last executing test programs: 20m55.669567947s ago: executing program 32 (id=998): r0 = socket$inet_sctp(0x2, 0x1, 0x84) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r1, 0x0, 0x0, 0x1) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) splice(r2, 0x0, r1, 0x0, 0x10000008ebc, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) 19m44.10267262s ago: executing program 33 (id=1129): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) sendmmsg$inet6(r0, &(0x7f0000000e00)=[{{&(0x7f00000000c0)={0xa, 0x4e22, 0x1, @ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x30}, 0x1c, &(0x7f0000001700)=[{&(0x7f0000000140)='y', 0x1}], 0x1}}, {{&(0x7f0000002900)={0xa, 0x4e20, 0x4, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0xe254}, 0x1c, &(0x7f0000002a00)=[{&(0x7f0000002940)='B', 0x1}], 0x1}}], 0x2, 0x20044040) r1 = socket$netlink(0x10, 0x3, 0x4) writev(r1, &(0x7f0000000000)=[{&(0x7f0000000140)="480000001400190d09004beafd0d8c560a84476080ffe00600004e20590000a2bc5603ca00000f7f89000000200000000101ff0000000309ff5bffff00c7e5ed5e000000000000", 0x47}], 0x1) 19m32.027330997s ago: executing program 34 (id=1219): socket$inet6(0xa, 0x2, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) bpf$MAP_CREATE(0x0, 0x0, 0x50) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000380)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, 0x0, 0x0, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) socket(0x27, 0x3, 0x80000000) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) openat$dma_heap(0xffffffffffffff9c, 0x0, 0x0, 0x0) syz_clone(0x1000, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r2, 0x8933, &(0x7f0000000340)={'batadv_slave_1\x00'}) setsockopt$EBT_SO_SET_ENTRIES(0xffffffffffffffff, 0x0, 0x80, &(0x7f0000000240)=@filter={'filter\x00', 0xe, 0x0, 0x90, [0x0, 0x200000000180, 0x2000000001b0, 0x2000000001e0], 0x0, 0x0, &(0x7f0000000180)=[{0x0, '\x00', 0x0, 0xfffffffffffffffe}, {0x0, '\x00', 0x0, 0xfffffffffffffffe}, {0x0, '\x00', 0x0, 0xfffffffffffffffc}]}, 0x108) r3 = socket(0x2, 0x3, 0x67) sendmsg$inet(r3, &(0x7f00000000c0)={&(0x7f0000000000)={0x2, 0x4e20, @private=0xa010100}, 0x10, 0x0, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="180000000000000000000000070000"], 0x38}, 0x0) 16m30.292122933s ago: executing program 35 (id=1593): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000280), 0x22400, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000003000/0x18000)=nil, &(0x7f0000000100)=[@text64={0x40, &(0x7f0000000080)="410f2092b994000040b800000000ba000000800f30c461d25c971a32000066b86c000f00d866410f382a11360f01c3c7442400d86a7e6cc7442402e89e0000c7442406000000000f01142426f3400f1ef9c4e31d7de20066ba4100b082ee", 0x5e}], 0x1, 0x0, 0x0, 0x0) openat$sndseq(0xffffffffffffff9c, &(0x7f0000000080), 0x0) syz_open_procfs(0x0, 0x0) syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') r2 = dup(r1) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x2000, 0x1000, &(0x7f0000003000/0x1000)=nil}) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) syz_genetlink_get_family_id$wireguard(&(0x7f0000000080), 0xffffffffffffffff) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text64={0x40, 0x0}], 0x1, 0x11, 0x0, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) 15m12.987110245s ago: executing program 36 (id=1693): ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f00000000c0)={'veth1_virt_wifi\x00', 0x6bf1c2d5adba8c32}) sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000e00)=ANY=[], 0xc0}}, 0x200000b0) openat$zero(0xffffffffffffff9c, &(0x7f0000000140), 