read configurations, error -71 [ 293.548641][ T5724] usb 8-1: string descriptor 0 read error: -71 [ 294.323283][ T5724] snd-usb-audio: probe of 8-1:0.60 failed with error -71 [ 294.351106][ T5724] usb 8-1: USB disconnect, device number 2 [ 295.389339][ T6334] loop7: detected capacity change from 0 to 512 [ 295.526065][ T5597] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 298.207829][ T6363] netlink: 700 bytes leftover after parsing attributes in process `syz.6.461'. [ 299.449637][ T4358] usb 6-1: new high-speed USB device number 5 using dummy_hcd [ 299.643112][ T4358] usb 6-1: Using ep0 maxpacket: 16 [ 299.661564][ T4358] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 299.713614][ T4358] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 300.450412][ T26] audit: type=1326 audit(1738644037.002:170): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6390 comm="syz.8.468" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff78178cda9 code=0x7ffc0000 [ 300.463049][ T4358] usb 6-1: New USB device found, idVendor=04f3, idProduct=0755, bcdDevice= 0.00 [ 300.489931][ T4358] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 300.586764][ T26] audit: type=1326 audit(1738644037.002:171): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6390 comm="syz.8.468" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff78178cda9 code=0x7ffc0000 [ 300.602823][ T4358] usb 6-1: config 0 descriptor?? [ 300.933921][ T26] audit: type=1326 audit(1738644037.192:172): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6390 comm="syz.8.468" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7ff78178cda9 code=0x7ffc0000 [ 301.411427][ T26] audit: type=1326 audit(1738644037.192:173): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6390 comm="syz.8.468" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff78178cda9 code=0x7ffc0000 [ 301.568832][ T26] audit: type=1326 audit(1738644037.192:174): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6390 comm="syz.8.468" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff78178cda9 code=0x7ffc0000 [ 301.682436][ T4358] elan 0003:04F3:0755.0002: failed to start in urb: -90 [ 301.719779][ T26] audit: type=1326 audit(1738644037.192:175): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6390 comm="syz.8.468" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7ff78178cda9 code=0x7ffc0000 [ 301.747522][ T4358] elan 0003:04F3:0755.0002: hidraw0: USB HID v0.00 Device [HID 04f3:0755] on usb-dummy_hcd.5-1/input0 [ 301.815761][ T4358] usb 6-1: USB disconnect, device number 5 [ 301.863676][ T26] audit: type=1326 audit(1738644037.192:176): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6390 comm="syz.8.468" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff78178cda9 code=0x7ffc0000 [ 301.970122][ T26] audit: type=1326 audit(1738644037.192:177): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6390 comm="syz.8.468" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff78178cda9 code=0x7ffc0000 [ 303.104126][ T6412] loop7: detected capacity change from 0 to 512 [ 303.160819][ T26] audit: type=1326 audit(1738644037.192:178): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6390 comm="syz.8.468" exe="/root/syz-executor" sig=0 arch=c000003e syscall=302 compat=0 ip=0x7ff78178cda9 code=0x7ffc0000 [ 303.190643][ T6412] EXT4-fs (loop7): encrypted files will use data=ordered instead of data journaling mode [ 303.197960][ T26] audit: type=1326 audit(1738644037.192:179): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6390 comm="syz.8.468" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff78178cda9 code=0x7ffc0000 [ 303.473350][ T6412] EXT4-fs (loop7): 1 truncate cleaned up [ 303.480025][ T6412] EXT4-fs (loop7): mounted filesystem without journal. Quota mode: none. [ 303.743170][ T4358] usb 7-1: new high-speed USB device number 2 using dummy_hcd [ 304.950308][ T5469] EXT4-fs (loop7): unmounting filesystem. [ 305.212720][ T4358] usb 7-1: Using ep0 maxpacket: 8 [ 305.217285][ T6439] xt_cgroup: invalid path, errno=-2 [ 305.239775][ T4358] usb 7-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 56832, setting to 1024 [ 305.252774][ T4358] usb 7-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 305.843879][ T4358] usb 7-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 305.855881][ T4358] usb 7-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 305.947331][ T4358] usb 7-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 306.008811][ T4358] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 306.294866][ T4358] usb 7-1: usb_control_msg returned -32 [ 306.300750][ T4358] usbtmc 7-1:16.0: can't read capabilities [ 307.216615][ T4358] usb 7-1: USB disconnect, device number 2 [ 307.934870][ T26] kauditd_printk_skb: 16 callbacks suppressed [ 307.934890][ T26] audit: type=1326 audit(1738644044.492:196): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6463 comm="syz.3.483" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efdb1f8cda9 code=0x7ffc0000 [ 307.963256][ C1] vkms_vblank_simulate: vblank timer overrun [ 308.049260][ T26] audit: type=1326 audit(1738644044.542:197): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6463 comm="syz.3.483" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7efdb1f8cda9 code=0x7ffc0000 [ 308.093683][ T26] audit: type=1326 audit(1738644044.552:198): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6463 comm="syz.3.483" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efdb1f8cda9 code=0x7ffc0000 [ 308.175824][ T6472] loop5: detected capacity change from 0 to 128 [ 308.258524][ T26] audit: