last executing test programs: 7m13.539195454s ago: executing program 32 (id=24): r0 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) r1 = ioctl$KVM_CREATE_VCPU(r0, 0xae41, 0x0) r2 = dup(r1) ioctl$KVM_SET_CPUID2(r2, 0x4008ae90, &(0x7f0000000000)=ANY=[@ANYBLOB="02000000000000030100000000000000"]) r3 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r3, &(0x7f0000000040)={0x2, 0x4e21, @local}, 0x10) setsockopt$inet_tcp_int(r3, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4) connect$inet(r3, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) setsockopt$inet_tcp_int(r3, 0x6, 0x18, &(0x7f0000000080)=0x80000049, 0x4) setsockopt$inet_tcp_TCP_REPAIR(r3, 0x6, 0x13, &(0x7f00000001c0), 0x4) sendmmsg$inet(r3, &(0x7f0000002680)=[{{0x0, 0x0, &(0x7f0000001440)=[{&(0x7f0000000440)="f01a359aa23ef534d67f7a14beafb1b0fcaa6babe8f6e76a1dd554688d9298fc05", 0x21}], 0x1}}], 0x1, 0x800) r4 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) close_range(r4, 0xffffffffffffffff, 0x0) 7m11.314953449s ago: executing program 4 (id=33): syz_mount_image$udf(&(0x7f0000000000), &(0x7f0000000c80)='./file1\x00', 0x0, &(0x7f0000000180)=ANY=[], 0x1, 0xc4d, &(0x7f0000001b40)="$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") r0 = creat(&(0x7f0000000100)='./bus\x00', 0x0) fcntl$setstatus(r0, 0x4, 0x6100) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) sched_setaffinity(0x0, 0xfffffef7, &(0x7f0000000740)=0x410000002) ioctl$USBDEVFS_DISCONNECT_CLAIM(0xffffffffffffffff, 0x8108551b, 0x0) write$cgroup_type(r0, &(0x7f0000000200), 0x175d9003) 7m4.852588774s ago: executing program 4 (id=50): r0 = socket(0x1e, 0x5, 0x0) setsockopt$packet_tx_ring(r0, 0x10f, 0x87, &(0x7f0000000040)=@req3={0x80000000}, 0xfeda) listen(r0, 0x0) r1 = socket(0x1e, 0x805, 0x0) sendmsg$tipc(r1, &(0x7f0000000080)={&(0x7f0000000100)=@id={0x1e, 0x3, 0x0, {0x4e20, 0x2}}, 0x10, 0x0}, 0x4045094) setsockopt$packet_tx_ring(r1, 0x10f, 0x87, &(0x7f00000000c0)=@req3={0x80000000}, 0x1c) accept4$inet6(r0, 0x0, 0x0, 0x0) sendmsg$tipc(r1, &(0x7f0000000640)={&(0x7f0000000300), 0x10, 0x0}, 0x0) syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) socket$inet_udp(0x2, 0x2, 0x0) unshare(0x22020600) pselect6(0x40, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0xa}, 0x0, &(0x7f0000000200)={0x1fc, 0x3, 0x0, 0x3}, 0x0, 0x0) 7m3.552936223s ago: executing program 4 (id=52): socket$inet_udp(0x2, 0x2, 0x0) r0 = gettid() timer_create(0x0, &(0x7f0000000000)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc)=0x0) timer_settime(r1, 0x1, &(0x7f0000000240)={{0x0, 0x989680}, {0x0, 0x3938700}}, 0x0) r2 = socket$inet_smc(0x2b, 0x1, 0x0) listen(r2, 0x0) accept4(r2, 0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) timer_create(0x0, 0x0, 0x0) 7m1.960603465s ago: executing program 4 (id=54): r0 = syz_open_dev$video4linux(0x0, 0x7, 0x0) openat$fuse(0xffffffffffffff9c, 0x0, 0x42, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=@newlink={0x44, 0x10, 0x40d, 0x70bd26, 0x0, {}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x14, 0x2, 0x0, 0x1, [@IFLA_BR_MCAST_MLD_VERSION={0x5, 0x2c, 0x1}, @IFLA_BR_AGEING_TIME={0x8}]}}}]}, 0x44}, 0x1, 0x0, 0x0, 0x40000}, 0x0) ioctl$VIDIOC_UNSUBSCRIBE_EVENT(r0, 0x4020565b, 0x0) timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004}, 0x0) timer_settime(0x0, 0x0, 0x0, 0x0) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) openat$procfs(0xffffffffffffff9c, &(0x7f0000000080)='/proc/partitions\x00', 0x0, 0x0) r2 = syz_open_dev$vbi(&(0x7f0000000000), 0x3, 0x2) write(r2, &(0x7f00000000c0), 0x0) ioctl$VIDIOC_S_CTRL(r2, 0xc008561c, 0x0) mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x0, 0x0, 0x0, 0x2) 6m59.66281004s ago: executing program 4 (id=59): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000001000000b703000000000000850000002d00000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r1, &(0x7f0000000080)=ANY=[@ANYBLOB="1500000065ffff097b000008003950323030302e4c"], 0x15) r2 = dup(r1) write$FUSE_BMAP(r2, &(0x7f0000000100)={0x18}, 0x18) write$FUSE_DIRENTPLUS(r2, &(0x7f0000000480)=ANY=[@ANYBLOB="9802"], 0x298) write$FUSE_DIRENTPLUS(r2, &(0x7f0000000580)=ANY=[@ANYBLOB="b0"], 0xb0) write$FUSE_NOTIFY_RETRIEVE(r2, &(0x7f00000000c0)={0x14c}, 0x137) mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000b80), 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r2]) r3 = open_tree(0xffffffffffffff9c, &(0x7f00000001c0)='./file0\x00', 0x0) symlinkat(&(0x7f0000000040)='./file0\x00', r3, &(0x7f0000000080)='./file0\x00') 6m58.479067439s ago: executing program 4 (id=63): r0 = io_uring_setup(0x192, &(0x7f0000000300)={0x0, 0x4178, 0x400, 0x8000002, 0x3d7}) r1 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r1, 0x10f, 0x87, &(0x7f0000000040)=@req={0x3fc}, 0x10) r2 = socket(0x1e, 0x4, 0x0) write$binfmt_misc(0xffffffffffffffff, 0x0, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$TIPC_CMD_SET_NODE_ADDR(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000100)={0x24, r4, 0x201, 0x400000, 0x0, {{}, {}, {0x8, 0x11, 0x4}}}, 0x24}}, 0x0) setsockopt$packet_tx_ring(r2, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc}, 0x10) sendmmsg(r2, 0x0, 0x0, 0x9200000000000000) sendmmsg(r1, &(0x7f0000003240), 0x4000000000000e4, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) 6m52.677868769s ago: executing program 33 (id=75): bind$inet6(0xffffffffffffffff, 0x0, 0x0) connect$inet6(0xffffffffffffffff, &(0x7f0000000300)={0xa, 0x4e22, 0x0, @empty}, 0x1c) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000180), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r0, &(0x7f0000006840)={0x2020, 0x0, 0x0}, 0x2020) syz_fuse_handle_req(r0, &(0x7f00000042c0)="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", 0x2000, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) write$FUSE_INIT(r0, &(0x7f0000004200)={0x50, 0x0, r1}, 0x50) syz_fuse_handle_req(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000006780)={0x90}, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_fuse_handle_req(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000006780)={0x90, 0x0, 0x0, {0x5, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000, 0x0, 0x0, 0x0, 0x10b}}}, 0x0, 0x0, 0x0, 0x0, 0x0}) r2 = open(&(0x7f00000001c0)='./file0/file0\x00', 0x2, 0x0) write$binfmt_misc(r2, &(0x7f00000009c0)="0f515a72", 0x4) 6m42.769338778s ago: executing program 34 (id=63): r0 = io_uring_setup(0x192, &(0x7f0000000300)={0x0, 0x4178, 0x400, 0x8000002, 0x3d7}) r1 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r1, 0x10f, 0x87, &(0x7f0000000040)=@req={0x3fc}, 0x10) r2 = socket(0x1e, 0x4, 0x0) write$binfmt_misc(0xffffffffffffffff, 0x0, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$TIPC_CMD_SET_NODE_ADDR(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000100)={0x24, r4, 0x201, 0x400000, 0x0, {{}, {}, {0x8, 0x11, 0x4}}}, 0x24}}, 0x0) setsockopt$packet_tx_ring(r2, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc}, 0x10) sendmmsg(r2, 0x0, 0x0, 0x9200000000000000) sendmmsg(r1, &(0x7f0000003240), 0x4000000000000e4, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) 5m37.881581013s ago: executing program 5 (id=268): r0 = syz_open_dev$evdev(&(0x7f00000000c0), 0x2, 0x0) ioctl$EVIOCSMASK(r0, 0x40104593, &(0x7f0000000000)={0x0, 0x0, 0x0}) r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) bind$bt_l2cap(r1, &(0x7f0000000040)={0x1f, 0x0, @any, 0xfffa}, 0xe) connect$bt_l2cap(r1, &(0x7f0000000080)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x7fa}, 0xe) setsockopt$bt_BT_CHANNEL_POLICY(r1, 0x112, 0xa, &(0x7f00000000c0)=0x2, 0x4) r2 = syz_open_dev$evdev(&(0x7f0000000040), 0xfffffffffffffffc, 0x0) open$dir(&(0x7f0000000080)='./file0\x00', 0xa000, 0x48) ioctl$EVIOCGABS20(r2, 0x80184560, &(0x7f0000000100)=""/198) timerfd_create(0x8, 0x80000) r3 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r3, &(0x7f0000000080)={0x1f, 0xffff, 0x3}, 0x6) syz_genetlink_get_family_id$batadv(&(0x7f0000000380), 0xffffffffffffffff) write(r3, &(0x7f0000000000)="2e000000010002", 0x7) 5m37.628107695s ago: executing program 5 (id=270): setsockopt$packet_int(0xffffffffffffffff, 0x107, 0xa, 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x800}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB], 0x48) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000280)={&(0x7f0000000000)=ANY=[@ANYBLOB], 0x0, 0x4a, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x28) sendmsg$NL80211_CMD_NEW_KEY(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000000)={0x1c, 0x0, 0x0, 0x0, 0x0, {{}, {@val={0x8}, @void}}}, 0x1c}}, 0xc010) ioctl$sock_SIOCBRDELBR(0xffffffffffffffff, 0x89a2, &(0x7f0000000000)='bridge0\x00') syz_emit_ethernet(0x82, &(0x7f0000000300)={@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}, @local, @val={@val={0x88a8, 0x3, 0x1, 0x1}, {0x8100, 0x0, 0x0, 0x4}}, {@ipv6={0x86dd, @gre_packet={0x1, 0x6, "0961d3", 0x44, 0x2f, 0xff, @private1={0xfc, 0x1, '\x00', 0x1}, @loopback, {[], {{0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x880b, 0x0, 0x3}, {0x1}, {0x0, 0x0, 0x1, 0x1}, {0x8, 0x88be, 0x1, {{0x6, 0x1, 0x8, 0x3, 0x0, 0x0, 0x3, 0x2}, 0x1, {0x9}}}, {0x8, 0x22eb, 0x4, {{0x1, 0x2, 0x1, 0x3, 0x1, 0x3, 0x7, 0x6}, 0x2, {0x9, 0xe, 0x0, 0x0, 0x1, 0x0, 0x3, 0x1}}}}}}}}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x6, 0x6, &(0x7f0000000000)=@framed={{0xffffffb4, 0x9, 0x0, 0x0, 0x0, 0x61, 0x11, 0x10}, [@func={0x85, 0x0, 0x1, 0x0, 0x2}, @call={0x85, 0x0, 0x0, 0x8}, @exit]}, &(0x7f0000000080)='GPL\x00', 0x4, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x4, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0xe, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x70) syz_emit_ethernet(0x3a, &(0x7f0000000240)={@multicast, @remote, @val={@void}, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x28, 0x0, 0x0, 0x0, 0x5, 0x0, @dev, @private}, {{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x6, 0x5}}}}}}, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000bc0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x1}}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x401, 0x0, 0x0, {0x1, 0x0, 0x3}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x2c, 0x3, 0xa, 0x101, 0x0, 0x0, {0x1}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz2\x00'}]}, @NFT_MSG_NEWRULE={0x58, 0x6, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_RULE_CHAIN_ID={0x8}, @NFTA_RULE_EXPRESSIONS={0x30, 0x4, 0x0, 0x1, [{0x2c, 0x1, 0x0, 0x1, @bitwise={{0xc}, @val={0x1c, 0x2, 0x0, 0x1, [@NFTA_BITWISE_LEN={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_BITWISE_SREG={0x8, 0x1, 0x1, 0x0, 0x14}, @NFTA_BITWISE_DREG={0x8, 0x2, 0x1, 0x0, 0x12}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0xcc}}, 0x0) r4 = syz_usb_connect(0x0, 0x24, 0x0, 0x0) syz_usb_control_io$uac1(r4, 0x0, 0x0) sendmsg$kcm(0xffffffffffffffff, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r4, 0x0, 0x0) sendmmsg(0xffffffffffffffff, 0x0, 0x0, 0x4000001) socket$nl_generic(0x10, 0x3, 0x10) sendto$llc(0xffffffffffffffff, 0x0, 0x0, 0x40040, 0x0, 0x0) socket$kcm(0x2, 0x5, 0x84) 5m34.532629877s ago: executing program 5 (id=278): r0 = dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$SNDRV_TIMER_IOCTL_CONTINUE(r0, 0x54a2) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x11, 0x3, &(0x7f0000000200)=ANY=[@ANYBLOB="1800000000000004000000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x1, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='contention_end\x00', r1}, 0x10) r2 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) connect$bt_l2cap(r2, &(0x7f0000000040)={0x1f, 0xfff6, @any, 0x0, 0x1}, 0xe) r3 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000300)=ANY=[@ANYBLOB="28000000190001000000000000000000021800000000ff000000000008000100ac141400040008"], 0x28}}, 0x0) sendmmsg$alg(r3, &(0x7f0000000140), 0x4924b68, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000001500)={0x6, 0x13, &(0x7f0000000240)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x4}, {{0x18, 0x1, 0x1, 0x0, r0}}, {}, [@ringbuf_query={{0x18, 0x1, 0x1, 0x0, r3}}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f00000000c0)='GPL\x00', 0x3, 0x0, 0x0, 0x41100, 0x7c, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, &(0x7f0000000180)={0xa, 0x4}, 0x8, 0x10, &(0x7f00000001c0)={0x5, 0xc, 0x6, 0x7}, 0x10, 0x0, 0x0, 0x9, &(0x7f0000001400)=[r0], &(0x7f0000001440)=[{0x0, 0x4, 0x4, 0x724191ce41eb788f}, {0x4, 0x4, 0x3, 0x8}, {0x0, 0x2, 0xb, 0x4}, {0x0, 0x4, 0x0, 0x1}, {0x0, 0x2, 0xb}, {0x5, 0x2, 0x8, 0x8}, {0x4, 0x3, 0xd, 0xb}, {0x0, 0x1, 0xd, 0x8}, {0x1, 0x2, 0xf, 0x4}], 0x10, 0x4, @void, @value}, 0x94) capset(&(0x7f0000000080)={0x20071026}, &(0x7f0000001080)={0x200000, 0x200000}) r4 = socket$netlink(0x10, 0x3, 0x4) writev(r4, &(0x7f0000000300)=[{&(0x7f0000000340)="580000001400192340834b80040d8c560a117436c379000000000000000058000b4824ca945f6400940f6a0325010ebc000000000000008000f0fffeffe809005300fff5dd00000010000100090c100000000000224e0000", 0x58}], 0x1) readv(r4, &(0x7f00000013c0)=[{&(0x7f00000003c0)=""/4096, 0x1000}], 0x1) 5m34.059450739s ago: executing program 5 (id=280): syz_mount_image$ext4(&(0x7f0000000140)='ext4\x00', &(0x7f00000005c0)='./file0\x00', 0x4000, &(0x7f0000000380)={[{@test_dummy_encryption}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x84}}, {@stripe={'stripe', 0x3d, 0x7}}, {@commit={'commit', 0x3d, 0x5}}, {@orlov}, {@barrier_val={'barrier', 0x3d, 0x5}}, {@min_batch_time={'min_batch_time', 0x3d, 0x5}}, {@data_err_abort}]}, 0xd, 0x5d8, &(0x7f0000000c00)="$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") syz_mount_image$exfat(0x0, &(0x7f0000000100)='./bus\x00', 0x4800, 0x0, 0x0, 0x0, &(0x7f0000000000)) chdir(0x0) syz_mount_image$vfat(&(0x7f00000002c0), &(0x7f0000000040)='./bus\x00', 0x2029c1b, 0x0, 0x1, 0x0, &(0x7f0000000080)) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000040)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) renameat2(0xffffffffffffff9c, &(0x7f0000000080)='./bus\x00', 0xffffffffffffff9c, &(0x7f00000003c0)='./file0\x00', 0x4) 5m31.647161616s ago: executing program 5 (id=283): syz_mount_image$ext4(&(0x7f0000000240)='ext3\x00', &(0x7f0000000200)='./file0\x00', 0x840, &(0x7f0000000500)={[{@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x7}}, {@nouser_xattr}, {@data_journal}], [{@obj_type={'obj_type', 0x3d, '#$'}}, {@smackfsfloor={'smackfsfloor', 0x3d, '{$\xe9\'@'}}]}, 0x41, 0x246, &(0x7f0000000ac0)="$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") sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="64000000000101040000000014"], 0x64}}, 0x0) openat$vsock(0xffffff9c, &(0x7f00000001c0), 0x40101, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={0x0, 0x1c}}, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0xea100, 0x0) setsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000000)={@multicast1, @local}, 0xc) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_NMI(r2, 0xae9a) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000380)={[0x0, 0x100000000, 0x0, 0x0, 0x0, 0x0, 0x2004c8, 0x8000000, 0x0, 0x0, 0xfffffffffffffffe]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f00000002c0)={[0x400000000000002, 0x5, 0xfffffffffffffffe, 0x4, 0x2, 0x0, 0xefffffffffffffff, 0x0, 0x0, 0x2000000, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x6], 0x0, 0x41901}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 5m27.995128039s ago: executing program 5 (id=293): setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, 0x0, 0x0) sendmsg$inet(0xffffffffffffffff, 0x0, 0x44080) bind$bt_l2cap(0xffffffffffffffff, 0x0, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000000300)=""/102376, 0x18fe8) r1 = signalfd4(0xffffffffffffffff, 0x0, 0x0, 0x0) mount$9p_fd(0x0, 0x0, 0x0, 0x0, &(0x7f00000001c0)=ANY=[]) sendmsg$RDMA_NLDEV_CMD_GET_CHARDEV(r1, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x20000000}, 0x4001800) r2 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000540), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r2, &(0x7f0000000480)={0x0, 0x18, 0xfa00, {0x0, &(0x7f00000002c0)={0xffffffffffffffff}, 0x13f}}, 0x20) write$RDMA_USER_CM_CMD_SET_OPTION(r2, &(0x7f0000000080)={0xe, 0x18, 0xfa00, @id_afonly={&(0x7f0000000380), r3, 0x0, 0x2, 0x4}}, 0x20) 5m19.987559529s ago: executing program 3 (id=306): ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000000)={'sit0\x00', &(0x7f00000002c0)={'syztnl1\x00', 0x0, 0x0, 0x0, 0x3, 0x0, {{0x7, 0x4, 0x0, 0x0, 0x1c, 0x64, 0x0, 0x0, 0x0, 0x0, @remote, @remote, {[@noop, @noop, @lsrr={0x83, 0x3, 0x5e}]}}}}}) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='hugetlb.2MB.usage_in_bytes\x00', 0x275a, 0x0) write$binfmt_script(r2, &(0x7f0000000240), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x280000b, 0x28011, r2, 0x0) r3 = dup(r1) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000080)={0x0, 0x2, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000300)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f0000000180)={0x0, 0xd000}) ioctl$KVM_NMI(r4, 0xae9a) ioctl$KVM_RUN(r4, 0xae80, 0x0) 5m19.359666494s ago: executing program 3 (id=310): r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102368, 0x18fe0) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000480)={0xffffffffffffffff, 0x0, 0x25, 0x2, @val=@uprobe_multi={0x0, 0x0, 0x0, 0x6, 0x0, 0x1}}, 0x40) r1 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r1, 0xaf01, 0x0) r2 = eventfd(0xffffffff) ioctl$VHOST_SET_LOG_FD(r1, 0x4004af07, &(0x7f0000000240)=r2) ioctl$VHOST_SET_VRING_KICK(r1, 0x4008af20, &(0x7f0000000040)={0x1, r2}) ioctl$VHOST_SET_VRING_ADDR(r1, 0x4028af11, &(0x7f0000000140)={0x0, 0x0, 0x0, &(0x7f0000000500)=""/67, 0x0}) ioctl$VHOST_SET_VRING_ADDR(r1, 0x4028af11, &(0x7f0000000280)={0x1, 0x1, &(0x7f0000000380)=""/247, &(0x7f00000000c0)=""/87, &(0x7f0000000480)=""/74}) ioctl$VHOST_SET_MEM_TABLE(r1, 0x4008af03, &(0x7f0000000680)) ioctl$VHOST_SET_VRING_ERR(r1, 0x4008af22, &(0x7f00000002c0)={0x1, r2}) ioctl$VHOST_VSOCK_SET_RUNNING(r1, 0x4004af61, &(0x7f0000000000)=0x1) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xf, @void, @value}, 0x94) 5m18.687655018s ago: executing program 3 (id=313): syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f000083c000/0x18000)=nil, &(0x7f00000000c0)=[@text64={0x40, &(0x7f0000000280)="f3440f09440f20c03509e9d700440f22c0649d31960200000066bad004b8ea3200001af00fc7ae00800000c421d5144b0766bad004ed0f00d00f23d0410f23950f23f80f06", 0x45}], 0x1, 0x7e, 0x0, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x2a101, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='hugetlb.2MB.usage_in_bytes\x00', 0x275a, 0x0) write$binfmt_script(r2, &(0x7f0000000240), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x280000b, 0x28011, r2, 0x0) r3 = dup(r1) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000080)={0x0, 0x2, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000300)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f0000000180)={0x0, 0xd000}) ioctl$KVM_NMI(r4, 0xae9a) ioctl$KVM_RUN(r4, 0xae80, 0x0) 5m16.462336094s ago: executing program 3 (id=319): bpf$ENABLE_STATS(0x20, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) setxattr$system_posix_acl(0x0, 0x0, 0x0, 0x24, 0x2) syz_mount_image$vfat(&(0x7f00000005c0), &(0x7f0000000600)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="00631dda01aef2456795dd9b26209f1c0f624854ea3dd5a00bd6df44035f5c3ae796fec6d633a0ffad0569794acfef7da01767fd4175f2cd82df769aa2ee7bfe3640554507d2e660c9f9e222a72e1e3e71145c480657d2864e5e276f028d64701ae31cde0ceaf408fdb05c0f4142da00e900000100000149e6d308cbe315789f4baffe39bbced9b1d421d2e290e9fc563b62225f002ee310e1fa7321000000000000d6231001a4b2d467825f3abb0c167e129cf1fa0e7854103f4bf2d3a0194983bc86cbd3d75ccef3c8ac4516dac102"], 0x1, 0x266, &(0x7f0000000340)="$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") open(&(0x7f0000000080)='./bus\x00', 0x400141042, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='blkio.bfq.io_wait_time_recursive\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000000), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) syz_emit_ethernet(0x82, 0x0, 0x0) preadv(r0, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffff23}], 0x1, 0x0, 0x0) mount(&(0x7f0000000180)=@loop={'/dev/loop', 0x0}, &(0x7f0000000140)='./bus\x00', 0x0, 0x1000, 0x0) r1 = open(&(0x7f0000000000)='./bus\x00', 0x14113e, 0x0) write$binfmt_script(r1, &(0x7f0000000080), 0x208e24b) mknod(&(0x7f0000000700)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x40, 0x4) 5m14.524705758s ago: executing program 3 (id=324): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x197dd000) socketpair$unix(0x1, 0x3, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e22}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) fsopen(0x0, 0x0) r3 = socket$inet6(0xa, 0x80002, 0x0) connect$inet6(r3, &(0x7f0000000000)={0xa, 0x0, 0xfffffffd, @local, 0x2}, 0x1c) setsockopt$inet6_mtu(r3, 0x29, 0x17, &(0x7f0000000080)=0x3, 0x4) sendmmsg$inet6(r3, &(0x7f0000003cc0)=[{{0x0, 0x0, &(0x7f0000003980), 0x171}}], 0x400000000000172, 0x4001c00) 5m12.318094065s ago: executing program 35 (id=293): setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, 0x0, 0x0) sendmsg$inet(0xffffffffffffffff, 0x0, 0x44080) bind$bt_l2cap(0xffffffffffffffff, 0x0, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000000300)=""/102376, 0x18fe8) r1 = signalfd4(0xffffffffffffffff, 0x0, 0x0, 0x0) mount$9p_fd(0x0, 0x0, 0x0, 0x0, &(0x7f00000001c0)=ANY=[]) sendmsg$RDMA_NLDEV_CMD_GET_CHARDEV(r1, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x20000000}, 0x4001800) r2 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000540), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r2, &(0x7f0000000480)={0x0, 0x18, 0xfa00, {0x0, &(0x7f00000002c0)={0xffffffffffffffff}, 0x13f}}, 0x20) write$RDMA_USER_CM_CMD_SET_OPTION(r2, &(0x7f0000000080)={0xe, 0x18, 0xfa00, @id_afonly={&(0x7f0000000380), r3, 0x0, 0x2, 0x4}}, 0x20) 5m12.243645075s ago: executing program 3 (id=330): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$packet(0x11, 0x2, 0x300) r3 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r3, 0x8933, &(0x7f0000000140)={'batadv0\x00', 0x0}) r5 = syz_genetlink_get_family_id$batadv(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$BATADV_CMD_SET_MESH(r3, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000000)={0x24, r5, 0x1, 0x0, 0x25dfdbff, {}, [@BATADV_ATTR_GW_MODE={0x5, 0x33, 0x1}, @BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r4}]}, 0x24}, 0x1, 0x0, 0x0, 0x48000}, 0x0) 5m12.047965105s ago: executing program 36 (id=330): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$packet(0x11, 0x2, 0x300) r3 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r3, 0x8933, &(0x7f0000000140)={'batadv0\x00', 0x0}) r5 = syz_genetlink_get_family_id$batadv(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$BATADV_CMD_SET_MESH(r3, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000000)={0x24, r5, 0x1, 0x0, 0x25dfdbff, {}, [@BATADV_ATTR_GW_MODE={0x5, 0x33, 0x1}, @BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r4}]}, 0x24}, 0x1, 0x0, 0x0, 0x48000}, 0x0) 2m53.703320636s ago: executing program 9 (id=599): sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="400000001000", @ANYBLOB="00db00000040000020001280"], 0x40}}, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000300)='blkio.bfq.io_merged_recursive\x00', 0x275a, 0x0) syz_emit_ethernet(0x36, &(0x7f0000000100)=ANY=[@ANYBLOB="000002f0d31209000000bc2e79e995"], 0x0) write$binfmt_script(r2, &(0x7f0000000100), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r2, 0x0) preadv(r2, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffff23}], 0x3e, 0x0, 0x0) syz_emit_ethernet(0x4a, &(0x7f0000000000)=ANY=[@ANYBLOB="aaaaaaaaaaaaffffffffffff86dd600a847500140600fe8000"/34, @ANYRES32=0x41424344], 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe6000/0x18000)=nil, &(0x7f0000000040)=[@text16={0x10, &(0x7f0000000180)="66b9800000c00f326635000800000f300f0f1c9a65660ff3b20618baa000ec672e660f38803d004000000f285473f61366b9800000c00f326635004000000f300f20e06635800000000f22e0f30fa6c8", 0x50}], 0x1, 0x0, 0x0, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x20004000}, 0x14) ioctl$KVM_XEN_HVM_CONFIG(r1, 0x4038ae7a, &(0x7f0000000140)={0x100, 0x640, &(0x7f0000000240)="02e19d2dfa8f6e35b50f080d91ef49d3d9d43c03e74949522ff7b13a19c3886aaa71445dad1d7c85287332e046c59debce995da0b96973bd013b2e749981d1e1e556e3f35b9651bc9b6229f2a989695c475f6f2e43d168d4b020eb7bd8", 0x0, 0x5d}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f00000004c0)=[@text32={0x20, 0x0}], 0x1, 0x0, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={0x0}, 0x10) ioctl$KVM_RUN(r3, 0xae80, 0x0) 2m50.706435047s ago: executing program 9 (id=608): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r0, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r1, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r2, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r3, 0x0) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r5, 0x0) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(r6, &(0x7f0000000000)={0xa, 0x0, 0x0, @local, 0xd}, 0x1c) listen(r4, 0x0) r7 = socket$netlink(0x10, 0x3, 0x8000000004) setsockopt$inet6_tcp_TCP_MD5SIG(r6, 0x6, 0xe, &(0x7f0000000400)={@in6={{0xa, 0x4e23, 0xedb, @dev={0xfe, 0x80, '\x00', 0x13}, 0x6}}, 0x0, 0x0, 0x39, 0x0, "226f3c4855390344bc71eebf4cf186cb7ad25ecccafba7e0568eb13d0bd939e95a16c885a64da01a44705f12b0e6ead85d13b91a6ec414b770d6e94722261e4ddfe331a3b3c175e849a2c14677c6986b"}, 0xd8) writev(r7, &(0x7f00000000c0)=[{&(0x7f00000001c0)="580000001400192340834b80040d8c560a067fbc45ff810500000000000058000b480400945f6400947e570028925a01000000000000008000f0fffeffe809000000fff5dd0000001000010002081000418e00000004fcff", 0x58}], 0x1) 2m48.87430812s ago: executing program 9 (id=611): openat$kvm(0xffffffffffffff9c, 0x0, 0x2688c3, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0x11, 0x4, &(0x7f00000001c0)=ANY=[@ANYBLOB="1801000000000000000000000000000085"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000180)={{0x1, 0x1, 0x18, r0, {0xee01, 0xffffffffffffffff}}, './file0\x00'}) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000580)={&(0x7f0000000540)='jbd2_write_superblock\x00', r1, 0x0, 0xfffffffffffffffe}, 0x18) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) syz_open_dev$usbmon(&(0x7f00000002c0), 0x0, 0x2080) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x7) setpgid(0xffffffffffffffff, 0x0) r2 = getpid() sched_setscheduler(r2, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) semget(0x1, 0x1, 0x200) 2m42.059541178s ago: executing program 9 (id=632): syz_emit_ethernet(0x2a, &(0x7f0000000000)={@link_local, @link_local, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x1c, 0x66, 0x0, 0x0, 0x11, 0x0, @private=0x800001c, @empty=0xe0000001}, {0x0, 0x17c1, 0x8}}}}}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000540)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x40, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000480)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) splice(0xffffffffffffffff, 0x0, r3, 0x0, 0x4, 0x4) ioctl$SNDRV_PCM_IOCTL_HW_REFINE(0xffffffffffffffff, 0xc2604110, &(0x7f0000000000)={0xfffffffc, [[0x7fff, 0x1, 0x0, 0x11, 0x0, 0xfffffffd, 0x0, 0xfffffffa], [0x1, 0x0, 0x0, 0x0, 0x2000c000, 0x5, 0x0, 0x3], [0x0, 0x5, 0x0, 0x40, 0xfffffffe, 0x7, 0x5]], '\x00', [{0x1, 0x3}, {}, {0x4, 0x1}, {0x2, 0x1}, {0x5f08, 0x2006}, {}, {0x6}, {}, {}, {0x4, 0xffff}, {0x5, 0xfffffffc}, {0x0, 0xfffffffc}], '\x00', 0x0, 0x0, 0x0, 0x2, 0x0, 0x35}) prlimit64(0x0, 0xe, 0x0, 0x0) r4 = syz_open_dev$video(&(0x7f0000000000), 0x75, 0x0) ioctl$VIDIOC_G_PARM(r4, 0xc0cc5615, &(0x7f0000000100)={0x1, @capture={0x1000, 0x0, {0x1d8, 0x10}, 0x6, 0x7}}) 2m40.387344019s ago: executing program 9 (id=637): prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) r0 = io_uring_setup(0x2e31, &(0x7f0000000780)={0x0, 0x9864}) r1 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r1, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000000000)=""/74, 0x328000, 0x1000}, 0x1c) setsockopt$XDP_UMEM_COMPLETION_RING(r1, 0x11b, 0x6, &(0x7f0000000080)=0x1, 0x4) r2 = socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$XDP_UMEM_FILL_RING(r1, 0x11b, 0x5, &(0x7f0000000340)=0x8000, 0x4) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r2, 0x8933, &(0x7f0000000200)={'batadv_slave_1\x00', 0x0}) setsockopt$XDP_TX_RING(r1, 0x11b, 0x3, &(0x7f0000000180)=0x2, 0x4) bind$xdp(r1, &(0x7f0000000100)={0x2c, 0x0, r3}, 0x10) close_range(r0, 0xffffffffffffffff, 0x0) r4 = syz_io_uring_setup(0x5c2, &(0x7f0000000140)={0x0, 0x0, 0x80, 0x8000}, 0x0, &(0x7f0000000200)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x4, 0x0, 0x0, 0x4) io_uring_register$IORING_REGISTER_PERSONALITY(r4, 0x9, 0x0, 0x0) r6 = io_uring_register$IORING_REGISTER_PERSONALITY(r4, 0x9, 0x0, 0x0) syz_io_uring_submit(0x0, r5, &(0x7f00000004c0)=@IORING_OP_RECV=@pass_buffer={0x1b, 0x0, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000000), 0x0, 0x10000, 0xfffffffffffffffe, {0x0, r6}}) 2m39.947466432s ago: executing program 9 (id=639): syz_mount_image$hfs(&(0x7f0000000000), &(0x7f0000000080)='./file1\x00', 0x4490, &(0x7f0000002cc0)=ANY=[], 0xfb, 0x27f, &(0x7f0000000480)="$eJzs3T9v00AYx/HfOWkbaFXcPwgJMRUqMaG2LIilCGVgZ2FCQBOkiqhIUMSfKTAj2Nl5C7wARibEjMTGxAvIFnTnC3HSOA5W00vS70dKlNT32M/F5949rqoIwKl1u/rr8/Xf9mGkkkqSbkqRpIpUlnReFyovDg73Dxv12rAdlVyEfRglkeZIm72D+qBQG+civNi+K2sp/TOMR+Wnmh9v3XkZOg+E5a7+ASJpwV+dbnvlxDMbj2boBAIzLbX0Ssuh8wAAhOXn/8jP80t+/R5F0qaf9nvn/ymfQFuhExizrznbU/O/q7Laxp7fc25Tt95zJZzdHnWqxCK5zCsZWT0LTJNXVbpcojOP9xv1a3tPG7VI77TrzXWbrbvnWjJ0O9LZvj26640BtekQxfu+6PowZ/uwk84/1WTteI+Yz3wz3819E+uTav/Wf+W2safJnam470wl+W9l79H1cl6uVUYvV9xBLvojeEN7WVJGRaLOiFpR7w2COC9PF7XaF5X0bjsnam1g1E5O1Hp/VHc0Z0eOm/lg7pkN/dEXVVPr/8h+2psa5cq0bVxLPzKG9qfsWsZuPvFXXfPSwJZR0R6hgPd6pBtafv76zZOHjUb92cy+sFfiBKQxUS86g2BS8pnZF/ZDDnL0zrxTfD/BfjPhBHVP+n8G8reZWWHXXSap/1L1ypZbrNmnuHedvpCObeftPLXH7YzaYNU9n82u4HoYd+thMbuCG7XmunxVujLKEROxz3Py7BYJMlX90APu/wMAAAAAAAAAAAAAAAAAAEyb4/uXg4qyNoXuIwAAAAAAAAAAAAAAAAAAAAAA027ivv/3rpJ3fP8vMHZ/AwAA////DnhI") r0 = openat(0xffffffffffffff9c, &(0x7f0000000540)='./file1\x00', 0x105042, 0x1db) syz_mount_image$exfat(&(0x7f00000009c0), &(0x7f0000000000)='./file1\x00', 0x800800, &(0x7f0000000400)={[{@utf8}, {@iocharset={'iocharset', 0x3d, 'maccenteuro'}}, {@sys_tz}, {@namecase}, {@keep_last_dots}, {@umask={'umask', 0x3d, 0x7f}}, {@iocharset={'iocharset', 0x3d, 'macgaelic'}}, {@fmask={'fmask', 0x3d, 0x101}}, {@sys_tz}, {}]}, 0x1, 0x152b, &(0x7f0000000a00)="$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") sync() writev(r0, &(0x7f0000000140)=[{&(0x7f0000001200)="10", 0x64000}], 0x1) syz_mount_image$hfsplus(&(0x7f00000000c0), &(0x7f0000000980)='./file1\x00', 0x0, &(0x7f00000007c0)={[{@umask={'umask', 0x3d, 0x100}}, {@type={'type', 0x3d, "5e2cadd2"}}, {@creator={'creator', 0x3d, "bd3c66f5"}}, {@nls={'nls', 0x3d, 'cp874'}}, {@gid}, {@umask={'umask', 0x3d, 0xde5}}], [{@permit_directio}, {@seclabel}]}, 0x3, 0x6a4, &(0x7f0000000100)="$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") syz_mount_image$hfsplus(&(0x7f0000000000), &(0x7f0000000080)='./file0\x00', 0x80000c, &(0x7f00000000c0)=ANY=[@ANYBLOB="666f7263652c6e6c733d6575632d6a702c626172726965722c747970653d883b7f382c756d61736b3d30303030303030303030303030303030303030303030362c666f7263652c626172726965722c747970653d49d388242c6769643d", @ANYRESHEX=0x0, @ANYBLOB="2c005dc15e246d930a23b5f4093707c10226afb28f3e2838bb917886a27afece1cbcf9ae2d32c2c3f5bf4bb6fcd73d5c59e463cd173c188e1eefaba6fceaeb5840cbeb145a56ad674e7f2f8c49eaf5b1c65eb6d762300b8c5c2ff69671e6b209000000", @ANYRES64=0x0, @ANYBLOB="49a8a1a7ccdfc7eb0a5e6d760f583ec85ed57dd1cb6163e4bbbabf11b2b4e644d954129ea6913927eeddef778da5dd9b83ddfb0d2ce6120fe01dc022cef79b54c9adbec51fd531c0f4f39300c1d9151c288e2a83750632863010599543349a282df9d20c7f8843d2c789aa507951e60572d03e745e367c5cc76b3a8f89b7427458c89f220488ddf560f7da5f2c8e5541bc4bf055c87531357ca2267e9cbe1d3e92567c", @ANYRESOCT, @ANYRESDEC=0x0], 0x2, 0x6e2, &(0x7f0000000c80)="$eJzs3UtoHOcdAPD/rFarXRUcOfEjLYEsMaSlorZkobTqpW4pRYdQQnroebHlWHgtB0kpsim10se9h5x6Sg+6hR5Keje054ZA8VXHQCGXnHRTmdmZ1Ui72l3ZeiX9/cTMfDPfc/6zM7MPxATwf2txOqpPI4nF6bc30vXtrbn22NbcRJ7djohaRFQiqp1FJCuR5d7Kp/h2ujEvn8R4/34+Wl5499lX21901qr5lNWrlOqPota7aTOfohkRY/my1yFji08Pdr+vvduHtjeqpLuHacCuFYGLv7xQq/DCdntsdvM++U82H1T9KOctcE4lnftmj6mIyYioR3Tu+vnVoXK6ozt+m2c9AAAAADiqxtGrvLQTO7ERF05iOAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAPBNlT//P8mnSpFuRlI8/7+Wb4s8fQ4NfxDi5xOd5dOTHwwAAAAAAAAAnLjXd2InNuJCsb6bZL/5v1H6jf9b8UGsxVKsxvXYiFasx3qsxmxETJUaqm201tdXZ7Oa0bg0oObN+KxPzZuHj/HWce80AAAAAAAAAJxv9SH598d7t/0+Fvd+/wcAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAgPMgiRjrLLLpUpGeiko1IuoRUUvLbUZ8VqS/JpJ+G5+e/jgAAADghdT3ryb1Eeq89CR2YiMuFOu7SfaZ/0r2ebkeH8RKrMdyrEc7luJO/hk6/dRf2d6aa29vzT1Ip952f/rlkYaetRid7x769/xqVqIRd2M523I9bkcSu5lK3sqr21tz6fJB/3F9mI4p+UluwGjGSuk76ezqp1n6z/u/RageaRefU+XQnKksd7wbkZl8bGmNi0UE+kdi6NGpDuxpNirdb34uDe6pf8w/HNz75IFSfb+5ORMHI3EzKt0jdGVwJCK++49Pfn2vvXL/3t216fOzS309GVriYCTmSpG4+g2KxHAzWSQud9cX4xfxq5iOLyfeidVYjt9EK9ZjqVnkt/LXczqfGhypzyfLa+8MG0l6Tja7169+Y2rGvjFFM36epVrxRnZML8RyJPEwIpbirezvZsx2rwZ7R/jyCGd9ZYQrbcm172WLbpiicXjZv43W5HFJ43qxFNfyNXcqyytv2YvSy32jVNzrRr8flVS/kyfSFv4w8P5w2g5GYrYUiVcOe710QvrX3XS+1l65v3qv9f6I/b2ZL9Pz6E/n6i6RHuGXo57v3MVsnmTn1EyW90r3Drs/XrX8F5eOSk/e5W69zpn6y3gYd/adqT+M+ZiPhaz0laz0eM8dK8272m1p/zU8zUvfaVW7P+yU3289jHbn/RAA59vk9ydrjf82/t34uPHHxr3G2/WfTfxo4rVajP9r/MfVmbE3K68lf4+P43d7n/8BAAAAAAAAAAAAAAAAAAAAAAAAAAAAAIDnt/bo8f1Wu7202j9R6Z+VDK7Vau8WDxIbUGZfIskflTNC4WTt0ePdoQ0OTkzkw3vO6seZKJ7WOLxw8wSHkWwePF714ceieMrTCF0kPQFPKz/3mIue97aMn4NDeTDRHFImiZEbLF6wpayjv3ob/Y7XWETfYQy5cIwdx9UHOEs31h+8f2Pt0eMfLD9ovbf03tLK+Pz8wszC/FtzN+4ut5dmOvNShVN5+C1wGspvJ7pqEfH68LoDHtQKAAAAAAAAAAAAnKDT+F+Is95HAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA4OttcTqqTyOJ2ZnrM+n69tZcO52K9F7JakRUIiL5bUTyz4hb8eTZrTRjqtRcclg/Hy0vvPvsq+0v9tqqFuUrEZuH1hvNZj5FMyLG8uVxtXd7eHu1veREn+ykG5k0YNfyJZy5/wUAAP//GP3tFA==") r1 = socket$inet_icmp(0x2, 0x2, 0x1) sendto$inet(r1, 0x0, 0xfffffffffffffe21, 0x20180, 0x0, 0x0) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) syz_80211_inject_frame(0x0, 0x0, 0x262) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={0xffffffffffffffff, 0x18000000000002a0, 0xe80, 0x0, &(0x7f0000000480)="b9ff03076844268cb89e14f088a847", 0x0, 0xfe, 0x60000009, 0x0, 0x0, 0x0, 0x0}, 0x50) syz_mount_image$fuse(0x0, &(0x7f0000000200)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000200)='./bus\x00', 0x141842, 0x0) r2 = syz_init_net_socket$x25(0x9, 0x5, 0x0) fcntl$getflags(r2, 0xb) ioctl$SIOCX25SCALLUSERDATA(r2, 0x891d, 0x0) 2m22.176108306s ago: executing program 37 (id=639): syz_mount_image$hfs(&(0x7f0000000000), &(0x7f0000000080)='./file1\x00', 0x4490, &(0x7f0000002cc0)=ANY=[], 0xfb, 0x27f, &(0x7f0000000480)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000540)='./file1\x00', 0x105042, 0x1db) syz_mount_image$exfat(&(0x7f00000009c0), &(0x7f0000000000)='./file1\x00', 0x800800, &(0x7f0000000400)={[{@utf8}, {@iocharset={'iocharset', 0x3d, 'maccenteuro'}}, {@sys_tz}, {@namecase}, {@keep_last_dots}, {@umask={'umask', 0x3d, 0x7f}}, {@iocharset={'iocharset', 0x3d, 'macgaelic'}}, {@fmask={'fmask', 0x3d, 0x101}}, {@sys_tz}, {}]}, 0x1, 0x152b, &(0x7f0000000a00)="$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") sync() writev(r0, &(0x7f0000000140)=[{&(0x7f0000001200)="10", 0x64000}], 0x1) syz_mount_image$hfsplus(&(0x7f00000000c0), &(0x7f0000000980)='./file1\x00', 0x0, &(0x7f00000007c0)={[{@umask={'umask', 0x3d, 0x100}}, {@type={'type', 0x3d, "5e2cadd2"}}, {@creator={'creator', 0x3d, "bd3c66f5"}}, {@nls={'nls', 0x3d, 'cp874'}}, {@gid}, {@umask={'umask', 0x3d, 0xde5}}], [{@permit_directio}, {@seclabel}]}, 0x3, 0x6a4, &(0x7f0000000100)="$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") syz_mount_image$hfsplus(&(0x7f0000000000), &(0x7f0000000080)='./file0\x00', 0x80000c, &(0x7f00000000c0)=ANY=[@ANYBLOB="666f7263652c6e6c733d6575632d6a702c626172726965722c747970653d883b7f382c756d61736b3d30303030303030303030303030303030303030303030362c666f7263652c626172726965722c747970653d49d388242c6769643d", @ANYRESHEX=0x0, @ANYBLOB="2c005dc15e246d930a23b5f4093707c10226afb28f3e2838bb917886a27afece1cbcf9ae2d32c2c3f5bf4bb6fcd73d5c59e463cd173c188e1eefaba6fceaeb5840cbeb145a56ad674e7f2f8c49eaf5b1c65eb6d762300b8c5c2ff69671e6b209000000", @ANYRES64=0x0, @ANYBLOB="49a8a1a7ccdfc7eb0a5e6d760f583ec85ed57dd1cb6163e4bbbabf11b2b4e644d954129ea6913927eeddef778da5dd9b83ddfb0d2ce6120fe01dc022cef79b54c9adbec51fd531c0f4f39300c1d9151c288e2a83750632863010599543349a282df9d20c7f8843d2c789aa507951e60572d03e745e367c5cc76b3a8f89b7427458c89f220488ddf560f7da5f2c8e5541bc4bf055c87531357ca2267e9cbe1d3e92567c", @ANYRESOCT, @ANYRESDEC=0x0], 0x2, 0x6e2, &(0x7f0000000c80)="$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") r1 = socket$inet_icmp(0x2, 0x2, 0x1) sendto$inet(r1, 0x0, 0xfffffffffffffe21, 0x20180, 0x0, 0x0) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) syz_80211_inject_frame(0x0, 0x0, 0x262) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={0xffffffffffffffff, 0x18000000000002a0, 0xe80, 0x0, &(0x7f0000000480)="b9ff03076844268cb89e14f088a847", 0x0, 0xfe, 0x60000009, 0x0, 0x0, 0x0, 0x0}, 0x50) syz_mount_image$fuse(0x0, &(0x7f0000000200)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000200)='./bus\x00', 0x141842, 0x0) r2 = syz_init_net_socket$x25(0x9, 0x5, 0x0) fcntl$getflags(r2, 0xb) ioctl$SIOCX25SCALLUSERDATA(r2, 0x891d, 0x0) 1m59.372876576s ago: executing program 8 (id=721): syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) socket(0x400000000010, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000180)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x11, 0xf, &(0x7f0000000340)=@ringbuf={{}, {{0x18, 0x1, 0x1, 0x0, r3}}, {}, [], {{}, {}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000001dc0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x21, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r4}, 0x2d) r5 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./cgroup.cpu/cgroup.procs\x00', 0x0, 0x0) r6 = openat$tcp_mem(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/net/ipv4/tcp_wmem\x00', 0x1, 0x0) sendfile(r6, r5, 0x0, 0x3a) 1m56.384674347s ago: executing program 8 (id=723): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000140)='contention_end\x00', r0}, 0x10) mkdirat(0xffffffffffffff9c, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./file1\x00', 0x64) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000340), 0x0, &(0x7f0000000080)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) 1m53.971433294s ago: executing program 8 (id=726): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r3 = syz_open_dev$dri(&(0x7f0000000180), 0x0, 0x0) r4 = syz_open_dev$dri(&(0x7f0000000180), 0x3ffffffffffffffd, 0x0) r5 = syz_open_dev$dri(&(0x7f0000000040), 0xd21, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r5, 0xc04064a0, &(0x7f00000004c0)={0x0, &(0x7f00000000c0)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_GETCRTC(r5, 0xc06864a1, &(0x7f00000003c0)={0x0, 0x0, r6, 0x0}) ioctl$DRM_IOCTL_MODE_GETFB2(r4, 0xc06864ce, &(0x7f0000000440)={r7, 0x0, 0x0, 0x0, 0x0, [0x0], [], [0x0, 0x0, 0x0, 0xfffffffc], [0x0, 0x4]}) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r4, 0xc00c642d, &(0x7f0000000200)={r8, 0x0, 0xffffffffffffffff}) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r3, 0xc00c642e, &(0x7f0000000000)={0x0, 0x0, r9}) close_range(r3, 0xffffffffffffffff, 0x0) 1m52.566151103s ago: executing program 8 (id=727): socket(0x2, 0x80805, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) socket$packet(0x11, 0x3, 0x300) socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_route(0x10, 0x3, 0x0) socket(0x1, 0x803, 0x0) pipe(&(0x7f0000000100)) r0 = socket(0x840000000002, 0x3, 0xff) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000100)={0x0, 0x0, 0x0}, &(0x7f0000000140)=0xc) syz_mount_image$exfat(&(0x7f00000000c0), &(0x7f0000000280)='\xe9\x1fq\x89Y\x1e\x923aK\x00', 0x20000848, &(0x7f00000003c0)=ANY=[@ANYBLOB='iocharset=ascii,discard,dmask=00000000000000000000007,uid=', @ANYRESHEX=r2, @ANYBLOB="00646d61736b3d303030303030303030303030303135322c696f636861720300000069736f383835392d312c6769643d00000000000000", @ANYRESHEX=r3, @ANYRESHEX=r1, @ANYBLOB="1e1456b97f43020078423fad8569494e28e58bd88d6b502cfe943956d9f8efde4f8659ce67cc37b7e1d988638175e2db1b654dccc1a203850b09873b0184822257d4c12aaf0b5efe2105301b585b58256d90fffa59ece5882178fb533b8ed99c4c2c6d1ba6d7f5dac0cad0eaeee76479fb488f67037b1b2a880c53fe952d632ba034c8d2758f1bd92565024144b0862cb3639c534e323806be01dd7a6252a5999b81aa1f34d13acf872bbbfc5bb3bd8b2cfe4db9838e94", @ANYRESOCT=r3], 0x81, 0x14f5, &(0x7f0000001580)="$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") mount$bind(&(0x7f00000002c0)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x109041, 0x0) mount$bind(0x0, &(0x7f0000000140)='./file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f0000000040)='./file0/file0\x00', &(0x7f0000000340)='./file0/file0\x00', 0x0, 0x81105a, 0x0) mount$bind(&(0x7f0000000880)='./file0/../file0\x00', &(0x7f0000000440)='./file0/file0\x00', 0x0, 0x1adc11, 0x0) mount$bind(&(0x7f0000000100)='./file0/../file0\x00', &(0x7f0000000080)='./file0/file0/file0\x00', 0x0, 0x887008, 0x0) r4 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='mountinfo\x00') read$FUSE(r4, &(0x7f0000006b40)={0x2020}, 0x206e) 1m51.801440019s ago: executing program 8 (id=730): bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x2ddc4000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'veth0_to_team\x00'}) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r4 = socket(0x400000000010, 0x3, 0x0) r5 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r6, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000280)=@newtfilter={0x3c, 0x2c, 0xd27, 0x70bd28, 0x0, {0x0, 0x0, 0x0, r6, {0x4, 0x7}, {}, {0x7, 0xfff1}}, [@filter_kind_options=@f_flower={{0xb}, {0xc, 0x2, [@TCA_FLOWER_KEY_ENC_IPV4_DST={0x8, 0x1d, @rand_addr=0x64010105}]}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x80}, 0x800) 1m48.559303071s ago: executing program 8 (id=734): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e21, @multicast1}, 0x10) connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000040)='bic\x00', 0x4) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x16, &(0x7f0000000000)=[@mss, @sack_perm, @window={0x3, 0x7}, @mss={0x2, 0xfff}, @window={0x3, 0x0, 0x401}, @window], 0x20000000000000e4) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000380)={0x1, &(0x7f0000000500)="0bde15cd082c41916a8d64857d7f0bab5bcd6a65236c97a92e0f0cb4e0cc85588f4ac6566e264ffdcedd51c9129b8e911c8dde886cd8ed61ead4517133f083333106e0595d2b6f649daa8a50d663f0a6b2435801a81f7c8db66102a9d674aee68dfc512abdc85ae8e9da747119cfb004d376e3437754b0ab7ae83d7177e73b5eb9186d77c006d4adb701b5e935640fe7cfbb9891ab20de6c2a004656515f26c4579f5f54fafc19abbee72d7036730805677ce0524e3abb5c3c396a7e2c3280e8dd2cbd2de0226a8e84979ddc79b2547bda1e6ed7359877e8361e0d04fdf995de13943ef3", &(0x7f0000000280)=""/132}, 0x20) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f00000001c0), 0x4) sendto$inet(r0, &(0x7f0000000340)='\x00', 0x1, 0x0, 0x0, 0x0) sendto$inet(r0, &(0x7f0000000000), 0xffffffffffffff94, 0x12, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) recvfrom$inet(r0, &(0x7f0000000080)=""/8, 0xfffffffffffffd0b, 0xc9100120, 0x0, 0xfffffffffffffd25) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x9, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000", @ANYRES32, @ANYBLOB="0000000000000000b7080000b2e900007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00'}, 0x10) connect$inet(0xffffffffffffffff, &(0x7f00000009c0)={0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0x1e}}, 0x10) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a3200000000140000001100"], 0x7c}}, 0x880) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000001000)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a80000000160a0103000000000000000002000000540003804000038014000100626f6e645f736c6176655f300000000014000100736974300000000000000000000000001400010073697430000000000000000000000000080002400000000008000140000000000900020073797a31000000000900010073797a30"], 0xa8}, 0x1, 0x0, 0x0, 0x8000}, 0x0) 1m47.930915556s ago: executing program 38 (id=734): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e21, @multicast1}, 0x10) connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000040)='bic\x00', 0x4) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x16, &(0x7f0000000000)=[@mss, @sack_perm, @window={0x3, 0x7}, @mss={0x2, 0xfff}, @window={0x3, 0x0, 0x401}, @window], 0x20000000000000e4) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000380)={0x1, &(0x7f0000000500)="0bde15cd082c41916a8d64857d7f0bab5bcd6a65236c97a92e0f0cb4e0cc85588f4ac6566e264ffdcedd51c9129b8e911c8dde886cd8ed61ead4517133f083333106e0595d2b6f649daa8a50d663f0a6b2435801a81f7c8db66102a9d674aee68dfc512abdc85ae8e9da747119cfb004d376e3437754b0ab7ae83d7177e73b5eb9186d77c006d4adb701b5e935640fe7cfbb9891ab20de6c2a004656515f26c4579f5f54fafc19abbee72d7036730805677ce0524e3abb5c3c396a7e2c3280e8dd2cbd2de0226a8e84979ddc79b2547bda1e6ed7359877e8361e0d04fdf995de13943ef3", &(0x7f0000000280)=""/132}, 0x20) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f00000001c0), 0x4) sendto$inet(r0, &(0x7f0000000340)='\x00', 0x1, 0x0, 0x0, 0x0) sendto$inet(r0, &(0x7f0000000000), 0xffffffffffffff94, 0x12, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) recvfrom$inet(r0, &(0x7f0000000080)=""/8, 0xfffffffffffffd0b, 0xc9100120, 0x0, 0xfffffffffffffd25) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x9, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000", @ANYRES32, @ANYBLOB="0000000000000000b7080000b2e900007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00'}, 0x10) connect$inet(0xffffffffffffffff, &(0x7f00000009c0)={0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0x1e}}, 0x10) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a3200000000140000001100"], 0x7c}}, 0x880) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000001000)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a80000000160a0103000000000000000002000000540003804000038014000100626f6e645f736c6176655f300000000014000100736974300000000000000000000000001400010073697430000000000000000000000000080002400000000008000140000000000900020073797a31000000000900010073797a30"], 0xa8}, 0x1, 0x0, 0x0, 0x8000}, 0x0) 56.830691233s ago: executing program 6 (id=824): renameat(0xffffffffffffff9c, 0x0, 0xffffffffffffffff, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0xd, 0x3, &(0x7f0000000000)=@framed, &(0x7f00000000c0)='GPL\x00', 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sock_ops, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r3 = openat$uinput(0xffffffffffffff9c, 0x0, 0x2, 0x0) write$input_event(r3, 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x40, 0x0) r4 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r4, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r4, 0x0, 0x0) write$FUSE_INIT(r4, 0x0, 0x0) fchmodat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x0) 55.162358225s ago: executing program 6 (id=826): socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)) pipe(&(0x7f0000002480)) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'rng\x00', 0x0, 0x0, 'drbg_nopr_sha512\x00'}, 0x58) syz_emit_ethernet(0x2a, &(0x7f0000000080)=ANY=[@ANYBLOB="fffffffff71f780c293bcc3fffffaaaaaaaaaa0008060018080006040001aaaaaaaaaaaa"], 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000480)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010600000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff1b000000020000000900010073797a30000001000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000440)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a3c000000120a01020000000000000000020000000900020073797a310000000008000440000000000900010073797a3000000000080003400000000a14000000110001"], 0x64}}, 0x0) sendmsg$NFT_MSG_GETOBJ_RESET(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000600)={&(0x7f0000000a00)={0x1c, 0x15, 0xa, 0x903, 0x0, 0x0, {0x0, 0x0, 0x8}, [@NFTA_OBJ_TYPE={0x8, 0x3, 0x1, 0x0, 0x2}]}, 0x1c}, 0x1, 0x0, 0x0, 0x8009}, 0x0) 53.561955186s ago: executing program 6 (id=829): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee2, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) socketpair$unix(0x1, 0x2, 0x0, 0x0) r3 = syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r3, 0xc04064a0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000440)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_GETCONNECTOR(r3, 0xc05064a7, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)=[0x0], &(0x7f0000000540), 0x0, 0x1, 0x0, 0x0, r4}) ioctl$DRM_IOCTL_MODE_SETPROPERTY(r3, 0xc01064ab, &(0x7f0000000e00)={0x1, r5, r4}) 52.106948656s ago: executing program 6 (id=831): socket$pppl2tp(0x18, 0x1, 0x1) r0 = socket$nl_route(0x10, 0x3, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) syz_mount_image$ext4(&(0x7f0000000100)='ext4\x00', &(0x7f00000001c0)='./file0/file0\x00', 0x210a092, &(0x7f0000000080), 0x1, 0x549, &(0x7f0000001800)="$eJzs3c9vI1cdAPDvTH65222zCz1ABewChQWt1t5421XVS8sFhKpKiIoD4rANiTcKseMQO6UJkUj/BpBA4gR/AgckDkg9ceDGEYkDQpQDUoEItEHiYDRjJ+smNmtqx+7Gn480O/Pmzcz3PWdn3vNz4hfA1LoeEQcRMR8Rb0TEYmd/0lnilfaSHffgcH/l6HB/JYlW6/W/J3l+ti+6zsk82blmISK+/pWIbydn4zZ29zaWq9XKdiddata2So3dvVvrteW1ylpls1y+u3T39ot3XiiPrK7Xar9478vrr37j17/65Lu/O/ji97NiXe7kdddjlNpVnzuJk5mNiFfPI9gEzHTW8xMuBx9MGhEfiYjP5Pf/Yszk/zsBgIus1VqM1mJ3GgC46NJ8DCxJixGRpp1OQLE9hvdMXEqr9Ubz5v36zuZqe6zsSsyl99erldtXF/7w3fzguSRLL+V5eX6eLp9K34mIqxHxo4Un8nRxpV5dnUyXBwCm3pPd7X9E/GshTYvFgU7t8akeAPDYKEy6AADA2Gn/AWD6aP8BYPoM0P53Puw/OPeyAADj4f0/AEwf7T8ATB/tPwBMla+99lq2tI4633+9+ubuzkb9zVurlcZGsbazUlypb28V1+r1tfw7e2qPul61Xt9aej523io1K41mqbG7d69W39ls3su/1/teZW4stQIA/per1975fRIRBy89kS/RNZeDthoutnSERwGPl5lhTtZBgMea2b5geg3UhOedhN+ee1mAyej5Zd6Fnpvv95P/I4jfM4IPlRsfH3z83xzPcLEY2Yfp9cHG/18eeTmA8TP+D9Or1UpOz/k/f5IFAFxIQ/wKX+sHo+qEABP1qMm8R/L5PwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAFwwlyPiO5GkxXwu8DT7Ny0WI56KiCsxl9xfr1ZuR8TTcS0i5hay9NKkCw0ADCn9a9KZ/+vG4nOXT+fOJ/9eyNcR8b2fvv7jt5abze2lbP8/TvYvHE8fVn543hDzCgIAg/vzIAfl7Xe5s+56I//gcH/leDnHMp7x3pdOJh9dOTrcz5d2zmy0Wq1WRCHvS1z6ZxKznXMKEfFsRMyMIP7B2xHxsV71T/KxkSudmU+740cn9lNjjZ++L36a57XX2cv30RGUBabNO9nz55Ve918a1/N17/u/kD+hhpc//woRx8++o674s51IMz3iZ/f89UFjPP+br57Z2Vps570d8exsr/jJSfykT/znBoz/x0986ocv98lr/SziRvSO3x2r1KxtlRq7e7fWa8trlbXKZrl8d+nu7RfvvFAu5WPUpeOR6rP+9tLNp/uVLav/pT7xCz3rP39y7ucGrP/P//PGtz79MLlwOv4XPtv75/9Mz/htWZv4+QHjL1/6Zd/pu7P4q33q/6if/80B47/7l73VAQ8FAMagsbu3sVytVraH2sjehY7iOmc2siIOdvBxd3G4oH+KfGNEL0ufjawzNsjBc+f1qp77xuxJX3G0V/5mdsUxVycdeS2G2ngwrliTeyYB4/Hwpp90SQAAAAAAAAAAAAAAgH7G8adLk64jAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAF9d/AwAA//8+JMPM") prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, r0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x2000000}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="0e000000040000000800000008"], 0x48) r4 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='sched_switch\x00', r4}, 0x10) socket$inet_udp(0x2, 0x2, 0x0) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) r5 = syz_open_procfs(0x0, &(0x7f0000000040)='smaps_rollup\x00') read$FUSE(r5, &(0x7f00000007c0)={0x2020}, 0x2020) 50.775382645s ago: executing program 6 (id=836): syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000680)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x804051, 0x0, 0x1, 0x0, &(0x7f0000000d40)) rmdir(&(0x7f0000000400)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') 49.654390403s ago: executing program 6 (id=838): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) creat(&(0x7f0000000300)='./file0\x00', 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r2, 0x6, 0x13, 0x0, 0x0) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r2, 0x6, 0x14, &(0x7f0000000100)=0x2, 0x4) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000380)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) r3 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000600)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0xf, &(0x7f0000000340)=@ringbuf={{}, {{0x18, 0x1, 0x1, 0x0, r3}}, {}, [], {{}, {}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000001dc0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r4}, 0x2d) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) r6 = fcntl$dupfd(r5, 0x0, r5) setsockopt$IPT_SO_SET_REPLACE(r6, 0x4000000000000, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0xc08, 0x3, 0x468, 0xc, 0x5002004a, 0xb, 0x310, 0xea13, 0x3d0, 0x3c8, 0x3c8, 0x3d0, 0x3c8, 0x3, 0x0, {[{{@ip={@rand_addr, @local, 0x0, 0x0, 'erspan0\x00', 'ip6tnl0\x00', {}, {}, 0x6}, 0x0, 0x2c8, 0x310, 0x0, {}, [@common=@unspec=@bpf1={{0x230}, @bytecode={0x0, 0x2, 0x0, [{}, {0x16}]}}, @common=@ttl={{0x28}}]}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'pptp\x00'}}}, {{@uncond, 