last executing test programs: 17.282060616s ago: executing program 2 (id=80): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0xb, &(0x7f0000000380)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020000000000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x4a, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000300)='rcu_utilization\x00', r3, 0x0, 0x7}, 0x18) socket(0x28, 0x803, 0x0) syz_open_dev$video(&(0x7f0000000000), 0xc000, 0x0) r4 = socket$netlink(0x10, 0x3, 0x4) writev(r4, &(0x7f0000000140)=[{&(0x7f00000000c0)="580000001500add427323b472545b4560a117fff0b0082001b59000d00ff0028925aa80020007b00090080000efffeffe809000000ff0000f03ac7100003ffffffffffffffffffffffe7ee0000000000000000020000", 0x56}, {&(0x7f0000000040)="abd9", 0x2}], 0x2) mount(0x0, &(0x7f0000000640)='./file0/bus\x00', &(0x7f0000000080)='ramfs\x00', 0x11248b8, 0x0) openat$adsp1(0xffffffffffffff9c, &(0x7f0000000500), 0xa0201, 0x0) r5 = syz_open_dev$sndctrl(&(0x7f0000000440), 0x1, 0x103001) ioctl$SNDRV_CTL_IOCTL_ELEM_READ(r5, 0xc4c85512, &(0x7f0000000480)={{0x3, 0x3, 0x24000000, 0x3ff, '\x00', 0x6}, 0x1, [0x9, 0x11, 0xfffffffffffffff9, 0x5, 0xf, 0x1, 0x0, 0xff, 0xffffffffffffffff, 0x9, 0x1, 0x8, 0xfffffffffffffff7, 0x4, 0x3ff, 0x1, 0x36, 0x482, 0xc0010, 0x9, 0x1, 0x3ff, 0x7ff, 0x5, 0x80, 0x0, 0x4, 0x6, 0xffffffff, 0x9, 0x1, 0x71, 0xa, 0x2, 0x1ff, 0x7fffffff, 0x9, 0x4, 0x5, 0x10, 0xfffffffffffffff7, 0x16, 0x9db6, 0x7f, 0xfffffffffffffff6, 0x2, 0x5, 0x7, 0x0, 0x8, 0x3, 0x303, 0xa2, 0x8000, 0x3, 0x400, 0x9, 0x1fd, 0x3, 0x2, 0xc9a8, 0xffffffff, 0x3, 0x8, 0xffff, 0x0, 0x10000, 0xffffffffffffffff, 0x5, 0x3, 0x5, 0x9, 0xec, 0x7f, 0xffffffffffffffff, 0x100000000, 0x9f1a, 0xffffffffffffffff, 0xffffffff, 0x8, 0x0, 0x9, 0x3, 0x9, 0x1, 0x4, 0x3, 0xa, 0x8, 0x8, 0x1, 0x2, 0x4, 0xbf, 0xe70, 0xfffffffffffffff7, 0xb, 0x8000000000000000, 0x6, 0x9, 0x5, 0x639, 0x8000000000000000, 0x4, 0x400, 0x9a06, 0x9, 0xffffffff00000000, 0x3, 0xb3, 0x200080000001, 0x5, 0xd30, 0x7, 0x4, 0x256, 0x6ff, 0x3, 0x7, 0x1ff, 0x6, 0x9, 0x0, 0x1b485fe1, 0x7, 0x7, 0xfffffffffffffff7, 0x9]}) ioctl$AUTOFS_DEV_IOCTL_FAIL(0xffffffffffffffff, 0xc0189377, 0x0) r6 = socket$pppl2tp(0x18, 0x1, 0x1) connect$pppl2tp(r6, 0x0, 0x0) syz_genetlink_get_family_id$l2tp(0x0, 0xffffffffffffffff) sendmsg$L2TP_CMD_SESSION_GET(0xffffffffffffffff, 0x0, 0x8000) acct(0x0) 15.892973818s ago: executing program 2 (id=84): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x1c1341, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r1) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$tipc(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$TIPC_CMD_ENABLE_BEARER(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000080)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="01000000000000000040010000000000000101410000001c001700060000000000006574683a73797a6b616c6c657230"], 0x38}}, 0x0) writev(r0, &(0x7f0000000340)=[{&(0x7f0000000c00)="89e7ee2c7cdad9b4b47380c988ca", 0xe}, {&(0x7f0000000440)="197cc163df7ce9d0b02650c9824bb25cb9048c6fee30d513dc41d4a41a1a56ea7b", 0x21}], 0x2) 15.820005991s ago: executing program 3 (id=85): r0 = socket$packet(0x11, 0x3, 0x300) r1 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000001c0)={'veth1_to_hsr\x00', 0x0}) setsockopt$packet_int(r1, 0x107, 0xf, &(0x7f0000000000)=0xf3f, 0x4) sendto$packet(r1, &(0x7f00000000c0)="3f031c000302140006001e0089e9aaa911d7c2290f0086dd1327c9167c643c4a1b7880610cc96655b1b141ab059b24d0fbc50df71548", 0x36, 0x0, &(0x7f0000000540)={0xc9, 0x0, r2, 0x1, 0x0, 0x6, @multicast}, 0x14) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000240)={'syz_tun\x00', 0x0}) bind$packet(r0, &(0x7f0000000300)={0x11, 0x0, r3, 0x1, 0x0, 0x6, @remote}, 0x14) syz_emit_ethernet(0x2a, &(0x7f00000003c0)={@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}, @dev, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x3, 0x7, 0x1c, 0x64, 0x0, 0x1, 0x11, 0x0, @multicast1, @multicast2}, {0x4e20, 0x4e20, 0x8}}}}}, 0x0) 15.631617283s ago: executing program 3 (id=87): mknodat$loop(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x1000, 0x0) fcntl$setstatus(0xffffffffffffffff, 0x4, 0x42000) r0 = openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x20842, 0x0) fcntl$setstatus(r0, 0x4, 0x42000) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r1}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)) sched_setscheduler(0x0, 0x2, 0x0) read$FUSE(r0, &(0x7f0000001440)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_STATFS(r0, &(0x7f0000000200)={0x60, 0x0, r3, {{0x9, 0x5, 0x5, 0x2, 0x400069a, 0xae, 0x2400000, 0x800}}}, 0xfffffec2) 15.375519049s ago: executing program 2 (id=88): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x18, 0x3, &(0x7f0000000200)=@framed, &(0x7f0000000980)='syzkaller\x00'}, 0x94) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='fdinfo/3\x00') open(&(0x7f00000001c0)='./file0\x00', 0x121a80, 0x100) read$FUSE(r0, &(0x7f00000020c0)={0x2020}, 0x2020) syz_mount_image$ext4(&(0x7f0000000140)='ext4\x00', &(0x7f00000005c0)='./file0\x00', 0x8205, &(0x7f0000000080)={[{@journal_dev={'journal_dev', 0x3d, 0x1}}]}, 0x81, 0x633, &(0x7f0000000600)="$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") madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e) mbind(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x4005, &(0x7f0000000040)=0x81, 0x5, 0x0) set_mempolicy(0x4005, &(0x7f0000000080)=0x7, 0x2) syz_mount_image$msdos(&(0x7f0000000000), &(0x7f00000000c0)='./file0\x00', 0x1000400, &(0x7f00000005c0)=ANY=[@ANYBLOB='codepage=874,nodots,dots,tz=UTC,dots,nodots,codepage=862,dots,dots,check=strict,allow_utime=000000000000000000001,sys_immutable,nodots,nfs,quiet,dots,nodots,nodots,debug,usefree,tz=UTC,flush,nodots,\x00'], 0xfd, 0x1bf, &(0x7f0000000940)="$eJzs3TGL02AYB/Cn9bzmnG4TRCHg4nSon+BEThADgtJBJ4XT5SqCt0SX9mP4Af0A0qmLRGrSxkaHWmxS6++39En/edvnHZp26ZNXN99dnL+/fPvl+udIkl70T+M0Zr04jn4sTAIA2CezooivRanrXgCAdqzx/f+t5ZYAgC17/uLlkwdZdvYsTZOI6SQf5sPyscwfPc7O7qY/HNerpnk+vLLM76XN3w7z/Gpcq/L75fp0NT+MO7fLfJ49fJo18kGcb3frAAAAAAAAAAAAAAAAAAAAAADQmVuRLvx2vs/JSTM/qvLy6Kf5QI35PQdx46A6rMcDFeM2NgUAAAAAAAAAAAAAAAAAAAD/mMuPny5ej0ZvPtTFICJWn/mTole98IbL2y76sRNtKP5qke5GG6MNPwWHEbGtxmZFUax1cn2NGHR1cQIAAAAAAAAAAAAAAAAAgP9M/affX7Oki4YAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAoAP1/f83KMYRscbJyzc76nSrAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA7LHvAQAA///DgjXa") prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setscheduler(r1, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000001a00)=@abs={0x0, 0x0, 0xfffffff4}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/power/resume', 0x149a82, 0x1a0) getsockopt$IP_VS_SO_GET_DAEMON(0xffffffffffffffff, 0x0, 0x487, 0x0, 0x0) syz_mount_image$exfat(&(0x7f00000000c0), &(0x7f0000000000)='./file1\x00', 0x800, &(0x7f0000000100)=ANY=[@ANYBLOB='iocharset=iso8859-9,utf8,dmask=00000000000000000000011,utf8,errors=remount-ro,utf8,fmask=00000000000000000000001,errors=remount-ro,iocharset=iso8859-5,gid=', @ANYRESHEX=0x0, @ANYBLOB="0002"], 0x1, 0x1548, &(0x7f0000000380)="$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") bpf$PROG_LOAD(0x5, 0x0, 0x0) r4 = syz_open_procfs(0x0, &(0x7f0000000040)='mountinfo\x00') read$FUSE(r4, &(0x7f0000004dc0)={0x2020}, 0x2020) set_mempolicy_home_node(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x0, 0x0) mlock(&(0x7f0000ffd000/0x3000)=nil, 0x3000) bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x12, 0x4, &(0x7f0000000540)=ANY=[@ANYBLOB="18000000010000000000000000000000711216000000000095"], &(0x7f0000000500)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @cgroup_sock_addr=0x1e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0x11, 0x13, &(0x7f0000000240)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x70000000, 0x0, 0x0, 0x0, 0x1}, {{0x18, 0x1, 0x1, 0x0, r0}}, {}, [@ringbuf_query={{0x18, 0x1, 0x1, 0x0, r0}}], {{}, {}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000000)='GPL\x00', 0x3, 0xd1, &(0x7f0000000300)=""/209, 0x41100, 0x43, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f00000000c0)={0x4, 0x2}, 0x8, 0x10, &(0x7f0000000100)={0x0, 0x6, 0x1, 0xfffffffe}, 0x10, 0x0, 0x0, 0x1, 0x0, &(0x7f0000000180)=[{0x0, 0x4, 0xf, 0x7}], 0x10, 0x5}, 0x94) 14.631984241s ago: executing program 3 (id=91): r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) ioctl$FS_IOC_GETFSSYSFSPATH(r0, 0x80811501, &(0x7f0000000000)={0x80}) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_TID_CONFIG(r1, &(0x7f00000005c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000580)={&(0x7f0000000140)={0x41c, r2, 0x200, 0x70bd29, 0x25dfdbfe, {{}, {@void, @val={0xc, 0x99, {0x3, 0x76}}}}, [@NL80211_ATTR_TID_CONFIG={0x60, 0x11d, 0x0, 0x1, [{0x10, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}, @NL80211_TID_CONFIG_ATTR_AMPDU_CTRL={0x5, 0x9, 0x1}]}, {0x34, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_AMSDU_CTRL={0x5, 0xb, 0x1}, @NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0x7}, @NL80211_TID_CONFIG_ATTR_NOACK={0x5, 0x6, 0x1}, @NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0xda}, @NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0x800}]}, {0x18, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_AMPDU_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_PEER_SUPP={0xc, 0x3, 0xcc}]}]}, @NL80211_ATTR_TID_CONFIG={0x354, 0x11d, 0x0, 0x1, [{0x1c, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_NOACK={0x5}, @NL80211_TID_CONFIG_ATTR_AMSDU_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0x91}]}, {0x14, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0x82}, @NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0xb1}]}, {0x20, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_AMPDU_CTRL={0x5, 0x9, 0x1}, @NL80211_TID_CONFIG_ATTR_AMSDU_CTRL={0x5, 0xb, 0x1}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0x45}, @NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}]}, {0x10, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0x2}]}, {0xa4, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0xfb}, @NL80211_TID_CONFIG_ATTR_AMPDU_CTRL={0x5, 0x9, 0x1}, @NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0xe9}, @NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}, @NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0x97}, @NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5, 0xc, 0x2}, @NL80211_TID_CONFIG_ATTR_TX_RATE={0x70, 0xd, 0x0, 0x1, [@NL80211_BAND_60GHZ={0x2c, 0x2, 0x0, 0x1, [@NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x2}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x1}, @NL80211_TXRATE_LEGACY={0x17, 0x1, [0x9, 0x6, 0x16, 0x4, 0x82ed02f92e47ae3c, 0x6, 0xb, 0x16, 0x5, 0x60, 0x36, 0xc, 0x6c, 0x48, 0x1, 0x12, 0x24, 0x16, 0xc]}]}, @NL80211_BAND_2GHZ={0x28, 0x0, 0x0, 0x1, [@NL80211_TXRATE_HE_GI={0x5, 0x6, 0x2}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x4, 0x8001, 0x4, 0x9, 0x5, 0xff07, 0xd6]}}, @NL80211_TXRATE_GI={0x5, 0x4, 0x1}]}, @NL80211_BAND_6GHZ={0x18, 0x3, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0x4, 0x9, 0x0, 0xff, 0x4, 0x7, 0x0, 0x7ff]}}]}]}, @NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}]}, {0x1c, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_PEER_SUPP={0xc, 0x3, 0x2fe}, @NL80211_TID_CONFIG_ATTR_AMSDU_CTRL={0x5, 0xb, 0x1}, @NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}]}, {0x230, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}, @NL80211_TID_CONFIG_ATTR_TX_RATE={0x228, 0xd, 0x0, 0x1, [@NL80211_BAND_2GHZ={0x78, 0x0, 0x0, 0x1, [@NL80211_TXRATE_HE_GI={0x5, 0x6, 0x2}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x1}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x1}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x1}, @NL80211_TXRATE_LEGACY={0x1c, 0x1, [0x1b, 0x60, 0x77, 0xb, 0x9, 0x4, 0x4, 0xb, 0xb, 0x9, 0x1c, 0x6c, 0x1, 0x48, 0x16, 0x24, 0x30, 0x9, 0x6, 0x6c, 0x6, 0x1b, 0x36, 0x3]}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x8e4, 0x8000, 0x4, 0xa, 0xffff, 0x3, 0x2, 0x100]}}, @NL80211_TXRATE_GI={0x5, 0x4, 0x2}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x1}, @NL80211_TXRATE_LEGACY={0x12, 0x1, [0xc, 0x4, 0x2, 0xc, 0x6, 0x6c, 0x24, 0x12, 0x60, 0x16, 0x1, 0x30, 0x48, 0x48]}]}, @NL80211_BAND_5GHZ={0x4c, 0x1, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0x7ff, 0x7, 0x682, 0x1, 0x6, 0x8001, 0x29, 0x7]}}, @NL80211_TXRATE_HE_GI={0x5}, @NL80211_TXRATE_GI={0x5, 0x4, 0x2}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0xa, 0x2, 0x2df0, 0x8001, 0xc0f, 0x5, 0x9, 0x6]}}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x2}, @NL80211_TXRATE_HE_GI={0x5}]}, @NL80211_BAND_6GHZ={0x18, 0x3, 0x0, 0x1, [@NL80211_TXRATE_HE={0x14, 0x5, {[0x8, 0x3, 0x8, 0x8, 0x6, 0x4, 0x2800, 0x3]}}]}, @NL80211_BAND_60GHZ={0x64, 0x2, 0x0, 0x1, [@NL80211_TXRATE_HE={0x14, 0x5, {[0x9, 0x8, 0x0, 0x6f, 0xd78, 0x6, 0xe800, 0xc]}}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x9, 0x0, 0xfffc, 0x5, 0x8, 0x7, 0x401, 0x8001]}}, @NL80211_TXRATE_HT={0x2d, 0x2, [{0x6, 0x8}, {0x7, 0x9}, {0x2, 0x5}, {0x0, 0x6}, {0x7, 0x9}, {0x4, 0x3}, {0x0, 0x4}, {0x3, 0x3}, {0x0, 0x9}, {0x1, 0x1}, {0x2, 0x1}, {0x5, 0x4}, {0x0, 0x7}, {0x3}, {0x4, 0x7}, {0x3, 0xa}, {0x0, 0x4}, {0x1, 0x5}, {0x7, 0x7}, {0x0, 0x1}, {0x4, 0x9}, {0x2, 0x8}, {0x3, 0x4}, {0x3, 0x2}, {0x2, 0x7}, {0x6, 0xa}, {0x6, 0x5}, {0x3, 0x5}, {0x3, 0x4}, {0x1, 0x6}, {0x6, 0x2}, {0x4, 0x4}, {0x0, 0x8}, {0x0, 0x7}, {0x2, 0x7}, {0x0, 0x4}, {0x1}, {0x5, 0x5}, {0x7, 0x5}, {0x1, 0x2}, {0x3, 0xa}]}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x2}]}, @NL80211_BAND_2GHZ={0x2c, 0x0, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0x4382, 0x11a, 0x7407, 0x5, 0xa7, 0x6, 0x5, 0x14]}}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x100, 0x1, 0x3, 0x0, 0x8, 0xc94, 0x6, 0xe6a]}}]}, @NL80211_BAND_5GHZ={0x84, 0x1, 0x0, 0x1, [@NL80211_TXRATE_HT={0x34, 0x2, [{0x1, 0x5}, {0x2, 0x5}, {0x0, 0x2}, {0x5, 0x7}, {0x3, 0x9}, {0x1, 0x8}, {0x2, 0x7}, {0x5, 0x7}, {0x3, 0x1}, {0x6, 0x8}, {0x5, 0x2}, {0x1, 0x5}, {0x5, 0x1}, {0x0, 0x4}, {0x5, 0x3}, {0x2, 0x9}, {0x7, 0x5}, {0x5, 0x4}, {0x6, 0x3}, {0x1, 0x5}, {0x3, 0x5}, {0x4, 0x9}, {0x6, 0x8}, {0x4, 0x7}, {0x3, 0x7}, {0x6, 0x9}, {0x1, 0x8}, {0x6, 0x6}, {0x0, 0x1}, {0x6}, {0x7, 0x7}, {0x5, 0x3}, {0x1, 0x8}, {0x6, 0x2}, {0x2, 0x6}, {0x3}, {0x7, 0x3}, {0x0, 0x7}, {0x1, 0xa}, {0x1, 0x2}, {0x6, 0xa}, {0x4, 0x5}, {0x4, 0xa}, {0x1, 0x1}, {0x1, 0x5}, {0x7}, {0x1, 0x3}, {0x3, 0x6}]}, @NL80211_TXRATE_LEGACY={0x1f, 0x1, [0x3, 0xc, 0x24, 0x0, 0x16, 0x5a, 0x60, 0x5, 0x16, 0x1, 0xc, 0x5, 0x48, 0x16, 0x9, 0x5, 0x16, 0x12, 0x48, 0xb, 0x12, 0x1f, 0x1, 0x9, 0x36, 0x3d, 0x1]}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x3, 0x3, 0x2, 0x6a1b, 0x9, 0x101, 0x1, 0xfff4]}}, @NL80211_TXRATE_HT={0x15, 0x2, [{0x5, 0x7}, {0x0, 0x5}, {0x4, 0x1}, {0x2, 0x8}, {0x1, 0x3}, {0x5, 0x2}, {0x5, 0x9}, {0x3, 0x1}, {0x5, 0x7}, {0x0, 0x9}, {0x0, 0x8}, {0x0, 0xa}, {0x7, 0xa}, {0x5}, {0x0, 0x9}, {0x0, 0x3}, {0x0, 0xa}]}]}, @NL80211_BAND_2GHZ={0x34, 0x0, 0x0, 0x1, [@NL80211_TXRATE_GI={0x5, 0x4, 0xfa54a125414bf961}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x7, 0x9, 0x0, 0x5, 0x7, 0x6, 0x1]}}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x6, 0xfff7, 0xfff, 0xd, 0x0, 0x6, 0x5, 0x3]}}]}]}]}]}, @NL80211_ATTR_TID_CONFIG={0x10, 0x11d, 0x0, 0x1, [{0xc, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5}]}]}, @NL80211_ATTR_TID_CONFIG={0x38, 0x11d, 0x0, 0x1, [{0x1c, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}, @NL80211_TID_CONFIG_ATTR_AMSDU_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}, @NL80211_TID_CONFIG_ATTR_AMPDU_CTRL={0x5, 0x9, 0x1}]}, {0x18, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_AMSDU_CTRL={0x5, 0xb, 0x1}, @NL80211_TID_CONFIG_ATTR_PEER_SUPP={0xc, 0x3, 0x40}]}]}]}, 0x41c}, 0x1, 0x0, 0x0, 0x4000000}, 0x48800) (async) r3 = bpf$PROG_LOAD_XDP(0x5, &(0x7f00000007c0)={0x6, 0x7, &(0x7f0000000600)=@framed={{0x18, 0x0, 0x0, 0x0, 0xfb, 0x0, 0x0, 0x0, 0x1}, [@jmp={0x5, 0x1, 0x1, 0xb, 0x9, 0x13c, 0x10}, @ldst={0x1, 0x0, 0x6, 0xa, 0x4, 0xfffffffffffffffe, 0xfffffffffffffff0}, @map_idx_val={0x18, 0xacb5fa327062edec, 0x6, 0x0, 0x8, 0x0, 0x0, 0x0, 0x5}]}, &(0x7f0000000640)='syzkaller\x00', 0x10001, 0x0, 0x0, 0xc0e00, 0x32, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, &(0x7f0000000680)={0x9, 0x4}, 0x8, 0x10, &(0x7f00000006c0)={0x5, 0x1, 0x98c, 0x8}, 0x10, 0x0, 0x0, 0xa, 0x0, &(0x7f0000000700)=[{0x4, 0x1, 0x4, 0x8}, {0x5, 0x3, 0x8}, {0x5, 0x4, 0xf, 0x1}, {0x4, 0x4, 0x7, 0x8}, {0x2, 0x4, 0xa, 0xe}, {0x1, 0x1, 0xa, 0x1}, {0x4, 0x4, 0x6, 0x5}, {0x0, 0x5, 0x0, 0x1}, {0x3, 0x5, 0x7, 0x5}, {0x1, 0x2, 0x7, 0x4}], 0x10, 0xb44b}, 0x94) (async) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000900)={'syztnl2\x00', &(0x7f0000000880)={'tunl0\x00', 0x0, 0x80, 0x8, 0xe, 0x3abf, {{0x11, 0x4, 0x1, 0x4, 0x44, 0x65, 0x0, 0x80, 0x4, 0x0, @rand_addr=0x64010102, @local, {[@end, @noop, @timestamp_addr={0x44, 0xc, 0xc, 0x1, 0x0, [{@multicast1, 0x7f}]}, @lsrr={0x83, 0x13, 0x71, [@multicast2, @remote, @dev={0xac, 0x14, 0x14, 0x31}, @broadcast]}, @rr={0x7, 0xf, 0xa9, [@initdev={0xac, 0x1e, 0x0, 0x0}, @remote, @multicast2]}]}}}}}) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000940)={r3, r4, 0x25, 0x1c, @void}, 0x10) (async) getsockopt$inet_buf(0xffffffffffffffff, 0x0, 0x25, &(0x7f0000000980)=""/232, &(0x7f0000000a80)=0xe8) sendmsg$NL80211_CMD_VENDOR(r1, &(0x7f0000000c00)={&(0x7f0000000ac0), 0xc, &(0x7f0000000bc0)={&(0x7f0000000b00)={0x88, 0x0, 0x10, 0x70bd2a, 0x25dfdbfc, {{}, {@val={0x8, 0x1, 0x5c}, @val={0x8}, @val={0xc, 0x99, {0x5d02, 0x3c}}}}, [@NL80211_ATTR_VENDOR_DATA={0x55, 0xc5, "e9ddb03b0b2fc0b875add0a08af2cd8936efd60d3ba36c7532467206e1e413aa4118b0f505123dd9bcaf11f27318a6284875cd6a4016ff334599d62bc1b85632eadfca9e0eb8db55d0d159231d9e2e5325"}]}, 0x88}, 0x1, 0x0, 0x0, 0x40020}, 0x4000081) (async) openat$dir(0xffffffffffffff9c, &(0x7f0000000c40)='./file0\x00', 0x0, 0x100) (async) link(&(0x7f0000000c80)='./file1\x00', &(0x7f0000000cc0)='./file0\x00') (async) r5 = socket$igmp(0x2, 0x3, 0x2) ioctl$SIOCGETVIFCNT(r5, 0x89e0, &(0x7f0000000d00)={0xffffffffffffffff}) ioctl$VHOST_SET_VRING_KICK(0xffffffffffffffff, 0x4008af20, &(0x7f0000000d40)={0x1}) (async) pipe2(&(0x7f0000000d80)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80000) ioctl$VIDIOC_QUERY_DV_TIMINGS(r7, 0x80845663, &(0x7f0000000dc0)) (async) ioctl$VIDIOC_SUBDEV_DV_TIMINGS_CAP(r7, 0xc0905664, &(0x7f0000000e80)={0x0, 0x0, '\x00', @raw_data=[0x4, 0x6, 0x1, 0x6, 0x10, 0x4, 0x8, 0x8, 0xe, 0x6, 0x3, 0x5, 0x5, 0x7, 0x1, 0x8, 0x3, 0x5, 0x35, 0x100, 0x2, 0x0, 0x7fd8, 0xa, 0x2, 0x7, 0xfffffff4, 0x8000, 0x1ff, 0x9, 0x8, 0x7]}) (async) eventfd2(0x9, 0x0) fcntl$setpipe(r6, 0x407, 0x2) (async) getsockname$packet(r7, &(0x7f0000000f40)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @remote}, &(0x7f0000000f80)=0x14) (async) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r6, 0x84, 0x1d, &(0x7f0000000fc0)={0x3, [0x0, 0x0, 0x0]}, &(0x7f0000001000)=0x10) (async) sendmsg$TCPDIAG_GETSOCK(r7, &(0x7f0000001340)={&(0x7f0000001040)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000001300)={&(0x7f0000001080)={0x244, 0x12, 0x200, 0x70bd28, 0x25dfdbfb, {0x1f, 0x3, 0x5, 0x4, {0x4e24, 0x4e20, [0x8, 0x100, 0x0, 0x7fff], [0x3, 0x4, 0xfffff122, 0x2], r4, [0x4, 0xf95d]}, 0x6, 0x5}, [@INET_DIAG_REQ_BYTECODE={0xf6, 0x1, "7ec03793fd8d687597472afb5c9d5b734d53944b0087d384b5c190b8198a04292cbb5841142d00273a96d24dbba47fc6eccee7c0093961149d528d982801244ed562f914f281e5b91d54ea51f427e550e8ec5a15c1f3a947d5e38455ff0e31081d04d317368db01b6256795dc4517614bc976384eeb9c5ab65b08de602da2e142089ab7281991fb2a85ee511170a6136edc928b270de0d07aa091ac0f9e8211ccca7ba22a1076f4de3102349651fbe2b074f622086fee837fe5a42f7e718b7e215a4ba8f6a986ffb31f3878763cb8f64dee47b2a069dd8d6f4a3ab12e5dd7da97148bf32ade5c7e0c837ebaab37dcee16060"}, @INET_DIAG_REQ_BYTECODE={0x82, 0x1, "8eb72ef2211370744ba22a13e322cde69651e5d342a84f20b52c32adf8abbd11db21bc79c79edd1b22a29de9adab62cacfc730913e16511ec1875f47a910af0892b112152b3ea582a54b639b57dd913d8b4363ff1e31a2334a5d30c6c3f16b5c428ebeba23318562d7f74975741361f7d1ab18fbafe7223c6a5a06c43ea2"}, @INET_DIAG_REQ_BYTECODE={0x7b, 0x1, "b442c877903d899db1bdbd410c3c1f38d865cfc66f26c251026ae41b79dbb4dda2435b9badd1e51b2b2b1ca5a9b4319daf054d17b111661aca23ed00c8243d3ed8051a4c919ad76d9ed68944d9746c0e7acb62645361776075b167520e151dee39cf8a0b1cbc02ea6758095efbc75ae0898410ad7aac97"}]}, 0x244}, 0x1, 0x0, 0x0, 0x4014}, 0x810) (async) ioctl$SNDRV_SEQ_IOCTL_CREATE_PORT(r7, 0xc0a85320, &(0x7f0000001380)={{0x81}, 'port0\x00', 0x80, 0xd1430, 0x3, 0x9, 0x6, 0x100, 0x2, 0x0, 0x4, 0x6}) r8 = getuid() (async) read$FUSE(r7, &(0x7f0000001500)={0x2020, 0x0, 0x0, 0x0}, 0x2020) stat(&(0x7f0000003540)='./file1\x00', &(0x7f0000003580)={0x0, 0x0, 0x0, 0x0, 0x0}) (async) statx(r6, &(0x7f0000003600)='./file1\x00', 0x800, 0x40, &(0x7f0000003640)={0x0, 0x0, 0x0, 0x0, 0x0}) mount$9p_rdma(&(0x7f0000001440), &(0x7f0000001480)='./file1\x00', &(0x7f00000014c0), 0x2000, &(0x7f0000003740)={'trans=rdma,', {'port', 0x3d, 0x4e24}, 0x2c, {[{@rq={'rq', 0x3d, 0x100}}, {@rq={'rq', 0x3d, 0x9}}, {@timeout={'timeout', 0x3d, 0x8000000}}, {@rq={'rq', 0x3d, 0x5}}, {@common=@dfltuid={'dfltuid', 0x3d, 0xee01}}, {@rq={'rq', 0x3d, 0x4000000000000}}, {@common=@noextend}, {@timeout={'timeout', 0x3d, 0x3}}], [{@subj_user={'subj_user', 0x3d, 'port0\x00'}}, {@uid_gt={'uid>', 0xee00}}, {@obj_role={'obj_role', 0x3d, 'nl80211\x00'}}, {@euid_lt={'euid<', r8}}, {@fscontext={'fscontext', 0x3d, 'system_u'}}, {@fowner_gt={'fowner>', r9}}, {@permit_directio}, {@rootcontext={'rootcontext', 0x3d, 'root'}}, {@uid_lt={'uid<', r10}}, {@fowner_lt={'fowner<', r11}}]}}) sendmsg$TIPC_NL_MEDIA_SET(r1, &(0x7f0000003a40)={&(0x7f0000003900)={0x10, 0x0, 0x0, 0x250}, 0xc, &(0x7f0000003a00)={&(0x7f0000003980)={0x54, 0x0, 0x100, 0x70bd2c, 0x25dfdbfb, {}, [@TIPC_NLA_LINK={0x40, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_PROP={0xc, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1e}]}, @TIPC_NLA_LINK_PROP={0x24, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x7}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x2}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x114}]}]}]}, 0x54}, 0x1, 0x0, 0x0, 0x8000}, 0x8000) 14.284495917s ago: executing program 3 (id=92): r0 = open(&(0x7f0000000280)='.