type=1326 audit(1738644044.552:199): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6463 comm="syz.3.483" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efdb1f8cda9 code=0x7ffc0000 [ 308.281611][ T26] audit: type=1326 audit(1738644044.552:200): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6463 comm="syz.3.483" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7efdb1f8cda9 code=0x7ffc0000 [ 308.398539][ T26] audit: type=1326 audit(1738644044.552:201): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6463 comm="syz.3.483" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efdb1f8cda9 code=0x7ffc0000 [ 308.453054][ T26] audit: type=1326 audit(1738644044.552:202): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6463 comm="syz.3.483" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efdb1f8cda9 code=0x7ffc0000 [ 308.493118][ T26] audit: type=1326 audit(1738644044.562:203): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6463 comm="syz.3.483" exe="/root/syz-executor" sig=0 arch=c000003e syscall=306 compat=0 ip=0x7efdb1f8cda9 code=0x7ffc0000 [ 308.556538][ T26] audit: type=1326 audit(1738644044.562:204): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6463 comm="syz.3.483" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efdb1f8cda9 code=0x7ffc0000 [ 308.593770][ T26] audit: type=1326 audit(1738644044.562:205): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6463 comm="syz.3.483" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efdb1f8cda9 code=0x7ffc0000 [ 310.956706][ T6501] rdma_op ffff888056a711f0 conn xmit_rdma 0000000000000000 [ 312.805202][ T6516] loop8: detected capacity change from 0 to 256 [ 312.977726][ T5597] I/O error, dev loop8, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 313.027258][ T6516] loop8: detected capacity change from 0 to 512 [ 313.127895][ T5597] I/O error, dev loop8, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 314.127112][ T26] kauditd_printk_skb: 59 callbacks suppressed [ 314.127130][ T26] audit: type=1326 audit(1738644050.682:265): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6536 comm="syz.6.500" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa4dab8cda9 code=0x7ffc0000 [ 314.242028][ T6537] binder: 6534:6537 ioctl c0306201 20000680 returned -14 [ 314.439756][ T26] audit: type=1326 audit(1738644050.772:266): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6536 comm="syz.6.500" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fa4dab8cda9 code=0x7ffc0000 [ 314.547352][ T26] audit: type=1326 audit(1738644050.772:267): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6536 comm="syz.6.500" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa4dab8cda9 code=0x7ffc0000 [ 314.709401][ T26] audit: type=1326 audit(1738644050.772:268): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6536 comm="syz.6.500" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa4dab8cda9 code=0x7ffc0000 [ 314.905752][ T26] audit: type=1326 audit(1738644050.792:269): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6536 comm="syz.6.500" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fa4dab8cda9 code=0x7ffc0000 [ 315.843056][ T26] audit: type=1326 audit(1738644050.822:270): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6536 comm="syz.6.500" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa4dab8cda9 code=0x7ffc0000 [ 315.888172][ T26] audit: type=1326 audit(1738644050.822:271): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6536 comm="syz.6.500" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa4dab8cda9 code=0x7ffc0000 [ 315.977829][ T26] audit: type=1326 audit(1738644050.822:272): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6536 comm="syz.6.500" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fa4dab8cda9 code=0x7ffc0000 [ 316.026845][ T26] audit: type=1326 audit(1738644050.822:273): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6536 comm="syz.6.500" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa4dab8cda9 code=0x7ffc0000 [ 316.364937][ T26] audit: type=1326 audit(1738644050.822:274): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6536 comm="syz.6.500" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa4dab8cda9 code=0x7ffc0000 [ 316.469385][ T6561] netlink: 4 bytes leftover after parsing attributes in process `syz.7.506'. [ 318.327668][ T1277] ieee802154 phy0 wpan0: encryption failed: -22 [ 318.334413][ T1277] ieee802154 phy1 wpan1: encryption failed: -22 [ 320.498974][ T6571] loop5: detected capacity change from 0 to 2048 [ 320.596244][ T6571] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: none. [ 320.606486][ T6575] loop8: detected capacity change from 0 to 512 [ 320.666652][ T6575] EXT4-fs (loop8): mounted filesystem without journal. Quota mode: writeback. [ 320.677732][ T6575] ext4 filesystem being mounted at /29/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 320.801295][ T5193] EXT4-fs (loop5): unmounting filesystem. [ 320.977776][ T5593] EXT4-fs (loop8): unmounting filesystem. [ 321.007534][ T6594] loop5: detected capacity change from 0 to 512 [ 321.100963][ T6594] __quota_error: 22 callbacks suppressed [ 321.100981][ T6594] Quota error (device loop5): find_tree_dqentry: Cycle in quota tree detected: block 1 index 0 [ 321.183299][ T6594] Quota error (device loop5): qtree_read_dquot: Can't read quota structure for id 0 [ 321.193912][ T6594] EXT4-fs error (device loop5): ext4_acquire_dquot:6795: comm syz.5.514: Failed to acquire dquot type 0 [ 321.240742][ T6594] EXT4-fs (loop5): Remounting filesystem read-only [ 321.266340][ T6594] Quota error (device loop5): find_tree_dqentry: Cycle in quota tree detected: block 1 index 0 [ 321.297973][ T6594] Quota error (device loop5): qtree_read_dquot: Can't read quota structure for id 0 [ 321.334278][ T6594] EXT4-fs error (device loop5): ext4_acquire_dquot:6795: comm syz.5.514: Failed to acquire dquot type 0 [ 321.380828][ T6594] EXT4-fs (loop5): Remounting filesystem read-only [ 321.870394][ T6594] Quota error (device loop5): find_tree_dqentry: Cycle in quota tree detected: block 1 index 0 [ 321.934490][ T6594] Quota error (device loop5): qtree_read_dquot: Can't read quota structure for id 0 [ 321.968896][ T6594] EXT4-fs error (device loop5): ext4_acquire_dquot:6795: comm syz.5.514: Failed to acquire dquot type 0 [ 321.982143][ T6604] xt_CT: No such helper "syz0" [ 322.053225][ T6594] EXT4-fs (loop5): Remounting filesystem read-only [ 322.061349][ T6594] EXT4-fs (loop5): 1 orphan inode deleted [ 322.133062][ T6594] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: writeback. [ 322.162589][ T6594] ext4 filesystem being mounted at /51/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 322.249093][ T6594] Quota error (device loop5): find_tree_dqentry: Cycle in quota tree detected: block 1 index 0 [ 322.278315][ T6594] Quota error (device loop5): qtree_read_dquot: Can't read quota structure for id 0 [ 322.317992][ T6594] EXT4-fs error (device loop5): ext4_acquire_dquot:6795: comm syz.5.514: Failed to acquire dquot type 0 [ 322.340902][ T6594] EXT4-fs (loop5): Remounting filesystem read-only [ 322.370618][ T6621] Quota error (device loop5): find_tree_dqentry: Cycle in quota tree detected: block 1 index 0 [ 322.410800][ T6625] loop8: detected capacity change from 0 to 256 [ 322.463228][ T6625] exfat: Unknown parameter 'Sh_&a^@RY cayrFzQ>P߁*ٹV8d|CpI77"TUTCH{W.H K;^ j_]75qYbYF' [ 322.490394][ T6621] Quota error (device loop5): qtree_read_dquot: Can't read quota structure for id 0 [ 322.506877][ T6621] EXT4-fs error (device loop5): ext4_acquire_dquot:6795: comm syz.5.514: Failed to acquire dquot type 0 [ 322.540412][ T6621] EXT4-fs (loop5): Remounting filesystem read-only [ 322.552120][ T6594] EXT4-fs error (device loop5): ext4_acquire_dquot:6795: comm syz.5.514: Failed to acquire dquot type 0 [ 322.572714][ T6594] EXT4-fs (loop5): Remounting filesystem read-only [ 322.629426][ T6628] loop6: detected capacity change from 0 to 2048 [ 322.705205][ T6628] UDF-fs: warning (device loop6): udf_load_vrs: No VRS found [ 322.746960][ T6628] UDF-fs: Scanning with blocksize 512 failed [ 322.766785][ T6628] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 322.786956][ T6620] loop8: detected capacity change from 0 to 512 [ 323.590339][ T5193] EXT4-fs (loop5): unmounting filesystem. [ 323.610164][ T5597] I/O error, dev loop8, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 323.697428][ T6638] netlink: 20 bytes leftover after parsing attributes in process `syz.6.523'. [ 323.768641][ T6638] netlink: 20 bytes leftover after parsing attributes in process `syz.6.523'. [ 325.645905][ T6664] rdma_op ffff8880733529f0 conn xmit_rdma 0000000000000000 [ 329.024783][ T6700] loop5: detected capacity change from 0 to 256 [ 329.123014][ T6700] exFAT-fs (loop5): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 329.218191][ T6700] exFAT-fs (loop5): Medium has reported failures. Some data may be lost. [ 329.422588][ T6700] exFAT-fs (loop5): failed to load upcase table (idx : 0x00010000, chksum : 0xe62de5da, utbl_chksum : 0xe619d30d) [ 329.972310][ T4262] Bluetooth: hci2: command 0x0406 tx timeout [ 329.978683][ T4262] Bluetooth: hci3: command 0x0406 tx timeout [ 330.270548][ T6706] loop6: detected capacity change from 0 to 256 [ 330.493372][ T6706] exfat: Unknown parameter 'Sh_&a^@RY cayrFzQ>P߁*ٹV8d|CpI77"TUTCH{W.H K;^ j_]75qYbYF' [ 330.735859][ T6716] netlink: 'syz.3.542': attribute type 1 has an invalid length. [ 330.952854][ T6716] 8021q: adding VLAN 0 to HW filter on device bond1 [ 331.169174][ T6721] loop6: detected capacity change from 0 to 512 [ 331.959239][ T5597] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 332.052233][ T6718] bond1: (slave gretap1): making interface the new active one [ 332.194385][ T6718] bond1: (slave gretap1): Enslaving as an active interface with an up link [ 332.242759][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): bond1: link becomes ready [ 332.331787][ T6720] netlink: 20 bytes leftover after parsing attributes in process `syz.3.542'. [ 332.771563][ T6739] loop8: detected capacity change from 0 to 1024 [ 332.956397][ T6739] hfsplus: failed to load extents file [ 333.109079][ T6720] device vlan0 entered promiscuous mode [ 333.153147][ T5597] I/O error, dev loop8, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 333.203956][ T6720] device bond1 entered promiscuous mode [ 333.209956][ T6720] device gretap1 entered promiscuous mode [ 333.231759][ T4260] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 333.243402][ T4260] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 333.252253][ T4256] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 333.261961][ T4260] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 333.272400][ T4260] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 333.279930][ T4260] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 335.161735][ T6758] loop5: detected capacity change from 0 to 1024 [ 335.212164][ T6761] loop6: detected capacity change from 0 to 8 [ 335.313466][ T4262] Bluetooth: hci0: command 0x0409 tx timeout [ 335.657836][ T6753] SQUASHFS error: Failed to read block 0x4de: -5 [ 335.670070][ T6740] chnl_net:caif_netlink_parms(): no