0x0, 0x98, 0xc0, 0x0, {}, [@inet=@rpfilter={{0x28}}]}, @common=@unspec=@NFQUEUE2={0x28}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x4c8) 32.771150531s ago: executing program 39 (id=838): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) creat(&(0x7f0000000300)='./file0\x00', 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r2, 0x6, 0x13, 0x0, 0x0) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r2, 0x6, 0x14, &(0x7f0000000100)=0x2, 0x4) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000380)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) r3 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000600)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0xf, &(0x7f0000000340)=@ringbuf={{}, {{0x18, 0x1, 0x1, 0x0, r3}}, {}, [], {{}, {}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000001dc0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r4}, 0x2d) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) r6 = fcntl$dupfd(r5, 0x0, r5) setsockopt$IPT_SO_SET_REPLACE(r6, 0x4000000000000, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0xc08, 0x3, 0x468, 0xc, 0x5002004a, 0xb, 0x310, 0xea13, 0x3d0, 0x3c8, 0x3c8, 0x3d0, 0x3c8, 0x3, 0x0, {[{{@ip={@rand_addr, @local, 0x0, 0x0, 'erspan0\x00', 'ip6tnl0\x00', {}, {}, 0x6}, 0x0, 0x2c8, 0x310, 0x0, {}, [@common=@unspec=@bpf1={{0x230}, @bytecode={0x0, 0x2, 0x0, [{}, {0x16}]}}, @common=@ttl={{0x28}}]}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'pptp\x00'}}}, {{@uncond, 0x0, 0x98, 0xc0, 0x0, {}, [@inet=@rpfilter={{0x28}}]}, @common=@unspec=@NFQUEUE2={0x28}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x4c8) 17.756306996s ago: executing program 7 (id=893): r0 = bpf$MAP_CREATE(0x0, 0x0, 0x50) fcntl$getownex(r0, 0x10, &(0x7f0000000000)) openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) syz_mount_image$ext4(&(0x7f0000000380)='ext4\x00', &(0x7f0000000000)='./bus\x00', 0x20c006, &(0x7f0000000040), 0x41, 0x43d, &(0x7f0000000900)="$eJzs289rHFUcAPDv7Cap/aFdS/3RWDVaxeCPpElr7cGLouBBQdBDPcYkLbHbRpoItgSNIvUoBe/iUfAv8KQXUU+CV71LoUgurXpZmcxMsrvZTbtxk63u5wOTvDfzNu99d+btvnkvE0DfGkl/JBH7IuLXiNifZRsLjGS/bqwsTf+5sjSdRK32xh/JarnrK0vTRdHidXuLzEBE6ZMkHmhR78LFS2enqtXZC3l+fPHcu+MLFy89M3du6szsmdnzkydPHj828dyJyWe7Emca1/XhD+YPH3rlrSuvTZ+68vaPXydF/E1xdMnIZgcfr9W6XF1v3VmXTgZ62BA6Us66aQyu9v/9UY71k7c/Xv64p40DtlWtVqvd2/7wcg34H0ui1y0AeqP4ok/vf4tth4Yet4VrL2Q3QGncN/ItOzIQpbzMYNP9bTeNRMSp5b++SLfYnnkIAIAG36bjn6fz8V/Dwk8p6ueF7srXUCoRcXdEHIiIExFxMCLuiVgte19E3N9h/c2LJBvHP6WrHf7JjqTjv+fzta3G8V8x+otKOeLvYrhcicHk9Fx19mj+nozG4K40P7FJHd+99Mtn7Y7Vj//SLa2/GAvm7bg6sKvxNTNTi1P/JuZ61z6KGB5oFX+ythKQXhaHImJ4i3XMPfnV4XbHbh5/o6H6TBfWmWpfRjyRnf/laIq/kKbGl9uuT47fEdXZo+PFVbHRTz9ffr1d/Z3G323p+d/T8vpfi7+S1K/XLnRex+XfPm17T7PV638oebNh3/tTi4sXJiKGklezRtfvn2wqN7lePo1/9Ejr/n8gincia0B6ET8YEQ9FxMN52x+JiEcj4sgm8f/w4mPvNO5JOoh/e6Xxz3R0/tcTQ9G8p3WifPb7bxoqrUQH8afn//hqajTfcyuff7fSrq1dzQAAAPDfU4qIfZGUxtbSpdLYWPY//AdjT6k6v7D41On5987PZM8IVGKwVMx0ZfPB2XzoRH5bX+Qnm/LH8nnjz8u7V/Nj0/PVmV4HD31ub5v+n/q93OvWAdvO81rQv/R/6F/6P/Qv/R/6V4v+v7sX7QB2Xqvv/w970A5g5zX1f8t+0Efc/0P/0v+hf+n/0JcWdsfNH5KXkNiQiNJt0QyJbUr0+pMJAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACgO/4JAAD//yzB6iM=") r1 = open(&(0x7f00000005c0)='./bus\x00', 0x64842, 0x1b5) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x5, &(0x7f00000002c0)=ANY=[@ANYBLOB], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x200000, @void, @value}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000680)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x804051, 0x0, 0x1, 0x0, &(0x7f0000000d40)) rmdir(&(0x7f0000000400)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') pwritev2(r1, &(0x7f0000000240)=[{&(0x7f0000000000)="85", 0x7a000}], 0x1, 0x33000, 0x0, 0x3) 16.595486274s ago: executing program 7 (id=895): socket$pppl2tp(0x18, 0x1, 0x1) r0 = socket$nl_route(0x10, 0x3, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) syz_mount_image$ext4(&(0x7f0000000100)='ext4\x00', &(0x7f00000001c0)='./file0/file0\x00', 0x210a092, &(0x7f0000000080), 0x1, 0x549, &(0x7f0000001800)="$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") prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, r0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x2000000}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="0e000000040000000800000008"], 0x48) r4 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='sched_switch\x00', r4}, 0x10) socket$inet_udp(0x2, 0x2, 0x0) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) r5 = syz_open_procfs(0x0, &(0x7f0000000040)='smaps_rollup\x00') read$FUSE(r5, &(0x7f00000007c0)={0x2020}, 0x2020) 14.889692596s ago: executing program 7 (id=899): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000840)=@base={0xb, 0x7, 0x2, 0x4, 0x5, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000380)={{r0, 0xffffffffffffffff}, &(0x7f0000000b00), &(0x7f0000000300)}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xc, &(0x7f0000000440)=@framed={{0x18, 0x0, 0x0, 0x0, 0xffffffff}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r1}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x8000002}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x14, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r3 = socket$netlink(0x10, 0x3, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='sched_kthread_stop\x00', r2}, 0x10) sendmsg$nl_route(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000280)=ANY=[@ANYBLOB="4000000010001fff000000000000000000060000", @ANYRES32=0x0, @ANYBLOB="0000000000000000180012800e0001007769726567756172640000000400028008000a00b8"], 0x40}}, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB], 0x48) bpf$PROG_LOAD(0x5, 0x0, 0x0) mkdir(&(0x7f0000000280)='./file0\x00', 0x2) pipe2$9p(&(0x7f0000000240), 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000740)=ANY=[@ANYRES32, @ANYBLOB='\x00'/27], 0x48) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0600000004000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000001070000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f00000004c0)={0xffffffffffffffff, &(0x7f0000000340), &(0x7f00000005c0)=""/155}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1d, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x30, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, @void, @value}, 0x94) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r4}, 0x10) r5 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r5, 0xaf01, 0x0) 12.026581426s ago: executing program 7 (id=903): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x0, 0x0) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), r3) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000007000000095"], 0x0, 0x0, 0x3e, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000c, @void, @value}, 0x94) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r4}, 0x10) openat$sndtimer(0xffffffffffffff9c, 0x0, 0x0) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$ifreq_SIOCGIFINDEX_vcan(r3, 0x8933, 0x0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_GET_DYING(r5, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)={0x14, 0x6, 0x1, 0x301, 0x0, 0x0, {0x5}, [""]}, 0x14}, 0x1, 0x0, 0x0, 0x4800}, 0x4000010) socket$netlink(0x10, 0x3, 0x0) 10.961610824s ago: executing program 0 (id=905): bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x9, 0x4, 0xfff, 0x5, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) socket$inet6(0xa, 0x2, 0x0) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0xf, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r0 = mq_open(&(0x7f0000000080)='\'-\x00', 0x40, 0xc, 0x0) preadv(r0, &(0x7f0000000240), 0x10000000000002af, 0x0, 0x0) mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000080)='ramfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000900)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './bus'}}]}) r1 = open(&(0x7f0000000140)='./file0\x00', 0x32b042, 0x40) r2 = syz_open_procfs(0x0, &(0x7f0000001080)='smaps_rollup\x00') read$FUSE(r2, &(0x7f0000002e40)={0x2020}, 0x2020) mknodat$loop(r1, &(0x7f00000002c0)='./file1\x00', 0x6000, 0x0) chdir(&(0x7f00000003c0)='./bus\x00') linkat(r1, &(0x7f0000000100)='./file1\x00', r1, &(0x7f0000000240)='./file0\x00', 0x0) renameat2(0xffffffffffffff9c, &(0x7f0000000a00)='./file0\x00', 0xffffffffffffff9c, &(0x7f0000000600)='./file1\x00', 0x2) socket$inet6(0xa, 0x1, 0x0) socket$netlink(0x10, 0x3, 0x0) r3 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) syz_usb_connect$uac1(0x3, 0xa4, &(0x7f0000000040)=ANY=[@ANYBLOB="2a01000020000040b708000000000000030109029200030172e5000904000000010100000a24010000000201020c0d2405000005000000000000000c240000e9fffff5ffffffff092403f3ff000005024524", @ANYRES8=r3, @ANYBLOB="05", @ANYRES16=r3], 0x0) 10.033617021s ago: executing program 1 (id=906): ioctl$HCIINQUIRY(0xffffffffffffffff, 0x800448f0, &(0x7f0000000240)={0x3, 0x725, "8fcbc3", 0x2, 0xff}) socket$nl_route(0x10, 0x3, 0x0) r0 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc)) r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) recvmsg(r1, &(0x7f0000000200)={0x0, 0x0, 0x0}, 0x20) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) keyctl$KEYCTL_CAPABILITIES(0x1f, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x3) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) read$msr(0xffffffffffffffff, 0x0, 0x0) ioctl$KVM_GET_MSRS(0xffffffffffffffff, 0xc048aeca, 0x0) mmap(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x0, 0x11, 0xffffffffffffffff, 0x155e1000) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x46, 0x0, 0x0) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, 0x0) 9.890987571s ago: executing program 1 (id=907): shmat(0x0, &(0x7f0000ffa000/0x3000)=nil, 0x400c) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x3) syz_clone(0x600, 0x0, 0x33, 0x0, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) syz_open_dev$sndctrl(&(0x7f0000000600), 0x0, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) setsockopt$inet6_IPV6_RTHDR(0xffffffffffffffff, 0x29, 0x39, 0x0, 0x0) connect$bt_l2cap(0xffffffffffffffff, &(0x7f0000000080)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x7ff}, 0xe) ftruncate(0xffffffffffffffff, 0x796c) prctl$PR_SET_TAGGED_ADDR_CTRL(0x37, 0x1) r1 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_buf(r1, 0x6, 0x21, &(0x7f0000000200)="24fc911e918c74ad7a0e599e17a90ecabe833ca12054887f4142a64471dbe048", 0x20) mprotect(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0xd) mremap(&(0x7f0000ff1000/0x1000)=nil, 0x1000, 0x1000, 0x3, &(0x7f0000fff000/0x1000)=nil) ioctl$TCSETS(0xffffffffffffffff, 0x40045431, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, "ff00f7000000000000000000af88008300"}) 9.533723004s ago: executing program 1 (id=908): syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) r0 = userfaultfd(0x801) ioctl$UFFDIO_API(r0, 0xc018aa3f, 0x0) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000040)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}, 0x5}) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x3, &(0x7f0000000040)=ANY=[@ANYBLOB="18000000000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setscheduler(r1, 0x1, &(0x7f0000000400)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) r4 = syz_open_dev$vim2m(0x0, 0x7, 0x2) ioctl$vim2m_VIDIOC_S_FMT(r4, 0xc0d05605, &(0x7f00000000c0)={0x1, @pix_mp={0x2, 0x7fffffff, 0x34343452, 0xebfdae46831a75f, 0x2, [{0x3, 0x2}, {0x9c8e4708, 0x8}, {0xf, 0xa0}, {0x2}, {0x9, 0x3}, {0x7fffffff, 0x8}, {0x9, 0x7}, {0x7, 0x10101}], 0x6, 0x7a, 0x2, 0x2, 0x7}}) socket$netlink(0x10, 0x3, 0x0) ioctl$UFFDIO_CONTINUE(r0, 0xc020aa08, &(0x7f0000000080)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}}) r5 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/net/ipv4/vs/sync_threshold\x00', 0x2, 0x0) r6 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000140)='/proc/diskstats\x00', 0x0, 0x0) sendfile(r5, r6, 0x0, 0x106f) 9.530414764s ago: executing program 2 (id=909): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() r1 = socket$l2tp6(0xa, 0x2, 0x73) bind$l2tp6(r1, 0x0, 0x0) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = syz_open_dev$dri(&(0x7f0000000180), 0x0, 0x0) r5 = syz_open_dev$dri(&(0x7f0000000180), 0x3ffffffffffffffd, 0x0) r6 = syz_open_dev$dri(&(0x7f0000000040), 0xd21, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r6, 0xc04064a0, &(0x7f00000004c0)={0x0, &(0x7f00000000c0)=[0x0], 0x0, 0x0, 0x0, 0x1}) socket$kcm(0x29, 0x5, 0x0) ioctl$DRM_IOCTL_MODE_GETCRTC(r6, 0xc06864a1, &(0x7f00000003c0)={0x0, 0x0, r7, 0x0}) ioctl$DRM_IOCTL_MODE_GETFB2(r5, 0xc06864ce, &(0x7f0000000440)={r8, 0x0, 0x0, 0x0, 0x0, [0x0], [], [0x0, 0x0, 0x0, 0xfffffffc], [0x0, 0x4]}) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r5, 0xc00c642d, &(0x7f0000000200)={r9, 0x0, 0xffffffffffffffff}) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r4, 0xc00c642e, &(0x7f0000000000)={0x0, 0x0, r10}) close_range(r4, 0xffffffffffffffff, 0x0) 8.292836842s ago: executing program 2 (id=910): r0 = socket(0x2, 0x80805, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f00000000c0)={0x0, 0x10, &(0x7f0000007fc0)=[@in={0x2, 0x0, @rand_addr=0x64010100}]}, &(0x7f0000000100)=0x10) write$binfmt_script(0xffffffffffffffff, 0x0, 0x0) prctl$PR_MCE_KILL(0x35, 0x0, 0x8) prctl$PR_GET_SPECULATION_CTRL(0x35, 0x0, 0x2) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x6) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0xffffffffffffff2b, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) ioctl$VIDIOC_SUBDEV_ENUM_FRAME_SIZE(0xffffffffffffffff, 0xc040564a, 0x0) r4 = openat$proc_mixer(0xffffffffffffff9c, &(0x7f0000000040)='/proc/asound/card0/oss_mixer\x00', 0x2002, 0x0) write$proc_mixer(r4, &(0x7f0000000340)=ANY=[], 0x86) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x10012, 0xffffffffffffffff, 0x0) getsockopt$inet_sctp6_SCTP_GET_LOCAL_ADDRS(r0, 0x84, 0x66, &(0x7f0000000080), &(0x7f0000000000)=0x8) 7.137455151s ago: executing program 1 (id=911): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x18, 0x4, &(0x7f0000000000)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3f80000}, [@ldst={0x1, 0x2, 0x3, 0x0, 0x1, 0x43}]}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) fcntl$lock(0xffffffffffffffff, 0x6, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_bt_hci(r1, 0x800448d3, &(0x7f0000000000)) syz_clone(0x600, 0x0, 0x33, 0x0, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) r3 = syz_open_procfs(0x0, &(0x7f0000000000)='smaps_rollup\x00') socket$inet6_udp(0xa, 0x2, 0x0) r4 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp_SCTP_GET_PEER_ADDR_INFO(r3, 0x84, 0xf, &(0x7f0000000340)={0x0, @in6={{0xa, 0x4e21, 0x5b, @mcast2, 0x2}}, 0x9, 0xd4, 0x7, 0x7, 0xd}, &(0x7f0000000400)=0x98) setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r4, 0x84, 0x72, &(0x7f0000000440)={r5, 0x4}, 0xc) 7.042198111s ago: executing program 0 (id=912): r0 = socket$inet(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000000c0)=0x70, 0x4) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000ac0)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000786c6c2500000000002020207b1af8ff00000000bf"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0xa, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_emit_ethernet(0x0, 0x0, 0x0) timer_create(0x0, 0x0, 0x0) timer_gettime(0x0, 0x0) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @multicast1}, 0x10) bpf$PROG_LOAD(0x5, 0x0, 0x0) io_setup(0x7, 0x0) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @empty}, 0x10) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000600)=0x1801, 0x4) 7.041415361s ago: executing program 2 (id=913): r0 = bpf$MAP_CREATE(0x0, 0x0, 0x50) fcntl$getownex(r0, 0x10, &(0x7f0000000000)) openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) syz_mount_image$ext4(&(0x7f0000000380)='ext4\x00', &(0x7f0000000000)='./bus\x00', 0x20c006, &(0x7f0000000040), 0x41, 0x43d, &(0x7f0000000900)="$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") r1 = open(&(0x7f00000005c0)='./bus\x00', 0x64842, 0x1b5) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x5, &(0x7f00000002c0)=ANY=[@ANYBLOB], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x200000, @void, @value}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000680)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x804051, 0x0, 0x1, 0x0, &(0x7f0000000d40)) pwritev2(r1, &(0x7f0000000240)=[{&(0x7f0000000000)="85", 0x7a000}], 0x1, 0x33000, 0x0, 0x3) 5.396540193s ago: executing program 1 (id=914): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket$alg(0x26, 0x5, 0x0) bind$alg(r3, &(0x7f0000000140)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(blowfish)\x00'}, 0x58) r4 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r4}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) r5 = accept4(r3, 0x0, 0x0, 0x0) setsockopt$ALG_SET_KEY(r3, 0x117, 0x1, &(0x7f00000001c0)="00940a37", 0x4) sendto$unix(r5, &(0x7f0000000440)="36d9a32e92c131d730b1abaedb51eb66fd2d5b1f7eda4f0e859fdaf294bad70673813533d8bf1c6a77b65a7afdc01b29e73571071a68d5def5d7df839810da130b9348f4d9d407eb478d5bfb298c552a498271af70914e14ba9476fd2a0e47984c25ea20afab3064a748add27a7149e9c4705475bda2ecec9ec30214f28c5e16fd3f50f604f20232c534409e52bff64fc6ca0f5e254083aec2794b7216e002e87caf3d0fa7d04ff9e3b03e81595a04979594ff6ea888bf13de8e8f74c6178e31e47593732ae1a501ad3641d423195a788efdb643f50a8c8b9794a62f7b8dfa0fa7da9d391b92ce2a7f9fe0f9d584a377", 0xf0, 0x800, 0x0, 0x0) recvfrom(r5, &(0x7f00000030c0)=""/4117, 0xffffffffffffffbf, 0x1, 0x0, 0xffffffffffffffb5) r6 = socket$inet6(0xa, 0x800000000000002, 0x0) connect$inet6(r6, &(0x7f0000000040)={0xa, 0x0, 0x0, @mcast2, 0x4}, 0x1c) sendmmsg$inet6(r6, &(0x7f0000000c80)=[{{&(0x7f0000000180)={0xa, 0x4e22, 0xfffffff8, @local, 0x4}, 0x1c, 0x0}}, {{0x0, 0x0, &(0x7f0000000880)=[{&(0x7f0000000800)="3a2ca32b4e2eef4781447fdb0922a92b371cbc9b5e60c302d6013b8d393b56b631bf591edf3e0f9921104070bda2cb85abe851c95075f46ece415b93df2da252b279d9a7846b621869876ab45bd268b565f59aaf8994", 0x56}], 0x1, &(0x7f00000008c0)=[@tclass={{0x14, 0x29, 0x43, 0x9}}, @hopopts={{0x18, 0x29, 0x36, {0x89}}}], 0x30}}, {{&(0x7f0000000a40)={0xa, 0x4e22, 0x80, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}}, 0x1c, &(0x7f0000000bc0)=[{0x0}, {0x0}], 0x2}}], 0x3, 0x48000) 4.759412277s ago: executing program 0 (id=915): sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="4000000010003b0c0000", @ANYRES32=0x0, @ANYBLOB="00db00000040000020001280"], 0x40}}, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000300)='blkio.bfq.io_merged_recursive\x00', 0x275a, 0x0) syz_emit_ethernet(0x36, &(0x7f0000000100)=ANY=[@ANYBLOB="000002f0d31209000000bc2e79e995"], 0x0) write$binfmt_script(r2, &(0x7f0000000100), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r2, 0x0) preadv(r2, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffff23}], 0x3e, 0x0, 0x0) syz_emit_ethernet(0x4a, &(0x7f0000000000)=ANY=[@ANYBLOB="aaaaaaaaaaaaffffffffffff86dd600a847500140600fe8000"/34, @ANYRES32=0x41424344], 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe6000/0x18000)=nil, &(0x7f0000000040)=[@text16={0x10, &(0x7f0000000180)="66b9800000c00f326635000800000f300f0f1c9a65660ff3b20618baa000ec672e660f38803d004000000f285473f61366b9800000c00f326635004000000f300f20e06635800000000f22e0f30fa6c8", 0x50}], 0x1, 0x0, 0x0, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x20004000}, 0x14) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f00000004c0)=[@text32={0x20, 0x0}], 0x1, 0x0, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={0x0}, 0x10) openat$fb0(0xffffffffffffff9c, &(0x7f0000000080), 0x80042, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) 3.846467703s ago: executing program 2 (id=916): r0 = syz_open_dev$dri(&(0x7f0000000180), 0x0, 0x0) r1 = syz_open_dev$dri(&(0x7f0000000180), 0x3ffffffffffffffd, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000100)={0x80002, 0x1, 0x6}) r2 = syz_open_dev$dri(&(0x7f0000000040), 0xd21, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r2, 0xc04064a0, &(0x7f00000004c0)={0x0, &(0x7f00000000c0)=[0x0], 0x0, 0x0, 0x0, 0x1}) socket$inet_udp(0x2, 0x2, 0x0) ioctl$DRM_IOCTL_MODE_GETCRTC(r2, 0xc06864a1, &(0x7f00000003c0)={0x0, 0x0, r3, 0x0}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r5 = getpid() sched_setscheduler(r5, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r6, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r7, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r6, &(0x7f00000000c0), 0x10106, 0x2, 0x0) ioctl$DRM_IOCTL_MODE_GETFB2(r2, 0xc06864ce, &(0x7f0000000440)={r4, 0x0, 0x0, 0x0, 0x0, [0x0]}) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r1, 0xc00c642d, &(0x7f0000000200)={r8, 0x0, 0xffffffffffffffff}) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r0, 0xc00c642e, &(0x7f0000000000)={0x0, 0x0, r9}) close_range(r0, 0xffffffffffffffff, 0x0) 2.589502912s ago: executing program 0 (id=917): socketpair$nbd(0x1, 0x1, 0x0, 0x0) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) r0 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000200)='sched_switch\x00', r0}, 0x10) mkdir(&(0x7f00000000c0)='./bus\x00', 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setaffinity(r1, 0x8, &(0x7f0000000280)=0x3) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mount(&(0x7f00000000c0)=@nbd={'/dev/nbd', 0x0}, 0x0, 0x0, 0x8000, 0x0) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) r4 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='smaps\x00') mlock(&(0x7f0000002000/0x2000)=nil, 0x2000) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) read$FUSE(r4, &(0x7f0000000640)={0x2020}, 0x2020) 2.566857262s ago: executing program 2 (id=918): madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) r0 = getpid() lseek(0xffffffffffffffff, 0x400000000000, 0x2) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00'}, 0x10) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) sched_setaffinity(0x0, 0xfffffef7, &(0x7f0000000740)=0x410000002) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r3 = syz_pidfd_open(r0, 0x0) setns(r3, 0x24020000) syz_clone(0xd5ba2180, 0x0, 0x0, 0x0, 0x0, 0x0) 1.102097723s ago: executing program 0 (id=919): r0 = bpf$MAP_CREATE(0x0, 0x0, 0x50) fcntl$getownex(r0, 0x10, &(0x7f0000000000)) openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) syz_mount_image$ext4(&(0x7f0000000380)='ext4\x00', &(0x7f0000000000)='./bus\x00', 0x20c006, &(0x7f0000000040), 0x41, 0x43d, &(0x7f0000000900)="$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") r1 = open(&(0x7f00000005c0)='./bus\x00', 0x64842, 0x1b5) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x5, &(0x7f00000002c0)=ANY=[@ANYBLOB], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x200000, @void, @value}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000680)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x804051, 0x0, 0x1, 0x0, &(0x7f0000000d40)) rmdir(&(0x7f0000000400)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') pwritev2(r1, &(0x7f0000000240)=[{&(0x7f0000000000)="85", 0x7a000}], 0x1, 0x33000, 0x0, 0x3) 999.083613ms ago: executing program 7 (id=920): io_setup(0x1fc, 0x0) setsockopt$inet6_tcp_TCP_CONGESTION(0xffffffffffffffff, 0x6, 0xd, &(0x7f0000000000)='yeah\x00', 0x5) r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/vmstat\x00', 0x0, 0x0) openat$cgroup_ro(r0, &(0x7f0000000100)='cpuset.memory_pressure\x00', 0x275a, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, 0x0, 0x0, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) dup(0xffffffffffffffff) syz_emit_vhci(&(0x7f0000000040)=ANY=[@ANYBLOB], 0x1) bpf$MAP_LOOKUP_BATCH(0x18, 0x0, 0x0) r4 = syz_open_dev$sndctrl(&(0x7f0000001440), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(r4, 0x40045532, &(0x7f0000000200)) r5 = openat$audio(0xffffffffffffff9c, &(0x7f0000000100), 0x80002, 0x0) r6 = syz_open_dev$sndpcmp(&(0x7f00000001c0), 0x0, 0xa2c65) ioctl$SNDCTL_DSP_CHANNELS(r5, 0xc0045006, &(0x7f0000000700)=0x7) writev(r6, &(0x7f0000000600)=[{0x0}, {&(0x7f0000000440)='\x00', 0x1}], 0x2) 977.159534ms ago: executing program 2 (id=921): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) r3 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) dup(r3) r4 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') mount$9p_fd(0x0, &(0x7f00000001c0)='.\x00', &(0x7f0000000180), 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB='trans=fd,rfd', @ANYBLOB=',wfdno=', @ANYRESHEX=r4]) socket$inet6_sctp(0xa, 0x5, 0x84) socketpair$unix(0x1, 0x2, 0x0, 0x0) syz_mount_image$nilfs2(&(0x7f0000000000), &(0x7f0000000200)='./file0\x00', 0x12, &(0x7f0000000480)=ANY=[], 0x5, 0xa5a, &(0x7f0000000a80)="$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") openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x42, 0x0) r5 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x143042, 0x0) pwritev2(r5, &(0x7f0000000100)=[{&(0x7f0000000080)="ff", 0xabfb}], 0x1, 0x5412, 0x0, 0x0) 3.89698ms ago: executing program 1 (id=922): syz_open_dev$loop(0x0, 0x75f, 0x67316f489dcd0f4c) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, &(0x7f0000cab000)) r3 = socket$netlink(0x10, 0x3, 0xc) bind$netlink(r3, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r3, 0x10e, 0x4, &(0x7f0000000140)=0x6, 0x4) setsockopt$sock_int(r3, 0x1, 0x8, &(0x7f0000000200), 0x4) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r4, 0x0, 0x0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r5, 0x0, 0x0) sendmsg$IPCTNL_MSG_CT_DELETE(r5, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000300)={0x14, 0x2, 0x1, 0x101, 0x0, 0x0, {0x0, 0x0, 0x2}}, 0x14}, 0x1, 0x0, 0x0, 0x8094}, 0x4) 3.1605ms ago: executing program 7 (id=923): r0 = syz_open_procfs(0x0, &(0x7f0000000000)='smaps_rollup\x00') r1 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp_SCTP_GET_PEER_ADDR_INFO(r0, 0x84, 0xf, &(0x7f0000000340)={0x0, @in6={{0xa, 0x4e21, 0x5b, @mcast2, 0x2}}, 0x9, 0xd4, 0x7, 0x7, 0xd}, &(0x7f0000000400)=0x98) setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r1, 0x84, 0x72, &(0x7f0000000440)={r2, 0x4}, 0xc) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x0, 0x0, &(0x7f00000004c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, r0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) 0s ago: executing program 0 (id=924): prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x7fffffffffffffff, 0x4000040003, &(0x7f0000006680)) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) shmget$private(0x0, 0x2000, 0x800, &(0x7f0000ffd000/0x2000)=nil) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000040)='cgroup2\x00', 0x0, 0x0) mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000000), 0x0, &(0x7f00000001c0)={[{@lowerdir={'lowerdir', 0x3d, './file0'}, 0x3a}], [], 0x2f}) mkdir(&(0x7f0000000040)='./file1\x00', 0x0) socketpair$unix(0x1, 0x5, 0x0, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000340)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) chdir(&(0x7f00000003c0)='./bus\x00') r3 = open(&(0x7f00000000c0)='.