\x00', 0x20000, 0x0) fcntl$notify(r0, 0x402, 0x5) r1 = open(&(0x7f0000000280)='.\x00', 0x0, 0x0) fcntl$notify(r1, 0x402, 0x8000001f) creat(&(0x7f0000000080)='./file0\x00', 0x86) r2 = socket$l2tp(0x2, 0x2, 0x73) socket$inet6_sctp(0xa, 0x1, 0x84) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x9, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) syz_mount_image$bcachefs(&(0x7f00000000c0), &(0x7f00000003c0)='./file1\x00', 0x800010, &(0x7f0000000000)=ANY=[], 0xff, 0x5a9d, &(0x7f0000000400)="$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") pipe2$watch_queue(0x0, 0x80) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000009c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r3}, 0x10) r4 = getpid() sched_setscheduler(r4, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r6, &(0x7f0000000000), 0x651, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) sendmsg$FOU_CMD_ADD(0xffffffffffffffff, 0x0, 0x0) r7 = open(&(0x7f0000000580)='./file1\x00', 0x80242, 0x1df2a23c5997fa5f) write$FUSE_CREATE_OPEN(r7, &(0x7f0000000180)={0xa0, 0xffffffffffffffda, 0x0, {{0x8, 0x3, 0x5, 0x8, 0x3, 0x1, {0x1, 0x17f, 0x20ff, 0x5, 0x89, 0xd615, 0x9, 0x7fffffff, 0xfffffffe, 0x8000, 0x0, 0x0, 0x0, 0x3ff, 0x1}}, {0x0, 0x13}}}, 0xa0) r8 = socket$inet6(0xa, 0x3, 0x4) setsockopt$inet6_IPV6_XFRM_POLICY(r8, 0x29, 0x43, &(0x7f0000000340)={{{@in=@broadcast, @in6=@private0={0xfc, 0x0, '\x00', 0x1}, 0x0, 0x0, 0x1000}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x3}, {0x2000000000000000, 0x0, 0x0, 0x2}, 0x0, 0x0, 0x2, 0x1}, {{@in6=@mcast1}, 0xa, @in6=@private1={0xfc, 0x1, '\x00', 0x3}}}, 0xe8) bind$l2tp(r2, &(0x7f00000000c0)={0x2, 0x0, @multicast1}, 0x10) 12.000351166s ago: executing program 3 (id=94): syz_usb_connect$hid(0x0, 0x0, 0x0, 0x0) r0 = open(0x0, 0xe5000, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r2 = socket(0x2a, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000000)={'bridge0\x00', 0x0}) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x3) sched_setaffinity(0x0, 0xffffffffffffff5b, &(0x7f00000002c0)=0x400000bce) r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8) r5 = openat$rtc(0xffffffffffffff9c, &(0x7f0000002600), 0x101840, 0x0) ioctl$RTC_AIE_ON(r5, 0x7001) ioctl$KVM_CREATE_VCPU(r0, 0xae41, 0x2) sendmsg$ETHTOOL_MSG_RINGS_SET(r2, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x400}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x40000c0}, 0x20000014) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000740)=ANY=[@ANYBLOB="7000000010000304000080000000000000007400", @ANYRES32=r3, @ANYBLOB="0000000003120100500012800b0001006272696467650000400002800800050001000000060027000000000008000100150008000500"], 0x70}, 0x1, 0x0, 0x0, 0x800}, 0x40) 11.579153656s ago: executing program 2 (id=97): r0 = syz_open_procfs(0x0, &(0x7f0000000000)='pagemap\x00') gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @thr={&(0x7f00000005c0)="65d0d4f41fec3c42dd4948a721addd1df6842f9bb918a7738bdf0fc781907327601f074d2969ff2a84dc8a2a8ff14f0731ee31a499551f7836e456c58cf5535bb1c41dcf71f09065e3b97c15d53a8e38bad04f92e621bda13e92eb5d40a6c946cac24798030d91b5d148f5d0e371f0b0ba72", &(0x7f0000000640)="5dcb189e53a45e2d702929387262207e04989b6eb0e0f89f7be437ff56627d419071e804e3a3f9cd67152c776ef234bf69e4a7f2eae098ca3bd70f26196424f199b70ead014ed77fed0ccd5c2d56b4d43981f3767b97a74d0a5ad418fe1ea76b7134c2b158f4f154ba5ac6700e2152afd7"}}, &(0x7f0000000580)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) r1 = socket$unix(0x1, 0x2, 0x0) bind$unix(r1, &(0x7f0000000080)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) r2 = socket$unix(0x1, 0x2, 0x0) rt_sigqueueinfo(0xffffffffffffffff, 0x0, &(0x7f0000000100)={0x0, 0x0, 0x80000001}) r3 = socket$unix(0x1, 0x2, 0x0) connect$unix(r3, &(0x7f0000000180)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) sendmmsg(r3, &(0x7f0000002dc0), 0x307017fdb7a66cb, 0x3ec0) connect$unix(r2, &(0x7f0000000180)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) ppoll(&(0x7f0000000140)=[{r2, 0x8100}], 0x1, 0x0, 0x0, 0x0) syz_io_uring_setup(0x4de, &(0x7f0000000480)={0x0, 0x8c14, 0x8000, 0x3, 0x269}, 0x0, &(0x7f0000000200)=0x0) syz_io_uring_submit(0x0, r4, &(0x7f0000000040)=@IORING_OP_POLL_ADD={0x6, 0x12, 0x0, @fd_index=0x4, 0x0, 0x0, 0x0, {0x8000}, 0x1}) setxattr$trusted_overlay_opaque(&(0x7f0000000380)='\xe9\x1fq\x89Y\x1e\x923aK\x00', &(0x7f0000000500), &(0x7f0000000540), 0x2, 0x2) io_uring_enter(r0, 0x44c56, 0x2041e4, 0x0, 0x0, 0x0) readv(r1, &(0x7f0000000000)=[{&(0x7f00000003c0)=""/140, 0x8c}], 0x1) preadv(r0, 0x0, 0x0, 0x7, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000240)={0x0, 0x0}) r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000440), 0x141800, 0x0) r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) ioctl$KVM_CAP_SPLIT_IRQCHIP(r6, 0x4068aea3, &(0x7f0000000040)={0x79, 0x0, 0x5}) ioctl$KVM_SET_GSI_ROUTING(r6, 0x4008ae6a, &(0x7f0000000100)=ANY=[@ANYBLOB="01000000000000000000000002"]) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) syz_usb_connect(0x0, 0x24, &(0x7f0000002340)=ANY=[@ANYBLOB="12010000d4267a100410aa61754f010203010902120001000000fd080400000002060000"], 0x0) 11.023590661s ago: executing program 4 (id=98): socket$alg(0x26, 0x5, 0x0) prlimit64(0x0, 0xe, &(0x7f00000007c0)={0xb, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) syz_mount_image$f2fs(&(0x7f0000000140), &(0x7f0000000000)='./file0\x00', 0x0, &(0x7f0000000380)=ANY=[@ANYBLOB="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"], 0x2, 0x5505, &(0x7f0000002480)="$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") pipe(&(0x7f0000000200)) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f0000000500)={{{@in6=@private0, @in=@empty, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@multicast2}, 0x0, @in6=@local}}, &(0x7f0000000200)=0xe8) syz_mount_image$ext4(&(0x7f00000001c0)='ext4\x00', &(0x7f0000000240)='./file1\x00', 0x10e, &(0x7f0000000600)={[{@errors_remount}, {@lazytime}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x6e}}, {@prjquota}, {@block_validity}, {@quota}, {@errors_remount}, {@block_validity}], [{@dont_appraise}, {@mask={'mask', 0x3d, 'MAY_WRITE'}}, {@obj_user={'obj_user', 0x3d, 'error\xb70\xfa\xa1#^%_<3\x00s=remount-rok\x0f\xab\xe4\xce\\\x02v\xe4\x0f\x98\xb0\xc1#\x8c\xfc\xba\x10\xe0Z\x85\xdcO\xfa^\x06\xdc\x94\x86\xd8\"T\x05@I\xec\xed\xf7e8\n\xd8\xf3\xc1\x9c\xb8\xc1i\\\x9f\xed\xcb\x87}\x1a7\x8e0\x14Nb\x16\x12\x91\tq\xdd\xc6fEI\x04\xc5+\xd1<\xdb\x89YI\x9a\xac;\xa9\xa2\xfapU\x9d\xdf\xb7\x8fLf\x06\xaf\xf3t\xa9\xe06\x1c\x16\x1f\xa6\xa6\xd6\x9d\xbb\xe0S\xbb\x01s\xd6\\8\x8c\xc2\xbf\\\x17\x997\xcf\xf5\xc1\x87l2\xc0~hv41\xa9\x88\xad4!\xa4\xf2\x06\x03\xfc\v-R\xce\xf9\xa50\xfaL5;\xd9\xdf7\x9f3\xf3\x81=/?\x93Z\xb4\x9dA}(\x13'}}, {@uid_gt={'uid>', r1}}, {@appraise_type}, {@appraise_type}]}, 0x1, 0x45e, &(0x7f00000011c0)="$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") r2 = open(&(0x7f00000000c0)='.\x00', 0x0, 0x0) getdents(r2, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) close(0x3) bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0xe, 0x4, 0x4, 0x7f, 0x0, 0x1}, 0x48) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x1, 0x10, &(0x7f0000000180)=ANY=[], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) syz_mount_image$ext4(&(0x7f00000000c0)='ext4\x00', &(0x7f0000000180)='./file0\x00', 0x20044e, &(0x7f0000000340)={[{@minixdf}, {@test_dummy_encryption_v1}, {@stripe}, {@noblock_validity}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x6}}]}, 0x3, 0x451, &(0x7f0000000f80)="$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") mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000000), 0x0, &(0x7f0000000240)={[{@lowerdir={'lowerdir', 0x3d, './file0'}, 0x3a}], [], 0x2f}) mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000000), 0x0, &(0x7f0000000240)={[{@lowerdir={'lowerdir', 0x3d, './file0'}, 0x3a}], [], 0x2f}) chdir(0x0) openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x40000, 0x0) r3 = syz_open_procfs(0xffffffffffffffff, &(0x7f00000042c0)='fdinfo/3\x00') read$FUSE(r3, &(0x7f0000000940)={0x2020}, 0x2020) 9.809004501s ago: executing program 4 (id=102): syz_usb_connect$hid(0x0, 0x0, 0x0, 0x0) r0 = open(0x0, 0xe5000, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r2 = socket(0x2a, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000000)={'bridge0\x00', 0x0}) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x3) sched_setaffinity(0x0, 0xffffffffffffff5b, &(0x7f00000002c0)=0x400000bce) r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8) r5 = openat$rtc(0xffffffffffffff9c, &(0x7f0000002600), 0x101840, 0x0) ioctl$RTC_AIE_ON(r5, 0x7001) ioctl$KVM_CREATE_VCPU(r0, 0xae41, 0x2) sendmsg$ETHTOOL_MSG_RINGS_SET(r2, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x400}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x40000c0}, 0x20000014) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000740)=ANY=[@ANYBLOB="7000000010000304000080000000000000007400", @ANYRES32=r3, @ANYBLOB="0000000003120100500012800b0001006272696467650000400002800800050001000000060027000000000008000100150008000500"], 0x70}, 0x1, 0x0, 0x0, 0x800}, 0x40) 8.648693728s ago: executing program 0 (id=106): r0 = socket(0x10, 0x803, 0x0) r1 = syz_genetlink_get_family_id$tipc(&(0x7f0000000080), r0) sendmsg$TIPC_CMD_DISABLE_BEARER(r0, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x30, r1, 0x300, 0x70bd26, 0x25dfdbfb, {{}, {}, {0x14, 0x13, @l2={'eth', 0x3a, 'pim6reg0\x00'}}}, ["", "", "", "", "", "", "", ""]}, 0x30}, 0x1, 0x0, 0x0, 0x4890}, 0x8010) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000240)={{0x1, 0xffffffffffffffff}, &(0x7f00000001c0), &(0x7f0000000200)}, 0x20) ioctl$sock_ipv6_tunnel_SIOCGET6RD(r0, 0x89f8, &(0x7f00000002c0)={'gretap0\x00', &(0x7f0000000280)={'gretap0\x00', 0x0, 0x7800, 0x8000, 0x0, 0x5, {{0x8, 0x4, 0x1, 0x8, 0x20, 0x67, 0x0, 0x4, 0x4, 0x0, @empty, @multicast1, {[@lsrr={0x83, 0xb, 0x6d, [@dev={0xac, 0x14, 0x14, 0x1c}, @initdev={0xac, 0x1e, 0x7, 0x0}]}]}}}}}) r4 = openat$ocfs2_control(0xffffffffffffff9c, &(0x7f0000000300), 0x2000, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000340)=@base={0x4, 0x1, 0xffffffff, 0x9c, 0x2400, r2, 0xe10, '\x00', r3, r4, 0x1, 0x3, 0x2}, 0x50) r5 = socket(0x10, 0x803, 0x0) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r6, &(0x7f0000000100)={0xa, 0x4e22}, 0x1c) listen(r6, 0x3) setsockopt$SO_BINDTODEVICE(r6, 0x1, 0x19, &(0x7f0000000040)='syz_tun\x00', 0x10) syz_emit_ethernet(0x36, &(0x7f0000000180)={@local, @link_local, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x28, 0x0, 0x0, 0x0, 0x6, 0x0, @rand_addr=0x64010101, @local}, {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x6, 0x5, 0xc2}}}}}}, 0x0) syz_emit_ethernet(0x4a, &(0x7f0000000640)=ANY=[@ANYBLOB="aaaaaaaaaaaa0180c200000008004a00003c000000000006907864010101ac14143c4414076100000000000000000a0101000000050b00004e22", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB], 0x0) getsockname$packet(r0, &(0x7f0000000740)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000900)=0x14) sendmsg$nl_route(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000004c0)=ANY=[@ANYBLOB="4800000010000104000000000100000000000000", @ANYRES32=r7, @ANYBLOB="0000000000000000280012800b000100697036746e6c00001800028014000300ff"], 0x48}}, 0x0) 8.53131873s ago: executing program 0 (id=107): r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000004002, 0x0) r1 = dup(r0) syz_mount_image$udf(&(0x7f0000000f00), &(0x7f00000000c0)='./file0\x00', 0xa00000, &(0x7f00000001c0)={[{@adinicb}, {@anchor={'anchor', 0x3d, 0x800007}}, {@umask={'umask', 0x3d, 0xfffc}}, {@uid}, {@utf8}, {@adinicb}, {@iocharset={'iocharset', 0x3d, 'cp775'}}, {@undelete}, {@dmode={'dmode', 0x3d, 0x4}}]}, 0x1, 0xc4f, &(0x7f0000001e80)="$eJzs3U9sHNd9B/DfGy7FldxWTOwqTpoEm7ZIFcVy9S+SYhXuqqbZBpBlwRRzC8CVSKkLUyRBUo1spAXTS1H0EKAoesiJQGsUSNHAaIqgR6Z1gfjiQ5FTT0QLG0HRA1sECFDAYDCzb8UlRdq0SEqU/Pkk1Hd25r2Z92ZWM7KgNy8AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAgIjfe/HiiZNpkw19D6ExAMADcXnklROnNnv+AwCPratb/fc/AAAAAAAAAAAAAACwX6Qo4slIMXN55ezb1eeO+qV2/+07o0PDm1c7mKqafVX58qd+8tTpM185e+58Ny+1pz6g/m77TLw8cvVi44XpWzOzE3NzE+ON0an29enxiW3vYaf1NzpWnYDGrVdvj9+4Mdc49ezpdZvvDL438MSRwQvnvnT8c92yo0PDwyNrReq95Wv33ZCOrUZ4HIgijkeKZ77/09SKiCJ2fi7qD/bab3Sw6sSxqhOjQ8NVRybbran5cuOV7okoIho9lZrdc7T5tYha/wPtw9aaEQtl88sGHyu7NzLTmm1dm5xoXGnNzrfn29NTV1KntWV/GlHE+RSxGBHLA/furj+KqEWK7x5eSdfyWz+q8/DlamDw1u0o9rCP21C2s9EfsVg8AtdsHxuIIl6KFD9762hcz/eZ6l7zxYiXyvxhxBtlPh+Ryi/GmYh3N/ke8WiqRRF/UV7/CytpvLofdO8rl77e+NrUjemest37ykd8Ptxzp3hIz4eDG/LB2Of3pnoU0aru+Cvp/v+wAwAAAAAAAAAAAAAAAMBuOxhFfDpSvPjvf1SNK45qXPrhC+d+f/CXe8eMP/0h+ynLPhsRC8X2xuQeyAMDr6QrKT3kscQfZ/Uo4o/z+L9vP+zGAAAAAAAAAAAAAAAAAAAAfKwV8ZNI8dw7R9Ni9M4p3p662bjaujbZmRW2O/dvd8701dXV1UbqZDPnWM6FnIs5l3Iu54wi18/ZzDmWcyHnYs6lnMs5oy/Xz9nMOZZzIedizqWcyzmjluvnbOYcy7mQczHnUs7lnLFP5u4FAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAHicFFHE+5HiO99cSZEiohkxFp1cGnjYrQMAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAASgOpiB9EisYfNO+uq0VEqv7fcbT85Uw0D5T5yWieK/P5aF7M2aqy1vz2Rzv0K3++W53gvvWnIt6OFAP1N+9e8Hz9+zuf7n4N4o1vrX36TK2Tfd2Ng+8NPHHk8IVzw59/eqvltFkDjl1qT92+0xgdGh4e6Vldy0f/ZM+6wXzcYne6TkTMvfb6q63JyYnZ+18ovwI7qP4ILaTadnva97CbamE3FqK2L5qx6UK+Ae/Zb73194n6w7g5sefK5/+7keK33/mP7gO/8/yvxy91Pt19wsfP/2Tt+f/cxh1t8/lf21gvP//LZ/pmz/8ne9Y9l/800l+LqM/fmuk/ElGfe+314+1brZsTNyemzpw48dVz5756+kT/gYj6jfbkRM/SrpwuAAAAAAAAAAAAAAAAgAcnFfG7kaL19kpqRMSdarzW4IVzXzr+ub7oq8ZbrRu3/fLI1YuNF6ZvzcxOzM1NjDdGp9rXp8cntnu4ejXca3RoeE8686EO7nH7D9ZfmJ55bbZ98w/nN91+qH7x2tz8bOv65pvjYBQRzd41x6oGjw4NV42ebLemqqpXNh1M/9H1pyL+M1JcP9NIX8jr8vj/jSP8143/X9i4o10c///5Q2vj/z7RU7Q8ZkpF/DxS/NZfPh1fqNp5KO45Z7nc30aKY+c/m8vFgbJctw2d9wp0RgaWZf83Uvzj++vLdsdDPrlW9uRHOrmPgPL6H44UP/iz78Wv53Xr3/+w+fU/tHFHe/T+h6d61h1a976CHXedfP2PR4rnn3wzfqNa8/8f+P6P7rs3jnYKr72fY4+u/6/2rBvMx/3N3eo8AAAAAAAAAADAI6w/FfF3keJHw7V0Nq/bzr//G9+4oz3691+f6lk3vjvzFX3owo5PKgAAAADsE/2piJ9Eipvzb94dQ71+/HfP+M/fWRv/OZQ2bK3+nu9XqvcG7Obf//UazMcd23m3AQAAAAAAAAAAAAAAAAAAYF9JqYizeT71sWo8//iW86kvRYoX//uZXC4dKct154EfrH6tX56eOn5xcnK6HvOta5MTjZGZ1vWJsu5TkWLlbz6b6xbV/Ord+eY7c7yvzcU+GymG/75btjMXe3du8qfWyp4sy34iUvzXP6wvm6emznNHV2VPlWX/OlJ84583L3tkrezpsuz3IsWPv9Holj1Ulu2+H/VTa2WfvT5d7MFVAQAAAAAAAAAAAAAAAAAA4OOmPxXxp5Hif24t3h3Ln+f/7+/5WHnjWz3z/W9wp5rnf7Ca/3+r5fuZ/796r8DCVkcFAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAIDHU4oiXo8UM5dX0tJA+bmjfqk9dfvO6NDw5tUOpqpmX1W+/KmfPHX6zFfOnjvfzQ+uv9s+HS+PXL3YeGH61szsxNzcxHhjdKp9fXp8Ytt72Gn9jY5VJ6Bx69Xb4zduzDVOPXt63eY7g+8NPHFk8EJEjHfLjg4ND4/0lKn13/fR75G2WH8givirSPHM93+afjQQUcTOz8WHfHf22sGqE8eqTowODVcdmWy3pubLjVe6J6KIaPRUanbP0QO4FjvSjFgom182+FjZvZGZ1mzr2uRq3t6enrqSOq0t+9OIIs6niMWIWB64d3f9UcSrkeK7h1fSvwxE9HXPw5cvj7xy4tTW7Sj2qH/bVLaz0R+xWDwC12wfG4gi/ilS/Oyto/GvAxG16PzEFyNeKvOHEW9E53qn8otxJuLdTb5HPJpqUcT/ldf/wkp6a6C8H3TvK5e+3vja1I3pnrLd+8oj/3x4kPb5vakeRfy4uuOvpH/z+xoAAAAAAAAAAAAAAABgHyni1yLFc+8cTdX44LtjittTNxtXW9cmO8P6umP/umOmV1dXVxupk82cYzkXci7mXMq5nDOKXD9ns8z66upY/ryQczHnUs7lnNGX6+ds5hzLuZBzMedSzuWcUcv1czZzjuVcyLmYcynncs7YJ2P3AAAAAAAAAAAAAAAAAACAx0tR/S/Fd765klYHOvNLj0Unl8wH+tj7RQAAAP//WW30dA==") mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb, 0x13, r1, 0x0) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x400, 0x0) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x7) r4 = getpid() sched_setscheduler(r4, 0x2, &(0x7f0000000200)=0x7) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) write(r6, &(0x7f0000000340), 0x11000) vmsplice(r5, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) r7 = socket(0x400000000010, 0x3, 0x0) r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x20, 0x3, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @netfilter=0x2d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20}, 0x4c) r9 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r7, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0xffffffff, {0x0, 0x0, 0x0, r10, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x1, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x28}}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r7, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000840)=@newtfilter={0x4c, 0x2c, 0xd27, 0x70bd25, 0x8000, {0x0, 0x0, 0x0, r10, {0x0, 0x7}, {}, {0x7, 0x2}}, [@filter_kind_options=@f_bpf={{0x8}, {0x30, 0x2, [@TCA_BPF_NAME={0xc, 0x7, './file0\x00'}, @TCA_BPF_FLAGS_GEN={0x8, 0x9, 0x2}, @TCA_BPF_CLASSID={0x8, 0x3, {0xfff2, 0xfff2}}]}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x80}, 0x800) landlock_create_ruleset(&(0x7f0000000280)={0x1000, 0x2, 0x1}, 0x18, 0x1) ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) openat$nullb(0xffffffffffffff9c, &(0x7f0000000040), 0x84042, 0x0) syz_open_dev$loop(&(0x7f0000000080), 0x47ffffa, 0x122c42) ioctl$LOOP_CONFIGURE(0xffffffffffffffff, 0x4c0a, &(0x7f00000002c0)={r0, 0x24, {0x0, 0x0, 0x0, 0x400000000001, 0xcdf, 0x0, 0x6, 0x7, 0xe, "339f020bbe82b398000000000000000000000d0ec0c1b4e9b1c4369d03740250ceaac594b1b3d741dd17c1c50d38ef2a565ef1e83323691c58d66500", "a9103939c787a16c1ca43f80026d1a8554fe581b59ded130e04d528539f3d3289737f0374c72a964a02447a75df8a69ea917deb7ba193b3e7772fd29f35239d2", "24431a1e77a68e174f000000000000000010e200", [0xfffffffffffffffc, 0xfffffffffffffffd]}}) timer_create(0xfffffffd, 0x0, &(0x7f0000000000)) 8.285240133s ago: executing program 4 (id=108): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000340)=ANY=[@ANYBLOB="1800"/13], &(0x7f0000000000)='GPL\x00'}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000040)='i2c_reply\x00', r0, 0x0, 0x2}, 0x18) r1 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000300), 0x4) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="07000000040000004800000001"], 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000740)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r2, @ANYBLOB="0000000000000000b703000000050000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000080)='sched_switch\x00', r3}, 0x18) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000500)={r3}, 0xc) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0xe, &(0x7f0000002b00)=ANY=[@ANYBLOB], &(0x7f0000000b80)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, r1, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000040), 0x10}, 0x94) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000700)={r4, 0xe0, &(0x7f0000000a00)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, 0x10) bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000140)={r5}, 0x4) bpf$LINK_GET_NEXT_ID(0x1f, &(0x7f0000000d00)={0x0, 0x0}, 0x8) bpf$TOKEN_CREATE(0x24, 0x0, 0x0) bpf$LINK_GET_FD_BY_ID(0x1e, &(0x7f0000000000)=r6, 0x4) bpf$BPF_PROG_DETACH(0x9, &(0x7f00000001c0)={@map=0x1, 