0x101400, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x28100, 0x0) setsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000000)={@multicast1, @local}, 0xc) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_NMI(r2, 0xae9a) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000440)={[0x0, 0x100000000, 0x0, 0x4000081, 0x100000, 0x0, 0x2004c8, 0x8000000, 0x0, 0x0, 0x7, 0x0, 0x7, 0x0, 0x2, 0xffffffffffffffff]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f00000002c0)={[0x4, 0x5, 0x6, 0x4004, 0x2, 0x44, 0xefffffffffffffff, 0x400000, 0x0, 0x2000000, 0x0, 0xd104, 0x0, 0xffffffffffffffff, 0x6], 0x0, 0x302000}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 14m52.769361853s ago: executing program 4 (id=1755): setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x1a, 0x0, 0x0) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0xf, 0x0, 0x0) bind$inet6(0xffffffffffffffff, &(0x7f0000001040)={0xa, 0x4e23, 0x44000007, @ipv4={'\x00', '\xff\xff', @private=0xa010101}, 0xfffffff4}, 0x1c) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_INO_LOOKUP_USER(0xffffffffffffffff, 0xd000943e, 0x0) rseq(&(0x7f0000001080)={0x0, 0x0, 0x0, 0x1}, 0x20, 0x0, 0x0) madvise(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x15) madvise(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x65) 14m50.81487432s ago: executing program 4 (id=1760): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x41, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000200)={0x0, 0x20000004, 0x0, 0x0, 0x6, "0062ba7d82000000160000000000f738096304"}) r1 = syz_open_pts(r0, 0x900) dup3(r1, r0, 0x80000) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) pselect6(0x40, &(0x7f0000000100)={0x0, 0x3, 0x10000, 0x1, 0x9, 0x7760, 0x0, 0x8000000000000}, 0x0, &(0x7f0000000240)={0x1f, 0x3, 0x0, 0x5, 0x0, 0x0, 0xfffffffffffffffc}, &(0x7f0000000280), 0x0) 14m50.640309467s ago: executing program 4 (id=1762): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x81, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CAP_EXIT_HYPERCALL(r1, 0x4068aea3, &(0x7f0000000040)={0x79, 0x0, 0xc}) ioctl$KVM_SET_GSI_ROUTING(r1, 0x4008ae6a, &(0x7f00000009c0)={0x1, 0x0, [{0x0, 0x2, 0x1, 0x0, @irqchip={0x1, 0x8}}]}) ioctl$KVM_IRQ_LINE_STATUS(r1, 0xc008ae67, &(0x7f0000000140)={0x0, 0x401}) 14m49.510540081s ago: executing program 4 (id=1763): syz_genetlink_get_family_id$l2tp(0x0, 0xffffffffffffffff) syz_mount_image$ext4(&(0x7f0000000640)='ext4\x00', &(0x7f0000000200)='./file2\x00', 0xa00000, &(0x7f0000000000), 0xfc, 0x579, &(0x7f0000000680)="$eJzs3c9rHOUbAPBnNtk2/fH9JoVS1IMEerBSu2kSf1TwUI+ixYLe65JsQ8mmW7Kb0sSC7cFevEgRRCyI3jx491j8B/wrClooUoIevERmM5tuk910k+wmaffzgUned2Y2z/vuzPPmnZ1dNoC+NZr+yEW8HBFfJxHDTdsGI9s4urrf8uObU+mSxMrKJ38lkWTrGvsn2e8jWeWliPjty4jTuY1xq4tLs8VyuTSf1cdqc9fGqotLZ67MFWdKM6WrE5OT596anHj3nbe71tfXL/7z3cf3Pzj31cnlb395eOxuEufjaLatuR87cKu5Mhqj2XOSj/PrdhzvQrD9JNnrBrAtA1me5yMdA4ZjIMv6llaGd7NpQI99kaY10KcS+Q99qjEPaFzbd+k6+Lnx6P3VC6CN/R9cfW0khurXRoeXk6eujNLr3ZEuxE9j/PrnvbvpEt17HQLgmW7djoizg4Mbx78kG/+272wH+6yPkcXP7zA00IH76fznjVbzn9za/CdazH+OtMjd7WiT/01yD7sQpq10/vdey/nv2k2rkYGs9r/6nC+fXL5SLqVj2/8j4lTkD6b1Te7nfJZbfrDSbmPz/C9d0viNuWDWjoeDB59+zHSxVtxRp5s8uh3xSsv5b7J2/JMWxz99Pi52GONE6d6r7bY9u/9renKLaeXHiNdaHv/kqcCb3J8cq58PY42zYqO/75z4vV38LfS/Jx79nBXa938kab5fW916jB+G/i2127bd8/9A8mm9fCBbd6NYq82PRxxIPtq4fuLJYxv1xv7p+X/q5ObjX6vz/1Ca2B32/87xO827Dm2t/72V9n968/N/3fHfeuHBh59/3y5+Z8f/zXrpVLamk/Gv0wbu5LkDAAAAAACA/SYXEUcjyRXWyrlcobD6/o7jcThXrlRrpy9XFq5OR/2zsiORzzXudA83vR9iPHs/bKM+sa4+GRHHIuKbgUP1emGqUp7e684DAAAAAAAAAAAAAAAAAADAPnEkYqjV5/9TfwzsdeuAntvkK7+BF1z7/M+2dOObnoB9adv//4e62w5g95n/Q/+S/9C/5D/0L/kP/Uv+Q/+S/9C/tpL/P13oYUMAAAAAAAAAAAAAAAAAAAAAAAAAAADgxXDxwoV0WVl+fHMqrU9fX1yYrVw/M12qzhbmFqYKU5X5a4WZSmWmXCpMVeae9ffKlcq18YlYuDFWK1VrY9XFpUtzlYWrtUtX5oozpUul/K70CgAAAAAAAAAAAAAAAAAAAJ4v1cWl2WK5XJpXUNhWYXB/NEOhy4W9HpkAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA4In/AgAA//+z7zor") r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000000), 