last executing test programs: 20m47.271688316s ago: executing program 1 (id=119): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000240)=@abs={0x0, 0x0, 0x2}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) syz_mount_image$vfat(&(0x7f00000005c0), &(0x7f0000000400)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0xc80, &(0x7f0000000a80)=ANY=[@ANYBLOB="00631dda01aef2456795dd9b26209f1c0f624854ea3dd5a00bd6df44035f5c3ae796fec6d633a0ffad0569794acfef7da01767fd4175f2cd82df769aa2ee7bfe3640554507d2e660c9f9e222a72e1e3e71145c480657d2864e5e276f028d64701ae31cde0ceaf408fdb05c0f4142da00e900000100000149e6d308cbe315789f4baffe39bbced9b1d421d2e290e9fc563b62225f002ee310e1fa7321000000000000d6231001a4b2d467825f3abb0c167e129cf1fa0e7854103f4bf2d3a0194983bc86cbd3d75ccef3c8ac4516dac102"], 0x1, 0x288, &(0x7f0000001080)="$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") r3 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x81000) renameat2(r3, &(0x7f0000000140)='./file1\x00', r3, &(0x7f0000000980)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0) ioctl$TCSETSF2(0xffffffffffffffff, 0x402c542d, &(0x7f0000000100)={0x0, 0x0, 0x0, 0xffff, 0x0, "4ae23ae17df2e98c69ba36c4095c911abad88f"}) syz_open_dev$ptys(0xc, 0x3, 0x0) 20m43.597330752s ago: executing program 1 (id=123): syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) prlimit64(0x0, 0xe, &(0x7f00000000c0)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x5) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x3) syz_clone(0x0, 0x0, 0xfffffe11, 0x0, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) r1 = syz_open_dev$MSR(&(0x7f0000000140), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000005000000850000002d00000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xd, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000240)={&(0x7f0000000280)='sys_enter\x00', r2}, 0x10) uname(&(0x7f0000000100)=""/214) r3 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r3, &(0x7f0000000080)={0x1f, 0xffff, 0x3}, 0x6) setsockopt$SO_TIMESTAMP(r3, 0x1, 0x3f, &(0x7f0000000000)=0x40, 0x4) recvmmsg(r3, &(0x7f0000000600), 0x204083acb88ff8b, 0x2, 0x0) 20m40.035306499s ago: executing program 1 (id=132): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) setsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000000)={@multicast1, @local}, 0xc) r3 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) r4 = openat$ocfs2_control(0xffffffffffffff9c, &(0x7f0000000000), 0x102, 0x0) read$FUSE(r4, &(0x7f0000000040)={0x2020}, 0x2084) writev(r4, 0x0, 0x0) write$binfmt_misc(r4, 0x0, 0x0) 20m33.353479062s ago: executing program 1 (id=139): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f00000006c0)='sched_switch\x00'}, 0x10) setfsgid(0xee00) socket$inet_udp(0x2, 0x2, 0x0) execveat(0xffffffffffffff9c, 0x0, 0x0, 0x0, 0x0) r3 = socket$inet6(0xa, 0x3, 0x1) r4 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_PORT_GET(r4, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000000)=ANY=[@ANYBLOB="200000000514010028bd7000fcdbdf25080001000000000008"], 0x20}, 0x1, 0x0, 0x0, 0x20004845}, 0x24000080) connect$inet6(r3, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback={0xff000000}}, 0x1c) 20m31.381901805s ago: executing program 1 (id=141): syz_mount_image$bfs(&(0x7f00000000c0), &(0x7f0000000380)='./file0\x00', 0x2004000, &(0x7f0000000700)=ANY=[@ANYRESDEC, @ANYBLOB="b7ccc15f12e1fb942e7242cc8c37ebfa4e541c63f7054d4d4db725781aa150955c74b46f3c45fca895509a9357fb91dee303e11475686882c82bdeab561e2b67423bcafdabba82a2aae663d0ca6289cfc4b3d079de4d048498ec35232ad1da957f1a4f0f86f3a99c3fcea8880c9cc358"], 0x1, 0x91, &(0x7f0000000280)="$eJzs0bEJwkAABdBvGq2ygIUbZAdHEUvtrBTBiVzFEdzAwtYmIqdNSGVzCu/BHfz7zYe7PM7ztEl/SvqB3f6wWW3LnTHN6Ct/5PWF0ySzJIu25NuydJN3f70f159Tey8AAPC9Jt0wd9XGAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAPygZwAAAP//6vUjVA==") openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='rdma.current\x00', 0x275a, 0x0) mknodat(0xffffffffffffff9c, &(0x7f0000000140)='./file4\x00', 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000040)='./file2\x00', 0x143042, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000400)='memory.events\x00', 0x275a, 0x0) open(&(0x7f0000000000)='./file1\x00', 0x109042, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000080)='./file7\x00', 0x105042, 0x1ff) linkat(0xffffffffffffff9c, &(0x7f0000000000)='./file4\x00', 0xffffffffffffff9c, &(0x7f00000006c0)='./file5\x00', 0x0) openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x40, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000006ac0)='cpuacct.stat\x00', 0x275a, 0x0) openat$incfs(0xffffffffffffff9c, &(0x7f0000000640)='.log\x00', 0xa5d, 0x1) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000340)='pids.current\x00', 0x275a, 0x0) open(&(0x7f00000000c0)='./bus\x00', 0x1a18fd, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='cgroup.kill\x00', 0x275a, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cgroup.stat\x00', 0x275a, 0x0) openat$incfs(0xffffffffffffff9c, &(0x7f0000000140)='.pending_reads\x00', 0x1a10c1, 0x9c37611dc13d0d83) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpu.stat\x00', 0x275a, 0x0) 20m26.912061614s ago: executing program 1 (id=150): openat$cgroup_int(0xffffffffffffffff, 0x0, 0x2, 0x0) open(&(0x7f0000000080)='./bus\x00', 0x145542, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x3) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) r1 = fsopen(&(0x7f0000000080)='pstore\x00', 0x0) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000280)='./mnt\x00', 0x2000c14, &(0x7f0000000040)={[{@nobh}, {@inode_readahead_blks={'inode_readahead_blks', 0x3d, 0x8000}}]}, 0xff, 0x23f, &(0x7f0000000540)="$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") mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) fsconfig$FSCONFIG_SET_FLAG(r1, 0x0, 0x0, 0x0, 0x0) sync_file_range(0xffffffffffffffff, 0x4, 0x6, 0x1) getsockopt$inet_mreqsrc(0xffffffffffffffff, 0x0, 0x53, 0x0, 0x0) sendto$inet6(0xffffffffffffffff, &(0x7f0000000280), 0x0, 0x0, &(0x7f0000000200)={0xa, 0x4e23, 0x0, @rand_addr=' \x01\x00'}, 0x1c) bind$pptp(0xffffffffffffffff, 0x0, 0x0) 20m11.540998699s ago: executing program 32 (id=150): openat$cgroup_int(0xffffffffffffffff, 0x0, 0x2, 0x0) open(&(0x7f0000000080)='./bus\x00', 0x145542, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x3) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) r1 = fsopen(&(0x7f0000000080)='pstore\x00', 0x0) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000280)='./mnt\x00', 0x2000c14, &(0x7f0000000040)={[{@nobh}, {@inode_readahead_blks={'inode_readahead_blks', 0x3d, 0x8000}}]}, 0xff, 0x23f, &(0x7f0000000540)="$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") mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) fsconfig$FSCONFIG_SET_FLAG(r1, 0x0, 0x0, 0x0, 0x0) sync_file_range(0xffffffffffffffff, 0x4, 0x6, 0x1) getsockopt$inet_mreqsrc(0xffffffffffffffff, 0x0, 0x53, 0x0, 0x0) sendto$inet6(0xffffffffffffffff, &(0x7f0000000280), 0x0, 0x0, &(0x7f0000000200)={0xa, 0x4e23, 0x0, @rand_addr=' \x01\x00'}, 0x1c) bind$pptp(0xffffffffffffffff, 0x0, 0x0) 17m10.361740444s ago: executing program 3 (id=431): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() syz_open_procfs(r0, &(0x7f0000000180)='net/sco\x00') sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) syz_clone(0x0, 0x0, 0xfffffe11, 0x0, 0x0, 0x0) socket(0x7d6f346af930d763, 0x5, 0xdda) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000032680)=""/102400, 0x19000) r2 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000700)={'wlan1\x00'}) sendmsg$NL80211_CMD_TRIGGER_SCAN(r2, 0x0, 0x48000) r3 = syz_open_procfs(0x0, &(0x7f0000000200)='net/netlink\x00') read$msr(r3, &(0x7f0000000040)=""/59, 0xffb5) 17m6.917634532s ago: executing program 3 (id=435): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000001afc180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000002000000b703000000090000850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10) syz_open_dev$tty1(0xc, 0x4, 0x4) r1 = semget$private(0x0, 0x6, 0x0) semop(0x0, &(0x7f00000000c0)=[{}, {}], 0x2) semop(0x0, &(0x7f0000000180)=[{}, {}], 0x2) semctl$IPC_RMID(0x0, 0x0, 0x10) semctl$IPC_INFO(0x0, 0x0, 0x3, &(0x7f0000000780)=""/225) r2 = semget(0x1, 0x4, 0xca0) clock_gettime(0x0, &(0x7f0000000680)={0x0, 0x0}) semget(0x3, 0x3, 0x0) semtimedop(r2, &(0x7f00000001c0)=[{0x1, 0x4, 0x1000}, {0x3, 0x100, 0x1c00}, {0x0, 0x5, 0x1000}, {0x2, 0x7f, 0x1000}, {0x2, 0x3ff, 0x400}, {0x1, 0x8, 0x1800}, {0x4, 0x8}], 0x7, &(0x7f00000006c0)={r3, r4+60000000}) semtimedop(r1, &(0x7f0000000040)=[{0x0, 0x1}], 0x1, 0x0) semop(r1, &(0x7f00000000c0)=[{}, {}], 0x2) semop(r1, &(0x7f0000000180)=[{}, {}], 0x2) semctl$IPC_RMID(r1, 0x0, 0x10) semop(r1, &(0x7f00000000c0)=[{0x1, 0x5, 0x3800}, {0x4, 0x6, 0x1800}, {0x4, 0x8000, 0x1800}, {0x3, 0x101, 0x1000}], 0x4) 17m3.496551185s ago: executing program 3 (id=440): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000980)={0x11, 0x8, &(0x7f00000019c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x49) r1 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r1, 0x4000000000000, 0x40, &(0x7f0000001940)=@raw={'raw\x00', 0x4008, 0x3, 0x224, 0xe8, 0x32, 0x148, 0x0, 0x148, 0x1c8, 0x240, 0x240, 0x1c8, 0x240, 0x7fffffe, 0x0, {[{{@uncond, 0x0, 0x98, 0xb8, 0x0, {}, [@common=@unspec=@addrtype1={{0x28}, {0x0, 0x0, 0x334}}]}, @unspec=@TRACE={0x20}}, {{@ip={@broadcast, @initdev={0xac, 0x1e, 0x1, 0x0}, 0xffffff00, 0xffffff00, 'vlan0\x00', 'caif0\x00', {0xff}, {}, 0x2, 0x3, 0x19}, 0x0, 0xb8, 0xd8, 0x0, {}, [@inet=@rpfilter={{0x24}}, @inet=@rpfilter={{0x24, 'rpfilter\x00', 0x2}}]}, @unspec=@TRACE={0x20}}], {{'\x00', 0x0, 0x70, 0x94}, {0x24}}}}, 0x280) syz_read_part_table(0x59d, &(0x7f0000000000)="$eJzs0r1Ls1cYB+CTwEsoVCIiONhBMLg0KsRBh2SwEtMsRsSKFGfBQQfBwUFSorMf/4DiF4iL2NlRjCAKcZKM4lxQXDKltD6FtnZpiyl9ua4lnHPf59w5/J7A/1o8/NRsNmMhhGbi75/+7jQ/XuyZHJ2aDiEW5kII+a++/LUSizp+u/U8WpeidTGRqe3fjL2ctt/23ldTh/GofhEP4YcQwuLjUfLfvo3P31nuKrm+sVzYXM0tPBTWnobm+/PdW/mlneGDbHmmKzsbfVgX8dbMT9VGju+apefdtoFP1Vojcx31pWMfM5//1p/z3+us1CuNib6TlcF0R/2yvB3l/ip/AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADgg53lrpLrG8uFzdXcwkNh7Wlovj/fvZVf2hk+yJZnurKz8be+i3hr5qdqI8d3zdLzbtvAp2qtkbmO+tKxd0e/+fFj/hIt9HX4Y/57nZV6pTHRd7IymO6oX5a3o9xf3+cPAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAPCX8uPFnsnRqekQYmEuhPDt/fe9v+w3E2/1WNR3Hv2Wov1iIlPbvxl7OW2/7b2vpg4nEyEkfnfv4uNR8otWPoR/5OcAAAD//2wlhu4=") bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000700)={@cgroup, 0x4, 0x1, 0x5, &(0x7f0000000200)=[0x0, 0x0, 0x0], 0x3, 0x0, 0x0, &(0x7f0000000680)=[0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f00000006c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, 0x40) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000300)='sys_enter\x00', r0}, 0x10) r2 = socket(0x2, 0x80805, 0x0) sendmmsg$inet(r2, &(0x7f0000000600)=[{{0x0, 0x0, &(0x7f0000000240)}}], 0x1, 0x0) r3 = socket$inet(0x2, 0x80001, 0x84) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$IP6T_SO_GET_REVISION_TARGET(r4, 0x29, 0x45, 0x0, 0x0) getsockopt$inet_sctp_SCTP_MAX_BURST(r3, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={0x0}, 0x0) setsockopt$inet_sctp6_SCTP_DELAYED_SACK(r2, 0x84, 0x10, &(0x7f00000000c0)=@assoc_value={r5, 0x7}, 0x8) prctl$PR_SET_SECCOMP(0x16, 0x2, 0x0) r6 = mq_open(&(0x7f0000000040)='!\x7f\x00\xca\x00\x00\x00\f\x00\x00\x01E!Tnux\x00', 0x6e93ebbbcc0884f2, 0x0, &(0x7f0000000000)={0x0, 0x1, 0x8}) mq_timedreceive(r6, &(0x7f0000000180)=""/196, 0xc4, 0xffffffffff600000, 0x0) mq_timedsend(r6, 0x0, 0x0, 0x0, 0x0) 17m1.97023299s ago: executing program 3 (id=443): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f00000002c0)=ANY=[@ANYBLOB="180000001800ff0f00000000001b0000850000006d000000850000002300000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r3}, 0x10) r4 = socket$kcm(0x2, 0x200000000000001, 0x106) sendmsg$inet(r4, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x3000c041) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000840)=@base={0x5, 0x7f, 0xef0, 0x9, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) bpf$MAP_DELETE_BATCH(0x18, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x6, r5, 0x406}, 0x38) r6 = socket$kcm(0x10, 0x2, 0x4) recvmsg$kcm(r6, 0x0, 0x2002) 16m59.061537907s ago: executing program 3 (id=447): r0 = socket(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000200)={'geneve1\x00', 0x0}) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000010c0)=@newlink={0x38, 0x10, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, r3}, [@IFLA_AF_SPEC={0x18, 0x1a, 0x0, 0x1, [@AF_INET6={0x14, 0xa, 0x0, 0x1, [@IFLA_INET6_ADDR_GEN_MODE={0x5}, @IFLA_INET6_ADDR_GEN_MODE={0x5}]}]}]}, 0x38}}, 0x0) syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_LINKSTATE_GET(0xffffffffffffffff, 0x0, 0x90) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f0000000040)={'vxcan0\x00', 0x0}) bpf$PROG_LOAD(0x5, 0x0, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=@can_newroute={0x24, 0x18, 0x1, 0x0, 0x25dfdbfe, {0x1d, 0x1, 0x6}, [@CGW_SRC_IF={0x8, 0x9, r4}, @CGW_DST_IF={0x8, 0xa, r4}]}, 0x24}, 0x1, 0x0, 0x0, 0x40000}, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket(0x10, 0x80002, 0x0) sendmmsg$alg(r6, &(0x7f00000000c0), 0x492492492492627, 0x0) r7 = socket$netlink(0x10, 0x3, 0x9) sendmsg$NFT_BATCH(r7, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[], 0x28}, 0x1, 0x0, 0x0, 0x20000001}, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r7, 0x8914, &(0x7f0000000140)={'veth0_macvtap\x00', 0x2000}) sendmsg$nl_route(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000006c0)=ANY=[@ANYBLOB="240000001900010028bd7000fcdbdf251d01020008000900", @ANYRES32=0x0, @ANYBLOB='\b\x00\n'], 0x24}, 0x1, 0x0, 0x0, 0x4008844}, 0x30004016) 16m58.638196264s ago: executing program 3 (id=449): r0 = syz_mount_image$ext4(&(0x7f0000000780)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0xc840, &(0x7f0000000040)={[{@discard}, {@inlinecrypt}, {@usrjquota}]}, 0x64, 0x526, &(0x7f0000000a40)="$eJzs3c9vI1cdAPDveO0l2c3WKXCAHkqhRdkVrJ00tI04lCIhOFUCyn0JiRNFceIocdpNVNFE/AFcECBxggsXJP4DVIkLxwqpCM4gikAItnDgAAwae5zNZu04uzh26nw+0uy8N7++73n3jefNvB0HcGk9ExGvRMR/0zS9FRHlfHkhn+KgPWXbvX/vzaVsSiJNX/tbEkm+rHOsJJ9fz3ebiIivfyXiW8nDcXf29tcX6/Xadp6vNje2qjt7+7fXNhZXa6u1zfn5uRcXXlp4YWF2IPW8EREvf+lP3//uT7/88i8++8Yf7vzl5rezYk3l64/X4xEVT1vZrnqp9Vkc32H7MYNdRMVWDXOTZ9vn8BzLAwBAb9k1/ocj4lMRcSvKceX0y1kAAADgAyj9wlT8O4lIu7vabeFE9NweAAAAuIAKrTGwSaGSjwWYikKhUmmP4f1oXEvfimh+ZqWxu7ncHis7HaXCylq9NpuPFZ6OUpLl51rp+/nn2/nD9yJa+fmIeDIivleebOUrS4368qhvfgAAAMAlcf1E//+f5Xb/HwAAABgz06MuAAAAAHDu9P8BAABg/On/AwAAwFj76quvZlPa+f3r5df3dtcbr99eru2sVzZ2lypLje2tymqjsdp6Z99Gv+PVG42tz8Xm7t1qs7bTrO7s7d/ZaOxuNu+sPfAT2AAAAMAQPfmJt3+XRMTB5ydbU+Zqj22vDLVkwHkrHqWSfN6l9f/+ifb8vSEVChiKft/pvykPqSDA0BVHXQBgZEqPsrH/JwBjKemzvufgnXfy+ScHWx4AAGDwZj7e+/l/4dQ9D05fDVx4GjFcXkfP/3sN+gPGVuv5/1nbvosFGCslo/rh0uv7/L/XAIB3zhohTR+tRAAAwKBNtaakUMlv701FoVCpRNxoDfcvJStr9dpsRDwREb8tlz6U5edaeyZ9+wwAAAAAAAAAAAAAAAAAAAAAAAAAQFuaJpECAAAAYy2i8Ofkl+13+c+Un5s6eX/gavKvcuQ/EfrGj177wd3FZnN7Llv+96PlzR/my58fxR0MAAAA4KROP73TjwcAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACAQXr/3ptLnWmYcf/6xYiY7ha/GBOt+USUIuLaP5IoHtsviYgrA4h/cBgRH+sWP8mKdRSyW/zJ848f0/mn0C3+9QHEh8vs7ez880rW/q5GxPH2V4hnWvPu7a8Y8UD+cbXOf9kJrsv5t3P+u9Kj/d84cazpHjGeevfn1Z7xDyOeKnY//3TiJz3iP3vGOn7zG/v7vdalP46Y6fr9kzwQq9rc2Kru7O3fXttYXK2t1jbn5+deXHhp4YWF2erKWr2W//nQ8Ut9ypbV/1qP+NN96v/cGev/n3fv3vtIj+Jk8W8+2yX+r36Sb/Fw/EL+3ffpPJ2tn+mkD9rp457+2a+fPq3+yz3q3+/v/+YZ63/ra9/549FOAMDI7eztry/W67XtsU1kvfQLUAyJx0uc6z/RtwZ6wDRN06xN/R/HSWLkH3gnMeozEwAAMGj3L/pHXRIAAAAAAAAAAAAAAAAAAAC4vIbxOrGTMQ+OUskgXqENAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADAQ/wsAAP//Yu/R8g==") prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4) r2 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='mountinfo\x00') lseek(r2, 0x10001, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) sched_setaffinity(0x0, 0xfffffef7, &(0x7f0000000740)=0x410000002) r4 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000280)='/proc/bus/input/handlers\x00', 0x0, 0x0) fsconfig$FSCONFIG_CMD_RECONFIGURE(r0, 0x7, 0x0, 0x0, 0x0) syz_mount_image$erofs(&(0x7f0000000340), &(0x7f0000000580)='./file2\x00', 0x2000400, &(0x7f00000004c0)=ANY=[], 0x1, 0x21e, &(0x7f00000005c0)="$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") llistxattr(&(0x7f0000000000)='./file1\x00', 0x0, 0x0) readv(r4, &(0x7f0000000080), 0x0) unlinkat(0xffffffffffffff9c, &(0x7f00000001c0)='./file1\x00', 0x0) 16m43.413862787s ago: executing program 33 (id=449): r0 = syz_mount_image$ext4(&(0x7f0000000780)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0xc840, &(0x7f0000000040)={[{@discard}, {@inlinecrypt}, {@usrjquota}]}, 0x64, 0x526, &(0x7f0000000a40)="$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") prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4) r2 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='mountinfo\x00') lseek(r2, 0x10001, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) sched_setaffinity(0x0, 0xfffffef7, &(0x7f0000000740)=0x410000002) r4 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000280)='/proc/bus/input/handlers\x00', 0x0, 0x0) fsconfig$FSCONFIG_CMD_RECONFIGURE(r0, 0x7, 0x0, 0x0, 0x0) syz_mount_image$erofs(&(0x7f0000000340), &(0x7f0000000580)='./file2\x00', 0x2000400, &(0x7f00000004c0)=ANY=[], 0x1, 0x21e, &(0x7f00000005c0)="$eJzsmL9vEzEUx792LpcEEIKlAwsDlSiCJs1l6RJBkZCYEFLLrwkielQlaYPSQ6KREKpYWGBjQGJh4B9g6NCJgY1/AAkGQEJiIAMDC4vRs30Xt9dw0VGmvs9gfe337Of34ntDwDDMvuXrl1+fn56fXTgD4BAmUbLr3wuAEEZLx//Ti/unnzcvvHzz8fW71cMPt3aeR1uU2r5Q/kt8D8DbuQIeJZGS3b9JTNrJAmSir0DilNXXIFC1+hYkrlodQuCG1Xcd3SX/avXOcies3u52FknM0FCnIaChsfN+gw2BRTtXSinh2NfW++1WpxP2HOFZ2y6mXCIJ1p5I1a8IH4M5iaZzP6ri9SePN2ge12bGqV8dEnWbRAMC83Z9FqW4NqYkTv7HvOH5hVT+u2ZLrmTISrJsRPPnnhSLhA8jjk7nO2eK0jmXNh1Bnvtg+64ihiaq5N6kPPLpaOFlv8Wz9gfNEevSuFk8qwD4T5m6IlcWsZgYbL1Pm75lbVciO4QY//2Ux71z/CHmr1gF/bb8l4qNutiHTdM/1CuBk05/8pz+UYtW7tXW1vvTyyutpXApXA2CRumgselGVNNjqu8N+3NF96cDzvnFEb6+9PGgFUW9uhl94aOCKOoFeh44n838ZvfHTbstwkUAJ8yE2qafnFhIxRC+8ZHal9RU2olhGIZhGIZhGIZhGIZhGCYXxyH0v6AZBJe1958AAAD//wDHYZU=") llistxattr(&(0x7f0000000000)='./file1\x00', 0x0, 0x0) readv(r4, &(0x7f0000000080), 0x0) unlinkat(0xffffffffffffff9c, &(0x7f00000001c0)='./file1\x00', 0x0) 12m12.741640778s ago: executing program 4 (id=832): mknod(&(0x7f00000000c0)='./file0\x00', 0x8001420, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x0, 0x0) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) msgget(0x0, 0x28c) connect$unix(r1, &(0x7f00000003c0)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) shmctl$SHM_STAT(0x0, 0xd, &(0x7f0000000240)=""/98) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x2) ioctl$KVM_SET_MSRS(r5, 0x4008ae89, &(0x7f0000000040)=ANY=[@ANYBLOB="8200000002000000b0000040"]) mount$afs(0x0, 0x0, 0x0, 0x300, 0x0) 12m11.163847051s ago: executing program 4 (id=835): r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000002540), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000140)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000040)={0xffffffffffffffff}, 0x106}}, 0x20) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f00000003c0)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) close(0xffffffffffffffff) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000001c0)={0xd, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xf, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) ioctl$DRM_IOCTL_MODE_GETRESOURCES(0xffffffffffffffff, 0xc04064a0, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_SETCRTC(0xffffffffffffffff, 0xc06864a2, 0x0) socket$nl_generic(0x10, 0x3, 0x10) bpf$BPF_LINK_CREATE_XDP(0x1c, 0x0, 0x0) syz_open_dev$tty1(0xc, 0x4, 0x1) write$RDMA_USER_CM_CMD_RESOLVE_ADDR(r0, &(0x7f0000000280)={0x15, 0x110, 0xfa00, {r1, 0x0, 0x0, 0x30, 0x0, @in={0x1b, 0xffff, @local}, @ib={0x1b, 0x0, 0x0, {"00000000000000000000000000000001"}, 0x0, 0x7}}}, 0x118) 12m8.818212102s ago: executing program 4 (id=837): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000080)='./file0\x00', 0x22000406, &(0x7f00000003c0)={[{@sysvgroups}, {@orlov}, {@nogrpid}, {@init_itable}, {@dioread_nolock}, {@resgid, 0x2e}, {@oldalloc}, {@errors_remount}, {@jqfmt_vfsv1}, {@grpid}], [], 0x2c}, 0x0, 0x4dc, &(0x7f0000000880)="$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") prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x6) write$binfmt_script(0xffffffffffffffff, 0x0, 0x0) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x3, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) getpid() r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000e00)=@gettaction={0x20, 0x5a, 0x1, 0x0, 0x0, {}, [@action_dump_flags=@TCA_ROOT_FLAGS={0xc, 0x2, {0x1}}]}, 0x20}}, 0x0) setxattr$incfs_metadata(&(0x7f0000000340)='./file0\x00', 0x0, 0x0, 0x0, 0x0) syz_open_procfs(0x0, 0x0) syz_io_uring_setup(0x110, &(0x7f0000000140)={0x0, 0xfad6}, 0x0, &(0x7f0000000280)) syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x4, 0x0, 0x0, 0x4) chdir(&(0x7f0000000480)='./cgroup\x00') mkdir(&(0x7f00000001c0)='./file0\x00', 0x0) setxattr$incfs_metadata(&(0x7f0000000340)='./file0\x00', &(0x7f0000000380), 0x0, 0x0, 0x0) 12m6.753524232s ago: executing program 4 (id=841): syz_mount_image$ext4(&(0x7f0000000ac0)='ext4\x00', &(0x7f0000000180)='./file0\x00', 0x3810744, &(0x7f0000000700)={[{@inlinecrypt}, {@user_xattr}, {@quota}, {@inode_readahead_blks={'inode_readahead_blks', 0x3d, 0x10000}}, {@jqfmt_vfsv0}, {@delalloc}, {@inode_readahead_blks={'inode_readahead_blks', 0x3d, 0x400000}}, {@noauto_da_alloc}, {@test_dummy_encryption}]}, 0x1, 0x451, &(0x7f0000000d00)="$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") prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, 0x0) sendmsg$NL80211_CMD_LEAVE_IBSS(r3, &(0x7f0000000240)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x44005}, 0x20001) r4 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r4) ptrace$pokeuser(0x6, r4, 0x358, 0x1000000000000) setresuid(0x0, 0xee01, 0xee00) syz_clone(0x12000000, 0x0, 0x16, 0x0, 0x0, 0x0) 12m3.172418189s ago: executing program 4 (id=846): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0x8c, 0x30, 0x1, 0x0, 0x0, {}, [{0x78, 0x1, [@m_ct={0x2c, 0x2, 0x0, 0x0, {{0x7}, {0x4}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x3, 0x1}}}}, @m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x8c}, 0x1, 0x0, 0x0, 0x804}, 0x0) syz_genetlink_get_family_id$nfc(&(0x7f0000000100), 0xffffffffffffffff) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) r3 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x401) syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f00000002c0), 0xffffffffffffffff) bind$inet6(0xffffffffffffffff, &(0x7f00004b8fe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) ioctl$BLKTRACESETUP(r3, 0xc0481273, &(0x7f0000000540)={'\x00', 0x7ff, 0x6, 0xc, 0x100000001, 0x59f}) ioctl$BLKTRACETEARDOWN(r3, 0x1276, 0x700) 12m1.497293191s ago: executing program 4 (id=849): r0 = socket$can_bcm(0x1d, 0x2, 0x2) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000001dc0)={0x26, 'hash\x00', 0x0, 0x0, 'ghash-clmulni\x00'}, 0x58) r2 = accept4(r1, 0x0, 0x0, 0x0) sendmsg$inet_sctp(r2, &(0x7f00000008c0)={0x0, 0x0, &(0x7f00000006c0)=[{&(0x7f00000000c0)="b6", 0x1}], 0x1}, 0x14f916e07bbbd36a) sendmsg$nl_xfrm(r2, 0x0, 0x44000) openat$uinput(0xffffff9c, 0x0, 0x802, 0x0) r3 = creat(&(0x7f0000001180)='./file0\x00', 0x0) fallocate(r0, 0x0, 0x0, 0x3fffe) r4 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) dup2(r3, r4) syz_genetlink_get_family_id$nl80211(&(0x7f0000000540), r3) syz_genetlink_get_family_id$tipc2(&(0x7f00000000c0), 0xffffffffffffffff) socket$nl_generic(0x10, 0x3, 0x10) r5 = socket$unix(0x1, 0x2, 0x0) setsockopt$SO_TIMESTAMP(r5, 0x1, 0x23, &(0x7f0000000080)=0x6, 0x26) r6 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000000)=[{0x6}]}) chdir(0x0) close_range(r6, 0xffffffffffffffff, 0x0) 12m1.496659952s ago: executing program 34 (id=849): r0 = socket$can_bcm(0x1d, 0x2, 0x2) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000001dc0)={0x26, 'hash\x00', 0x0, 0x0, 'ghash-clmulni\x00'}, 0x58) r2 = accept4(r1, 0x0, 0x0, 0x0) sendmsg$inet_sctp(r2, &(0x7f00000008c0)={0x0, 0x0, &(0x7f00000006c0)=[{&(0x7f00000000c0)="b6", 0x1}], 0x1}, 0x14f916e07bbbd36a) sendmsg$nl_xfrm(r2, 0x0, 0x44000) openat$uinput(0xffffff9c, 0x0, 0x802, 0x0) r3 = creat(&(0x7f0000001180)='./file0\x00', 0x0) fallocate(r0, 0x0, 0x0, 0x3fffe) r4 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) dup2(r3, r4) syz_genetlink_get_family_id$nl80211(&(0x7f0000000540), r3) syz_genetlink_get_family_id$tipc2(&(0x7f00000000c0), 0xffffffffffffffff) socket$nl_generic(0x10, 0x3, 0x10) r5 = socket$unix(0x1, 0x2, 0x0) setsockopt$SO_TIMESTAMP(r5, 0x1, 0x23, &(0x7f0000000080)=0x6, 0x26) r6 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000000)=[{0x6}]}) chdir(0x0) close_range(r6, 0xffffffffffffffff, 0x0) 10m8.403716238s ago: executing program 5 (id=1006): ioctl$KVM_CAP_SPLIT_IRQCHIP(0xffffffffffffffff, 