0xffffffffffffffff, 0x12, 0x2034, 0x0, @void, @void, @value=r6}, 0x20) r7 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{0x0}, {&(0x7f0000000580)="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", 0x13c}], 0x2, 0x0, 0x48}, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000600)=@bloom_filter={0x1e, 0x9, 0x5, 0x4, 0x1048, 0xffffffffffffffff, 0x9, '\x00', 0x0, 0xffffffffffffffff, 0x1, 0x5, 0x1, 0x1}, 0x50) r8 = syz_genetlink_get_family_id$smc(&(0x7f0000000000), 0xffffffffffffffff) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000b00)={0x11, 0x4, &(0x7f00000003c0)=ANY=[@ANYBLOB="18010000008000000000000000000004850000006d00000095"], &(0x7f0000000a00)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0xe, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffd}, 0x94) r9 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$SMC_PNETID_ADD(r9, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000200)={0x40, r8, 0x1, 0x0, 0x0, {}, [@SMC_PNETID_NAME={0x9, 0x1, 'syz2\x00'}, @SMC_PNETID_ETHNAME={0x14, 0x2, 'bond0\x00'}, @SMC_PNETID_IBNAME={0x9, 0x3, 'syz2\x00'}]}, 0x40}}, 0xc800) sendmsg$SMC_PNETID_DEL(r9, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000040)=ANY=[@ANYBLOB="14000000", @ANYRES16=r8, @ANYBLOB="270e000000000002000004"], 0x14}, 0x1, 0x40030000000000}, 0x0) sendmmsg$inet(0xffffffffffffffff, 0x0, 0x0, 0x8040) ioctl$sock_SIOCGIFINDEX_80211(r7, 0x8b18, &(0x7f0000000000)={'wlan0\x00'}) r10 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x5, &(0x7f00000002c0)=ANY=[@ANYBLOB="180000000004000000000000000000008500000050000000850000005000000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x78) ioctl$F2FS_IOC_MOVE_RANGE(r0, 0xc020f509, &(0x7f0000000080)={r0, 0x6, 0x2}) write$cgroup_subtree(r11, &(0x7f0000000180)={[{0x2b, 'rdma'}]}, 0x6) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000400)={&(0x7f00000003c0)='i2c_reply\x00', r10}, 0x10) 8.165751155s ago: executing program 0 (id=109): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x10) fanotify_mark(0xffffffffffffffff, 0x80, 0x1000000, 0xffffffffffffffff, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8e}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) mkdir(0x0, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) gettid() r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, 0x0, 0x0) r3 = bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0xd, 0x3, 0x0, &(0x7f0000000080)='GPL\x00', 0x5, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sock_ops, r3}, 0x94) bpf$BPF_BTF_GET_NEXT_ID(0x17, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0xe, 0x16, 0x0, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_skb}, 0x94) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)={{0x14, 0x10, 0x1, 0x0, 0x0, {0xa}}, [@NFT_MSG_NEWRULE={0x64, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x38, 0x4, 0x0, 0x1, [{0x34, 0x1, 0x0, 0x1, @inner={{0xa}, @val={0x24, 0x2, 0x0, 0x1, [@NFTA_INNER_TYPE={0x8, 0x2, 0x1, 0x0, 0x84}, @NFTA_INNER_FLAGS={0x8, 0x3, 0x1, 0x0, 0x7}, @NFTA_INNER_HDRSIZE={0x8, 0x4, 0x1, 0x0, 0xf}, @NFTA_INNER_NUM={0x8}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x3}}}, 0x8c}}, 0x0) 8.068459776s ago: executing program 4 (id=110): socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$tipc2(&(0x7f0000000200), 0xffffffffffffffff) syz_mount_image$squashfs(&(0x7f0000000240), &(0x7f0000000280)='./file0\x00', 0x200400, &(0x7f00000002c0)=ANY=[@ANYBLOB='\x00'], 0x1, 0x21f, &(0x7f0000000000)="$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") mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0xb, 0x10031, 0xffffffffffffffff, 0x65be1000) bind$vsock_stream(0xffffffffffffffff, &(0x7f0000000040), 0x10) listen(0xffffffffffffffff, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18090000000000000000000000000000850000006d0000001801000020696c25000000000020"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={0x0}, 0x18) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket$inet6_sctp(0xa, 0x5, 0x84) accept$inet6(0xffffffffffffffff, &(0x7f0000000280)={0xa, 0x0, 0x0, @mcast1}, &(0x7f0000000240)=0x1c) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000001e80)=ANY=[@ANYBLOB="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"], 0x159c}}, 0x0) setsockopt$inet_sctp6_SCTP_AUTH_KEY(r3, 0x84, 0x17, &(0x7f0000000140)=ANY=[], 0xef) r4 = openat$dir(0xffffffffffffff9c, 0x0, 0x0, 0x0) getdents(r4, &(0x7f0000000180)=""/62, 0x3e) kexec_load(0x0, 0x1, &(0x7f0000000140)=[{0x0, 0x2, 0x0, 0x41000000}], 0x0) 7.519448137s ago: executing program 1 (id=111): sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[], 0x110}}, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000440), 0x141800, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CAP_SPLIT_IRQCHIP(r1, 0x4068aea3, &(0x7f0000000040)={0x79, 0x0, 0x5}) ioctl$KVM_SET_GSI_ROUTING(r1, 0x4008ae6a, &(0x7f0000000100)=ANY=[@ANYBLOB="01000000000000"]) 7.501983681s ago: executing program 0 (id=112): openat$vmci(0xffffffffffffff9c, 0x0, 0x2, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000006c0)={0x18, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020000000000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000300)=@newtaction={0xb0, 0x30, 0xb, 0x0, 0x0, {}, [{0x9c, 0x1, [@m_skbmod={0x98, 0x1, 0x0, 0x0, {{0xb}, {0x6c, 0x2, 0x0, 0x1, [@TCA_SKBMOD_PARMS={0x24}, @TCA_SKBMOD_DMAC={0xa, 0x3, @broadcast}, @TCA_SKBMOD_DMAC={0xa, 0x3, @multicast}, @TCA_SKBMOD_PARMS={0x63}, @TCA_SKBMOD_ETYPE={0x6}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xb0}}, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f0000000400)={0x37, &(0x7f0000000a80)=[{0x2, 0x3, 0x11, 0x2}]}) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_RENAME(r1, &(0x7f0000000940)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000280)=ANY=[@ANYBLOB="14217900000000000000"], 0x14}, 0x1, 0x0, 0x0, 0x4080}, 0x20005004) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000400)={'syz0\x00', {0x3, 0x2, 0x6, 0xfffa}, 0x3a, [0x8000, 0xc95a, 0xf, 0x8, 0x80, 0x6, 0x7, 0x7f, 0x5, 0x1, 0x3, 0x5f, 0x9, 0x15, 0xffff2d36, 0xff7fff01, 0x7, 0x5, 0x7, 0x5, 0x6, 0x0, 0x7, 0x3c5b, 0x1, 0x24, 0xd, 0x1, 0x0, 0xffffffff, 0xe661, 0x4, 0x3, 0x5, 0x8, 0x4c74, 0x10000, 0x242, 0x3, 0xe, 0x0, 0x80008071, 0x7, 0x0, 0x5, 0x7, 0x5, 0x3e, 0x18e, 0x6, 0x6, 0x0, 0x6, 0x4, 0x8, 0x3ff, 0x5, 0x0, 0x5, 0x6, 0x8, 0x4, 0x1, 0x42], [0x8, 0x9, 0x8000012f, 0x8008, 0x5, 0xfffffff3, 0x129432fa, 0xc8, 0x9, 0xe, 0x2bc, 0x6c7, 0x9, 0xfffffffc, 0x3, 0x0, 0x0, 0x5, 0x2f, 0xe, 0x312, 0x66abcbd2, 0xea4, 0x0, 0x4, 0x7, 0x7ffc, 0x6, 0x400, 0x401, 0x6, 0x1, 0xff, 0x5, 0x1000005, 0x5f31, 0xd, 0x4e0, 0x381, 0x4, 0xb, 0x4, 0x9, 0x8, 0x40, 0x6, 0x47, 0x8000, 0x1, 0xfe000000, 0xffff, 0x2, 0x204, 0x9, 0x3, 0x3, 0x4000009, 0x2, 0x0, 0x3, 0xbc45, 0x48c93790, 0x42, 0x3], [0x7, 0x408, 0x3ff, 0x5, 0x9, 0x104, 0x8, 0x9, 0x5, 0x7fff, 0x0, 0x5, 0xb, 0x4, 0x5, 0x9, 0x0, 0x1ef, 0x5, 0x8, 0x86, 0x3, 0x303c, 0x3e7, 0xb, 0x5, 0x2, 0x2, 0x3, 0x84, 0x4, 0x6d01, 0x6, 0x38, 0x200, 0x200, 0x80, 0x3, 0x4, 0x2950bfb1, 0x1000, 0xa2, 0x4, 0xa9, 0x5, 0x6, 0xac4, 0xbf, 0xfffffffe, 0x3, 0x7ff, 0x12b, 0x4, 0x1, 0xa, 0xffffffff, 0x5, 0x1c, 0x120000, 0x7ff, 0x2009, 0x80a2ed, 0x4, 0x25], [0x9, 0xbb33, 0x7, 0xb, 0x5, 0x938, 0x6, 0x3, 0x0, 0xb9, 0xce4, 0x1ff, 0x2, 0x57, 0x4000005, 0x3, 0x2, 0x10000, 0x4, 0x407fff, 0x3, 0xa620, 0x1, 0x5, 0x1, 0x2000002, 0x150, 0x60a7, 0x6, 0x16, 0xffffffff, 0x80000000, 0x5, 0x5, 0xc8, 0x1, 0xfffff002, 0x10000, 0x3, 0x7, 0x100, 0x9622, 0x0, 0xaf, 0x20000008, 0x5, 0x226, 0x2, 0x5, 0x0, 0x30b1d693, 0xa1f, 0xf40, 0x7, 0x530e, 0x6c1b, 0x0, 0x4, 0x5, 0x7ff, 0xd7, 0x200, 0xb, 0xfff]}, 0x45c) ppoll(&(0x7f00000000c0)=[{}, {}], 0x20000000000000dc, 0x0, 0x0, 0x0) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f0000000000)=0xe) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x1) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000002000)=""/102400, 0x19000) syz_clone(0x2000000, &(0x7f0000000880)="bf7d7a84e62800f897e473e3dc0e48b068e4644390dc1e430111d6af2b9ac5454b1ad8f8a1d2fef688cd74672e9828befa112c208400884302fd301db009545f63ccc93eb506f14934ee76a6e61ee75b89f48f14b5b34ae1a7974b356cf9ce46b1dc49408ffc96019ae1ad9231cd2e538042a29cc5253330bc7a235a41d2eb147c080795691abf6198f1e784e4bc982c23d6ba49cc8ec77badad35b0b1153ab8d3e5", 0xa2, &(0x7f0000000340), &(0x7f0000000980), &(0x7f00000009c0)="1f9d9f0cd3715463865aeaf01e906c489be544f6322f6d990b0b863cad5dad439191f0924edabddb92b9e4ac9534861d7a9844709f3e87b8b86d8ab62ecf2429ba438cbf805ab50d076e974103dc0e971bc5c057c9465f7126511f49805b4ff9409a9b1b134dd13312a3361533f1edccdcf658dccab8555569fb9c88f583466f4e722c3e90bf4720a241a5a9a12b") 7.091591301s ago: executing program 2 (id=113): syz_usb_connect$hid(0x0, 0x0, 0x0, 0x0) r0 = open(0x0, 0xe5000, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r2 = socket(0x2a, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000000)={'bridge0\x00', 0x0}) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x3) r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8) openat$rtc(0xffffffffffffff9c, 0x0, 0x101840, 0x0) ioctl$KVM_CREATE_VCPU(r0, 0xae41, 0x2) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000740)=ANY=[@ANYBLOB="7000000010000304000080000000000000007400", @ANYRES32=r3, @ANYBLOB="0000000003120100500012800b0001006272696467650000400002800800050001000000060027000000000008000100150008000500"], 0x70}, 0x1, 0x0, 0x0, 0x800}, 0x40) 6.350691044s ago: executing program 4 (id=114): mknodat$loop(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x1000, 0x0) fcntl$setstatus(0xffffffffffffffff, 0x4, 0x42000) r0 = openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x20842, 0x0) fcntl$setstatus(r0, 0x4, 0x42000) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r1}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) read$FUSE(r0, 0x0, 0x0) write$FUSE_STATFS(r0, &(0x7f0000000200)={0x60, 0x0, 0x0, {{0x9, 0x5, 0x5, 0x2, 0x400069a, 0xae, 0x2400000, 0x800}}}, 0xfffffec2) 6.122230814s ago: executing program 1 (id=115): r0 = socket$packet(0x11, 0x3, 0x300) r1 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000001c0)={'veth1_to_hsr\x00', 0x0}) setsockopt$packet_int(r1, 0x107, 0xf, &(0x7f0000000000)=0xf3f, 0x4) sendto$packet(r1, &(0x7f00000000c0)="3f031c000302140006001e0089e9aaa911d7c2290f0086dd1327c9167c643c4a1b7880610cc96655b1b141ab059b24d0fbc50df71548a3f6c5609063382a0c", 0x3f, 0x0, &(0x7f0000000540)={0xc9, 0x0, r2, 0x1, 0x0, 0x6, @multicast}, 0x14) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000240)={'syz_tun\x00', 0x0}) bind$packet(r0, &(0x7f0000000300)={0x11, 0x0, r3, 0x1, 0x0, 0x6, @remote}, 0x14) syz_emit_ethernet(0x2a, &(0x7f00000003c0)={@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}, @dev, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x3, 0x7, 0x1c, 0x64, 0x0, 0x1, 0x11, 0x0, @multicast1, @multicast2}, {0x4e20, 0x4e20, 0x8}}}}}, 0x0) 5.594356618s ago: executing program 0 (id=116): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={0x0, 0x24}}, 0x0) getsockname$packet(r1, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000100)=0x14) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, 0x0}, 0x0) socket$kcm(0x10, 0x2, 0x10) sendmsg$nl_route_sched(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000140)=@newqdisc={0x30, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_clsact={0xb}]}, 0x30}}, 0x0) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, &(0x7f0000000180)={'caif0\x00', &(0x7f0000000540)=@ethtool_link_settings={0x4d, 0x400, 0xf, 0x80, 0x0, 0x0, 0xc, 0x0, 0x0, 0x4, [0x0, 0x4, 0x4, 0x0, 0x0, 0x0, 0x3, 0xd]}}) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x4) syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), r4) getsockname$packet(r4, &(0x7f0000000180)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x14) sendmsg$nl_route_sched(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000003c0)=@delchain={0x34, 0x2c, 0xf31, 0x0, 0x2000, {0x0, 0x0, 0x0, r5, {}, {0xfff2, 0xffff}, {0xffff, 0x1}}, [@filter_kind_options=@f_flower={{0xb}, {0x4}}]}, 0x34}, 0x1, 0x0, 0x0, 0x4008844}, 0x4010) 5.261128216s ago: executing program 1 (id=117): socket$kcm(0x10, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f00000007c0)={0x8, 0x89}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f00000001c0)=0x8) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r1 = socket$vsock_stream(0x28, 0x1, 0x0) bind$vsock_stream(r1, &(0x7f0000000040)={0x28, 0x0, 0x2710, @local}, 0x10) listen(r1, 0x0) openat$uinput(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) openat$procfs(0xffffffffffffff9c, &(0x7f0000002100)='/proc/bus/input/devices\x00', 0x0, 0x0) socket$phonet_pipe(0x23, 0x5, 0x2) pselect6(0x40, &(0x7f00000001c0)={0x900, 0x1, 0x3}, 0x0, &(0x7f00000002c0)={0x3ff, 0x0, 0x0, 0x4, 0x200000400000000, 0x4, 0x344}, 0x0, 0x0) 2.254056425s ago: executing program 1 (id=118): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000a00)=@newtaction={0x430, 0x30, 0x100, 0x70bd2b, 0x25dfdbff, {}, [{0x41c, 0x1, [@m_skbedit={0x1f0, 0x19, 0x0, 0x0, {{0xc}, {0x34, 0x2, 0x0, 0x1, [@TCA_SKBEDIT_PRIORITY={0x8, 0x3, {0x10, 0xa}}, @TCA_SKBEDIT_QUEUE_MAPPING={0x6, 0x4, 0xd}, @TCA_SKBEDIT_QUEUE_MAPPING={0x6, 0x4, 0x1}, @TCA_SKBEDIT_PARMS={0x18, 0x2, {0x1, 0x1, 0xffffffffeffffffb, 0x6, 0x101}}]}, {0x191, 0x6, "de616dd9ce3b892bb6fafca061bed3e644dcf9151f4527045657b89def02bb9cad6c62f8293cff1e7df3eb0803889f2fd92b151ed17ab9007c47463bf4e7afe47ab1d24292b0103cbbc15977a51c0ae02a16535a666c86a6321ae76cba859e771aa7d0ff9fa033e50e56e0f68419fd47894ab8f8d473fc2af5fc18fb9399fdbb44bce22ac4c64feea69875f61ef4f46591d0547ce0f025b0a5f6dc470fd9635a05e318fa41b23e07582b3128621edbf17703923cea8b079f042f9924f50ce06116fc38e34430e0a4b60e7144cccb31d0a0457e528dd782264fec2417bd1b18aa82a223185cee31b2989e534df535b22243ec2971118b283cebb23130d1622a675cabf8788d71473f98949841ab1c34d28257f4b10e6eec198365490620753627951432cf82875ec0fccc70181d74035e141d4bbdd59571d5c3fa68b6a9365539b7e734e38e7083fe43b3104f03a618c99dc38b7b166c71dcda72645a7ddd09b867d20ef1d0f2154c6c2af7bfc13509c92a055f4ba6134cf5124359fccca93ea9ef30597c542c2e259bbd96051f"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x3, 0x2}}}}, @m_xt={0x1c8, 0x11, 0x0, 0x0, {{0x7}, {0x19c, 0x2, 0x0, 0x1, [@TCA_IPT_INDEX={0x8, 0x3, 0x81b8}, @TCA_IPT_INDEX={0x8, 0x3, 0x5}, @TCA_IPT_TABLE={0x24, 0x1, 'filter\x00'}, @TCA_IPT_HOOK={0x8, 0x2, 0x1}, @TCA_IPT_TABLE={0x24, 0x1, 'security\x00'}, @TCA_IPT_INDEX={0x8, 0x3, 0xa82}, @TCA_IPT_HOOK={0x8}, @TCA_IPT_HOOK={0x8, 0x2, 0x1}, @TCA_IPT_INDEX={0x8, 0x3, 0xf6f}, @TCA_IPT_TARG={0x115, 0x6, {0xde5, 'security\x00', 0xfd, 0x6, "58b896ab865a267227e5b6ccd1d68ce8a894e5a4f8d74d244cc3937e2e2ea90902bf182af3278d89ce0874f4c5c16c31e865315f129a786341331a399c6bbc4776be84587cfde5f66b761518b33763ec1ac76ceca73f7c4b884b6734b971370a0767cbfffe13bd986a3a072d1f61a88dd3ca11b366ab1f296a044677f09dbac87bf344826528f298d21c4144ebeaf4ac69403b60f46ad8e918a7a25d22eb93ebe2c86c20690f85128387321091ad898099e0efd740345261e848850acdee9be5e1574fead30dfc85a45b2de54f9a2c172c1ce21e6c1cb5ea8d23eed156b98c9cf129689324ea2e01186626"}}]}, {0x6, 0x6, "51eb"}, {0xc}, {0xc, 0x8, {0x3, 0x3}}}}, @m_sample={0x60, 0x10, 0x0, 0x0, {{0xb}, {0x4}, {0x31, 0x6, "5c284c3a3976241974df53e1d3b1cccfebd3f123dec3f372dd21566159734af29ce5d14ed6f7073420a1d585c1"}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x1, 0x2}}}}]}]}, 0x430}}, 0x0) r0 = socket(0x10, 0x803, 0x0) sendto(r0, &(0x7f0000000740)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) recvmmsg(r0, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0xfdf4, &(0x7f0000000380)=[{&(0x7f0000000140)=""/100, 0x365}, {&(0x7f0000000280)=""/85, 0x7c}, {&(0x7f0000000fc0)=""/4096, 0x197}, {&(0x7f0000000400)=""/106, 0x645}, {&(0x7f0000000980)=""/73, 0x1b}, {&(0x7f0000000200)=""/77, 0x334}, {&(0x7f00000007c0)=""/154, 0x2c}, {&(0x7f00000001c0)=""/17, 0x1d8}], 0x21, &(0x7f0000000600)=""/191, 0x41}}], 0x4000000000003b4, 0x0, &(0x7f0000003700)={0x77359400}) r1 = openat$tcp_congestion(0xffffffffffffff9c, &(0x7f00000023c0), 0x1, 0x0) syz_mount_image$udf(&(0x7f0000000c40), &(0x7f0000000300)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0, &(0x7f0000002180)=ANY=[@ANYRES8=0x0], 0x43, 0xc11, &(0x7f0000000d00)="$eJzs3V1oXOl5B/DnnSOtRto00WYTb9Jm04GUxCi18VdsBZcgZxW1AccbIit0r6LRh51h5ZGR5MabtkFtSQu9Cd2b0psimi4t5KJX3V5WabaQUAol5CK9KAiaLHvRC10ECi0bhXPmHWlky7ayXlvS7u+3zP7PnHnO+P0YnzkCvzoBAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAER89nOXTp1OB90KAOBxujL5pVNnff8DwLvKVT//AwAAAAAAAAAAAADAYZeiiGORYujVzTRdPe+oX261b92eGp/Y+7DBFClqUVT15aN++szZc586f2G0m/c//u324Xh+8uqlxnOLN24uzS8vz881ptqt2cW5+X2/w8Mef6eRagAaN168NXft2nLjzMmzu16+Pfz6wJPHhi9eOHF+tFs7NT4xMdlT09f/lv/0u9xrhccTUUQzUrw5/EZqRkQtHn4sHvDZedQGq06MVJ2YGp+oOrLQarZXyhdTLVfVIho9B411x+gxzMVDGYtYLZtfNnik7N7kzeZSc2ZhvvHF5tJKa6W12E61TmvL/jSiFqMpYi0iNgbufrv+KOKjkeLlU5tpJiKK7jh8sloY/OD21B5BH/ehbGejP2KtdgTm7BAbiCKuRIqfvXY8Zssxy4/4eMQXynw14pUyPxORyg/GuYif7vE54mjqiyL+PVIsps00V50PuueVy19ufL59bbGntnteOfLfD4/TIT831aOImeqMv5ne+sUOAAAAAAAAAAAAAAAAAG+3wSji25HiT579vWpdcVTr0t93cfQ9L/x275rxZx7wPmXtyYhYre1vTW5/XjqcauV/j6Bj7Es9ivhGXv/3RwfdGAAAAAAAAAAAAAAAAAAAgHe1Il6IFF85cTytRe89xVvt642rzZmFzl1hu/f+7d4zfWtra6uROjmWczrnas61nOs5N3JGLR+fcyzndM7VnGs513Nu5IwiH59zLOd0ztWcaznXc27kjL58fM6xnNM5V3Ou5VzPuZEzDsm9ewEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA3klqUcTPI8W3vraZIkXEWMR0dHJ94KBbBwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACU6qmIk5Fi/YV69XytFnE1In6+tbXVfUTEZpkP66D7CgAAAAAAAAAAAAAAAAAAAIdWKuJjkeLp/9tMjYi4Pfz6wJPHhi9eOHF+tIgiUlnSW//85NVLjecWb9xcml9enp9rTLVbs4tz8/v94+qXW+1bt6fGJx5JZx5o8BG3f7D+3OLNl5Za17+6sufrQ/VLM8srS83ZvV+OwahFTPfuGakaPDU+UTV6odVsV4em2j0aWIsY229nAAAAAAAAAAAAAAAAAAAAODSGUhGfixQ/+a9zqbtuvK+z5v9XOs+K7dpX/mDndwEs3JFdvb8/YD/bab8NHakW3jemxicmJnt29/XfXVq2KaUinokUn3j5Q9V6+BRDe66NL+veW9bdOJfrhn+trFvdVVUfmRqfaFxZbJ+4tLCwONtcac4szDcmbzZn9/2LAwAAAAAAAAAAAAAAAAAAAOA+hlIRP4oU//P3/5G6953P6//7Os961v//VrWEvlJPu3Nbtbb/vdXa/s72+y6ODn302XvtfxTr/8s2pVTENyPF2R99qLqffnf9//QdtWXdn0WKN579SK6rPVHWNbvd6bzjtdbC/Kmy9q8jxa+/2a2NqvZ6rn16p/Z0WTsYKf5yc3ftV3PtB3Zqz5S1xyPF9/5779oP7tSeLWt/Ein+6e8a3dqhsvb3c+2xndqTs4sLcw8a1nL+vxMp/vbK76Run+85/z2//2H1jtx215zff/vtmv/hnn2reV7/NM9/8wHzfz5SfKf+kVzXGfuZ/PpT1f935v8TkeI//2137bVc+/6d2tP77dZBK+f/25Hiu3/14+0+5/nPI7szQ73z/6t9u3P7U3JA8/9Uz77h3K7ZX3Is3o2WX/r6i82FhfklGzZs2NjeOOgzE49D+f3/55Hi/48VqXsdk7//39N5tnP997/f2Pn+v3hHbjug7//39+y7mK9a+vsi6is3bvY/E1FffunrJ1o3mtfnr8+3z5w+9elPnz996vT5/ie6F3c7W/seu3eCcv5/ECl++A8/3P45Zvf1397X/0N35LYDmv+ne/u067pm30PxrlTO/99Eiqc+++Ptnzfvd/3f/fn/+Md25/bfvwOa/w/07BvO7Wr9kmMBAAAAAAAAAABwlAylIv4iUvzuH/9m6q4h2s+//5u7I7cd0L//Otazb+4xrWvY9yADABwi5fXfByPFP299f3st9+7rv/iNbm3v9d+9HIb7/wMAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAwFGXoog/jBRDr26m9YHyeUf9cqt96/bU+MTehw2mSFGLoqovH/XTZ86e+9T5C6PdvP/xb7cPx/OTVy81nlu8cXNpfnl5fq4x1W7NLs7N7/sdHvb4O41UA9C48eKtuWvXlhtnTp7d9fLt4dcHnjw2fPHCifOj3dqp8YmJyZ6avv63/KffJd1j/xNRxPcjxZvDb6TvDkTU4uHH4gGfnUdtsOrESNWJqfGJqiMLrWZ7pXwx1XJVLaLRc9BYd4wew1w8lLGI1bL5ZYNHyu5N3mwuNWcW5htfbC6ttFZai+1U67S27E8jajGaItYiYmPg7rfrjyK+GSlePrWZ/mUgouiOwyevTH7p1NkHt6f2CPq4D2U7G/0Ra7UjMGeH2EAU8Y+R4mevHY/vDUT0RecRH4/4QpmvRrxS5mciUvnBOBfx0z0+RxxNfVHEuUixmDbTawPl+aB7Xrn85cbn29cWe2q755Uj//3wOB3yc1M9ivhBdcbfTP/q7zUAAAAAAAAAAAAAAADAIVLEWqT4yonjqVofvL2muNW+3rjanFnoLOvrrv3rrpne2traaqROjuWczrmacy3nes6NnFHLx+ccyzmdczXnWs71nBs5o8jH5xzLOZ1zNedazvWcGzmjLx+fcyzndM7VnGs513Nu5IxDsnYPAAAAAAAAAAAAAAAAAAB4Z6lFUd3F/Vtf20xbA537S09HJ9fdD/Qd7xcBAAD//0kCdPc=") munmap(&(0x7f0000001000/0x3000)=nil, 0x3000) r2 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r2, 0x11b, 0x4, 0x0, 0x0) setsockopt$XDP_RX_RING(r2, 0x11b, 0x2, 0x0, 0x0) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0xb, 0x10031, 0xffffffffffffffff, 0x65be1000) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) openat$kvm(0x0, 0x0, 0x0, 0x0) r3 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r3, 0x11b, 0x4, &(0x7f0000000080)={&(0x7f0000000000)=""/59, 0x304000, 0x800, 0x0, 0x3}, 0x20) mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x0, 0x0, 0x0, 0x2) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x80000) setsockopt$XDP_UMEM_COMPLETION_RING(r2, 0x11b, 0x6, 0x0, 0x0) setsockopt$XDP_UMEM_FILL_RING(r2, 0x11b, 0x5, &(0x7f0000000140)=0x4000, 0x4) syz_usb_control_io$hid(0xffffffffffffffff, 0x0, 0x0) syz_usb_control_io(0xffffffffffffffff, 0x0, 0x0) r4 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0, 