0x208e24b) getpgrp(0x0) prlimit64(0x0, 0xe, &(0x7f0000000100)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000000)=0x3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) write$FUSE_NOTIFY_DELETE(0xffffffffffffffff, &(0x7f0000000200)={0x2f, 0x6, 0x0, {0x1, 0x4, 0x6, 0x0, '\'-[/\xc7,'}}, 0x2f) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) ioctl$SNDRV_PCM_IOCTL_RESUME(0xffffffffffffffff, 0x4147, 0x0) r4 = syz_open_procfs(0x0, &(0x7f00000004c0)='net/ipv6_route\x00') lseek(r4, 0x1008000, 0x0) r5 = socket(0xa, 0x1, 0x0) getsockopt(r5, 0x1, 0x2f, &(0x7f0000001940)=""/8, &(0x7f0000000040)=0x8) 14m45.819088923s ago: executing program 4 (id=1769): r0 = landlock_create_ruleset(&(0x7f0000000240)={0x2030}, 0x18, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x2}, 0x94) mount$cgroup(0x0, &(0x7f0000000600)='.\x00', &(0x7f0000000640), 0x2208000, &(0x7f0000000100)={[{@subsystem='pids'}]}) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r1}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) landlock_restrict_self(r0, 0x0) 14m41.658551202s ago: executing program 6 (id=1771): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff) r1 = getpgrp(0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000040)=0x5) prlimit64(r1, 0xe, &(0x7f0000000100)={0x8, 0x80000100008a}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000000)=0x3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r3 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r3, 0x1, 0x0) r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x20094) sendmsg$IPCTNL_MSG_EXP_NEW(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="bc0000000002010400000000000000000a000000300001802c00018114000300fe80000800000000000000000000002014000400ff0100000000000000000000000000013c0003800400028005000100890000002c00018014000300fe80000000000000000000000000002a14000400890100000000000000000000000000013c0002802c00018014000300ff0200000000000000000000000000011400040000000000000000000000ffff7f0000010c000280050001"], 0xbc}, 0x1, 0x0, 0x0, 0x24000801}, 0x4) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) r5 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000080), 0x1, 0x0) ioctl$TCSETSF(r5, 0x5404, &(0x7f0000000000)={0xffffffff, 0xc9a, 0x80080000, 0x6, 0xe, "dce4f0020100000000001b347d5c00010200"}) ioctl$KVM_HAS_DEVICE_ATTR(0xffffffffffffffff, 0x4018aee3, &(0x7f0000000100)=@attr_arm64={0x0, 0x0, 0x0, &(0x7f00000000c0)=0x6268457d}) syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f00000001c0)='./file0\x00', 0x80078b, &(0x7f0000000680)={[{@nodioread_nolock}, {@resuid}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x5c}}, {@nouid32}, {@resgid}, {@acl}, {@init_itable_val={'init_itable', 0x3d, 0x8d55}}]}, 0x0, 0x484, &(0x7f0000001040)="$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") 14m39.984502471s ago: executing program 6 (id=1772): fallocate(0xffffffffffffffff, 0x10, 0x3, 0x7ffd) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x50) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() connect$inet6(0xffffffffffffffff, 0x0, 0x0) sched_setscheduler(0x0, 0x1, 0x0) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) syz_open_dev$usbfs(0x0, 0xfff, 