params data found [ 335.738796][ T6753] SQUASHFS error: Failed to read block 0x4de: -5 [ 335.825440][ T26] kauditd_printk_skb: 44 callbacks suppressed [ 335.825456][ T26] audit: type=1800 audit(1738644072.382:339): pid=6753 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.6.548" name="file1" dev="loop6" ino=5 res=0 errno=0 [ 336.308060][ T6740] bridge0: port 1(bridge_slave_0) entered blocking state [ 336.564586][ T6740] bridge0: port 1(bridge_slave_0) entered disabled state [ 336.960294][ T6740] device bridge_slave_0 entered promiscuous mode [ 337.020496][ T4392] hfsplus: b-tree write err: -5, ino 4 [ 337.033285][ T6740] bridge0: port 2(bridge_slave_1) entered blocking state [ 337.120913][ T6740] bridge0: port 2(bridge_slave_1) entered disabled state [ 337.160756][ T6740] device bridge_slave_1 entered promiscuous mode [ 337.392982][ T4262] Bluetooth: hci0: command 0x041b tx timeout [ 337.447373][ T6740] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 337.468325][ T6740] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 338.364194][ T6740] team0: Port device team_slave_0 added [ 338.400880][ T6740] team0: Port device team_slave_1 added [ 338.568646][ T6740] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 338.608337][ T6740] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 338.700909][ T6740] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 338.744553][ T6740] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 338.761913][ T6740] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 338.988857][ T6804] rdma_op ffff88807ccb99f0 conn xmit_rdma 0000000000000000 [ 339.516251][ T6806] loop5: detected capacity change from 0 to 1024 [ 339.636076][ T4260] Bluetooth: hci0: command 0x040f tx timeout [ 339.677624][ T6806] hfsplus: failed to load extents file [ 339.742456][ T6740] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 340.325164][ T5597] I/O error, dev loop5, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 340.449901][ T6812] device batadv_slave_1 entered promiscuous mode [ 340.468835][ T6740] device hsr_slave_0 entered promiscuous mode [ 340.524022][ T6740] device hsr_slave_1 entered promiscuous mode [ 340.550773][ T6740] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 340.572141][ T6740] Cannot create hsr debugfs directory [ 340.675763][ T26] audit: type=1326 audit(1738644077.232:340): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6811 comm="syz.8.558" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7ff78178cda9 code=0x0 [ 341.716455][ T4260] Bluetooth: hci0: command 0x0419 tx timeout [ 341.733510][ T6822] netlink: 'syz.3.559': attribute type 7 has an invalid length. [ 342.065107][ T6811] device batadv_slave_1 left promiscuous mode [ 342.468548][ T4260] Bluetooth: hci4: Ignoring HCI_Connection_Complete for existing connection [ 342.683538][ T4331] usb 9-1: new high-speed USB device number 2 using dummy_hcd [ 342.888887][ T6740] netdevsim netdevsim9 netdevsim0: renamed from eth0 [ 342.974689][ T4331] usb 9-1: Using ep0 maxpacket: 8 [ 343.277279][ T6740] netdevsim netdevsim9 netdevsim1: renamed from eth1 [ 343.359453][ T6740] netdevsim netdevsim9 netdevsim2: renamed from eth2 [ 343.370958][ T4331] usb 9-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 343.412471][ T4331] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 343.426360][ T4331] usb 9-1: Product: syz [ 343.430600][ T4331] usb 9-1: Manufacturer: syz [ 343.444125][ T6740] netdevsim netdevsim9 netdevsim3: renamed from eth3 [ 343.637459][ T4331] usb 9-1: SerialNumber: syz [ 344.928191][ T4331] usb 9-1: config 0 descriptor?? [ 345.151848][ T4331] usb 9-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 346.249731][ T4331] dvb_usb_rtl28xxu: probe of 9-1:0.0 failed with error -32 [ 346.271556][ T6740] 8021q: adding VLAN 0 to HW filter on device bond0 [ 346.432289][ T4358] usb 9-1: USB disconnect, device number 2 [ 346.487183][ T4398] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 346.564303][ T4398] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 346.578365][ T6740] 8021q: adding VLAN 0 to HW filter on device team0 [ 346.693867][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 346.886020][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 347.118176][ T9] bridge0: port 1(bridge_slave_0) entered blocking state [ 347.125378][ T9] bridge0: port 1(bridge_slave_0) entered forwarding state [ 347.540676][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 347.575348][ T6379] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 347.586405][ T6379] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 347.614560][ T6379] bridge0: port 2(bridge_slave_1) entered blocking state [ 347.621780][ T6379] bridge0: port 2(bridge_slave_1) entered forwarding state [ 347.664689][ T6880] loop8: detected capacity change from 0 to 2048 [ 347.727877][ T75] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 347.755133][ T6880] NILFS (loop8): broken superblock, retrying with spare superblock (blocksize = 1024) [ 347.789363][ T75] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 347.831271][ T75] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 347.846547][ T75] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 347.859047][ T75] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 347.869794][ T6884] NILFS (loop8): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 347.895376][ T75] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 347.921357][ T75] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 347.992364][ T75] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 