\x00', 0x0, 0x0) getdents(r3, &(0x7f0000001fc0)=""/184, 0x20002078) kernel console output (not intermixed with test programs): ted on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 110.069705][ T4710] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 110.089608][ T4428] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 110.109689][ T4428] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 110.127542][ T4710] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 110.139411][ T4710] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 110.284928][ T4710] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 110.305332][ T4616] 8021q: adding VLAN 0 to HW filter on device team0 [ 110.385649][ T4428] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 110.425423][ T4428] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 110.525191][ T4428] bridge0: port 1(bridge_slave_0) entered blocking state [ 110.532339][ T4428] bridge0: port 1(bridge_slave_0) entered forwarding state [ 110.589852][ T4428] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 110.660017][ T4710] device hsr_slave_0 entered promiscuous mode [ 110.672371][ T4710] device hsr_slave_1 entered promiscuous mode [ 110.679320][ T4710] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 110.687583][ T4710] Cannot create hsr debugfs directory [ 111.043200][ T4248] Bluetooth: hci5: command 0x040f tx timeout [ 111.546842][ T4616] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 111.571427][ T4616] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 111.657271][ T4235] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 111.684573][ T4235] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 111.704186][ T4235] bridge0: port 2(bridge_slave_1) entered blocking state [ 111.711275][ T4235] bridge0: port 2(bridge_slave_1) entered forwarding state [ 111.924508][ T4235] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 112.053977][ T4235] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 112.199721][ T4235] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 112.343545][ T4235] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 112.432119][ T23] usb 6-1: new high-speed USB device number 2 using dummy_hcd [ 112.446345][ T4235] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 112.457468][ T4235] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 112.466592][ T4235] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 112.498263][ T4235] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 112.613039][ T4235] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 112.653543][ T4235] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 112.823292][ T23] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 112.834537][ T23] usb 6-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 112.843708][ T23] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 112.853647][ T23] usb 6-1: config 0 descriptor?? [ 112.877641][ T4235] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 112.904443][ T23] pwc: Askey VC010 type 2 USB webcam detected. [ 112.904902][ T4235] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 113.083261][ T4428] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 113.091335][ T4428] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 113.133683][ T4638] Bluetooth: hci5: command 0x0419 tx timeout [ 113.176423][ T4616] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 113.331970][ T23] pwc: recv_control_msg error -32 req 02 val 2b00 [ 113.372063][ T23] pwc: recv_control_msg error -32 req 02 val 2700 [ 113.422109][ T4710] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 113.432223][ T23] pwc: recv_control_msg error -32 req 02 val 2c00 [ 113.472167][ T23] pwc: recv_control_msg error -32 req 04 val 1000 [ 113.492601][ T4710] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 113.516153][ T23] pwc: recv_control_msg error -32 req 04 val 1300 [ 113.525825][ T4710] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 113.576845][ T4710] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 113.583851][ T23] pwc: recv_control_msg error -32 req 04 val 1400 [ 113.625764][ T23] pwc: recv_control_msg error -32 req 02 val 2000 [ 113.682012][ T23] pwc: recv_control_msg error -32 req 02 val 2100 [ 113.839199][ T4428] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 113.858943][ T4428] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 113.949429][ T23] pwc: recv_control_msg error -71 req 02 val 2500 [ 113.967033][ T4710] 8021q: adding VLAN 0 to HW filter on device bond0 [ 113.992739][ T23] pwc: recv_control_msg error -71 req 02 val 2400 [ 114.009385][ T4616] device veth0_vlan entered promiscuous mode [ 114.037306][ T4864] loop3: detected capacity change from 0 to 512 [ 114.057454][ T4235] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 114.065341][ T23] pwc: recv_control_msg error -71 req 02 val 2600 [ 114.077258][ T4235] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 114.104082][ T23] pwc: recv_control_msg error -71 req 02 val 2900 [ 114.122279][ T23] pwc: recv_control_msg error -71 req 02 val 2800 [ 114.170092][ T23] pwc: recv_control_msg error -71 req 04 val 1100 [ 114.177032][ T4864] EXT4-fs (loop3): Ignoring removed orlov option [ 114.191457][ T4710] 8021q: adding VLAN 0 to HW filter on device team0 [ 114.203756][ T4235] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 114.214288][ T23] pwc: recv_control_msg error -71 req 04 val 1200 [ 114.227413][ T4235] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 114.230282][ T4864] EXT4-fs (loop3): orphan cleanup on readonly fs [ 114.238417][ T4235] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 114.261078][ T4235] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 114.271656][ T23] pwc: Registered as video103. [ 114.296873][ T4864] EXT4-fs error (device loop3): ext4_validate_block_bitmap:438: comm syz.3.116: bg 0: block 248: padding at end of block bitmap is not set [ 114.319967][ T4616] device veth1_vlan entered promiscuous mode [ 114.335470][ T23] input: PWC snapshot button as /devices/platform/dummy_hcd.5/usb6/6-1/input/input5 [ 114.382899][ T4864] Quota error (device loop3): write_blk: dquota write failed [ 114.410705][ T4864] Quota error (device loop3): qtree_write_dquot: Error -117 occurred while creating quota [ 114.432317][ T4864] EXT4-fs error (device loop3): ext4_acquire_dquot:6197: comm syz.3.116: Failed to acquire dquot type 1 [ 114.444213][ T4235] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 114.484870][ T4235] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 114.492138][ T23] usb 6-1: USB disconnect, device number 2 [ 114.543065][ T4235] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 114.572869][ T4235] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 114.599969][ T4864] EXT4-fs (loop3): 1 truncate cleaned up [ 114.636208][ T4235] bridge0: port 1(bridge_slave_0) entered blocking state [ 114.643472][ T4235] bridge0: port 1(bridge_slave_0) entered forwarding state [ 114.658393][ T4864] EXT4-fs (loop3): mounted filesystem without journal. Opts: noload,nodiscard,noblock_validity,grpjquota=,bsdgroups,orlov,abort,nombcache,journal_ioprio=0x0000000000000001,,errors=continue. Quota mode: writeback. [ 114.795912][ T4235] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 114.991155][ T4235] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 115.268248][ T4235] bridge0: port 2(bridge_slave_1) entered blocking state [ 115.275438][ T4235] bridge0: port 2(bridge_slave_1) entered forwarding state [ 115.398527][ T4235] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 115.413388][ T4616] device veth0_macvtap entered promiscuous mode [ 115.509257][ T4235] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 115.522220][ T4235] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 115.531016][ T4235] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 115.544329][ T4235] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 115.570497][ T4235] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 115.596691][ T4890] loop5: detected capacity change from 0 to 1024 [ 115.600771][ T4235] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 115.617572][ T4235] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 115.634666][ T4235] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 115.643973][ T4235] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 115.658259][ T4235] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 115.692921][ T4616] device veth1_macvtap entered promiscuous mode [ 115.724168][ T4890] EXT4-fs (loop5): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 115.738974][ T4235] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 115.757680][ T4890] ext4 filesystem being mounted at /7/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 115.759038][ T4235] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 115.803460][ T4235] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 115.812680][ T4235] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 115.835303][ T4710] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 115.905743][ T4616] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 115.991671][ T4616] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 116.002204][ T4616] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 116.013505][ T4616] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 116.063876][ T4616] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 116.119633][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 116.143206][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 116.197942][ T4616] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 116.215738][ T4616] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 116.229526][ T4616] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 116.260493][ T4616] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 116.303435][ T4616] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 116.312371][ T4916] netlink: 28 bytes leftover after parsing attributes in process `syz.5.123'. [ 116.329046][ T4916] netlink: 8 bytes leftover after parsing attributes in process `syz.5.123'. [ 116.530373][ T4710] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 116.538249][ T4373] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 116.547652][ T4373] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 116.569429][ T4373] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 116.694541][ T4373] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 117.003988][ T4616] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 117.075078][ T4616] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 117.135057][ T4616] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 117.541939][ T4616] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 117.579243][ T4934] sch_tbf: burst 4398 is lower than device lo mtu (65550) ! [ 119.544438][ T154] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 119.557990][ T154] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 120.027973][ T4373] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 120.234195][ T4373] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 120.268684][ T4373] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 121.891163][ T4428] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 121.920618][ T4428] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 121.948748][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 121.973182][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 122.132620][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 122.214913][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 122.253891][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 122.292944][ T4710] device veth0_vlan entered promiscuous mode [ 122.313709][ T4983] netlink: 24 bytes leftover after parsing attributes in process `syz.5.136'. [ 122.383587][ T4710] device veth1_vlan entered promiscuous mode [ 123.316363][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 123.350191][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 123.407557][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 123.448220][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 123.478112][ T4710] device veth0_macvtap entered promiscuous mode [ 123.685344][ T4710] device veth1_macvtap entered promiscuous mode [ 123.720367][ T4710] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 124.603659][ T4710] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 124.688100][ T4710] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 124.752015][ T4710] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 124.769042][ T4710] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 124.808159][ T4710] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 124.847391][ T4710] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 124.892021][ T4356] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 124.914145][ T4356] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 124.965227][ T4356] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 125.018188][ T4710] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 125.070461][ T4710] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 125.130086][ T4710] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 125.157094][ T5019] loop6: detected capacity change from 0 to 2048 [ 125.182143][ T4710] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 125.227421][ T4710] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 125.269660][ T4710] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 125.295157][ T4710] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 125.373362][ T302] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 125.383007][ T302] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 125.394634][ T5019] UDF-fs: warning (device loop6): udf_load_vrs: No anchor found [ 125.410243][ T5019] UDF-fs: Scanning with blocksize 512 failed [ 125.438794][ T4710] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 125.459826][ T5019] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 125.469924][ T4710] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 125.487235][ T4710] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 125.514223][ T4710] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 125.848926][ T4428] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 125.886132][ T4428] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 125.938692][ T4356] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 125.982260][ T4356] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 126.057526][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 126.118037][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 126.180142][ T5015] loop3: detected capacity change from 0 to 32768 [ 126.309921][ T5050] team0: No ports can be present during mode change [ 126.321633][ T5050] device vlan0 entered promiscuous mode [ 126.325029][ T5015] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop3 scanned by syz.3.144 (5015) [ 127.205427][ T5015] BTRFS info (device loop3): using sha256 (sha256-avx2) checksum algorithm [ 127.269057][ T5015] BTRFS info (device loop3): force clearing of disk cache [ 127.279308][ T5015] BTRFS info (device loop3): setting nodatacow, compression disabled [ 127.288307][ T5015] BTRFS info (device loop3): enabling auto defrag [ 127.323110][ T5015] BTRFS info (device loop3): max_inline at 0 [ 127.363989][ T5015] BTRFS info (device loop3): enabling disk space caching [ 127.371064][ T5015] BTRFS info (device loop3): disk space caching is enabled [ 127.399067][ T5050] team0: Port device vlan0 added [ 127.440135][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #08!!! [ 127.449178][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #08!!! [ 127.458262][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #0a!!! [ 127.468471][ T5015] BTRFS info (device loop3): has skinny extents [ 127.612121][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #08!!! [ 127.630907][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #40!!! [ 127.640504][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #40!!! [ 127.733726][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #40!!! [ 128.040337][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #140!!! [ 128.143077][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #40!!! [ 128.457132][ T5015] BTRFS error (device loop3): open_ctree failed [ 128.481028][ T5067] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 128.957201][ T5105] ipt_REJECT: TCP_RESET invalid for non-tcp [ 129.122246][ T5054] netlink: 4 bytes leftover after parsing attributes in process `syz.7.92'. [ 129.824940][ T5054] team0 (unregistering): Port device team_slave_0 removed [ 129.867044][ T5054] team0 (unregistering): Port device team_slave_1 removed [ 129.909217][ T5054] team0 (unregistering): Port device vlan0 removed [ 132.242839][ T5126] loop5: detected capacity change from 0 to 256 [ 132.461983][ T4638] usb 7-1: new high-speed USB device number 2 using dummy_hcd [ 132.672559][ T1420] ieee802154 phy0 wpan0: encryption failed: -22 [ 132.678928][ T1420] ieee802154 phy1 wpan1: encryption failed: -22 [ 132.702562][ T4638] usb 7-1: Using ep0 maxpacket: 16 [ 132.767316][ T5149] sch_tbf: burst 4398 is lower than device lo mtu (65550) ! [ 132.822117][ T4638] usb 7-1: config 0 has an invalid interface number: 1 but max is 0 [ 132.832327][ T4638] usb 7-1: config 0 has no interface number 0 [ 133.002058][ T4638] usb 7-1: New USB device found, idVendor=04fc, idProduct=1528, bcdDevice=6d.5d [ 133.051100][ T4638] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 133.099786][ T4638] usb 7-1: Product: syz [ 133.117748][ T4638] usb 7-1: Manufacturer: syz [ 133.160986][ T4638] usb 7-1: SerialNumber: syz [ 133.203079][ T4638] usb 7-1: config 0 descriptor?? [ 133.303436][ T4638] gspca_main: spca1528-2.14.0 probing 04fc:1528 [ 133.666891][ T5165] loop7: detected capacity change from 0 to 256 [ 133.732113][ T5126] loop5: detected capacity change from 0 to 512 [ 133.808043][ T5165] exFAT-fs (loop7): failed to load upcase table (idx : 0x0000fd4f, chksum : 0x3963664b, utbl_chksum : 0xe619d30d) [ 134.282437][ T5160] loop3: detected capacity change from 0 to 32768 [ 135.351346][ T5194] team0: No ports can be present during mode change [ 135.386868][ T26] audit: type=1800 audit(1741378408.004:4): pid=5160 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.166" name="file2" dev="loop3" ino=13 res=0 errno=0 [ 135.488987][ T5196] netlink: 4 bytes leftover after parsing attributes in process `syz.1.173'. [ 135.566981][ T5196] bond0: (slave team0): Releasing backup interface [ 135.625950][ T5196] team0 (unregistering): Port device vlan0 removed [ 135.742039][ T4638] gspca_spca1528: reg_r err -71 [ 135.747057][ T4638] spca1528: probe of 7-1:0.1 failed with error -71 [ 135.867591][ T4638] usb 7-1: USB disconnect, device number 2 [ 135.977407][ T5200] loop5: detected capacity change from 0 to 1024 [ 137.179064][ T5221] netlink: 4 bytes leftover after parsing attributes in process `syz.5.177'. [ 137.235440][ T5222] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 138.545664][ T5256] netlink: 'syz.1.184': attribute type 1 has an invalid length. [ 142.235693][ T5294] team0: No ports can be present during mode change [ 143.069928][ T5294] device vlan0 entered promiscuous mode [ 143.286686][ T5294] team0: Port device vlan0 added [ 143.336039][ T5300] netlink: 4 bytes leftover after parsing attributes in process `syz.6.194'. [ 144.674033][ T5345] netlink: 4 bytes leftover after parsing attributes in process `syz.5.203'. [ 144.760275][ T5347] netlink: 4 bytes leftover after parsing attributes in process `syz.5.203'. [ 144.838409][ T5345] netlink: 4 bytes leftover after parsing attributes in process `syz.5.203'. [ 144.894951][ T5349] Zero length message leads to an empty skb [ 145.143590][ T5353] loop3: detected capacity change from 0 to 256 [ 145.732706][ T5300] team0 (unregistering): Port device team_slave_0 removed [ 145.829809][ T5300] team0 (unregistering): Port device team_slave_1 removed [ 145.880996][ T5342] loop3: detected capacity change from 0 to 512 [ 146.036742][ T5300] team0 (unregistering): Port device vlan0 removed [ 147.298847][ T5380] loop7: detected capacity change from 0 to 2048 [ 147.369131][ T5365] loop5: detected capacity change from 0 to 32768 [ 147.510297][ T5365] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop5 scanned by syz.5.207 (5365) [ 147.528915][ T5380] EXT4-fs (loop7): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 147.643281][ T26] audit: type=1800 audit(1741378420.264:5): pid=5375 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.7.210" name="file1" dev="loop7" ino=15 res=0 errno=0 [ 147.693757][ T5375] EXT4-fs error (device loop7): ext4_mb_generate_buddy:1152: group 0, block bitmap and bg descriptor inconsistent: 0 vs 150994969 free clusters [ 147.780144][ T5375] EXT4-fs (loop7): Delayed block allocation failed for inode 15 at logical offset 15 with max blocks 1 with error 28 [ 147.795536][ T5365] BTRFS info (device loop5): using sha256 (sha256-avx2) checksum algorithm [ 147.883001][ T5375] EXT4-fs (loop7): This should not happen!! Data will be lost [ 147.883001][ T5375] [ 147.912399][ T5365] BTRFS info (device loop5): force clearing of disk cache [ 147.946389][ T5365] BTRFS info (device loop5): setting nodatacow, compression disabled [ 147.982146][ T5375] EXT4-fs (loop7): Total free blocks count 0 [ 148.024707][ T5365] BTRFS info (device loop5): enabling auto defrag [ 148.031210][ T5365] BTRFS info (device loop5): max_inline at 0 [ 148.033387][ T5375] EXT4-fs (loop7): Free/Dirty block details [ 148.061978][ T5365] BTRFS info (device loop5): enabling disk space caching [ 148.069105][ T5365] BTRFS info (device loop5): disk space caching is enabled [ 148.281919][ T5365] BTRFS info (device loop5): has skinny extents [ 148.765538][ T5375] EXT4-fs (loop7): free_blocks=2415919504 [ 148.771378][ T5375] EXT4-fs (loop7): dirty_blocks=16 [ 148.838450][ T26] audit: type=1800 audit(1741378421.454:6): pid=5380 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.7.210" name="file1" dev="loop7" ino=15 res=0 errno=0 [ 148.869440][ T5375] EXT4-fs (loop7): Block reservation details [ 148.991901][ T5375] EXT4-fs (loop7): i_reserved_data_blocks=1 [ 150.217033][ T154] EXT4-fs (loop7): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 1 with error 28 [ 150.252465][ T5365] BTRFS error (device loop5): open_ctree failed [ 150.288148][ T154] EXT4-fs (loop7): This should not happen!! Data will be lost [ 150.288148][ T154] [ 153.002491][ T5489] loop5: detected capacity change from 0 to 128 [ 153.756391][ T5490] loop6: detected capacity change from 0 to 32768 [ 153.807947][ T5490] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop6 scanned by syz.6.228 (5490) [ 154.711509][ T5490] BTRFS info (device loop6): using crc32c (crc32c-intel) checksum algorithm [ 154.720584][ T5490] BTRFS info (device loop6): force clearing of disk cache [ 154.727773][ T5490] BTRFS info (device loop6): enabling disk space caching [ 154.734849][ T5490] BTRFS info (device loop6): turning off barriers [ 154.741276][ T5490] BTRFS info (device loop6): disabling disk space caching [ 154.748427][ T5490] BTRFS info (device loop6): setting nodatasum [ 154.754881][ T5490] BTRFS warning (device loop6): 'usebackuproot' is deprecated, use 'rescue=usebackuproot' instead [ 154.765521][ T5490] BTRFS info (device loop6): trying to use backup root at mount time [ 154.773627][ T5490] BTRFS info (device loop6): enabling disk space caching [ 154.780666][ T5490] BTRFS warning (device loop6): 'usebackuproot' is deprecated, use 'rescue=usebackuproot' instead [ 154.791292][ T5490] BTRFS info (device loop6): trying to use backup root at mount time [ 154.799399][ T5490] BTRFS info (device loop6): disk space caching is enabled [ 154.806635][ T5490] BTRFS info (device loop6): has skinny extents [ 157.003406][ T26] audit: type=1804 audit(1741378429.614:7): pid=5531 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.3.234" name="/newroot/56/file0" dev="fuse" ino=1 res=1 errno=0 [ 157.312404][ T5490] BTRFS error (device loop6): open_ctree failed [ 157.316448][ T4865] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop6 scanned by udevd (4865) [ 157.555358][ T5553] loop3: detected capacity change from 0 to 2048 [ 157.617035][ T5553] EXT4-fs (loop3): Ignoring removed mblk_io_submit option [ 158.522215][ T5553] [EXT4 FS bs=2048, gc=1, bpg=262144, ipg=32, mo=2800c018, mo2=0042] [ 158.530415][ T5553] System zones: 0-7 [ 158.606459][ T5553] EXT4-fs (loop3): mounted filesystem without journal. Opts: noinit_itable,auto_da_alloc=0x00000000000034d1,dax=inode,jqfmt=vfsv1,debug,mblk_io_submit,dax=never,barrier=0x0000000000000000,dax=inode,bsddf,,errors=continue. Quota mode: none. [ 158.644231][ T5571] loop7: detected capacity change from 0 to 128 [ 158.847993][ T5572] EXT4-fs error (device loop3): ext4_validate_block_bitmap:438: comm ext4lazyinit: bg 0: block 234: padding at end of block bitmap is not set [ 159.475938][ T5553] overlayfs: failed to resolve './file1': -2 [ 159.512694][ T26] audit: type=1800 audit(1741378432.134:8): pid=5571 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.7.242" name="bus" dev="loop7" ino=1048615 res=0 errno=0 [ 160.347096][ T5595] netlink: 16 bytes leftover after parsing attributes in process `syz.6.243'. [ 162.135898][ T5612] loop5: detected capacity change from 0 to 164 [ 162.939984][ T5612] rock: directory entry would overflow storage [ 162.955083][ T5612] rock: sig=0x5245, size=8, remaining=3 [ 164.842013][ T5641] loop3: detected capacity change from 0 to 40427 [ 165.153271][ T5641] F2FS-fs (loop3): invalid crc value [ 165.166909][ T5641] F2FS-fs (loop3): Found nat_bits in checkpoint [ 165.218402][ T5641] F2FS-fs (loop3): Start