0xd2900) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs={0x0, 0x0, 0xfffffffe}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0xb, &(0x7f0000000380)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020000000000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x2}, 0x94) r6 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r6, &(0x7f0000000180)={0x1f, 0xffff, 0x3}, 0x6) write(r6, &(0x7f0000000000)="38000000010001", 0x7) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='mmap_lock_acquire_returned\x00', r5}, 0x18) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x651, 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x2, 0x0) 14m36.604019682s ago: executing program 6 (id=1776): r0 = epoll_create(0x731) r1 = openat$rtc(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) ioctl$RTC_PIE_ON(r1, 0x7005) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f00000000c0)={0xc0000014}) pselect6(0x40, &(0x7f0000000100), 0x0, &(0x7f0000000240)={0x1f, 0xfffffffffffffffe, 0xe, 0x0, 0x7, 0x4, 0x0, 0xfffffffffffffffc}, 0x0, 0x0) 14m35.544202528s ago: executing program 6 (id=1777): syz_genetlink_get_family_id$l2tp(0x0, 0xffffffffffffffff) syz_mount_image$ext4(&(0x7f0000000640)='ext4\x00', &(0x7f0000000200)='./file2\x00', 0xa00000, &(0x7f0000000000), 0xfc, 0x579, &(0x7f0000000680)="$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") r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000000), 0x208e24b) getpgrp(0x0) prlimit64(0x0, 0xe, &(0x7f0000000100)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000000)=0x3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) write$FUSE_NOTIFY_DELETE(0xffffffffffffffff, &(0x7f0000000200)={0x2f, 0x6, 0x0, {0x1, 0x4, 0x6, 0x0, '\'-[/\xc7,'}}, 0x2f) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) ioctl$SNDRV_PCM_IOCTL_RESUME(0xffffffffffffffff, 0x4147, 0x0) r4 = syz_open_procfs(0x0, &(0x7f00000004c0)='net/ipv6_route\x00') lseek(r4, 0x1008000, 0x0) r5 = socket(0xa, 0x1, 0x0) getsockopt(r5, 0x1, 0x2f, &(0x7f0000001940)=""/8, &(0x7f0000000040)=0x8) 14m33.463791378s ago: executing program 6 (id=1780): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff) r1 = getpgrp(0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000040)=0x5) prlimit64(r1, 0xe, &(0x7f0000000100)={0x8, 0x80000100008a}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000000)=0x3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r3 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r3, 0x1, 0x0) r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x20094) sendmsg$IPCTNL_MSG_EXP_NEW(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="bc0000000002010400000000000000000a000000300001802c00018114000300fe80000800000000000000000000002014000400ff0100000000000000000000000000013c0003800400028005000100890000002c00018014000300fe80000000000000000000000000002a14000400890100000000000000000000000000013c0002802c00018014000300ff0200000000000000000000000000011400040000000000000000000000ffff7f0000010c000280050001"], 0xbc}, 0x1, 0x0, 0x0, 0x24000801}, 0x4) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) r5 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000080), 0x1, 0x0) ioctl$TCSETSF(r5, 0x5404, &(0x7f0000000000)={0xffffffff, 0xc9a, 0x80080000, 0x6, 0xe, "dce4f0020100000000001b347d5c00010200"}) ioctl$KVM_HAS_DEVICE_ATTR(0xffffffffffffffff, 0x4018aee3, &(0x7f0000000100)=@attr_arm64={0x0, 0x0, 0x0, &(0x7f00000000c0)=0x6268457d}) syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f00000001c0)='./file0\x00', 