348.047080][ T6740] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 348.068745][ T6740] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 348.098222][ T75] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 348.138914][ T75] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 348.178431][ T75] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 348.577737][ T6890] xt_bpf: check failed: parse error [ 349.793164][ T4262] Bluetooth: hci5: command 0x0406 tx timeout [ 350.982224][ T6740] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 350.999002][ T6920] loop6: detected capacity change from 0 to 1024 [ 351.007983][ T75] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 351.015981][ T75] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 351.029928][ T6920] EXT4-fs (loop6): ext4_check_descriptors: Block bitmap for group 0 overlaps block group descriptors [ 351.068971][ T6920] EXT4-fs (loop6): ext4_check_descriptors: Checksum for group 0 failed (14919!=20869) [ 351.131608][ T6920] EXT4-fs (loop6): invalid journal inode [ 351.160123][ T6920] EXT4-fs (loop6): can't get journal size [ 351.311538][ T6920] EXT4-fs error (device loop6): ext4_protect_reserved_inode:182: inode #3: comm syz.6.582: blocks 2-2 from inode overlap system zone [ 351.400756][ T6920] EXT4-fs (loop6): failed to initialize system zone (-117) [ 351.464164][ T6920] EXT4-fs (loop6): mount failed [ 352.880147][ T6946] trusted_key: encrypted_key: insufficient parameters specified [ 355.999353][ T1108] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 356.020267][ T1108] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 356.263841][ T6740] device veth0_vlan entered promiscuous mode [ 356.277799][ T6740] device veth1_vlan entered promiscuous mode [ 356.312498][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 356.331654][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 356.342427][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 358.007039][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 358.130372][ T6740] device veth0_macvtap entered promiscuous mode [ 358.193879][ T6740] device veth1_macvtap entered promiscuous mode [ 358.216918][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 358.275626][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 358.321802][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 358.411577][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 358.458288][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 358.689232][ T6991] loop8: detected capacity change from 0 to 2048 [ 359.732075][ T6991] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 360.226509][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 360.374187][ T6740] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 360.386937][ T6740] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 360.403183][ T6740] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 360.455709][ T6740] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 360.485328][ T6740] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 360.513317][ T6740] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 360.547728][ T6740] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 360.581098][ T6740] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 360.613431][ T6740] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 360.642954][ T6740] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 360.683420][ T6740] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 360.712519][ T6740] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 360.784115][ T6740] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 360.833401][ T6740] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 360.908684][ T6740] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 360.919131][ T6740] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 360.930143][ T6740] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 360.940498][ T6740] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 360.951796][ T6740] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 361.073090][ T6740] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 361.107778][ T6740] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 361.134478][ T6740] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 361.176347][ T6993] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 362.135929][ T6993] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 362.194052][ T6993] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 362.275902][ T6993] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 362.337369][ T6740] netdevsim netdevsim9 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 362.352977][ T6740] netdevsim netdevsim9 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 362.503002][ T6740] netdevsim netdevsim9 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 362.549952][ T6740] netdevsim netdevsim9 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 363.393308][ T6961] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 363.401756][ T6961] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 363.596127][ T4397] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 363.717065][ T4397] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 363.758343][ T4397] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 364.884632][ T6379] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 371.258671][ T7080] loop6: detected capacity change from 0 to 128 [ 373.751154][ T7102] device batadv_slave_1 entered promiscuous mode [ 373.841216][ T26] audit: type=1326 