0x4068aea3, &(0x7f00000000c0)) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x5) write$UHID_INPUT(0xffffffffffffffff, &(0x7f00000040c0)={0x8, {"24783e245402fd60273e14c3eb090723ac476c7538b5ea19588c28b06516b72c6d73315762a6555c17a6d5554aaacc942d2328f17bd1c1121342c854847f3de3f12ce9d138093f6a5df3c89a72cb4e7b08827e473a39dffaab7929106845137921fc23a872ad3bf6cfcecbab32d6936e26f52c5ad8b0afd9102d54eec650987b229e64deac8e9aaa9c38229a701259d2b4211012b3eee1d382e7fce9a55a458c4fab7878d594718a47681c915f7fd7c502d1099140cc71538582497de53482f60ec3e66f21cab92485ed154f7283e05539487e211cf750c461ef2c76315064df74415bcdfa867d8b27fa63b3bba3230a1a9605d3091204dba17ca4b55d4f721607521f5e45c791bb45de35eb1917c1e9c1f65bdcca8822a03a1d2ef1118681e258c7e20e8bbdbdbae0b2d015d019428cc9742e92151bb7c4b2b0a36b9042249028b7b2a068b87b9dfbdd8dbd4b7e4e74801b9e2e4e112462ed6f14e2196778e27c041a3c7f6bcbf0ff4d30f692af0c8d160414d4e22427bafa7a8c2f6c8bd9883a3b70aa510654a5441343489d94ee314da0f3886e76b43c028e47138899d2ba84776eaf60da2f8340169152b42df69eb0f583d5cc986112b23650d1d8ed7310a445db4be5cd9918bb5a806a2c7ae870f3b4b1ac46dc42cbe74b51b25da2805d72b61493bdc2e04e4477978b40fd9a965bfa742224adeaae6277f57ad0b695d997a2239c2fd46eb430df27849b1a65d92e1900a1e48225f94f737f9d8c5284f2205df5732afd59bd0b3b1934c7db1581ec4684c3bcd5381e0e3be00cdfc21ba691c45c4537e9690708b68fa700814d27cb50df2b1be14a7a3e3981d6c6044a73ecbe40f2304b724ba10133ffec218b242ae97a52f16984247c28fe950d49dc7900475b777b37813e61d0cfd6da391f07ab622dec7b121967e80d67c8c7db77e05e37712b92aee01230ca29badfd714db3c03bea8e840d5dafc6a27fa98c7a6179ad39df582088e31e17ee283a76c5c9a05d0a0b4fc95a6aa46104947bac4f50b0e57925e3be186df0409e5c2c5b775347e83c9c8829e95623541603ce68589e942d3724ab7963731167f0954faa87b98aba0336469a127f3377a5d0cb91d11749d1489226c9da6abe765c2f1206ca7be3b9f7e116b7bc1baad37b14b842cbb89c348147e493a615f1972ef9baf03cc353c979865573bc40b84ac6cecf673985479ebaf24f2ad9d905874249bed88ed0c69479a0a7b53ecad68cff344866d03e4eb0cf80610af2465d64d3dceaf4fd6a5ee2eda719233fb33ef043b6019fec948bf5d0295a4f7af154475cbb3461650f7fcfc66c03db610ce8244ad432157ba91df573f3e13b430d4272d60b9a9a454bc1cafa87f1aa9c289ab6dae4f0e81f496d6767bf1bb503aebbd8a58e7dba9f643ab02e000d5f01e896e4c1d6e5b9771faacec322aa2b121d679c7941469dc233adfc5a83fe218a8ea686750e1426eb81fdd86ec193102bae34eb7e48986a18d05284ec1cffeae698ef739181f94a0c91a754f333cd44bc9053144c3f1491fc31684376a382b33e8c3d70eedbf5245dc63d86033c739c6f0f4ebab3007075c4dc66d7a8c93a718a7ec03d811b0ee727b0e695ebbc507d410f7e88204bb209beeef2b6fd0b4db48cd33a0b6591d91caf6676a4a74125afc3a04ea7eac3ce2662694999e891e77ef72ee4ec64b92b8918a3cb53cee960caf02b2cfb5449a64ad7ce57a5aa931a898d8adfc25c36d03861d5504772624b69ce823597b4488882e88a0f90362f604d4b722f9255220c3528a547b1c2d73aeb6034e549706fc467072adfd6a951b6a788b1e40a0c12cdc10f4be0e7cbb2b47704a8a684aeaf74d9e08bef07e3be8aed8ac00f398ff9f4e7cac9c5dbaadfdb0858d6d98dcfbddd609d5489e3f18b5db69aeff479281a976d30905eaf78121cf6365ff43e063e768cddd88040cc49c6961ba276f48b7e92419d0eadbf79cf8304ec48f51c5ca311d9530b6ade8702640c88ebe2f99ce88e8dc25b1373fee1aee3ca8e6a5905209205e0033ff02afcb4d1e08bfb0566ba2b07abaa07f48c37ccc147fcb627262391aa59df48450476aeaf85c6b82c3faca07679268f27260bae1ccfeaffa3af472bdd92c0b84dee9b857b2d0d72895db5e87527747fefb9906eeb4e9fc98c5d89937134a8650e1dc6a2abe84859302da2854000152043da9a8d09b4cb34ba15a6bd031cc116db6fbd5d50afaf6f7169af9794235de346b70f638e8c46a8a4c80da4844c0589e3eba83eecf0efcbab54b577448038134d169bb66fd4028c7dba7eb869a0de8ca9337633a784dcd6693c2a55621ecbb0ef025f69f234508df53d23e8bb11ff9399dc79aa79adcbbc969e55ed2e7b0a606e024457209cec002f38b18a7abf2aae9a178194ed70080f59350a44ffdc1d89332cae9923e13f36ae05d73fffd41281a0cdc6a95740082a3742350ab95b4065340154e3efaf044ee867e1b66f656bdd8c2273c03aeff9f655457863cb3419656f8f144b592b6ba56d4d2bdc4aee710e5871a10f560a237c3e357902ac150ffc23f78e81a2c71543bd89c3ed6d1e57cacae6f5141a84849d90e0e5df1ee86d18993dbb272bd2d54713c9f222802e22ee2976174caf00abe8fdd6d432dd2993b74cbb16839f11d6393c1b291c7e7f501ecc9edd433f21b80c8890883fb7b591c6486be7ed48402b618518b10445edfdc3a4ad8d3ce4b2439a1def220ba384e7cb3e69b782035087598c546bc68a72f4fe51e95ffae21091552849d02ebb1b0dda26bc3477cb3d74360587bb8712d85c6e458cf334b4c65823c22ca818dd0e81d20b6050cb8590452486ea641e6dc4c61efc3675517cdb820debd0f66f78ca88efdc6dc1679ab95a52fb85d78e43de6409805c43f63bd516610c17782377f4e6659a803e725742c05aa251d7236c8b5d45009aa62e17697f31735a3a3a56839d8ef0d68501d3f584283ce80cc371dfa0ab0724c3265429456ea4c9a27759f49e02a7b9d5028b4eda3836876a4567758ea1d5136db27be77b1656de90792c939fa3e9572bd6f7fa6662223f4d8b5c88cc7d3605b9489cf7afacdb34b04527a3d1448ab4011bc92b5ae8521b93b657a90ecba6e6a89472e31c22ae31cbb046c2964204ed9fcfcef49d0f1f96f239cf9997b70d9cffdbfca813dd723fed1d95ee994b6094e6e57905544d60e605533acc921bae751aca79515cdbb2dcc7828968252421308d95fe68dbb136ad5b611ea37912f75df2aee792b8a387f5cad76a6157a7363ef567d77b1bc476d35768079a868733513985b26f7cf79ce76c807eace09146558e85dd1bb867996500a99fc26129a16496bff1ddebd97db54bd7f78b35003a1b702c51bfceb2abc0a5fd55cb02f67458c93b0cbecb086dbf8a066a7771b29953a50089812b28901acc0d97845e6a9ade6b366b8c880753080e6c73c99165aae12ce51b723ec366cd6730634a81fabaa1f0b01c750458bf365e60dfeb605b86bd7a37b6492c483dd74e3a2fa6d152d0e230cee186f1259f97d6b9ff615fe012f58a382c2809a8e63334230b93b24de8fdd1dba7bc9f623c82f1a8e81287d08555f71e2af0aad9202e9352058e66771d813b7fb68fce040b06cc168c2c7d9fcf3bd5cdec5bd8ce2b338cedbfb6cfad342973aa2e2faedde11efc2466896c81f7842cbf25f78403e1f0f5ca5544cbecd7bba70b616f29a4388fc4896428a23d8772dc21794c20d76f55439fa66b94c56c7e01ac016820caca23f42de23c309d86b2cb207dcd096d6a44d2f681c7bc725d3f81cc6a08c2ae82ca55228125034f312fe04f2befb4c4ef6fcb803c1474988a7e07810e60d0d38d1934b135015d39b49fa48bfee6ad4ad0298bc5e66e8d357ee47fe61f215f7326de507addbf4ababa0cb928c947e91354ed232332cbde85e5dc3e173fdbc4d4dd96786bd6dce83cf1ea099b06f2a4f18dc0394951e6ee2eb72dfa6a013713590aebdeda149bc06b64ad40fa64538edd9afd408bb013d38b3cbf17c265f0295b0e085112dc490230322b1eecaf727d0fc3e67226e0f8a50af7025e960072c336d0a9838f328a68ed1d6551a5743d10504193f0e32ced3ba98b8a21b3c431efb8dd3a2cadf10e12daf461d5d9171d2ca7ae218c0bb868c363feb0487d8ffac4a654c6c551a3725902c7ebc55ed822605c039363f4e4e24ea4b3d7dfd21d07c9228a3b37c31b7124aea3faaa5930dd138ca433069a7c3807c1828dcab13ab9ff0afa6a3ff63d5811269913e4f9774a59ff9df2dbe7ff2c29e599253324b5514f4c2b634996fcd421797712b159896e9f3ba234d6ebb658c792dee2aa26001b5b6427dc311924b24264ec2155a0a32d8f51205925fe80e5fea15d957c327165791e7571b74fed1003e680b6f743fa6fa91f8e423b5cb68e86eb2e13f6b6a94ee4b992b59f6a4978d93a60ee207986bb5be365740b990d98f1866e58d5182532312b570daa8d1f9a8d0ae551480e0fad001aec5a17dc64b0ab5704780c0408b5fb1dc69a55f29514facae81b7f6e6503fea6a75a912a966f6f20ce7ee726be01c698ebd81cd81d972fd6278ff9591e4def2877cdcaee3ea046911cb5a6abc16197eda0a850f8c6acd59e845dae487e4427694fdd50b1bdf9da7e662ad05ef239e8ecb9e3156d1cf27b6b0579745f046a163eabf6e385bb617cbbf77e93bfba6a422c44d6e60bfd03928c32837e991cad562b8db3a21777b1f7b1496c1774d202a0b63f80d3f3bdcba0b8ae06ce357a6a88de0b98a4fa0bcba5e9b2cece271fbf4476b606ae02299ecb88d527af0db95e306279dc0ee14127a780586b4821b0aa0456df345e1034de046623bf53496ba41fdc2897996a90e315b9c9fd23be0e38f80e233d7cf42566e0ed721364bb8685b5bef438c136fb3a2fe1cd36a18fe1384adf503ae9c3a50f5c7c8610145b63de52183ceccb49b55940ab504943cd8b0df6bc52a47bbbec418b4af2f29ebdc8fe09460f2ca409519a10c45ecccb3e3342ea8c30152ef43416fca25a2b79b8815295fc802dd80a5f6ba72f32e54b8166dd8c9079d3ba0f06e00020b691d7d49cdde6e65f5b61624404d52509fd34a9430bb85085bda9df7f98d890d53e559ebf3c024ea90b68c32fe7b149ddd12b7386c9a6b441453f91ce3d351d0c64185795befae6bb9ce2646af1319a6b8f4daf1904c2684ebae533a3939c83b1be1bfb5f3ffb34b00532df06337f520bafe1c4bee4c2854ddfd7867a94c9a660c1311e1da75876406e8a2372bc521ef178ca0e0a6b3f587493a31aafc46490dfedb0283b3d2ba0536bc3f76ca685cad56b28499da509a925d769dad43264260ca857436a8b28e3067a70d07c87988fb30f069773b40bcfe0552f392e5c5508efde3b303231f991d6c14fc5639347bb11315237ba57fb81d4acf5f5a17f31debf3c3e69df45f5f46e34b1f8af4d712cd65d4da93634bb878eb044381f29935972b835b2fd7a75082dd67f67c94a073ebba59d57c8a828cc21ce7875c5ab42b6b342303fddad0852ab24caeaf33af93c9ba023d2b1e7eb4fcd91a8ef680d7d641dea186a5c7f20401be0c26ce5ab44d5efd932ee0dfff62ab58408e0aaa6ec1d68c9d56c3f47c2ce2df2c9e342208e8c653ef850dd622e1e7cfe70b3b23e353746a076736c3addb9247384e4424754ccfc181f60c24f940ae4b17bf8c5710cb97a28b493edad712240bf420acdf9fc2e232056558c62894c10836ea6476d751", 0x1000}}, 0x1006) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={0x0, r1}, 0x18) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) sched_setaffinity(0x0, 0xfffffef7, &(0x7f0000000740)=0x410000002) r3 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000080)='/proc/partitions\x00', 0x0, 0x0) r4 = openat$sysctl(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/vm/compact_memory\x00', 0x1, 0x0) sendfile(r4, r3, &(0x7f00000000c0)=0x58, 0x9) 10m6.929743417s ago: executing program 5 (id=1007): syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) r0 = syz_open_dev$ttys(0xc, 0x2, 0x1) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setscheduler(r1, 0x1, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_init_net_socket$bt_hidp(0x1f, 0x3, 0x6) madvise(&(0x7f0000000000/0x3000)=nil, 0x7fffffffffffffff, 0x3) r4 = syz_open_dev$tty1(0xc, 0x4, 0x1) r5 = fcntl$dupfd(r0, 0x0, r4) ioctl$TIOCSETD(r5, 0x5423, &(0x7f00000000c0)=0xd) ioctl$TIOCSTI(r5, 0x5412, &(0x7f0000000000)=0x30) ioctl$TCGETA(r5, 0x5405, &(0x7f0000000280)) bind$alg(0xffffffffffffffff, &(0x7f0000000000)={0x26, 'hash\x00', 0x0, 0x0, 'sha384-generic\x00'}, 0x58) 10m5.583747864s ago: executing program 5 (id=1009): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20000008b}, 0x0) stat(&(0x7f0000000040)='./file0\x00', &(0x7f0000000180)) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000400)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$packet(0x11, 0x3, 0x300) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000640), 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000480)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x1f00, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r3}, 0x10) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000001840), 0x2982, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000f80), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000280)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_NEW_STATION(r4, &(0x7f0000001080)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)={0x48, r5, 0x1, 0xfffffffd, 0x0, {{}, {@val={0x8, 0x3, r6}, @void}}, [@NL80211_ATTR_STA_LISTEN_INTERVAL={0x6}, @NL80211_ATTR_PEER_AID={0x6, 0xb5, 0x185}, @NL80211_ATTR_STA_SUPPORTED_RATES={0x4}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_STA_WME={0xc, 0x81, [@NL80211_STA_WME_MAX_SP={0x5, 0x2, 0xc3}]}]}, 0x48}, 0x1, 0x0, 0x0, 0x45}, 0x0) 10m4.086515024s ago: executing program 5 (id=1014): openat$vicodec0(0xffffffffffffff9c, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000380)='sched_switch\x00', r1, 0x0, 0xffffffffffffffff}, 0x18) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) sched_setaffinity(0x0, 0xfffffef7, &(0x7f0000000740)=0x410000002) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r3, &(0x7f00000037c0)={0x0, 0x0, &(0x7f0000003780)={&(0x7f0000000d40)=@newtaction={0x48, 0x31, 0x12f, 0x0, 0x0, {}, [{0x34, 0x1, [@m_police={0x30, 0x1, 0x0, 0x0, {{0xb}, {0x4}, {0x4}, {0xc, 0xb, {0x1}}, {0x2, 0xa}}}]}]}, 0x48}}, 0x0) r4 = socket$can_j1939(0x1d, 0x2, 0x7) bind$can_j1939(r4, &(0x7f00000000c0), 0x18) bpf$PROG_LOAD(0x5, 0x0, 0x0) socket$kcm(0x10, 0x100000000002, 0x4) mknod$loop(&(0x7f0000000180)='./file0\x00', 0x8, 0x0) 10m2.410090319s ago: executing program 5 (id=1015): r0 = syz_open_dev$video(&(0x7f0000000000), 0x485, 0x40000) ioctl$VIDIOC_S_SELECTION(r0, 0xc040565f, &(0x7f0000000080)={0x9, 0x0, 0x0, {0x0, 0x300, 0x0, 0x80000300}}) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)={0x14, 0x37, 0x301, 0x270bd24, 0x25dfdbf9, {0x5}}, 0x14}}, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r3 = dup(r2) write$6lowpan_enable(r3, &(0x7f0000000000)='0', 0xfffffd2c) mprotect(&(0x7f0000ff8000/0x8000)=nil, 0x8000, 0x3000000) r4 = gettid() r5 = epoll_create(0x400) r6 = eventfd(0x4) kcmp$KCMP_EPOLL_TFD(r4, r4, 0x7, r6, &(0x7f0000000080)={r5, r6}) r7 = syz_io_uring_setup(0x239, &(0x7f0000000380)={0x0, 0x1ffffe, 0x10100, 0x0, 0x0, 0x0, r3}, &(0x7f0000000180)=0x0, &(0x7f00000001c0)=0x0) syz_io_uring_submit(r8, r9, &(0x7f0000000040)=@IORING_OP_POLL_ADD={0x6, 0x2, 0x0, @fd_index=0x4, 0x0, 0x0, 0x0, {}, 0x1}) io_uring_enter(r7, 0x2ded, 0x4000, 0x0, 0x0, 0x0) syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) recvmmsg(r3, &(0x7f00000055c0), 0x0, 0x302, 0x0) 9m59.161292156s ago: executing program 5 (id=1022): r0 = socket$nl_route(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x0, 0x0) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000140)=@ipv4_getnetconf={0x14, 0x52, 0x311}, 0x14}, 0x1, 0xf00000000000000}, 0x0) read(r4, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) timerfd_create(0x0, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'bridge0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=@RTM_NEWMDB={0x38, 0x1e, 0x1e5, 0x0, 0x0, {0x7, r5}, [@MDBA_SET_ENTRY={0x20, 0x1, {0x0, 0x0, 0x0, 0x0, {@ip4=@broadcast}}}]}, 0x38}}, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000280)={&(0x7f00000000c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x34, 0x34, 0x2, [@const={0x0, 0x0, 0x0, 0xa, 0x2}, @int={0x0, 0x0, 0x0, 0x1, 0x5}, @union={0x0, 0x1, 0x0, 0x5, 0x0, 0x0, [{0x0, 0x1}]}]}}, &(0x7f0000000000)=""/128, 0x4e, 0x80, 0x1, 0x0, 0x0, @void, @value}, 0x20) 9m43.490019865s ago: executing program 35 (id=1022): r0 = socket$nl_route(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x0, 0x0) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000140)=@ipv4_getnetconf={0x14, 0x52, 0x311}, 0x14}, 0x1, 0xf00000000000000}, 0x0) read(r4, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) timerfd_create(0x0, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'bridge0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=@RTM_NEWMDB={0x38, 0x1e, 0x1e5, 0x0, 0x0, {0x7, r5}, [@MDBA_SET_ENTRY={0x20, 0x1, {0x0, 0x0, 0x0, 0x0, {@ip4=@broadcast}}}]}, 0x38}}, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000280)={&(0x7f00000000c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x34, 0x34, 0x2, [@const={0x0, 0x0, 0x0, 0xa, 0x2}, @int={0x0, 0x0, 0x0, 0x1, 0x5}, @union={0x0, 0x1, 0x0, 0x5, 0x0, 0x0, [{0x0, 0x1}]}]}}, &(0x7f0000000000)=""/128, 0x4e, 0x80, 0x1, 0x0, 0x0, @void, @value}, 0x20) 4m30.217111171s ago: executing program 2 (id=1497): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x3, &(0x7f0000000040)=@framed, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10) bpf$PROG_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='net/fib_triestat\x00') mkdir(0x0, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000080)=@base={0x9, 0x16, 0x8, 0x40, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000100), &(0x7f0000000580), 0x1000, r4}, 0x38) rmdir(0x0) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x10012, 0xffffffffffffffff, 0x0) 4m28.97974569s ago: executing program 2 (id=1500): mknodat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0, 0x0) pipe2$9p(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r1, &(0x7f0000000300)=ANY=[@ANYBLOB="1500000065ffff017f000e0800395032303030"], 0x15) r2 = dup(r1) write$FUSE_BMAP(r2, &(0x7f0000000000)={0x18}, 0x18) write$FUSE_DIRENTPLUS(r2, &(0x7f00000003c0)=ANY=[@ANYBLOB="b0"], 0xb0) write$FUSE_GETXATTR(r2, &(0x7f00000000c0)={0x18}, 0x18) write$FUSE_DIRENTPLUS(r2, &(0x7f0000000680)=ANY=[@ANYBLOB="b90000"], 0xb8) mount$9p_fd(0x0, &(0x7f00000002c0)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f0000000400)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r2}, 0x2c, {[{@cache_fscache}]}}) r3 = openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0xe0a42, 0x0) r4 = openat$vga_arbiter(0xffffffffffffff9c, 0x0, 0x141202, 0x0) socket(0x2c, 0x3, 0xff) sched_setscheduler(0x0, 0x1, 0x0) getpid() mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) connect$unix(0xffffffffffffffff, 0x0, 0x0) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x651, 0x0) sendmmsg$inet(0xffffffffffffffff, &(0x7f0000005240)=[{{0x0, 0x0, 0x0}, 0xfffffdef}], 0x1, 0x4016b94) write$vga_arbiter(r4, &(0x7f0000000080)=@other={'trylock', ' ', 'mem'}, 0xc) write$FUSE_DIRENTPLUS(r3, &(0x7f0000000840)={0x10}, 0x10) 4m23.115037134s ago: executing program 2 (id=1508): syz_open_dev$video(&(0x7f0000000040), 0xa7, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x1) r0 = syz_open_procfs(0x0, 0x0) pread64(r0, 0x0, 0x0, 0x100008) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) setsockopt$SO_BINDTODEVICE(0xffffffffffffffff, 0x1, 0x19, 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f0000000000)={0x26, 'aead\x00', 0x0, 0x0, 'aegis128-generic\x00'}, 0x58) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f0000000140)="2c385aa3d49100dc6626c892b6bc", 0xe) r3 = accept4(r2, 0x0, 0x0, 0x0) sendmsg$alg(r3, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000080)=[@assoc={0x18, 0x117, 0x4, 0x200}], 0x18}, 0x0) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) r4 = openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$VIDIOC_ENUM_FMT(r4, 0xc0405602, &(0x7f0000000040)={0x4f, 0xa, 0x1, "1e0076aa028b93dcf00000000000000000000000000000000000000000871700", 0x30314752}) 4m15.428698636s ago: executing program 2 (id=1516): r0 = socket(0x2a, 0x2, 0x0) getsockname$packet(r0, &(0x7f0000000240)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000001480)=0x14) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000003c0)=@newtfilter={0x478, 0x2c, 0xd27, 0x70bd2d, 0x0, {0x0, 0x0, 0x0, r1, {0xe}, {}, {0x8, 0xffe0}}, [@filter_kind_options=@f_basic={{0xa}, {0x448, 0x2, [@TCA_BASIC_POLICE={0x444, 0x4, [@TCA_POLICE_RATE={0x404, 0x2, [0x3, 0x8, 0x62, 0x2, 0x0, 0xc, 0x2, 0x7fff, 0x0, 0xffffff70, 0x19, 0xffffffa9, 0x2, 0x7, 0x80000001, 0x7, 0x3, 0x36, 0xc, 0x6, 0x6, 0x5d0bef1f, 0x400, 0x1, 0x837, 0x8, 0x9fec, 0x401, 0x68, 0x9, 0xdd64, 0x1, 0x4, 0x8001, 0xfffffffe, 0x2, 0x0, 0x200, 0xfff, 0xfffffff1, 0xfff, 0x4, 0xf, 0x7, 0x7469, 0xb, 0x2, 0x200, 0xff32, 0x6, 0xca, 0x4ec1, 0x1, 0x9, 0x80, 0x0, 0x10000, 0x9, 0xb4, 0x7, 0x6, 0x0, 0x0, 0x8156b2a, 0x2, 0xd5c, 0x4, 0xa0, 0x4, 0x7, 0x4, 0x0, 0x81, 0xff, 0x6, 0xe6b, 0x9, 0xa, 0xc8c, 0x1, 0x2, 0x6, 0xf4e, 0x9, 0x3a0, 0x3, 0x10000, 0x7ff, 0x44, 0x1, 0x0, 0x800, 0x3, 0x8, 0x0, 0x8e5e00, 0x922e, 0x0, 0x8, 0x3, 0xf, 0x4, 0x2002, 0x2c000, 0x80, 0x1, 0x1, 0x2, 0x5, 0x0, 0x9, 0x6, 0x0, 0x3365, 0x1, 0x5, 0xffffffff, 0x1000, 0x0, 0x4, 0x0, 0x1, 0xc, 0x81, 0x111, 0x2, 0x5c20, 0x7f, 0x0, 0xe, 0xfffffffb, 0x6, 0x391, 0x0, 0x0, 0x3, 0x9, 0xc95d90e, 0xff, 0x2, 0x7, 0x10, 0xc7, 0x4, 0x7, 0x0, 0x9, 0xffffffff, 0x9, 0xffffffff, 0x4, 0x3, 0x7, 0xfffffff9, 0x10, 0x2, 0xfff, 0x2, 0x6, 0x8b4, 0x600000, 0x1, 0x6, 0x0, 0x10000, 0x0, 0x3, 0x9, 0x0, 0x1000, 0x6, 0x9, 0x0, 0x1, 0x81, 0x2, 0xffff6c4b, 0x1, 0x7, 0x5, 0x7fff, 0x8, 0xffffffff, 0x9, 0x6, 0x0, 0x40, 0x67e1, 0x80000000, 0x2, 0x603c, 0x4, 0x4, 0x0, 0xfffffff8, 0x7, 0x3, 0x10, 0x400, 0xfffffe00, 0x1, 0x3, 0x0, 0xffff, 0x4, 0x6, 0x8, 0x0, 0x400, 0x1, 0x8a, 0x10, 0x6, 0x0, 0xfffffffd, 0x3, 0x7, 0x616, 0x2, 0x2, 0xd1, 0x2, 0x0, 0x8, 0xe, 0x800, 0x1, 0x4, 0xd87, 0x80000001, 0x48e0, 0x8, 0x9, 0x40, 0x400, 0x5, 0x2, 0x4e1b, 0x3, 0x1000, 0x8, 0x4, 0x3, 0x0, 0x2, 0x9, 0x5, 0x3, 0x10001, 0xffff, 0x4d, 0xd, 0x8, 0x2, 0x2, 0x8]}, @TCA_POLICE_TBF={0x3c, 0x1, {0x7, 0x3, 0xfffffffe, 0xd, 0x66, {0xb, 0x2, 0x200, 0x8001, 0xfffa, 0xbe}, {0xd9, 0x2, 0x5, 0xfff8, 0xfff}, 0x6, 0x9}}]}]}}]}, 0x478}}, 0x4000) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000140)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r2, 0x4018620d, &(0x7f0000000100)) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000180)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000080)={0x11, 0x0, &(0x7f0000000400)=[@acquire], 0x0, 0x0, 0x0}) r4 = dup3(r3, r2, 0x0) r5 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x1, 0x11, r5, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r5, 0x4018620d, &(0x7f0000000040)) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f00000003c0)={0x8, 0x0, &(0x7f0000000300)=[@acquire], 0x0, 0x0, 0x0}) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x100008b}, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000840)=0xc00000bce) syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x1) io_uring_setup(0x238f, 0x0) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f00000006c0)={0x4c, 0x0, &(0x7f0000000580)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x1000}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f0000000000)={0x4c, 0x0, &(0x7f0000000740)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) 4m13.836729591s ago: executing program 2 (id=1519): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="18010000200180000000000000000000850000007b00000095"], &(0x7f0000000400)='syzkaller\x00', 0x5, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x4000, 0x0, 0x0) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) r4 = socket$alg(0x26, 0x5, 0x0) bind$alg(r4, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-blowfish-asm\x00'}, 0x58) r5 = accept$alg(r4, 0x0, 0x0) setsockopt$ALG_SET_KEY(r4, 0x117, 0x1, &(0x7f0000000080)="ad060000", 0x4) sendmsg$alg(r5, &(0x7f0000000580)={0x0, 0x0, &(0x7f00000004c0)=[{&(0x7f00000000c0)="438dc77642449e6e17553493f7aeb57e36375ae9e2b947bee5b08bc1af2ca68b357310dce47d455f52ee5e63b04b61b92428e157d85dce57e7ea63a7d521c63fdb2be730b5c79be573aa2ca5a2ad6a97241b7d8bec0b0479a9cc299f27be0cea11e36425f365d0badb7b4c6a255f7c0ea360e21647409a4abb6d92cae8c468290ede", 0x82}, {&(0x7f0000000180)="42a86db21e3a6b2d2f33659689ebffd90f8e737b31c8bbacf0c4942be1068c781ac9e25791a08f779b64cc51c034b219f326032701d362476fe6447300ed52b7ca", 0x41}], 0x2, &(0x7f0000000540)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}, 0x0) recvmmsg(r5, &(0x7f0000000340)=[{{0x0, 0x0, &(0x7f0000000d40)=[{&(0x7f0000000840)=""/75, 0x4b}, {0x0}], 0x2}}, {{0x0, 0x0, 0x0}}], 0x2, 0x0, 0x0) openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) 4m12.614795368s ago: executing program 2 (id=1521): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) r2 = socket$netlink(0x10, 0x3, 0x10) sendmsg$kcm(0xffffffffffffffff, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) getrlimit(0x6, &(0x7f0000000000)) r6 = syz_open_dev$loop(&(0x7f00000001c0), 0x7, 0x0) ioctl$LOOP_SET_STATUS(r6, 0x40101288, 0x0) listen(r4, 0x400) bind$netlink(r2, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) sendmsg$DEVLINK_CMD_RATE_NEW(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000300)={0x34, r1, 0x1, 0x0, 0x1, {0x25}, [@handle=@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}]}, 0x34}}, 0x4040004) 3m57.387996015s ago: executing program 36 (id=1521): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) r2 = socket$netlink(0x10, 0x3, 0x10) sendmsg$kcm(0xffffffffffffffff, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) getrlimit(0x6, &(0x7f0000000000)) r6 = syz_open_dev$loop(&(0x7f00000001c0), 0x7, 0x0) ioctl$LOOP_SET_STATUS(r6, 0x40101288, 0x0) listen(r4, 0x400) bind$netlink(r2, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) sendmsg$DEVLINK_CMD_RATE_NEW(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000300)={0x34, r1, 0x1, 0x0, 0x1, {0x25}, [@handle=@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}]}, 0x34}}, 0x4040004) 2m54.401200617s ago: executing program 9 (id=1621): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket$inet_smc(0x2b, 0x1, 0x0) r4 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) r5 = syz_open_dev$dri(&(0x7f00000008c0), 0xd21, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) syz_extract_tcp_res(&(0x7f0000000040), 0xfffffc01, 0x7) ioctl$DRM_IOCTL_MODE_GETCRTC(r5, 0xc06864a1, &(0x7f0000000380)={0x0, 0xffffffca, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_GETFB2(r5, 0xc06864ce, &(0x7f0000000440)={r6, 0xe, 0x7f, 0x0, 0x0, [0x0], [0x0, 0x29, 0x2], [], [0x0, 0x0, 0xfffffffffffffffd]}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r4, 0xc02064b2, &(0x7f0000000340)={0x83ff, 0x2, 0xb5}) link(0x0, 0x0) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r4, 0xc00c642d, &(0x7f0000000080)={r7}) close_range(r3, 0xffffffffffffffff, 0x0) 2m52.020303576s ago: executing program 9 (id=1624): prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x5}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r3 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r3}, 0x10) r4 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r4, 0x10f, 0x87, &(0x7f0000000100)=@req={0x3fc, 0x0, 0x0, 0x6}, 0x10) r5 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r5, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc}, 0x10) recvmmsg(r4, &(0x7f0000008140)=[{{0x0, 0x0, &(0x7f0000002880)=[{&(0x7f0000000140)=""/8, 0x8}], 0x1}}], 0x1, 0x7fb10727dda9, 0x0) close(r5) open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) 2m50.281734397s ago: executing program 9 (id=1627): ioctl$UFFDIO_REGISTER(0xffffffffffffffff, 0xc020aa00, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mkdir(0x0, 0x0) mount$fuse(0x0, 0x0, 0x0, 0x0, 0x0) mount(0x0, 0x0, 0x0, 0x0, 0x0) chdir(0x0) mkdir(0x0, 0x0) r3 = syz_open_procfs(0x0, 0x0) preadv2(r3, &(0x7f0000000380), 0x0, 0x5, 0x101, 0x1) r4 = syz_open_dev$sndctrl(&(0x7f0000000040), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_HWDEP_INFO(r4, 0x80dc5521, &(0x7f0000003600)=""/120) 2m47.441603345s ago: executing program 9 (id=1629): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f00000001c0)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x6770c000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000020c0)='./file0\x00', 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000900)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}]}) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_int(r3, 0x29, 0x33, &(0x7f0000000000)=0x6, 0x4) bind$inet6(r3, &(0x7f0000d84000)={0xa, 0x2}, 0x1c) sendto$inet6(r3, &(0x7f0000f6f000), 0xfffffffffffffea7, 0x20000004, &(0x7f0000b63fe4)={0xa, 0x2, 0x18115, @rand_addr, 0x983a}, 0x1c) chdir(&(0x7f00000003c0)='./bus\x00') open(&(0x7f0000000080)='./bus\x00', 0x1c5b42, 0x0) syz_emit_vhci(&(0x7f0000000000)=ANY=[@ANYBLOB="04b805078a5b2e1e"], 0x8) creat(&(0x7f00000001c0)='./file0\x00', 0x0) rename(&(0x7f0000000040)='./bus\x00', &(0x7f0000000340)='./file0\x00') 2m46.314180558s ago: executing program 9 (id=1632): socket$packet(0x11, 0x2, 0x300) memfd_create(0x0, 0x0) ioctl$CEC_S_MODE(0xffffffffffffffff, 0x40046109, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) ioctl$FBIO_WAITFORVSYNC(0xffffffffffffffff, 0x40044620, 0x0) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_open_dev$usbfs(0x0, 0x75, 0x101301) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f0000000000)=0x15) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f0000000100)=0x15) ioctl$TCFLSH(0xffffffffffffffff, 0xc0384707, 0x20000000) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, @void, @value}, 0x28) openat$ttyprintk(0xffffffffffffff9c, 0x0, 0x801, 0x0) r1 = openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) ioctl$VIDIOC_CROPCAP(r1, 0xc02c563a, &(0x7f0000000200)={0xa, {0x6, 0x5, 0x7fff, 0x8001}, {0x6, 0xe, 0x1, 0x8000}, {0x3, 0x4962}}) socket$inet6(0xa, 0x5, 0x0) 2m41.855105213s ago: executing program 9 (id=1639): socket$nl_generic(0x10, 0x3, 0x10) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)=@newlink={0x34, 0x10, 0x403, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x4}}}]}, 0x34}, 0x1, 0xffffffea, 0x0, 0x4004}, 0x0) r1 = creat(&(0x7f0000000240)='./file0\x00', 0x0) pipe2$9p(&(0x7f0000001900)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r3, &(0x7f0000000500)=ANY=[@ANYBLOB="1500000065ffff048000000800395032303030"], 0x15) ioctl$TIOCL_SCROLLCONSOLE(r1, 0x541c, &(0x7f0000000080)={0xd, 0x800}) r4 = dup(r3) socket$inet6_sctp(0xa, 0x1, 0x84) r5 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_MAX_BURST(r5, 0x84, 0xc, &(0x7f0000000000)=@assoc_value, &(0x7f0000000040)=0x8) write$FUSE_BMAP(r4, &(0x7f0000000100)={0x18}, 0x18) write$FUSE_NOTIFY_RETRIEVE(r4, &(0x7f00000000c0)={0x14c}, 0x137) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f00000004c0), 0x10400, &(0x7f0000000700)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r2, @ANYBLOB=',wfdno=', @ANYRESHEX=r4, @ANYBLOB=',cache=mmap']) chmod(&(0x7f0000000140)='./file0\x00', 0x0) r6 = open$dir(&(0x7f0000000140)='./file0\x00', 0x1, 0x0) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='blkio.bfq.io_wait_time\x00', 0x275a, 0x0) ftruncate(r7, 0x2000009) sendfile(r6, r7, 0x0, 0x7ffff000) lstat(&(0x7f00000002c0)='./file0\x00', 0x0) clock_gettime(0x0, 0x0) 2m26.42787236s ago: executing program 37 (id=1639): socket$nl_generic(0x10, 0x3, 0x10) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)=@newlink={0x34, 0x10, 0x403, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x4}}}]}, 0x34}, 0x1, 0xffffffea, 0x0, 0x4004}, 0x0) r1 = creat(&(0x7f0000000240)='./file0\x00', 0x0) pipe2$9p(&(0x7f0000001900)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r3, &(0x7f0000000500)=ANY=[@ANYBLOB="1500000065ffff048000000800395032303030"], 0x15) ioctl$TIOCL_SCROLLCONSOLE(r1, 0x541c, &(0x7f0000000080)={0xd, 0x800}) r4 = dup(r3) socket$inet6_sctp(0xa, 0x1, 0x84) r5 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_MAX_BURST(r5, 0x84, 0xc, &(0x7f0000000000)=@assoc_value, &(0x7f0000000040)=0x8) write$FUSE_BMAP(r4, &(0x7f0000000100)={0x18}, 0x18) write$FUSE_NOTIFY_RETRIEVE(r4, &(0x7f00000000c0)={0x14c}, 0x137) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f00000004c0), 0x10400, &(0x7f0000000700)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r2, @ANYBLOB=',wfdno=', @ANYRESHEX=r4, @ANYBLOB=',cache=mmap']) chmod(&(0x7f0000000140)='./file0\x00', 0x0) r6 = open$dir(&(0x7f0000000140)='./file0\x00', 0x1, 0x0) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='blkio.bfq.io_wait_time\x00', 0x275a, 0x0) ftruncate(r7, 0x2000009) sendfile(r6, r7, 0x0, 0x7ffff000) lstat(&(0x7f00000002c0)='./file0\x00', 0x0) clock_gettime(0x0, 0x0) 18.342063625s ago: executing program 7 (id=1826): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0xb, &(0x7f0000000380)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020000000000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000300)='rcu_utilization\x00', r3}, 0x10) r4 = socket$inet(0x2, 0x4000000000000001, 0x0) openat$ptp0(0xffffffffffffff9c, 0x0, 0x0, 0x0) bind$inet(r4, 0x0, 0x0) openat$ptp0(0xffffffffffffff9c, 0x0, 0x0, 0x0) mount(0x0, &(0x7f00000001c0)='./file0\x00', &(0x7f0000000000)='sysfs\x00', 0x0, 0x0) r5 = fspick(0xffffffffffffff9c, 