0x80078b, &(0x7f0000000680)={[{@nodioread_nolock}, {@resuid}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x5c}}, {@nouid32}, {@resgid}, {@acl}, {@init_itable_val={'init_itable', 0x3d, 0x8d55}}]}, 0x0, 0x484, &(0x7f0000001040)="$eJzs3M1vFGUYAPBnph+AfLQifoCoVWLSaGxpQeXgRaOJBwwmekBvtV1Iw0INrUYIkWIMXkwMiZ6NRxP/Am/GxKgnE6968WRIiHIBPdXM7EzZLt3S2m0H6O+XLPu+O+/OPA/z9c68sw1gwxrI/kkitkXEbxHR16gubDDQeLt+9dz4P1fPjScxN/fGX0ne7trVc+Nl0/J7W4vKYBqRfpwUC1lo+szZE2P1eu10UR+eOfnu8PSZs8+8f3LseO147dTooUMHD4w8/9zosx3JM8vr2p4Pp/bufvWtS6+NH730zk/fZPFuK6Y359EpA1nif8/lWqc92emFVWx7UznprjAQVqQrIrLV1ZPv/33RFTdWXl+88lGlwQFrKjs3bWo/eXYOuIslUXUEQDXKE312/Vu+1qnrcVu48mLjAijL+3rxakzpjrRo09NyfdtJAxFxdPbfL7NXrNF9CACAZp+Of3G4tygv7P+l8UD+/sf8yE5fRPRHxL0RsTMi7ouIXRFxf0Te9sGIeGiV8dzc/0kvr3KWS8r6fy8UY1sL+39l7y/6u4ra9jz/nuTYZL22PyJ2RMRg9GzK6iNLLOO7l3/9rN205v5f9sqWX/YFizgud7fcoJsYmxnLO6UdcOVCxJ7uxfJP5kcCsrW/OyL2rGzWO8rC5FNf723X6Nb5L6ED40xzX2XpzWb5z0ZL/qWkeXxy8qbxyeHNUa/tHy63ipv9/MvF19stf1X5d8CVWuO9af23NulPmsdrp1e+jIu/f9L2muZ/bv9pb/JmPs5cHrs+GJuZOT0S0ZsczusLPh+98d2yXrbPtv/BfYvv/zuL72T5PxwR2Ub8SEQ8GhGPFbE/HhFPRMS+JfL/8aX208r8I61o/V+ImFj0+De//bes/5UXuk788G275S9v/R/MS4PFJ/nx7xYWCyc7XLQGuJr/OwAAALhTpPkz8Ek6NF9O06GhxjP8u+KetD41PfP0san3Tk00npXvj560vNPVV9wPrU/WayPJbDHHxv3R0Wxaz436geK+8eddW/L60PhUfaLa1GHD29pm/8/82VV1dMAa27Lop6O96x4IUIHWcfR0YfX8kXAwgLuV32vDxnWL/T9drziA9ef8DxvXYvv/+Za6sQC4Ozn/w8Zl/4cNKv2+6giACi3j/P/2kfUIBFhPxS/hR9Pl/Zy/fFZwFX8NYFmFzWs25zugsKo/trDWhYiykN4W8SisUaHiAxMAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAECH/BcAAP//TMjlrA==") 14m29.988665938s ago: executing program 37 (id=1769): r0 = landlock_create_ruleset(&(0x7f0000000240)={0x2030}, 0x18, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x2}, 0x94) mount$cgroup(0x0, &(0x7f0000000600)='.\x00', &(0x7f0000000640), 0x2208000, &(0x7f0000000100)={[{@subsystem='pids'}]}) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r1}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) landlock_restrict_self(r0, 0x0) 14m29.878773319s ago: executing program 6 (id=1786): socket$nl_generic(0x10, 0x3, 0x10) openat$zero(0xffffffffffffff9c, &(0x7f00000001c0), 0x400, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f000008d000/0x1000)=nil, &(0x7f00005e1000/0x3000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f000068c000/0xc000)=nil, &(0x7f0000817000/0x1000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x40) r0 = io_uring_setup(0x7, &(0x7f0000000040)={0x0, 0xcefb, 0xc000, 0x4000002, 0x1000c1}) open(&(0x7f00000000c0)='./bus\x00', 0x143fc2, 0x1d8) socket(0x10, 0x803, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000040)='./bus\x00', 0x40042, 0x121) prlimit64(0x0, 0x6, &(0x7f0000000140)={0x0, 0x4}, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x88842, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x2) openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) io_uring_setup(0x16d9, &(0x7f0000000040)={0x0, 0x5fc4, 0x40, 0x8, 0x40385, 0x0, r0}) socket$unix(0x1, 0x1, 0x0) fanotify_init(0x200, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={0x0, 0x24}}, 0x0) pipe(&(0x7f0000000100)) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="0208000004"], 0x48) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="16"], 0x50) io_uring_enter(r0, 0x2219, 0x7721, 0x16, 0x0, 0x0) 14m29.096563058s ago: executing program 38 (id=1786): socket$nl_generic(0x10, 0x3, 0x10) openat$zero(0xffffffffffffff9c, &(0x7f00000001c0), 0x400, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f000008d000/0x1000)=nil, &(0x7f00005e1000/0x3000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f000068c000/0xc000)=nil, &(0x7f0000817000/0x1000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x40) r0 = io_uring_setup(0x7, &(0x7f0000000040)={0x0, 0xcefb, 0xc000, 0x4000002, 0x1000c1}) open(&(0x7f00000000c0)='./bus\x00', 0x143fc2, 0x1d8) socket(0x10, 0x803, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000040)='./bus\x00', 0x40042, 0x121) prlimit64(0x0, 0x6, &(0x7f0000000140)={0x0, 0x4}, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x88842, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x2) openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) io_uring_setup(0x16d9, &(0x7f0000000040)={0x0, 0x5fc4, 0x40, 0x8, 0x40385, 0x0, r0}) socket$unix(0x1, 0x1, 0x0) fanotify_init(0x200, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={0x0, 0x24}}, 0x0) pipe(&(0x7f0000000100)) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="0208000004"], 0x48) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="16"], 0x50) io_uring_enter(r0, 0x2219, 0x7721, 0x16, 0x0, 0x0) 11m15.605526179s ago: executing program 5 (id=2091): openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) r0 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) openat(0xffffffffffffff9c, 0x0, 0x800, 0x0) setreuid(0x0, 0xee00) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r0, &(0x7f0000002000/0x18000)=nil, &(0x7f0000000100)=[@text16={0x10, &(0x7f0000000040)="0f01cb650f741065666765f36f0f330f09660f3a0cb9000000752066b9800000c00f326635004000000f300f01d7ba4100ed", 0x32}], 0x1, 0x4498bda7e2139f51, 0x0, 0x0) r1 = ioctl$KVM_CREATE_VCPU(r0, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r0, 0x4020ae46, &(0x7f0000000000)={0x1, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r1, &(0x7f0000fe8000/0x18000)=nil, &(0x7f00000001c0)=[@textreal={0x8, 0x0}], 0x1, 0x2, 0x0, 0x0) ioctl$KVM_RUN(r1, 0xae80, 0x0) 11m15.042798556s ago: executing program 5 (id=2092): fallocate(0xffffffffffffffff, 0x10, 0x3, 0x7ffd) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x50) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() connect$inet6(0xffffffffffffffff, 0x0, 0x0) sched_setscheduler(0x0, 0x1, 0x0) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) syz_open_dev$usbfs(0x0, 0xfff, 0xd2900) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs={0x0, 0x0, 0xfffffffe}, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x651, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0xb, &(0x7f0000000380)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020000000000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x2}, 0x94) r4 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r4, &(0x7f0000000180)={0x1f, 0xffff, 0x3}, 0x6) write(r4, &(0x7f0000000000)="38000000010001", 0x7) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='mmap_lock_acquire_returned\x00', r3}, 0x18) execveat(0xffffffffffffffff, &(0x7f0000003180)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0, 0x0, 0x800) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x651, 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x2, 0x0) 11m14.463969574s ago: executing program 5 (id=2094): r0 = socket$can_j1939(0x1d, 0x2, 0x7) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) keyctl$reject(0x13, 0x0, 0x6, 0x201, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r5 = socket$inet_sctp(0x2, 0x5, 0x84) setsockopt$IP_VS_SO_SET_ADD(r5, 0x0, 0x482, 0x0, 0x0) bpf$BPF_MAP_GET_NEXT_ID(0xc, &(0x7f0000000080)={0x100}, 0x8) r6 = socket$qrtr(0x2a, 0x2, 0x0) syz_init_net_socket$netrom(0x6, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r6, 0x8933, 0x0) syz_emit_vhci(&(0x7f0000000280)=ANY=[@ANYRESDEC=r0, @ANYRESHEX=r0], 