audit(1738644110.392:341): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7101 comm="syz.6.619" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fa4dab8cda9 code=0x0 [ 375.143724][ T7101] device batadv_slave_1 left promiscuous mode [ 376.922699][ T7144] netlink: 'syz.6.629': attribute type 12 has an invalid length. [ 377.329301][ T7161] loop6: detected capacity change from 0 to 256 [ 377.476689][ T5597] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 379.973449][ T1277] ieee802154 phy0 wpan0: encryption failed: -22 [ 379.979825][ T1277] ieee802154 phy1 wpan1: encryption failed: -22 [ 379.999273][ T7159] loop6: detected capacity change from 0 to 512 [ 380.069247][ T7159] EXT4-fs: Ignoring removed i_version option [ 380.121788][ T7159] journal_path: Lookup failure for './file0' [ 380.128927][ T7159] EXT4-fs: error: could not find journal device path [ 380.186315][ T5597] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 380.791214][ T7200] loop8: detected capacity change from 0 to 512 [ 380.798392][ T7200] ext4: Unknown parameter 'subj_user' [ 380.833401][ T7201] netlink: 20 bytes leftover after parsing attributes in process `syz.9.641'. [ 384.904503][ T7237] loop5: detected capacity change from 0 to 2048 [ 384.972694][ T7237] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 386.959387][ T7253] bridge0: port 2(bridge_slave_1) entered disabled state [ 386.967035][ T7253] bridge0: port 1(bridge_slave_0) entered disabled state [ 387.092674][ T7257] netlink: 'syz.5.653': attribute type 10 has an invalid length. [ 387.144700][ T7257] bridge0: port 2(bridge_slave_1) entered blocking state [ 387.151925][ T7257] bridge0: port 2(bridge_slave_1) entered listening state [ 387.160841][ T7257] bridge0: port 1(bridge_slave_0) entered blocking state [ 387.168079][ T7257] bridge0: port 1(bridge_slave_0) entered listening state [ 387.348429][ T7257] bond0: (slave bridge0): Enslaving as an active interface with an up link [ 387.476440][ T7263] overlayfs: failed to resolve './file0': -2 [ 389.010906][ T7274] loop9: detected capacity change from 0 to 1024 [ 389.112030][ T7274] EXT4-fs (loop9): mounted filesystem without journal. Quota mode: none. [ 389.246410][ T7274] EXT4-fs error (device loop9): ext4_expand_extra_isize_ea:2739: inode #12: comm syz.9.658: corrupted in-inode xattr [ 389.428368][ T7283] loop8: detected capacity change from 0 to 1024 [ 389.687751][ T7283] EXT4-fs (loop8): mounted filesystem without journal. Quota mode: writeback. [ 389.862402][ T7283] EXT4-fs error (device loop8): ext4_expand_extra_isize_ea:2739: inode #2: comm syz.8.659: corrupted in-inode xattr [ 389.936099][ T7283] EXT4-fs (loop8): Remounting filesystem read-only [ 389.982787][ T6740] EXT4-fs (loop9): unmounting filesystem. [ 390.039418][ T7296] netlink: 16 bytes leftover after parsing attributes in process `syz.3.662'. [ 390.063665][ T7296] device team0 entered promiscuous mode [ 390.069481][ T7296] device team_slave_0 entered promiscuous mode [ 390.076257][ T7296] device team_slave_1 entered promiscuous mode [ 390.084989][ T7296] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 390.151439][ T7296] device team0 left promiscuous mode [ 390.165997][ T7296] device team_slave_0 left promiscuous mode [ 390.285636][ T7296] device team_slave_1 left promiscuous mode [ 391.523206][ T7306] netlink: 'syz.9.664': attribute type 2 has an invalid length. [ 391.581381][ T7306] netlink: 4 bytes leftover after parsing attributes in process `syz.9.664'. [ 394.659100][ T7320] loop5: detected capacity change from 0 to 256 [ 394.682592][ T5593] EXT4-fs (loop8): unmounting filesystem. [ 394.919560][ T26] audit: type=1326 audit(1738644131.472:342): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7319 comm="syz.5.668" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1a2dd8cda9 code=0x7ffc0000 [ 395.081089][ T26] audit: type=1326 audit(1738644131.612:343): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7319 comm="syz.5.668" exe="/root/syz-executor" sig=0 arch=c000003e syscall=53 compat=0 ip=0x7f1a2dd8cda9 code=0x7ffc0000 [ 396.245836][ T7332] loop9: detected capacity change from 0 to 512 [ 396.268715][ T26] audit: type=1326 audit(1738644131.622:344): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7319 comm="syz.5.668" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1a2dd8cda9 code=0x7ffc0000 [ 396.384420][ T7332] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 396.702611][ T26] audit: type=1326 audit(1738644131.622:345): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7319 comm="syz.5.668" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1a2dd8cda9 code=0x7ffc0000 [ 397.088818][ T7332] EXT4-fs (loop9): mounted filesystem without journal. Quota mode: writeback. [ 397.144452][ T7332] ext4 filesystem being mounted at /10/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 398.528451][ T46] bridge0: port 2(bridge_slave_1) entered disabled state [ 398.789168][ T6740] EXT4-fs (loop9): unmounting filesystem. [ 399.405064][ T7375] xt_CONNSECMARK: only valid in 'mangle' or 'security' table, not 'raw' [ 400.152718][ T26] audit: type=1326 audit(1738644136.702:346): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7377 comm="syz.9.678" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f9c0238cda9 code=0x0 [ 401.812963][ T4299] usb 7-1: new high-speed USB device number 3 using dummy_hcd [ 402.014265][ T4299] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 402.040566][ T4299] usb 7-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 402.052381][ T4299] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 