checkpoint disabled! [ 165.353868][ T5641] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e6 [ 166.081573][ T5667] ODEBUG: Out of memory. ODEBUG disabled [ 166.387491][ T5667] syz.3.254 (5667): drop_caches: 2 [ 167.561374][ T5336] attempt to access beyond end of device [ 167.561374][ T5336] loop3: rw=2049, want=40976, limit=40427 [ 167.635355][ T5683] loop7: detected capacity change from 0 to 512 [ 167.833764][ T5680] set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 168.603509][ T5683] FAT-fs (loop7): error, fat_get_cluster: invalid start cluster (i_pos 1, start 00000001) [ 168.644870][ T5683] FAT-fs (loop7): Filesystem has been set read-only [ 168.951841][ T4255] usb 7-1: new high-speed USB device number 3 using dummy_hcd [ 169.796348][ T4255] usb 7-1: Using ep0 maxpacket: 16 [ 169.992941][ T4255] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 170.029137][ T4255] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 170.080537][ T4255] usb 7-1: New USB device found, idVendor=05ac, idProduct=8241, bcdDevice= 0.00 [ 170.105142][ T4255] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 170.143844][ T4255] usb 7-1: config 0 descriptor?? [ 170.701024][ T4255] input: HID 05ac:8241 as /devices/platform/dummy_hcd.6/usb7/7-1/7-1:0.0/0003:05AC:8241.0001/input/input6 [ 171.017620][ T4255] appleir 0003:05AC:8241.0001: input,hiddev0,hidraw0: USB HID v0.00 Device [HID 05ac:8241] on usb-dummy_hcd.6-1/input0 [ 171.686969][ T4255] usb 7-1: USB disconnect, device number 3 [ 172.282334][ T5769] capability: warning: `syz.5.278' uses deprecated v2 capabilities in a way that may be insecure [ 172.620910][ T5773] loop5: detected capacity change from 0 to 1024 [ 172.741094][ T5773] EXT4-fs (loop5): Test dummy encryption mode enabled [ 172.768231][ T5773] EXT4-fs (loop5): Ignoring removed orlov option [ 172.809706][ T5778] overlayfs: failed to clone upperpath [ 172.911318][ T5773] EXT4-fs (loop5): mounted filesystem without journal. Opts: test_dummy_encryption,debug_want_extra_isize=0x0000000000000084,stripe=0x0000000000000007,commit=0x0000000000000005,orlov,barrier=0x0000000000000005,min_batch_time=0x0000000000000005,data_err=abort,,errors=continue. Quota mode: writeback. [ 173.179950][ T5789] loop3: detected capacity change from 0 to 512 [ 175.039264][ T5789] EXT4-fs (loop3): Ignoring removed bh option [ 175.051995][ T5789] EXT4-fs (loop3): mounting ext3 file system using the ext4 subsystem [ 176.030136][ T5789] EXT4-fs (loop3): 1 truncate cleaned up [ 176.079131][ T5789] EXT4-fs (loop3): mounted filesystem without journal. Opts: jqfmt=vfsold,max_dir_size_kb=0x0000000000000003,bh,noload,data_err=ignore,noblock_validity,,errors=continue. Quota mode: none. [ 176.288233][ T5818] loop5: detected capacity change from 0 to 128 [ 176.878317][ T5818] EXT4-fs (loop5): Invalid want_extra_isize 7 [ 180.027619][ T5848] loop3: detected capacity change from 0 to 512 [ 180.190404][ T5848] EXT4-fs warning (device loop3): ext4_enable_quotas:6432: Failed to enable quota tracking (type=0, err=-13, ino=3). Please run e2fsck to fix. [ 180.297534][ T5848] EXT4-fs (loop3): mount failed [ 180.812030][ T4216] Bluetooth: hci0: command 0x0406 tx timeout [ 180.819616][ T4216] Bluetooth: hci4: command 0x0406 tx timeout [ 180.874339][ T4216] Bluetooth: hci1: command 0x0406 tx timeout [ 185.084554][ T5885] loop7: detected capacity change from 0 to 256 [ 186.877013][ T5904] overlayfs: missing 'lowerdir' [ 188.001534][ T5938] loop7: detected capacity change from 0 to 256 [ 190.912178][ T5969] fuse: Bad value for 'fd' [ 190.978886][ T5972] loop6: detected capacity change from 0 to 1024 [ 191.032886][ T5971] loop3: detected capacity change from 0 to 128 [ 191.863572][ T5980] FAT-fs (loop3): error, clusters badly computed (2 != 1) [ 191.951569][ T5980] FAT-fs (loop3): Filesystem has been set read-only [ 192.076094][ T4175] FAT-fs (loop3): Invalid FSINFO signature: 0x0a202123, 0x00000000 (sector = 1) [ 193.114928][ T5993] loop6: detected capacity change from 0 to 1764 [ 194.171733][ T1420] ieee802154 phy0 wpan0: encryption failed: -22 [ 194.178498][ T1420] ieee802154 phy1 wpan1: encryption failed: -22 [ 194.496275][ T6005] netlink: 4 bytes leftover after parsing attributes in process `syz.6.329'. [ 195.677043][ T6027] tipc: Started in network mode [ 195.686321][ T6027] tipc: Node identity ac14140f, cluster identity 4711 [ 195.721272][ T6027] tipc: New replicast peer: 255.255.255.255 [ 195.739042][ T6027] tipc: Enabled bearer , priority 10 [ 195.919656][ T6010] loop7: detected capacity change from 0 to 32768 [ 196.852636][ T4639] tipc: Node number set to 2886997007 [ 197.916682][ T4639] Bluetooth: hci1: command 0x0409 tx timeout [ 197.967308][ T4825] Bluetooth: hci6: command 0x0409 tx timeout [ 198.072773][ T6017] chnl_net:caif_netlink_parms(): no params data found [ 198.136280][ T6019] chnl_net:caif_netlink_parms(): no params data found [ 198.357152][ T6061] netlink: 32 bytes leftover after parsing attributes in process `syz.6.336'. [ 198.407489][ T6066] netlink: 32 bytes leftover after parsing attributes in process `syz.6.336'. [ 198.476550][ T6017] bridge0: port 1(bridge_slave_0) entered blocking state [ 198.490539][ T6017] bridge0: port 1(bridge_slave_0) entered disabled state [ 198.592722][ T6017] device bridge_slave_0 entered promiscuous mode [ 198.711219][ T6017] bridge0: port 2(bridge_slave_1) entered blocking state [ 198.722125][ T6017] bridge0: port 2(bridge_slave_1) entered disabled state [ 198.746076][ T6017] device bridge_slave_1 entered promiscuous mode [ 198.758210][ T6019] bridge0: port 1(bridge_slave_0) entered blocking state [ 198.784096][ T6019] bridge0: port 1(bridge_slave_0) entered disabled state [ 198.821081][ T6019] device bridge_slave_0 entered promiscuous mode [ 198.870020][ T6019] bridge0: port 2(bridge_slave_1) entered blocking state [ 198.880837][ T6019] bridge0: port 2(bridge_slave_1) entered disabled state [ 198.915925][ T6019] device bridge_slave_1 entered promiscuous mode [ 198.988220][ T6017] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 199.044531][ T6017] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 199.363537][ T6019] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 199.390581][ T6019] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 199.844101][ T6019] team0: Port device team_slave_0 added [ 199.917189][ T6017] team0: Port device team_slave_0 added [ 200.035347][ T6019] team0: Port device team_slave_1 added [ 200.042878][ T6017] team0: Port device team_slave_1 added [ 200.169150][ T2316] Bluetooth: hci1: command 0x041b tx timeout [ 200.184244][ T4251] Bluetooth: hci6: command 0x041b tx timeout [ 200.191156][ T6017] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 200.208550][ T6017] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 200.804036][ T6017] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 200.887722][ T6017] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 200.961251][ T6017] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 201.045686][ T6017] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 201.082557][ T6019] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 201.110218][ T6019] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 201.195753][ T6019] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 201.438795][ T6116] loop7: detected capacity change from 0 to 16 [ 201.857147][ T6116] erofs: (device loop7): erofs_load_compr_cfgs: try to load compressed fs with unsupported algorithms fffe [ 201.977640][ T26] audit: type=1326 audit(1741378474.584:9): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6119 comm="syz.1.352" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0d3a274169 code=0x7ffc0000 [ 202.548530][ T6019] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 202.564328][ T6019] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 202.598906][ T26] audit: type=1326 audit(1741378474.664:10): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6119 comm="syz.1.352" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0d3a274169 code=0x7ffc0000 [ 202.636288][ T6019] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 202.655960][ T26] audit: type=1326 audit(1741378475.174:11): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6119 comm="syz.1.352" exe="/root/syz-executor" sig=0 arch=c000003e syscall=14 compat=0 ip=0x7f0d3a274169 code=0x7ffc0000 [ 202.738805][ T26] audit: type=1326 audit(1741378475.174:12): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6119 comm="syz.1.352" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0d3a274169 code=0x7ffc0000 [ 202.801681][ T6120] process 'syz.1.352' launched './file0' with NULL argv: empty string added [ 202.825779][ T6019] device hsr_slave_0 entered promiscuous mode [ 202.844312][ T6019] device hsr_slave_1 entered promiscuous mode [ 202.851061][ T26] audit: type=1326 audit(1741378475.174:13): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6119 comm="syz.1.352" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0d3a274169 code=0x7ffc0000 [ 202.886711][ T4825] Bluetooth: hci6: command 0x040f tx timeout [ 202.902596][ T4825] Bluetooth: hci1: command 0x040f tx timeout [ 202.952157][ T6019] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 202.959808][ T6019] Cannot create hsr debugfs directory [ 203.011867][ T26] audit: type=1326 audit(1741378475.414:14): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6119 comm="syz.1.352" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f0d3a274169 code=0x7ffc0000 [ 203.263915][ T6128] loop6: detected capacity change from 0 to 40427 [ 203.272011][ T26] audit: type=1326 audit(1741378475.414:15): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6119 comm="syz.1.352" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0d3a274169 code=0x7ffc0000 [ 203.294351][ T26] audit: type=1326 audit(1741378475.414:16): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6119 comm="syz.1.352" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f0d3a274169 code=0x7ffc0000 [ 203.333347][ T6017] device hsr_slave_0 entered promiscuous mode [ 203.339627][ T26] audit: type=1326 audit(1741378475.414:17): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6119 comm="syz.1.352" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0d3a274169 code=0x7ffc0000 [ 203.370047][ T26] audit: type=1326 audit(1741378475.414:18): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6119 comm="syz.1.352" exe="/root/syz-executor" sig=0 arch=c000003e syscall=59 compat=0 ip=0x7f0d3a274169 code=0x7ffc0000 [ 203.398734][ T6017] device hsr_slave_1 entered promiscuous mode [ 203.420736][ T6017] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 203.429776][ T6017] Cannot create hsr debugfs directory [ 203.613649][ T3091] device hsr_slave_0 left promiscuous mode [ 203.628327][ T6128] F2FS-fs (loop6): Found nat_bits in checkpoint [ 203.658371][ T3091] device hsr_slave_1 left promiscuous mode [ 204.486030][ T6128] F2FS-fs (loop6): Mounted with checkpoint version = 48b305e5 [ 207.417348][ T4251] Bluetooth: hci1: command 0x0419 tx timeout [ 207.653237][ T3091] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 207.771514][ T4251] Bluetooth: hci6: command 0x0419 tx timeout [ 207.837806][ T4616] attempt to access beyond end of device [ 207.837806][ T4616] loop6: rw=2049, want=45104, limit=40427 [ 207.887803][ T3091] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 207.906673][ T3091] device bridge_slave_1 left promiscuous mode [ 207.915577][ T3091] bridge0: port 2(bridge_slave_1) entered disabled state [ 207.977850][ T3091] device bridge_slave_0 left promiscuous mode [ 207.984470][ T3091] bridge0: port 1(bridge_slave_0) entered disabled state [ 208.394935][ T3091] team0 (unregistering): Port device team_slave_1 removed [ 208.442792][ T3091] team0 (unregistering): Port device team_slave_0 removed [ 208.486049][ T3091] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 208.548986][ T3091] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 208.766191][ T6157] loop6: detected capacity change from 0 to 512 [ 208.891947][ T6157] EXT4-fs (loop6): Ignoring removed nomblk_io_submit option [ 208.910948][ T6157] EXT4-fs (loop6): filesystem is read-only [ 209.092865][ T6157] EXT4-fs (loop6): ext4_check_descriptors: Block bitmap for group 0 overlaps block group descriptors [ 209.338852][ T6157] EXT4-fs (loop6): filesystem is read-only [ 209.367208][ T3091] bond0 (unregistering): Released all slaves [ 209.377366][ T6157] EXT4-fs (loop6): orphan cleanup on readonly fs [ 209.594116][ T6157] EXT4-fs error (device loop6): ext4_validate_block_bitmap:438: comm syz.6.358: bg 0: block 64: padding at end of block bitmap is not set [ 209.751876][ T6157] EXT4-fs error (device loop6) in ext4_mb_clear_bb:6183: Corrupt filesystem [ 209.781564][ T6157] EXT4-fs (loop6): 1 orphan inode deleted [ 209.798242][ T6157] EXT4-fs (loop6): mounted filesystem without journal. Opts: grpjquota=,noblock_validity,auto_da_alloc=0x0000000000000000,inode_readahead_blks=0x0000000000001000,user_xattr,nouid32,nomblk_io_submit,data_err=abort,grpid,noauto_da_alloc,,errors=continue. Quota mode: none. [ 211.163396][ T6019] netdevsim netdevsim9 netdevsim0: renamed from eth0 [ 211.194000][ T6019] netdevsim netdevsim9 netdevsim1: renamed from eth1 [ 211.231858][ T6175] loop7: detected capacity change from 0 to 40427 [ 211.368275][ T6019] netdevsim netdevsim9 netdevsim2: renamed from eth2 [ 211.570779][ T6175] F2FS-fs (loop7): Invalid log_blocksize (268), supports only 12 [ 211.584097][ T6175] F2FS-fs (loop7): Can't find valid F2FS filesystem in 1th superblock [ 211.772328][ T6019] netdevsim netdevsim9 netdevsim3: renamed from eth3 [ 211.823154][ T6175] F2FS-fs (loop7): invalid crc value [ 211.891017][ T6017] netdevsim netdevsim8 netdevsim0: renamed from eth0 [ 211.913749][ T6017] netdevsim netdevsim8 netdevsim1: renamed from eth1 [ 211.921019][ T6175] F2FS-fs (loop7): Found nat_bits in checkpoint [ 211.988359][ T6017] netdevsim netdevsim8 netdevsim2: renamed from eth2 [ 212.022381][ T6017] netdevsim netdevsim8 netdevsim3: renamed from eth3 [ 212.077523][ T6175] F2FS-fs (loop7): Try to recover 1th superblock, ret: 0 [ 212.095225][ T6175] F2FS-fs (loop7): Mounted with checkpoint version = 48b305e5 [ 213.923285][ T6019] 8021q: adding VLAN 0 to HW filter on device bond0 [ 214.112635][ T6187] device wlan1 entered promiscuous mode [ 214.124531][ T6187] device macvtap1 entered promiscuous mode [ 214.145671][ T6187] device wlan1 left promiscuous mode [ 214.164357][ T6194] pit: kvm: requested 4190 ns i8254 timer period limited to 200000 ns [ 214.248752][ T6194] kvm: pic: non byte read [ 214.260399][ T6194] kvm: pic: level sensitive irq not supported [ 214.263781][ T6194] kvm: pic: non byte read [ 214.284496][ T6194] kvm: pic: level sensitive irq not supported [ 214.284628][ T6194] kvm: pic: non byte read [ 214.309222][ T5333] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 214.324150][ T5333] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 214.368934][ T6019] 8021q: adding VLAN 0 to HW filter on device team0 [ 214.438843][ T5336] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 214.478497][ T5336] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 214.515193][ T5336] bridge0: port 1(bridge_slave_0) entered blocking state [ 214.522342][ T5336] bridge0: port 1(bridge_slave_0) entered forwarding state [ 214.595701][ T5336] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 214.629447][ T5336] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 214.662387][ T5336] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 214.702361][ T5336] bridge0: port 2(bridge_slave_1) entered blocking state [ 214.709625][ T5336] bridge0: port 2(bridge_slave_1) entered forwarding state [ 214.762314][ T5336] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 215.559217][ T5336] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 215.598870][ T6017] 8021q: adding VLAN 0 to HW filter on device bond0 [ 216.803070][ T4824] Bluetooth: hci2: command 0x0406 tx timeout [ 216.992081][ T5336] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 217.001281][ T5336] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 217.088496][ T5336] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 217.097912][ T5336] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 217.107056][ T5336] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 217.116044][ T5336] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 217.158353][ T5336] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 217.188509][ T5336] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 217.212716][ T5336] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 217.245840][ T6019] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 217.315829][ T6019] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 217.360491][ T6017] 8021q: adding VLAN 0 to HW filter on device team0 [ 217.389725][ T5336] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 217.410122][ T5336] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 217.528040][ T5336] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 217.551258][ T5336] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 217.606397][ T5336] bridge0: port 1(bridge_slave_0) entered blocking state [ 217.613574][ T5336] bridge0: port 1(bridge_slave_0) entered forwarding state [ 217.700663][ T5336] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 217.773936][ T5336] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 217.822526][ T5336] bridge0: port 2(bridge_slave_1) entered blocking state [ 217.829768][ T5336] bridge0: port 2(bridge_slave_1) entered forwarding state [ 217.886268][ T5336] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 217.915589][ T5336] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 218.003584][ T5336] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 218.023166][ T5336] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 218.082349][ T5336] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 218.151246][ T5336] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 218.200702][ T5336] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 218.241988][ T5336] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 219.386773][ T6017] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 219.434687][ T6017] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 220.014038][ T5336] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 220.211608][ T5336] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 220.475946][ T5336] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 220.555900][ T5336] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 220.606637][ T5336] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 220.703721][ T6019] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 220.723440][ T5337] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 220.730987][ T5337] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 221.087434][ T6288] netlink: 24 bytes leftover after parsing attributes in process `syz.6.379'. [ 222.154497][ T6295] loop6: detected capacity change from 0 to 8 [ 223.029675][ T5336] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 223.039387][ T5336] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 223.098935][ T5336] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 223.124809][ T5336] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 223.208016][ T6017] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 223.253730][ T5335] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 223.273614][ T5335] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 223.307636][ T6019] device veth0_vlan entered promiscuous mode [ 223.327535][ T5335] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 223.353204][ T5335] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 223.397750][ T6019] device veth1_vlan entered promiscuous mode [ 224.896368][ T26] kauditd_printk_skb: 12 callbacks suppressed [ 224.896385][ T26] audit: type=1800 audit(1741378497.514:31): pid=6336 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.6.382" name="file1" dev="loop6" ino=5 res=0 errno=0 [ 224.961431][ T6019] device veth0_macvtap entered promiscuous mode [ 225.184861][ T6019] device veth1_macvtap entered promiscuous mode [ 225.261039][ T6019] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 225.400729][ T6019] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 225.628919][ T6019] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 225.740955][ T6019] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 225.809582][ T6019] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 225.846312][ T6019] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 225.884370][ T6019] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 225.931831][ T6019] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 225.954906][ T6019] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 226.045085][ T5335] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 226.093548][ T5335] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 226.131114][ T5335] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 226.183756][ T5335] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 226.224160][ T5335] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 226.289825][ T26] audit: type=1326 audit(1741378498.904:32): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6353 comm="syz.7.391" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f107c047169 code=0x7ffc0000 [ 226.298746][ T5335] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 226.352915][ T26] audit: type=1326 audit(1741378498.904:33): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6353 comm="syz.7.391" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f107c047169 code=0x7ffc0000 [ 226.772022][ T5335] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 227.047622][ T5335] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 227.073057][ T6355] loop7: detected capacity change from 0 to 1024 [ 227.175028][ T6019] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 227.220892][ T6019] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 227.292283][ T6019] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 227.395592][ T6019] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 228.328717][ T6019] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 228.398939][ T6019] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 228.429686][ T6019] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 228.503464][ T6019] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 228.594620][ T6355] EXT4-fs (loop7): ext4_check_descriptors: Block bitmap for group 0 overlaps block group descriptors [ 228.616224][ T6019] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 228.659233][ T5336] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 228.678339][ T6355] EXT4-fs (loop7): ext4_check_descriptors: Checksum for group 0 failed (38281!