0x35) bind$qrtr(r6, 0x0, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1}, 0x24008040) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000680)=ANY=[@ANYBLOB="14000000100001000000000000b890c1a000000a80000000160a01030000000000000000020000000900020073797a30000000000900010073797a300000000054000380080002400000000008000140000000004000038014000100766574680400746f5f6272696467650014000100776732000000000000000000000000000b00010076657468305f746f5f7465616d000000140000001100"], 0xa8}}, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x2000094}, 0x4000800) openat$uinput(0xffffffffffffff9c, &(0x7f0000000040), 0x802, 0x0) syz_emit_ethernet(0x36, &(0x7f0000000440)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaaaa08fb44000028000c0000002c9078ac1414bbac1414aa00000000", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="5c01000090780000"], 0x0) bpf$PROG_LOAD(0x5, &(0x7f00002a0fb8)={0x16, 0x4, &(0x7f0000000080)=ANY=[@ANYBLOB="85000000c20000006a0a00ff00", @ANYRES32, @ANYBLOB="00950000"], 0x0, 0x2, 0x95, &(0x7f0000000180)=""/149, 0x0, 0x0, '\x00', 0x0, @flow_dissector}, 0x94) 11m13.359998156s ago: executing program 5 (id=2097): r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000200)=0x1000000000005) prlimit64(0x0, 0xe, &(0x7f0000000100)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) getpid() mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r1 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r1, 0x1, 0x0) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) r3 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) connect$bt_l2cap(r3, &(0x7f0000000080)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x7ff}, 0xe) r4 = syz_init_net_socket$bt_hidp(0x1f, 0x3, 0x6) ioctl$sock_bt_hidp_HIDPCONNADD(r4, 0x400448c8, &(0x7f0000000600)={r3, r3, 0x2008, 0x0, 0x0, 0x6, 0xfe, 0x10cf, 0x5, 0x5, 0x2, 0x1, 'syz0\x00'}) 11m8.198667886s ago: executing program 5 (id=2109): mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) openat$binderfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000100)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r0 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) r1 = eventfd2(0x44, 0x1) r2 = openat$ptmx(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$TIOCSETD(r2, 0x5423, &(0x7f0000000100)=0x3) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x1, 0x83, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0xfffffffffffffd71, 0xffffffffffffffff}, 0x78) r3 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x1a01, 0x0) ioctl$EVIOCGPROP(r3, 0x40047438, &(0x7f0000000180)=""/246) writev(r3, &(0x7f00000000c0)=[{&(0x7f0000000000)="3613", 0x2}, {&(0x7f00000002c0)="74863c69", 0x4}], 0x2) ioctl$KVM_IOEVENTFD(r0, 0x4040ae79, &(0x7f00000000c0)={0x6, 0x0, 0x4, r1, 0x1}) ioctl$KVM_IOEVENTFD(r0, 0x4040ae79, &(0x7f0000000240)={0x6, 0x4, 0x2, r1}) ioctl$KVM_IOEVENTFD(r0, 0x4040ae79, &(0x7f0000000100)={0xd8, 0x4, 0x2, r1}) sched_setscheduler(0x0, 0x2, 0x0) syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000780)=ANY=[@ANYBLOB="2d72646d61202d6e65745f7072696f202d726c696d6974202b7f59e3b3360be805557acb6370752006667265657a65"], 0x32) io_setup(0x10000, &(0x7f00000007c0)) io_setup(0x3, &(0x7f0000000040)) io_setup(0x2, &(0x7f0000000080)) write$cgroup_int(0xffffffffffffffff, 0x0, 0x0) 11m5.941727323s ago: executing program 5 (id=2114): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000006c0)={0x18, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020000000000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000"], &(0x7f00000004c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000300)='rcu_utilization\x00', r0}, 