0x90) getdents(r4, &(0x7f0000000040)=""/61, 0x3d) getdents64(r4, &(0x7f0000000f80)=""/4096, 0x1000) io_setup(0x5, &(0x7f0000000140)=0x0) io_submit(r5, 0x1, &(0x7f00000000c0)=[&(0x7f0000000200)={0x0, 0x0, 0x20, 0x0, 0x4000, r1, 0x0, 0x0, 0x228}]) io_pgetevents(r5, 0x3, 0x6, &(0x7f0000000040)=[{}, {}, {}, {}, {}, {}], &(0x7f0000000100)={0x77359400}, &(0x7f0000000340)={&(0x7f0000000300)={[0x200]}, 0x8}) 2.253723969s ago: executing program 4 (id=119): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x1c1341, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r1) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$tipc(&(0x7f0000000200), 0xffffffffffffffff) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @link_local}) writev(r0, &(0x7f0000000340)=[{&(0x7f0000000c00)="89e7ee2c7cdad9b4b47380c988ca", 0xe}, {&(0x7f0000000440)="197cc163df7ce9d0b02650c9824bb25cb9048c6fee30d513dc41d4a41a1a56ea7b", 0x21}], 0x2) 2.253032729s ago: executing program 0 (id=120): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000340)=ANY=[@ANYBLOB="1800"/13], &(0x7f0000000000)='GPL\x00'}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000040)='i2c_reply\x00', r0, 0x0, 0x2}, 0x18) r1 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000300), 0x4) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="07000000040000004800000001"], 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000740)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r2, @ANYBLOB="0000000000000000b703000000050000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000080)='sched_switch\x00', r3}, 0x18) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000500)={r3}, 0xc) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0xe, &(0x7f0000002b00)=ANY=[@ANYBLOB], &(0x7f0000000b80)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, r1, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000040), 0x10}, 0x94) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000700)={r4, 0xe0, &(0x7f0000000a00)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, 0x10) bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000140)={r5}, 0x4) bpf$LINK_GET_NEXT_ID(0x1f, &(0x7f0000000d00)={0x0, 0x0}, 0x8) bpf$TOKEN_CREATE(0x24, 0x0, 0x0) bpf$LINK_GET_FD_BY_ID(0x1e, &(0x7f0000000000)=r6, 0x4) bpf$BPF_PROG_DETACH(0x9, &(0x7f00000001c0)={@map=0x1, 0xffffffffffffffff, 0x12, 0x2034, 0x0, @void, @void, @value=r6}, 0x20) r7 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{0x0}, {&(0x7f0000000580)="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", 0x13c}], 0x2, 0x0, 0x48}, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000600)=@bloom_filter={0x1e, 0x9, 0x5, 0x4, 0x1048, 0xffffffffffffffff, 0x9, '\x00', 0x0, 0xffffffffffffffff, 0x1, 0x5, 0x1, 0x1}, 0x50) r8 = syz_genetlink_get_family_id$smc(&(0x7f0000000000), 0xffffffffffffffff) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000b00)={0x11, 0x4, &(0x7f00000003c0)=ANY=[@ANYBLOB="18010000008000000000000000000004850000006d00000095"], &(0x7f0000000a00)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0xe, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffd}, 0x94) r9 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$SMC_PNETID_ADD(r9, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000200)={0x40, r8, 0x1, 0x0, 0x0, {}, [@SMC_PNETID_NAME={0x9, 0x1, 'syz2\x00'}, @SMC_PNETID_ETHNAME={0x14, 0x2, 'bond0\x00'}, @SMC_PNETID_IBNAME={0x9, 0x3, 'syz2\x00'}]}, 0x40}}, 0xc800) sendmsg$SMC_PNETID_DEL(r9, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000040)=ANY=[@ANYBLOB="14000000", @ANYRES16=r8, @ANYBLOB="270e000000000002000004"], 0x14}, 0x1, 0x40030000000000}, 0x0) sendmmsg$inet(0xffffffffffffffff, 0x0, 0x0, 0x8040) ioctl$sock_SIOCGIFINDEX_80211(r7, 0x8b18, &(0x7f0000000000)={'wlan0\x00'}) r10 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x5, &(0x7f00000002c0)=ANY=[@ANYBLOB="180000000004000000000000000000008500000050000000850000005000000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x78) ioctl$F2FS_IOC_MOVE_RANGE(r0, 0xc020f509, &(0x7f0000000080)={r0, 0x6, 0x2}) write$cgroup_subtree(r11, &(0x7f0000000180)={[{0x2b, 'rdma'}]}, 0x6) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000400)={&(0x7f00000003c0)='i2c_reply\x00', r10}, 0x10) 2.238288842s ago: executing program 2 (id=121): socket$kcm(0x10, 0x2, 0x0) r0 = socket$inet6(0xa, 0x3, 0x8000000003c) sendmsg(r0, 0x0, 0x44004) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x20040000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r2, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x0) recvmsg$unix(r1, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000080), 0x100}, 0x0) pselect6(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=ANY=[@ANYBLOB="9000000010000305000000000000000000000700", @ANYRES32=0x0, @ANYBLOB="996e06004d4c070054001280080001006873720048000280050003000800000005000300050000", @ANYRES32=r3, @ANYBLOB="08000100", @ANYRES32=r4], 0x90}}, 0x0) 934.710478ms ago: executing program 1 (id=122): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x10) fanotify_mark(0xffffffffffffffff, 0x80, 0x1000000, 0xffffffffffffffff, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8e}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) mkdir(0x0, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) gettid() r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, 0x0, 0x0) r3 = bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0xd, 0x3, 0x0, &(0x7f0000000080)='GPL\x00', 0x5, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sock_ops, r3}, 0x94) bpf$BPF_BTF_GET_NEXT_ID(0x17, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0xe, 0x16, 0x0, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_skb}, 0x94) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)={{0x14, 0x10, 0x1, 0x0, 0x0, {0xa}}, [@NFT_MSG_NEWRULE={0x70, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x44, 0x4, 0x0, 0x1, [{0x40, 0x1, 0x0, 0x1, @inner={{0xa}, @val={0x30, 0x2, 0x0, 0x1, [@NFTA_INNER_TYPE={0x8, 0x2, 0x1, 0x0, 0x84}, @NFTA_INNER_FLAGS={0x8, 0x3, 0x1, 0x0, 0x7}, @NFTA_INNER_HDRSIZE={0x8, 0x4, 0x1, 0x0, 0xf}, @NFTA_INNER_EXPR={0x14, 0x5, 0x0, 0x1, @payload={{0xc}, @val={0x4}}}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x3}}}, 0x98}}, 0x0) 297.483044ms ago: executing program 1 (id=123): r0 = open(&(0x7f0000000280)='.\x00', 0x20000, 0x0) fcntl$notify(r0, 0x402, 0x5) r1 = open(&(0x7f0000000280)='.\x00', 0x0, 0x0) fcntl$notify(r1, 0x402, 0x8000001f) creat(&(0x7f0000000080)='./file0\x00', 0x86) r2 = socket$l2tp(0x2, 0x2, 0x73) socket$inet6_sctp(0xa, 0x1, 0x84) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x9, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) syz_mount_image$bcachefs(&(0x7f00000000c0), &(0x7f00000003c0)='./file1\x00', 0x800010, &(0x7f0000000000)=ANY=[], 0xff, 0x5a9d, &(0x7f0000000400)="$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") pipe2$watch_queue(0x0, 0x80) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000009c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r3}, 0x10) r4 = getpid() sched_setscheduler(r4, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) connect$unix(r5, &(0x7f000057eff8)=@abs, 0x6e) recvmmsg(r5, &(0x7f00000000c0), 0x3ffff67, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) sendmsg$FOU_CMD_ADD(0xffffffffffffffff, 0x0, 0x0) r6 = open(&(0x7f0000000580)='./file1\x00', 0x80242, 0x1df2a23c5997fa5f) write$FUSE_CREATE_OPEN(r6, &(0x7f0000000180)={0xa0, 0xffffffffffffffda, 0x0, {{0x8, 0x3, 0x5, 0x8, 0x3, 0x1, {0x1, 0x17f, 0x20ff, 0x5, 0x89, 0xd615, 0x9, 0x7fffffff, 0xfffffffe, 0x8000, 0x0, 0x0, 0x0, 0x3ff, 0x1}}, {0x0, 0x13}}}, 0xa0) r7 = socket$inet6(0xa, 0x3, 0x4) setsockopt$inet6_IPV6_XFRM_POLICY(r7, 0x29, 0x43, &(0x7f0000000340)={{{@in=@broadcast, @in6=@private0={0xfc, 0x0, '\x00', 0x1}, 0x0, 0x0, 0x1000}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x3}, {0x2000000000000000, 0x0, 0x0, 0x2}, 0x0, 0x0, 0x2, 0x1}, {{@in6=@mcast1}, 0xa, @in6=@private1={0xfc, 0x1, '\x00', 0x3}}}, 0xe8) bind$l2tp(r2, &(0x7f00000000c0)={0x2, 0x0, @multicast1}, 0x10) 0s ago: executing program 3 (id=124): socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$tipc2(&(0x7f0000000200), 0xffffffffffffffff) syz_mount_image$squashfs(&(0x7f0000000240), &(0x7f0000000280)='./file0\x00', 0x200400, &(0x7f00000002c0)=ANY=[@ANYBLOB='\x00'], 0x1, 0x21f, &(0x7f0000000000)="$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") mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0xb, 0x10031, 0xffffffffffffffff, 0x65be1000) bind$vsock_stream(0xffffffffffffffff, &(0x7f0000000040), 0x10) listen(0xffffffffffffffff, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18090000000000000000000000000000850000006d0000001801000020696c25000000000020"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={0x0}, 0x18) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket$inet6_sctp(0xa, 0x5, 0x84) accept$inet6(0xffffffffffffffff, &(0x7f0000000280)={0xa, 0x0, 0x0, @mcast1}, &(0x7f0000000240)=0x1c) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000001e80)=ANY=[@ANYBLOB="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"], 0x159c}}, 0x0) setsockopt$inet_sctp6_SCTP_AUTH_KEY(r3, 0x84, 0x17, &(0x7f0000000140)=ANY=[], 0xef) r4 = openat$dir(0xffffffffffffff9c, 0x0, 0x0, 0x0) getdents(r4, &(0x7f0000000180)=""/62, 0x3e) kexec_load(0x0, 0x1, &(0x7f0000000140)=[{0x0, 0x2, 0x0, 0x41000000}], 0x0) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.0.206' (ED25519) to the list of known hosts. [ 71.593903][ T5820] cgroup: Unknown subsys name 'net' [ 71.704553][ T5820] cgroup: Unknown subsys name 'cpuset' [ 71.713448][ T5820] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 73.173676][ T5820] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 75.795463][ T51] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 75.803544][ T51] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 75.810971][ T51] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 75.821025][ T5838] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 75.828764][ T5838] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 75.853602][ T5838] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 75.868656][ T5842] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 75.911018][ T5837] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 75.919483][ T5837] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 75.927217][ T5837] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 75.941419][ T5842] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 75.957975][ T5842] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 75.966275][ T5842] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 75.969472][ T5847] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 75.973817][ T5842] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 75.981667][ T5847] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 75.988845][ T5842] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 76.000334][ T5847] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 76.002333][ T5842] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 76.009563][ T5847] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 76.097489][ T5838] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 76.105974][ T5838] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 76.114068][ T5838] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 76.122652][ T5838] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 76.131008][ T5838] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 76.580435][ T5834] chnl_net:caif_netlink_parms(): no params data found [ 76.696145][ T5843] chnl_net:caif_netlink_parms(): no params data found [ 76.742169][ T5830] chnl_net:caif_netlink_parms(): no params data found [ 76.815436][ T5839] chnl_net:caif_netlink_parms(): no params data found [ 76.964344][ T5834] bridge0: port 1(bridge_slave_0) entered blocking state [ 76.971667][ T5834] bridge0: port 1(bridge_slave_0) entered disabled state [ 76.978934][ T5834] bridge_slave_0: entered allmulticast mode [ 76.986393][ T5834] bridge_slave_0: entered promiscuous mode [ 77.036198][ T5834] bridge0: port 2(bridge_slave_1) entered blocking state [ 77.045398][ T5834] bridge0: port 2(bridge_slave_1) entered disabled state [ 77.052576][ T5834] bridge_slave_1: entered allmulticast mode [ 77.059931][ T5834] bridge_slave_1: entered promiscuous mode [ 77.081316][ T5849] chnl_net:caif_netlink_parms(): no params data found [ 77.097467][ T5830] bridge0: port 1(bridge_slave_0) entered blocking state [ 77.104964][ T5830] bridge0: port 1(bridge_slave_0) entered disabled state [ 77.112343][ T5830] bridge_slave_0: entered allmulticast mode [ 77.119660][ T5830] bridge_slave_0: entered promiscuous mode [ 77.137498][ T5843] bridge0: port 1(bridge_slave_0) entered blocking state [ 77.144831][ T5843] bridge0: port 1(bridge_slave_0) entered disabled state [ 77.152200][ T5843] bridge_slave_0: entered allmulticast mode [ 77.159477][ T5843] bridge_slave_0: entered promiscuous mode [ 77.178333][ T5830] bridge0: port 2(bridge_slave_1) entered blocking state [ 77.185507][ T5830] bridge0: port 2(bridge_slave_1) entered disabled state [ 77.192853][ T5830] bridge_slave_1: entered allmulticast mode [ 77.200376][ T5830] bridge_slave_1: entered promiscuous mode [ 77.220118][ T5843] bridge0: port 2(bridge_slave_1) entered blocking state [ 77.227369][ T5843] bridge0: port 2(bridge_slave_1) entered disabled state [ 77.234598][ T5843] bridge_slave_1: entered allmulticast mode [ 77.242007][ T5843] bridge_slave_1: entered promiscuous mode [ 77.305520][ T5834] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 77.340765][ T5839] bridge0: port 1(bridge_slave_0) entered blocking state [ 77.348099][ T5839] bridge0: port 1(bridge_slave_0) entered disabled state [ 77.355279][ T5839] bridge_slave_0: entered allmulticast mode [ 77.362410][ T5839] bridge_slave_0: entered promiscuous mode [ 77.370204][ T5839] bridge0: port 2(bridge_slave_1) entered blocking state [ 77.377351][ T5839] bridge0: port 2(bridge_slave_1) entered disabled state [ 77.384918][ T5839] bridge_slave_1: entered allmulticast mode [ 77.392224][ T5839] bridge_slave_1: entered promiscuous mode [ 77.401552][ T5830] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 77.412926][ T5834] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 77.450620][ T5843] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 77.488069][ T5830] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 77.525951][ T5843] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 77.567454][ T5834] team0: Port device team_slave_0 added [ 77.601279][ T5839] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 77.612495][ T5830] team0: Port device team_slave_0 added [ 77.621422][ T5839] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 77.631930][ T5834] team0: Port device team_slave_1 added [ 77.653227][ T5843] team0: Port device team_slave_0 added [ 77.673840][ T5830] team0: Port device team_slave_1 added [ 77.707617][ T5843] team0: Port device team_slave_1 added [ 77.726235][ T5849] bridge0: port 1(bridge_slave_0) entered blocking state [ 77.733496][ T5849] bridge0: port 1(bridge_slave_0) entered disabled state [ 77.741690][ T5849] bridge_slave_0: entered allmulticast mode [ 77.748797][ T5849] bridge_slave_0: entered promiscuous mode [ 77.757517][ T5849] bridge0: port 2(bridge_slave_1) entered blocking state [ 77.765949][ T5849] bridge0: port 2(bridge_slave_1) entered disabled state [ 77.773262][ T5849] bridge_slave_1: entered allmulticast mode [ 77.781505][ T5849] bridge_slave_1: entered promiscuous mode [ 77.885210][ T5830] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 77.892411][ T5830] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 77.900508][ T5842] Bluetooth: hci0: command tx timeout [ 77.922978][ T5830] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 77.937205][ T5830] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 77.944238][ T5830] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 77.970227][ T5830] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 77.983220][ T5839] team0: Port device team_slave_0 added [ 77.989854][ T5834] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 77.996832][ T5834] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 77.999217][ T5842] Bluetooth: hci1: command tx timeout [ 78.023018][ T5834] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 78.024336][ T5843] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 78.046044][ T5843] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 78.072054][ T5843] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 78.082594][ T5842] Bluetooth: hci3: command tx timeout [ 78.088241][ T5838] Bluetooth: hci2: command tx timeout [ 78.096267][ T5843] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 78.103522][ T5843] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 78.129641][ T5843] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 78.142978][ T5849] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 78.155642][ T5849] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 78.185994][ T5839] team0: Port device team_slave_1 added [ 78.192478][ T5834] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 78.200314][ T5834] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 78.226955][ T5834] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 78.229495][ T5838] Bluetooth: hci4: command tx timeout [ 78.289976][ T5839] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 78.296944][ T5839] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 78.323212][ T5839] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 78.335710][ T5839] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 78.343133][ T5839] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 78.369139][ T5839] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 78.393408][ T5849] team0: Port device team_slave_0 added [ 78.447621][ T5843] hsr_slave_0: entered promiscuous mode [ 78.454200][ T5843] hsr_slave_1: entered promiscuous mode [ 78.462406][ T5849] team0: Port device team_slave_1 added [ 78.499387][ T5830] hsr_slave_0: entered promiscuous mode [ 78.505726][ T5830] hsr_slave_1: entered promiscuous mode [ 78.512440][ T5830] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 78.520452][ T5830] Cannot create hsr debugfs directory [ 78.558893][ T5834] hsr_slave_0: entered promiscuous mode [ 78.565641][ T5834] hsr_slave_1: entered promiscuous mode [ 78.572110][ T5834] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 78.579823][ T5834] Cannot create hsr debugfs directory [ 78.617549][ T5849] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 78.624955][ T5849] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 78.651064][ T5849] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 78.715319][ T5849] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 78.722465][ T5849] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 78.748600][ T5849] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 78.795635][ T5839] hsr_slave_0: entered promiscuous mode [ 78.802345][ T5839] hsr_slave_1: entered promiscuous mode [ 78.808393][ T5839] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 78.816015][ T5839] Cannot create hsr debugfs directory [ 78.982158][ T5849] hsr_slave_0: entered promiscuous mode [ 78.988453][ T5849] hsr_slave_1: entered promiscuous mode [ 78.994583][ T5849] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 79.002172][ T5849] Cannot create hsr debugfs directory [ 79.324513][ T5843] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 79.344517][ T5843] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 79.368196][ T5843] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 79.398312][ T5843] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 79.467356][ T5830] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 79.478949][ T5830] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 79.503036][ T5830] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 79.514223][ T5830] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 79.568304][ T5839] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 79.593203][ T5839] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 79.611902][ T5839] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 79.625525][ T5839] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 79.743073][ T5834] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 79.754054][ T5834] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 79.765542][ T5834] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 79.788089][ T5834] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 79.848492][ T5843] 8021q: adding VLAN 0 to HW filter on device bond0 [ 79.875436][ T5849] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 79.910397][ T5849] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 79.924412][ T5849] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 79.936654][ T5849] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 79.972104][ T5843] 8021q: adding VLAN 0 to HW filter on device team0 [ 79.982916][ T5838] Bluetooth: hci0: command tx timeout [ 80.008176][ T5830] 8021q: adding VLAN 0 to HW filter on device bond0 [ 80.024361][ T2990] bridge0: port 1(bridge_slave_0) entered blocking state [ 80.031621][ T2990] bridge0: port 1(bridge_slave_0) entered forwarding state [ 80.059443][ T5838] Bluetooth: hci1: command tx timeout [ 80.085953][ T2990] bridge0: port 2(bridge_slave_1) entered blocking state [ 80.093108][ T2990] bridge0: port 2(bridge_slave_1) entered forwarding state [ 80.111313][ T5830] 8021q: adding VLAN 0 to HW filter on device team0 [ 80.139604][ T5838] Bluetooth: hci3: command tx timeout [ 80.140475][ T5842] Bluetooth: hci2: command tx timeout [ 80.151902][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 80.159137][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 80.207437][ T36] bridge0: port 2(bridge_slave_1) entered blocking state [ 80.214575][ T36] bridge0: port 2(bridge_slave_1) entered forwarding state [ 80.235778][ T5843] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 80.258758][ T5834] 8021q: adding VLAN 0 to HW filter on device bond0 [ 80.270245][ T5839] 8021q: adding VLAN 0 to HW filter on device bond0 [ 80.299265][ T5842] Bluetooth: hci4: command tx timeout [ 80.324294][ T5839] 8021q: adding VLAN 0 to HW filter on device team0 [ 80.357073][ T5834] 8021q: adding VLAN 0 to HW filter on device team0 [ 80.393192][ T154] bridge0: port 1(bridge_slave_0) entered blocking state [ 80.400357][ T154] bridge0: port 1(bridge_slave_0) entered forwarding state [ 80.433377][ T5849] 8021q: adding VLAN 0 to HW filter on device bond0 [ 80.448026][ T5830] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 80.466602][ T154] bridge0: port 2(bridge_slave_1) entered blocking state [ 80.473772][ T154] bridge0: port 2(bridge_slave_1) entered forwarding state [ 80.486001][ T154] bridge0: port 1(bridge_slave_0) entered blocking state [ 80.493267][ T154] bridge0: port 1(bridge_slave_0) entered forwarding state [ 80.535802][ T36] bridge0: port 2(bridge_slave_1) entered blocking state [ 80.543007][ T36] bridge0: port 2(bridge_slave_1) entered forwarding state [ 80.615630][ T5834] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 80.626977][ T5834] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 80.668642][ T5849] 8021q: adding VLAN 0 to HW filter on device team0 [ 80.683307][ T2990] bridge0: port 1(bridge_slave_0) entered blocking state [ 80.690546][ T2990] bridge0: port 1(bridge_slave_0) entered forwarding state [ 80.705009][ T5843] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 80.725359][ T1336] bridge0: port 2(bridge_slave_1) entered blocking state [ 80.732512][ T1336] bridge0: port 2(bridge_slave_1) entered forwarding state [ 80.983009][ T5830] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 81.005703][ T5843] veth0_vlan: entered promiscuous mode [ 81.032489][ T5843] veth1_vlan: entered promiscuous mode [ 81.126672][ T5843] veth0_macvtap: entered promiscuous mode [ 81.188997][ T5843] veth1_macvtap: entered promiscuous mode [ 81.280799][ T5843] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 81.302820][ T5834] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 81.323505][ T5843] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 81.352051][ T5830] veth0_vlan: entered promiscuous mode [ 81.357905][ T154] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 81.382327][ T154] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 81.406963][ T5830] veth1_vlan: entered promiscuous mode [ 81.427187][ T5839] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 81.436542][ T154] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 81.446573][ T154] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 81.607899][ T5830] veth0_macvtap: entered promiscuous mode [ 81.635723][ T5849] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 81.647163][ T5830] veth1_macvtap: entered promiscuous mode [ 81.672446][ T59] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 81.692677][ T59] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 81.751081][ T5830] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 81.767935][ T5839] veth0_vlan: entered promiscuous mode [ 81.788954][ T5830] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 81.828575][ T2990] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 81.844765][ T2990] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 81.867598][ T5849] veth0_vlan: entered promiscuous mode [ 81.879489][ T154] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 81.888561][ T5839] veth1_vlan: entered promiscuous mode [ 81.923563][ T5849] veth1_vlan: entered promiscuous mode [ 81.932049][ T154] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 81.953474][ T5843] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 81.956049][ T154] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 82.010946][ T154] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 82.072096][ T5842] Bluetooth: hci0: command tx timeout [ 82.105265][ T5945] kvm_intel: L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 82.107528][ T5834] veth0_vlan: entered promiscuous mode [ 82.150062][ T5842] Bluetooth: hci1: command tx timeout [ 82.164151][ T5834] veth1_vlan: entered promiscuous mode [ 82.187866][ T5849] veth0_macvtap: entered promiscuous mode [ 82.221131][ T5842] Bluetooth: hci2: command tx timeout [ 82.221167][ T5838] Bluetooth: hci3: command tx timeout [ 82.235058][ T5849] veth1_macvtap: entered promiscuous mode [ 82.250129][ T5839] veth0_macvtap: entered promiscuous mode [ 82.256924][ T5946] loop2: detected capacity change from 0 to 2048 [ 82.288283][ T5839] veth1_macvtap: entered promiscuous mode [ 82.301481][ T36] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 82.318076][ T5946] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 82.332952][ T36] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 82.344583][ T5946] ext4 filesystem being mounted at /0/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 82.350789][ T5834] veth0_macvtap: entered promiscuous mode [ 82.373046][ T5945] EXT4-fs error (device loop2): ext4_xattr_block_find:1869: inode #15: comm syz.2.3: corrupted xattr block 128: bad e_name length [ 82.387550][ T5838] Bluetooth: hci4: command tx timeout [ 82.417505][ T5849] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 82.476229][ T5834] veth1_macvtap: entered promiscuous mode [ 82.486358][ T5849] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 82.504287][ T5843] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 82.513831][ T154] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 82.531190][ T5839] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 82.539004][ T154] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 82.552193][ T36] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 82.588098][ T36] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 82.624331][ T36] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 82.658618][ T5839] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 82.673034][ T36] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 82.692931][ T5953] netlink: 44 bytes leftover after parsing attributes in process `syz.2.6'. [ 82.709030][ T5834] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 83.192564][ T5834] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 83.317237][ T12] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 83.355463][ T5958] loop0: detected capacity change from 0 to 1024 [ 83.369141][ T5958] EXT4-fs (loop0): ext4_check_descriptors: Checksum for group 0 failed (32298!=35945) [ 83.422636][ T5958] EXT4-fs (loop0): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 83.446474][ T12] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 83.469470][ T5958] EXT4-fs (loop0): revision level too high, forcing read-only mode [ 83.489219][ T12] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 83.491735][ T5958] EXT4-fs (loop0): orphan cleanup on readonly fs [ 83.508539][ T5958] EXT4-fs error (device loop0): ext4_read_inode_bitmap:167: comm syz.0.1: Inode bitmap for bg 0 marked uninitialized [ 83.515956][ T2990] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 83.545561][ T5958] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 83.634598][ T2990] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 83.652472][ T2990] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 83.674888][ T154] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 83.694199][ T2990] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 83.698961][ T154] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 83.712191][ T5964] loop2: detected capacity change from 0 to 64 [ 83.719392][ T2990] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 83.985732][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 83.999123][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 84.181334][ T5838] Bluetooth: hci0: command tx timeout [ 84.982086][ T5842] Bluetooth: hci3: command tx timeout [ 84.987590][ T5838] Bluetooth: hci1: command tx timeout [ 84.989142][ T5847] Bluetooth: hci2: command tx timeout [ 84.993039][ T5842] Bluetooth: hci4: command tx timeout [ 85.230020][ T59] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 85.273628][ T59] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 85.487249][ T2990] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 85.491503][ T36] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 85.506855][ T36] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 85.520282][ T2990] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 85.826629][ T5973] loop3: detected capacity change from 0 to 32768 [ 85.893704][ T1336] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 85.916147][ T1336] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 86.118446][ T5976] loop1: detected capacity change from 0 to 32768 [ 86.197209][ T5973] bcachefs (loop3): starting version 1.7: mi_btree_bitmap opts=errors=continue,metadata_checksum=none,data_checksum=none,compression=lz4,nocow [ 86.197234][ T5973] allowing incompatible features above 0.0: (unknown version) [ 86.197248][ T5973] features: lz4,new_siphash,inline_data,new_extent_overwrite,btree_ptr_v2,new_varint,journal_no_flush,alloc_v2,extents_across_btree_nodes [ 86.235415][ T5973] bcachefs (loop3): Using encoding defined by superblock: utf8-12.1.0 [ 86.243848][ T5973] bcachefs (loop3): initializing new filesystem [ 86.259813][ T5973] bcachefs (loop3): going read-write [ 86.276175][ T5973] bcachefs (loop3): marking superblocks [ 86.295430][ T5973] bcachefs (loop3): initializing freespace [ 86.305214][ T5973] bcachefs (loop3): done initializing freespace [ 86.315030][ T5973] bcachefs (loop3): reading snapshots table [ 86.321041][ T5973] bcachefs (loop3): reading snapshots done [ 86.364816][ T5976] bcachefs (loop1): starting version 1.7: mi_btree_bitmap opts=errors=continue,metadata_checksum=none,data_checksum=none,compression=lz4,nocow [ 86.364839][ T5976] allowing incompatible features above 0.0: (unknown version) [ 86.364852][ T5976] features: lz4,new_siphash,inline_data,new_extent_overwrite,btree_ptr_v2,new_varint,journal_no_flush,alloc_v2,extents_across_btree_nodes [ 86.402021][ T5976] bcachefs (loop1): Using encoding defined by superblock: utf8-12.1.0 [ 86.410819][ T5976] bcachefs (loop1): initializing new filesystem [ 86.425299][ T5976] bcachefs (loop1): going read-write [ 86.435523][ T5973] bcachefs (loop3): loop3: Superblock write was silently dropped! (seq 0 expected 42) [ 86.448000][ T5973] bcachefs (loop3): done starting filesystem [ 86.497792][ T5976] bcachefs (loop1): marking superblocks [ 86.511388][ T5976] bcachefs (loop1): initializing freespace [ 86.520865][ T5976] bcachefs (loop1): done initializing freespace [ 86.529902][ T5976] bcachefs (loop1): reading snapshots table [ 86.535872][ T5976] bcachefs (loop1): reading snapshots done [ 86.560581][ T5976] bcachefs (loop1): loop1: Superblock write was silently dropped! (seq 0 expected 42) [ 86.586797][ T5976] bcachefs (loop1): done starting filesystem [ 87.230993][ T5973] syz.3.4 (5973) used greatest stack depth: 16408 bytes left [ 87.351665][ T6001] loop4: detected capacity change from 0 to 8 [ 87.722228][ T6001] SQUASHFS error: xz decompression failed, data probably corrupt [ 87.766722][ T6001] SQUASHFS error: Failed to read block 0x108: -5 [ 87.804132][ T6001] SQUASHFS error: Unable to read metadata cache entry [106] [ 87.842021][ T6001] SQUASHFS error: Unable to read inode 0x7ff [ 88.690328][ T5830] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 89.821241][ T5849] bcachefs (loop3): shutting down [ 89.826812][ T5849] bcachefs (loop3): going read-only [ 89.863657][ T5849] bcachefs (loop3): finished waiting for writes to stop [ 90.102283][ T5839] bcachefs (loop1): shutting down [ 90.123049][ T5839] bcachefs (loop1): going read-only [ 90.128296][ T5839] bcachefs (loop1): finished waiting for writes to stop [ 90.169604][ T5849] bcachefs (loop3): flushing journal and stopping allocators, journal seq 5 [ 90.199319][ T0] NOHZ tick-stop error: local softirq work is pending, handler #3c0!!! [ 90.200190][ T5839] bcachefs (loop1): flushing journal and stopping allocators, journal seq 6 [ 90.210663][ T0] NOHZ tick-stop error: local softirq work is pending, handler #240!!! [ 90.219512][ T0] NOHZ tick-stop error: local softirq work is pending, handler #08!!! [ 90.264166][ T5849] bcachefs (loop3): flushing journal and stopping allocators complete, journal seq 5 [ 90.474897][ T6015] loop4: detected capacity change from 0 to 40427 [ 90.502023][ T6015] F2FS-fs (loop4): invalid crc value [ 90.524028][ T5849] bcachefs (loop3): clean shutdown complete, journal seq 6 [ 90.569644][ T6015] F2FS-fs (loop4): Start checkpoint disabled! [ 90.580552][ T5839] bcachefs (loop1): flushing journal and stopping allocators complete, journal seq 7 [ 90.590993][ T6015] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e6 [ 90.638476][ T5849] bcachefs (loop3): marking filesystem clean [ 90.653955][ T5839] bcachefs (loop1): clean shutdown complete, journal seq 8 [ 90.662170][ T5839] bcachefs (loop1): marking filesystem clean [ 90.793622][ T6022] syz.4.12: attempt to access beyond end of device [ 90.793622][ T6022] loop4: rw=0, sector=45064, nr_sectors = 8 limit=40427 [ 91.369300][ T6020] loop2: detected capacity change from 0 to 32768 [ 91.446784][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 91.464849][ T5849] bcachefs (loop3): shutdown complete [ 91.476083][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 91.505330][ T5839] bcachefs (loop1): shutdown complete [ 91.631170][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 91.669580][ T6020] bcachefs (loop2): starting version 1.7: mi_btree_bitmap opts=errors=continue,metadata_checksum=none,data_checksum=none,compression=lz4,nocow [ 91.669601][ T6020] allowing incompatible features above 0.0: (unknown version) [ 91.669613][ T6020] features: lz4,new_siphash,inline_data,new_extent_overwrite,btree_ptr_v2,new_varint,journal_no_flush,alloc_v2,extents_across_btree_nodes [ 91.706432][ T6020] bcachefs (loop2): Using encoding defined by superblock: utf8-12.1.0 [ 91.714730][ T6020] bcachefs (loop2): initializing new filesystem [ 91.730115][ T6020] bcachefs (loop2): going read-write [ 91.742890][ T9] cfg80211: failed to load regulatory.db [ 91.799863][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 91.858383][ T6020] bcachefs (loop2): marking superblocks [ 91.879261][ T6020] bcachefs (loop2): initializing freespace [ 91.888114][ T6020] bcachefs (loop2): done initializing freespace [ 91.896907][ T6020] bcachefs (loop2): reading snapshots table [ 91.902996][ T6020] bcachefs (loop2): reading snapshots done [ 91.932600][ T6020] bcachefs (loop2): loop2: Superblock write was silently dropped! (seq 0 expected 42) [ 91.943902][ T6020] bcachefs (loop2): done starting filesystem [ 92.271184][ T5935] IPVS: starting estimator thread 0... [ 92.409273][ T6039] IPVS: using max 30 ests per chain, 72000 per kthread [ 92.557184][ T5843] bcachefs (loop2): shutting down [ 92.582510][ T5843] bcachefs (loop2): going read-only [ 92.609263][ T5843] bcachefs (loop2): finished waiting for writes to stop [ 92.749194][ T5843] bcachefs (loop2): flushing journal and stopping allocators, journal seq 3 [ 92.881429][ T6041] loop3: detected capacity change from 0 to 32768 [ 92.909630][ T5843] bcachefs (loop2): flushing journal and stopping allocators complete, journal seq 3 [ 93.169859][ T6047] loop4: detected capacity change from 0 to 32768 [ 93.233343][ T5843] bcachefs (loop2): clean shutdown complete, journal seq 4 [ 93.245866][ T5843] bcachefs (loop2): marking filesystem clean [ 93.313805][ T6052] loop1: detected capacity change from 0 to 40427 [ 93.340535][ T6052] F2FS-fs (loop1): invalid crc value [ 93.353662][ T6041] bcachefs (loop3): starting version 1.7: mi_btree_bitmap opts=errors=continue,metadata_checksum=none,data_checksum=none,compression=lz4,nocow [ 93.353681][ T6041] allowing incompatible features above 0.0: (unknown version) [ 93.353691][ T6041] features: lz4,new_siphash,inline_data,new_extent_overwrite,btree_ptr_v2,new_varint,journal_no_flush,alloc_v2,extents_across_btree_nodes [ 93.391125][ T6041] bcachefs (loop3): Using encoding defined by superblock: utf8-12.1.0 [ 93.399363][ T6041] bcachefs (loop3): initializing new filesystem [ 93.413655][ T6041] bcachefs (loop3): going read-write [ 93.459707][ T5843] bcachefs (loop2): shutdown complete [ 93.537044][ T6052] F2FS-fs (loop1): Start checkpoint disabled! [ 93.548226][ T6041] bcachefs (loop3): marking superblocks [ 93.561112][ T6041] bcachefs (loop3): initializing freespace [ 93.569950][ T6041] bcachefs (loop3): done initializing freespace [ 93.571390][ T6047] bcachefs (loop4): starting version 1.7: mi_btree_bitmap opts=errors=continue,metadata_checksum=none,data_checksum=none,compression=lz4,nocow [ 93.583301][ T6041] bcachefs (loop3): reading snapshots table [ 93.593376][ T6047] allowing incompatible features above 0.0: (unknown version) [ 93.596760][ T6041] bcachefs (loop3): reading snapshots done [ 93.604429][ T6047] features: lz4,new_siphash,inline_data,new_extent_overwrite,btree_ptr_v2,new_varint,journal_no_flush,alloc_v2,extents_across_btree_nodes [ 93.624528][ T6047] bcachefs (loop4): Using encoding defined by superblock: utf8-12.1.0 [ 93.633599][ T6047] bcachefs (loop4): initializing new filesystem [ 93.648963][ T6047] bcachefs (loop4): going read-write [ 93.675688][ T6052] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e6 [ 93.695994][ T6047] bcachefs (loop4): marking superblocks [ 93.709285][ T6047] bcachefs (loop4): initializing freespace [ 93.717277][ T6041] bcachefs (loop3): loop3: Superblock write was silently dropped! (seq 0 expected 42) [ 93.718377][ T6047] bcachefs (loop4): done initializing freespace [ 93.735973][ T6047] bcachefs (loop4): reading snapshots table [ 93.737728][ T6041] bcachefs (loop3): done starting filesystem [ 93.742777][ T6047] bcachefs (loop4): reading snapshots done [ 93.778498][ T6047] bcachefs (loop4): loop4: Superblock write was silently dropped! (seq 0 expected 42) [ 93.790284][ T6047] bcachefs (loop4): done starting filesystem [ 95.319316][ T0] NOHZ tick-stop error: local softirq work is pending, handler #142!!! [ 96.259773][ T6052] syz.1.17: attempt to access beyond end of device [ 96.259773][ T6052] loop1: rw=0, sector=45064, nr_sectors = 8 limit=40427 [ 96.351096][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 96.359667][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 