0x0, 0x0) fsconfig$FSCONFIG_CMD_RECONFIGURE(r5, 0x7, 0x0, 0x0, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x0, &(0x7f00000000c0)}) shmctl$SHM_INFO(0x0, 0xe, &(0x7f0000000500)=""/46) sendmsg$nl_xfrm(0xffffffffffffffff, 0x0, 0x0) 16.840484082s ago: executing program 7 (id=1827): openat$binderfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) syz_io_uring_submit(0x0, 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_PORT_INFO(0xffffffffffffffff, 0xc0a85320, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'wg2\x00'}) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) fanotify_init(0x79, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000380)='sched_switch\x00', r1, 0x0, 0xffffffffffffffff}, 0x18) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) sched_setaffinity(0x0, 0xfffffef7, &(0x7f0000000740)=0x410000002) r3 = socket$nl_route(0x10, 0x3, 0x0) clock_gettime(0x0, 0x0) clock_gettime(0x0, &(0x7f0000000300)={0x0, 0x0}) setitimer(0x2, &(0x7f0000000340)={{0x77359400}, {r4, r5/1000+60000}}, 0x0) ioctl$sock_SIOCETHTOOL(r3, 0x8946, &(0x7f0000000340)={'netdevsim0\x00', &(0x7f0000000400)=@ethtool_wolinfo={0x5, 0x2, 0x7fff, "fc0cdefb479b"}}) 14.576718604s ago: executing program 7 (id=1829): bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@bloom_filter={0x1e, 0x4, 0x6, 0x835, 0x202, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x1, 0x1, 0x2, 0xc, @void, @value, @void, @value}, 0x48) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x7a) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000001c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_open_dev$sndpcmc(&(0x7f0000000480), 0x1, 0x0) syz_emit_vhci(0x0, 0x9) sendmmsg$unix(r1, &(0x7f0000001800)=[{{&(0x7f0000000d40)=@file={0x0, './file1\x00'}, 0x6e, &(0x7f0000000f80)=[{&(0x7f0000000dc0)="3388f321db607daed736e7e89361e8a7065034c9ab9e0f3322601abd1d1f229060c8acaee71d85fde1997eb2fa88d3f5455d219e8764aed6e888e9a1964f82b3e32a1262e57d2bd4d47c8ce9b1fb26386b4301ae3cf41202bba1a6c4100e724e4580ab76da63a6c1f4df5f4db489571ddfc844bbf2417f89", 0x78}], 0x1, 0x0, 0x0, 0x883}}], 0x1, 0x4004000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x10, 0xffffffffffffffff, 0x0) syz_mount_image$erofs(&(0x7f0000000200), &(0x7f0000000100)='./file1\x00', 0x810801, &(0x7f0000000140)=ANY=[], 0x4, 0x208, &(0x7f0000000640)="$eJzslb9rFEEUx78zu7e5BAlYaGFzFgEjmL3dPZU0FrEXhETU8jBjiE5y4XJFEhASbGysxX/EIpWFnVbWFioIFqa0EhyZ2dnb2dzuHcv5o/B9IJPvzOybee/tu7cgCOK/5fOn7x+f31xeuwLgDBYwY9e/evkz3Hn+w0uvYeWb7fknx6fPYwCUyuf+hPsDAK9XPOAwPVYp1xpYsGeugRutuQOOy1bfBUOY+apyawGG+3b50Y4aRtObtUIK9qAn1x9uShHpIdZDoocOoAr+nxwxrANo2iuY49/u/sHjrgT6qZAiEw2V3TOyVVeMy5/xb4XjhpMC/b7uPXt6pOehXY+c/MXgiK3ugGHV6mXMIAzDlp2K2In/gp+f76WvLeWwTiTN6RJRV5xdKtnSFT7efFYKHe1vc+On+iMBBoUS/HtZLRPaj/pWvDVqFUw4R0zvMzu9wtySOH9y/HbU6ss/Te90wjQuAO7WC1027+ekvFVqda6wcrHiJ5NVYGVJpP2D+cAlpz/5zlehPdjaae/uHyxtbnU3xIbYTpLO9ehqFF1L2qY3p+OY/tc0/WnOOb9R8WzAAux1B4N+vAcM+vFwnqSj03FXX/W+GRtu+h/H4g+lss+LCTv7ULLiHcz+cfNfq0Wv0nmCIAiCIAiCIAiCIAiCIIhatMDwbn44VeX4yW2z/SsAAP//mv9ajg==") r3 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) fadvise64(r3, 0x82e0, 0xff39, 0x3) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x0, 0x0}) write$UHID_INPUT(0xffffffffffffffff, &(0x7f0000001980)={0xf, {"a2e3ad214fc752f91b2909094bf70e0dd038e7ff7fc6e5539b3267078b089b34083b681a0890e0878f0e1ac6e7049b076d959b669a240d5b67f3988f7ef319520100ffe8d178708c523c921b1b5b313b0d076d0936cd3b78130daa61d8e809ea889b5802b77f07227227b7ba67e0e78669a6f5c2a874e62a9ccdc0d31a0c9f318c0da1993bd160e233df4a62179c6f30e065cd5b91cd0ae19397d696d0d758f2dc7d1c00305d3f46635eb016d5b1dda98e2d749be7bd1df1fb3b231fdcdb5075a9aaa1b469c3090000000002335875271b286329d169934288fd789aa37d6e98b224fd44b65b31334ffc55cc82cd3ac32ecdb08ced6f9081b4dd0d8b38f3cd4498bee800490841bdb114f6b76383709d8f5c55432a909fda039aec54a1236e80f6a8abadea7662496bddbb42be6bfb2f17959d1fe90a56c71b1931870262f5e801119242ca026bfc821e7e7daf2451138e645bb80c617601000000be70de98ec76a9e40dad47f36fd9f7d0d42a4b5f1185ccdcf16ff46295d8a0fa17713c5802630933a9a34af674f3f39fe23491237c08822dec110911e893d0a8c4f677747abc360934b82910ff85bfd995083bba2987a67399eac427d145d595a40b9f6ff14ac488ec130fb3850a27af9544ae15a7e454dea05918b41243513f000000000000000a3621c56cea8d20fa911a0c41db6ebe8cac64f17679141d54b34bbc9980000000b3309603f1d4ab966203861b5b15a841f2b575a8bd0d78248ebe4d9a80002695104f674c2431dca141fae269cab70e9a66f3c3a9a63e9639e1f59c0ede26c6b5d74b078a5e15c31634e5ae098ce9ee70771aaa18119a867e1088334975e9f73483b6c82fa678ca14ffd9f9db2a7869d85864056526f889af43a6056080572286522449df466c632b3570243f989cce3803f465e41e610c2021d653a5520000008213b704a5000000000000008ef9f190bae97909507041d860420c5664b27921b14dc1db8892fd32d0ad7bc94681359bad8deff4b05f60cea0da7710a80000000000008000bea37ce0d0d4aa202f928f28381aab144a5d429a04a6a2b83c7068ae949ed06e288e810bac9c76600025e19c907f8ea2e2010000008271a1f5f8528f227e79c1389dbdfffe492f21579d2c15b8c70cdb1c332d86d87341432750861ec2bc3451edca194b221cfec4603d276bbaa1dfa6d4e38a48a76eafc9a9a0270e4c10d64cd5a62427264f2377fe763c43470833ac96c45f357cbbaba8f1b1fdcc7cbb61a7cdb9744ed7f9129aede2be21ccfdc4e9134f8684b3a4f354da9a795e96334e207dff70f1988037b2ed3aaf575c0b88d8f146684078416d59fdee5325928974d12dad99dac44c3f0008047096a44002bebc2420aed92fa9b6578b4779415d97b9a6d6d5495c118045651cf41c2fc48b778efa5ea5677747430af4162b987b80c3e001cd34e5c92f76cc4c24eeb8bc4e9ac2bed9e53803edf1a4ae3a9737d214060005ea6f1783e287b3bee96e3a726eafe2fdfaa78d1f48c13b64df07847754b8400daaa69bf5c8f4ceb360c7e658828563e2d25c4aa348561f927e88f63aa70e73a5e69b3df3495903f06572e1e007fa55a2999f596d067312f5779e8dbfdcf3427138f3d444d2639a10477f9bec4b0bbb6e3c04be68981f392203dd0ee3ef478e16dacfc5e3e03cf7ab8e3902f1b0ff034e00000000ca509383815b1b6fc6522d4e4fdc11a48cf42d48604675fde2b94cf00500a2690891abf8ab9c015073014d9e08d4338b8780bdecd436cf0541359bafffa45237f104b96210403b2de9efed496f42355bc7872c827467cfa5c478b095b68441a34cb51682a8ae4d24ad92f243941ed274549b79a7962fb385a882e8020f06c4c2ba1dd5cac7c18876da865d258734dd73583df292892448039ef799cf0630becdbe6c4579b5561dc825ab829827945e020c1f67ee615feb6243378e0610060f02cca4e91b2f001edb3d78fb4b55668dda93ae62fccfcbb2b75a2183c46eb65ca8124e1b4da7fbb77ab2fc043aead87c32ab875ee7c2e7b7019c982cd3b43e4fb1a5fb135c0c7dcee8fe6516a328032f88c042891824659e9e01feffffffffffff83a2b210520106b8a358b50ab7a1fa89af9c251fe5294b3d1802d5676d95f160ec97b1ad94872cb2044642c37b4a6cc6c04effc1672db7e4b68d787d9a7a508ae54b3cd7369d75f2e8c77d95a3d361c040babb171607caac2a3559ad4f75465f49c0d0ae3716db6e00cb11db4a5fade2a57c10238e204a67737c3b42aa01b20f7694a00f16e2d0174035a2c22656dc00880acebdbe8ddbd75c2f998d8ac2dfad2ba3a50200000045a45957f24d758ed024b3849c11d412a2a03b4047497022d9c30e23ef4df5c89644f48bb536f7945b59d7bcddff754413d135273ea8e75f22f216c6b9990ae71806f2c00b4025c48b75c0f73cdb9a7b8fa367b50028067e7f16f4dd569d462f4f19eacdb3ed70eeebb4483f8fd777d443e8b40426db6fe2907ac0ca3d2414442e8f3a154704b0e51bc664a137b26be719f4f7c9a5678a674dfc95df80b9ce375dd649c8c704e509bd88c8e63d8c7dd67071115c8982ba46af4d6adcc9f68a75b9397b035153faf463661c953fcad6f37525c1a0e94610dd94323f6c15d085197149bfd6655548cfd9c52c9711937f79abb1a124f1210465483cd3b2d78378cfb85ed82e7da0f6eb6d279f2ae455925d0f6f1ba571eba281f2a654fb39ddff3b484439ff158e7cd419e037f3e3ad038f2211f1033195563c7f93cd54b9094f226e783271e1e5a2a2c10712eab625d64931cd4ffe6738d97b9b5ef828ee9fb059fc01af0e79c1e14b1d25988c69a399567c1d93768f7971d31488b8658a20878b7c1dd7ba02fc42939dde3d4a3339a65d507dc59c51097b40517705da56e9ebf0afa53282bf86dbb58c548069ff6eb95aade7cc66d7bbef724779ca1f731b3346ff177050373d79ff7b3e7f9bc0c1b4b266a8878b90baaa039d3e3b63979ac3df6e6f4859afd50238c7547a39b60810938044ae185d2ba3e00a4e73676864ae090d81eaeecf1d0ab378dd4dd891e937c2ea5410e0513005000000000000003911fab964c271550027697b52160687461602f88df165d884b36ec2b6c25a2f33c715687e924afb96d6861aca47da73d6f3dd014e5c5ad8fe995754bd9cf32fce1e31919c4b2082fb0a30b9deae84bed4b28045634073c9c58c89d9e99c81769177c6ea94f88a4facfd4c735a20307c737afae5136651b1b9bd522dcb399473296b831dbd933d93994ba3064279b10ea0c5833f41f157ea2302993dbe433b1aa3a37684f4113c48859465c3b415c3432f81db8719539d5bf372aaaea1cc43a6c5cbe59758bfee2916580dac4b008e595f437491d87abed02cefcd9db53d94d02dae17b118e5d6787463183b4b87c105000000302a808d7f5251440613d17ca51055f2f416a44fe180d2d50c312cca7cb14a20dc331f57a9817139a206fc76957227ffff2de20a4b8e3737fbb40100000006376f799eba367e21f94ca598705f5dcb767d6f0900d6b0f6095e53c4c4234d0c1fbe434f6ab83c0013ee93b83946ee7759e89d7bdd1a32d7b311711b757fe43c06d21a35810d8fe98b27faea8aa12bc8716eefc5c97c45ac33eeec964c5214bc3a9359bdea1cccab94f15e36319cb34ebcacedb82c2ed3de5a8a8f0011e8f74e82d7ceec7dc808bf653639d7961939adfdeeeaff19d11efcafb6d546fef271e89d6cc2389e81ff58cefcce3fbf4625a7e7de40e42e07b34449e15e065cc7348663a52190202c7af288a4510de03dab19d26285eda89156d50dd385a602000000000000007007ad1519ad5470de3dd6d6080cafccf8a97406bb6b68a1f0c4549820a73c880f475f732ae00303000000000000007fb33b72685ec37a2d3f766413a60459516246e5a1d998a2017aef0948a68cf255315ab80dd349e891aef595dc4d470e8ac32a308e15fc37d06aeac289c0523f483e1ff7408c6087f1ab652f2ef91d4f2b01987b0f46da034e5c3f745a7ee8101a3934c54e24b48ec0275e2d0687dc746b0827cbf6529006c6b95f2722e58c05f752ce2126596e1cd7655b904801784c416b22f73d324678e2724f43f1fe687c7e8a60c28b82b6522fb5f6ffcdd56fed88935fcb75912d5ecd36dea3bca0b7427d8392c6289455e8f8d2ab2242729251ae233a9e02210e62df0546a74b333a1c48f95fd54acb5741259e8c5488efeee327415cc19451432c6f14c27693102a5bd84857cd6586fc5ca9a93eb0145fac0662ff86107f998a8ef7df8aa14046c55b03d3d47f88a8d60f7774a2ee08008897fb411a94b3c2fc5d5f0db42c0456ec015f08e5247d33ae2d35603ff8454c16f8342856935125102bb6ce431b63ee356b0c785f2f47b90e29389f22fc5b59a70efaea2bd40195af4486220d702e30bfc43c10ec23ea6283994a7dde4dcb61fea6b651fb1d62458d0741a12830052fcc460db043afe525629b40d7cee458e4cb5e930ed624806c43a006e39336d07c2b80c1c128ad2706f48261f7897484c297a1a6613bc18f5a38d442768af38041efe03d152ef95ff569e76db2391f4509d7f339d92fdb4a89364949da398000000000000000d80a4fe654578376e599aff3565b1d531f30912b9945030b81ea9935fd46edb44a78f615255490a4b621501f2a9e4d24624c4dac9274118c67584f5d374755534d7f68f679c4ff516a9c861a0e7e65868fcb2bf1cb9aea4e05df72279fdb0d2b9e935c5af3cf474bed79dfc248c1f5aea4b8b32c5d295e57fa9c0fe662a46b7f71cd47744db86c50b704c98ad90295c7b2c7439a2d78ccfa79b5fc2bff6bbf840262bf89394b3e0691953264d2700c838fa2c7b3425260f59554e502dcea39cb313b0000000000004ca7c12f45858d6284ca6270d6b2f0e58fded8a7b4a302a97bc641df07720ba2b26bbfcc807ca0abb1b44322269c21c5ec68cb068ea88067d905ea917bb03eefdaebdeabf2d0dce80997c915c8949de992587c2cb5fe360500000000000000b77940b5f07722e47a08d3679507000000000000934b99b3109af65d77e86abd6859cddf4bbae1f0930462df15fddbc48562ea3511a8065ef028cf12f14dcf6ebecd8d884836174faf1aa609e5f1ee1062dfa13bdc1fa7cfaadba85c72e9758f03a755d0be53f8d2a1df0d07b3d5bd3b01faffd0addbed2881a9700af561ac8c7e36bb2fc4c40e9c766c06817bb903729a7db6ff957697c9ede7885d94ffb0759be0daf60af93109eb1dee72e4363f51af62af6fb2a6df3bec89822a7a0b678058fa3fef86faec216eb6992162f8dcbf719c1484d2f9c55f4901203a9a8a2c3e90f39c3dbc10360a1a49700d1dfbf66d69f6fbaf506c8bcce8bb0d872a02238926407a4eddd5d000000000000000000000000000040000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000600", 0x1000}}, 0x1006) 14.193447942s ago: executing program 6 (id=1831): r0 = socket$inet6(0xa, 0x3, 0x6) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000000100)={@dev={0xfe, 0x80, '\x00', 0x23}, 0x800, 0x0, 0x2, 0x1, 0x0, 0x7}, 0x20) syz_mount_image$exfat(&(0x7f00000000c0), &(0x7f0000000000)='./file0\x00', 0x800, &(0x7f0000000140)={[{@allow_utime}, {@zero_size_dir}, {@errors_continue}, {@errors_continue}, {@iocharset={'iocharset', 0x3d, 'cp861'}}, {}, {@gid}, {@keep_last_dots}, {@iocharset={'iocharset', 0x3d, 'iso8859-6'}}, {@errors_continue}]}, 0x1, 0x152d, &(0x7f0000001f80)="$eJzs3AuYTtUaOPD3XWvtMSS+JrkMa6138yWXZZIklyS5JEklSXJLSJrkSEJiCEkakpBchiSGkFwmJo37/X5JSJImSXLLLVn/Z8Lf6dT5dy79j/OceX/Psx/rtfZa+93f+13W3jPzfddlSK3Gtas3JCL4t+CFf5IAIBYABgBAXgAIAKB8XPm4rP6cEpP+vYOwP9dDqVc6A3Ylcf2zN65/9sb1z964/tkb1z974/pnb1z/7I3rz1h2tnFqoWt4y74b3//Pzvjz/39IZpkxX60uc11XgJh/dAjXP3vj+v/PCv6Rnbj+2RvXP7uKvdIJsP8C/PrPDnL83R6uf/bG9WcsO7vS95+v9AaR/7LH4HDOC4X5T50/Y4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDH2H3DaX6YA4FL7SufFGGOMMcYYY4yxP4/PcaUzYIwxxhhjjDHG2P9/CAIkKAggBnJALOSEXCAA4GrIA3khAtdAHFwL+eA6yA8FoCAUgngoDEVAgwELBCEUhWIQheuhONwAJaAklILS4KAMJMCNUBZugnJwM5SHW6AC3AoVoRJUhipwG1SF26Ea3AHV4U6oATWhFtSGu6AO3A114R6oB/dCfbgP7ocHoAE8CA3hIWgED0NjeASawKPQFJpBc2gBLf+l8S9AD3gRekIvSILe0Adegr7QD/rDyzAAXoGB8CoMgtcgGQbDEHgdhsIbMAzehOEwAkbCWzAK3obRMAbGwjhIgfEwAd6BifAuTIL3YDJMgVSYCtPgfZgOM2AmfACz4EOYDXNgLsyDNPgI5sMCSIePYSF8AhmwCBbDElgKy2A5rICVsApWwxpYC+tgPWyAjbAJNsMW2ArbYDt8CjvgM9gJu2A3fA574It/cvypvxnfFQEBBQpUqDAGYzAWYzEX5sLcmBvzYB6MYATjMA7zYT7Mj/mxIBbEeIzHIlgEDRokJCyKRTGKUSyOxbEElsBSWAodOkzABCyLN2E5LIflsTxWwApYESthJayCVbAqVsVqWA2rY3WsgTWwFtbCu/Au7I11sS7Ww3pYH+tfuj2FDbEhNsJG2BgbYxNsgk2xKTbH5tgSW2IrbIWtsTW2xbbYDtthe2yPiZiIHbADdsSO2Ak7YWfsjF2wC3bFbtgt84UcgC/ii9gLa4je2Af7YF9MztEfX8aX8RUciK/iq/gaJuNgHIKv4+v4Bg7DkzgcR+BIHIlVxds4GscgiXGYgik4ASfgRJyIWYm+h1MwFafiNJyG03EGzsAPcBZ+iB/iHJyD8zAN03A+LsB0TMeFeAozcBEuxiW4FJfhUlyBK3EFrsY1uBrX4TrcgBtwE27CLbgFt+E2/BQVAH6Gu3AXJuMe3IN7cS/uw324H/djJmbiATyAB/EgHsJDeBgP4xE8isfwKJ7AE3gST+FpPI1n8Syew+fiv2n0aclVySCyKKFEjIgRsSJW5BK5RG6RW+QReURERESciBP5RD6RX+QXBUVBES/iRRFRRBhhBIkwBgBEVERFcVFclBAlRClRSjjhRIJIEGVFWVFOlBPlxS2igrhVVBSVRBtXRVQRVUVbV03cIaqL6qKGqClqidqitqgj6oi6oq6oJ+qJ+qK+uF88IBqI3tgfHxJZlWksBmMTMQSbimZCXnwHayWGYWvRRrQVT4gROBzbi1YuUTwtOojR2FH8RYzBZ0VnMQ67iOdFV9FNdBcviB6itespeolJ2Fv0EVOwr+gn+ouXxXSsKT7AWTlriddEshgshojXxTx8QwwTb4rhYoQYKd4So8TbYrQYI8aKcSJFjBcTxDtionhXTBLvicliikgVU8U08b6YLmaImeIDMUt8KGaLOWKumCfSxEdivlgg0sXHYqH4RGSIRWKxWCKWimViuVghVopVYrVYI9aKdWK92CA2ik1is4iFrWKb2C4+FTvEZ2Kn2CV2i8/FHvGF2Cu+FPvEV2K/+Fpkim/EAfGtOCi+E4fE9+Kw+EEcEUfFMXFcnBA/ipPilDgtzoiz4idxTvwszgsvQKIUUkolAxkjc8hYmVPmklfJ3DK4+OheI+PktTKfvE7mlwVkQVlIxsvCsojU0kgrSYayqCwmo/J6WVzeIEvIkrKULC2dLCMT5I2yrLxJlpM3y/LyFllB3iorykqysqwib5NV5e0SIheOUUPWlLVkbXmXTIK7ZV15j6wn75X15X3yfvmAbCAflA3lQ7KRfFg2lo/IJvJR2VQ2k81lC9lSPiZbycdla9lGtpVPyHbySdlePiUT5dOyg/QXnyLPys7yOdlFPi+7ym6yu/xZnpde9pS9JPQG2Ue+JPvKfrJ/LADIV+RA+aocJF+TyXKwHCJfl0PlG3KYfFMOlyPkSPmWHCXflqPlGDlWjpMpcrycIN+RE+W7cpJ8T06WU2SqnCr7ywG/zDRTyj8c/87vjB/0y9E3yI1yk9wst8itcpvcLj+VO+QOuVPulLvlbrlH7pF75V65T+6T++V+mSkz5QF5QB6UB+UheUgeloflEXlUnpHH5Qn5ozwpT8lT8ow8K8/KcxcfA1CohJJKqUDFqBwqVuVUudRVKre6WuVReVVEXaPi1LUqn7pO5VcFVEFVSMWrwqqI0sooq0iFqqgqpqLqerz4hFGlVGnlVBmVoG78Z8ar4uoGVUKV/NX4S/kl/Z38WqqWqpVqpVqr1qqtaqvaqXaqvWqvElWi6qA6qI6qo+qkOqnOqrPqorqorqqr6q66qx6qh+qpeqoklaT6qJdUX9VP9VcvqwHqFTVQDVSD1CCVrJLVEDVEDVVD1TA1TA1Xw9VINVKNUqPUaDVajVVjVYpKURPUBDVRTVST1CQ1WU1WqSpVTVPT1HQ1Xc1UM9UsNUvNVrPVXDVXpak0NV/NV+kqXS1UC1WGWqQWqSVqiVqmlqkVaoVapVapNWqNWqfWqQy1UW1Um9VmtVVtVdvVdrVD7VA7xU61W+1We9QetVftVfvUPrVf7VeZKlMdUAfUQXVQHVKH1GF1WB1RR9QxdUydUCfUSXVSnVan1Vl1Vp1T59R5dT5r2ReIQAQqUEFMEBPEBrFBriBXkDvIHeQJ8gSRIBLEBXFBvuC6IH9QICgYFArig8JBkUAHJrCBuFj0aHB9UDy4ISgRlAxKBaUDF5QJEoIbg7LBTUG54OagfHBLUCG4NagYVAoqB1WC24Kqwe1BteCOoHpwZ1AjqBnUCmoHdwV1gruDusE9Qb3g3qB+cF9wf/BA0CB4MGgYPBQ0Ch4OGgePBE2CR4OmQbOgedAiaPmnzu/9yQKPu566l07SvXUf/ZLuq/vp/vplPUC/ogfqV/Ug/ZpO1oP1EP26Hqrf0MP0m3q4HqFH6rf0KP22Hq3H6LF6nE7R4/UE/Y6eqN/Vk/R7erKeolP1VD1Nv6+n6xl6pv5Az9If6tl6jp6r5+k0/ZGerxfodP2xXqg/0Rl6kV6sl+ileplerlfolXqVXq3X6LV6nV6vN+iNepPerLforXqb3q4/1Tv0Z3qn3qV368/1Hv2F3qu/1Pv0V3q//lpn6m/0Af2tPqi/04f09/qw/kEf0Uf1MX1cn9A/6pP6lD6tz+iz+id9Tv+sz2uftbjP+ng3yigTY2JMrIk1uUwuk9vkNnlMHhMxERNn4kw+k8/kN/lNQVPQxJt4U8QUMVnIkClqipqoiZriprgpYUqYUqaUccaZBJNgypqyppwpZ8qb8qaCqWAqmoqmsqlsbjO3mdvN7eYOc4e509xpapqaprapbeqYOqauqWvqmXqmvqlv7jf3mwamgWloGppGppFpbBqbJqaJaWqamuamuWlpWppWppVpbVqbtqataWfamfamvUk0iaaD6WA6mo6mk+lkOpvOpovpYrqarqa76W56mB6mp+lpkkyS6WP6mL6mr+lv+psBZoAZaAaaQWaQSTbJZogZYoaaoWaYGWaGmxFmZNZC1bxtRpsxZqwZZ1JMiplgJpiJZqKZZCaZyWaySTWpZpqZZqab6WammWlmmVlmtplt5pq5Js2kmflmvkk36WahWWgyTIZZbBabpWapWW6Wm5VmpVltVpu1sNasN+vNRrPRbDabzVaz1Ww3280Os8PsNDvNbrPb7DF7zF6z1+wz+8x+s99kmkxzwBwwB81Bc8gcMofNYXPEHDHHzDFzwpwwJ81Jc9qcNmdNgYufl97E2pw2l73K5rZX2zw2r/3buKAtZONtYVvEapvfFvhVbKy1JWxJW8qWts6WsQn2xt/EFW0lW9lWsbfZqvZ2W+03cR17t61r77H17L22tr3rV3F9e5/NWp00QASwzWwj28I2to/YJvZR29Q2s81tC9vOPmnb26dson3adrDP/CaebxfYlXaVXW3X2J12lz1tz9iD9jt71v5ke9pedoB9xQ60r9pB9jWbbAf/Jh5p37Kj7Nt2tB1jx9pxv4kn2yk21U610+z7drqd8Zs4zX5kZ9l0O9vOsXPtvF/irJzS7cd2of3EZtgAFtsldqldZpfbFZdy9XntOrvebrA77Gd2s91it9ptdvulhbDdZXfbz+0e+4U9YL+1++xXdr89ZDPtN7/EWed3yH5vD9sf7BF71B6zx+0J+6O6NDrr3I/bn+156y0QEpAkRQHFUA6KpZyUi66i3HQ15aG8FKFrKI6upXx0HeWnAlSQClE8FaYipMmQJaKQilIxitL1dCm9UlSaHJWhBLqRytJNVI5upvJ0C1WgW6kiVaLKVIVuo6p0O1WjO6g63Uk1qCbVotp0F9Whu6ku3UP16F6qT/fR/fQANaAHqSE9RI3oYWpMj1ATepSaUjNqTi2oJT1Grehxak1tqC09Qe3oSWpPT1EiPU0d6BnqSH+hTvQsdabnqAs9T12pG3WnF6gHvUg9qRclUW/qQy9RX+pH/ellGkCv0EB6lQbRa5RMg2kIvU5D6Q0aRm/ScBpBI+ktGkVv02gaQ2NpHKXQeJpA79BEepcm0Xs0maZQKk2lafQ+TacZNJM+oFn0Ic2mOTSX5lEafUTzaQGl08e0kD6hDFpEi2kJLaVltJxW0EpaRatpDa2ldbSeNtBG2kSbaQttpW20nT6lHfQZ7aRdtJs+pz30BSF9SfvoK9pPX1MmfUMH6Fs6SN/RIfre96If6AgdpWN0nE7Qj3SSTtFpOkNn6Sc6Rz/TefIEIYYilKEKgzAmzBHGhjnDXOFVYe7w6jBPmDeMhNeEceG1Yb7wujB/WCAsGBYK48PCYZFQhya0IYVhWDQsFkbD68Pi4Q1hibBkWCosHbqwTJgQ3hiWDW8Ky4U3h+XDW8IK4a1hxbBS+Mi9VcLbwqrh7WG18I6wenhnWCOsGdYKa4d3hXXCu8O64T1hvfDesFx4X3h/+EDYIHwwbBg+FDYKHw4bh4+ETcJHw6Zhs7B52CJsGT4WtgofD1uHbcK24RNhu/DJsH34VJgYPh12CJ/5pf++BX+/PynsHfYJXwpfCr2/R86NzoumRT+Kzo8uiKZHP44ujH4SzYguii6OLokujS6LLo+uiK6Mroqujq6Jro2ui66Pboh6XzsHOHTCSadc4GJcDhfrcrpc7iqX213t8ri8LuKucXHuWpfPXefyuwKuoCvk4l1hV8RpZ5x15EJX1BVzUXe9K+5ucCVcSVfKlXbOlXEJroVr6Vq6Vu5x19q1cW3dE+4J96R70j3lnnJPuw7uGdfR/cV1cs+6zu4595x73nV13Vx394Lr4cbnufCaTHJ9XB/X1/V1/V1/N8ANcAPdQDfIDXLJLtkNcUPcUDfUDXPD3HA33I10I90oN8qNdqPdWDfWpbgUN8FNcBPdRDfJTXKT3WSX6lLdNDfNTXfTXdUZF44y2812c91cl+bS3HyXtWZMdwvdQpfhMtxit9gtdUvdcrfcrXQr3Wq32q11a916t95tdBvdZrfZbXVb3Xa33e1wO9xOn/fCpG6P2+v2un1un9vvvnaZ7ht3wH3rDrrv3CH3vTvsfnBH3FF3zB13J9yP7qQ75U67M+6s+8mdcz+78867lMj4yITIO5GJkXcjkyLvRSZHpkRSI1Mj0yLvR6ZHZkRmRj6IzIp8GJkdmROZG5kXSYt8FJkfWRBJj3wcWRj5JJIRWRRZHFkSWRpZFvG+8ObQF/XFfNRf74v7G3wJX9KX8qW982V8gr/Rl/U3+XL+Zl/e3+Ir+Ft9RV/JV/aP+qa+mW/uW/iW/jHfyj/uW/s2vq1/wrfzT/r2/imf6J/2HfwzvqP/i+/kn/Wd/XO+i3/ed/XdfHf/gu/hX/Q9fS+f5Hv7Pv4l39f38/39y36Af8UP9K/6Qf41n+wH+yH+dT/Uv+GH+Tf9cD/Cj4x5y4+6dIkM43yKH+8n+Hf8RP+un+Tf85P9FJ/qp/pp/n0/3c/wM/0Hfpb/0M/2c/xcP8+n+Y/8fL/Ap/uP/UL/ic/wiy7dVPbL/Qq/0q/yq/0av9av8+v9Br/Rb/Kb/Ra/1W/z2/2nfof/zO/0u/xu/7nf47/we/2Xfp//yu/3X/tM/40/4L/1B/13/pD/3h/2P/gj/qg/5o/7E/5Hf9Kf8qf9GX/W/+TP+Z/9ef6bNcYYY4yxf8j4y03x654Lt/N7/84Y8Vc79wGAq7cUyvzr/qwV5dr8F9r9RHy7CAA83avLQ5e2GjWSkpIu7pshISg2B+DST4KyxMDleBG0hSchEdpA2d/Nv5/odpb+YP7oLQC5/mpMLFyOL8//JQAm/c78jz0xcn6F8HTc/2P+OQAlil0ekxMux4ug7S/3V9pAub+Tf4FWf5B/zq9SAFr/1ZjccDm+nH8CPA7PQOKv9mSMMcYYY4wxxi7oJyp3unT9eek3Pn/v+jxeXR6TAy7Hf3R9zhhjjDHGGGOMsSvv2W7dn3osMbFNp3++Ue2P91H/2sy/NJrAv5oYN/6lhvcA/7dwAPBvTgiQ1ZD/ybPY9B85VvLFl87fdi094wP47yjln9G4wm9MjDHGGGOMsT/d5UX/r/9fXamEGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4yxbOjf/Y43+Ae+pe9KnyNjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDF2pf2fAAAA//+Bqfni") r1 = socket$nl_route(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x40}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() socket$nl_xfrm(0x10, 0x3, 0x6) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$packet(0x11, 0x4000000000002, 0x300) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x800}, 0x0) r5 = syz_open_procfs(0xffffffffffffffff, &(0x7f00000001c0)='net/vlan/config\x00') preadv(r5, &(0x7f0000001780)=[{&(0x7f0000000380)=""/67, 0x43}], 0x1, 0x4, 0xd) bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x8, 0x4, &(0x7f0000000000)=@framed={{0x18, 0x2}, [@call={0x85, 0x0, 0x0, 0x61}]}, &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000000100)={@dev={0xfe, 0x80, '\x00', 0x2b}, 0x800, 0x0, 0x2}, 0x20) 12.282214495s ago: executing program 7 (id=1832): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=@base={0x1, 0x4, 0x8, 0x8, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) madvise(&(0x7f0000000000/0x600000)=nil, 0xffffffffffffffff, 0x14) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x0, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000200), 0x105000, 0x0) r5 = openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0) ioctl$KVM_CHECK_EXTENSION(r5, 0xae03, 0x61) unshare(0x64000600) syz_mount_image$vfat(&(0x7f0000000240), &(0x7f0000000040)='./file0\x00', 0x1018002, &(0x7f00000002c0)={[{@shortname_mixed}, {@uni_xlateno}, {@fat=@errors_remount}, {@shortname_win95}, {@iocharset={'iocharset', 0x3d, 'cp850'}}, {@fat=@fmask={'fmask', 0x3d, 0x3}}, {@numtail}, {@shortname_lower}, {@rodir}, {@shortname_lower}, {@utf8no}, {@utf8no}, {@fat=@check_strict}, {@fat=@codepage={'codepage', 0x3d, '1250'}}, {@iocharset={'iocharset', 0x3d, 'cp860'}}, {@numtail}, {}, {@fat=@showexec}]}, 0x6, 0x2b8, &(0x7f0000000640)="$eJzs3U9rK1UYB+B30mQSdZEsXInggC5cXW7v1k2K3AtiV16yUBdabAvSBKGFgn8wduXWjQsXfgJB8IO48RsIbgV3ViiMzGSmSdqYJtJUvH2eTd+eOb+Zd6aHdrro6Ycvj472szg8++LX6HSSaPSjH+dJ9KIRta9iTv+bAAD+z87zPP7IJ9bJJRHR2VxbAMAGrfbzvzktf7qTtgCADXr67ntv7+zuPn4nyzrxZPT16aD4zb74ODm+cxgfxzAO4mF04yKifFFoRfm2UJRP8jwfN7NCL14bjU8HRXL0wc/V+Xd+jyjz29GNXjl0+bZR5t/afbydTczkx0Ufz1fX7xf5R9GNFy/Dc/lHC/IxSOP1V2f6fxDd+OWj+CSGsV82Mc1/uZ1lb+bf/vn5+0V7RT4Znw7a5bypfOuOvzQAAAAAAAAAAAAAAAAAAAAAADzDHlR757Sj3L+nGKr239m6KD5pRVbrze/PM8kn9Ylm9wfK83ycx/f1/joPsyzLq4nTfDNeas5uLAgAAAAAAAAAAAAAAAAAAAD318mnnx3tDYcHx7dS1LsBNCPir6cR//Y8/ZmRV2L55HZ1zb3hsFGV83OasyOxVc9JIpa2UdzELT2Wm4rnrvVcFT/8uO4JOzfPaS2+1m0W9eo62ksWP8N21COdapF8l0ZM56Sx4rXSfzqUxzrLL114qLv2vacvlMV4yZxIljX2xm+TJ1eNJFfvIi2f6sJ4qypm4lfWxkrrOTqT+PXvFYndOgAAAAAAAAAAAAAAAAAAYKOmf/274ODZ0mgjb2+sLQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAC4U9P//79GMa7CK0xO4/jkP75FAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA7oG/AwAA//83x1yS") bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYRESHEX=r4], 0x48) bpf$PROG_LOAD(0x5, 0x0, 0x0) 10.1888512s ago: executing program 6 (id=1833): r0 = syz_open_dev$sndctrl(&(0x7f0000000000), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(r0, 0x40045532, &(0x7f0000000040)) r1 = openat$audio(0xffffffffffffff9c, &(0x7f0000000140), 0x40000000040301, 0x0) r2 = syz_open_dev$sndpcmp(&(0x7f00000001c0), 0x0, 0xa2c65) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000000500)={0x0, 0xfffffffffffffd83, 0xfa00, {0x0, 0x0}}, 0xfdbc) syz_open_dev$usbfs(0x0, 0x9, 0x101301) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0) io_uring_setup(0x1ce2, 0x0) socket$kcm(0x10, 0x3, 0x10) r3 = syz_usb_connect(0x6, 0x24, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r4, 0x0, 0x0) write$binfmt_elf32(0xffffffffffffffff, 0x0, 0x69) wait4(0x0, 0x0, 0x1, 0x0) syz_usb_control_io$cdc_ncm(r3, 0x0, 0x0) openat(0xffffffffffffff9c, 0x0, 0x260602, 0x1a) ioctl$TCSETA(0xffffffffffffffff, 0x5406, &(0x7f0000000040)={0xffe0, 0x0, 0x0, 0x9, 0x0, "af437433af485638"}) ioctl$SNDRV_PCM_IOCTL_SW_PARAMS(r2, 0xc0884113, &(0x7f0000000080)={0x1, 0xfffffffe, 0x0, 0x8, 0x8000, 0x0, 0x1, 0x2, 0x0, 0x5, 0xfffffffe, 0x2}) 8.141834065s ago: executing program 0 (id=1835): setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x1e, 0x0, 0x0) bind$l2tp6(0xffffffffffffffff, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r3}, 0x10) r4 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000780)={0x6, 0x4, &(0x7f0000000580)=@framed={{0x18, 0x2}, [@call={0x85, 0x0, 0x0, 0x17}]}, &(0x7f00000005c0)='GPL\x00', 0x4, 0xf5, &(0x7f0000000600)=""/245, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000100)={r4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) bpf$OBJ_GET_PROG(0x7, &(0x7f00000002c0)=@generic={0x0}, 0x18) bpf$PROG_LOAD(0x5, 0x0, 0x0) openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000500), 0x280080, 0x0) ioctl$sock_inet6_SIOCDELRT(0xffffffffffffffff, 0x890c, &(0x7f0000000840)={@ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x26}}, @private1, @local, 0x0, 0x1400, 0x6, 0x500, 0x2815, 0x42}) r5 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) sendmsg$802154_dgram(r5, &(0x7f0000000200)={&(0x7f0000000100)={0x24, @short={0x2, 0xffff, 0xffff}}, 0x14, &(0x7f0000000180)={0x0}}, 0x0) 8.069635453s ago: executing program 6 (id=1836): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r0) socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty}, 0x1c) listen(r0, 0x9) r1 = socket$inet_mptcp(0x2, 0x1, 0x106) sendmmsg(r1, &(0x7f0000002840)=[{{0x0, 0x0, 0x0}}], 0x1, 0x20044000) r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r2, 0x0, 0x0) connect$inet(r1, &(0x7f0000000000)={0x2, 0x4e22, @empty}, 0x10) r3 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$mptcp(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r3, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={0x0}}, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$mptcp(&(0x7f00000002c0), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r4, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000200)={0x28, r5, 0x1, 0x0, 0x0, {0x7}, [@MPTCP_PM_ATTR_ADDR={0x14, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x1}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x1a}]}]}, 0x28}}, 0x0) 7.087293307s ago: executing program 0 (id=1837): mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x1000, 0x7, &(0x7f0000647000/0x1000)=nil) pipe2(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r2 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) shutdown(r2, 0x0) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r3}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r4 = getpid() sched_setscheduler(r4, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r6, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r7 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000300)='net/igmp6\x00') preadv(r7, &(0x7f0000000100)=[{&(0x7f0000000140)=""/196, 0xc4}], 0x1, 0x200000, 0x0) connect$bt_l2cap(r0, &(0x7f0000000080)={0x1f, 0x4, @any, 0x8, 0x1}, 0xe) connect(r2, &(0x7f0000000000)=@rc={0x1f, @any, 0x8}, 0x80) close_range(r1, 0xffffffffffffffff, 0x0) 6.76389514s ago: executing program 6 (id=1838): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000080)={0x26, 'hash\x00', 0x0, 0x0, 'cryptd(crct10dif-generic)\x00'}, 0x58) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x100008b}, 0x0) sched_setaffinity(0x0, 0x11, &(0x7f0000000180)=0x1400200bce) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x1) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) ioctl$TIOCSTI(0xffffffffffffffff, 0x5412, &(0x7f0000000140)=0x4) read$msr(r1, &(0x7f0000002700)=""/102392, 0x18ff8) syz_open_dev$dri(0x0, 0x0, 0x32d400) pipe2$9p(0x0, 0x80880) write$P9_RVERSION(0xffffffffffffffff, 0x0, 0x15) bpf$MAP_CREATE(0x0, &(0x7f0000000300)=ANY=[], 0x48) socket$tipc(0x1e, 0x5, 0x0) r2 = socket$inet6(0xa, 0x806, 0x0) bind$inet6(r2, &(0x7f0000000100)={0xa, 0x4e23}, 0x1c) listen(r2, 0x3) r3 = socket$inet_dccp(0x2, 0x6, 0x0) connect$inet(r3, &(0x7f0000000040)={0x2, 0x4e23}, 0x10) r4 = accept4(r2, 0x0, 0x0, 0x0) sendmmsg(r4, &(0x7f0000001500), 0x588, 0x0) 6.004775428s ago: executing program 0 (id=1839): socket$can_bcm(0x1d, 0x2, 0x2) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f0000000e40)=ANY=[@ANYBLOB="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"/3576], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x2e) socket$nl_route(0x10, 0x3, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000540)='rcu_utilization\x00', r0}, 0x10) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000012c0)) socket$can_bcm(0x1d, 0x2, 0x2) socket$nl_generic(0x10, 0x3, 0x10) socket$pppl2tp(0x18, 0x1, 0x1) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x8, 0x4, 0x4, 0x2, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) socket$tipc(0x1e, 0x5, 0x0) socket$tipc(0x1e, 0x2, 0x0) bpf$BPF_PROG_ATTACH(0x8, 0x0, 0x0) socket$tipc(0x1e, 0x5, 0x0) socket$tipc(0x1e, 0x2, 0x0) socket$tipc(0x1e, 0x5, 0x0) socket$tipc(0x1e, 0x5, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0x3, &(0x7f0000000200)=@framed, &(0x7f00000004c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_route(0x10, 0x3, 