=20869) [ 228.694038][ T5336] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 228.745397][ T6355] EXT4-fs error (device loop7): ext4_get_journal_inode:5160: comm syz.7.391: inode #1: comm syz.7.391: iget: illegal inode # [ 228.757506][ T5336] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 228.825738][ T6355] EXT4-fs (loop7): no journal found [ 228.829668][ T5336] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 228.856535][ T6355] EXT4-fs (loop7): can't get journal size [ 228.884414][ T6019] netdevsim netdevsim9 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 228.916112][ T6355] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=a80ce11c, mo2=0002] [ 228.927576][ T6019] netdevsim netdevsim9 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 228.937179][ T6355] EXT4-fs (loop7): failed to initialize system zone (-22) [ 229.016580][ T6019] netdevsim netdevsim9 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 229.116616][ T6355] EXT4-fs (loop7): mount failed [ 229.135995][ T6019] netdevsim netdevsim9 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 229.234681][ T5323] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 229.254146][ T5323] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 229.286466][ T6017] device veth0_vlan entered promiscuous mode [ 229.306277][ T5323] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 229.361592][ T5323] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 229.439541][ T6017] device veth1_vlan entered promiscuous mode [ 229.603876][ T5336] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 229.642359][ T5336] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 229.672854][ T5336] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 229.704010][ T5336] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 229.776360][ T6017] device veth0_macvtap entered promiscuous mode [ 230.743692][ T5323] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 230.810949][ T5323] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 231.202780][ T5336] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 231.237347][ T5336] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 231.311470][ T6017] device veth1_macvtap entered promiscuous mode [ 231.662828][ T6017] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 231.714223][ T6017] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 231.982843][ T6017] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 232.173636][ T6411] hub 6-0:1.0: USB hub found [ 232.189408][ T6411] hub 6-0:1.0: 1 port detected [ 232.790069][ T6017] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 232.855916][ T6017] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 232.872068][ T6017] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 232.891911][ T6017] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 232.915650][ T6017] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 232.929488][ T6017] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 232.949078][ T6017] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 232.976286][ T6017] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 232.999711][ T4373] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 233.012189][ T5323] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 233.039197][ T5323] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 233.062330][ T4373] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 233.108456][ T4373] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 233.148100][ T6415] netlink: 4 bytes leftover after parsing attributes in process `syz.1.405'. [ 233.328277][ T6017] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 233.428220][ T6017] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 233.528416][ T6017] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 233.627344][ T6017] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 233.750213][ T6017] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 233.860261][ T6017] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 233.908794][ T6017] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 233.949023][ T6017] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 233.989667][ T6017] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 234.049469][ T6017] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 234.116659][ T6017] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 234.156268][ T5323] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 234.205714][ T5323] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 234.305652][ T6431] sch_tbf: burst 4398 is lower than device lo mtu (65550) ! [ 234.424894][ T6017] netdevsim netdevsim8 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 234.458788][ T6017] netdevsim netdevsim8 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 234.494180][ T6017] netdevsim netdevsim8 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 234.523425][ T6017] netdevsim netdevsim8 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 235.952348][ T4373] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 235.952370][ T5335] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 235.960714][ T4373] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 236.013363][ T5337] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 236.034128][ T5335] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 236.124365][ T5336] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 236.451435][ T6460] usb usb1: usbfs: process 6460 (syz.8.327) did not claim interface 0 before use [ 236.466420][ T3091] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 237.094388][ T6470] Cannot find set identified by id 0 to match [ 238.769163][ T4228] usb 9-1: new high-speed USB device number 2 using dummy_hcd [ 242.342026][ T6492] loop9: detected capacity change from 0 to 512 [ 242.385646][ T3091] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 243.240453][ T6507] loop7: detected capacity change from 0 to 164 [ 244.991554][ T6507] rock: corrupted directory entry. extent=41, offset=65536, size=8 [ 245.035636][ T6506] rock: corrupted directory entry. extent=41, offset=65536, size=8 [ 245.859127][ T6492] EXT4-fs: failed to create workqueue [ 245.864587][ T6492] EXT4-fs (loop9): mount failed [ 247.232254][ T3091] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 247.981186][ T3091] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 251.913941][ T6592] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 253.101173][ T6581] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 255.418903][ T6617] loop8: detected capacity change from 0 to 2048 [ 255.564336][ T6617] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 256.319882][ T1420] ieee802154 phy0 wpan0: encryption failed: -22 [ 256.326380][ T1420] ieee802154 phy1 wpan1: encryption failed: -22 [ 256.569271][ T6637] loop6: detected capacity change from 0 to 2048 [ 256.942042][ T6637] EXT4-fs (loop6): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 256.964198][ T6649] loop7: detected capacity change from 0 to 1024 [ 257.057014][ T6637] ext4 filesystem being mounted at /71/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 257.150951][ T6649] hfsplus: unable to parse mount options [ 258.867024][ T3091] device hsr_slave_0 left promiscuous mode [ 258.880117][ T3091] device hsr_slave_1 left promiscuous mode [ 258.897239][ T3091] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 258.920048][ T3091] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 258.928230][ T6671] loop8: detected capacity change from 0 to 128 [ 258.936714][ T3091] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 258.968728][ T3091] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 259.009269][ T3091] device bridge_slave_1 left promiscuous mode [ 259.015888][ T3091] bridge0: port 2(bridge_slave_1) entered disabled state [ 259.033309][ T3091] device bridge_slave_0 left promiscuous mode [ 259.061312][ T3091] bridge0: port 1(bridge_slave_0) entered disabled state [ 259.114063][ T3091] device veth1_macvtap left promiscuous mode [ 259.137148][ T3091] device veth0_macvtap left promiscuous mode [ 259.164659][ T3091] device veth1_vlan left promiscuous mode [ 259.184049][ T3091] device veth0_vlan left promiscuous mode [ 259.819163][ T3091] team0 (unregistering): Port device team_slave_1 removed [ 260.049835][ T3091] team0 (unregistering): Port device team_slave_0 removed [ 260.079266][ T3091] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 260.137935][ T3091] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 260.257752][ T3091] bond0 (unregistering): Released all slaves [ 267.480340][ T6752] loop6: detected capacity change from 0 to 256 [ 267.765104][ T6752] loop6: detected capacity change from 0 to 512 [ 268.188473][ T6754] kvm [6753]: vcpu0, guest rIP: 0x18e disabled perfctr wrmsr: 0xc2 data 0xd0 [ 268.247189][ T6754] kvm [6753]: vcpu0, guest rIP: 0x18e disabled perfctr wrmsr: 0xc1 data 0x8cc [ 268.547667][ T6775] loop7: detected capacity change from 0 to 16 [ 268.627042][ T6775] erofs: (device loop7): mounted with root inode @ nid 36. [ 271.446577][ T6807] xt_CONNSECMARK: only valid in 'mangle' or 'security' table, not 'raw' [ 272.142416][ T6798] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 273.903616][ T6827] loop6: detected capacity change from 0 to 3 [ 273.945872][ T6827] attempt to access beyond end of device [ 273.945872][ T6827] loop6: rw=2048, want=8, limit=3 [ 274.054130][ T6827] SQUASHFS error: Failed to read block 0x0: -5 [ 274.071586][ T6827] unable to read squashfs_super_block [ 277.147678][ T6842] kvm [6841]: vcpu0, guest rIP: 0x18e disabled perfctr wrmsr: 0xc2 data 0xd0 [ 277.178725][ T6842] kvm [6841]: vcpu0, guest rIP: 0x18e disabled perfctr wrmsr: 0xc1 data 0x8cc [ 277.190852][ T6842] kvm [6841]: vcpu0, guest rIP: 0x18e disabled perfctr wrmsr: 0xc2 data 0xd0 [ 277.204830][ T6842] kvm [6841]: vcpu0, guest rIP: 0x18e disabled perfctr wrmsr: 0xc2 data 0x54 [ 277.232482][ T6842] kvm [6841]: vcpu0, guest rIP: 0x18e disabled perfctr wrmsr: 0xc2 data 0x4c [ 278.288433][ T6868] loop9: detected capacity change from 0 to 32768 [ 278.332221][ T6868] gfs2: fsid=syz:syz: Trying to join cluster "lock_nolock", "syz:syz" [ 278.340463][ T6868] gfs2: fsid=syz:syz: Now mounting FS (format 1801)... [ 278.363541][ T6868] gfs2: fsid=syz:syz.s: journal 0 mapped with 5 extents in 0ms [ 278.467381][ T6868] gfs2: fsid=syz:syz.s: first mount done, others may mount [ 278.581547][ T6881] loop6: detected capacity change from 0 to 1024 [ 279.420858][ T6885] loop8: detected capacity change from 0 to 2048 [ 279.431889][ T6881] EXT4-fs (loop6): Project quota feature not enabled. Cannot enable project quota enforcement. [ 279.596164][ T6885] EXT4-fs (loop8): Ignoring removed mblk_io_submit option [ 279.650148][ T6881] loop6: detected capacity change from 0 to 256 [ 279.687296][ T6885] [EXT4 FS bs=2048, gc=1, bpg=262144, ipg=32, mo=2800c018, mo2=0042] [ 279.695478][ T6885] System zones: 0-7 [ 279.702951][ T6881] FAT-fs (loop6): Unrecognized mount option "utf>=1" or missing value [ 280.020927][ T6885] EXT4-fs (loop8): mounted filesystem without journal. Opts: noinit_itable,auto_da_alloc=0x00000000000034d1,dax=inode,jqfmt=vfsv1,debug,mblk_io_submit,dax=never,barrier=0x0000000000000000,dax=inode,bsddf,,errors=continue. Quota mode: none. [ 281.032723][ T6900] EXT4-fs error (device loop8): ext4_validate_block_bitmap:438: comm ext4lazyinit: bg 0: block 234: padding at end of block bitmap is not set [ 281.060836][ T6914] loop9: detected capacity change from 0 to 256 [ 282.506304][ T6906] loop9: detected capacity change from 0 to 512 [ 285.260709][ T6952] xt_CONNSECMARK: only valid in 'mangle' or 'security' table, not 'raw' [ 286.494884][ T6956] loop9: detected capacity change from 0 to 128 [ 287.889898][ T6977] loop8: detected capacity change from 0 to 256 [ 289.771384][ T6977] exFAT-fs (loop8): failed to load upcase table (idx : 0x00010000, chksum : 0x3f264f71, utbl_chksum : 0xe619d30d) [ 289.919423][ T3039] attempt to access beyond end of device [ 289.919423][ T3039] loop9: rw=1, want=713, limit=128 [ 289.986592][ T26] audit: type=1800 audit(1741378559.653:34): pid=6977 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.8.513" name="file2" dev="loop8" ino=1048646 res=0 errno=0 [ 291.759394][ T6998] loop9: detected capacity change from 0 to 1024 [ 291.976410][ T6998] EXT4-fs (loop9): mounted filesystem without journal. Opts: dioread_lock,noblock_validity,lazytime,noblock_validity,,errors=continue. Quota mode: none. [ 293.365647][ T7015] xt_CONNSECMARK: only valid in 'mangle' or 'security' table, not 'raw' [ 294.280954][ T7025] loop7: detected capacity change from 0 to 32768 [ 294.314734][ T7025] gfs2: fsid=syz:syz: Trying to join cluster "lock_nolock", "syz:syz" [ 294.323075][ T7025] gfs2: fsid=syz:syz: Now mounting FS (format 1801)... [ 294.342772][ T7025] gfs2: fsid=syz:syz.s: journal 0 mapped with 5 extents in 0ms [ 294.446371][ T7025] gfs2: fsid=syz:syz.s: first mount done, others may mount [ 294.471493][ T2316] usb 7-1: new high-speed USB device number 4 using dummy_hcd [ 296.883259][ T4228] Bluetooth: hci5: command 0x0406 tx timeout [ 297.529754][ T2316] usb 7-1: unable to read config index 0 descriptor/all [ 297.536768][ T2316] usb 7-1: can't read configurations, error -71 [ 298.805492][ T7053] loop6: detected capacity change from 0 to 1024 [ 298.918126][ T7057] loop7: detected capacity change from 0 to 256 [ 299.188947][ T7053] EXT4-fs (loop6): Test dummy encryption mode enabled [ 299.361778][ T7053] EXT4-fs (loop6): Ignoring removed orlov option [ 299.873892][ T7069] loop9: detected capacity change from 0 to 16 [ 299.914645][ T7053] EXT4-fs (loop6): mounted filesystem without journal. Opts: test_dummy_encryption,debug_want_extra_isize=0x0000000000000084,stripe=0x0000000000000007,commit=0x0000000000000005,orlov,barrier=0x0000000000000005,min_batch_time=0x0000000000000005,data_err=abort,,errors=continue. Quota mode: writeback. [ 299.942841][ C1] vkms_vblank_simulate: vblank timer overrun [ 300.005026][ T7069] erofs: (device loop9): mounted with root inode @ nid 36. [ 307.104782][ T7105] loop7: detected capacity change from 0 to 16 [ 307.775830][ T7105] erofs: (device loop7): mounted with root inode @ nid 36. [ 308.161008][ T7105] erofs: (device loop7): z_erofs_extent_lookback: bogus lookback distance @ nid 36 [ 308.379878][ T7105] erofs: (device loop7): z_erofs_lz4_decompress: failed to decompress -24 in[52, 4044] out[1851] [ 308.494237][ T7105] erofs: (device loop7): z_erofs_readpage: failed to read, err [-117] [ 308.543695][ T7127] loop6: detected capacity change from 0 to 128 [ 308.874600][ T5435] usb 10-1: new high-speed USB device number 2 using dummy_hcd [ 308.936162][ T7124] erofs: (device loop7): z_erofs_extent_lookback: bogus lookback distance @ nid 36 [ 309.036713][ T7133] xt_HMARK: spi-set and port-set can't be combined [ 309.075884][ T7124] erofs: (device loop7): z_erofs_lz4_decompress: failed to decompress -24 in[52, 4044] out[1851] [ 309.138339][ T5435] usb 10-1: Using ep0 maxpacket: 16 [ 309.582574][ T7124] erofs: (device loop7): z_erofs_readpage: failed to read, err [-117] [ 309.591479][ T5435] usb 10-1: config 1 contains an unexpected descriptor of type 0x2, skipping [ 309.614658][ T5435] usb 10-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 309.679903][ T5435] usb 10-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 311.509669][ T5435] usb 10-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 311.529966][ T5435] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 311.543603][ T5435] usb 10-1: Product: syz [ 311.548260][ T5435] usb 10-1: Manufacturer: syz [ 311.563063][ T5435] usb 10-1: SerialNumber: syz [ 311.581164][ T7105] syz.7.543 (7105): drop_caches: 2 [ 311.590563][ T5435] usb 10-1: can't set config #1, error -71 [ 311.605239][ T5435] usb 10-1: USB disconnect, device number 2 [ 312.491150][ T26] audit: type=1326 audit(1741378580.690:35): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7154 comm="syz.9.551" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa00f9a4169 code=0x7ffc0000 [ 312.540431][ T26] audit: type=1326 audit(1741378580.690:36): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7154 comm="syz.9.551" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa00f9a4169 code=0x7ffc0000 [ 313.067261][ T26] audit: type=1326 audit(1741378580.690:37): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7154 comm="syz.9.551" exe="/root/syz-executor" sig=0 arch=c000003e syscall=187 compat=0 ip=0x7fa00f9a4169 code=0x7ffc0000 [ 313.236818][ T3091] attempt to access beyond end of device [ 313.236818][ T3091] loop6: rw=1, want=1041, limit=128 [ 313.238693][ T26] audit: type=1326 audit(1741378580.690:38): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7154 comm="syz.9.551" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa00f9a4169 code=0x7ffc0000 [ 313.276828][ T7171] loop7: detected capacity change from 0 to 1024 [ 313.296344][ T26] audit: type=1326 audit(1741378580.690:39): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7154 comm="syz.9.551" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa00f9a4169 code=0x7ffc0000 [ 313.360109][ T7171] EXT4-fs (loop7): Test dummy encryption mode enabled [ 313.399602][ T7171] EXT4-fs (loop7): Ignoring removed orlov option [ 314.230518][ T7182] netlink: 'syz.9.558': attribute type 1 has an invalid length. [ 314.296321][ T7171] EXT4-fs (loop7): mounted filesystem without journal. Opts: test_dummy_encryption,debug_want_extra_isize=0x0000000000000084,stripe=0x0000000000000007,commit=0x0000000000000005,orlov,barrier=0x0000000000000005,min_batch_time=0x0000000000000005,data_err=abort,,errors=continue. Quota mode: writeback. [ 314.460084][ T7182] 8021q: adding VLAN 0 to HW filter on device bond1 [ 314.647740][ T7190] device gretap1 entered promiscuous mode [ 316.131025][ T7190] bond1: (slave gretap1): making interface the new active one [ 316.191487][ T7190] bond1: (slave gretap1): Enslaving as an active interface with an up link [ 316.263159][ T3039] IPv6: ADDRCONF(NETDEV_CHANGE): bond1: link becomes ready [ 316.358832][ T7192] bond1: (slave vlan2): the slave hw address is in use by the bond; couldn't find a slave with a free hw address to give it (this should not have happened) [ 316.825248][ T7207] netlink: 'syz.7.562': attribute type 4 has an invalid length. [ 316.839581][ T7204] sch_tbf: burst 4398 is lower than device lo mtu (65550) ! [ 317.257847][ T7220] CIFS: No dialect specified on mount. Default has changed to a more secure dialect, SMB2.1 or later (e.g. SMB3.1.1), from CIFS (SMB1). To use the less secure SMB1 dialect to access old servers which do not support SMB3.1.1 (or even SMB3 or SMB2.1) specify vers=1.0 on mount. [ 317.285174][ T7220] CIFS: Unable to determine destination address [ 318.895045][ T7233] device  entered promiscuous mode [ 319.504395][ T7249] netlink: 8 bytes leftover after parsing attributes in process `syz.6.572'. [ 321.918519][ T7270] sctp: failed to load transform for md5: -2 [ 322.034822][ T1420] ieee802154 phy0 wpan0: encryption failed: -22 [ 322.041171][ T1420] ieee802154 phy1 wpan1: encryption failed: -22 [ 322.226355][ T7287] loop8: detected capacity change from 0 to 128 [ 322.985316][ T7287] EXT4-fs (loop8): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 323.207534][ T7287] ext4 filesystem being mounted at /32/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 324.099856][ T7303] device wg2 entered promiscuous mode [ 324.212094][ T5435] Bluetooth: hci6: command 0x0406 tx timeout [ 324.218405][ T5435] Bluetooth: hci1: command 0x0406 tx timeout [ 327.678247][ T7338] uffd: Set unprivileged_userfaultfd sysctl knob to 1 if kernel faults must be handled without obtaining CAP_SYS_PTRACE capability [ 329.092416][ C0] vxcan1: j1939_tp_rxtimer: 0xffff88807ac6a400: rx timeout, send abort [ 329.107958][ T7345] loop9: detected capacity change from 0 to 128 [ 329.199844][ T7345] EXT4-fs (loop9): Test dummy encryption mode enabled [ 329.226558][ T7345] EXT4-fs (loop9): Test dummy encryption mode enabled [ 329.464241][ T7345] EXT4-fs (loop9): mounted filesystem without journal. Opts: test_dummy_encryption=v1,test_dummy_encryption=v1,,errors=continue. Quota mode: none. [ 329.490304][ T7345] ext4 filesystem being mounted at /34/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 329.638164][ C0] vxcan1: j1939_tp_rxtimer: 0xffff88807ac6a400: abort rx timeout. Force session deactivation [ 330.343849][ T7345] EXT4-fs (loop9): shut down requested (2) [ 330.352463][ T7345] Attempt to restore checkpoint with obsolete wellknown handles [ 331.928045][ T7366] netlink: 96 bytes leftover after parsing attributes in process `syz.1.593'. [ 332.386727][ T7372] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 333.835572][ T7399] netlink: 4 bytes leftover after parsing attributes in process `syz.8.603'. [ 337.983971][ T7419] loop8: detected capacity change from 0 to 32768 [ 338.809408][ T7474] netlink: 4 bytes leftover after parsing attributes in process `syz.1.617'. [ 339.256956][ T7477] kvm [7476]: vcpu0, guest rIP: 0x1be disabled perfctr wrmsr: 0x186 data 0x4000 [ 340.574412][ T7498] loop7: detected capacity change from 0 to 256 [ 340.697834][ T7498] exfat: Deprecated parameter 'utf8' [ 340.714646][ T7498] exfat: Deprecated parameter 'namecase' [ 340.732870][ T7498] exfat: Deprecated parameter 'utf8' [ 340.839053][ T7498] exFAT-fs (loop7): failed to load upcase table (idx : 0x00010000, chksum : 0xb89b369d, utbl_chksum : 0xe619d30d) [ 340.926728][ T7498] kvm: pic: single mode not supported [ 340.926751][ T7498] kvm: pic: level sensitive irq not supported [ 344.190364][ T4228] libceph: connect (1)[c::]:6789 error -101 [ 344.205038][ T4228] libceph: mon0 (1)[c::]:6789 connect error [ 344.215893][ T7533] ceph: No mds server is up or the cluster is laggy [ 344.223627][ T4228] libceph: connect (1)[c::]:6789 error -101 [ 344.232877][ T4228] libceph: mon0 (1)[c::]:6789 connect error [ 344.348820][ T7547] syz.7.630 uses obsolete (PF_INET,SOCK_PACKET) [ 344.364291][ T7546] netlink: 'syz.6.629': attribute type 4 has an invalid length. [ 344.509310][ T7549] loop8: detected capacity change from 0 to 2048 [ 344.739087][ T7549] EXT4-fs (loop8): mounted filesystem without journal. Opts: nogrpid,bsddf,jqfmt=vfsold,noblock_validity,,errors=continue. Quota mode: none. [ 345.884172][ T7559] EXT4-fs error (device loop8): ext4_validate_block_bitmap:438: comm ext4lazyinit: bg 0: block 234: padding at end of block bitmap is not set [ 346.319661][ T7579] loop7: detected capacity change from 0 to 1024 [ 346.360695][ T7579] EXT4-fs (loop7): Ignoring removed nobh option [ 346.373731][ T7579] EXT4-fs (loop7): Ignoring removed bh option [ 346.379998][ T7579] EXT4-fs (loop7): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 346.454006][ T7579] EXT4-fs (loop7): mounted filesystem without journal. Opts: delalloc,data_err=abort,barrier=0x0000000000000002,dioread_lock,data_err=ignore,resgid=0x0000000000000000,data_err=ignore,grpquota,nobh,user_xattr,bh,dioread_nolock,,errors=continue. Quota mode: writeback. [ 346.735657][ T7586] loop8: detected capacity change from 0 to 40427 [ 346.807918][ T7586] F2FS-fs (loop8): Invalid log_blocksize (268), supports only 12 [ 346.815964][ T7586] F2FS-fs (loop8): Can't find valid F2FS filesystem in 1th superblock [ 346.884878][ T7586] F2FS-fs (loop8): invalid crc value [ 346.892926][ T7590] loop9: detected capacity change from 0 to 64 [ 346.915969][ T7586] F2FS-fs (loop8): Found nat_bits in checkpoint [ 347.221910][ T7586] F2FS-fs (loop8): Try to recover 1th superblock, ret: 0 [ 347.229201][ T7586] F2FS-fs (loop8): Mounted with checkpoint version = 48b305e5 [ 347.461588][ T26] audit: type=1800 audit(1741378613.410:40): pid=7590 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.9.639" name="file1" dev="loop9" ino=18 res=0 errno=0 [ 347.481869][ C0] vkms_vblank_simulate: vblank timer overrun [ 348.233284][ T7602] program syz.6.641 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 348.480562][ T7609] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 348.591134][ T7588] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 355.059583][ T7698] loop7: detected capacity change from 0 to 512 [ 356.143467][ T7698] EXT4-fs (loop7): mounting ext3 file system using the ext4 subsystem [ 356.167009][ T7698] EXT4-fs (loop7): invalid journal inode [ 356.437736][ T7698] EXT4-fs (loop7): can't get journal size [ 356.500124][ T7698] EXT4-fs (loop7): 1 truncate cleaned up [ 356.505819][ T7698] EXT4-fs (loop7): mounted filesystem without journal. Opts: norecovery,,errors=continue. Quota mode: none. [ 357.085550][ T7715] netlink: 4 bytes leftover after parsing attributes in process `syz.1.659'. [ 360.493348][ T4824] usb 7-1: new high-speed USB device number 6 using dummy_hcd [ 363.130252][ T4824] usb 7-1: device descriptor read/all, error -71 [ 363.192622][ T7778] loop8: detected capacity change from 0 to 256 [ 363.456149][ T7781] netlink: 'syz.7.673': attribute type 10 has an invalid length. [ 363.564144][ T7785] syz.6.675 calls setitimer() with new_value NULL pointer. Misfeature support will be removed [ 364.507164][ T7794] loop7: detected capacity change from 0 to 64 [ 364.987136][ T7800] loop8: detected capacity change from 0 to 40427 [ 365.056079][ T7800] F2FS-fs (loop8): invalid crc value [ 365.302962][ T7800] F2FS-fs (loop8): Found nat_bits in checkpoint [ 365.408276][ T7800] F2FS-fs (loop8): Start checkpoint disabled! [ 365.538912][ T7800] F2FS-fs (loop8): Mounted with checkpoint version = 48b305e6 [ 367.377814][ T4373] attempt to access beyond end of device [ 367.377814][ T4373] loop8: rw=2049, want=40984, limit=40427 [ 367.459288][ T7804] chnl_net:caif_netlink_parms(): no params data found [ 367.576163][ T4824] Bluetooth: hci3: command 0x0409 tx timeout [ 367.857417][ T7804] bridge0: port 1(bridge_slave_0) entered blocking state [ 367.884063][ T7804] bridge0: port 1(bridge_slave_0) entered disabled state [ 367.929043][ T7838] hfs: request for non-existent node 24 in B*Tree [ 367.937621][ T7804] device bridge_slave_0 entered promiscuous mode [ 368.039216][ T7804] bridge0: port 2(bridge_slave_1) entered blocking state [ 368.085205][ T7804] bridge0: port 2(bridge_slave_1) entered disabled state [ 368.108963][ T7838] hfs: request for non-existent node 24 in B*Tree [ 368.125168][ T7840] UBIFS error (pid: 7840): cannot open "./file0", error -22 [ 368.168503][ T7804] device bridge_slave_1 entered promiscuous mode [ 369.215548][ T7804] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 369.243799][ T7804] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 370.112228][ T2316] Bluetooth: hci3: command 0x041b tx timeout [ 370.352048][ T7804] team0: Port device team_slave_0 added [ 370.385846][ T7804] team0: Port device team_slave_1 added [ 370.447899][ T7804] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 370.455381][ T7804] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 370.483732][ T7804] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 370.497799][ T7804] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 370.505518][ T7804] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 370.666722][ T7804] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 371.622564][ T7804] device hsr_slave_0 entered promiscuous mode [ 371.678088][ T7804] device hsr_slave_1 entered promiscuous mode [ 372.387345][ T4217] Bluetooth: hci3: command 0x040f tx timeout [ 373.070009][ T7894] overlayfs: failed to clone upperpath [ 373.129305][ T7900] loop7: detected capacity change from 0 to 512 [ 373.231775][ T7900] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support! [ 373.273239][ T7900] EXT4-fs (loop7): encrypted files will use data=ordered instead of data journaling mode [ 373.351200][ T7900] EXT4-fs (loop7): 1 truncate cleaned up [ 373.367960][ T7900] EXT4-fs (loop7): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 374.193254][ T26] audit: type=1800 audit(1741378638.423:41): pid=7900 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.7.693" name="bus" dev="loop7" ino=18 res=0 errno=0 [ 375.648058][ T4255] Bluetooth: hci3: command 0x0419 tx timeout [ 376.479515][ T7921] netlink: 'syz.6.697': attribute type 1 has an invalid length. [ 376.519524][ T7930] loop7: detected capacity change from 0 to 512 [ 376.580694][ T7922] 8021q: adding VLAN 0 to HW filter on device bond1 [ 376.599194][ T7930] EXT4-fs (loop7): mounted filesystem without journal. Opts: sb=0x0000000000000001,nodioread_nolock,,errors=continue. Quota mode: writeback. [ 376.614747][ T7930] ext4 filesystem being mounted at /111/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 376.657178][ T7924] device veth3 entered promiscuous mode [ 376.674448][ T7924] bond1: (slave veth3): Enslaving as a backup interface with a down link [ 376.719547][ T7930] bridge0: port 3(syz_tun) entered blocking state [ 376.730769][ T7930] bridge0: port 3(syz_tun) entered disabled state [ 376.740303][ T7930] device syz_tun entered promiscuous mode [ 376.747121][ T7930] bridge0: port 3(syz_tun) entered blocking state [ 376.754117][ T7930] bridge0: port 3(syz_tun) entered forwarding state [ 377.209632][ T7954] netlink: 256 bytes leftover after parsing attributes in process `syz.6.700'. [ 378.101472][ T7955] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 378.360657][ T7804] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 379.123537][ T7966] loop7: detected capacity change from 0 to 512 [ 379.170935][ T7965] netdevsim netdevsim6: loading /lib/firmware/. failed with error -22 [ 379.179241][ T7965] netdevsim netdevsim6: Direct firmware load for . failed with error -22 [ 379.187779][ T7965] netdevsim netdevsim6: Falling back to sysfs fallback for: . [ 