96.423058][ T5834] bcachefs (loop4): shutting down [ 96.463645][ T5849] bcachefs (loop3): shutting down [ 96.468713][ T5849] bcachefs (loop3): going read-only [ 96.473758][ T5834] bcachefs (loop4): going read-only [ 96.504022][ T5834] bcachefs (loop4): finished waiting for writes to stop [ 96.522247][ T5849] bcachefs (loop3): finished waiting for writes to stop [ 96.578320][ T5834] bcachefs (loop4): flushing journal and stopping allocators, journal seq 5 [ 96.607472][ T5849] bcachefs (loop3): flushing journal and stopping allocators, journal seq 5 [ 96.640831][ T5849] bcachefs (loop3): flushing journal and stopping allocators complete, journal seq 5 [ 96.672986][ T5849] bcachefs (loop3): clean shutdown complete, journal seq 6 [ 96.690306][ T5849] bcachefs (loop3): marking filesystem clean [ 96.750902][ T5834] bcachefs (loop4): flushing journal and stopping allocators complete, journal seq 5 [ 96.839548][ T5834] bcachefs (loop4): clean shutdown complete, journal seq 6 [ 96.850284][ T5834] bcachefs (loop4): marking filesystem clean [ 96.895970][ T5849] bcachefs (loop3): shutdown complete [ 96.915715][ T5834] bcachefs (loop4): shutdown complete [ 97.016849][ T6081] loop2: detected capacity change from 0 to 32768 [ 97.832026][ T6095] netlink: 28 bytes leftover after parsing attributes in process `syz.1.20'. [ 97.872114][ T6095] bridge0: port 2(bridge_slave_1) entered disabled state [ 97.881628][ T6095] bridge0: port 1(bridge_slave_0) entered disabled state [ 98.149591][ T6081] bcachefs (loop2): starting version 1.7: mi_btree_bitmap opts=errors=continue,metadata_checksum=none,data_checksum=none,compression=lz4,nocow [ 98.149608][ T6081] allowing incompatible features above 0.0: (unknown version) [ 98.149615][ T6081] features: lz4,new_siphash,inline_data,new_extent_overwrite,btree_ptr_v2,new_varint,journal_no_flush,alloc_v2,extents_across_btree_nodes [ 98.186584][ T6081] bcachefs (loop2): Using encoding defined by superblock: utf8-12.1.0 [ 98.194786][ T6081] bcachefs (loop2): initializing new filesystem [ 98.206720][ T6081] bcachefs (loop2): going read-write [ 98.374368][ T6081] bcachefs (loop2): marking superblocks [ 98.386557][ T6081] bcachefs (loop2): initializing freespace [ 98.395699][ T6081] bcachefs (loop2): done initializing freespace [ 98.403696][ T6081] bcachefs (loop2): reading snapshots table [ 98.409655][ T6081] bcachefs (loop2): reading snapshots done [ 98.434731][ T6081] bcachefs (loop2): loop2: Superblock write was silently dropped! (seq 0 expected 42) [ 98.455506][ T6081] bcachefs (loop2): done starting filesystem [ 100.141201][ T6106] loop4: detected capacity change from 0 to 32768 [ 100.166503][ T5843] bcachefs (loop2): shutting down [ 100.177330][ T5843] bcachefs (loop2): going read-only [ 100.184571][ T5843] bcachefs (loop2): finished waiting for writes to stop [ 100.202055][ T5843] bcachefs (loop2): flushing journal and stopping allocators, journal seq 4 [ 100.248007][ T5843] bcachefs (loop2): flushing journal and stopping allocators complete, journal seq 4 [ 100.292267][ T5935] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 100.305144][ T6106] bcachefs (loop4): starting version 1.7: mi_btree_bitmap opts=errors=continue,metadata_checksum=none,data_checksum=none,compression=lz4,nocow [ 100.305165][ T6106] allowing incompatible features above 0.0: (unknown version) [ 100.305177][ T6106] features: lz4,new_siphash,inline_data,new_extent_overwrite,btree_ptr_v2,new_varint,journal_no_flush,alloc_v2,extents_across_btree_nodes [ 100.343520][ T6106] bcachefs (loop4): Using encoding defined by superblock: utf8-12.1.0 [ 100.351781][ T6106] bcachefs (loop4): initializing new filesystem [ 100.366526][ T6106] bcachefs (loop4): going read-write [ 100.376217][ T5843] bcachefs (loop2): clean shutdown complete, journal seq 5 [ 100.394947][ T5843] bcachefs (loop2): marking filesystem clean [ 100.429439][ T6106] bcachefs (loop4): marking superblocks [ 100.443373][ T6106] bcachefs (loop4): initializing freespace [ 100.453592][ T6106] bcachefs (loop4): done initializing freespace [ 100.461363][ T6106] bcachefs (loop4): reading snapshots table [ 100.467289][ T6106] bcachefs (loop4): reading snapshots done [ 100.497037][ T6106] bcachefs (loop4): loop4: Superblock write was silently dropped! (seq 0 expected 42) [ 100.497588][ T5935] usb 4-1: Using ep0 maxpacket: 16 [ 100.519009][ T6106] bcachefs (loop4): done starting filesystem [ 100.590890][ T5935] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 100.616977][ T5843] bcachefs (loop2): shutdown complete [ 100.652449][ T5935] usb 4-1: config 0 has no interfaces? [ 100.658019][ T5935] usb 4-1: New USB device found, idVendor=1e7d, idProduct=2c2e, bcdDevice=1a.00 [ 100.684080][ T5935] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 100.765218][ T5935] usb 4-1: config 0 descriptor?? [ 101.166699][ T5951] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 101.389275][ T5951] usb 2-1: Using ep0 maxpacket: 16 [ 101.412800][ T5951] usb 2-1: config 0 has an invalid interface descriptor of length 8, skipping [ 101.465345][ T5951] usb 2-1: config 0 descriptor has 1 excess byte, ignoring [ 101.526149][ T5951] usb 2-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 101.579889][ T5951] usb 2-1: New USB device found, idVendor=1004, idProduct=61aa, bcdDevice=4f.75 [ 101.624331][ T5951] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 101.654157][ T5951] usb 2-1: Product: syz [ 101.658347][ T5951] usb 2-1: Manufacturer: syz [ 101.681199][ T5951] usb 2-1: SerialNumber: syz [ 101.706776][ T5951] usb 2-1: rejected 1 configuration due to insufficient available bus power [ 101.736676][ T5951] usb 2-1: no configuration chosen from 1 choice [ 101.927314][ T5951] usb 4-1: USB disconnect, device number 2 [ 102.363199][ T5834] bcachefs (loop4): shutting down [ 102.368275][ T5834] bcachefs (loop4): going read-only [ 102.406911][ T5834] bcachefs (loop4): finished waiting for writes to stop [ 102.427275][ T5834] bcachefs (loop4): flushing journal and stopping allocators, journal seq 4 [ 102.464977][ T5834] bcachefs (loop4): flushing journal and stopping allocators complete, journal seq 4 [ 102.494975][ T6131] tipc: Started in network mode [ 102.520758][ T6131] tipc: Node identity 7a13689b808a, cluster identity 4711 [ 102.528361][ T6131] tipc: Enabled bearer , priority 10 [ 102.536935][ T5834] bcachefs (loop4): clean shutdown complete, journal seq 5 [ 102.552071][ T5834] bcachefs (loop4): marking filesystem clean [ 102.606101][ T5834] bcachefs (loop4): shutdown complete [ 102.677382][ T6134] tipc: Resetting bearer [ 102.719630][ T6130] tipc: Resetting bearer [ 102.860468][ T6136] loop3: detected capacity change from 0 to 32768 [ 103.170669][ T6137] loop0: detected capacity change from 0 to 32768 [ 103.219282][ T6137] XFS (loop0): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 103.363810][ T6137] XFS (loop0): Ending clean mount [ 103.395885][ T6137] XFS (loop0): Quotacheck needed: Please wait. [ 103.507697][ T6137] XFS (loop0): Quotacheck: Done. [ 103.571154][ T5951] tipc: Node number set to 4204357787 [ 103.593946][ T6136] bcachefs (loop3): starting version 1.7: mi_btree_bitmap opts=errors=continue,metadata_checksum=none,data_checksum=none,compression=lz4,nocow [ 103.593966][ T6136] allowing incompatible features above 0.0: (unknown version) [ 103.593976][ T6136] features: lz4,new_siphash,inline_data,new_extent_overwrite,btree_ptr_v2,new_varint,journal_no_flush,alloc_v2,extents_across_btree_nodes [ 103.632801][ T6136] bcachefs (loop3): Using encoding defined by superblock: utf8-12.1.0 [ 103.641065][ T6136] bcachefs (loop3): initializing new filesystem [ 103.655285][ T6136] bcachefs (loop3): going read-write [ 103.684891][ T6136] bcachefs (loop3): marking superblocks [ 103.697011][ T6136] bcachefs (loop3): initializing freespace [ 103.703353][ T5951] usb 2-1: USB disconnect, device number 2 [ 103.705921][ T6136] bcachefs (loop3): done initializing freespace [ 103.720385][ T6136] bcachefs (loop3): reading snapshots table [ 103.726357][ T6136] bcachefs (loop3): reading snapshots done [ 103.751519][ T6136] bcachefs (loop3): loop3: Superblock write was silently dropped! (seq 0 expected 42) [ 103.776742][ T6136] bcachefs (loop3): done starting filesystem [ 104.238230][ T6158] loop1: detected capacity change from 0 to 32768 [ 104.607822][ T6158] bcachefs (loop1): starting version 1.7: mi_btree_bitmap opts=errors=continue,metadata_checksum=none,data_checksum=none,compression=lz4,nocow [ 104.607848][ T6158] allowing incompatible features above 0.0: (unknown version) [ 104.607861][ T6158] features: lz4,new_siphash,inline_data,new_extent_overwrite,btree_ptr_v2,new_varint,journal_no_flush,alloc_v2,extents_across_btree_nodes [ 104.644997][ T6158] bcachefs (loop1): Using encoding defined by superblock: utf8-12.1.0 [ 104.653216][ T6158] bcachefs (loop1): initializing new filesystem [ 104.667316][ T6158] bcachefs (loop1): going read-write [ 104.714503][ T6158] bcachefs (loop1): marking superblocks [ 104.726665][ T6158] bcachefs (loop1): initializing freespace [ 104.735645][ T6158] bcachefs (loop1): done initializing freespace [ 104.744806][ T6158] bcachefs (loop1): reading snapshots table [ 104.750780][ T6158] bcachefs (loop1): reading snapshots done [ 104.804807][ T6158] bcachefs (loop1): loop1: Superblock write was silently dropped! (seq 0 expected 42) [ 104.816918][ T6158] bcachefs (loop1): done starting filesystem [ 104.894028][ T6173] loop4: detected capacity change from 0 to 8 [ 105.002955][ T6173] SQUASHFS error: xz decompression failed, data probably corrupt [ 105.054156][ T6173] SQUASHFS error: Failed to read block 0x108: -5 [ 105.092519][ T6173] SQUASHFS error: Unable to read metadata cache entry [106] [ 105.233215][ T6173] SQUASHFS error: Unable to read inode 0x7ff [ 106.837447][ T5849] bcachefs (loop3): shutting down [ 106.845746][ T5849] bcachefs (loop3): going read-only [ 106.866220][ T5849] bcachefs (loop3): finished waiting for writes to stop [ 106.953803][ T6180] loop4: detected capacity change from 0 to 4096 [ 106.968679][ T6180] ======================================================= [ 106.968679][ T6180] WARNING: The mand mount option has been deprecated and [ 106.968679][ T6180] and is ignored by this kernel. Remove the mand [ 106.968679][ T6180] option from the mount to silence this warning. [ 106.968679][ T6180] ======================================================= [ 107.351954][ T5849] bcachefs (loop3): flushing journal and stopping allocators, journal seq 5 [ 107.395751][ T5849] bcachefs (loop3): flushing journal and stopping allocators complete, journal seq 5 [ 107.453556][ T5849] bcachefs (loop3): clean shutdown complete, journal seq 6 [ 107.493883][ T5849] bcachefs (loop3): marking filesystem clean [ 107.645558][ T5849] bcachefs (loop3): shutdown complete [ 107.670820][ T6183] loop4: detected capacity change from 0 to 1024 [ 107.715115][ T6183] EXT4-fs (loop4): ext4_check_descriptors: Checksum for group 0 failed (32298!=35945) [ 107.744410][ T6183] EXT4-fs (loop4): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 107.766873][ T5839] bcachefs (loop1): shutting down [ 107.776621][ T5839] bcachefs (loop1): going read-only [ 107.777206][ T6183] EXT4-fs (loop4): revision level too high, forcing read-only mode [ 107.781993][ T5839] bcachefs (loop1): finished waiting for writes to stop [ 107.801143][ T5839] bcachefs (loop1): flushing journal and stopping allocators, journal seq 4 [ 107.823825][ T6183] EXT4-fs (loop4): orphan cleanup on readonly fs [ 107.832844][ T6183] EXT4-fs error (device loop4): ext4_read_inode_bitmap:167: comm syz.4.32: Inode bitmap for bg 0 marked uninitialized [ 107.837586][ T5839] bcachefs (loop1): flushing journal and stopping allocators complete, journal seq 5 [ 107.871374][ T6183] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 107.906689][ T5839] bcachefs (loop1): clean shutdown complete, journal seq 6 [ 107.929862][ T5839] bcachefs (loop1): marking filesystem clean [ 108.141069][ T5839] bcachefs (loop1): shutdown complete [ 108.551233][ T6187] loop3: detected capacity change from 0 to 40427 [ 109.140494][ T6187] F2FS-fs (loop3): invalid crc value [ 109.152226][ T5834] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 109.162828][ T6130] tipc: Disabling bearer [ 109.239397][ T6187] F2FS-fs (loop3): Start checkpoint disabled! [ 109.259505][ T6187] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e6 [ 109.440226][ T6193] syz.3.30: attempt to access beyond end of device [ 109.440226][ T6193] loop3: rw=0, sector=45064, nr_sectors = 8 limit=40427 [ 109.470923][ T6192] loop4: detected capacity change from 0 to 1024 [ 109.803563][ T6192] EXT4-fs (loop4): ext4_check_descriptors: Checksum for group 0 failed (32298!=35945) [ 109.838456][ T6192] EXT4-fs (loop4): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 109.909586][ T6192] EXT4-fs (loop4): revision level too high, forcing read-only mode [ 109.940508][ T6192] EXT4-fs (loop4): orphan cleanup on readonly fs [ 109.951279][ T6192] EXT4-fs error (device loop4): ext4_read_inode_bitmap:167: comm syz.4.34: Inode bitmap for bg 0 marked uninitialized [ 109.965516][ T6196] netlink: 44 bytes leftover after parsing attributes in process `syz.2.35'. [ 109.980800][ T6192] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 110.000638][ T5830] XFS (loop0): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 111.415303][ T5834] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 111.628742][ T6207] loop4: detected capacity change from 0 to 512 [ 111.925639][ T6204] loop2: detected capacity change from 0 to 65536 [ 112.122290][ T6204] XFS (loop2): Mounting V5 Filesystem 9b7348e5-2fa0-41a5-9526-c53a678b01f3 [ 112.417211][ T6204] XFS (loop2): Ending clean mount [ 112.709971][ T6220] overlayfs: missing 'lowerdir' [ 112.841186][ T6221] XFS (loop2): Metadata CRC error detected at xfs_agf_read_verify+0x12f/0x1f0, xfs_agf block 0x1 [ 112.852101][ T6221] XFS (loop2): Unmount and run xfs_repair [ 112.857891][ T6221] XFS (loop2): First 128 bytes of corrupted metadata buffer: [ 112.869952][ T6221] 00000000: 58 41 47 46 00 00 00 01 00 00 00 00 00 00 40 00 XAGF..........@. [ 112.878850][ T6221] 00000010: 00 00 00 02 00 00 00 03 00 00 00 00 00 00 00 01 ................ [ 112.888838][ T6221] 00000020: 00 00 00 01 00 00 00 00 00 00 00 01 00 00 00 04 ................ [ 112.897824][ T6221] 00000030: 00 00 00 04 00 00 3f ca 00 00 3f c7 00 00 00 00 ......?...?..... [ 112.906790][ T6221] 00000040: 9b 73 48 e5 2f a0 41 a5 95 26 c5 3a 67 8b 01 f3 .sH./.A..&.:g... [ 112.915782][ T6221] 00000050: 00 00 00 00 00 00 00 04 00 00 00 00 00 00 00 00 ................ [ 112.924871][ T6221] 00000060: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 112.935372][ T6221] 00000070: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 112.945768][ T6221] XFS (loop2): metadata I/O error in "xfs_read_agf+0x281/0x5c0" at daddr 0x1 len 1 error 74 [ 113.139733][ T6207] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 113.175076][ T6221] XFS (loop2): Metadata I/O Error (0x1) detected at xfs_trans_read_buf_map+0x517/0x8e0 (fs/xfs/xfs_trans_buf.c:311). Shutting down filesystem. [ 113.183049][ T6207] ext4 filesystem being mounted at /8/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 113.194484][ T6221] XFS (loop2): Please unmount the filesystem and rectify the problem(s) [ 113.494632][ T6206] EXT4-fs (loop4): shut down requested (1) [ 113.507562][ T5843] XFS (loop2): Unmounting Filesystem 9b7348e5-2fa0-41a5-9526-c53a678b01f3 [ 113.675977][ T5834] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 113.684464][ T6230] netlink: 44 bytes leftover after parsing attributes in process `syz.3.36'. [ 114.143617][ T6234] cgroup: release_agent respecified [ 114.154611][ T6234] syz.4.42 calls setitimer() with new_value NULL pointer. Misfeature support will be removed [ 114.618327][ T6238] loop0: detected capacity change from 0 to 128 [ 114.702777][ T6242] loop4: detected capacity change from 0 to 8 [ 114.897567][ T6240] loop2: detected capacity change from 0 to 32768 [ 114.923467][ T6242] SQUASHFS error: xz decompression failed, data probably corrupt [ 115.176204][ T6244] loop1: detected capacity change from 0 to 65536 [ 115.289248][ T6242] SQUASHFS error: Failed to read block 0x108: -5 [ 115.318106][ T6242] SQUASHFS error: Unable to read metadata cache entry [106] [ 115.381859][ T6242] SQUASHFS error: Unable to read inode 0x7ff [ 115.454644][ T6244] XFS (loop1): Mounting V5 Filesystem 9b7348e5-2fa0-41a5-9526-c53a678b01f3 [ 115.787212][ T6261] xt_CT: You must specify a L4 protocol and not use inversions on it [ 116.037400][ T6240] bcachefs (loop2): starting version 1.7: mi_btree_bitmap opts=errors=continue,metadata_checksum=none,data_checksum=none,compression=lz4,nocow [ 116.037677][ T6240] allowing incompatible features above 0.0: (unknown version) [ 116.037718][ T6240] features: lz4,new_siphash,inline_data,new_extent_overwrite,btree_ptr_v2,new_varint,journal_no_flush,alloc_v2,extents_across_btree_nodes [ 116.079758][ T6240] bcachefs (loop2): Using encoding defined by superblock: utf8-12.1.0 [ 116.087958][ T6240] bcachefs (loop2): initializing new filesystem [ 116.101972][ T6240] bcachefs (loop2): going read-write [ 116.176214][ T6244] XFS (loop1): Ending clean mount [ 116.192896][ T6240] bcachefs (loop2): marking superblocks [ 116.206668][ T6240] bcachefs (loop2): initializing freespace [ 116.218200][ T6240] bcachefs (loop2): done initializing freespace [ 116.227126][ T6240] bcachefs (loop2): reading snapshots table [ 116.233130][ T6240] bcachefs (loop2): reading snapshots done [ 117.384267][ T6273] overlayfs: missing 'lowerdir' [ 117.404514][ T6240] bcachefs (loop2): loop2: Superblock write was silently dropped! (seq 0 expected 42) [ 117.416157][ T6240] bcachefs (loop2): done starting filesystem [ 117.628284][ T6274] XFS (loop1): Metadata CRC error detected at xfs_agf_read_verify+0x12f/0x1f0, xfs_agf block 0x1 [ 117.639012][ T6274] XFS (loop1): Unmount and run xfs_repair [ 117.645234][ T6274] XFS (loop1): First 128 bytes of corrupted metadata buffer: [ 117.653044][ T6274] 00000000: 58 41 47 46 00 00 00 01 00 00 00 00 00 00 40 00 XAGF..........@. [ 117.661992][ T6274] 00000010: 00 00 00 02 00 00 00 03 00 00 00 00 00 00 00 01 ................ [ 117.671010][ T6274] 00000020: 00 00 00 01 00 00 00 00 00 00 00 01 00 00 00 04 ................ [ 117.679930][ T6274] 00000030: 00 00 00 04 00 00 3f ca 00 00 3f c7 00 00 00 00 ......?...?..... [ 117.688825][ T6274] 00000040: 9b 73 48 e5 2f a0 41 a5 95 26 c5 3a 67 8b 01 f3 .sH./.A..&.:g... [ 117.697815][ T6274] 00000050: 00 00 00 00 00 00 00 04 00 00 00 00 00 00 00 00 ................ [ 117.706765][ T6274] 00000060: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 117.715744][ T6274] 00000070: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 117.724693][ T6274] XFS (loop1): metadata I/O error in "xfs_read_agf+0x281/0x5c0" at daddr 0x1 len 1 error 74 [ 117.778657][ T6274] XFS (loop1): Metadata I/O Error (0x1) detected at xfs_trans_read_buf_map+0x517/0x8e0 (fs/xfs/xfs_trans_buf.c:311). Shutting down filesystem. [ 117.793414][ T6274] XFS (loop1): Please unmount the filesystem and rectify the problem(s) [ 117.899797][ T5843] bcachefs (loop2): shutting down [ 117.904857][ T5843] bcachefs (loop2): going read-only [ 117.913906][ T6280] netlink: 4 bytes leftover after parsing attributes in process `syz.4.48'. [ 117.929144][ T5843] bcachefs (loop2): finished waiting for writes to stop [ 118.094313][ T5843] bcachefs (loop2): flushing journal and stopping allocators, journal seq 4 [ 118.120301][ T5839] XFS (loop1): Unmounting Filesystem 9b7348e5-2fa0-41a5-9526-c53a678b01f3 [ 118.245809][ T5843] bcachefs (loop2): flushing journal and stopping allocators complete, journal seq 4 [ 118.280530][ T5843] bcachefs (loop2): clean shutdown complete, journal seq 5 [ 118.304883][ T5843] bcachefs (loop2): marking filesystem clean [ 118.428611][ T5843] bcachefs (loop2): shutdown complete [ 118.438358][ T6289] smc: net device bond0 applied user defined pnetid SYZ2 [ 118.445981][ T6289] smc: net device bond0 erased user defined pnetid SYZ2 [ 118.458141][ T6289] warning: `syz.1.51' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 118.847660][ T30] audit: type=1326 audit(1751374390.541:2): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6295 comm="syz.1.54" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc77cf8e929 code=0x7ffc0000 [ 118.870984][ T30] audit: type=1326 audit(1751374390.571:3): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6295 comm="syz.1.54" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc77cf8e929 code=0x7ffc0000 [ 118.936265][ T6296] loop1: detected capacity change from 0 to 512 [ 118.939915][ T30] audit: type=1326 audit(1751374390.601:4): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6295 comm="syz.1.54" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fc77cf8e929 code=0x7ffc0000 [ 118.977949][ T6296] EXT4-fs (loop1): ext4_check_descriptors: Checksum for group 0 failed (17031!