0x0) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$nl_route(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=ANY=[@ANYBLOB="540000001000010400000000000000ffff000000", @ANYRES32=0x0, @ANYBLOB="0380000000000000240012800c0001006d6163766c616e00140002800800010008000000060002000100000008000500", @ANYRES32=r2, @ANYBLOB='\b\x00\n\x00', @ANYRES32], 0x54}}, 0x0) 5.114389009s ago: executing program 6 (id=1840): sendmsg$NL80211_CMD_PEER_MEASUREMENT_START(0xffffffffffffffff, &(0x7f00000008c0)={0x0, 0x0, &(0x7f0000000880)={&(0x7f0000000580)=ANY=[@ANYBLOB="d4020000", @ANYRES16, @ANYBLOB="0200bd7000fddbdf25830000000800030000", @ANYBLOB="b8020580580000800a00010008021100000100000a00010008021100000000003c00028008009f00020000000800a1007f0000000800a1000600000005001801040000000800a10001000000080022015c0200000500190104000000cc0100804c000280050018010b000000080027000000000008009f0002000000080026006c09000008002201d30000000800a0000600000005001901040000000800a100800e0000080027000200000034010380600001800800018004000c0020000180050007000700000004000c0004000a000600040000100000040008002000018005000300040000000500030009000000050005000b0000000400010008000180040001000c0001800400080004000c00c8000180280001800400090004000b0004000a00050003000b00000004000a000400090004000b000400080020000180050006000100000004000800060004000300000004000c0004000c001000018004000a0005000300040000001c0001800800020001000000050006001a00000004000100040001000c000180"], 0x2d4}, 0x1, 0x0, 0x0, 0x810}, 0x4000890) r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0xd18c9b25, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f030040000b05d25a806c8c6394f90324fc60100002000a000200053582c137153e3704020180fc5409000c00", 0x33fe0}], 0x1}, 0x0) r1 = socket$netlink(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r1, 0x0, 0x0) syz_mount_image$nilfs2(&(0x7f0000000dc0), &(0x7f0000000180)='./file2\x00', 0x90, &(0x7f0000003280)=ANY=[], 0x4, 0xd9c, &(0x7f0000001dc0)="$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") socket$nl_route(0x10, 0x3, 0x0) r2 = open(&(0x7f0000000000)='./bus\x00', 0x60142, 0x0) open(0x0, 0x101000, 0x0) r3 = socket$key(0xf, 0x3, 0x2) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x22, 0x0) sendmsg$key(r3, 0x0, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.current\x00', 0x275a, 0x0) write$binfmt_script(r4, &(0x7f00000004c0), 0x208e24b) fdatasync(r4) read$FUSE(r2, 0x0, 0x0) syz_mount_image$fuse(0x0, &(0x7f0000000140)='./file1\x00', 0x81c04d, 0x0, 0x0, 0x0, 0x0) syz_mount_image$nilfs2(&(0x7f0000000000), &(0x7f0000000040)='./file1/file0\x00', 0x1080c, &(0x7f0000000180)=ANY=[], 0x0, 0xa74, &(0x7f0000000240)="$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") r5 = openat$misdntimer(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r5, 0x80044940, &(0x7f0000001b00)) socket$inet_tcp(0x2, 0x1, 0x0) 4.845305953s ago: executing program 0 (id=1841): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = syz_open_dev$usbfs(&(0x7f0000000040), 0x76, 0x141201) ioctl$USBDEVFS_SUBMITURB(r0, 0x8038550a, &(0x7f0000000480)=@urb_type_control={0x2, {}, 0x0, 0xa4, &(0x7f0000002b00)={0x1, 0x1, 0x0, 0xffff}, 0x8, 0x4, 0x0, 0x0, 0x400, 0x0, 0x0}) r1 = getpid() sched_setaffinity(0x0, 0x0, 0x0) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) mount$bind(&(0x7f0000000180)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x1101088, 0x0) r4 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r4, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) pivot_root(&(0x7f0000000000)='./file0\x00', &(0x7f0000000240)='./file0/../file0/../file0/../file0\x00') mkdir(0x0, 0x0) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000040)='cgroup.freeze\x00', 0x275a, 0x0) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) rmdir(&(0x7f00000001c0)='./cgroup/../file0\x00') 3.419926439s ago: executing program 7 (id=1842): syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000380)='./file0\x00', 0x804, &(0x7f00000001c0)=ANY=[@ANYBLOB="756e695f786c6174653d302c73686f72746e616d653d6c6f7765722c696f6368617273743d6b6f69382d722c726f6469722c757466383d302c726f6469022c756e695f786c6174653d302c757466383d302c636f6465706167653d3835352c756e695f786c6174653d302c636f6465706167653d3835352c696f636861727365743d63703933362c757466383d302c756e695f786c6174653d302c757466383d312c756e695f786c6174653d312c0000"], 0x1, 0x276, &(0x7f0000000640)="$eJzs3UFqG1cYB/BvLMmW2oW06KoUPNAuujJ2T2BTXCg1FFq0aLtoTS1DsYTBBkGTEMWrnCAnyHmyCblADpCQXbwwmSDPSFbCyEaJbJnk99vo8d77z/vezCCtZvTPN72DvcPj/ZN7z6NeT2JpMzbjNIlWLMXIgyj17GV5PwBwy51mWbzKciulM2pTktWlay0MALg2k7//i64FALgZv//x5y9bOzvbv6VpPaL3sN9OIv/Mx7f247/oRifWoxlnEdlY3v7p553tqKZDrfiuN+i3h8ne30+K42+9iDjPb0QzWuX5jTQ3kR/027X4olh/sxudXx9HM74qz/9Qko/2cnz/7UT9a9GMp//GYXRjr6htlL+/kaY/Zo9e3/1r2DvMJ4N+e2U8r5hdudELAwAAAAAAAAAAAAAAAAAAAADAJ20tHWu9+/6dytn5+Nq08Tw/7f1Ag4n386ynaZol+fyLfDW+rkZ1kXsHAAAAAAAAAAAAAAAAAACA2+L4/zsHu91u52iujdFj/SVD8Waea63OmopKUVo3iZhtrVqRvHpyZcZdNIb1dI6SaszvEiTjnsbk0Grkaw17GnljouejV6/HeWN0dx3sJnFFql52k8yhkZXcfpWpqeX3exrFDkomNy5ZffnLD6o5a04ZSiKiNj6Zlx+nNt9zeFPfQAAAAAAAAAAAAAAAAAAAwMjFQ78lgycLKAgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAFuDi//9naAyK8LQ5WWXYqEbRs+AtAgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA8Bl4GwAA//95LWni") r0 = openat$misdntimer(0xffffffffffffff9c, &(0x7f0000001440), 0x0, 0x0) ioctl$IMADDTIMER(r0, 0x80044940, &(0x7f0000000080)=0x14) bpf$PROG_LOAD(0x5, 0x0, 0x0) ioctl$IMADDTIMER(r0, 0x80044940, 0x0) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) socket$igmp6(0xa, 0x3, 0x2) fsopen(0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x9) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$ITER_CREATE(0x1d, 0x0, 0x0) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./bus\x00', 0xe, &(0x7f00000002c0)={[{@auto_da_alloc_val}, {@resuid={'resuid', 0x3d, 0xee01}}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x2e}}, {@lazytime}, {@quota}, {@quota}]}, 0x3, 0x443, &(0x7f0000000940)="$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") close(r0) 3.384740225s ago: executing program 0 (id=1843): connect$can_bcm(0xffffffffffffffff, 0x0, 0x0) sendmsg$can_bcm(0xffffffffffffffff, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x275a, 0x0) socket$inet_smc(0x2b, 0x1, 0x0) openat$vhost_vsock(0xffffffffffffff9c, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x3, 0x0, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r3 = syz_io_uring_setup(0x10d, &(0x7f0000000140)={0x0, 0x5885}, &(0x7f0000000340)=0x0, &(0x7f0000000280)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r4, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r4, r5, &(0x7f00000002c0)=@IORING_OP_TIMEOUT={0xb, 0x4c, 0x0, 0x0, 0x3, &(0x7f0000000000)={0x77359400}}) io_uring_enter(r3, 0x3516, 0x0, 0x0, 0x0, 0x0) syz_mount_image$f2fs(&(0x7f0000000140), &(0x7f00000000c0)='./file0\x00', 0x8, &(0x7f0000000180)={[{@nodiscard}, {@heap}, {@alloc_mode_def}, {@fsync_mode_posix}, {@noflush_merge}, {@prjjquota={'prjjquota', 0x3d, '\xcb'}}, {@age_extent_cache}, {@noacl}, {@quota}, {@resuid}, {@noextent_cache}, {@resuid}, {@adaptive_mode}]}, 0x1, 0x5516, &(0x7f00000002c0)="$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") 3.155583223s ago: executing program 6 (id=1844): syz_mount_image$vfat(&(0x7f0000000040), &(0x7f00000000c0)='./file0\x00', 0x10, &(0x7f0000005440)={[{@shortname_winnt}, {@shortname_lower}, {@iocharset={'iocharset', 0x3d, 'maccenteuro'}}, {@utf8no}, {@uni_xlateno}, {@fat=@codepage={'codepage', 0x3d, '1251'}}, {@fat=@flush}, {@shortname_mixed}, {@iocharset={'iocharset', 0x3d, 'cp949'}}, {@fat=@check_strict}, {@shortname_mixed}, {@uni_xlate}], [{@uid_eq}]}, 0xfd, 0x289, &(0x7f0000000c40)="$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") munmap(&(0x7f0000001000/0x4000)=nil, 0x4000) creat(&(0x7f0000000580)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0) close(0xffffffffffffffff) r0 = getpid() setsockopt$XDP_UMEM_REG(0xffffffffffffffff, 0x11b, 0x4, 0x0, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x5, &(0x7f00000002c0)=ANY=[@ANYBLOB="18050000000000fe000000004b64ffec85"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={0x0, r1}, 0x18) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_open_procfs(r0, &(0x7f0000000000)='net/ip_vs\x00') bpf$MAP_CREATE(0x0, 0x0, 0x0) r5 = open(&(0x7f00000000c0)='.\x00', 0x0, 0x0) getdents64(r5, &(0x7f0000000f80)=""/4107, 0x100b) 275.245993ms ago: executing program 0 (id=1845): openat$fuse(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) socket(0xa, 0x3, 0x3a) bpf$MAP_CREATE(0x0, 0x0, 0x50) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x4) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x10000000}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r3 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, 0x0) ioctl$sock_bt_hci(r3, 0x400448ca, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) recvfrom(r4, 0x0, 0x0, 0x0, 0x0, 0x0) sendmsg$nl_route(r4, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000a40)=ANY=[@ANYBLOB="2c0000001e00431b0000000000"], 0x2c}}, 0x0) syz_mount_image$vfat(&(0x7f0000000300), &(0x7f0000000340)='./file0\x00', 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="008ca76d1e"], 0x1, 0x2de, &(0x7f00000003c0)="$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") mknod$loop(&(0x7f0000000000)='./file0\x00', 0x8, 0x1) 0s ago: executing program 7 (id=1846): r0 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000240)=@ipv6_newroute={0x1c, 0x18, 0x1, 0x0, 0x0, {0xa, 0x0, 0x0, 0x0, 0xfe, 0x0, 0x0, 0x2, 0x600}}, 0x1c}}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() io_uring_register$IORING_REGISTER_PBUF_RING(r0, 0x16, &(0x7f00000001c0)={&(0x7f0000002000)={[{&(0x7f0000000100)="15198c8f1148df301ef744fb8138c28d28518265cd94626a5dd4b250418cd9d0df29e89bbc", 0x25, 0x1}, {&(0x7f0000000280)="9069f1195f897203b3e68c354f5389823746d660fc9b39c8bcab9c3a34251ff2cf6ad3e17992eea8ae4f1929f07fc45e772cdb475db66ade0381fa6a7d9e63e833b0a6c74fab5992aa155c93bed761afe48d4482f7f7ae82309709fcf3ab7617cc9f2a46d115ace6338a42949c534d2ee9999f42f5", 0x75, 0x1}, {&(0x7f0000000600)="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", 0x1000, 0x2}, {&(0x7f0000000300)="e4aa0acac881a8435687bc5f257afbca585cb2253bf7b9b91c64190ff78810ee0eef552b53ddace75b86fd21b008d24ad5cfa36e8823fee0f281c505b5b316d16f", 0x41, 0x1}, {&(0x7f0000000380), 0x0, 0x3}]}, 0x5, 0x2}, 0x1) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) ioctl$MON_IOCT_RING_SIZE(r0, 0x9204, 0xbe68) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r5 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000000), 0x180300, 0x0) ioctl$FBIOPUT_VSCREENINFO(r5, 0x4601, &(0x7f0000000040)={0x191, 0x258, 0x1e0, 0x0, 0x32, 0x1, 0x0, 0x0, {}, {}, {}, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}) socket$nl_generic(0x10, 0x3, 0x10) msgget(0x0, 0x614) syz_open_dev$loop(&(0x7f0000000240), 0x20364, 0x8003) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc601}) openat$6lowpan_control(0xffffffffffffff9c, &(0x7f0000001a00), 0x2, 0x0) kernel console output (not intermixed with test programs): ] loop7: detected capacity change from 0 to 512 [ 882.344028][T11598] EXT4-fs: Ignoring removed i_version option [ 882.426762][T11598] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a016c018, mo2=0002] [ 882.436091][T11598] System zones: 1-12 [ 882.583794][T11598] EXT4-fs error (device loop7): ext4_validate_block_bitmap:441: comm syz.7.1120: bg 0: block 131: padding at end of block bitmap is not set [ 882.911933][T11598] EXT4-fs error (device loop7) in ext4_mb_clear_bb:6550: Corrupt filesystem [ 883.045969][T11598] EXT4-fs (loop7): 1 truncate cleaned up [ 883.517663][T11598] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 883.873667][T11252] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 883.900253][T11252] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 883.968914][T11252] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 883.995278][T11314] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 884.003185][T11314] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 885.004199][T11314] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 885.032252][T11314] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 885.039271][T11314] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 885.110470][T11314] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 885.422677][T10134] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 885.434800][ T254] bridge_slave_1: left allmulticast mode [ 885.440512][ T254] bridge_slave_1: left promiscuous mode [ 885.582730][ T254] bridge0: port 2(bridge_slave_1) entered disabled state [ 886.472554][ T254] bridge_slave_0: left allmulticast mode [ 886.479502][ T254] bridge_slave_0: left promiscuous mode [ 886.524877][ T254] bridge0: port 1(bridge_slave_0) entered disabled state [ 886.556975][ T254] bridge_slave_1: left allmulticast mode [ 886.564325][ T254] bridge_slave_1: left promiscuous mode [ 886.570150][ T254] bridge0: port 2(bridge_slave_1) entered disabled state [ 886.659847][ T254] bridge_slave_0: left allmulticast mode [ 886.677586][ T254] bridge_slave_0: left promiscuous mode [ 886.687851][ T254] bridge0: port 1(bridge_slave_0) entered disabled state [ 888.335345][ T254] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 888.362973][ T254] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 888.457249][ T254] bond0 (unregistering): Released all slaves [ 890.489479][T11662] loop7: detected capacity change from 0 to 8 [ 891.531761][ T254] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 891.746446][ T254] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 891.837220][ T254] bond0 (unregistering): Released all slaves [ 891.914879][T11252] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 891.931837][T11252] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 892.031851][ T978] usb 3-1: new high-speed USB device number 6 using dummy_hcd [ 892.040396][T11252] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 892.331001][T11672] loop7: detected capacity change from 0 to 1024 [ 893.137782][T11672] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 893.417435][T11314] hsr_slave_0: entered promiscuous mode [ 893.502112][T11314] hsr_slave_1: entered promiscuous mode [ 893.551873][T11314] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 893.591194][T11314] Cannot create hsr debugfs directory [ 893.633843][T10134] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 893.763735][T11679] loop2: detected capacity change from 0 to 512 [ 894.279672][T11679] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=884fc018, mo2=0102] [ 894.309782][T11679] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 894.420905][T11679] ext4 filesystem being mounted at /298/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 894.469649][ T29] audit: type=1804 audit(1736247791.626:165): pid=11679 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.2.1137" name="/newroot/298/file1/file1" dev="loop2" ino=15 res=1 errno=0 [ 896.415561][ T5838] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 896.439793][T11684] netlink: 'syz.7.1136': attribute type 4 has an invalid length. [ 897.713145][T11702] loop2: detected capacity change from 0 to 1024 [ 897.872758][ T254] hsr_slave_0: left promiscuous mode [ 897.942120][ T254] hsr_slave_1: left promiscuous mode [ 899.051890][ T254] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 899.073422][ T5849] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 899.131766][ T5849] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 899.160971][ T254] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 899.181929][ T5849] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 899.192940][ T5849] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 899.200824][ T5849] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 899.224091][ T5849] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 899.337018][ T254] hsr_slave_0: left promiscuous mode [ 899.371973][ T254] hsr_slave_1: left promiscuous mode [ 899.380704][ T254] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 899.412350][ T254] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 899.451457][ T254] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 899.481940][ T254] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 899.600991][ T254] veth1_macvtap: left promiscuous mode [ 899.631685][ T254] veth0_macvtap: left promiscuous mode [ 899.651772][ T254] veth1_vlan: left promiscuous mode [ 899.671708][ T254] veth0_vlan: left promiscuous mode [ 899.697062][ T6875] hfsplus: b-tree write err: -5, ino 4 [ 901.403372][ T5849] Bluetooth: hci5: command tx timeout [ 902.253128][ T254] team0 (unregistering): Port device team_slave_1 removed [ 902.346855][ T254] team0 (unregistering): Port device team_slave_0 removed [ 903.461031][ T5849] Bluetooth: hci5: command tx timeout [ 904.188723][ T254] team0 (unregistering): Port device team_slave_1 removed [ 904.251901][ T254] team0 (unregistering): Port device team_slave_0 removed [ 905.617989][ T5849] Bluetooth: hci5: command tx timeout [ 906.508903][ T5841] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 906.541378][ T5841] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 906.553371][ T5841] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 906.674747][ T5841] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 906.682835][ T5841] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 906.706600][ T5841] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 907.047146][T11764] loop2: detected capacity change from 0 to 1024 [ 907.317742][T11764] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 908.162887][ T5841] Bluetooth: hci5: command tx timeout [ 908.645158][T11779] netlink: 'syz.2.1151': attribute type 4 has an invalid length. [ 909.301765][ T5841] Bluetooth: hci2: command tx timeout [ 909.336924][ T29] audit: type=1800 audit(1736247806.446:166): pid=11778 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.1151" name="bus" dev="loop2" ino=18 res=0 errno=0 [ 909.976808][ T5838] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 910.290030][T11800] loop2: detected capacity change from 0 to 2048 [ 910.391815][T11800] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 911.541847][ T5849] Bluetooth: hci2: command tx timeout [ 911.667485][T11761] chnl_net:caif_netlink_parms(): no params data found [ 913.546820][T11836] loop2: detected capacity change from 0 to 512 [ 913.601732][ T5849] Bluetooth: hci2: command tx timeout [ 913.702594][T11761] bridge0: port 1(bridge_slave_0) entered blocking state [ 913.742918][T11761] bridge0: port 1(bridge_slave_0) entered disabled state [ 913.794132][T11761] bridge_slave_0: entered allmulticast mode [ 913.830078][T11836] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 913.845834][T11761] bridge_slave_0: entered promiscuous mode [ 913.868059][T11836] ext4 filesystem being mounted at /306/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 913.897077][T11711] chnl_net:caif_netlink_parms(): no params data found [ 914.032207][ T29] audit: type=1800 audit(1736247811.126:167): pid=11836 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.1160" name="file1" dev="loop2" ino=15 res=0 errno=0 [ 914.137732][T11761] bridge0: port 2(bridge_slave_1) entered blocking state [ 914.154847][T11761] bridge0: port 2(bridge_slave_1) entered disabled state [ 914.171931][T11761] bridge_slave_1: entered allmulticast mode [ 914.189309][T11761] bridge_slave_1: entered promiscuous mode [ 914.334391][T11845] netlink: 36 bytes leftover after parsing attributes in process `syz.2.1160'. [ 915.942327][ T5849] Bluetooth: hci2: command tx timeout [ 916.039481][T11761] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 916.055852][T11761] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 916.134714][ T5838] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 917.377958][T11761] team0: Port device team_slave_0 added [ 918.792556][T11711] bridge0: port 1(bridge_slave_0) entered blocking state [ 918.800330][T11711] bridge0: port 1(bridge_slave_0) entered disabled state [ 918.822169][T11711] bridge_slave_0: entered allmulticast mode [ 919.316316][T11711] bridge_slave_0: entered promiscuous mode [ 919.360370][T11761] team0: Port device team_slave_1 added [ 920.001707][T11711] bridge0: port 2(bridge_slave_1) entered blocking state [ 920.254398][T11711] bridge0: port 2(bridge_slave_1) entered disabled state [ 920.265947][T11711] bridge_slave_1: entered allmulticast mode [ 920.280019][T11711] bridge_slave_1: entered promiscuous mode [ 920.344467][T11761] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 920.461591][T11761] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 921.571741][T11761] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 922.828617][ T254] bridge_slave_1: left allmulticast mode [ 922.846201][ T254] bridge_slave_1: left promiscuous mode [ 922.846202][T11910] netlink: 'syz.0.1174': attribute type 10 has an invalid length. [ 922.846418][ T254] bridge0: port 2(bridge_slave_1) entered disabled state [ 922.914784][ T254] bridge_slave_0: left allmulticast mode [ 922.920485][ T254] bridge_slave_0: left promiscuous mode [ 922.931579][ T254] bridge0: port 1(bridge_slave_0) entered disabled state [ 922.953975][ T254] bridge_slave_1: left allmulticast mode [ 922.980072][ T254] bridge_slave_1: left promiscuous mode [ 922.986292][ T254] bridge0: port 2(bridge_slave_1) entered disabled state [ 923.012251][ T254] bridge_slave_0: left allmulticast mode [ 923.018718][ T254] bridge_slave_0: left promiscuous mode [ 923.031341][ T254] bridge0: port 1(bridge_slave_0) entered disabled state [ 923.253231][T11918] loop2: detected capacity change from 0 to 256 [ 923.673496][ T254] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 923.738889][ T254] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 923.759148][ T254] bond0 (unregistering): Released all slaves [ 923.843917][ T254] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 923.878253][ T254] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 923.904924][ T254] bond0 (unregistering): Released all slaves [ 923.949463][T11761] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 923.956652][T11761] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 923.985142][T11761] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 924.061960][T11711] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 924.113748][T11711] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 924.238923][T11910] netdevsim netdevsim0 netdevsim0: entered promiscuous mode [ 924.269487][T11910] netdevsim netdevsim0 netdevsim0: entered allmulticast mode [ 924.284864][T11910] team0: Port device netdevsim0 added [ 924.840219][ T254] hsr_slave_0: left promiscuous mode [ 925.110906][ T254] hsr_slave_1: left promiscuous mode [ 925.153045][ T254] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 925.171279][ T254] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 925.233635][ T254] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 925.315571][ T254] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 929.183550][T11954] loop2: detected capacity change from 0 to 256 [ 929.190850][T11954] exfat: Deprecated parameter 'utf8' [ 929.255101][ T254] team0 (unregistering): Port device team_slave_1 removed [ 929.266694][T11954] exFAT-fs (loop2): failed to load upcase table (idx : 0x00010000, chksum : 0x1a9973fb, utbl_chksum : 0xe619d30d) [ 929.368416][ T254] team0 (unregistering): Port device team_slave_0 removed [ 933.821296][ T254] team0 (unregistering): Port device team_slave_1 removed [ 933.969990][ T254] team0 (unregistering): Port device team_slave_0 removed [ 934.313754][T11711] team0: Port device team_slave_0 added [ 934.434058][T11761] hsr_slave_0: entered promiscuous mode [ 934.443533][T11761] hsr_slave_1: entered promiscuous mode [ 934.450442][T11761] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 934.458259][T11761] Cannot create hsr debugfs directory [ 934.487178][T11711] team0: Port device team_slave_1 added [ 934.548423][T11711] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 934.556650][T11711] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 934.639408][T11711] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 935.332202][T11711] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 935.339203][T11711] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 935.462993][ T29] audit: type=1326 audit(1736247832.586:168): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11992 comm="syz.2.1197" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f587d185d29 code=0x7ffc0000 [ 935.499884][T11711] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 936.281664][ T29] audit: type=1326 audit(1736247832.596:169): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11992 comm="syz.2.1197" exe="/root/syz-executor" sig=0 arch=c000003e syscall=17 compat=0 ip=0x7f587d185d29 code=0x7ffc0000 [ 936.582994][ T29] audit: type=1326 audit(1736247832.596:170): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11992 comm="syz.2.1197" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f587d185d29 code=0x7ffc0000 [ 937.210824][ T29] audit: type=1326 audit(1736247832.596:171): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11992 comm="syz.2.1197" exe="/root/syz-executor" sig=0 arch=c000003e syscall=83 compat=0 ip=0x7f587d185d29 code=0x7ffc0000 [ 937.239813][ T29] audit: type=1326 audit(1736247832.596:172): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11992 comm="syz.2.1197" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f587d185d29 code=0x7ffc0000 [ 937.263663][ T29] audit: type=1326 audit(1736247832.596:173): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11992 comm="syz.2.1197" exe="/root/syz-executor" sig=0 arch=c000003e syscall=165 compat=0 ip=0x7f587d185d29 code=0x7ffc0000 [ 937.286786][ T29] audit: type=1326 audit(1736247832.596:174): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11992 comm="syz.2.1197" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f587d185d29 code=0x7ffc0000 [ 937.372792][ T1296] ieee802154 phy0 wpan0: encryption failed: -22 [ 937.379182][ T1296] ieee802154 phy1 wpan1: encryption failed: -22 [ 937.413418][ T29] audit: type=1326 audit(1736247832.596:175): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11992 comm="syz.2.1197" exe="/root/syz-executor" sig=0 arch=c000003e syscall=80 compat=0 ip=0x7f587d185d29 code=0x7ffc0000 [ 937.578786][ T29] audit: type=1326 audit(1736247832.606:176): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11992 comm="syz.2.1197" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f587d185d29 code=0x7ffc0000 [ 937.614044][T12008] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 937.652398][ T29] audit: type=1326 audit(1736247832.606:177): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11992 comm="syz.2.1197" exe="/root/syz-executor" sig=0 arch=c000003e syscall=248 compat=0 ip=0x7f587d185d29 code=0x7ffc0000 [ 937.759842][T11711] hsr_slave_0: entered promiscuous mode [ 937.775676][T11711] hsr_slave_1: entered promiscuous mode [ 937.808740][T11711] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 937.838932][T11711] Cannot create hsr debugfs directory [ 939.446079][T12022] overlayfs: failed to clone lowerpath [ 941.674503][ T29] kauditd_printk_skb: 8 callbacks suppressed [ 941.674547][ T29] audit: type=1326 audit(1736247838.596:186): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12033 comm="syz.0.1204" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f04bdf85d29 code=0x0 [ 942.504068][T11761] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 943.504379][T11761] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 945.043537][T11711] netdevsim netdevsim8 netdevsim0: renamed from eth0 [ 945.158396][T11711] netdevsim netdevsim8 netdevsim1: renamed from eth1 [ 945.244628][T11761] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 946.148285][T11761] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 946.241869][T11711] netdevsim netdevsim8 netdevsim2: renamed from eth2 [ 946.346892][T11711] netdevsim netdevsim8 netdevsim3: renamed from eth3 [ 947.293283][T11761] 8021q: adding VLAN 0 to HW filter on device bond0 [ 947.309930][T11761] 8021q: adding VLAN 0 to HW filter on device team0 [ 947.382055][T11761] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 947.393351][T11761] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 947.534675][ T4444] bridge0: port 1(bridge_slave_0) entered blocking state [ 947.551628][ T4444] bridge0: port 1(bridge_slave_0) entered forwarding state [ 948.044905][ T4444] bridge0: port 2(bridge_slave_1) entered blocking state [ 948.052103][ T4444] bridge0: port 2(bridge_slave_1) entered forwarding state [ 948.282621][T11711] 8021q: adding VLAN 0 to HW filter on device bond0 [ 948.338689][T11711] 8021q: adding VLAN 0 to HW filter on device team0 [ 948.369809][ T4444] bridge0: port 1(bridge_slave_0) entered blocking state [ 948.377019][ T4444] bridge0: port 1(bridge_slave_0) entered forwarding state [ 948.549197][ T4444] bridge0: port 2(bridge_slave_1) entered blocking state [ 948.556401][ T4444] bridge0: port 2(bridge_slave_1) entered forwarding state [ 951.239425][T11761] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 952.526449][T12128] x_tables: ip_tables: osf match: only valid for protocol 6 [ 953.791328][T11761] veth0_vlan: entered promiscuous mode [ 953.948942][T11761] veth1_vlan: entered promiscuous mode [ 953.986764][T11711] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 954.231488][T11761] veth0_macvtap: entered promiscuous mode [ 954.253085][T11761] veth1_macvtap: entered promiscuous mode [ 956.524650][T11761] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 956.677203][T11761] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 956.788465][T11761] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 956.821790][T11761] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 956.857628][T11761] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 956.911808][T11761] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 956.971659][T11761] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 957.024771][T11761] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 957.081617][T11761] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 957.210051][T11761] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 957.287362][T11761] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 958.073685][T11761] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 958.103269][T11761] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 958.148816][T11761] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 958.159647][T11761] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 958.169791][T11761] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 958.180372][T11761] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 958.190362][T11761] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 958.200912][T11761] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 958.211063][T11761] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 958.361692][T11761] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 958.372933][T11761] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 958.425720][T11761] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 958.718738][T11761] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 959.496903][ T5841] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 959.561860][ T5841] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 959.580440][ T5841] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 959.885690][T11761] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 959.900402][ T5841] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 959.901026][T11761] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 960.023588][ T5841] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 960.035292][ T5841] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 961.237968][T12191] loop7: detected capacity change from 0 to 4096 [ 961.277887][T12191] ntfs3(loop7): Different NTFS sector size (4096) and media sector size (512). [ 961.304904][T12197] overlayfs: failed to clone lowerpath [ 961.355096][T12191] ntfs3(loop7): ino=19, mi_enum_attr [ 961.389653][T12191] ntfs3(loop7): Mark volume as dirty due to NTFS errors [ 961.507633][ T52] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 961.561622][ T52] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 961.752269][T12199] overlayfs: failed to resolve './file2': -2 [ 962.090802][ T52] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 962.107466][ T5841] Bluetooth: hci1: command tx timeout [ 962.175037][ T52] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 964.173066][ T5841] Bluetooth: hci1: command tx timeout [ 964.548451][T12228] loop7: detected capacity change from 0 to 512 [ 964.566499][T12177] chnl_net:caif_netlink_parms(): no params data found [ 964.582477][T12228] EXT4-fs: Ignoring removed i_version option [ 964.601298][T12228] EXT4-fs: Ignoring removed mblk_io_submit option [ 964.613212][T12228] ext4: Unknown parameter 'seclabel' [ 964.660543][ T6843] bridge_slave_1: left allmulticast mode [ 964.789474][T12228] loop7: detected capacity change from 0 to 256 [ 964.811892][ T6843] bridge_slave_1: left promiscuous mode [ 964.817741][ T6843] bridge0: port 2(bridge_slave_1) entered disabled state [ 964.983213][T12232] xt_TPROXY: Can be used only with -p tcp or -p udp [ 964.994592][ T6843] bridge_slave_0: left allmulticast mode [ 965.033260][ T6843] bridge_slave_0: left promiscuous mode [ 965.757933][ T6843] bridge0: port 1(bridge_slave_0) entered disabled state [ 966.241767][ T5841] Bluetooth: hci1: command tx timeout [ 966.465052][T12243] loop6: detected capacity change from 0 to 1024 [ 968.321736][ T5841] Bluetooth: hci1: command tx timeout [ 970.250741][T12276] overlayfs: failed to clone lowerpath [ 972.683207][ T6843] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 972.859227][T12287] loop2: detected capacity change from 0 to 128 [ 972.896095][T12287] loop2: detected capacity change from 0 to 8 [ 973.439658][T12287] cramfs: bad root offset 64 [ 973.817070][ T6843] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 973.893983][ T6843] bond0 (unregistering): Released all slaves [ 976.617790][T12298] loop6: detected capacity change from 0 to 128 [ 976.631690][ T6843] hsr_slave_0: left promiscuous mode [ 976.641959][ T6843] hsr_slave_1: left promiscuous mode [ 976.647847][ T6843] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 976.829524][ T6843] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 977.727844][T12322] loop7: detected capacity change from 0 to 128 [ 978.755489][T12322] sysv_free_inode: inode 0,1,2 or nonexistent inode [ 980.366049][T12322] loop7: detected capacity change from 0 to 65536 [ 981.957798][T12322] workqueue: Failed to create a rescuer kthread for wq "xfs-buf/loop7": -EINTR [ 984.360197][T12345] loop7: detected capacity change from 0 to 2048 [ 984.467628][T12345] UDF-fs: error (device loop7): udf_read_tagged: tag version 0x0000 != 0x0002 || 0x0003, block 0 [ 984.492278][T12345] UDF-fs: error (device loop7): udf_process_sequence: Primary Volume Descriptor not found! [ 984.521680][T12345] UDF-fs: error (device loop7): udf_process_sequence: Primary Volume Descriptor not found! [ 984.552587][T12345] UDF-fs: Scanning with blocksize 512 failed [ 984.587940][T12345] UDF-fs: warning (device loop7): udf_load_vrs: No anchor found [ 984.611358][T12345] UDF-fs: Scanning with blocksize 1024 failed [ 984.686364][T12345] UDF-fs: error (device loop7): udf_read_tagged: read failed, block=512, location=512 [ 984.706509][T12345] UDF-fs: warning (device loop7): udf_load_vrs: No anchor found [ 984.727433][T12345] UDF-fs: Scanning with blocksize 2048 failed [ 984.749853][T12345] UDF-fs: error (device loop7): udf_read_tagged: read failed, block=256, location=256 [ 984.806117][T12345] UDF-fs: error (device loop7): udf_read_tagged: read failed, block=512, location=512 [ 984.826399][T12345] UDF-fs: warning (device loop7): udf_load_vrs: No anchor found [ 984.851844][T12345] UDF-fs: Scanning with blocksize 4096 failed [ 984.886173][T12345] UDF-fs: warning (device loop7): udf_fill_super: No partition found (1) [ 985.004917][ T6843] team0 (unregistering): Port device team_slave_1 removed [ 985.109991][T12353] overlayfs: failed to clone lowerpath [ 985.370781][T12343] loop6: detected capacity change from 0 to 64 [ 986.189639][ T6843] team0 (unregistering): Port device team_slave_0 removed [ 988.979602][ T5849] Bluetooth: hci1: command 0x0405 tx timeout [ 992.482436][T12403] overlayfs: failed to clone lowerpath [ 992.739638][T12406] loop2: detected capacity change from 0 to 2048 [ 993.024196][T12177] bridge0: port 1(bridge_slave_0) entered blocking state [ 993.031365][T12177] bridge0: port 1(bridge_slave_0) entered disabled state [ 993.076075][T12406] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 993.184139][T12177] bridge_slave_0: entered allmulticast mode [ 993.191427][T12177] bridge_slave_0: entered promiscuous mode [ 993.533625][T12177] bridge0: port 2(bridge_slave_1) entered blocking state [ 993.540781][T12177] bridge0: port 2(bridge_slave_1) entered disabled state [ 993.984835][T12177] bridge_slave_1: entered allmulticast mode [ 994.441411][T12177] bridge_slave_1: entered promiscuous mode [ 994.542707][T12413] loop7: detected capacity change from 0 to 4096 [ 994.671106][T12413] ntfs3(loop7): Different NTFS sector size (4096) and media sector size (512). [ 994.804040][T12177] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 994.816318][T12177] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 994.828240][T12419] loop2: detected capacity change from 0 to 4096 [ 994.854827][T12413] ntfs3(loop7): Failed to load $Extend (-22). [ 994.861134][T12413] ntfs3(loop7): Failed to initialize $Extend. [ 995.219952][T12419] ntfs3(loop2): ino=18, mi_enum_attr [ 995.227891][T12419] ntfs3(loop2): Mark volume as dirty due to NTFS errors [ 995.232888][T12177] team0: Port device team_slave_0 added [ 995.367607][T12177] team0: Port device team_slave_1 added [ 997.233151][T12450] syz.2.1291: attempt to access beyond end of device [ 997.233151][T12450] loop2: rw=0, sector=64, nr_sectors = 8 limit=0 [ 997.246971][T12450] syz.2.1291: attempt to access beyond end of device [ 997.246971][T12450] loop2: rw=0, sector=120, nr_sectors = 8 limit=0 [ 997.260975][T12450] Mount JFS Failure: -5 [ 997.265280][T12450] jfs_mount failed w/return code = -5 [ 997.273202][ T29] audit: type=1326 audit(1736247894.436:187): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12442 comm="syz.2.1291" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f587d185d29 code=0x7ffc0000 [ 997.440800][ T29] audit: type=1326 audit(1736247894.436:188): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12442 comm="syz.2.1291" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f587d185d29 code=0x7ffc0000 [ 997.620255][T12177] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 997.627455][T12177] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 997.802563][T12177] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 997.827705][T12177] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 997.834803][T12177] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 997.861321][T12177] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 997.989520][T12455] loop2: detected capacity change from 0 to 128 [ 998.005858][T12455] UDF-fs: error (device loop2): udf_read_tagged: read failed, block=256, location=256 [ 998.018859][T12455] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 998.987915][ T1296] ieee802154 phy0 wpan0: encryption failed: -22 [ 998.994343][ T1296] ieee802154 phy1 wpan1: encryption failed: -22 [ 1000.133539][T12177] hsr_slave_0: entered promiscuous mode [ 1000.262263][T12177] hsr_slave_1: entered promiscuous mode [ 1000.277969][T12177] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1000.301614][T12177] Cannot create hsr debugfs directory [ 1002.840061][T12481] loop7: detected capacity change from 0 to 4096 [ 1002.935110][T12481] NILFS (loop7): invalid segment: Checksum error in segment payload [ 1003.321675][T12481] NILFS (loop7): trying rollback from an earlier position [ 1004.305463][T12481] NILFS (loop7): invalid segment: Inconsistency found [ 1004.361661][T12481] NILFS (loop7): error -22 while searching super root [ 1008.585578][T12522] loop7: detected capacity change from 0 to 4096 [ 1008.704322][T12177] netdevsim netdevsim8 netdevsim0: renamed from eth0 [ 1009.095277][T12531] overlayfs: failed to clone lowerpath [ 1009.176446][T12177] netdevsim netdevsim8 netdevsim1: renamed from eth1 [ 1009.635577][T12528] ALSA: mixer_oss: invalid OSS volume 'u' [ 1009.640004][T12522] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1009.815422][T12177] netdevsim netdevsim8 netdevsim2: renamed from eth2 [ 1009.831700][T11122] IPVS: starting estimator thread 0... [ 1009.867444][T12177] netdevsim netdevsim8 netdevsim3: renamed from eth3 [ 1009.962405][T12538] IPVS: using max 23 ests per chain, 55200 per kthread [ 1011.312632][T12551] new mount options do not match the existing superblock, will be ignored [ 1011.866558][T12177] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1012.146542][T12177] 8021q: adding VLAN 0 to HW filter on device team0 [ 1012.309970][ T8275] bridge0: port 1(bridge_slave_0) entered blocking state [ 1012.317226][ T8275] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1012.673608][ T8275] bridge0: port 2(bridge_slave_1) entered blocking state [ 1012.680832][ T8275] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1014.329621][T12565] loop6: detected capacity change from 0 to 512 [ 1015.256025][T12177] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 1016.248844][T12565] workqueue: Failed to create a rescuer kthread for wq "ext4-rsv-conversion": -EINTR [ 1016.249043][T12565] EXT4-fs: failed to create workqueue [ 1016.269992][T12565] EXT4-fs (loop6): mount failed [ 1016.592804][T10134] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1018.164692][T12587] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1019.712780][ T5849] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 1019.974086][ T5849] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 1019.986400][ T5849] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 1020.062662][ T5849] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 1020.091601][ T5849] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 1020.274103][ T5849] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 1020.403147][T12599] openvswitch: netlink: Unexpected mask (mask=240, allowed=10048) [ 1022.109781][T12612] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1322'. [ 1022.452018][ T5849] Bluetooth: hci5: command tx timeout [ 1024.482019][ T5849] Bluetooth: hci5: command tx timeout [ 1025.379418][T12611] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 1025.388996][T12611] Bluetooth: hci4: Opcode 0x0406 failed: -4 [ 1025.448660][T12611] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 1025.461417][T12611] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 1026.768432][ T5849] Bluetooth: hci5: command tx timeout [ 1027.604521][ T5841] Bluetooth: hci4: command 0x0405 tx timeout [ 1027.610819][ T5841] Bluetooth: hci3: command 0x0406 tx timeout [ 1028.379256][T12611] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 1028.386203][T12611] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 1028.421330][T12611] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 1028.448421][T12611] Bluetooth: hci5: Opcode 0x0c1a failed: -4 [ 1028.454517][T12611] Bluetooth: hci5: Opcode 0x0406 failed: -4 [ 1028.461111][T12611] Bluetooth: hci5: Opcode 0x0406 failed: -4 [ 1029.087624][T12644] netlink: 32 bytes leftover after parsing attributes in process `syz.0.1327'. [ 1030.036505][ T5841] Bluetooth: hci3: command 0x0406 tx timeout [ 1030.042902][ T5841] Bluetooth: hci4: command 0x0405 tx timeout [ 1030.572038][ T5849] Bluetooth: hci5: command 0x0c1a tx timeout [ 1030.581139][ T5849] Bluetooth: hci2: command 0x0c1a tx timeout [ 1030.750763][T12649] loop7: detected capacity change from 0 to 128 [ 1030.779961][T12649] loop7: detected capacity change from 0 to 8 [ 1031.460569][T12649] cramfs: bad root offset 64 [ 1033.048919][ T5841] Bluetooth: hci2: command 0x0c1a tx timeout [ 1033.055184][ T5841] Bluetooth: hci5: command 0x0c1a tx timeout [ 1035.059704][T12579] chnl_net:caif_netlink_parms(): no params data found [ 1035.088306][T12675] netlink: 'syz.6.1334': attribute type 1 has an invalid length. [ 1035.096582][T12675] netlink: 224 bytes leftover after parsing attributes in process `syz.6.1334'. [ 1036.054346][ T5849] Bluetooth: hci5: command 0x0c1a tx timeout [ 1036.060453][ T5849] Bluetooth: hci2: command 0x0c1a tx timeout [ 1042.593686][T12715] loop2: detected capacity change from 0 to 4096 [ 1043.920025][T12579] bridge0: port 1(bridge_slave_0) entered blocking state [ 1043.964647][T12579] bridge0: port 1(bridge_slave_0) entered disabled state [ 1043.990120][T12579] bridge_slave_0: entered allmulticast mode [ 1044.006277][T12579] bridge_slave_0: entered promiscuous mode [ 1044.027156][T12579] bridge0: port 2(bridge_slave_1) entered blocking state [ 1044.039503][T12579] bridge0: port 2(bridge_slave_1) entered disabled state [ 1044.043618][T12733] loop6: detected capacity change from 0 to 128 [ 1044.047603][T12579] bridge_slave_1: entered allmulticast mode [ 1044.061232][T12579] bridge_slave_1: entered promiscuous mode [ 1045.012760][T12733] EXT4-fs (loop6): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 1045.026283][T12579] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1045.048482][T12733] ext4 filesystem being mounted at /28/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 1045.112835][T12579] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1045.475801][T12733] loop0: detected capacity change from 512 to 0 [ 1046.404357][T12579] team0: Port device team_slave_0 added [ 1046.446942][T11761] EXT4-fs (loop6): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 1046.506019][T12579] team0: Port device team_slave_1 added [ 1047.210593][T12760] overlayfs: bad index found (index=index/00fb2100011fe5256bb0c243d4acb81e389e64d609e6760d20b400000000000000, ftype=2000, origin ftype=a000). [ 1047.901799][T12579] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1047.972384][T12579] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1048.023815][T12579] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1048.261959][T12579] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1048.269013][T12579] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1048.295397][T12579] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1049.613735][T12771] loop6: detected capacity change from 0 to 512 [ 1049.624178][T12771] EXT4-fs: Ignoring removed mblk_io_submit option [ 1049.686089][T12771] EXT4-fs (loop6): ext4_check_descriptors: Block bitmap for group 0 overlaps superblock [ 1049.802580][T12771] EXT4-fs (loop6): revision level too high, forcing read-only mode [ 1049.812238][T12771] EXT4-fs (loop6): orphan cleanup on readonly fs [ 1049.832688][T12771] EXT4-fs error (device loop6): ext4_read_block_bitmap_nowait:483: comm syz.6.1357: Invalid block bitmap block 0 in block_group 0 [ 1049.871386][T12771] EXT4-fs (loop6): Remounting filesystem read-only [ 1049.882616][T12771] Quota error (device loop6): write_blk: dquota write failed [ 1049.891254][T12771] Quota error (device loop6): write_blk: dquota write failed [ 1049.899582][T12771] Quota error (device loop6): qtree_write_dquot: Error -28 occurred while creating quota [ 1049.910445][T12771] EXT4-fs (loop6): 1 orphan inode deleted [ 1050.758320][T12771] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 1050.840367][T12579] hsr_slave_0: entered promiscuous mode [ 1050.856483][T12579] hsr_slave_1: entered promiscuous mode [ 1050.873013][T12579] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1050.881766][T12579] Cannot create hsr debugfs directory [ 1050.996739][ T8275] bridge_slave_1: left allmulticast mode [ 1051.021948][ T8275] bridge_slave_1: left promiscuous mode [ 1051.027780][ T8275] bridge0: port 2(bridge_slave_1) entered disabled state [ 1051.082497][ T8275] bridge_slave_0: left allmulticast mode [ 1051.099872][ T8275] bridge_slave_0: left promiscuous mode [ 1051.106306][ T8275] bridge0: port 1(bridge_slave_0) entered disabled state [ 1051.229387][T12777] overlayfs: failed to clone lowerpath [ 1052.105754][T12782] loop2: detected capacity change from 0 to 1024 [ 1052.172067][T12782] syz.2.1360: attempt to access beyond end of device [ 1052.172067][T12782] loop2: rw=0, sector=5778, nr_sectors = 2 limit=1024 [ 1052.240346][ T29] audit: type=1326 audit(1736247949.396:189): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12781 comm="syz.2.1360" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f587d185d29 code=0x0 [ 1052.343738][T12786] syz.2.1360: attempt to access beyond end of device [ 1052.343738][T12786] loop2: rw=0, sector=5778, nr_sectors = 2 limit=1024 [ 1052.638635][ T8275] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1052.652516][ T8275] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1052.666230][ T8275] bond0 (unregistering): Released all slaves [ 1052.783357][T11761] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1053.002140][ T8275] hsr_slave_0: left promiscuous mode [ 1053.114287][ T8275] hsr_slave_1: left promiscuous mode [ 1053.134427][ T8275] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1053.175045][ T8275] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1054.631843][T12785] Bluetooth: hci0: Opcode 0x0c03 failed: -110 [ 1054.852187][T12813] xt_CT: You must specify a L4 protocol and not use inversions on it [ 1060.038292][T12840] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1060.079316][ T1296] ieee802154 phy1 wpan1: encryption failed: -22 [ 1060.500067][T12844] loop6: detected capacity change from 0 to 128 [ 1060.564458][ T8275] team0 (unregistering): Port device team_slave_1 removed [ 1062.125084][ T8275] team0 (unregistering): Port device team_slave_0 removed [ 1063.360475][ T5841] Bluetooth: hci2: ACL packet for unknown connection handle 200 [ 1066.396812][T12866] netlink: 'syz.7.1375': attribute type 21 has an invalid length. [ 1067.014770][T12886] overlayfs: failed to clone lowerpath [ 1068.184868][T12881] loop7: detected capacity change from 0 to 40427 [ 1068.319856][T12881] F2FS-fs (loop7): invalid crc value [ 1068.361666][T12881] F2FS-fs (loop7): Found nat_bits in checkpoint [ 1068.408699][T12881] F2FS-fs (loop7): Start checkpoint disabled! [ 1069.740483][T12881] F2FS-fs (loop7): Mounted with checkpoint version = 48b305e6 [ 1073.305344][T12579] netdevsim netdevsim8 netdevsim0: renamed from eth0 [ 1073.559399][T12579] netdevsim netdevsim8 netdevsim1: renamed from eth1 [ 1074.648911][T12579] netdevsim netdevsim8 netdevsim2: renamed from eth2 [ 1074.883267][T12956] overlayfs: failed to clone lowerpath [ 1076.359881][T12948] kvm: requested 4190 ns i8254 timer period limited to 200000 ns [ 1076.645336][T12579] netdevsim netdevsim8 netdevsim3: renamed from eth3 [ 1077.779744][T12579] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1077.797091][T12579] 8021q: adding VLAN 0 to HW filter on device team0 [ 1077.834085][T12579] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 1077.845233][T12579] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 1077.869804][ T8275] bridge0: port 1(bridge_slave_0) entered blocking state [ 1077.877037][ T8275] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1077.892084][ T8275] bridge0: port 2(bridge_slave_1) entered blocking state [ 1077.899258][ T8275] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1077.968574][T12975] loop6: detected capacity change from 0 to 1024 [ 1077.976220][T12975] hfsplus: Unknown parameter '0x0000000000000003LT Z}ڃ@UI+>d](_?D000000000000000000000000x0000000000000000' [ 1078.437670][T12979] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1081.776652][T13005] loop2: detected capacity change from 0 to 128 [ 1081.784028][T13005] hpfs: Bad value for 'uid' [ 1081.788849][T13005] hpfs: Bad value for 'uid' [ 1082.794295][ T5849] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 1082.831247][ T5849] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 1082.844242][ T5849] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 1082.866944][ T5849] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 1082.880149][ T5849] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 1082.892142][ T5849] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 1083.375218][T13018] loop7: detected capacity change from 0 to 512 [ 1083.428013][T13018] EXT4-fs (loop7): encrypted files will use data=ordered instead of data journaling mode [ 1083.916517][T13018] EXT4-fs (loop7): 1 truncate cleaned up [ 1084.194002][T13018] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1084.539477][T13000] chnl_net:caif_netlink_parms(): no params data found [ 1085.131635][ T5849] Bluetooth: hci1: command tx timeout [ 1085.310898][T13043] loop6: detected capacity change from 0 to 512 [ 1085.317084][T10134] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1085.453976][T13043] EXT4-fs error (device loop6): ext4_xattr_ibody_find:2240: inode #15: comm syz.6.1410: corrupted in-inode xattr: invalid ea_ino [ 1085.477950][T13043] EXT4-fs error (device loop6): ext4_orphan_get:1394: comm syz.6.1410: couldn't read orphan inode 15 (err -117) [ 1085.500324][T13050] netlink: 36 bytes leftover after parsing attributes in process `syz.0.1413'. [ 1085.521247][T13050] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1413'. [ 1085.532883][T13043] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1085.536238][T13050] netlink: 36 bytes leftover after parsing attributes in process `syz.0.1413'. [ 1085.555653][T13050] netlink: 36 bytes leftover after parsing attributes in process `syz.0.1413'. [ 1085.667206][T13053] EXT4-fs error (device loop6): ext4_validate_block_bitmap:441: comm ext4lazyinit: bg 0: block 255: padding at end of block bitmap is not set [ 1086.123748][T13060] EXT4-fs error (device loop6): dx_probe:823: inode #2: comm syz.6.1410: Attempting to read directory block (0) that is past i_size (256) [ 1086.275081][T13000] bridge0: port 1(bridge_slave_0) entered blocking state [ 1086.316974][T13000] bridge0: port 1(bridge_slave_0) entered disabled state [ 1086.325063][T13000] bridge_slave_0: entered allmulticast mode [ 1086.335248][T13000] bridge_slave_0: entered promiscuous mode [ 1086.344431][T13000] bridge0: port 2(bridge_slave_1) entered blocking state [ 1086.351716][T13000] bridge0: port 2(bridge_slave_1) entered disabled state [ 1086.359019][T13000] bridge_slave_1: entered allmulticast mode [ 1086.366391][T13000] bridge_slave_1: entered promiscuous mode [ 1086.500286][T13000] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1086.816796][T13065] bond0: option fail_over_mac: unable to set because the bond device has slaves [ 1086.975081][T13075] syz.7.1411: attempt to access beyond end of device [ 1086.975081][T13075] nbd7: rw=0, sector=6, nr_sectors = 2 limit=0 [ 1086.991438][T13075] ADFS-fs (nbd7): error: unable to read block 3, try 0 [ 1087.707869][ T5849] Bluetooth: hci1: command tx timeout [ 1088.975665][T13000] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1090.692417][ T5849] Bluetooth: hci1: command tx timeout [ 1090.769954][T13000] team0: Port device team_slave_0 added [ 1090.831631][ T5886] usb 3-1: new high-speed USB device number 7 using dummy_hcd [ 1091.009546][ T5886] usb 3-1: Using ep0 maxpacket: 32 [ 1091.079460][ T5886] usb 3-1: config 0 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 1091.125111][ T5886] usb 3-1: New USB device found, idVendor=0499, idProduct=1010, bcdDevice= 5.f5 [ 1091.134920][ T5886] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1091.143478][ T5886] usb 3-1: Product: syz [ 1091.147819][ T5886] usb 3-1: Manufacturer: syz [ 1091.152662][ T5886] usb 3-1: SerialNumber: syz [ 1091.175597][ T5886] usb 3-1: config 0 descriptor?? [ 1091.195853][ T5886] usb 3-1: Quirk or no altset; falling back to MIDI 1.0 [ 1091.415122][T13000] team0: Port device team_slave_1 added [ 1091.913940][ T5886] snd-usb-audio 3-1:0.0: probe with driver snd-usb-audio failed with error -2 [ 1092.061148][T12622] udevd[12622]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1092.181002][T13000] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1092.188507][T13000] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1092.292830][T13000] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1092.463065][T13110] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1093.131575][ T5849] Bluetooth: hci1: command tx timeout [ 1093.137933][ T5919] usb 3-1: USB disconnect, device number 7 [ 1093.347608][T13000] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1093.377724][T13000] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1093.541681][T13000] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1094.849020][T13129] loop2: detected capacity change from 0 to 8 [ 1094.911664][T13131] overlayfs: failed to clone lowerpath [ 1095.116177][ T29] audit: type=1326 audit(2000000026.140:190): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13132 comm="syz.6.1427" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3db9785d29 code=0x7ffc0000 [ 1095.564306][T13137] SQUASHFS error: xz decompression failed, data probably corrupt [ 1095.572428][T13137] SQUASHFS error: Failed to read block 0xa8: -5 [ 1095.619783][T13137] SQUASHFS error: xz decompression failed, data probably corrupt [ 1095.627890][T13137] SQUASHFS error: Failed to read block 0xa8: -5 [ 1096.502153][ T29] audit: type=1326 audit(2000000026.140:191): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13132 comm="syz.6.1427" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3db9785d29 code=0x7ffc0000 [ 1096.507334][T13000] hsr_slave_0: entered promiscuous mode [ 1096.552754][ T29] audit: type=1326 audit(2000000026.140:192): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13132 comm="syz.6.1427" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f3db9785d29 code=0x7ffc0000 [ 1096.606239][ T29] audit: type=1326 audit(2000000026.140:193): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13132 comm="syz.6.1427" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3db9785d29 code=0x7ffc0000 [ 1096.647228][ T29] audit: type=1326 audit(2000000026.150:194): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13132 comm="syz.6.1427" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3db9785d29 code=0x7ffc0000 [ 1096.682262][T13000] hsr_slave_1: entered promiscuous mode [ 1096.693652][T13000] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1096.704529][ T29] audit: type=1326 audit(2000000026.150:195): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13132 comm="syz.6.1427" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f3db9785d29 code=0x7ffc0000 [ 1096.730503][T13000] Cannot create hsr debugfs directory [ 1096.777042][ T29] audit: type=1326 audit(2000000026.150:196): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13132 comm="syz.6.1427" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3db9785d29 code=0x7ffc0000 [ 1096.991757][ T29] audit: type=1326 audit(2000000026.150:197): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13132 comm="syz.6.1427" exe="/root/syz-executor" sig=0 arch=c000003e syscall=425 compat=0 ip=0x7f3db9785d29 code=0x7ffc0000 [ 1097.952221][ T29] audit: type=1326 audit(2000000026.150:198): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13132 comm="syz.6.1427" exe="/root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7f3db9785d63 code=0x7ffc0000 [ 1098.945858][ T29] audit: type=1326 audit(2000000026.150:199): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13132 comm="syz.6.1427" exe="/root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7f3db9785d63 code=0x7ffc0000 [ 1098.977605][T13154] loop2: detected capacity change from 0 to 128 [ 1099.046399][T13154] EXT4-fs (loop2): Test dummy encryption mode enabled [ 1099.153258][T13154] EXT4-fs (loop2): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 1099.176265][T13154] ext4 filesystem being mounted at /377/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 1101.207022][T13169] fscrypt (loop2): Missing crypto API support for AES-256-XTS (API name: "xts(aes)") [ 1101.218374][T13169] overlayfs: upper fs does not support tmpfile. [ 1101.230706][T13169] fscrypt (loop2): Missing crypto API support for AES-256-XTS (API name: "xts(aes)") [ 1102.228019][T13189] loop7: detected capacity change from 0 to 1024 [ 1103.159485][ T5838] EXT4-fs (loop2): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 1103.746454][ T6855] bridge_slave_1: left allmulticast mode [ 1103.765323][ T6855] bridge_slave_1: left promiscuous mode [ 1103.771404][ T6855] bridge0: port 2(bridge_slave_1) entered disabled state [ 1103.933870][ T6855] bridge_slave_0: left allmulticast mode [ 1103.952307][ T6855] bridge_slave_0: left promiscuous mode [ 1103.959022][ T6855] bridge0: port 1(bridge_slave_0) entered disabled state [ 1110.921402][T13251] netlink: 64 bytes leftover after parsing attributes in process `syz.6.1447'. [ 1111.494382][T13237] could not allocate digest TFM handle cbcmac-aes-ce [ 1111.501295][ T5849] block nbd2: Receive control failed (result -32) [ 1111.633031][T13243] block nbd2: shutting down sockets [ 1111.989786][T13266] netlink: 'syz.6.1450': attribute type 4 has an invalid length. [ 1116.970215][ T6855] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1116.989272][ T6855] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1117.009082][ T6855] bond0 (unregistering): Released all slaves [ 1120.263503][T13313] loop7: detected capacity change from 0 to 64 [ 1120.321893][T13313] hfs: Unknown parameter '/dev/ppp' [ 1122.178757][ T1296] ieee802154 phy1 wpan1: encryption failed: -22 [ 1123.817764][T13323] loop7: detected capacity change from 0 to 512 [ 1124.190076][T13323] EXT4-fs (loop7): external journal device major/minor numbers have changed [ 1124.596065][ T6855] hsr_slave_0: left promiscuous mode [ 1124.624827][ T6855] hsr_slave_1: left promiscuous mode [ 1124.630882][ T6855] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1124.669567][ T6855] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1124.814614][T13323] EXT4-fs (loop7): failed to open journal device unknown-block(2940,205839) -6 [ 1127.829496][ T6855] team0 (unregistering): Port device team_slave_1 removed [ 1127.958147][ T6855] team0 (unregistering): Port device team_slave_0 removed [ 1132.344769][ T29] kauditd_printk_skb: 57 callbacks suppressed [ 1132.344792][ T29] audit: type=1326 audit(2000000062.540:257): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13367 comm="syz.2.1477" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f587d185d29 code=0x0 [ 1133.776506][T13375] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1138.722364][T13000] netdevsim netdevsim8 netdevsim0: renamed from eth0 [ 1138.749191][T13000] netdevsim netdevsim8 netdevsim1: renamed from eth1 [ 1139.037361][T13409] loop2: detected capacity change from 0 to 128 [ 1139.042813][T13000] netdevsim netdevsim8 netdevsim2: renamed from eth2 [ 1140.568139][T13409] ext4: Unknown parameter 'smackfstransmute' [ 1140.587626][ T29] audit: type=1326 audit(2000000071.620:258): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13405 comm="syz.2.1484" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f587d185d29 code=0x0 [ 1142.787434][ T5841] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 1142.864650][ T5841] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 1142.876856][ T5841] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 1142.899898][ T5841] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 1142.933117][ T5841] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 1142.944074][ T5841] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 1144.997801][T13469] loop7: detected capacity change from 0 to 1024 [ 1145.202686][T13469] EXT4-fs: Ignoring removed nomblk_io_submit option [ 1145.405208][ T5841] Bluetooth: hci5: command tx timeout [ 1147.741640][ T5849] Bluetooth: hci5: command tx timeout [ 1148.096444][T13469] EXT4-fs warning (device loop7): ext4_multi_mount_protect:398: Unable to create kmmpd thread for loop7. [ 1148.633893][T13439] chnl_net:caif_netlink_parms(): no params data found [ 1148.682849][T13533] loop7: detected capacity change from 0 to 8 [ 1149.825595][ T5849] Bluetooth: hci5: command tx timeout [ 1149.947273][T13542] SQUASHFS error: zstd decompression error: 10 [ 1149.954217][T13542] SQUASHFS error: zstd decompression failed, data probably corrupt [ 1149.962478][T13542] SQUASHFS error: Failed to read block 0x62b: -5 [ 1149.968947][T13542] SQUASHFS error: Unable to read metadata cache entry [629] [ 1149.976749][T13542] SQUASHFS error: Unable to read directory block [629:ff26] [ 1152.013124][ T5849] Bluetooth: hci5: command tx timeout [ 1152.493109][T13549] loop5: detected capacity change from 0 to 7 [ 1152.571678][T13549] buffer_io_error: 122 callbacks suppressed [ 1152.578375][T13549] Buffer I/O error on dev loop5, logical block 0, async page read [ 1152.636038][T13549] Buffer I/O error on dev loop5, logical block 0, async page read [ 1153.781731][T13549] Buffer I/O error on dev loop5, logical block 0, async page read [ 1153.789850][T13549] Buffer I/O error on dev loop5, logical block 0, async page read [ 1153.800932][T13549] Buffer I/O error on dev loop5, logical block 0, async page read [ 1154.015611][T13549] Buffer I/O error on dev loop5, logical block 0, async page read [ 1154.023927][T13549] Buffer I/O error on dev loop5, logical block 0, async page read [ 1155.021736][T13549] ldm_validate_partition_table(): Disk read failed. [ 1155.028562][T13549] Buffer I/O error on dev loop5, logical block 0, async page read [ 1155.313018][T13549] Buffer I/O error on dev loop5, logical block 0, async page read [ 1155.337936][T13549] Buffer I/O error on dev loop5, logical block 0, async page read [ 1155.346466][T13549] Dev loop5: unable to read RDB block 0 [ 1156.302085][T13549] loop5: unable to read partition table [ 1156.307981][T13549] loop5: partition table beyond EOD, truncated [ 1156.341599][T13549] loop_reread_partitions: partition scan of loop5 (被xڬdƤݡ [ 1156.341599][T13549] ) failed (rc=-5) [ 1156.749603][T13580] CIFS: No dialect specified on mount. Default has changed to a more secure dialect, SMB2.1 or later (e.g. SMB3.1.1), from CIFS (SMB1). To use the less secure SMB1 dialect to access old servers which do not support SMB3.1.1 (or even SMB3 or SMB2.1) specify vers=1.0 on mount. [ 1156.777203][T13580] CIFS mount error: No usable UNC path provided in device string! [ 1156.777203][T13580] [ 1156.787732][T13580] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string! [ 1158.752926][T13439] bridge0: port 1(bridge_slave_0) entered blocking state [ 1158.760333][T13439] bridge0: port 1(bridge_slave_0) entered disabled state [ 1158.768301][T13439] bridge_slave_0: entered allmulticast mode [ 1158.797689][T13439] bridge_slave_0: entered promiscuous mode [ 1158.884851][T13439] bridge0: port 2(bridge_slave_1) entered blocking state [ 1158.892178][T13439] bridge0: port 2(bridge_slave_1) entered disabled state [ 1158.899803][T13439] bridge_slave_1: entered allmulticast mode [ 1158.922192][T13439] bridge_slave_1: entered promiscuous mode [ 1162.206453][T13439] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1162.233023][T13439] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1163.095468][T13614] binder: 13613:13614 unknown command 2 [ 1163.101109][T13614] binder: 13613:13614 ioctl c0306201 20000080 returned -22 [ 1163.111724][T13614] binder: BINDER_SET_CONTEXT_MGR already set [ 1163.118473][T13614] binder: 13613:13614 ioctl 4018620d 20000040 returned -16 [ 1164.664512][T13439] team0: Port device team_slave_0 added [ 1164.745407][T13439] team0: Port device team_slave_1 added [ 1165.943461][T13502] bridge_slave_1: left allmulticast mode [ 1165.949208][T13502] bridge_slave_1: left promiscuous mode [ 1166.044339][T13502] bridge0: port 2(bridge_slave_1) entered disabled state [ 1166.228777][T13502] bridge_slave_0: left allmulticast mode [ 1167.249516][T13502] bridge_slave_0: left promiscuous mode [ 1167.314038][T13502] bridge0: port 1(bridge_slave_0) entered disabled state [ 1168.986008][T13502] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1169.580362][T13502] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1170.258861][T13502] bond0 (unregistering): Released all slaves [ 1171.168064][T13439] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1171.184177][T13439] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1171.303611][T13439] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1171.336088][T13439] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1171.365330][T13439] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1171.409785][T13439] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1173.387283][T13641] netdevsim netdevsim2 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1173.471681][T13641] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1176.678901][T13641] netdevsim netdevsim2 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1176.689855][T13641] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1176.807451][T13502] hsr_slave_0: left promiscuous mode [ 1176.817751][T13502] hsr_slave_1: left promiscuous mode [ 1176.828496][T13502] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1176.916865][T13502] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1177.567550][T13710] overlayfs: bad index found (index=index/00fb2100011fe5256bb0c243d4acb81e389e64d609cea17bc9b601000000000000, ftype=2000, origin ftype=a000). [ 1178.176155][T13502] team0 (unregistering): Port device team_slave_1 removed [ 1178.333222][T13502] team0 (unregistering): Port device team_slave_0 removed [ 1179.619065][T13439] hsr_slave_0: entered promiscuous mode [ 1179.640828][T13439] hsr_slave_1: entered promiscuous mode [ 1179.657776][T13439] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1179.686538][T13439] Cannot create hsr debugfs directory [ 1179.784264][T13641] netdevsim netdevsim2 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1179.794846][T13641] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1179.812466][T13701] syzkaller1: entered promiscuous mode [ 1179.818127][T13701] syzkaller1: entered allmulticast mode [ 1180.642522][T13641] netdevsim netdevsim2 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1180.653901][T13641] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1180.854835][T13641] netdevsim netdevsim2 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 1180.864977][T13641] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1180.882914][T13641] netdevsim netdevsim2 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 1180.891370][T13641] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1180.909101][T13641] netdevsim netdevsim2 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 1180.917571][T13641] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1180.950941][T13641] netdevsim netdevsim2 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 1180.959462][T13641] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1183.151901][ T1296] ieee802154 phy1 wpan1: encryption failed: -22 [ 1185.082206][T13761] xt_nat: multiple ranges no longer supported [ 1185.182065][T13751] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 1185.189833][T13751] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 1185.196502][T13751] Bluetooth: hci5: Opcode 0x0c1a failed: -4 [ 1185.202634][T13751] Bluetooth: hci5: Opcode 0x0406 failed: -4 [ 1185.256577][T13751] Bluetooth: hci5: Opcode 0x0406 failed: -4 [ 1185.501482][ T5849] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 1185.541789][ T5849] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 1185.689937][ T5849] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 1185.790984][ T5849] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 1185.804328][ T5849] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 1185.814159][ T5849] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 1186.197566][T13782] syz.7.1545: attempt to access beyond end of device [ 1186.197566][T13782] nbd7: rw=0, sector=2, nr_sectors = 1 limit=0 [ 1187.450821][ T5849] Bluetooth: hci3: command 0x0406 tx timeout [ 1187.781820][ T5849] Bluetooth: hci5: command 0x0c1a tx timeout [ 1187.788280][ T5849] Bluetooth: hci2: command 0x0c1a tx timeout [ 1188.110099][ T5849] Bluetooth: hci1: command tx timeout [ 1188.833765][T13439] netdevsim netdevsim8 netdevsim0: renamed from eth0 [ 1189.001312][T13439] netdevsim netdevsim8 netdevsim1: renamed from eth1 [ 1189.029108][T13758] chnl_net:caif_netlink_parms(): no params data found [ 1189.061313][T13439] netdevsim netdevsim8 netdevsim2: renamed from eth2 [ 1189.072411][T13439] netdevsim netdevsim8 netdevsim3: renamed from eth3 [ 1189.935424][T13439] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1189.954172][T13439] 8021q: adding VLAN 0 to HW filter on device team0 [ 1189.992283][T13439] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 1190.002953][T13439] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 1190.105155][ T6875] bridge0: port 1(bridge_slave_0) entered blocking state [ 1190.112515][ T6875] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1190.133519][ T6875] bridge0: port 2(bridge_slave_1) entered blocking state [ 1190.140954][ T6875] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1190.165828][ T5841] Bluetooth: hci1: command tx timeout [ 1190.171326][ T5841] Bluetooth: hci5: command 0x0c1a tx timeout [ 1190.339135][T13820] overlayfs: failed to clone upperpath [ 1191.382495][T13758] bridge0: port 1(bridge_slave_0) entered blocking state [ 1191.391655][T13758] bridge0: port 1(bridge_slave_0) entered disabled state [ 1191.398966][T13758] bridge_slave_0: entered allmulticast mode [ 1191.433513][T13758] bridge_slave_0: entered promiscuous mode [ 1191.458643][T13758] bridge0: port 2(bridge_slave_1) entered blocking state [ 1191.501747][T13758] bridge0: port 2(bridge_slave_1) entered disabled state [ 1191.560539][T13758] bridge_slave_1: entered allmulticast mode [ 1191.598897][T13758] bridge_slave_1: entered promiscuous mode [ 1191.704224][T13758] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1191.736854][T13758] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1191.905852][T13758] team0: Port device team_slave_0 added [ 1191.938202][T13758] team0: Port device team_slave_1 added [ 1192.246143][ T5841] Bluetooth: hci5: command 0x0c1a tx timeout [ 1192.255388][ T5841] Bluetooth: hci1: command tx timeout [ 1193.667620][T13758] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1193.709745][T13758] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1193.945848][T13758] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1194.082166][T13439] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1194.092914][T13758] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1194.100103][T13758] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1194.128539][T13758] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1195.077253][ T5849] Bluetooth: hci1: command tx timeout [ 1195.568514][T13758] hsr_slave_0: entered promiscuous mode [ 1195.652799][T13758] hsr_slave_1: entered promiscuous mode [ 1196.785257][T13758] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1196.793202][T13758] Cannot create hsr debugfs directory [ 1199.258122][T13439] veth0_vlan: entered promiscuous mode [ 1199.343415][T13439] veth1_vlan: entered promiscuous mode [ 1199.581916][T13439] veth0_macvtap: entered promiscuous mode [ 1200.568954][T13439] veth1_macvtap: entered promiscuous mode [ 1200.585444][T13439] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1200.681694][T13439] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1200.721071][T13439] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1200.782005][T13439] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1200.941785][T13439] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1201.016313][T13439] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1201.310360][T13914] ip6t_srh: unknown srh match flags 4001 [ 1202.162507][T13439] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1203.217477][T13439] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1203.227606][T13439] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1203.238298][T13439] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1203.248647][T13439] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1203.259711][T13439] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1203.271315][T13439] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1203.319674][ T5841] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 1203.341265][ T5841] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 1203.401837][ T5841] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 1203.442440][ T5889] hid-generic 0005:000D:2F19.0001: unknown main item tag 0x2 [ 1203.474882][ T5889] hid-generic 0005:000D:2F19.0001: hidraw0: BLUETOOTH HID vb5.14 Device [syz0] on aa:aa:aa:aa:aa:aa [ 1203.538011][ T5841] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 1203.584684][ T5841] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 1203.593900][ T5841] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 1204.574060][T13758] netdevsim netdevsim9 netdevsim0: renamed from eth0 [ 1204.763138][T13758] netdevsim netdevsim9 netdevsim1: renamed from eth1 [ 1204.830717][T13758] netdevsim netdevsim9 netdevsim2: renamed from eth2 [ 1204.880505][T13758] netdevsim netdevsim9 netdevsim3: renamed from eth3 [ 1205.186730][T13758] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1205.204171][T13758] 8021q: adding VLAN 0 to HW filter on device team0 [ 1205.245294][T13758] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 1205.255805][T13758] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 1205.306178][ T4444] bridge0: port 1(bridge_slave_0) entered blocking state [ 1205.313417][ T4444] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1205.343590][ T4444] bridge0: port 2(bridge_slave_1) entered blocking state [ 1205.350856][ T4444] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1205.874260][ T5841] Bluetooth: hci4: command tx timeout [ 1205.964182][T13936] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1207.016809][T13950] syz.6.1571: attempt to access beyond end of device [ 1207.016809][T13950] nbd6: rw=0, sector=2, nr_sectors = 1 limit=0 [ 1207.938703][ T5841] Bluetooth: hci4: command tx timeout [ 1208.099149][T13959] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1574'. [ 1208.290161][T13758] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1208.331787][T13965] loop7: detected capacity change from 0 to 1024 [ 1209.401252][T13974] hfsplus: xattr searching failed [ 1210.220308][ T5849] Bluetooth: hci4: command tx timeout [ 1210.246305][T13921] chnl_net:caif_netlink_parms(): no params data found [ 1211.128531][T13979] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 1211.134812][T13979] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 1211.141054][T13979] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 1211.149196][T13979] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 1211.250000][T13979] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 1211.284342][T13979] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 1211.290687][T13979] Bluetooth: hci4: Opcode 0x0406 failed: -4 [ 1211.310413][T13979] Bluetooth: hci4: Opcode 0x0406 failed: -4 [ 1211.715484][T13921] bridge0: port 1(bridge_slave_0) entered blocking state [ 1211.747222][T13921] bridge0: port 1(bridge_slave_0) entered disabled state [ 1212.742700][T13921] bridge_slave_0: entered allmulticast mode [ 1213.202218][T13921] bridge_slave_0: entered promiscuous mode [ 1213.280201][ T5849] Bluetooth: hci1: command 0x0c1a tx timeout [ 1213.286828][ T5849] Bluetooth: hci2: command 0x0c1a tx timeout [ 1213.293316][ T5841] Bluetooth: hci3: command 0x0406 tx timeout [ 1213.315837][T13996] veth0_to_team: entered promiscuous mode [ 1213.323058][T13996] veth0_to_team: entered allmulticast mode [ 1213.480794][T13999] Bluetooth: hci4: command 0x0c1a tx timeout [ 1214.324078][T13921] bridge0: port 2(bridge_slave_1) entered blocking state [ 1214.331261][T13921] bridge0: port 2(bridge_slave_1) entered disabled state [ 1214.483761][T13921] bridge_slave_1: entered allmulticast mode [ 1214.491052][T13921] bridge_slave_1: entered promiscuous mode [ 1215.377879][T13999] Bluetooth: hci1: command 0x0c1a tx timeout [ 1215.522065][T13999] Bluetooth: hci4: command 0x0c1a tx timeout [ 1215.715072][T13921] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1215.729644][T13921] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1215.788071][T13758] veth0_vlan: entered promiscuous mode [ 1215.820501][T13758] veth1_vlan: entered promiscuous mode [ 1215.857180][ T6875] bridge_slave_1: left allmulticast mode [ 1215.863139][ T6875] bridge_slave_1: left promiscuous mode [ 1215.869074][ T6875] bridge0: port 2(bridge_slave_1) entered disabled state [ 1215.892815][ T6875] bridge_slave_0: left allmulticast mode [ 1215.898732][ T6875] bridge_slave_0: left promiscuous mode [ 1215.943971][ T6875] bridge0: port 1(bridge_slave_0) entered disabled state [ 1217.744610][T13999] Bluetooth: hci1: command 0x0c1a tx timeout [ 1217.750820][T13999] Bluetooth: hci4: command 0x0c1a tx timeout [ 1220.045698][ T6875] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1220.122105][ T6875] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1220.144942][ T6875] bond0 (unregistering): Released all slaves [ 1221.369688][T13921] team0: Port device team_slave_0 added [ 1221.388705][T13921] team0: Port device team_slave_1 added [ 1222.712815][ T6875] hsr_slave_0: left promiscuous mode [ 1222.718996][ T6875] hsr_slave_1: left promiscuous mode [ 1222.741987][ T6875] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1223.063346][ T6875] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1223.270799][ T6875] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1223.300115][ T6875] veth1_macvtap: left promiscuous mode [ 1223.305928][ T6875] veth0_macvtap: left promiscuous mode [ 1223.312297][ T6875] veth1_vlan: left promiscuous mode [ 1223.317717][ T6875] veth0_vlan: left promiscuous mode [ 1225.590140][ T6875] team0 (unregistering): Port device team_slave_1 removed [ 1225.726163][ T6875] team0 (unregistering): Port device team_slave_0 removed [ 1227.565459][T13921] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1227.579632][T13921] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1227.621989][T13921] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1227.691011][T13758] veth0_macvtap: entered promiscuous mode [ 1227.733269][T13921] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1227.740300][T13921] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1227.824896][T13921] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1229.136503][T13758] veth1_macvtap: entered promiscuous mode [ 1230.140750][T13921] hsr_slave_0: entered promiscuous mode [ 1230.332065][T13921] hsr_slave_1: entered promiscuous mode [ 1230.494835][T13921] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1230.505396][T13921] Cannot create hsr debugfs directory [ 1230.533247][T13758] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1230.558218][T13758] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1230.571108][T13758] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1230.592646][ T5854] Bluetooth: hci3: ACL packet for unknown connection handle 200 [ 1230.799114][T13758] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1231.871573][T13758] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1231.961769][T13758] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1231.991602][T13758] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1232.273509][T13758] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1232.316235][T13758] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1232.327525][T13758] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1232.337510][T13758] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1232.348292][T13758] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1232.359629][T13758] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1232.473937][T13758] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1232.519098][T13758] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1232.559826][T13758] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1232.591266][T13758] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1232.647722][T13758] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1232.671522][T13758] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1232.711599][T13758] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1232.731718][T13758] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1232.801469][T13758] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1232.858592][T13758] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1232.891480][T13758] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1232.911721][T13758] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1232.991547][ T5886] usb 8-1: new high-speed USB device number 2 using dummy_hcd [ 1232.992141][T13758] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1233.121063][T13758] netdevsim netdevsim9 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1233.130052][T13758] netdevsim netdevsim9 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1233.139262][T13758] netdevsim netdevsim9 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1233.148181][T13758] netdevsim netdevsim9 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1233.176031][ T5886] usb 8-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 1233.188351][ T5886] usb 8-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 1233.241619][ T5886] usb 8-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 1233.261188][ T5886] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1233.311164][T14132] raw-gadget.0 gadget.7: fail, usb_ep_enable returned -22 [ 1233.339000][ T5886] usb 8-1: Quirk or no altset; falling back to MIDI 1.0 [ 1235.281308][ T5886] usb 8-1: USB disconnect, device number 2 [ 1235.316773][T14088] udevd[14088]: setting mode of /dev/bus/usb/008/002 to 020664 failed: No such file or directory [ 1235.327769][T14088] udevd[14088]: setting owner of /dev/bus/usb/008/002 to uid=0, gid=0 failed: No such file or directory [ 1235.746217][T14144] udevd[14144]: error opening ATTR{/sys/devices/platform/dummy_hcd.7/usb8/8-1/8-1:27.