402.075365][ T4299] usb 7-1: config 0 descriptor?? [ 402.114198][ T4299] pwc: Askey VC010 type 2 USB webcam detected. [ 402.754363][ C1] bridge0: port 1(bridge_slave_0) entered learning state [ 402.763539][ C1] bridge0: port 2(bridge_slave_1) entered learning state [ 403.006499][ T4299] pwc: recv_control_msg error -32 req 02 val 2b00 [ 403.058281][ T4299] pwc: recv_control_msg error -32 req 02 val 2700 [ 403.272472][ T4299] pwc: recv_control_msg error -32 req 02 val 2c00 [ 404.317883][ T4299] pwc: recv_control_msg error -32 req 04 val 1000 [ 404.629747][ T4299] pwc: recv_control_msg error -32 req 04 val 1300 [ 404.667799][ T7430] netdevsim netdevsim5: Direct firmware load for . [ 404.667799][ T7430] failed with error -2 [ 404.678553][ T7430] netdevsim netdevsim5: Falling back to sysfs fallback for: . [ 404.678553][ T7430] [ 404.697004][ T4299] pwc: recv_control_msg error -32 req 04 val 1400 [ 404.724524][ T4299] pwc: recv_control_msg error -32 req 02 val 2000 [ 404.762154][ T4299] pwc: recv_control_msg error -32 req 02 val 2100 [ 404.837489][ T4299] pwc: recv_control_msg error -32 req 04 val 1500 [ 404.865628][ T4299] pwc: recv_control_msg error -32 req 02 val 2500 [ 404.887649][ T4299] pwc: recv_control_msg error -32 req 02 val 2400 [ 404.989729][ T4299] pwc: recv_control_msg error -32 req 02 val 2600 [ 405.022147][ T7441] loop8: detected capacity change from 0 to 16 [ 406.051057][ T7441] erofs: (device loop8): mounted with root inode @ nid 36. [ 406.411641][ T7446] erofs: (device loop8): z_erofs_readahead: readahead error at page 12 @ nid 36 [ 406.421442][ T7446] erofs: (device loop8): z_erofs_readahead: readahead error at page 10 @ nid 36 [ 406.430883][ T7446] erofs: (device loop8): z_erofs_readahead: readahead error at page 6 @ nid 36 [ 406.441198][ T7446] erofs: (device loop8): z_erofs_readahead: readahead error at page 4 @ nid 36 [ 406.450476][ T7446] erofs: (device loop8): z_erofs_do_map_blocks: invalid logical cluster 0 at nid 36 [ 406.460073][ T7446] erofs: (device loop8): z_erofs_readahead: readahead error at page 0 @ nid 36 [ 406.469657][ T7446] syz.8.691: attempt to access beyond end of device [ 406.469657][ T7446] loop8: rw=524288, sector=296, nr_sectors = 16 limit=16 [ 406.483629][ T7446] syz.8.691: attempt to access beyond end of device [ 406.483629][ T7446] loop8: rw=524288, sector=1049264, nr_sectors = 16 limit=16 [ 406.497992][ T7446] syz.8.691: attempt to access beyond end of device [ 406.497992][ T7446] loop8: rw=524288, sector=6520, nr_sectors = 16 limit=16 [ 406.512068][ T7446] syz.8.691: attempt to access beyond end of device [ 406.512068][ T7446] loop8: rw=524288, sector=34359736328, nr_sectors = 16 limit=16 [ 406.528687][ T7446] syz.8.691: attempt to access beyond end of device [ 406.528687][ T7446] loop8: rw=524288, sector=8, nr_sectors = 16 limit=16 [ 406.543789][ T7446] syz.8.691: attempt to access beyond end of device [ 406.543789][ T7446] loop8: rw=524288, sector=720, nr_sectors = 16 limit=16 [ 406.558233][ T7446] syz.8.691: attempt to access beyond end of device [ 406.558233][ T7446] loop8: rw=524288, sector=536576856, nr_sectors = 16 limit=16 [ 407.209817][ T4299] pwc: recv_control_msg error -71 req 02 val 2800 [ 407.393917][ T4299] pwc: recv_control_msg error -71 req 04 val 1100 [ 407.426406][ T4299] pwc: recv_control_msg error -71 req 04 val 1200 [ 408.443155][ T4299] pwc: Registered as video103. [ 408.459691][ T4299] input: PWC snapshot button as /devices/platform/dummy_hcd.6/usb7/7-1/input/input5 [ 408.546565][ T4299] usb 7-1: USB disconnect, device number 3 [ 409.662449][ T7466] loop9: detected capacity change from 0 to 128 [ 410.255106][ T7470] device batadv_slave_1 entered promiscuous mode [ 410.371996][ T26] audit: type=1326 audit(1738644146.922:347): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7469 comm="syz.3.697" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7efdb1f8cda9 code=0x0 [ 411.572803][ T7469] device batadv_slave_1 left promiscuous mode [ 415.161653][ T7512] loop9: detected capacity change from 0 to 16 [ 415.237143][ T7512] erofs: (device loop9): erofs_init_device: empty device tag @ pos 0 [ 417.894630][ T7538] loop6: detected capacity change from 0 to 128 [ 417.928477][ T14] usb 9-1: new high-speed USB device number 3 using dummy_hcd [ 417.999057][ T7538] qnx6: wrong signature (magic) in superblock #1. [ 418.112972][ C1] bridge0: port 2(bridge_slave_1) entered forwarding state [ 418.120263][ C1] bridge0: topology change detected, propagating [ 418.128612][ C1] bridge0: port 1(bridge_slave_0) entered forwarding state [ 418.135858][ C1] bridge0: topology change detected, propagating [ 420.276617][ T5597] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 420.319798][ T14] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 32, changing to 9 [ 420.344820][ T14] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 420.374643][ T14] usb 9-1: New USB device found, idVendor=04e7, idProduct=0009, bcdDevice= 0.00 [ 420.396683][ T14] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 420.418621][ T14] usb 9-1: config 0 descriptor?? [ 420.537453][ T7544] loop5: detected capacity change from 0 to 2048 [ 420.614357][ T14] usb 9-1: can't set config #0, error -71 [ 420.620673][ T7544] NILFS (loop5): broken superblock, retrying with spare superblock (blocksize = 1024) [ 420.624324][ T14] usb 9-1: USB disconnect, device number 3 [ 420.680656][ T7549] netlink: 28 bytes leftover after parsing attributes in process `syz.3.715'. [ 420.730535][ T7556] NILFS (loop5): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 420.778757][ T7549] netlink: 