=33349) [ 119.000067][ T6296] EXT4-fs (loop1): can't mount with commit=, fs mounted w/o journal [ 119.010116][ T30] audit: type=1326 audit(1751374390.601:5): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6295 comm="syz.1.54" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc77cf8e929 code=0x7ffc0000 [ 119.038687][ T6298] Driver unsupported XDP return value 0 on prog (id 19) dev N/A, expect packet loss! [ 119.076847][ T30] audit: type=1326 audit(1751374390.601:6): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6295 comm="syz.1.54" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc77cf8e929 code=0x7ffc0000 [ 119.119129][ T30] audit: type=1326 audit(1751374390.611:7): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6295 comm="syz.1.54" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7fc77cf8e929 code=0x7ffc0000 [ 119.165903][ T30] audit: type=1326 audit(1751374390.611:8): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6295 comm="syz.1.54" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc77cf8e929 code=0x7ffc0000 [ 119.218418][ T30] audit: type=1326 audit(1751374390.611:9): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6295 comm="syz.1.54" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc77cf8e929 code=0x7ffc0000 [ 119.275957][ T30] audit: type=1326 audit(1751374390.611:10): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6295 comm="syz.1.54" exe="/root/syz-executor" sig=0 arch=c000003e syscall=55 compat=0 ip=0x7fc77cf8e929 code=0x7ffc0000 [ 119.300658][ T6291] loop4: detected capacity change from 0 to 32768 [ 119.328508][ T30] audit: type=1326 audit(1751374390.611:11): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6295 comm="syz.1.54" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc77cf8e929 code=0x7ffc0000 [ 119.534740][ T6301] loop3: detected capacity change from 0 to 32768 [ 119.670152][ T6305] loop0: detected capacity change from 0 to 1024 [ 119.729374][ T6305] EXT4-fs (loop0): ext4_check_descriptors: Checksum for group 0 failed (32298!=35945) [ 119.779180][ T6305] EXT4-fs (loop0): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 119.813559][ T6305] EXT4-fs (loop0): revision level too high, forcing read-only mode [ 119.829410][ T6305] EXT4-fs (loop0): orphan cleanup on readonly fs [ 119.851568][ T6305] EXT4-fs error (device loop0): ext4_read_inode_bitmap:167: comm syz.0.58: Inode bitmap for bg 0 marked uninitialized [ 119.886044][ T6305] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 119.925737][ T6315] loop1: detected capacity change from 0 to 1024 [ 119.939653][ T6315] EXT4-fs (loop1): ext4_check_descriptors: Checksum for group 0 failed (32298!=35945) [ 119.949630][ T6315] EXT4-fs (loop1): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 119.987056][ T6301] bcachefs (loop3): starting version 1.7: mi_btree_bitmap opts=errors=continue,metadata_checksum=none,data_checksum=none,compression=lz4,nocow [ 119.987079][ T6301] allowing incompatible features above 0.0: (unknown version) [ 119.987092][ T6301] features: lz4,new_siphash,inline_data,new_extent_overwrite,btree_ptr_v2,new_varint,journal_no_flush,alloc_v2,extents_across_btree_nodes [ 120.025726][ T6301] bcachefs (loop3): Using encoding defined by superblock: utf8-12.1.0 [ 120.033942][ T6301] bcachefs (loop3): initializing new filesystem [ 120.048406][ T6301] bcachefs (loop3): going read-write [ 120.119539][ T6315] EXT4-fs (loop1): revision level too high, forcing read-only mode [ 120.138261][ T6301] bcachefs (loop3): marking superblocks [ 120.150891][ T6301] bcachefs (loop3): initializing freespace [ 120.159899][ T6301] bcachefs (loop3): done initializing freespace [ 120.168579][ T6301] bcachefs (loop3): reading snapshots table [ 120.174652][ T6301] bcachefs (loop3): reading snapshots done [ 120.224616][ T6301] bcachefs (loop3): loop3: Superblock write was silently dropped! (seq 0 expected 42) [ 120.239280][ T6301] bcachefs (loop3): done starting filesystem [ 120.279296][ T6315] EXT4-fs (loop1): orphan cleanup on readonly fs [ 120.292632][ T6315] EXT4-fs error (device loop1): ext4_read_inode_bitmap:167: comm syz.1.59: Inode bitmap for bg 0 marked uninitialized [ 120.312118][ T5830] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 120.336989][ T6315] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 120.424474][ T6291] bcachefs (loop4): starting version 1.7: mi_btree_bitmap opts=metadata_checksum=none,data_checksum=none,compression=lz4,erasure_code,degraded=yes,no_splitbrain_check,fsck,norecovery,nojournal_transaction_names,reconstruct_alloc,nocow [ 120.424504][ T6291] allowing incompatible features above 0.0: (unknown version) [ 120.424518][ T6291] features: lz4,new_siphash,inline_data,new_extent_overwrite,btree_ptr_v2,new_varint,journal_no_flush,alloc_v2,extents_across_btree_nodes [ 120.603174][ T6291] bcachefs (loop4): Using encoding defined by superblock: utf8-12.1.0 [ 120.657295][ T6291] bcachefs (loop4): recovering from clean shutdown, journal seq 10 [ 120.665991][ T6291] bcachefs (loop4): Version upgrade required: [ 120.665991][ T6291] Version upgrade from 0.24: unwritten_extents to 1.7: mi_btree_bitmap incomplete [ 120.665991][ T6291] Doing incompatible version upgrade from 0.24: unwritten_extents to 1.28: inode_has_case_insensitive [ 120.665991][ T6291] running recovery passes: check_allocations,check_alloc_info,check_lrus,check_btree_backpointers,check_backpointers_to_extents,check_extents_to_backpointers,check_alloc_to_lru_refs,bucket_gens_init,check_snapshot_trees,check_snapshots,check_subvols,check_subvol_children,delete_dead_snapshots,check_inodes,check_extents,check_indirect_extents,check_dirents,check_xattrs,check_root,check_unreachable_inodes,check_subvolume_structure,check_directory_structure,check_nlinks,check_rebalance_work,set_fs_needs_rebalance [ 120.784222][ T6291] bcachefs (loop4): dropping and reconstructing all alloc info [ 120.877402][ T6291] bcachefs (loop4): accounting_read... [ 120.895291][ T5839] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 120.925116][ T6291] done [ 120.927914][ T6291] bcachefs (loop4): alloc_read... done [ 120.954352][ T6291] bcachefs (loop4): snapshots_read... done [ 120.979142][ T6291] bcachefs (loop4): done starting filesystem [ 120.990724][ T5849] bcachefs (loop3): shutting down [ 121.002608][ T5849] bcachefs (loop3): going read-only [ 121.007851][ T5849] bcachefs (loop3): finished waiting for writes to stop [ 121.192633][ T5849] bcachefs (loop3): flushing journal and stopping allocators, journal seq 4 [ 121.265606][ T6335] Cannot find map_set index 0 as target [ 121.294620][ T5849] bcachefs (loop3): flushing journal and stopping allocators complete, journal seq 4 [ 121.306997][ T5849] bcachefs (loop3): clean shutdown complete, journal seq 5 [ 121.315541][ T5849] bcachefs (loop3): marking filesystem clean [ 121.324015][ T6334] FAULT_INJECTION: forcing a failure. [ 121.324015][ T6334] name failslab, interval 1, probability 0, space 0, times 1 [ 121.339387][ T6334] CPU: 0 UID: 0 PID: 6334 Comm: syz.1.61 Not tainted 6.16.0-rc4-next-20250630-syzkaller #0 PREEMPT(full) [ 121.339426][ T6334] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 121.339449][ T6334] Call Trace: [ 121.339457][ T6334] [ 121.339465][ T6334] dump_stack_lvl+0x189/0x250 [ 121.339500][ T6334] ? __pfx____ratelimit+0x10/0x10 [ 121.339528][ T6334] ? __pfx_dump_stack_lvl+0x10/0x10 [ 121.339555][ T6334] ? __pfx__printk+0x10/0x10 [ 121.339580][ T6334] ? __pfx___might_resched+0x10/0x10 [ 121.339610][ T6334] should_fail_ex+0x414/0x560 [ 121.339637][ T6334] should_failslab+0xa8/0x100 [ 121.339658][ T6334] kmem_cache_alloc_node_noprof+0x76/0x3c0 [ 121.339687][ T6334] ? __alloc_skb+0x112/0x2d0 [ 121.339711][ T6334] __alloc_skb+0x112/0x2d0 [ 121.339734][ T6334] netlink_sendmsg+0x5c6/0xb30 [ 121.339762][ T6334] ? __pfx_netlink_sendmsg+0x10/0x10 [ 121.339784][ T6334] ? aa_sock_msg_perm+0xf1/0x1d0 [ 121.339811][ T6334] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 121.339833][ T6334] ? __pfx_netlink_sendmsg+0x10/0x10 [ 121.339852][ T6334] __sock_sendmsg+0x21c/0x270 [ 121.339882][ T6334] ____sys_sendmsg+0x505/0x830 [ 121.339910][ T6334] ? __pfx_____sys_sendmsg+0x10/0x10 [ 121.339941][ T6334] ? import_iovec+0x74/0xa0 [ 121.339968][ T6334] ___sys_sendmsg+0x21f/0x2a0 [ 121.339992][ T6334] ? __pfx____sys_sendmsg+0x10/0x10 [ 121.340050][ T6334] ? __fget_files+0x2a/0x420 [ 121.340068][ T6334] ? __fget_files+0x3a0/0x420 [ 121.340097][ T6334] __x64_sys_sendmsg+0x19b/0x260 [ 121.340122][ T6334] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 121.340154][ T6334] ? __pfx_ksys_write+0x10/0x10 [ 121.340178][ T6334] ? rcu_is_watching+0x15/0xb0 [ 121.340220][ T6334] ? do_syscall_64+0xbe/0x3b0 [ 121.340246][ T6334] do_syscall_64+0xfa/0x3b0 [ 121.340262][ T6334] ? lockdep_hardirqs_on+0x9c/0x150 [ 121.340289][ T6334] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 121.340308][ T6334] ? clear_bhb_loop+0x60/0xb0 [ 121.340330][ T6334] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 121.340354][ T6334] RIP: 0033:0x7fc77cf8e929 [ 121.340375][ T6334] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 121.340389][ T6334] RSP: 002b:00007fc77dd78038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 121.340408][ T6334] RAX: ffffffffffffffda RBX: 00007fc77d1b5fa0 RCX: 00007fc77cf8e929 [ 121.340421][ T6334] RDX: 0000000000000000 RSI: 0000200000001200 RDI: 0000000000000006 [ 121.340432][ T6334] RBP: 00007fc77dd78090 R08: 0000000000000000 R09: 0000000000000000 [ 121.340443][ T6334] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 121.340453][ T6334] R13: 0000000000000000 R14: 00007fc77d1b5fa0 R15: 00007ffd1ff17428 [ 121.340482][ T6334] [ 121.343265][ T6336] loop0: detected capacity change from 0 to 64 [ 121.645930][ T6336] hfs: Unknown parameter 'ĺ+deage' [ 121.702653][ T5834] bcachefs (loop4): shutting down [ 121.723999][ T5849] bcachefs (loop3): shutdown complete [ 121.768638][ T5834] bcachefs (loop4): shutdown complete [ 121.929161][ T5951] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 122.119219][ T5951] usb 3-1: Using ep0 maxpacket: 32 [ 122.136755][ T5951] usb 3-1: config 0 has an invalid interface number: 231 but max is 0 [ 122.197437][ T5951] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 122.268520][ T5951] usb 3-1: config 0 has no interface number 0 [ 122.299229][ T5951] usb 3-1: config 0 interface 231 altsetting 0 bulk endpoint 0x6 has invalid maxpacket 1023 [ 122.331298][ T5951] usb 3-1: config 0 interface 231 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 5 [ 122.393676][ T5951] usb 3-1: New USB device found, idVendor=d024, idProduct=5e5a, bcdDevice=16.a9 [ 122.466779][ T5951] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 122.572332][ T5951] usb 3-1: Product: syz [ 122.625105][ T5951] usb 3-1: Manufacturer: syz [ 122.709671][ T5951] usb 3-1: SerialNumber: syz [ 122.942403][ T5951] usb 3-1: config 0 descriptor?? [ 123.011486][ T6338] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 123.045313][ T5951] usb-storage 3-1:0.231: USB Mass Storage device detected [ 123.128402][ T6341] loop1: detected capacity change from 0 to 32768 [ 123.146614][ T6341] XFS: ikeep mount option is deprecated. [ 123.169578][ T6341] XFS (loop1): stripe width (2867) must be a multiple of the stripe unit (5) [ 123.283175][ T5951] usb 3-1: USB disconnect, device number 2 [ 123.484227][ T6355] smc: net device bond0 applied user defined pnetid SYZ2 [ 123.499565][ T6355] smc: net device bond0 erased user defined pnetid SYZ2 [ 123.583741][ T6359] netlink: 44 bytes leftover after parsing attributes in process `syz.1.69'. [ 124.111930][ T6361] netlink: 8 bytes leftover after parsing attributes in process `syz.4.70'. [ 124.129160][ T6361] netlink: 4 bytes leftover after parsing attributes in process `syz.4.70'. [ 124.151553][ T6361] batadv0: entered promiscuous mode [ 124.156957][ T6361] macsec1: entered allmulticast mode [ 124.212836][ T6361] batadv0: entered allmulticast mode [ 124.613971][ T6375] netlink: 28 bytes leftover after parsing attributes in process `syz.1.73'. [ 124.640162][ T6007] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 124.809116][ T6007] usb 1-1: Using ep0 maxpacket: 16 [ 124.821634][ T6007] usb 1-1: config 0 has an invalid interface descriptor of length 8, skipping [ 124.833718][ T6007] usb 1-1: config 0 descriptor has 1 excess byte, ignoring [ 124.842221][ T6007] usb 1-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 124.868589][ T6007] usb 1-1: New USB device found, idVendor=1004, idProduct=61aa, bcdDevice=4f.75 [ 124.884145][ T6007] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 124.892825][ T6007] usb 1-1: Product: syz [ 124.897076][ T6007] usb 1-1: Manufacturer: syz [ 124.906158][ T6007] usb 1-1: SerialNumber: syz [ 124.950899][ T6007] usb 1-1: rejected 1 configuration due to insufficient available bus power [ 124.963704][ T6007] usb 1-1: no configuration chosen from 1 choice [ 125.280871][ T6379] loop4: detected capacity change from 0 to 32768 [ 125.402942][ T6379] bcachefs (loop4): starting version 1.7: mi_btree_bitmap opts=errors=continue,metadata_checksum=none,data_checksum=none,compression=lz4,nocow [ 125.402959][ T6379] allowing incompatible features above 0.0: (unknown version) [ 125.402967][ T6379] features: lz4,new_siphash,inline_data,new_extent_overwrite,btree_ptr_v2,new_varint,journal_no_flush,alloc_v2,extents_across_btree_nodes [ 125.441069][ T6379] bcachefs (loop4): Using encoding defined by superblock: utf8-12.1.0 [ 125.449243][ T6379] bcachefs (loop4): initializing new filesystem [ 125.462097][ T6379] bcachefs (loop4): going read-write [ 125.474954][ T6379] bcachefs (loop4): marking superblocks [ 125.485572][ T6379] bcachefs (loop4): initializing freespace [ 125.493380][ T6379] bcachefs (loop4): done initializing freespace [ 125.501231][ T6379] bcachefs (loop4): reading snapshots table [ 125.507164][ T6379] bcachefs (loop4): reading snapshots done [ 125.541860][ T6379] bcachefs (loop4): loop4: Superblock write was silently dropped! (seq 0 expected 42) [ 125.553477][ T6379] bcachefs (loop4): done starting filesystem [ 125.582160][ T30] kauditd_printk_skb: 62 callbacks suppressed [ 125.582174][ T30] audit: type=1800 audit(1751374397.271:74): pid=6391 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.77" name="SYSV00000000" dev="hugetlbfs" ino=0 res=0 errno=0 [ 125.901088][ T6395] netlink: 'syz.2.78': attribute type 1 has an invalid length. [ 126.014328][ T5834] bcachefs (loop4): shutting down [ 126.026374][ T6395] netlink: 105116 bytes leftover after parsing attributes in process `syz.2.78'. [ 126.044652][ T5834] bcachefs (loop4): going read-only [ 126.051430][ T5834] bcachefs (loop4): finished waiting for writes to stop [ 126.094462][ T5834] bcachefs (loop4): flushing journal and stopping allocators, journal seq 2 [ 126.206755][ T5834] bcachefs (loop4): flushing journal and stopping allocators complete, journal seq 3 [ 126.249956][ T5834] bcachefs (loop4): clean shutdown complete, journal seq 4 [ 126.277342][ T5834] bcachefs (loop4): marking filesystem clean [ 126.806699][ T5834] bcachefs (loop4): shutdown complete [ 127.593451][ T5881] usb 1-1: USB disconnect, device number 2 [ 127.710213][ T6413] loop1: detected capacity change from 0 to 128 [ 127.728535][ T6412] tipc: Enabled bearer , priority 10 [ 127.746642][ T6410] tipc: Disabling bearer [ 127.784737][ T30] audit: type=1804 audit(1751374399.471:75): pid=6413 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.1.83" name="/newroot/16/file0/bus" dev="loop1" ino=1048604 res=1 errno=0 [ 128.159354][ T6426] loop2: detected capacity change from 0 to 1024 [ 128.246464][ T6426] EXT4-fs (loop2): ext4_check_descriptors: Checksum for group 0 failed (32298!=35945) [ 128.257472][ T6426] EXT4-fs (loop2): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 128.317267][ T6426] EXT4-fs (loop2): revision level too high, forcing read-only mode [ 128.325758][ T6426] EXT4-fs (loop2): orphan cleanup on readonly fs [ 128.336508][ T6426] EXT4-fs error (device loop2): ext4_read_inode_bitmap:167: comm syz.2.88: Inode bitmap for bg 0 marked uninitialized [ 128.381068][ T6426] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 128.769236][ T5881] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 128.938666][ T5881] usb 1-1: config 0 has an invalid interface number: 11 but max is 0 [ 128.980516][ T5881] usb 1-1: config 0 has no interface number 0 [ 128.997870][ T5881] usb 1-1: config 0 interface 11 altsetting 253 bulk endpoint 0x7 has invalid maxpacket 1024 [ 129.060820][ T5881] usb 1-1: config 0 interface 11 has no altsetting 0 [ 129.091453][ T5881] usb 1-1: New USB device found, idVendor=06cd, idProduct=010f, bcdDevice=d5.1b [ 129.116991][ T6433] loop1: detected capacity change from 0 to 32768 [ 129.186377][ T5881] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 129.236218][ T5881] usb 1-1: config 0 descriptor?? [ 129.255075][ T6429] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 129.267739][ T5881] keyspan 1-1:0.11: Keyspan 2 port adapter converter detected [ 129.306953][ T5881] keyspan 1-1:0.11: found no endpoint descriptor for endpoint 81 [ 129.337612][ T5881] keyspan 1-1:0.11: found no endpoint descriptor for endpoint 82 [ 129.356231][ T5881] keyspan 1-1:0.11: found no endpoint descriptor for endpoint 1 [ 129.437299][ T6433] bcachefs (loop1): starting version 1.7: mi_btree_bitmap opts=errors=continue,metadata_checksum=none,data_checksum=none,compression=lz4,nocow [ 129.437325][ T6433] allowing incompatible features above 0.0: (unknown version) [ 129.437338][ T6433] features: lz4,new_siphash,inline_data,new_extent_overwrite,btree_ptr_v2,new_varint,journal_no_flush,alloc_v2,extents_across_btree_nodes [ 129.474050][ T6433] bcachefs (loop1): Using encoding defined by superblock: utf8-12.1.0 [ 129.482302][ T6433] bcachefs (loop1): initializing new filesystem [ 129.497738][ T6433] bcachefs (loop1): going read-write [ 129.504661][ T6443] loop3: detected capacity change from 0 to 32768 [ 129.753743][ T5881] keyspan 1-1:0.11: found no endpoint descriptor for endpoint 2 [ 129.762313][ T6433] bcachefs (loop1): marking superblocks [ 129.765127][ T5881] keyspan 1-1:0.11: found no endpoint descriptor for endpoint 85 [ 129.775778][ T5881] keyspan 1-1:0.11: found no endpoint descriptor for endpoint 5 [ 129.776512][ T6433] bcachefs (loop1): initializing freespace [ 129.787790][ T5881] usb 1-1: Keyspan 2 port adapter converter now attached to ttyUSB0 [ 129.792913][ T6433] bcachefs (loop1): done initializing freespace [ 129.801237][ T5881] keyspan 1-1:0.11: found no endpoint descriptor for endpoint 83 [ 129.806525][ T6433] bcachefs (loop1): reading snapshots table [ 129.817326][ T6433] bcachefs (loop1): reading snapshots done [ 129.857818][ T6433] bcachefs (loop1): loop1: Superblock write was silently dropped! (seq 0 expected 42) [ 129.940963][ T6433] bcachefs (loop1): done starting filesystem [ 130.531480][ T5881] keyspan 1-1:0.11: found no endpoint descriptor for endpoint 84 [ 130.539839][ T5881] keyspan 1-1:0.11: found no endpoint descriptor for endpoint 3 [ 130.551244][ T5881] keyspan 1-1:0.11: found no endpoint descriptor for endpoint 4 [ 130.559364][ T5881] keyspan 1-1:0.11: found no endpoint descriptor for endpoint 86 [ 130.699893][ T6443] bcachefs (loop3): starting version 1.7: mi_btree_bitmap opts=errors=continue,metadata_checksum=none,data_checksum=none,compression=lz4,nocow [ 130.699917][ T6443] allowing incompatible features above 0.0: (unknown version) [ 130.699929][ T6443] features: lz4,new_siphash,inline_data,new_extent_overwrite,btree_ptr_v2,new_varint,journal_no_flush,alloc_v2,extents_across_btree_nodes [ 130.736505][ T6443] bcachefs (loop3): Using encoding defined by superblock: utf8-12.1.0 [ 130.744715][ T6443] bcachefs (loop3): initializing new filesystem [ 130.759383][ T6443] bcachefs (loop3): going read-write [ 130.795748][ T5881] keyspan 1-1:0.11: found no endpoint descriptor for endpoint 6 [ 130.809414][ T6443] bcachefs (loop3): marking superblocks [ 130.822448][ T6443] bcachefs (loop3): initializing freespace [ 130.830908][ T6443] bcachefs (loop3): done initializing freespace [ 130.840499][ T6443] bcachefs (loop3): reading snapshots table [ 130.846470][ T6443] bcachefs (loop3): reading snapshots done [ 130.870864][ T5881] usb 1-1: Keyspan 2 port adapter converter now attached to ttyUSB1 [ 130.882623][ T6443] bcachefs (loop3): loop3: Superblock write was silently dropped! (seq 0 expected 42) [ 130.893480][ T6443] bcachefs (loop3): done starting filesystem [ 131.164673][ T5839] bcachefs (loop1): shutting down [ 131.195540][ T5839] bcachefs (loop1): going read-only [ 131.232605][ T5839] bcachefs (loop1): finished waiting for writes to stop [ 131.255172][ T5839] bcachefs (loop1): flushing journal and stopping allocators, journal seq 4 [ 131.314227][ T5839] bcachefs (loop1): flushing journal and stopping allocators complete, journal seq 4 [ 131.373739][ T5839] bcachefs (loop1): clean shutdown complete, journal seq 5 [ 131.401613][ T5839] bcachefs (loop1): marking filesystem clean [ 131.458360][ T5849] bcachefs (loop3): shutting down [ 131.472369][ T5849] bcachefs (loop3): going read-only [ 131.477635][ T5849] bcachefs (loop3): finished waiting for writes to stop [ 131.545141][ T5849] bcachefs (loop3): flushing journal and stopping allocators, journal seq 4 [ 131.575915][ T5839] bcachefs (loop1): shutdown complete [ 131.666446][ T6007] usb 1-1: USB disconnect, device number 3 [ 131.678383][ T6007] keyspan_2 ttyUSB0: Keyspan 2 port adapter converter now disconnected from ttyUSB0 [ 131.695641][ T6007] keyspan_2 ttyUSB1: Keyspan 2 port adapter converter now disconnected from ttyUSB1 [ 131.714745][ T6007] keyspan 1-1:0.11: device disconnected [ 131.768913][ T6468] smc: net device bond0 applied user defined pnetid SYZ2 [ 131.771603][ T5849] bcachefs (loop3): flushing journal and stopping allocators complete, journal seq 4 [ 131.777061][ T6468] smc: net device bond0 erased user defined pnetid SYZ2 [ 131.827193][ T5849] bcachefs (loop3): clean shutdown complete, journal seq 5 [ 131.844102][ T5849] bcachefs (loop3): marking filesystem clean [ 131.877467][ T5843] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 132.234173][ T5849] bcachefs (loop3): shutdown complete [ 132.586872][ T6477] tipc: Started in network mode [ 132.592515][ T6477] tipc: Node identity 0a1bb275931d, cluster identity 4711 [ 132.600687][ T6477] tipc: Enabled bearer , priority 10 [ 132.613093][ T6476] tipc: Disabling bearer [ 132.739912][ T1300] ieee802154 phy0 wpan0: encryption failed: -22 [ 132.748345][ T1300] ieee802154 phy1 wpan1: encryption failed: -22 [ 132.850752][ T6475] loop4: detected capacity change from 0 to 40427 [ 132.879266][ T6475] F2FS-fs (loop4): invalid crc value [ 132.969891][ T5951] usb 3-1: new high-speed USB device number 3 using dummy_hcd [ 132.972660][ T6475] F2FS-fs (loop4): Start checkpoint disabled! [ 132.986370][ T6481] netlink: 8 bytes leftover after parsing attributes in process `syz.0.100'. [ 132.990001][ T6475] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e6 [ 133.005854][ T6481] netlink: 4 bytes leftover after parsing attributes in process `syz.0.100'. [ 133.021511][ T6481] batadv0: entered promiscuous mode [ 133.026844][ T6481] macsec1: entered allmulticast mode [ 133.032235][ T6481] batadv0: entered allmulticast mode [ 133.182723][ T5951] usb 3-1: Using ep0 maxpacket: 16 [ 133.243341][ T6485] syz.4.98: attempt to access beyond end of device [ 133.243341][ T6485] loop4: rw=0, sector=45064, nr_sectors = 8 limit=40427 [ 133.431203][ T6484] netlink: 28 bytes leftover after parsing attributes in process `syz.1.93'. [ 133.641665][ T5951] usb 3-1: config 0 has an invalid interface descriptor of length 8, skipping [ 133.652575][ T5951] usb 3-1: config 0 descriptor has 1 excess byte, ignoring [ 133.660036][ T5951] usb 3-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 133.678280][ T5951] usb 3-1: New USB device found, idVendor=1004, idProduct=61aa, bcdDevice=4f.75 [ 133.688117][ T5951] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 133.696180][ T5951] usb 3-1: Product: syz [ 133.709092][ T5951] usb 3-1: Manufacturer: syz [ 133.713700][ T5951] usb 3-1: SerialNumber: syz [ 133.732092][ T5951] usb 3-1: rejected 1 configuration due to insufficient available bus power [ 133.745548][ T5951] usb 3-1: no configuration chosen from 1 choice [ 134.442223][ T6491] netlink: 28 bytes leftover after parsing attributes in process `syz.4.102'. [ 134.518905][ T6491] bridge0: port 2(bridge_slave_1) entered disabled state [ 134.526948][ T6491] bridge0: port 1(bridge_slave_0) entered disabled state [ 134.785179][ T6498] netlink: 28 bytes leftover after parsing attributes in process `syz.1.103'. [ 134.803055][ T6498] netlink: 52 bytes leftover after parsing attributes in process `syz.1.103'. [ 134.961032][ T6502] loop0: detected capacity change from 0 to 2048 [ 134.968466][ T6502] udf: Bad value for 'anchor' [ 135.069484][ T6502] netlink: 32 bytes leftover after parsing attributes in process `syz.0.107'. [ 135.247717][ T6505] smc: net device bond0 applied user defined pnetid SYZ2 [ 135.258901][ T6505] smc: net device bond0 erased user defined pnetid SYZ2 [ 135.993158][ T6513] loop4: detected capacity change from 0 to 8 [ 136.031658][ T9] usb 3-1: USB disconnect, device number 3 [ 136.054696][ T6515] netlink: 44 bytes leftover after parsing attributes in process `syz.0.112'. [ 136.069406][ T6513] SQUASHFS error: xz decompression failed, data probably corrupt [ 136.077844][ T6513] SQUASHFS error: Failed to read block 0x108: -5 [ 136.115057][ T6516] netlink: 28 bytes leftover after parsing attributes in process `syz.3.94'. [ 136.240229][ T6513] SQUASHFS error: Unable to read metadata cache entry [106] [ 136.314875][ T6513] SQUASHFS error: Unable to read inode 0x7ff [ 136.365545][ T6516] bridge0: port 2(bridge_slave_1) entered disabled state [ 136.374237][ T6516] bridge0: port 1(bridge_slave_0) entered disabled state [ 137.560129][ T6527] netlink: 28 bytes leftover after parsing attributes in process `syz.2.113'. [ 137.886230][ T6527] bridge0: port 2(bridge_slave_1) entered disabled state [ 137.893703][ T6527] bridge0: port 1(bridge_slave_0) entered disabled state [ 141.443764][ T6541] loop1: detected capacity change from 0 to 2048 [ 141.492323][ T6541] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 141.496043][ T6550] netlink: 28 bytes leftover after parsing attributes in process `syz.2.121'. [ 141.530213][ T6550] netlink: 52 bytes leftover after parsing attributes in process `syz.2.121'. [ 141.541011][ T6545] smc: net device bond0 applied user defined pnetid SYZ2 [ 141.550229][ T6549] smc: net device bond0 erased user defined pnetid SYZ2 [ 143.380299][ T6557] loop1: detected capacity change from 0 to 32768 [ 143.496693][ T6566] loop3: detected capacity change from 0 to 8 [ 143.498743][ T6557] bcachefs (loop1): starting version 1.7: mi_btree_bitmap opts=errors=continue,metadata_checksum=none,data_checksum=none,compression=lz4,nocow [ 143.517624][ T6557] allowing incompatible features above 0.0: (unknown version) [ 143.525389][ T6557] features: lz4,new_siphash,inline_data,new_extent_overwrite,btree_ptr_v2,new_varint,journal_no_flush,alloc_v2,extents_across_btree_nodes [ 143.539996][ T6557] bcachefs (loop1): Using encoding defined by superblock: utf8-12.1.0 [ 143.548191][ T6557] bcachefs (loop1): initializing new filesystem [ 143.564219][ T6557] bcachefs (loop1): going read-write [ 143.588067][ T6557] bcachefs (loop1): marking superblocks [ 143.595146][ T6566] SQUASHFS error: xz decompression failed, data probably corrupt [ 143.602286][ T6557] bcachefs (loop1): initializing freespace [ 143.611837][ T6557] bcachefs (loop1): done initializing freespace [ 143.622649][ T6557] bcachefs (loop1): reading snapshots table [ 143.623839][ T6566] SQUASHFS error: Failed to read block 0x108: -5 [ 143.628594][ T6557] bcachefs (loop1): reading snapshots done [ 143.659822][ T6557] bcachefs (loop1): loop1: Superblock write was silently dropped! (seq 0 expected 42) [ 143.669985][ T6557] bcachefs (loop1): done starting filesystem [ 143.675274][ T6566] SQUASHFS error: Unable to read metadata cache entry [106] [ 143.702461][ T6566] SQUASHFS error: Unable to read inode 0x7ff [ 144.173522][ C0] ================================================================== [ 144.181626][ C0] BUG: KASAN: out-of-bounds in __cpa_flush_tlb+0x15c/0x270 [ 144.188837][ C0] Read of size 8 at addr ffffc90003b3fc40 by task syz.3.124/6571 [ 144.196547][ C0] [ 144.198871][ C0] CPU: 0 UID: 0 PID: 6571 Comm: syz.3.124 Not tainted 6.16.0-rc4-next-20250630-syzkaller #0 PREEMPT(full) [ 144.198887][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 144.198895][ C0] Call Trace: [ 144.198901][ C0] [ 144.198906][ C0] dump_stack_lvl+0x189/0x250 [ 144.198927][ C0] ? __cpa_flush_tlb+0x15c/0x270 [ 144.198946][ C0] ? __pfx_dump_stack_lvl+0x10/0x10 [ 144.198964][ C0] ? __pfx__printk+0x10/0x10 [ 144.198981][ C0] ? _raw_spin_lock_irqsave+0xb3/0xf0 [ 144.199000][ C0] ? __virt_addr_valid+0xdc/0x5c0 [ 144.199011][ C0] print_report+0xd2/0x2b0 [ 144.199032][ C0] ? __cpa_flush_tlb+0x15c/0x270 [ 144.199053][ C0] kasan_report+0x118/0x150 [ 144.199070][ C0] ? __cpa_flush_tlb+0x15c/0x270 [ 144.199096][ C0] __cpa_flush_tlb+0x15c/0x270 [ 144.199121][ C0] ? __pfx___cpa_flush_tlb+0x10/0x10 [ 144.199146][ C0] __flush_smp_call_function_queue+0x370/0xaa0 [ 144.199172][ C0] ? __pfx___cpa_flush_tlb+0x10/0x10 [ 144.199198][ C0] __sysvec_call_function_single+0xa8/0x3d0 [ 144.199214][ C0] sysvec_call_function_single+0x9e/0xc0 [ 144.199235][ C0] [ 144.199240][ C0] [ 144.199246][ C0] asm_sysvec_call_function_single+0x1a/0x20 [ 144.199262][ C0] RIP: 0010:_raw_spin_unlock_irqrestore+0xa8/0x110 [ 144.199282][ C0] Code: 74 05 e8 2b 32 55 f6 48 c7 44 24 20 00 00 00 00 9c 8f 44 24 20 f6 44 24 21 02 75 4f f7 c3 00 02 00 00 74 01 fb bf 01 00 00 00 d3 0b 1e f6 65 8b 05 0c 04 2e 07 85 c0 74 40 48 c7 04 24 0e 36 [ 144.199294][ C0] RSP: 0018:ffffc9000217f5e0 EFLAGS: 00000206 [ 144.199307][ C0] RAX: 91bb3d079bf7c200 RBX: 0000000000000a02 RCX: 91bb3d079bf7c200 [ 144.199318][ C0] RDX: 0000000000000006 RSI: ffffffff8d992cd0 RDI: 0000000000000001 [ 144.199327][ C0] RBP: ffffc9000217f670 R08: ffffffff8fa17437 R09: 1ffffffff1f42e86 [ 144.199337][ C0] R10: dffffc0000000000 R11: fffffbfff1f42e87 R12: dffffc0000000000 [ 144.199347][ C0] R13: ffff8880793bb080 R14: ffff8880793bb040 R15: 1ffff9200042febc [ 144.199365][ C0] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 144.199386][ C0] ? autoremove_wake_function+0x39/0x100 [ 144.199401][ C0] __wake_up_common_lock+0x190/0x1f0 [ 144.199419][ C0] __unix_dgram_recvmsg+0x49f/0xde0 [ 144.199445][ C0] ? __pfx___unix_dgram_recvmsg+0x10/0x10 [ 144.199468][ C0] ? irqentry_exit+0x74/0x90 [ 144.199487][ C0] ? lockdep_hardirqs_on+0x9c/0x150 [ 144.199509][ C0] ? unix_dgram_recvmsg+0xb1/0xd0 [ 144.199524][ C0] ? __pfx_unix_dgram_recvmsg+0x10/0x10 [ 144.199540][ C0] sock_recvmsg_nosec+0x183/0x1c0 [ 144.199562][ C0] ____sys_recvmsg+0x3aa/0x460 [ 144.199582][ C0] ? __pfx_____sys_recvmsg+0x10/0x10 [ 144.199604][ C0] ? import_iovec+0x74/0xa0 [ 144.199622][ C0] ___sys_recvmsg+0x1b5/0x510 [ 144.199644][ C0] ? __pfx____sys_recvmsg+0x10/0x10 [ 144.199673][ C0] ? __might_fault+0xb0/0x130 [ 144.199693][ C0] do_recvmmsg+0x307/0x770 [ 144.199713][ C0] ? __pfx_do_recvmmsg+0x10/0x10 [ 144.199733][ C0] ? __pfx_do_futex+0x10/0x10 [ 144.199752][ C0] __x64_sys_recvmmsg+0x190/0x240 [ 144.199770][ C0] ? __pfx___x64_sys_recvmmsg+0x10/0x10 [ 144.199786][ C0] ? rcu_is_watching+0x15/0xb0 [ 144.199805][ C0] ? do_syscall_64+0xbe/0x3b0 [ 144.199819][ C0] do_syscall_64+0xfa/0x3b0 [ 144.199831][ C0] ? lockdep_hardirqs_on+0x9c/0x150 [ 144.199850][ C0] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 144.199863][ C0] ? clear_bhb_loop+0x60/0xb0 [ 144.199878][ C0] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 144.199891][ C0] RIP: 0033:0x7f23d998e929 [ 144.199902][ C0] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 144.199913][ C0] RSP: 002b:00007f23da885038 EFLAGS: 00000246 ORIG_RAX: 000000000000012b [ 144.199927][ C0] RAX: ffffffffffffffda RBX: 00007f23d9bb6080 RCX: 00007f23d998e929 [ 144.199937][ C0] RDX: 0000000000010106 RSI: 00002000000000c0 RDI: 0000000000000005 [ 144.199946][ C0] RBP: 00007f23d9a10b39 R08: 0000000000000000 R09: 0000000000000000 [ 144.199955][ C0] R10: 0000000000000002 R11: 0000000000000246 R12: 0000000000000000 [ 144.199963][ C0] R13: 0000000000000000 R14: 00007f23d9bb6080 R15: 00007ffd0eef6c58 [ 144.199986][ C0] [ 144.199991][ C0] [ 144.612362][ C0] The buggy address belongs to the virtual mapping at [ 144.612362][ C0] [ffffc90003b38000, ffffc90003b41000) created by: [ 144.612362][ C0] copy_process+0x54b/0x3c00 [ 144.629985][ C0] [ 144.632305][ C0] The buggy address belongs to the physical page: [ 144.638720][ C0] page: refcount:1 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x51fb8 [ 144.647471][ C0] memcg:ffff888024e79002 [ 144.651706][ C0] flags: 0xfff00000000000(node=0|zone=1|lastcpupid=0x7ff) [ 144.658819][ C0] raw: 00fff00000000000 0000000000000000 dead000000000122 0000000000000000 [ 144.667404][ C0] raw: 0000000000000000 0000000000000000 00000001ffffffff ffff888024e79002 [ 144.675983][ C0] page dumped because: kasan: bad access detected [ 144.682396][ C0] page_owner tracks the page as allocated [ 144.688110][ C0] page last allocated via order 0, migratetype Unmovable, gfp_mask 0x2dc2(GFP_KERNEL|__GFP_HIGHMEM|__GFP_ZERO|__GFP_NOWARN), pid 2, tgid 2 (kthreadd), ts 129207785365, free_ts 128867902288 [ 144.706589][ C0] post_alloc_hook+0x240/0x2a0 [ 144.711356][ C0] get_page_from_freelist+0x21e4/0x22c0 [ 144.716901][ C0] __alloc_frozen_pages_noprof+0x181/0x370 [ 144.722711][ C0] alloc_pages_mpol+0x232/0x4a0 [ 144.727564][ C0] alloc_pages_noprof+0xa9/0x190 [ 144.732499][ C0] __vmalloc_node_range_noprof+0x97d/0x12f0 [ 144.738385][ C0] __vmalloc_node_noprof+0xc2/0x110 [ 144.743576][ C0] dup_task_struct+0x3e7/0x860 [ 144.748335][ C0] copy_process+0x54b/0x3c00 [ 144.752922][ C0] kernel_clone+0x21e/0x870 [ 144.757423][ C0] kernel_thread+0x10c/0x160 [ 144.762016][ C0] kthreadd+0x575/0x770 [ 144.766173][ C0] ret_from_fork+0x3fc/0x770 [ 144.770760][ C0] ret_from_fork_asm+0x1a/0x30 [ 144.775517][ C0] page last free pid 5834 tgid 5834 stack trace: [ 144.781832][ C0] __free_frozen_pages+0xb80/0xd80 [ 144.786953][ C0] vfree+0x25a/0x400 [ 144.790868][ C0] bch2_fs_btree_write_buffer_exit+0x179/0x1e0 [ 144.797046][ C0] bch2_fs_release+0x297/0x830 [ 144.801822][ C0] kobject_put+0x22b/0x480 [ 144.806240][ C0] deactivate_locked_super+0xbc/0x130 [ 144.811617][ C0] cleanup_mnt+0x425/0x4c0 [ 144.816027][ C0] task_work_run+0x1d1/0x260 [ 144.820609][ C0] exit_to_user_mode_loop+0xec/0x110 [ 144.825892][ C0] do_syscall_64+0x2bd/0x3b0 [ 144.830475][ C0] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 144.836358][ C0] [ 144.838681][ C0] Memory state around the buggy address: [ 144.844300][ C0] ffffc90003b3fb00: 00 00 00 00 00 f3 f3 f3 f3 f3 f3 f3 f3 f3 f3 f3 [ 144.852351][ C0] ffffc90003b3fb80: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 144.860407][ C0] >ffffc90003b3fc00: f1 f1 f1 f1 00 00 00 00 00 00 00 00 00 f3 f3 f3 [ 144.868464][ C0] ^ [ 144.874872][ C0] ffffc90003b3fc80: f3 f3 f3 f3 00 00 00 00 00 00 00 00 00 00 00 00 [ 144.882932][ C0] ffffc90003b3fd00: 00 00 00 00 00 00 00 00 f1 f1 f1 f1 04 f3 f3 f3 [ 144.890982][ C0] ================================================================== [ 144.899047][ C0] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 144.906233][ C0] CPU: 0 UID: 0 PID: 6571 Comm: syz.3.124 Not tainted 6.16.0-rc4-next-20250630-syzkaller #0 PREEMPT(full) [ 144.917590][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 144.927651][ C0] Call Trace: [ 144.930930][ C0] [ 144.933776][ C0] dump_stack_lvl+0x99/0x250 [ 144.938381][ C0] ? __asan_memcpy+0x40/0x70 [ 144.942972][ C0] ? __pfx_dump_stack_lvl+0x10/0x10 [ 144.948181][ C0] ? __pfx__printk+0x10/0x10 [ 144.952778][ C0] panic+0x2db/0x790 [ 144.956676][ C0] ? __pfx_panic+0x10/0x10 [ 144.961095][ C0] ? do_raw_spin_unlock+0x122/0x240 [ 144.966287][ C0] ? _raw_spin_unlock_irqrestore+0xad/0x110 [ 144.972176][ C0] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 144.978503][ C0] ? __cpa_flush_tlb+0x15c/0x270 [ 144.983442][ C0] check_panic_on_warn+0x89/0xb0 [ 144.988373][ C0] ? __cpa_flush_tlb+0x15c/0x270 [ 144.993399][ C0] end_report+0x78/0x160 [ 144.997673][ C0] kasan_report+0x129/0x150 [ 145.002178][ C0] ? __cpa_flush_tlb+0x15c/0x270 [ 145.007121][ C0] __cpa_flush_tlb+0x15c/0x270 [ 145.011899][ C0] ? __pfx___cpa_flush_tlb+0x10/0x10 [ 145.017188][ C0] __flush_smp_call_function_queue+0x370/0xaa0 [ 145.023351][ C0] ? __pfx___cpa_flush_tlb+0x10/0x10 [ 145.028643][ C0] __sysvec_call_function_single+0xa8/0x3d0 [ 145.034529][ C0] sysvec_call_function_single+0x9e/0xc0 [ 145.040164][ C0] [ 145.043087][ C0] [ 145.046008][ C0] asm_sysvec_call_function_single+0x1a/0x20 [ 145.051977][ C0] RIP: 0010:_raw_spin_unlock_irqrestore+0xa8/0x110 [ 145.058480][ C0] Code: 74 05 e8 2b 32 55 f6 48 c7 44 24 20 00 00 00 00 9c 8f 44 24 20 f6 44 24 21 02 75 4f f7 c3 00 02 00 00 74 01 fb bf 01 00 00 00 d3 0b 1e f6 65 8b 05 0c 04 2e 07 85 c0 74 40 48 c7 04 24 0e 36 [ 145.078091][ C0] RSP: 0018:ffffc9000217f5e0 EFLAGS: 00000206 [ 145.084169][ C0] RAX: 91bb3d079bf7c200 RBX: 0000000000000a02 RCX: 91bb3d079bf7c200 [ 145.092155][ C0] RDX: 0000000000000006 RSI: ffffffff8d992cd0 RDI: 0000000000000001 [ 145.100129][ C0] RBP: ffffc9000217f670 R08: ffffffff8fa17437 R09: 1ffffffff1f42e86 [ 145.108106][ C0] R10: dffffc0000000000 R11: fffffbfff1f42e87 R12: dffffc0000000000 [ 145.116071][ C0] R13: ffff8880793bb080 R14: ffff8880793bb040 R15: 1ffff9200042febc [ 145.124047][ C0] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 145.130478][ C0] ? autoremove_wake_function+0x39/0x100 [ 145.136111][ C0] __wake_up_common_lock+0x190/0x1f0 [ 145.141394][ C0] __unix_dgram_recvmsg+0x49f/0xde0 [ 145.146594][ C0] ? __pfx___unix_dgram_recvmsg+0x10/0x10 [ 145.152311][ C0] ? irqentry_exit+0x74/0x90 [ 145.156915][ C0] ? lockdep_hardirqs_on+0x9c/0x150 [ 145.162145][ C0] ? unix_dgram_recvmsg+0xb1/0xd0 [ 145.167169][ C0] ? __pfx_unix_dgram_recvmsg+0x10/0x10 [ 145.172717][ C0] sock_recvmsg_nosec+0x183/0x1c0 [ 145.177757][ C0] ____sys_recvmsg+0x3aa/0x460 [ 145.182529][ C0] ? __pfx_____sys_recvmsg+0x10/0x10 [ 145.187822][ C0] ? import_iovec+0x74/0xa0 [ 145.192328][ C0] ___sys_recvmsg+0x1b5/0x510 [ 145.197009][ C0] ? __pfx____sys_recvmsg+0x10/0x10 [ 145.202218][ C0] ? __might_fault+0xb0/0x130 [ 145.206910][ C0] do_recvmmsg+0x307/0x770 [ 145.211332][ C0] ? __pfx_do_recvmmsg+0x10/0x10 [ 145.216268][ C0] ? __pfx_do_futex+0x10/0x10 [ 145.220943][ C0] __x64_sys_recvmmsg+0x190/0x240 [ 145.225963][ C0] ? __pfx___x64_sys_recvmmsg+0x10/0x10 [ 145.231503][ C0] ? rcu_is_watching+0x15/0xb0 [ 145.236389][ C0] ? do_syscall_64+0xbe/0x3b0 [ 145.241064][ C0] do_syscall_64+0xfa/0x3b0 [ 145.245565][ C0] ? lockdep_hardirqs_on+0x9c/0x150 [ 145.250765][ C0] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 145.256825][ C0] ? clear_bhb_loop+0x60/0xb0 [ 145.261533][ C0] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 145.267420][ C0] RIP: 0033:0x7f23d998e929 [ 145.271832][ C0] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 145.291429][ C0] RSP: 002b:00007f23da885038 EFLAGS: 00000246 ORIG_RAX: 000000000000012b [ 145.299839][ C0] RAX: ffffffffffffffda RBX: 00007f23d9bb6080 RCX: 00007f23d998e929 [ 145.307807][ C0] RDX: 0000000000010106 RSI: 00002000000000c0 RDI: 0000000000000005 [ 145.315773][ C0] RBP: 00007f23d9a10b39 R08: 0000000000000000 R09: 0000000000000000 [ 145.323735][ C0] R10: 0000000000000002 R11: 0000000000000246 R12: 0000000000000000 [ 145.331700][ C0] R13: 0000000000000000 R14: 00007f23d9bb6080 R15: 00007ffd0eef6c58 [ 145.339671][ C0] [ 145.343066][ C0] Kernel Offset: disabled [ 145.347390][ C0] Rebooting in 86400 seconds..