379.311878][ T7804] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 379.368098][ T7804] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 379.383535][ T7972] loop6: detected capacity change from 0 to 512 [ 379.409177][ T7966] EXT4-fs (loop7): mounted filesystem without journal. Opts: grpquota,auto_da_alloc,minixdf,,errors=continue. Quota mode: writeback. [ 379.437255][ T7804] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 379.525900][ T7966] ext4 filesystem being mounted at /112/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 380.746780][ T7972] EXT4-fs (loop6): mounted filesystem without journal. Opts: nodelalloc,grpid,auto_da_alloc,,errors=continue. Quota mode: writeback. [ 381.253798][ T7972] ext4 filesystem being mounted at /118/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 381.355687][ T7985] virtio-fs: tag <(null)> not found [ 381.528023][ T7804] 8021q: adding VLAN 0 to HW filter on device bond0 [ 381.577227][ T4373] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 381.594865][ T4373] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 382.182480][ T7804] 8021q: adding VLAN 0 to HW filter on device team0 [ 382.811902][ T5323] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 382.825369][ T5323] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 382.861248][ T5323] bridge0: port 1(bridge_slave_0) entered blocking state [ 382.868434][ T5323] bridge0: port 1(bridge_slave_0) entered forwarding state [ 383.839387][ T5323] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 383.853020][ T8010] loop8: detected capacity change from 0 to 512 [ 383.899692][ T5323] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 383.917995][ T5323] bridge0: port 2(bridge_slave_1) entered blocking state [ 383.925197][ T5323] bridge0: port 2(bridge_slave_1) entered forwarding state [ 383.940093][ T5323] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 383.962671][ T5323] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 384.224771][ T5323] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 384.318376][ T5323] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 384.334178][ T5323] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 384.350364][ T5323] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 384.365105][ T5323] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 384.403614][ T8010] EXT4-fs (loop8): 1 orphan inode deleted [ 384.409749][ T8010] EXT4-fs (loop8): mounted filesystem without journal. Opts: errors=remount-ro,nodiscard,noquota,init_itable,stripe=0x0000000000000079,resgid=0x0000000000000000,sysvgroups,delalloc,usrquota,. Quota mode: writeback. [ 384.444559][ T8010] ext4 filesystem being mounted at /64/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 384.454451][ T5323] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 384.483010][ T5323] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 384.536645][ T5323] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 384.578994][ T5323] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 384.613023][ T5323] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 386.341331][ T7804] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 386.562341][ T8045] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 387.079363][ T8051] loop6: detected capacity change from 0 to 64 [ 387.691223][ T1420] ieee802154 phy0 wpan0: encryption failed: -22 [ 387.699272][ T1420] ieee802154 phy1 wpan1: encryption failed: -22 [ 390.348056][ T4235] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 391.246365][ T4235] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 391.423535][ T7804] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 391.667613][ T8075] Set syz1 is full, maxelem 65536 reached [ 392.613724][ T4373] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 392.667337][ T4373] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 392.765429][ T3091] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 392.785917][ T3091] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 392.819639][ T7804] device veth0_vlan entered promiscuous mode [ 392.832664][ T3091] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 393.028186][ T3091] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 393.056115][ T7804] device veth1_vlan entered promiscuous mode [ 394.224319][ T8099] loop8: detected capacity change from 0 to 256 [ 394.433430][ T5323] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 394.479348][ T8099] exFAT-fs (loop8): failed to load upcase table (idx : 0x00010000, chksum : 0x205ad3fc, utbl_chksum : 0xe619d30d) [ 394.619930][ T5323] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 394.649527][ T8104] loop6: detected capacity change from 0 to 4096 [ 394.656496][ T5323] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 394.688662][ T7804] device veth0_macvtap entered promiscuous mode [ 394.714628][ T8104] EXT4-fs (loop6): Ignoring removed nomblk_io_submit option [ 394.748865][ T7804] device veth1_macvtap entered promiscuous mode [ 394.835476][ T8104] EXT4-fs (loop6): mounted filesystem without journal. Opts: bsdgroups,max_dir_size_kb=0x00000000000000da,init_itable,nojournal_checksum,nomblk_io_submit,,errors=continue. Quota mode: writeback. [ 396.771831][ T7804] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 396.784897][ T7804] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 396.812755][ T7804] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 396.852836][ T7804] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 396.892948][ T7804] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 396.940598][ T7804] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 396.950735][ T7804] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 396.961560][ T7804] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 396.971438][ T7804] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 396.982547][ T7804] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 396.994717][ T7804] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 397.009194][ T7804] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 397.020067][ T7804] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 397.037870][ T7804] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 397.089977][ T7804] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 397.131672][ T7804] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 397.142290][ T7804] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 397.152341][ T7804] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 397.162924][ T7804] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 397.173905][ T7804] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 397.185023][ T7804] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 397.202458][ T7804] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 397.210486][ T5323] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 397.274286][ T5323] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 397.371841][ T5323] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 397.495241][ T5323] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 397.621838][ T5323] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 397.754318][ T5323] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 397.904791][ T7804] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 397.944675][ T7804] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 397.955364][ T7804] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 397.965532][ T7804] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 398.137227][ T5323] netdevsim netdevsim8 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 398.520922][ T5323] netdevsim netdevsim8 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 399.269805][ T5323] netdevsim netdevsim8 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 400.292299][ T5333] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 400.341414][ T5333] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 400.360711][ T5323] netdevsim netdevsim8 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 400.460445][ T5333] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 400.491337][ T4373] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 400.515039][ T4373] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 400.591138][ T4373] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 401.694096][ T5323] device  left promiscuous mode [ 403.654786][ T8171] nvme_fabrics: missing parameter 'transport=%s' [ 403.661814][ T8171] nvme_fabrics: missing parameter 'nqn=%s' [ 403.760435][ T4255] Bluetooth: hci1: command 0x0409 tx timeout [ 404.196091][ T8175] netdevsim netdevsim1: loading /lib/firmware/. failed with error -22 [ 404.205722][ T8175] netdevsim netdevsim1: Direct firmware load for . failed with error -22 [ 404.214409][ T8175] netdevsim netdevsim1: Falling back to sysfs fallback for: . [ 405.196110][ T8189] libceph: resolve '. [ 405.196110][ T8189] #)|.fǝa2sow?'%ЏKAqfCzeSb3L)HyoǤYMhE$ [ 405.196110][ T8189] ' (ret=-3): failed [ 405.974192][ T4255] Bluetooth: hci1: command 0x041b tx timeout [ 406.683232][ T8180] sctp: failed to load transform for md5: -2 [ 408.550195][ T4255] Bluetooth: hci1: command 0x040f tx timeout [ 409.523540][ T8226] loop0: detected capacity change from 0 to 256 [ 409.538431][ T8158] chnl_net:caif_netlink_parms(): no params data found [ 410.894479][ T4228] Bluetooth: hci1: command 0x0419 tx timeout [ 414.102597][ T8158] bridge0: port 1(bridge_slave_0) entered blocking state [ 414.130875][ T8158] bridge0: port 1(bridge_slave_0) entered disabled state [ 414.166468][ T8158] device bridge_slave_0 entered promiscuous mode [ 414.340431][ T8158] bridge0: port 2(bridge_slave_1) entered blocking state [ 414.400160][ T8158] bridge0: port 2(bridge_slave_1) entered disabled state [ 414.452433][ T4638] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 414.493713][ T8158] device bridge_slave_1 entered promiscuous mode [ 414.718854][ T4638] usb 1-1: Using ep0 maxpacket: 16 [ 414.837784][ T8158] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 414.932859][ T4638] usb 1-1: config 4 has an invalid interface number: 52 but max is 1 [ 414.952637][ T8158] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 414.965227][ T4638] usb 1-1: config 4 has an invalid descriptor of length 0, skipping remainder of the config [ 414.996734][ T4638] usb 1-1: config 4 has 1 interface, different from the descriptor's value: 2 [ 415.007664][ T4638] usb 1-1: config 4 has no interface number 0 [ 415.013791][ T4638] usb 1-1: config 4 interface 52 altsetting 62 has an invalid endpoint with address 0x17, skipping [ 415.103486][ T4638] usb 1-1: config 4 interface 52 has no altsetting 0 [ 415.542945][ T4638] usb 1-1: New USB device found, idVendor=0b95, idProduct=7720, bcdDevice=18.78 [ 415.590267][ T4638] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 415.699861][ T4638] usb 1-1: Product: syz [ 415.743973][ T4638] usb 1-1: Manufacturer: syz [ 415.847758][ T4638] usb 1-1: SerialNumber: syz [ 415.978501][ T8158] team0: Port device team_slave_0 added [ 416.077372][ T8158] team0: Port device team_slave_1 added [ 416.130726][ T8158] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 416.138006][ T8158] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 416.183565][ T8158] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 416.269649][ T8158] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 416.318883][ T8158] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 416.361044][ T8316] loop6: detected capacity change from 0 to 512 [ 416.364593][ T8158] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 417.306129][ T4638] asix 1-1:4.52 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -71 [ 418.021028][ T4638] asix: probe of 1-1:4.52 failed with error -71 [ 418.032692][ T4638] usb 1-1: USB disconnect, device number 2 [ 418.089523][ T8316] EXT4-fs (loop6): mounted filesystem without journal. Opts: usrquota,grpjquota=,nodelalloc,,errors=continue. Quota mode: writeback. [ 418.103906][ T8316] ext4 filesystem being mounted at /128/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 418.344250][ T8158] device hsr_slave_0 entered promiscuous mode [ 418.351146][ T8158] device hsr_slave_1 entered promiscuous mode [ 418.867798][ T8158] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 418.935645][ T8158] Cannot create hsr debugfs directory [ 419.160234][ T5323] device hsr_slave_0 left promiscuous mode [ 420.251721][ T5323] device hsr_slave_1 left promiscuous mode [ 420.279835][ T5323] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 420.287352][ T5323] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 420.407835][ T5323] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 420.415281][ T5323] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 420.424599][ T8341] bridge0: received packet on syz_tun with own address as source address (addr:aa:aa:aa:aa:aa:aa, vlan:0) [ 420.428775][ T5323] device bridge_slave_1 left promiscuous mode [ 420.507627][ T5323] bridge0: port 2(bridge_slave_1) entered disabled state [ 420.658788][ T5323] device bridge_slave_0 left promiscuous mode [ 420.673472][ T5323] bridge0: port 1(bridge_slave_0) entered disabled state [ 420.754117][ T5323] device veth1_macvtap left promiscuous mode [ 420.801081][ T5323] device veth0_macvtap left promiscuous mode [ 420.844975][ T5323] device veth1_vlan left promiscuous mode [ 420.890930][ T5323] device veth0_vlan left promiscuous mode [ 421.617670][ T8369] loop6: detected capacity change from 0 to 256 [ 421.727723][ T8369] FAT-fs (loop6): Directory bread(block 64) failed [ 421.748901][ T8369] FAT-fs (loop6): Directory bread(block 65) failed [ 421.758200][ T5323] team0 (unregistering): Port device team_slave_1 removed [ 421.770592][ T8369] FAT-fs (loop6): Directory bread(block 66) failed [ 421.789040][ T8369] FAT-fs (loop6): Directory bread(block 67) failed [ 421.802462][ T8369] FAT-fs (loop6): Directory bread(block 68) failed [ 421.815111][ T5323] team0 (unregistering): Port device team_slave_0 removed [ 421.828235][ T8369] FAT-fs (loop6): Directory bread(block 69) failed [ 421.847199][ T8369] FAT-fs (loop6): Directory bread(block 70) failed [ 421.865058][ T5323] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 421.870850][ T8369] FAT-fs (loop6): Directory bread(block 71) failed [ 421.890782][ T8369] FAT-fs (loop6): Directory bread(block 72) failed [ 421.905917][ T5323] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 421.918404][ T8369] FAT-fs (loop6): Directory bread(block 73) failed [ 422.210756][ T5323] bond0 (unregistering): Released all slaves [ 425.151024][ T8405] loop0: detected capacity change from 0 to 512 [ 425.244198][ T8405] EXT4-fs (loop0): 1 orphan inode deleted [ 425.250093][ T8405] EXT4-fs (loop0): mounted filesystem without journal. Opts: errors=remount-ro,nodiscard,noquota,init_itable,stripe=0x0000000000000079,resgid=0x0000000000000000,sysvgroups,delalloc,usrquota,. Quota mode: writeback. [ 425.274135][ T8412] loop6: detected capacity change from 0 to 512 [ 425.275500][ T8405] ext4 filesystem being mounted at /10/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 425.517518][ T8412] EXT4-fs (loop6): encrypted files will use data=ordered instead of data journaling mode [ 425.533257][ T8412] EXT4-fs (loop6): 1 truncate cleaned up [ 425.540308][ T8412] EXT4-fs (loop6): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 425.559107][ T4825] usb 8-1: new high-speed USB device number 2 using dummy_hcd [ 426.537684][ T8421] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 426.547592][ T8421] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 426.555176][ T8421] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 426.623325][ T26] audit: type=1800 audit(1741378687.335:42): pid=8412 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.6.782" name="bus" dev="loop6" ino=18 res=0 errno=0 [ 426.646936][ T4825] usb 8-1: Using ep0 maxpacket: 16 [ 426.831448][ T4825] usb 8-1: config 4 has an invalid interface number: 52 but max is 1 [ 426.839598][ T4825] usb 8-1: config 4 has an invalid descriptor of length 0, skipping remainder of the config [ 426.905161][ T4825] usb 8-1: config 4 has 1 interface, different from the descriptor's value: 2 [ 427.104609][ T4825] usb 8-1: config 4 has no interface number 0 [ 427.111675][ T4825] usb 8-1: config 4 interface 52 altsetting 62 has an invalid endpoint with address 0x17, skipping [ 427.123244][ T4825] usb 8-1: config 4 interface 52 has no altsetting 0 [ 427.451954][ T4825] usb 8-1: New USB device found, idVendor=0b95, idProduct=7720, bcdDevice=18.78 [ 427.461175][ T4825] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 427.748696][ T4825] usb 8-1: Product: syz [ 428.060815][ T4825] usb 8-1: Manufacturer: syz [ 428.081955][ T4825] usb 8-1: SerialNumber: syz [ 428.349453][ T4825] asix 8-1:4.52 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -71 [ 428.377641][ T4825] asix: probe of 8-1:4.52 failed with error -71 [ 428.400109][ T4825] usb 8-1: USB disconnect, device number 2 [ 430.217567][ T8473] misc userio: No port type given on /dev/userio [ 430.986954][ T8158] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 431.022472][ T8158] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 431.418033][ T8158] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 431.588269][ T8482] loop6: detected capacity change from 0 to 512 [ 431.608362][ T8158] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 432.158279][ T8482] EXT4-fs (loop6): 1 orphan inode deleted [ 432.193224][ T8482] EXT4-fs (loop6): mounted filesystem without journal. Opts: errors=remount-ro,nodiscard,noquota,init_itable,stripe=0x0000000000000079,resgid=0x0000000000000000,sysvgroups,delalloc,usrquota,. Quota mode: writeback. [ 432.220086][ T8482] ext4 filesystem being mounted at /136/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 433.385360][ T8499] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 433.392856][ T8499] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 433.502685][ T8158] 8021q: adding VLAN 0 to HW filter on device bond0 [ 433.617468][ T8158] 8021q: adding VLAN 0 to HW filter on device team0 [ 433.668435][ T5338] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 433.698316][ T5338] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 433.737942][ T5338] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 433.777645][ T5338] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 433.807669][ T5338] bridge0: port 1(bridge_slave_0) entered blocking state [ 433.814850][ T5338] bridge0: port 1(bridge_slave_0) entered forwarding state [ 434.008709][ T8158] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 435.275439][ T8158] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 437.233108][ T5338] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 437.255602][ T5338] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 437.303892][ T5338] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 437.350373][ T5338] bridge0: port 2(bridge_slave_1) entered blocking state [ 437.357542][ T5338] bridge0: port 2(bridge_slave_1) entered forwarding state [ 437.458595][ T5338] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 437.500748][ T5338] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 437.566389][ T5338] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 437.615113][ T5338] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 437.683082][ T5338] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 437.737885][ T5338] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 437.779734][ T5338] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 437.804362][ T5338] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 437.827002][ T5338] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 437.868246][ T5338] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 437.911003][ T8516] netlink: 44 bytes leftover after parsing attributes in process `syz.7.800'. [ 438.108384][ T5338] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 438.206805][ T5338] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 438.536893][ T8508] Set syz1 is full, maxelem 65536 reached [ 438.925160][ T8536] loop7: detected capacity change from 0 to 8 [ 440.293561][ T5334] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 440.301105][ T5334] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 440.600271][ T8158] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 440.777370][ T3091] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 440.787062][ T3091] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 441.745903][ T8158] device veth0_vlan entered promiscuous mode [ 444.862725][ T8158] device veth1_vlan entered promiscuous mode [ 445.279738][ T4638] Bluetooth: hci2: Controller not accepting commands anymore: ncmd = 0 [ 445.360246][ T4356] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 445.396915][ T4638] Bluetooth: hci2: Injecting HCI hardware error event [ 445.405754][ T4356] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 445.428543][ T8576] futex_wake_op: syz.6.812 tries to shift op by 32; fix this program [ 445.451754][ T4187] Bluetooth: hci2: hardware error 0x00 [ 445.594962][ T8582] loop6: detected capacity change from 0 to 64 [ 445.604993][ T4356] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 445.637356][ T4356] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 445.957842][ T8158] device veth0_macvtap entered promiscuous mode [ 445.996498][ T8582] hfs: unable to locate alternate MDB [ 446.002910][ T8582] hfs: continuing without an alternate MDB [ 446.086418][ T8574] netlink: 'syz.0.813': attribute type 1 has an invalid length. [ 446.253980][ T8583] device veth3 entered promiscuous mode [ 446.344006][ T4356] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 446.362297][ T4356] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 446.962896][ T4356] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 447.195333][ T4356] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 447.248783][ T4356] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 447.316739][ T8158] device veth1_macvtap entered promiscuous mode [ 447.388509][ T8158] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 447.410634][ T8158] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 447.445170][ T8158] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 447.490473][ T8158] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 447.500509][ T8158] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 447.511475][ T8158] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 447.522793][ T8158] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 447.536927][ T8158] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 447.546852][ T8158] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 447.558004][ T8158] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 448.011300][ T8158] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 448.079865][ T8599] netem: incorrect gi model size [ 448.086637][ T8599] netem: change failed [ 448.126218][ T8602] program syz.0.819 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 448.159017][ T3091] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 448.208247][ T3091] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 448.235145][ T8158] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 448.274108][ T8158] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 448.319360][ T8158] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 448.385351][ T8158] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 448.409863][ T8608] loop0: detected capacity change from 0 to 2048 [ 448.444625][ T8158] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 448.479256][ T8158] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 448.489449][ T8158] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 448.500061][ T8158] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 448.510069][ T8158] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 448.520705][ T8158] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 448.533516][ T8158] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 448.542006][ T5325] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 448.553119][ T5325] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 449.012873][ T8608] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 449.511884][ T8158] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 449.522040][ T8158] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 449.531217][ T8158] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 449.540110][ T8158] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 449.747284][ T3091] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 449.787406][ T3091] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 449.884256][ T4356] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 449.949253][ T5334] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 450.103969][ T5334] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 451.424955][ T8629] netlink: 8 bytes leftover after parsing attributes in process `syz.0.825'. [ 451.439780][ T5325] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 451.812007][ T8633] loop2: detected capacity change from 0 to 256 [ 451.842048][ T8636] loop0: detected capacity change from 0 to 512 [ 451.852090][ T8634] netlink: 4 bytes leftover after parsing attributes in process `syz.6.826'. [ 451.968030][ T8636] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 452.026458][ T8636] EXT4-fs (loop0): 1 truncate cleaned up [ 452.049751][ T8636] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 452.064486][ T26] audit: type=1800 audit(1741378712.259:43): pid=8636 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.827" name="bus" dev="loop0" ino=18 res=0 errno=0 [ 453.451324][ T1420] ieee802154 phy0 wpan0: encryption failed: -22 [ 453.459377][ T1420] ieee802154 phy1 wpan1: encryption failed: -22 [ 454.511254][ T8651] loop6: detected capacity change from 0 to 512 [ 454.837329][ T8653] loop7: detected capacity change from 0 to 8192 [ 454.878135][ T8655] IPv6: ADDRCONF(NETDEV_CHANGE): bpq0: link becomes ready [ 457.926227][ T4825] libceph: connect (1)[c::]:6789 error -101 [ 457.932296][ T4825] libceph: mon0 (1)[c::]:6789 connect error [ 457.938430][ T8664] ceph: No mds server is up or the cluster is laggy [ 458.047201][ T8681] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 458.789067][ T8689] Cannot find del_set index 0 as target [ 459.642465][ T8684] x_tables: ip_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING [ 461.074355][ T8706] loop0: detected capacity change from 0 to 4096 [ 465.195249][ T8717] sctp: failed to load transform for md5: -4 [ 467.804975][ T8747] loop0: detected capacity change from 0 to 1024 [ 469.717498][ C0] vxcan1: j1939_tp_rxtimer: 0xffff888023dcbc00: rx timeout, send abort [ 470.260417][ C0] vxcan1: j1939_tp_rxtimer: 0xffff888023dcbc00: abort rx timeout. Force session deactivation [ 471.308897][ T8772] loop0: detected capacity change from 0 to 256 [ 473.742477][ T1108] Bluetooth: hci0: command 0x0401 tx timeout [ 480.130780][ T4824] Bluetooth: hci2: command 0x0409 tx timeout [ 480.779571][ T4235] netdevsim netdevsim6 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 482.163104][ T4235] netdevsim netdevsim6 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 482.414118][ T4824] Bluetooth: hci2: command 0x041b tx timeout [ 482.480175][ T4235] netdevsim netdevsim6 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 482.695750][ T4235] netdevsim netdevsim6 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 482.845887][ T8823] chnl_net:caif_netlink_parms(): no params data found [ 483.121506][ T8855] vxcan0: tx drop: invalid da for name 0x0000000000000001 [ 483.215235][ T8823] bridge0: port 1(bridge_slave_0) entered blocking state [ 483.253838][ T8823] bridge0: port 1(bridge_slave_0) entered disabled state [ 483.278921][ T8823] device bridge_slave_0 entered promiscuous mode [ 483.339289][ T8823] bridge0: port 2(bridge_slave_1) entered blocking state [ 483.365215][ T8823] bridge0: port 2(bridge_slave_1) entered disabled state [ 483.396186][ T8823] device bridge_slave_1 entered promiscuous mode [ 483.473381][ T8823] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 483.614930][ T8823] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 484.524616][ T8902] loop7: detected capacity change from 0 to 1024 [ 484.602910][ T4255] Bluetooth: hci2: command 0x040f tx timeout [ 484.642790][ T8823] team0: Port device team_slave_0 added [ 484.683081][ T8902] EXT4-fs (loop7): revision level too high, forcing read-only mode [ 484.882985][ T8823] team0: Port device team_slave_1 added [ 484.893640][ T8902] EXT4-fs (loop7): orphan cleanup on readonly fs [ 484.900075][ T8902] EXT4-fs error (device loop7): ext4_ext_check_inode:501: inode #3: comm syz.7.883: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 2, max 2(4), depth 0(0) [ 485.570035][ T8902] EXT4-fs error (device loop7): ext4_quota_enable:6391: comm syz.7.883: Bad quota inode: 3, type: 0 [ 485.627500][ T8902] EXT4-fs warning (device loop7): ext4_enable_quotas:6432: Failed to enable quota tracking (type=0, err=-117, ino=3). Please run e2fsck to fix. [ 485.662129][ T4235] tipc: Disabling bearer [ 485.693898][ T4235] tipc: Left network mode [ 485.754907][ T8902] EXT4-fs (loop7): Cannot turn on quotas: error -117 [ 485.784926][ T8902] EXT4-fs (loop7): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 485.798120][ T8823] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 485.959839][ T8823] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 486.540759][ T8823] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 486.794777][ T4255] Bluetooth: hci2: command 0x0419 tx timeout [ 486.880909][ T8921] EXT4-fs error (device loop7): ext4_readdir:260: inode #2: block 16: comm syz.7.883: path /145/file1: bad entry in directory: inode out of bounds - offset=44, inode=40, rec_len=16, size=1024 fake=0 [ 486.957544][ T8823] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 486.968948][ T8823] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 486.995312][ T8823] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 487.386634][ T8823] device hsr_slave_0 entered promiscuous mode [ 487.432952][ T8823] device hsr_slave_1 entered promiscuous mode [ 487.553592][ T8823] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 487.579694][ T8823] Cannot create hsr debugfs directory [ 488.419360][ T8823] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 488.512611][ T8943] netlink: 'syz.1.891': attribute type 1 has an invalid length. [ 488.635374][ T8823] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 488.728256][ T8943] 8021q: adding VLAN 0 to HW filter on device bond1 [ 488.813399][ T8945] device veth3 entered promiscuous mode [ 488.879388][ T8945] bond1: (slave veth3): Enslaving as a backup interface with a down link [ 488.966964][ T8953] loop7: detected capacity change from 0 to 512 [ 488.969995][ T8823] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 489.060403][ T8953] EXT4-fs (loop7): encrypted files will use data=ordered instead of data journaling mode [ 489.113708][ T8953] EXT4-fs (loop7): 1 truncate cleaned up [ 489.125335][ T8953] EXT4-fs (loop7): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 489.164830][ T26] audit: type=1800 audit(1741378746.962:44): pid=8953 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.7.893" name="bus" dev="loop7" ino=18 res=0 errno=0 [ 489.387075][ T8823] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 490.210940][ T8974] loop7: detected capacity change from 0 to 512 [ 491.776103][ T8823] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 492.810650][ T8823] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 492.879919][ T8823] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 494.054575][ T8823] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 496.195325][ T4235] device hsr_slave_0 left promiscuous mode [ 496.211781][ T4235] device hsr_slave_1 left promiscuous mode [ 496.581771][ T4235] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 496.596411][ T9017] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 496.596497][ T4235] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 496.652285][ T4235] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 496.681852][ T4235] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 496.699499][ T4235] device bridge_slave_1 left promiscuous mode [ 496.812311][ T4235] bridge0: port 2(bridge_slave_1) entered disabled state [ 496.842931][ T4235] device bridge_slave_0 left promiscuous mode [ 496.863277][ T4235] bridge0: port 1(bridge_slave_0) entered disabled state [ 496.922100][ T4235] device veth1_macvtap left promiscuous mode [ 496.937854][ T4235] device veth0_macvtap left promiscuous mode [ 496.952079][ T4235] device veth1_vlan left promiscuous mode [ 496.976839][ T4235] device veth0_vlan left promiscuous mode [ 497.276785][ T4824] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 498.875852][ T4824] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 498.933853][ T4824] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 499.110957][ T4824] usb 1-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 499.181822][ T4824] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 499.451708][ T9036] ALSA: mixer_oss: invalid OSS volume '' [ 499.473768][ T4824] usb 1-1: SerialNumber: syz [ 499.483802][ T4255] Bluetooth: hci3: command 0x0406 tx timeout [ 499.499482][ T4235] bond1 (unregistering): (slave veth3): Releasing backup interface [ 499.538027][ T4824] usb 1-1: can't set config #1, error -71 [ 501.287999][ T4824] usb 1-1: USB disconnect, device number 3 [ 501.473158][ T4235] bond1 (unregistering): Released all slaves [ 502.957856][ T4235] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 503.066299][ T4235] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 503.894013][ T9066] kvm [9065]: vcpu0, guest rIP: 0x1be disabled perfctr wrmsr: 0x186 data 0x4000 [ 504.688720][ T4235] bond0 (unregistering): Released all slaves [ 505.770146][ T8823] 8021q: adding VLAN 0 to HW filter on device bond0 [ 505.855919][ T8823] 8021q: adding VLAN 0 to HW filter on device team0 [ 505.863109][ T5338] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 505.892471][ T5338] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 505.938422][ T5338] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 505.979707][ T5338] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 506.002590][ T5338] bridge0: port 1(bridge_slave_0) entered blocking state [ 506.009748][ T5338] bridge0: port 1(bridge_slave_0) entered forwarding state [ 506.058758][ T5338] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 506.074798][ T5338] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 506.096277][ T5338] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 506.132488][ T5338] bridge0: port 2(bridge_slave_1) entered blocking state [ 506.139653][ T5338] bridge0: port 2(bridge_slave_1) entered forwarding state [ 506.184699][ T5338] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 506.247229][ T5338] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 506.263101][ T5338] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 506.316830][ T5338] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 506.339519][ T5338] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 506.360564][ T5334] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 506.376761][ T5334] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 506.414565][ T5334] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 506.434878][ T5334] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 506.453500][ T5334] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 506.477001][ T5334] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 506.521349][ T8823] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 506.879819][ T27] INFO: task syz.9.639:7590 blocked for more than 144 seconds. [ 506.920198][ T27] Not tainted 5.15.178-syzkaller #0 [ 506.953307][ T9127] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 507.392041][ T27] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 507.680181][ T9115] 9pnet: Insufficient options for proto=fd [ 507.690047][ T27] task:syz.9.639 state:D stack:25208 pid: 7590 ppid: 6019 flags:0x00004004 [ 507.700232][ T27] Call Trace: [ 507.703536][ T27] [ 507.726902][ T27] __schedule+0x12c4/0x45b0 [ 507.731548][ T27] ? release_firmware_map_entry+0x190/0x190 [ 507.780347][ T27] ? lockdep_hardirqs_on_prepare+0x438/0x7a0 [ 507.786425][ T27] ? print_irqtrace_events+0x210/0x210 [ 507.823119][ T27] ? _raw_spin_lock_irq+0xdb/0x110 [ 507.830233][ T27] ? do_raw_spin_unlock+0x137/0x8b0 [ 507.865879][ T27] schedule+0x11b/0x1f0 [ 507.870728][ T27] schedule_preempt_disabled+0xf/0x20 [ 507.876180][ T27] rwsem_down_read_slowpath+0x605/0xb40 [ 507.904029][ T5336] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 507.930533][ T27] ? down_write_killable_nested+0x90/0x90 [ 507.936319][ T27] ? __lock_acquire+0x1ff0/0x1ff0 [ 507.941805][ T5336] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 507.951396][ T27] ? do_raw_spin_lock+0x14a/0x370 [ 507.956611][ T27] down_read+0x9a/0x2e0 [ 507.960819][ T27] iterate_supers+0xac/0x1e0 [ 507.983503][ T27] ? ksys_sync+0x1c0/0x1c0 [ 507.984372][ T8823] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 507.987980][ T27] ksys_sync+0xb9/0x1c0 [ 508.039912][ T27] ? sync_filesystem+0x220/0x220 [ 508.044932][ T27] ? syscall_enter_from_user_mode+0x2e/0x240 [ 508.072495][ T27] ? syscall_enter_from_user_mode+0x2e/0x240 [ 508.078539][ T27] __do_sys_sync+0xa/0x10 [ 508.115648][ T27] do_syscall_64+0x3b/0xb0 [ 508.120216][ T27] ? clear_bhb_loop+0x15/0x70 [ 508.152748][ T27] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 508.186620][ T27] RIP: 0033:0x7fa00f9a4169 [ 508.191091][ T27] RSP: 002b:00007fa00d80d038 EFLAGS: 00000246 ORIG_RAX: 00000000000000a2 [ 508.218829][ T27] RAX: ffffffffffffffda RBX: 00007fa00fbbcfa0 RCX: 00007fa00f9a4169 [ 508.226891][ T27] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 508.283205][ T27] RBP: 00007fa00fbbcfa0 R08: 0000000000000000 R09: 0000000000000000 [ 508.291239][ T27] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 508.346981][ T27] R13: 0000000000000000 R14: 00007fa00fbbcfa0 R15: 00007ffe1e8076e8 [ 508.355070][ T27] [ 508.378675][ T27] [ 508.378675][ T27] Showing all locks held in the system: [ 508.435490][ T27] 3 locks held by kworker/1:1/23: [ 508.440557][ T27] #0: ffff888017470938 ((wq_completion)events){+.+.}-{0:0}, at: process_one_work+0x78a/0x10c0 [ 508.470411][ T5334] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 508.486207][ T27] #1: ffffc90000ddfd20 ((work_completion)(&data->fib_event_work)){+.+.}-{0:0}, at: process_one_work+0x7d0/0x10c0 [ 508.486641][ T5334] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 508.532273][ T27] #2: ffff88807e7c2240 (&data->fib_lock){+.+.}-{3:3}, at: nsim_fib_event_work+0x2cd/0x4120 [ 508.572979][ T27] 1 lock held by khungtaskd/27: [ 508.577903][ T27] #0: ffffffff8cb1fce0 (rcu_read_lock){....}-{1:2}, at: rcu_lock_acquire+0x0/0x30 [ 508.592330][ T5334] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 508.603437][ T5334] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 508.617398][ T5334] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 508.631004][ T5334] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 508.633758][ T27] 2 locks held by getty/3930: [ 508.651690][ T8823] device veth0_vlan entered promiscuous mode [ 508.658082][ T27] #0: ffff88814c501098 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x21/0x70 [ 508.693470][ T8823] device veth1_vlan entered promiscuous mode [ 508.702054][ T27] #1: ffffc900025c62e8 (&ldata->atomic_read_lock){+.+.}-{3:3}, at: n_tty_read+0x6af/0x1db0 [ 508.735620][ T27] 1 lock held by syz-executor/4183: [ 508.752872][ T27] #0: ffff88807572a0e0 (&type->s_umount_key#66){++++}-{3:3}, at: deactivate_super+0xa9/0xe0 [ 508.775895][ T5338] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 508.785997][ T5338] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 508.793190][ T27] 4 locks held by kworker/u4:6/4235: [ 508.811531][ T27] 3 locks held by kworker/1:8/4255: [ 508.818226][ T5338] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 508.827700][ T27] #0: ffff88802ba42138 ((wq_completion)ipv6_addrconf){+.+.}-{0:0}, at: process_one_work+0x78a/0x10c0 [ 508.842301][ T5338] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 508.874454][ T8823] device veth0_macvtap entered promiscuous mode [ 508.894830][ T27] #1: ffffc9000325fd20 ((work_completion)(&(&ifa->dad_work)->work)){+.+.}-{0:0}, at: process_one_work+0x7d0/0x10c0 [ 508.900680][ T8823] device veth1_macvtap entered promiscuous mode [ 508.945934][ T27] #2: ffffffff8dc42788 (rtnl_mutex){+.+.}-{3:3}, at: addrconf_dad_work+0xcc/0x1720 [ 508.955722][ T27] 2 locks held by kworker/u4:26/5334: [ 508.968167][ T27] 1 lock held by syz.9.639/7590: [ 508.973136][ T27] #0: ffff88807572a0e0 (&type->s_umount_key#66){++++}-{3:3}, at: iterate_supers+0xac/0x1e0 [ 508.981447][ T5323] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 509.003080][ T5323] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 509.020467][ T27] 1 lock held by syz-executor/8823: [ 509.025704][ T27] #0: ffffffff8dc42788 (rtnl_mutex){+.+.}-{3:3}, at: rtnetlink_rcv_msg+0x94c/0xee0 [ 509.032880][ T8823] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 509.068332][ T27] [ 509.069090][ T8823] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 509.070692][ T27] ============================================= [ 509.070692][ T27] [ 509.070704][ T27] NMI backtrace for cpu 1 [ 509.070716][ T27] CPU: 1 PID: 27 Comm: khungtaskd Not tainted 5.15.178-syzkaller #0 [ 509.101214][ T27] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 509.111095][ T8823] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 509.111403][ T27] Call Trace: [ 509.111413][ T27] [ 509.128017][ T27] dump_stack_lvl+0x1e3/0x2d0 [ 509.132715][ T27] ? console_trylock_spinning+0x259/0x3f0 [ 509.138469][ T27] ? io_uring_drop_tctx_refs+0x1a0/0x1a0 [ 509.144302][ T27] ? panic+0x860/0x860 [ 509.146927][ T8823] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 509.148404][ T27] ? nmi_cpu_backtrace+0x23b/0x4a0 [ 509.148444][ T27] nmi_cpu_backtrace+0x46a/0x4a0 [ 509.168269][ T27] ? __wake_up_klogd+0xd5/0x100 [ 509.173166][ T27] ? nmi_trigger_cpumask_backtrace+0x2a0/0x2a0 [ 509.179347][ T27] ? _printk+0xd1/0x120 [ 509.183688][ T27] ? panic+0x860/0x860 [ 509.187782][ T27] ? __wake_up_klogd+0xcc/0x100 [ 509.188763][ T8823] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 509.192645][ T27] ? panic+0x860/0x860 [ 509.192675][ T27] ? __rcu_read_unlock+0x92/0x100 [ 509.192699][ T27] ? arch_trigger_cpumask_backtrace+0x10/0x10 [ 509.192724][ T27] nmi_trigger_cpumask_backtrace+0x181/0x2a0 [ 509.192751][ T27] watchdog+0xe72/0xeb0 [ 509.192784][ T27] kthread+0x3f6/0x4f0 [ 509.192804][ T27] ? hungtask_pm_notify+0x50/0x50 [ 509.192827][ T27] ? kthread_blkcg+0xd0/0xd0 [ 509.192850][ T27] ret_from_fork+0x1f/0x30 [ 509.192887][ T27] [ 509.193495][ T27] Sending NMI from CPU 1 to CPUs 0: [ 509.239211][ T8823] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 509.242537][ C0] NMI backtrace for cpu 0 [ 509.242548][ C0] CPU: 0 PID: 8823 Comm: syz-executor Not tainted 5.15.178-syzkaller #0 [ 509.242566][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 509.242576][ C0] RIP: 0010:try_to_wake_up+0x13d/0x1300 [ 509.242603][ C0] Code: e8 b8 94 01 00 4c 8d 7b 68 4c 89 fb 48 c1 eb 03 48 b8 00 00 00 00 00 fc ff df 0f b6 04 03 84 c0 0f 85 04 08 00 00 41 83 3f 00 <4c> 89 64 24 30 0f 84 11 01 00 00 4c 8d b4 24 c0 00 00 00 ba 10 00 [ 509.242617][ C0] RSP: 0018:ffffc90000007c00 EFLAGS: 00000046 [ 509.242633][ C0] RAX: 0000000000000000 RBX: 1ffff1100514fb35 RCX: ffffffff8159b189 [ 509.242646][ C0] RDX: 0000000000000000 RSI: ffffffff8af9f2a0 RDI: ffffffff8af9f260 [ 509.242659][ C0] RBP: ffffc90000007d28 R08: dffffc0000000000 R09: fffffbfff1c150ee [ 509.242672][ C0] R10: 0000000000000000 R11: dffffc0000000001 R12: 1ffff92000000f8c [ 509.242698][ C0] R13: 0000000000000001 R14: ffff888028a7d940 R15: ffff888028a7d9a8 [ 509.242711][ C0] FS: 000055555b902500(0000) GS:ffff8880b8e00000(0000) knlGS:0000000000000000 [ 509.242727][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 509.242740][ C0] CR2: 0000558fd80d9950 CR3: 0000000053f65000 CR4: 00000000003506f0 [ 509.242755][ C0] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 509.242771][ C0] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 509.242782][ C0] Call Trace: [ 509.242787][ C0] [ 509.242793][ C0] ? nmi_cpu_backtrace+0x39f/0x4a0 [ 509.242813][ C0] ? read_lock_is_recursive+0x10/0x10 [ 509.242833][ C0] ? nmi_trigger_cpumask_backtrace+0x2a0/0x2a0 [ 509.242850][ C0] ? unknown_nmi_error+0xd0/0xd0 [ 509.242877][ C0] ? nmi_cpu_backtrace_handler+0x8/0x10 [ 509.242895][ C0] ? nmi_handle+0xf7/0x370 [ 509.242913][ C0] ? try_to_wake_up+0x13d/0x1300 [ 509.242932][ C0] ? default_do_nmi+0x62/0x150 [ 509.242951][ C0] ? exc_nmi+0xa8/0x100 [ 509.242967][ C0] ? end_repeat_nmi+0x16/0x31 [ 509.242988][ C0] ? trace_sched_waking+0x29/0xe0 [ 509.243007][ C0] ? try_to_wake_up+0x13d/0x1300 [ 509.243028][ C0] ? try_to_wake_up+0x13d/0x1300 [ 509.243048][ C0] ? try_to_wake_up+0x13d/0x1300 [ 509.243067][ C0] [ 509.243072][ C0] [ 509.243081][ C0] ? do_raw_spin_unlock+0x137/0x8b0 [ 509.243100][ C0] ? try_invoke_on_locked_down_task+0x450/0x450 [ 509.243123][ C0] ? _raw_spin_unlock_irqrestore+0xd9/0x130 [ 509.243144][ C0] ? _raw_spin_unlock+0x40/0x40 [ 509.243164][ C0] ? __remove_hrtimer+0x4b0/0x4b0 [ 509.243182][ C0] hrtimer_wakeup+0x5e/0x70 [ 509.243199][ C0] __hrtimer_run_queues+0x598/0xcf0 [ 509.243226][ C0] ? hrtimer_interrupt+0x980/0x980 [ 509.243241][ C0] ? ktime_get_update_offsets_now+0x407/0x420 [ 509.243264][ C0] hrtimer_interrupt+0x392/0x980 [ 509.243293][ C0] __sysvec_apic_timer_interrupt+0x13b/0x4b0 [ 509.243316][ C0] sysvec_apic_timer_interrupt+0x9b/0xc0 [ 509.243335][ C0] [ 509.243340][ C0] [ 509.243345][ C0] asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 509.243362][ C0] RIP: 0010:console_trylock_spinning+0x36b/0x3f0 [ 509.243381][ C0] Code: 0f 84 75 ff ff ff e8 a4 16 1a 00 fb 31 db eb 48 e8 9a 16 1a 00 e8 65 e0 d8 08 4d 85 ed 74 cd e8 8b 16 1a 00 fb bb 01 00 00 00 <48> c7 c7 a0 c5 9f 8c 31 f6 ba 01 00 00 00 31 c9 41 b8 01 00 00 00 [ 509.243395][ C0] RSP: 0018:ffffc90002ebe760 EFLAGS: 00000293 [ 509.243408][ C0] RAX: ffffffff81666f05 RBX: 0000000000000001 RCX: ffff88804f988000 [ 509.243421][ C0] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 509.243431][ C0] RBP: ffffc90002ebe830 R08: ffffffff81666ebe R09: fffffbfff213183a [ 509.243443][ C0] R10: 0000000000000000 R11: dffffc0000000001 R12: 1ffff920005d7cec [ 509.243455][ C0] R13: 0000000000000200 R14: 0000000000000046 R15: dffffc0000000000 [ 509.243471][ C0] ? console_trylock_spinning+0x31e/0x3f0 [ 509.243488][ C0] ? console_trylock_spinning+0x365/0x3f0 [ 509.243509][ C0] ? vprintk_emit+0x150/0x150 [ 509.243531][ C0] ? irq_work_queue+0xc6/0x150 [ 509.243550][ C0] vprintk_emit+0xa6/0x150 [ 509.243568][ C0] _printk+0xd1/0x120 [ 509.243589][ C0] ? __wake_up_klogd+0xcc/0x100 [ 509.243606][ C0] ? panic+0x860/0x860 [ 509.243624][ C0] ? batadv_hardif_get_by_netdev+0x484/0x4d0 [ 509.243646][ C0] batadv_check_known_mac_addr+0x296/0x3d0 [ 509.243668][ C0] batadv_hard_if_event+0x300/0x17a0 [ 509.243684][ C0] ? addrconf_ifid_802154_6lowpan+0x380/0x380 [ 509.243705][ C0] ? dcbnl_netdevice_event+0x266/0x2a0 [ 509.243722][ C0] ? tipc_l2_device_event+0x18b/0x6b0 [ 509.243745][ C0] raw_notifier_call_chain+0xd0/0x170 [ 509.243775][ C0] dev_set_mac_address+0x325/0x470 [ 509.243795][ C0] ? dev_pre_changeaddr_notify+0x220/0x220 [ 509.243819][ C0] dev_set_mac_address_user+0x2d/0x50 [ 509.243837][ C0] do_setlink+0x7f0/0x3d80 [ 509.243861][ C0] ? stack_trace_save+0x113/0x1c0 [ 509.243880][ C0] ? stack_trace_snprint+0xe0/0xe0 [ 509.243897][ C0] ? __lock_acquire+0x1295/0x1ff0 [ 509.243915][ C0] ? nlmsg_parse_deprecated_strict+0x110/0x110 [ 509.243934][ C0] ? __kasan_slab_alloc+0x43/0xc0 [ 509.243955][ C0] ? ____kasan_kmalloc+0xd1/0xf0 [ 509.243971][ C0] ? rtnl_newlink+0x125/0x2070 [ 509.243987][ C0] ? rtnetlink_rcv_msg+0x993/0xee0 [ 509.244004][ C0] ? netlink_rcv_skb+0x1cf/0x410 [ 509.244026][ C0] ? __nla_validate_parse+0x1e6b/0x27f0 [ 509.244056][ C0] ? __nla_validate+0x50/0x50 [ 509.244085][ C0] ? validate_linkmsg+0x3db/0x4c0 [ 509.244104][ C0] rtnl_newlink+0x17d6/0x2070 [ 509.244135][ C0] ? rtnl_setlink+0x560/0x560 [ 509.244152][ C0] ? reacquire_held_locks+0x660/0x660 [ 509.244169][ C0] ? rcu_lock_release+0x5/0x20 [ 509.244189][ C0] ? __lock_acquire+0x1ff0/0x1ff0 [ 509.244206][ C0] ? unwind_next_frame+0x1437/0x1fa0 [ 509.244275][ C0] ? rtnetlink_rcv_msg+0x94c/0xee0 [ 509.244303][ C0] ? rtnl_setlink+0x560/0x560 [ 509.244321][ C0] rtnetlink_rcv_msg+0x993/0xee0 [ 509.244344][ C0] ? rtnetlink_bind+0x80/0x80 [ 509.244363][ C0] ? __local_bh_enable_ip+0x164/0x1f0 [ 509.244379][ C0] ? lockdep_hardirqs_on+0x94/0x130 [ 509.244399][ C0] ? __local_bh_enable_ip+0x164/0x1f0 [ 509.244415][ C0] ? local_bh_enable+0x5/0x20 [ 509.244434][ C0] ? _local_bh_enable+0xa0/0xa0 [ 509.244456][ C0] ? __dev_queue_xmit+0x1bf8/0x32b0 [ 509.244485][ C0] ? __copy_skb_header+0x47b/0x600 [ 509.244504][ C0] ? dev_queue_xmit+0x20/0x20 [ 509.244522][ C0] ? memcpy+0x3c/0x60 [ 509.244538][ C0] ? __copy_skb_header+0x47b/0x600 [ 509.244562][ C0] netlink_rcv_skb+0x1cf/0x410 [ 509.244582][ C0] ? rtnetlink_bind+0x80/0x80 [ 509.244600][ C0] ? netlink_ack+0xb10/0xb10 [ 509.244626][ C0] netlink_unicast+0x7b6/0x980 [ 509.244648][ C0] ? netlink_detachskb+0x90/0x90 [ 509.244666][ C0] ? __virt_addr_valid+0x3bb/0x460 [ 509.244683][ C0] ? 0xffffffff81000000 [ 509.244694][ C0] ? __check_object_size+0x300/0x410 [ 509.244715][ C0] ? bpf_lsm_netlink_send+0x5/0x10 [ 509.244733][ C0] netlink_sendmsg+0xa30/0xd60 [ 509.244758][ C0] ? netlink_getsockopt+0x5b0/0x5b0 [ 509.244783][ C0] ? aa_sock_msg_perm+0x91/0x150 [ 509.244801][ C0] ? bpf_lsm_socket_sendmsg+0x5/0x10 [ 509.244818][ C0] ? security_socket_sendmsg+0x7d/0xa0 [ 509.244838][ C0] ? netlink_getsockopt+0x5b0/0x5b0 [ 509.244858][ C0] __sys_sendto+0x564/0x720 [ 509.244879][ C0] ? __ia32_sys_getpeername+0x80/0x80 [ 509.244912][ C0] ? print_irqtrace_events+0x210/0x210 [ 509.244930][ C0] ? vtime_user_exit+0x2d1/0x400 [ 509.244956][ C0] __x64_sys_sendto+0xda/0xf0 [ 509.244976][ C0] do_syscall_64+0x3b/0xb0 [ 509.244993][ C0] ? clear_bhb_loop+0x15/0x70 [ 509.245009][ C0] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 509.245030][ C0] RIP: 0033:0x7f92e371fffc [ 509.245044][ C0] Code: 2a 5f 02 00 44 8b 4c 24 2c 4c 8b 44 24 20 89 c5 44 8b 54 24 28 48 8b 54 24 18 b8 2c 00 00 00 48 8b 74 24 10 8b 7c 24 08 0f 05 <48> 3d 00 f0 ff ff 77 34 89 ef 48 89 44 24 08 e8 70 5f 02 00 48 8b [ 509.245058][ C0] RSP: 002b:00007fff5508e9f0 EFLAGS: 00000293 ORIG_RAX: 000000000000002c [ 509.245075][ C0] RAX: ffffffffffffffda RBX: 00007f92e4465620 RCX: 00007f92e371fffc [ 509.245088][ C0] RDX: 000000000000002c RSI: 00007f92e4465670 RDI: 0000000000000003 [ 509.245099][ C0] RBP: 0000000000000000 R08: 00007fff5508ea44 R09: 000000000000000c [ 509.245110][ C0] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000003 [ 509.245120][ C0] R13: 0000000000000000 R14: 00007f92e4465670 R15: 0000000000000000 [ 509.245139][ C0] [ 509.762210][ T27] Kernel panic - not syncing: hung_task: blocked tasks [ 510.088069][ T27] CPU: 1 PID: 27 Comm: khungtaskd Not tainted 5.15.178-syzkaller #0 [ 510.096049][ T27] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 510.106122][ T27] Call Trace: [ 510.109396][ T27] [ 510.112341][ T27] dump_stack_lvl+0x1e3/0x2d0 [ 510.117020][ T27] ? io_uring_drop_tctx_refs+0x1a0/0x1a0 [ 510.122651][ T27] ? panic+0x860/0x860 [ 510.126864][ T27] panic+0x318/0x860 [ 510.130890][ T27] ? schedule_preempt_disabled+0x20/0x20 [ 510.136538][ T27] ? nmi_trigger_cpumask_backtrace+0x221/0x2a0 [ 510.142697][ T27] ? fb_is_primary_device+0xd0/0xd0 [ 510.147908][ T27] ? arch_trigger_cpumask_backtrace+0x10/0x10 [ 510.153984][ T27] ? nmi_trigger_cpumask_backtrace+0x221/0x2a0 [ 510.160132][ T27] ? nmi_trigger_cpumask_backtrace+0x281/0x2a0 [ 510.166282][ T27] ? nmi_trigger_cpumask_backtrace+0x286/0x2a0 [ 510.172433][ T27] watchdog+0xeb0/0xeb0 [ 510.176599][ T27] kthread+0x3f6/0x4f0 [ 510.180666][ T27] ? hungtask_pm_notify+0x50/0x50 [ 510.185773][ T27] ? kthread_blkcg+0xd0/0xd0 [ 510.190358][ T27] ret_from_fork+0x1f/0x30 [ 510.194919][ T27] [ 510.198217][ T27] Kernel Offset: disabled [ 510.210466][ T27] Rebooting in 86400 seconds..