8 bytes leftover after parsing attributes in process `syz.3.715'. [ 420.920867][ T7549] bridge0: port 3(syz_tun) entered blocking state [ 421.061828][ T7549] bridge0: port 3(syz_tun) entered disabled state [ 421.106330][ T7549] device syz_tun entered promiscuous mode [ 421.162405][ T7549] bridge0: port 3(syz_tun) entered blocking state [ 421.169172][ T7549] bridge0: port 3(syz_tun) entered forwarding state [ 422.402466][ T7579] ADFS-fs (nullb0): error: can't find an ADFS filesystem on dev nullb0. [ 426.561690][ T4300] usb 7-1: new high-speed USB device number 4 using dummy_hcd [ 426.983012][ T4299] usb 10-1: new high-speed USB device number 2 using dummy_hcd [ 427.173840][ T4300] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 32, changing to 9 [ 427.603504][ T4300] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 427.781333][ T4300] usb 7-1: New USB device found, idVendor=04e7, idProduct=0009, bcdDevice= 0.00 [ 427.873933][ T4300] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 427.906073][ T4300] usb 7-1: config 0 descriptor?? [ 427.923049][ T4299] usb 10-1: Using ep0 maxpacket: 8 [ 427.930484][ T4299] usb 10-1: unable to get BOS descriptor or descriptor too short [ 427.985519][ T4299] usb 10-1: config 1 interface 1 altsetting 1 bulk endpoint 0x3 has invalid maxpacket 32 [ 428.009817][ T4299] usb 10-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 428.029679][ T4300] usb 7-1: can't set config #0, error -71 [ 428.049688][ T4300] usb 7-1: USB disconnect, device number 4 [ 428.070312][ T4299] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 428.100706][ T4299] usb 10-1: Product: syz [ 428.117005][ T4299] usb 10-1: Manufacturer: syz [ 428.140103][ T4299] usb 10-1: SerialNumber: syz [ 428.368819][ T4299] cdc_ncm 10-1:1.0: bind() failure [ 428.393104][ T4299] cdc_ncm 10-1:1.1: CDC Union missing and no IAD found [ 428.411559][ T4299] cdc_ncm 10-1:1.1: bind() failure [ 428.479515][ T4299] usb 10-1: USB disconnect, device number 2 [ 428.539548][ T7643] device batadv_slave_1 entered promiscuous mode [ 428.834172][ T7646] netlink: 4 bytes leftover after parsing attributes in process `syz.3.735'. [ 428.845179][ T26] audit: type=1326 audit(1738644165.402:348): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7641 comm="syz.5.733" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f1a2dd8cda9 code=0x0 [ 428.982995][ T7650] hub 2-0:1.0: USB hub found [ 428.993955][ T7650] hub 2-0:1.0: 1 port detected [ 430.679204][ T7654] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 430.681772][ T7656] loop9: detected capacity change from 0 to 1024 [ 430.726683][ T7641] device batadv_slave_1 left promiscuous mode [ 430.775091][ T7656] EXT4-fs (loop9): mounted filesystem without journal. Quota mode: none. [ 430.811139][ T7656] ext4 filesystem being mounted at /27/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 430.982791][ T7659] loop6: detected capacity change from 0 to 4096 [ 431.110594][ T6740] EXT4-fs (loop9): unmounting filesystem. [ 431.169189][ T7673] NILFS (loop6): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 432.985105][ T7680] loop9: detected capacity change from 0 to 4096 [ 437.302646][ T7711] device vlan2 entered promiscuous mode [ 439.326386][ T7711] device dummy0 entered promiscuous mode [ 439.480962][ T7711] device dummy0 left promiscuous mode [ 439.917943][ T7741] device batadv_slave_1 entered promiscuous mode [ 440.517574][ T26] audit: type=1326 audit(1738644177.072:349): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7733 comm="syz.9.753" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f9c0238cda9 code=0x0 [ 440.907553][ T7733] device batadv_slave_1 left promiscuous mode [ 441.063039][ T7755] IPVS: sync thread started: state = MASTER, mcast_ifn = wg1, syncid = 262145, id = 0 [ 442.467956][ T22] usb 6-1: new high-speed USB device number 6 using dummy_hcd [ 442.501528][ T7771] loop6: detected capacity change from 0 to 512 [ 444.096683][ T7771] EXT4-fs (loop6): mounted filesystem without journal. Quota mode: writeback. [ 444.153320][ T7771] ext4 filesystem being mounted at /86/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 444.166072][ T22] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 444.187726][ T22] usb 6-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 444.200830][ T22] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 444.252427][ T22] usb 6-1: config 0 descriptor?? [ 444.280974][ T22] pwc: Askey VC010 type 2 USB webcam detected. [ 444.995800][ T1277] ieee802154 phy0 wpan0: encryption failed: -22 [ 445.002185][ T1277] ieee802154 phy1 wpan1: encryption failed: -22 [ 445.568590][ T5464] EXT4-fs (loop6): unmounting filesystem. [ 445.635862][ T22] pwc: send_video_command error -71 [ 445.641132][ T22] pwc: Failed to set video mode CIF@30 fps; return code = -71 [ 445.660421][ T22] Philips webcam: probe of 6-1:0.0 failed with error -71 [ 445.688417][ T22] usb 6-1: USB disconnect, device number 6 [ 453.168142][ T7853] loop9: detected capacity change from 0 to 2048 [ 453.565690][ T7853] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 456.970821][ T7879] device vlan2 entered promiscuous mode [ 456.977596][ T7879] device team_slave_0 entered promiscuous mode [ 456.984372][ T7879] device team_slave_1 entered promiscuous mode [ 456.994117][ T7879] device team0 entered promiscuous mode [ 457.968451][ T4262] Bluetooth: hci0: command 0x0406 tx timeout [ 458.084575][ T7879] bond0: (slave vlan2): Enslaving as an active interface with an up link [ 461.653169][ T6561] unregister_netdevice: waiting for vcan0 to become free. Usage count = 2