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1235.944038][ T5973] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1236.236669][ T5973] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1237.287496][ T5973] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1237.476364][ T5973] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1238.578783][T14166] pci 0000:00:05.0: vgaarb: VGA decodes changed: olddecodes=io+mem,decodes=io+mem:owns=io+mem [ 1239.082370][T14166] loop7: detected capacity change from 0 to 32768 [ 1239.144793][T14166] gfs2: fsid=syz:syz: Trying to join cluster "lock_nolock", "syz:syz" [ 1239.153573][T14166] gfs2: fsid=syz:syz: Now mounting FS (format 1801)... [ 1239.215203][T14166] gfs2: fsid=syz:syz.0: journal 0 mapped with 22 extents in 0ms [ 1239.243587][ T5900] gfs2: fsid=syz:syz.0: jid=0, already locked for use [ 1239.251149][ T5900] gfs2: fsid=syz:syz.0: jid=0: Looking at journal... [ 1239.263088][ T5900] kworker/0:7: attempt to access beyond end of device [ 1239.263088][ T5900] loop7: rw=0, sector=34233384960, nr_sectors = 8 limit=32768 [ 1239.451578][ T5900] gfs2: fsid=syz:syz.0: jid=0: Failed [ 1239.462597][T14166] gfs2: fsid=syz:syz.0: error recovering journal 0: -5 [ 1240.528495][T14171] Can't find ip_set type hash:i [ 1245.028689][ T1296] ieee802154 phy1 wpan1: encryption failed: -22 [ 1246.530007][T13921] netdevsim netdevsim8 netdevsim0: renamed from eth0 [ 1246.809834][T13921] netdevsim netdevsim8 netdevsim1: renamed from eth1 [ 1246.830707][T13921] netdevsim netdevsim8 netdevsim2: renamed from eth2 [ 1246.898522][T13921] netdevsim netdevsim8 netdevsim3: renamed from eth3 [ 1247.967412][T13921] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1248.072392][T13921] 8021q: adding VLAN 0 to HW filter on device team0 [ 1248.710225][ T6875] bridge0: port 1(bridge_slave_0) entered blocking state [ 1248.717566][ T6875] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1248.966477][T13921] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 1248.999707][T13921] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 1250.263432][T13498] bridge0: port 2(bridge_slave_1) entered blocking state [ 1250.270717][T13498] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1251.431062][T14260] overlayfs: failed to resolve './file1': -2 [ 1254.619620][T13921] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1255.874883][T14293] netlink: 28 bytes leftover after parsing attributes in process `syz.7.1635'. [ 1258.590503][ T6875] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1258.613781][ T6875] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1261.444396][T14323] loop7: detected capacity change from 0 to 1024 [ 1262.419517][T14323] EXT4-fs (loop7): stripe (65535) is not aligned with cluster size (16), stripe is disabled [ 1262.470847][T14323] JBD2: no valid journal superblock found [ 1262.477206][T14323] EXT4-fs (loop7): Could not load journal inode [ 1266.903152][T14364] overlayfs: failed to resolve './file0': -2 [ 1269.274365][T13999] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 1270.306184][T13999] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 1270.317862][T13999] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 1270.329099][T13999] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 1270.336955][T13999] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 1270.344827][T13999] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 1272.564309][T13999] Bluetooth: hci4: command tx timeout [ 1273.545236][T14413] xt_physdev: --physdev-out and --physdev-is-out only supported in the FORWARD and POSTROUTING chains with bridged traffic [ 1274.013248][T14415] netlink: 28 bytes leftover after parsing attributes in process `syz.7.1655'. [ 1274.645457][T13999] Bluetooth: hci4: command tx timeout [ 1276.901444][ T5854] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 1276.915240][ T5854] Bluetooth: hci4: command tx timeout [ 1276.925687][ T5854] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 1276.937227][ T5854] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 1276.979211][ T5854] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 1276.988001][ T5854] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 1276.998297][ T5854] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 1279.197617][ T5854] Bluetooth: hci4: command tx timeout [ 1279.280250][ T5854] Bluetooth: hci5: command tx timeout [ 1279.386202][T14374] chnl_net:caif_netlink_parms(): no params data found [ 1281.310896][ T6875] bridge_slave_1: left allmulticast mode [ 1281.335073][ T6875] bridge_slave_1: left promiscuous mode [ 1281.341084][ T6875] bridge0: port 2(bridge_slave_1) entered disabled state [ 1281.356905][ T6875] bridge_slave_0: left allmulticast mode [ 1281.363124][T13999] Bluetooth: hci5: command tx timeout [ 1281.372747][ T6875] bridge_slave_0: left promiscuous mode [ 1281.412382][ T6875] bridge0: port 1(bridge_slave_0) entered disabled state [ 1283.778050][T13999] Bluetooth: hci5: command tx timeout [ 1283.945237][ T6875] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1284.026713][ T6875] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1284.062729][ T6875] bond0 (unregistering): Released all slaves [ 1284.150021][T14509] openvswitch: netlink: IP tunnel dst address not specified [ 1285.217654][T14428] chnl_net:caif_netlink_parms(): no params data found [ 1285.438761][ T6875] hsr_slave_0: left promiscuous mode [ 1285.445264][ T6875] hsr_slave_1: left promiscuous mode [ 1285.462869][ T6875] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1285.479604][ T6875] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1285.873814][T13999] Bluetooth: hci5: command tx timeout [ 1291.616070][T14541] input: syz0 as /devices/virtual/input/input10 [ 1292.030827][ T6875] team0 (unregistering): Port device team_slave_1 removed [ 1292.290959][ T6875] team0 (unregistering): Port device team_slave_0 removed [ 1292.528418][T14545] loop7: detected capacity change from 0 to 512 [ 1292.578800][T14545] EXT4-fs error (device loop7): ext4_clear_blocks:876: inode #13: comm syz.7.1681: attempt to clear invalid blocks 2 len 1 [ 1292.683031][T14545] EXT4-fs error (device loop7): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 218 vs 220 free clusters [ 1292.717017][T14545] EXT4-fs error (device loop7): ext4_free_branches:1023: inode #13: comm syz.7.1681: invalid indirect mapped block 1819239214 (level 0) [ 1292.760118][T14545] EXT4-fs error (device loop7): ext4_free_branches:1023: inode #13: comm syz.7.1681: invalid indirect mapped block 1819239214 (level 1) [ 1292.782584][T14545] EXT4-fs (loop7): 1 truncate cleaned up [ 1292.790242][T14545] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1292.838071][T14545] EXT4-fs warning (device loop7): dx_probe:833: inode #2: comm syz.7.1681: Unrecognised inode hash code 20 [ 1292.906733][T14548] EXT4-fs warning (device loop7): dx_probe:833: inode #2: comm syz.7.1681: Unrecognised inode hash code 20 [ 1292.925537][T14545] EXT4-fs warning (device loop7): dx_probe:966: inode #2: comm syz.7.1681: Corrupt directory, running e2fsck is recommended [ 1292.939851][T14548] EXT4-fs warning (device loop7): dx_probe:966: inode #2: comm syz.7.1681: Corrupt directory, running e2fsck is recommended [ 1296.411807][T14374] bridge0: port 1(bridge_slave_0) entered blocking state [ 1296.419215][T14374] bridge0: port 1(bridge_slave_0) entered disabled state [ 1296.439589][T14374] bridge_slave_0: entered allmulticast mode [ 1296.450784][T14374] bridge_slave_0: entered promiscuous mode [ 1296.492614][T14374] bridge0: port 2(bridge_slave_1) entered blocking state [ 1296.499779][T14374] bridge0: port 2(bridge_slave_1) entered disabled state [ 1296.526307][T14374] bridge_slave_1: entered allmulticast mode [ 1296.534202][T14374] bridge_slave_1: entered promiscuous mode [ 1297.035146][T14543] netlink: 8 bytes leftover after parsing attributes in process `syz.7.1681'. [ 1297.539097][T10134] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1298.075069][T14374] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1298.249843][T14428] bridge0: port 1(bridge_slave_0) entered blocking state [ 1298.513079][T14428] bridge0: port 1(bridge_slave_0) entered disabled state [ 1298.524281][T14428] bridge_slave_0: entered allmulticast mode [ 1298.532299][T14428] bridge_slave_0: entered promiscuous mode [ 1298.584018][T14374] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1302.053156][T14428] bridge0: port 2(bridge_slave_1) entered blocking state [ 1302.061279][T14428] bridge0: port 2(bridge_slave_1) entered disabled state [ 1302.111947][T14428] bridge_slave_1: entered allmulticast mode [ 1302.123864][T14428] bridge_slave_1: entered promiscuous mode [ 1302.461866][T14374] team0: Port device team_slave_0 added [ 1303.526819][T14428] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1303.891694][T14609] netlink: 'syz.0.1691': attribute type 10 has an invalid length. [ 1303.899927][T14609] netlink: 2 bytes leftover after parsing attributes in process `syz.0.1691'. [ 1304.310702][T14428] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1304.413531][T14374] team0: Port device team_slave_1 added [ 1305.811949][ T1296] ieee802154 phy1 wpan1: encryption failed: -22 [ 1306.915769][T14374] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1306.929279][T14374] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1306.959574][T14374] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1307.137206][T14428] team0: Port device team_slave_0 added [ 1307.225228][T14619] dvmrp0: entered allmulticast mode [ 1307.231535][T14374] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1307.344520][T14374] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1307.544591][T14374] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1308.530362][T14428] team0: Port device team_slave_1 added [ 1310.130659][T14428] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1310.212207][T14428] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1310.300216][T14428] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1310.499540][T14428] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1310.506813][T14428] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1310.533577][T14428] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1310.888302][T14374] hsr_slave_0: entered promiscuous mode [ 1310.900589][T14374] hsr_slave_1: entered promiscuous mode [ 1311.513176][T14374] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1311.522396][T14374] Cannot create hsr debugfs directory [ 1313.462368][T14660] loop7: detected capacity change from 0 to 16 [ 1313.731877][T14660] erofs (device loop7): mounted with root inode @ nid 36. [ 1313.808544][T14428] hsr_slave_0: entered promiscuous mode [ 1313.855373][T14428] hsr_slave_1: entered promiscuous mode [ 1314.041848][T14428] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1314.063451][T14428] Cannot create hsr debugfs directory [ 1315.433066][T14678] loop7: detected capacity change from 0 to 1024 [ 1315.484703][T14678] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1317.669098][T10134] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1317.996055][T14698] loop7: detected capacity change from 0 to 256 [ 1318.159473][T14698] FAT-fs (loop7): Directory bread(block 64) failed [ 1318.191611][T14698] FAT-fs (loop7): Directory bread(block 65) failed [ 1318.211825][T14698] FAT-fs (loop7): Directory bread(block 66) failed [ 1318.244536][T14698] FAT-fs (loop7): Directory bread(block 67) failed [ 1318.266112][T14698] FAT-fs (loop7): Directory bread(block 68) failed [ 1318.283674][T14698] FAT-fs (loop7): Directory bread(block 69) failed [ 1318.290356][T14698] FAT-fs (loop7): Directory bread(block 70) failed [ 1318.308002][T14698] FAT-fs (loop7): Directory bread(block 71) failed [ 1318.318623][T14698] FAT-fs (loop7): Directory bread(block 72) failed [ 1318.341231][T14698] FAT-fs (loop7): Directory bread(block 73) failed [ 1323.505276][ T5839] kernel write not supported for file bpf-prog (pid: 5839 comm: kworker/1:3) [ 1323.559537][T14744] loop7: detected capacity change from 0 to 256 [ 1323.597202][T14744] exFAT-fs (loop7): failed to load upcase table (idx : 0x000104d0, chksum : 0x60d18cac, utbl_chksum : 0xe619d30d) [ 1324.274946][T14428] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 1324.305913][T14428] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 1324.335750][T14428] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 1324.355627][T14428] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 1325.192586][ T5854] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 1325.210156][ T5854] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 1325.224772][ T5854] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 1325.258584][ T5854] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 1325.271341][ T5854] Bluetooth: hci6: unexpected cc 0x0c25 length: 249 > 3 [ 1325.279484][ T5854] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 1325.570957][ T5900] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 1325.655443][ T5900] hid-generic 0000:0000:0000.0002: hidraw0: HID v0.00 Device [syz1] on syz0 [ 1325.834935][T14428] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1325.929874][T14428] 8021q: adding VLAN 0 to HW filter on device team0 [ 1326.098961][ T254] bridge0: port 1(bridge_slave_0) entered blocking state [ 1326.106210][ T254] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1326.143253][ T254] bridge0: port 2(bridge_slave_1) entered blocking state [ 1326.150478][ T254] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1326.385116][T14428] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 1326.455241][T14783] chnl_net:caif_netlink_parms(): no params data found [ 1326.487084][T14819] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1724'. [ 1326.905771][ T61] bridge_slave_1: left allmulticast mode [ 1326.920787][ T61] bridge_slave_1: left promiscuous mode [ 1326.952461][ T61] bridge0: port 2(bridge_slave_1) entered disabled state [ 1326.996800][ T61] bridge_slave_0: left allmulticast mode [ 1327.021633][ T61] bridge_slave_0: left promiscuous mode [ 1327.109347][ T61] bridge0: port 1(bridge_slave_0) entered disabled state [ 1327.364052][ T5854] Bluetooth: hci6: command tx timeout [ 1328.259680][ T61] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1328.311229][ T61] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1328.384382][ T61] bond0 (unregistering): Released all slaves [ 1328.494531][T14783] bridge0: port 1(bridge_slave_0) entered blocking state [ 1328.526528][T14783] bridge0: port 1(bridge_slave_0) entered disabled state [ 1328.553549][T14783] bridge_slave_0: entered allmulticast mode [ 1328.617667][T14783] bridge_slave_0: entered promiscuous mode [ 1328.663015][T14783] bridge0: port 2(bridge_slave_1) entered blocking state [ 1328.749154][T14783] bridge0: port 2(bridge_slave_1) entered disabled state [ 1328.768706][T14783] bridge_slave_1: entered allmulticast mode [ 1328.937167][T14783] bridge_slave_1: entered promiscuous mode [ 1329.385068][T14428] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1329.451690][ T5854] Bluetooth: hci6: command tx timeout [ 1329.474828][T14851] loop7: detected capacity change from 0 to 2048 [ 1329.491323][T14849] bond0: left promiscuous mode [ 1329.496558][T14849] bond_slave_0: left promiscuous mode [ 1329.502332][T14849] bond_slave_1: left promiscuous mode [ 1329.507885][T14849] vxlan0: left promiscuous mode [ 1329.513166][T14849] bridge0: left promiscuous mode [ 1329.520353][T14849] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1329.558780][T14849] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 1329.606218][T14851] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1329.722639][ T29] audit: type=1800 audit(2000000516.700:259): pid=14851 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.7.1727" name="file1" dev="loop7" ino=15 res=0 errno=0 [ 1332.113005][ T5854] Bluetooth: hci6: command tx timeout [ 1332.968131][T10134] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1333.331925][T13999] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 1333.344815][T13999] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 1333.356312][T13999] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 1333.403796][T13999] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 1333.414801][T13999] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 1333.422547][T13999] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 1334.314859][T13999] Bluetooth: hci6: command tx timeout [ 1334.520623][ T61] hsr_slave_0: left promiscuous mode [ 1334.797154][ T61] hsr_slave_1: left promiscuous mode [ 1334.803602][ T61] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1334.829436][ T61] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1335.554643][T13999] Bluetooth: hci4: command tx timeout [ 1336.878794][T14922] loop7: detected capacity change from 0 to 64 [ 1337.039603][ T61] team0 (unregistering): Port device team_slave_1 removed [ 1337.625911][T13999] Bluetooth: hci4: command tx timeout [ 1337.777330][ T61] team0 (unregistering): Port device team_slave_0 removed [ 1338.412792][T14783] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1338.693631][T14783] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1338.983371][T14950] loop7: detected capacity change from 0 to 64 [ 1339.756956][T13999] Bluetooth: hci4: command tx timeout [ 1339.806886][T14783] team0: Port device team_slave_0 added [ 1339.819059][T14783] team0: Port device team_slave_1 added [ 1339.873936][T14944] batadv0: entered promiscuous mode [ 1339.938912][T14944] batadv0: left promiscuous mode [ 1341.255769][T14783] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1341.271600][T14783] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1341.392355][T14783] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1341.842076][T13999] Bluetooth: hci4: command tx timeout [ 1342.129776][T14976] loop7: detected capacity change from 0 to 64 [ 1342.183347][T14783] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1342.190367][T14783] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1342.218249][T14976] hfs: Unknown parameter '/dev/ppp' [ 1342.330190][T14783] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1342.524847][T14982] overlayfs: failed to resolve './file2': -2 [ 1343.808864][T14879] chnl_net:caif_netlink_parms(): no params data found [ 1344.221739][T14783] hsr_slave_0: entered promiscuous mode [ 1344.252961][T14783] hsr_slave_1: entered promiscuous mode [ 1344.261692][T14783] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1344.289162][T14783] Cannot create hsr debugfs directory [ 1352.346109][T14879] bridge0: port 1(bridge_slave_0) entered blocking state [ 1352.361652][T14879] bridge0: port 1(bridge_slave_0) entered disabled state [ 1352.374087][T14879] bridge_slave_0: entered allmulticast mode [ 1352.392743][T14879] bridge_slave_0: entered promiscuous mode [ 1352.658063][T15071] trusted_key: encrypted_key: key user:syz not found [ 1352.670092][T14879] bridge0: port 2(bridge_slave_1) entered blocking state [ 1352.686887][T14879] bridge0: port 2(bridge_slave_1) entered disabled state [ 1352.696339][T14879] bridge_slave_1: entered allmulticast mode [ 1353.333689][T14879] bridge_slave_1: entered promiscuous mode [ 1355.161813][T14879] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1355.530114][T14879] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1355.973655][T15103] ksmbd: Daemon and kernel module version mismatch. ksmbd: 0, kernel module: 1. User-space ksmbd should terminate. [ 1358.070793][T15113] loop7: detected capacity change from 0 to 8 [ 1358.207747][ T29] audit: type=1326 audit(2000000545.090:260): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15110 comm="syz.7.1769" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0c8f585d29 code=0x7ffc0000 [ 1358.749490][ T29] audit: type=1326 audit(2000000545.090:261): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15110 comm="syz.7.1769" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0c8f585d29 code=0x7ffc0000 [ 1358.867080][ T29] audit: type=1326 audit(2000000545.090:262): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15110 comm="syz.7.1769" exe="/root/syz-executor" sig=0 arch=c000003e syscall=261 compat=0 ip=0x7f0c8f585d29 code=0x7ffc0000 [ 1358.902479][T14879] team0: Port device team_slave_0 added [ 1358.914329][T14879] team0: Port device team_slave_1 added [ 1358.921505][ T29] audit: type=1326 audit(2000000545.090:263): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15110 comm="syz.7.1769" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0c8f585d29 code=0x7ffc0000 [ 1358.946395][ T29] audit: type=1326 audit(2000000545.090:264): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15110 comm="syz.7.1769" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0c8f585d29 code=0x7ffc0000 [ 1359.069425][ T29] audit: type=1326 audit(2000000545.090:265): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15110 comm="syz.7.1769" exe="/root/syz-executor" sig=0 arch=c000003e syscall=319 compat=0 ip=0x7f0c8f585d29 code=0x7ffc0000 [ 1359.263548][ T29] audit: type=1326 audit(2000000545.100:266): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15110 comm="syz.7.1769" exe="/root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7f0c8f585d63 code=0x7ffc0000 [ 1359.302554][T14879] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1359.318626][T14879] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1359.349113][ T29] audit: type=1326 audit(2000000545.100:267): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15110 comm="syz.7.1769" exe="/root/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7f0c8f5847df code=0x7ffc0000 [ 1359.637322][T14879] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1360.281499][ T29] audit: type=1326 audit(2000000545.100:268): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15110 comm="syz.7.1769" exe="/root/syz-executor" sig=0 arch=c000003e syscall=11 compat=0 ip=0x7f0c8f585db7 code=0x7ffc0000 [ 1360.311585][T14879] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1360.318642][T14879] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1360.401581][T14879] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1360.490020][ T29] audit: type=1326 audit(2000000545.100:269): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15110 comm="syz.7.1769" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f0c8f584690 code=0x7ffc0000 [ 1360.626863][T15128] loop7: detected capacity change from 0 to 64 [ 1360.673261][T15128] hfs: Unknown parameter '9?G~W̑1D% n?sX2h5On㷧]|s' [ 1360.737088][ T61] bridge_slave_1: left allmulticast mode [ 1360.752034][ T61] bridge_slave_1: left promiscuous mode [ 1360.763335][ T61] bridge0: port 2(bridge_slave_1) entered disabled state [ 1360.792606][ T61] bridge_slave_0: left allmulticast mode [ 1360.805858][ T61] bridge_slave_0: left promiscuous mode [ 1360.829623][ T61] bridge0: port 1(bridge_slave_0) entered disabled state [ 1364.214161][T15160] ptrace attach of "./syz-executor exec"[5834] was attempted by " [ 1365.132625][T15165] xt_l2tp: v2 doesn't support IP mode [ 1366.868594][ T29] kauditd_printk_skb: 13 callbacks suppressed [ 1366.868616][ T29] audit: type=1326 audit(2000000553.900:283): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15164 comm="syz.7.1779" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f0c8f585d29 code=0x0 [ 1374.452019][ T61] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1374.628728][ T61] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1374.846616][ T61] bond0 (unregistering): Released all slaves [ 1374.908441][T14879] hsr_slave_0: entered promiscuous mode [ 1374.948192][T14879] hsr_slave_1: entered promiscuous mode [ 1374.990757][T14879] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1375.077161][T14879] Cannot create hsr debugfs directory [ 1375.533267][ T61] hsr_slave_0: left promiscuous mode [ 1375.590646][ T61] hsr_slave_1: left promiscuous mode [ 1375.692527][ T61] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1375.822117][ T61] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1375.936483][T15240] befs: (nbd7): No write support. Marking filesystem read-only [ 1375.946629][T15240] syz.7.1792: attempt to access beyond end of device [ 1375.946629][T15240] nbd7: rw=0, sector=0, nr_sectors = 2 limit=0 [ 1375.960074][T15240] befs: (nbd7): unable to read superblock [ 1376.526642][T10704] hid-generic 0080:0000:0003.0003: unknown main item tag 0x0 [ 1376.568656][T10704] hid-generic 0080:0000:0003.0003: unknown main item tag 0x0 [ 1377.371817][T10704] hid-generic 0080:0000:0003.0003: unknown main item tag 0x0 [ 1377.379271][T10704] hid-generic 0080:0000:0003.0003: unknown main item tag 0x0 [ 1377.387307][T10704] hid-generic 0080:0000:0003.0003: unknown main item tag 0x0 [ 1377.395182][T10704] hid-generic 0080:0000:0003.0003: unknown main item tag 0x0 [ 1377.402768][T10704] hid-generic 0080:0000:0003.0003: unknown main item tag 0x0 [ 1377.410211][T10704] hid-generic 0080:0000:0003.0003: unknown main item tag 0x0 [ 1377.418827][T10704] hid-generic 0080:0000:0003.0003: unknown main item tag 0x0 [ 1377.427223][T10704] hid-generic 0080:0000:0003.0003: unknown main item tag 0x0 [ 1377.434876][T10704] hid-generic 0080:0000:0003.0003: unknown main item tag 0x0 [ 1377.443038][T10704] hid-generic 0080:0000:0003.0003: unknown main item tag 0x0 [ 1377.450483][T10704] hid-generic 0080:0000:0003.0003: unknown main item tag 0x0 [ 1377.458300][T10704] hid-generic 0080:0000:0003.0003: unknown main item tag 0x0 [ 1377.465965][T10704] hid-generic 0080:0000:0003.0003: unknown main item tag 0x0 [ 1377.474246][T10704] hid-generic 0080:0000:0003.0003: unknown main item tag 0x0 [ 1377.486258][T10704] hid-generic 0080:0000:0003.0003: unknown main item tag 0x0 [ 1377.494047][T10704] hid-generic 0080:0000:0003.0003: unknown main item tag 0x0 [ 1377.501775][T10704] hid-generic 0080:0000:0003.0003: unknown main item tag 0x0 [ 1377.678002][T10704] hid-generic 0080:0000:0003.0003: hidraw0: HID v0.00 Device [syz1] on syz1 [ 1380.867844][ T61] team0 (unregistering): Port device team_slave_1 removed [ 1381.844569][T15276] netlink: 12 bytes leftover after parsing attributes in process `syz.7.1801'. [ 1382.212263][T15274] EXT4-fs error (device loop6): dx_probe:823: inode #2: comm syz.6.1799: Attempting to read directory block (0) that is past i_size (256) [ 1382.742072][ T61] team0 (unregistering): Port device team_slave_0 removed [ 1383.489255][T15289] netlink: 190580 bytes leftover after parsing attributes in process `syz.6.1804'. [ 1386.017297][ T5854] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 1386.057921][ T5854] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 1386.121949][ T5854] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 1386.135634][ T5854] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 1386.143482][ T5854] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 1386.155964][ T5854] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 1386.243583][T15313] xt_l2tp: wrong L2TP version: 0 [ 1387.681442][ C0] EXT4-fs (loop6): error count since last fsck: 5 [ 1387.688897][ C0] EXT4-fs (loop6): initial error at time 2000000016: ext4_xattr_ibody_find:2240: inode 15 [ 1387.698969][ C0] EXT4-fs (loop6): last error at time 2000000569: dx_probe:823: inode 2 [ 1390.825440][ T5854] Bluetooth: hci5: command tx timeout [ 1392.492697][T15345] loop7: detected capacity change from 0 to 16 [ 1392.529599][T15345] erofs (device loop7): algorithm 1 isn't enabled on this kernel [ 1393.133682][ T5854] Bluetooth: hci5: command tx timeout [ 1393.411015][T15344] sctp: [Deprecated]: syz.0.1813 (pid 15344) Use of int in max_burst socket option deprecated. [ 1393.411015][T15344] Use struct sctp_assoc_value instead [ 1393.670664][T13999] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 1393.699014][T13999] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 1393.712660][T13999] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 1393.723400][T13999] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 1393.731187][T13999] Bluetooth: hci6: unexpected cc 0x0c25 length: 249 > 3 [ 1393.743784][T13999] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 1393.930983][T15364] loop7: detected capacity change from 0 to 512 [ 1394.334991][T15371] cgroup: none used incorrectly [ 1394.959686][T15364] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1394.997696][T15364] ext4 filesystem being mounted at /243/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 1395.206214][T13999] Bluetooth: hci5: command tx timeout [ 1395.225737][T15364] EXT4-fs error (device loop7): ext4_ext_check_inode:524: inode #2: comm syz.7.1817: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 1, max 4(4), depth 0(0) [ 1395.310013][T15364] EXT4-fs (loop7): Remounting filesystem read-only [ 1395.442853][ T29] audit: type=1326 audit(2000000582.480:284): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15362 comm="syz.7.1817" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f0c8f585d29 code=0x0 [ 1395.648941][T13999] Bluetooth: hci3: unexpected event for opcode 0x0c7c [ 1395.841756][T13999] Bluetooth: hci6: command tx timeout [ 1395.886467][T15308] chnl_net:caif_netlink_parms(): no params data found [ 1396.167343][T10134] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1396.270347][T15410] netlink: 20 bytes leftover after parsing attributes in process `syz.6.1820'. [ 1397.282128][T13999] Bluetooth: hci5: command tx timeout [ 1398.060201][T13999] Bluetooth: hci6: command tx timeout [ 1398.467583][T15308] bridge0: port 1(bridge_slave_0) entered blocking state [ 1398.479443][T15418] loop7: detected capacity change from 0 to 2048 [ 1398.496659][T15308] bridge0: port 1(bridge_slave_0) entered disabled state [ 1398.504822][T15418] udf: Unknown parameter '0xffffffffffffffffĭkp;/uH6Rϛ"U\:Jtz Z'Ӡ! mkTNnYd;'Xwmj*eN [ 1398.504822][T15418] s' [ 1398.539682][T15308] bridge_slave_0: entered allmulticast mode [ 1398.558464][T15308] bridge_slave_0: entered promiscuous mode [ 1398.596468][T15354] chnl_net:caif_netlink_parms(): no params data found [ 1399.070781][T15308] bridge0: port 2(bridge_slave_1) entered blocking state [ 1399.722272][T15418] netlink: 104 bytes leftover after parsing attributes in process `syz.7.1821'. [ 1399.741794][T13999] Bluetooth: hci3: Controller not accepting commands anymore: ncmd = 0 [ 1399.750871][T13999] Bluetooth: hci3: Injecting HCI hardware error event [ 1399.766291][ T5854] Bluetooth: hci3: hardware error 0x00 [ 1399.766313][T15308] bridge0: port 2(bridge_slave_1) entered disabled state [ 1399.809403][T15308] bridge_slave_1: entered allmulticast mode [ 1399.832860][T15308] bridge_slave_1: entered promiscuous mode [ 1400.181478][T13999] Bluetooth: hci6: command tx timeout [ 1401.376761][ T61] bridge_slave_1: left allmulticast mode [ 1401.382762][ T61] bridge_slave_1: left promiscuous mode [ 1401.388628][ T61] bridge0: port 2(bridge_slave_1) entered disabled state [ 1401.612217][ T61] bridge_slave_0: left allmulticast mode [ 1401.628395][ T61] bridge_slave_0: left promiscuous mode [ 1401.645086][ T61] bridge0: port 1(bridge_slave_0) entered disabled state [ 1401.842089][ T5854] Bluetooth: hci3: Opcode 0x0c03 failed: -110 [ 1402.316308][ T5854] Bluetooth: hci6: command tx timeout [ 1402.559491][ T61] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1402.599516][ T61] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1402.630620][ T61] bond0 (unregistering): Released all slaves [ 1402.803873][T15308] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1404.058861][T15308] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1404.550806][T15479] loop7: detected capacity change from 0 to 16 [ 1405.672108][T15479] erofs (device loop7): mounted with root inode @ nid 36. [ 1405.723565][T15477] erofs (device loop7): readahead error at folio 24 @ nid 36 [ 1405.732766][T15477] erofs (device loop7): readahead error at folio 19 @ nid 36 [ 1405.740738][T15477] erofs (device loop7): readahead error at folio 13 @ nid 36 [ 1405.748791][T15477] erofs (device loop7): readahead error at folio 8 @ nid 36 [ 1405.757025][T15477] syz.7.1829: attempt to access beyond end of device [ 1405.757025][T15477] loop7: rw=524288, sector=736, nr_sectors = 112 limit=16 [ 1405.827375][T15477] syz.7.1829: attempt to access beyond end of device [ 1405.827375][T15477] loop7: rw=524288, sector=13478624032, nr_sectors = 24 limit=16 [ 1406.125388][ T61] hsr_slave_0: left promiscuous mode [ 1406.141740][ T61] hsr_slave_1: left promiscuous mode [ 1406.167655][ T61] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1406.217113][ T61] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1407.538481][T15493] loop7: detected capacity change from 0 to 256 [ 1408.658714][ T61] team0 (unregistering): Port device team_slave_1 removed [ 1408.739158][ T61] team0 (unregistering): Port device team_slave_0 removed [ 1409.061561][T15354] bridge0: port 1(bridge_slave_0) entered blocking state [ 1409.069131][T15354] bridge0: port 1(bridge_slave_0) entered disabled state [ 1409.076703][T15354] bridge_slave_0: entered allmulticast mode [ 1409.084079][T15354] bridge_slave_0: entered promiscuous mode [ 1409.093067][T15354] bridge0: port 2(bridge_slave_1) entered blocking state [ 1409.100222][T15354] bridge0: port 2(bridge_slave_1) entered disabled state [ 1409.108770][T15354] bridge_slave_1: entered allmulticast mode [ 1409.116529][T15354] bridge_slave_1: entered promiscuous mode [ 1409.243191][T15308] team0: Port device team_slave_0 added [ 1409.440477][T15517] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1834'. [ 1410.186657][T15308] team0: Port device team_slave_1 added [ 1411.589377][T15354] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1411.620069][T15354] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1411.712419][T15308] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1411.719629][T15308] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1411.881240][T15308] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1412.745907][T15354] team0: Port device team_slave_0 added [ 1413.113810][T15308] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1413.126612][T15308] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1413.201742][T15308] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1413.248616][T15354] team0: Port device team_slave_1 added [ 1413.454866][T15354] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1413.475810][T15551] netlink: 212408 bytes leftover after parsing attributes in process `syz.6.1840'. [ 1413.478485][T15354] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1413.511828][T15551] netlink: zone id is out of range [ 1413.511889][T15551] netlink: zone id is out of range [ 1413.511940][T15551] netlink: get zone limit has 8 unknown bytes [ 1413.600935][T15354] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1413.946276][T15354] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1413.961585][T15354] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1414.004113][T15354] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1415.189106][T15571] loop7: detected capacity change from 0 to 256 [ 1415.217107][T15571] vfat: Unknown parameter 'iocharst' [ 1415.309446][T15308] hsr_slave_0: entered promiscuous mode [ 1415.378619][T15308] hsr_slave_1: entered promiscuous mode [ 1416.621876][T15577] loop7: detected capacity change from 0 to 512 [ 1416.629433][T15577] EXT4-fs (loop7): encrypted files will use data=ordered instead of data journaling mode [ 1418.125126][T15577] EXT4-fs error (device loop7): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 191 vs 220 free clusters [ 1418.148129][T15577] EXT4-fs (loop7): 1 truncate cleaned up [ 1418.155442][T15577] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1418.212436][T15308] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1418.222095][T15308] Cannot create hsr debugfs directory [ 1418.494934][T10134] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1418.574984][T15588] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1845'. [ 1420.352455][ T30] INFO: task kworker/u8:6:13505 blocked for more than 144 seconds. [ 1420.641189][ T30] Not tainted 6.13.0-rc6-next-20250107-syzkaller #0 [ 1420.665034][ T30] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 1420.676865][ T30] task:kworker/u8:6 state:D stack:21968 pid:13505 tgid:13505 ppid:2 flags:0x00004000 [ 1420.689795][ T30] Workqueue: events_unbound netfs_write_collection_worker [ 1420.699143][ T30] Call Trace: [ 1420.711431][ T30] [ 1420.718748][ T30] __schedule+0x18f6/0x4cd0 [ 1420.731607][ T30] ? __pfx___schedule+0x10/0x10 [ 1420.737420][ T30] ? __pfx_lock_release+0x10/0x10 [ 1420.751480][ T30] ? schedule+0x90/0x320 [ 1420.755837][ T30] ? wq_worker_sleeping+0x66/0x240 [ 1420.769431][ T30] ? schedule+0x90/0x320 [ 1420.778771][ T30] schedule+0x14b/0x320 [ 1420.791781][ T30] bit_wait+0x12/0xd0 [ 1420.798389][ T30] __wait_on_bit+0xb0/0x2f0 [ 1420.812060][ T30] ? __pfx_bit_wait+0x10/0x10 [ 1420.836734][ T30] out_of_line_wait_on_bit+0x1d5/0x260 [ 1420.856129][ T30] ? __pfx_bit_wait+0x10/0x10 [ 1420.871126][ T30] ? __pfx_out_of_line_wait_on_bit+0x10/0x10 [ 1420.890598][ T30] ? __pfx_wake_bit_function+0x10/0x10 [ 1420.909541][ T30] netfs_retry_writes+0x16e/0x19b0 [ 1420.929468][ T30] ? __pfx_validate_chain+0x10/0x10 [ 1420.971797][ T30] ? stack_trace_save+0x118/0x1d0 [ 1420.977282][ T30] ? __pfx_netfs_retry_writes+0x10/0x10 [ 1420.983338][ T30] ? lockdep_unlock+0x16a/0x300 [ 1420.989810][ T30] netfs_write_collection_worker+0x2f90/0x3bb0 [ 1420.997367][ T30] ? process_scheduled_works+0x976/0x1840 [ 1421.014776][ T30] process_scheduled_works+0xa66/0x1840 [ 1421.022908][ T30] ? __pfx_process_scheduled_works+0x10/0x10 [ 1421.029168][ T30] ? assign_work+0x364/0x3d0 [ 1421.034834][ T30] worker_thread+0x870/0xd30 [ 1421.039697][ T30] ? __kthread_parkme+0x169/0x1d0 [ 1421.313528][ T30] ? __pfx_worker_thread+0x10/0x10 [ 1421.377353][ T30] kthread+0x7a9/0x920 [ 1421.423556][ T30] ? __pfx_kthread+0x10/0x10 [ 1421.871520][ T30] ? __pfx_worker_thread+0x10/0x10 [ 1421.877058][ T30] ? __pfx_kthread+0x10/0x10 [ 1421.887585][ T30] ? __pfx_kthread+0x10/0x10 [ 1421.897822][ T30] ? __pfx_kthread+0x10/0x10 [ 1421.908472][ T30] ? _raw_spin_unlock_irq+0x23/0x50 [ 1421.917611][ T30] ? lockdep_hardirqs_on+0x99/0x150 [ 1421.923475][ T30] ? __pfx_kthread+0x10/0x10 [ 1421.928635][ T30] ret_from_fork+0x4b/0x80 [ 1421.941439][ T30] ? __pfx_kthread+0x10/0x10 [ 1421.951461][ T30] ret_from_fork_asm+0x1a/0x30 [ 1421.958743][ T30] [ 1421.965579][ T30] [ 1421.965579][ T30] Showing all locks held in the system: [ 1421.973756][ T30] 1 lock held by khungtaskd/30: [ 1421.978883][ T30] #0: ffffffff8e937ee0 (rcu_read_lock){....}-{1:3}, at: debug_show_all_locks+0x55/0x2a0 [ 1421.986771][T15354] hsr_slave_0: entered promiscuous mode [ 1421.989239][ T30] 4 locks held by kworker/u8:4/61: [ 1422.000949][ T30] #0: ffff88801baf5948 ((wq_completion)netns){+.+.}-{0:0}, at: process_scheduled_works+0x93b/0x1840 [ 1422.014484][ T30] #1: ffffc9000212fc60 (net_cleanup_work){+.+.}-{0:0}, at: process_scheduled_works+0x976/0x1840 [ 1422.035964][ T30] #2: ffffffff8fcaf210 (pernet_ops_rwsem){++++}-{4:4}, at: cleanup_net+0x16a/0xd50 [ 1422.045683][ T30] #3: ffffffff8fcbb6c8 (rtnl_mutex){+.+.}-{4:4}, at: fib_net_exit_batch+0x20/0x90 [ 1422.060097][ T30] 2 locks held by getty/5593: [ 1422.064917][ T30] #0: ffff88814d9490a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x25/0x70 [ 1422.079977][ T30] #1: ffffc9000332b2f0 (&ldata->atomic_read_lock){+.+.}-{4:4}, at: n_tty_read+0x6a6/0x1e00 [ 1422.090628][ T30] 3 locks held by kworker/u8:12/6830: [ 1422.096466][ T30] #0: ffff88801ac89148 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_scheduled_works+0x93b/0x1840 [ 1422.108764][ T30] #1: ffffc9000b717c60 ((linkwatch_work).work){+.+.}-{0:0}, at: process_scheduled_works+0x976/0x1840 [ 1422.123496][ T30] #2: ffffffff8fcbb6c8 (rtnl_mutex){+.+.}-{4:4}, at: linkwatch_event+0xe/0x60 [ 1422.133589][ T30] 2 locks held by kworker/u8:6/13505: [ 1422.139122][ T30] #0: ffff88801ac89148 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_scheduled_works+0x93b/0x1840 [ 1422.156539][ T30] #1: ffffc90005017c60 ((work_completion)(&rreq->work)){+.+.}-{0:0}, at: process_scheduled_works+0x976/0x1840 [ 1422.174893][ T30] 1 lock held by syz.9.1639/14310: [ 1422.180088][ T30] #0: ffff8880565d0b70 (&ctx->wb_lock){+.+.}-{4:4}, at: netfs_writepages+0xcf/0x9e0 [ 1422.201445][ T30] 2 locks held by syz-executor/15308: [ 1422.206895][ T30] #0: ffffffff8f535b80 (&ops->srcu#2){.+.+}-{0:0}, at: rtnl_link_ops_get+0x22/0x250 [ 1422.218252][ T30] #1: ffffffff8fcbb6c8 (rtnl_mutex){+.+.}-{4:4}, at: rtnl_newlink+0xce2/0x2210 [ 1422.230912][ T30] 3 locks held by syz-executor/15354: [ 1422.237504][ T30] #0: ffffffff901ce730 (&ops->srcu#2){.+.+}-{0:0}, at: rtnl_link_ops_get+0x22/0x250 [ 1422.248573][ T30] #1: ffffffff8fcbb6c8 (rtnl_mutex){+.+.}-{4:4}, at: rtnl_newlink+0xce2/0x2210 [ 1422.257957][ T30] #2: ffffffff8e93d3b8 (rcu_state.exp_mutex){+.+.}-{4:4}, at: synchronize_rcu_expedited+0x381/0x830 [ 1422.269165][ T30] 1 lock held by syz.7.1846/15592: [ 1422.277906][ T30] #0: ffffffff8fcbb6c8 (rtnl_mutex){+.+.}-{4:4}, at: rtnetlink_rcv_msg+0x6e6/0xcf0 [ 1422.299535][ T30] 1 lock held by rm/15607: [ 1422.307110][ T30] [ 1422.308957][T15354] hsr_slave_1: entered promiscuous mode [ 1422.309717][ T30] ============================================= [ 1422.309717][ T30] [ 1422.351952][ T30] NMI backtrace for cpu 0 [ 1422.351970][ T30] CPU: 0 UID: 0 PID: 30 Comm: khungtaskd Not tainted 6.13.0-rc6-next-20250107-syzkaller #0 [ 1422.351994][ T30] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 1422.352006][ T30] Call Trace: [ 1422.352014][ T30] [ 1422.352022][ T30] dump_stack_lvl+0x241/0x360 [ 1422.352052][ T30] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1422.352075][ T30] ? __pfx__printk+0x10/0x10 [ 1422.352120][ T30] nmi_cpu_backtrace+0x49c/0x4d0 [ 1422.352158][ T30] ? __pfx_nmi_cpu_backtrace+0x10/0x10 [ 1422.352187][ T30] ? _printk+0xd5/0x120 [ 1422.352217][ T30] ? __pfx__printk+0x10/0x10 [ 1422.352249][ T30] ? __wake_up_klogd+0xcc/0x110 [ 1422.352273][ T30] ? __pfx__printk+0x10/0x10 [ 1422.352307][ T30] ? __rcu_read_unlock+0xa1/0x110 [ 1422.352335][ T30] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 1422.352361][ T30] nmi_trigger_cpumask_backtrace+0x198/0x320 [ 1422.352396][ T30] watchdog+0xff6/0x1040 [ 1422.352424][ T30] ? watchdog+0x1ea/0x1040 [ 1422.352456][ T30] ? __pfx_watchdog+0x10/0x10 [ 1422.352482][ T30] kthread+0x7a9/0x920 [ 1422.352508][ T30] ? __pfx_kthread+0x10/0x10 [ 1422.352538][ T30] ? __pfx_watchdog+0x10/0x10 [ 1422.352564][ T30] ? __pfx_kthread+0x10/0x10 [ 1422.352590][ T30] ? __pfx_kthread+0x10/0x10 [ 1422.352621][ T30] ? __pfx_kthread+0x10/0x10 [ 1422.352647][ T30] ? _raw_spin_unlock_irq+0x23/0x50 [ 1422.352678][ T30] ? lockdep_hardirqs_on+0x99/0x150 [ 1422.352699][ T30] ? __pfx_kthread+0x10/0x10 [ 1422.352727][ T30] ret_from_fork+0x4b/0x80 [ 1422.352753][ T30] ? __pfx_kthread+0x10/0x10 [ 1422.352782][ T30] ret_from_fork_asm+0x1a/0x30 [ 1422.352820][ T30] [ 1422.352828][ T30] Sending NMI from CPU 0 to CPUs 1: [ 1422.354373][T15354] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1422.357226][ C1] NMI backtrace for cpu 1 [ 1422.357238][ C1] CPU: 1 UID: 0 PID: 15354 Comm: syz-executor Not tainted 6.13.0-rc6-next-20250107-syzkaller #0 [ 1422.357257][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 1422.357268][ C1] RIP: 0010:univ8250_console_write+0x0/0xa0 [ 1422.357298][ C1] Code: c1 38 c1 0f 8c c7 fc ff ff 48 89 df e8 b9 e1 b0 fc e9 ba fc ff ff 0f 1f 40 00 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 0f 1e fa 55 41 56 53 41 89 d6 48 89 f3 48 89 fd e8 1a 92 4a fc [ 1422.357314][ C1] RSP: 0018:ffffc90003526a58 EFLAGS: 00000046 [ 1422.357329][ C1] RAX: 0000000000000000 RBX: ffffffff8574a730 RCX: ffff8880256d8ae8 [ 1422.357342][ C1] RDX: 0000000000000070 RSI: ffffffff9a422f20 RDI: ffffffff8f180800 [ 1422.357355][ C1] RBP: ffffc90003526c10 R08: ffffffff942db847 R09: 1ffffffff285b708 [ 1422.357368][ C1] R10: dffffc0000000000 R11: ffffffff8574a730 R12: ffffffff8f180800 [ 1422.357381][ C1] R13: dffffc0000000000 R14: 0000000000000200 R15: 0000000000000070 [ 1422.357392][ C1] FS: 00005555939c0500(0000) GS:ffff8880b8700000(0000) knlGS:0000000000000000 [ 1422.357407][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 1422.357419][ C1] CR2: 00007f48513e5440 CR3: 000000006eb94000 CR4: 00000000003526f0 [ 1422.357434][ C1] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 1422.357444][ C1] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 1422.357454][ C1] Call Trace: [ 1422.357461][ C1] [ 1422.357468][ C1] ? nmi_cpu_backtrace+0x3c2/0x4d0 [ 1422.357494][ C1] ? __pfx_lock_acquire+0x10/0x10 [ 1422.357519][ C1] ? __pfx_nmi_cpu_backtrace+0x10/0x10 [ 1422.357543][ C1] ? nmi_handle+0x2a/0x5a0 [ 1422.357576][ C1] ? nmi_cpu_backtrace_handler+0xc/0x20 [ 1422.357596][ C1] ? nmi_handle+0x14f/0x5a0 [ 1422.357620][ C1] ? nmi_handle+0x2a/0x5a0 [ 1422.357645][ C1] ? __pfx_univ8250_console_write+0x10/0x10 [ 1422.357816][ C1] ? default_do_nmi+0x63/0x160 [ 1422.357843][ C1] ? exc_nmi+0x123/0x1f0 [ 1422.357868][ C1] ? end_repeat_nmi+0xf/0x53 [ 1422.357934][ C1] ? __pfx_univ8250_console_write+0x10/0x10 [ 1422.357960][ C1] ? __pfx_univ8250_console_write+0x10/0x10 [ 1422.358136][ C1] ? __pfx_univ8250_console_write+0x10/0x10 [ 1422.358168][ C1] ? __pfx_univ8250_console_write+0x10/0x10 [ 1422.358195][ C1] ? __pfx_univ8250_console_write+0x10/0x10 [ 1422.358222][ C1] [ 1422.358228][ C1] [ 1422.358235][ C1] console_flush_all+0x869/0xeb0 [ 1422.358254][ C1] ? mark_lock+0x9a/0x360 [ 1422.358281][ C1] ? console_flush_all+0x1a3/0xeb0 [ 1422.358303][ C1] ? __pfx_console_flush_all+0x10/0x10 [ 1422.358330][ C1] ? is_printk_cpu_sync_owner+0x32/0x40 [ 1422.358352][ C1] ? printk_get_console_flush_type+0x1fe/0x4f0 [ 1422.358372][ C1] console_unlock+0x14f/0x3b0 [ 1422.358390][ C1] ? __pfx_console_unlock+0x10/0x10 [ 1422.358408][ C1] ? do_raw_spin_unlock+0x13c/0x8b0 [ 1422.358430][ C1] ? vprintk_emit+0x530/0xa10 [ 1422.358447][ C1] vprintk_emit+0x730/0xa10 [ 1422.358464][ C1] ? __pfx_vprintk_emit+0x10/0x10 [ 1422.358482][ C1] ? __d_lookup+0x64/0x7b0 [ 1422.358504][ C1] ? __d_lookup+0x64/0x7b0 [ 1422.358532][ C1] _printk+0xd5/0x120 [ 1422.358558][ C1] ? d_lookup+0x45/0x60 [ 1422.358580][ C1] ? start_creating+0x262/0x310 [ 1422.358606][ C1] ? __pfx__printk+0x10/0x10 [ 1422.358635][ C1] ? mntput+0x65/0xc0 [ 1422.358660][ C1] start_creating+0x2a9/0x310 [ 1422.358715][ C1] debugfs_create_dir+0x25/0x430 [ 1422.358736][ C1] ? hsr_debugfs_init+0x18/0x100 [ 1422.358764][ C1] hsr_debugfs_init+0x2e/0x100 [ 1422.358790][ C1] hsr_dev_finalize+0x88f/0xa20 [ 1422.358818][ C1] hsr_newlink+0x7ee/0x970 [ 1422.358841][ C1] ? alloc_netdev_mqs+0xd56/0x1080 [ 1422.358864][ C1] ? __pfx_hsr_newlink+0x10/0x10 [ 1422.358891][ C1] ? rtnl_create_link+0x91c/0xc20 [ 1422.358912][ C1] ? __pfx_hsr_newlink+0x10/0x10 [ 1422.358938][ C1] rtnl_newlink_create+0x2ee/0xa40 [ 1422.358968][ C1] ? __pfx_rtnl_newlink_create+0x10/0x10 [ 1422.358996][ C1] ? nla_strscpy+0x100/0x180 [ 1422.359016][ C1] ? full_name_hash+0x93/0xe0 [ 1422.359037][ C1] rtnl_newlink+0x1c7e/0x2210 [ 1422.359068][ C1] ? __pfx_rtnl_newlink+0x10/0x10 [ 1422.359102][ C1] ? validate_chain+0x11e/0x5920 [ 1422.359130][ C1] ? __pfx_lock_acquire+0x10/0x10 [ 1422.359154][ C1] ? __pfx_lock_release+0x10/0x10 [ 1422.359179][ C1] ? __pfx_validate_chain+0x10/0x10 [ 1422.359207][ C1] ? mark_lock+0x9a/0x360 [ 1422.359233][ C1] ? __lock_acquire+0x1397/0x2100 [ 1422.359273][ C1] ? __pfx_lock_release+0x10/0x10 [ 1422.359304][ C1] ? __pfx_rtnl_newlink+0x10/0x10 [ 1422.359326][ C1] rtnetlink_rcv_msg+0x791/0xcf0 [ 1422.359347][ C1] ? rtnetlink_rcv_msg+0x1a7/0xcf0 [ 1422.359369][ C1] ? __lock_acquire+0x1397/0x2100 [ 1422.359392][ C1] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 1422.359424][ C1] netlink_rcv_skb+0x1e3/0x430 [ 1422.359443][ C1] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 1422.359466][ C1] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 1422.359496][ C1] ? netlink_deliver_tap+0x2e/0x1b0 [ 1422.359515][ C1] netlink_unicast+0x7f6/0x990 [ 1422.359546][ C1] ? __pfx_netlink_unicast+0x10/0x10 [ 1422.359571][ C1] ? __virt_addr_valid+0x45f/0x530 [ 1422.359597][ C1] ? __phys_addr_symbol+0x2f/0x70 [ 1422.359621][ C1] ? __check_object_size+0x47a/0x730 [ 1422.359650][ C1] netlink_sendmsg+0x8e4/0xcb0 [ 1422.359680][ C1] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1422.359701][ C1] ? aa_sock_msg_perm+0x91/0x160 [ 1422.359725][ C1] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1422.359742][ C1] __sock_sendmsg+0x221/0x270 [ 1422.359769][ C1] __sys_sendto+0x363/0x4c0 [ 1422.359789][ C1] ? __pfx___sys_sendto+0x10/0x10 [ 1422.359819][ C1] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 1422.359844][ C1] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 1422.359870][ C1] __x64_sys_sendto+0xde/0x100 [ 1422.359889][ C1] do_syscall_64+0xf3/0x230 [ 1422.359908][ C1] ? clear_bhb_loop+0x35/0x90 [ 1422.359936][ C1] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1422.359960][ C1] RIP: 0033:0x7fe1b3587bbc [ 1422.359977][ C1] Code: 2a 5f 02 00 44 8b 4c 24 2c 4c 8b 44 24 20 89 c5 44 8b 54 24 28 48 8b 54 24 18 b8 2c 00 00 00 48 8b 74 24 10 8b 7c 24 08 0f 05 <48> 3d 00 f0 ff ff 77 34 89 ef 48 89 44 24 08 e8 70 5f 02 00 48 8b [ 1422.359991][ C1] RSP: 002b:00007ffcb4074410 EFLAGS: 00000293 ORIG_RAX: 000000000000002c [ 1422.360010][ C1] RAX: ffffffffffffffda RBX: 00007fe1b42a4620 RCX: 00007fe1b3587bbc [ 1422.360023][ C1] RDX: 0000000000000048 RSI: 00007fe1b42a4670 RDI: 0000000000000003 [ 1422.360034][ C1] RBP: 0000000000000000 R08: 00007ffcb4074464 R09: 000000000000000c [ 1422.360045][ C1] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000003 [ 1422.360065][ C1] R13: 0000000000000000 R14: 00007fe1b42a4670 R15: 0000000000000000 [ 1422.360084][ C1] [ 1422.360336][ T30] Kernel panic - not syncing: hung_task: blocked tasks [ 1422.360354][ T30] CPU: 0 UID: 0 PID: 30 Comm: khungtaskd Not tainted 6.13.0-rc6-next-20250107-syzkaller #0 [ 1422.360382][ T30] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 1422.360396][ T30] Call Trace: [ 1422.360407][ T30] [ 1422.360417][ T30] dump_stack_lvl+0x241/0x360 [ 1422.360447][ T30] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1422.360471][ T30] ? __pfx__printk+0x10/0x10 [ 1422.360504][ T30] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 1422.360542][ T30] ? vscnprintf+0x5d/0x90 [ 1422.360577][ T30] panic+0x349/0x880 [ 1422.360614][ T30] ? nmi_trigger_cpumask_backtrace+0x244/0x320 [ 1422.360650][ T30] ? __pfx_panic+0x10/0x10 [ 1422.360687][ T30] ? preempt_schedule_thunk+0x1a/0x30 [ 1422.360720][ T30] ? nmi_trigger_cpumask_backtrace+0x244/0x320 [ 1422.360760][ T30] ? nmi_trigger_cpumask_backtrace+0x2d4/0x320 [ 1422.360797][ T30] ? nmi_trigger_cpumask_backtrace+0x2d9/0x320 [ 1422.360835][ T30] watchdog+0x1035/0x1040 [ 1422.360866][ T30] ? watchdog+0x1ea/0x1040 [ 1422.360900][ T30] ? __pfx_watchdog+0x10/0x10 [ 1422.360939][ T30] kthread+0x7a9/0x920 [ 1422.360969][ T30] ? __pfx_kthread+0x10/0x10 [ 1422.361003][ T30] ? __pfx_watchdog+0x10/0x10 [ 1422.361032][ T30] ? __pfx_kthread+0x10/0x10 [ 1422.361061][ T30] ? __pfx_kthread+0x10/0x10 [ 1422.361096][ T30] ? __pfx_kthread+0x10/0x10 [ 1422.361125][ T30] ? _raw_spin_unlock_irq+0x23/0x50 [ 1422.361159][ T30] ? lockdep_hardirqs_on+0x99/0x150 [ 1422.361182][ T30] ? __pfx_kthread+0x10/0x10 [ 1422.361214][ T30] ret_from_fork+0x4b/0x80 [ 1422.361243][ T30] ? __pfx_kthread+0x10/0x10 [ 1422.361274][ T30] ret_from_fork_asm+0x1a/0x30 [ 1422.361320][ T30] [ 1422.370436][ T30] Kernel Offset: disabled