0x10) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x6) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x0, 0x0) getpid() mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r5 = add_key$fscrypt_v1(&(0x7f0000000040), &(0x7f00000001c0)={'fscrypt:', @desc2}, &(0x7f00000000c0)={0x0, "f1a1173fb9462d3589e67197f90be6e423ceb0ab4912f9f6a31854ec98e950cfed21fcad7ff0fbcb566a0982f8938caa52dd8d39af14c31ed56ad59300", 0xfffffffb}, 0x48, 0xffffffffffffffff) keyctl$KEYCTL_MOVE(0x4, r5, r5, 0x0, 0x0) request_key(&(0x7f0000000000)='dns_resolver\x00', &(0x7f0000000100)={'syz', 0x0}, &(0x7f0000000180)='rcu_utilization\x00', r5) r6 = dup(0xffffffffffffffff) setsockopt$IPT_SO_SET_REPLACE(r6, 0x4000000000000, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0xe501, 0x3, 0x298, 0x128, 0x6affffff, 0x3403000b, 0x0, 0x7, 0x200, 0x230, 0x230, 0x200, 0x223, 0x3, 0x0, {[{{@ip={@remote, @local, 0x0, 0x0, 'bond_slave_1\x00', 'veth1_to_team\x00'}, 0x0, 0xe0, 0x128, 0x0, {0x1000000}, [@common=@unspec=@quota={{0x38}, {0x1, 0x0, 0x0, {0x3}}}, @common=@unspec=@time={{0x38}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe}}]}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'pptp\x00'}}}, {{@uncond, 0x0, 0x70, 0xd8}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x2, 0x0, 0x0, 0x0, 'syz0\x00', 'syz1\x00'}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x2f8) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) connect$unix(r1, 0x0, 0x0) r7 = syz_open_procfs(0x0, &(0x7f00000003c0)='mountinfo\x00') r8 = openat$ptmx(0xffffffffffffff9c, 0x0, 0x123f41, 0x0) write$binfmt_aout(r8, 0x0, 0xff2e) open(&(0x7f0000000200)='./bus\x00', 0x141a42, 0x0) r9 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_PKTINFO(r9, 0x10e, 0x3, &(0x7f00000000c0)=0xffff, 0x4) write(r9, &(0x7f0000000400)="240000001a005f0314f9f40400090400020000000104000000000000000004000100000073dd1d37d1bd6bdba3501b8459586c01b72a423f0825160b4d7a6f0de767a37c71e822d7dcf12a8634c4087bab7645615883e483453d7d9b657f5acfb89d91e9a064b364712e0c20d064a93ae9b13f5592744df5a5474e7e2fff055a7a24987800"/142, 0x40) recvmmsg(r7, &(0x7f0000000ac0), 0x0, 0x2040, 0x0) 10m50.062180564s ago: executing program 39 (id=2114): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000006c0)={0x18, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020000000000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000"], &(0x7f00000004c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000300)='rcu_utilization\x00', r0}, 0x10) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x6) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x0, 0x0) getpid() mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r5 = add_key$fscrypt_v1(&(0x7f0000000040), &(0x7f00000001c0)={'fscrypt:', @desc2}, &(0x7f00000000c0)={0x0, "f1a1173fb9462d3589e67197f90be6e423ceb0ab4912f9f6a31854ec98e950cfed21fcad7ff0fbcb566a0982f8938caa52dd8d39af14c31ed56ad59300", 0xfffffffb}, 0x48, 0xffffffffffffffff) keyctl$KEYCTL_MOVE(0x4, r5, r5, 0x0, 0x0) request_key(&(0x7f0000000000)='dns_resolver\x00', &(0x7f0000000100)={'syz', 0x0}, &(0x7f0000000180)='rcu_utilization\x00', r5) r6 = dup(0xffffffffffffffff) setsockopt$IPT_SO_SET_REPLACE(r6, 0x4000000000000, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0xe501, 0x3, 0x298, 0x128, 0x6affffff, 0x3403000b, 0x0, 0x7, 0x200, 0x230, 0x230, 0x200, 0x223, 0x3, 0x0, {[{{@ip={@remote, @local, 0x0, 0x0, 'bond_slave_1\x00', 'veth1_to_team\x00'}, 0x0, 0xe0, 0x128, 0x0, {0x1000000}, [@common=@unspec=@quota={{0x38}, {0x1, 0x0, 0x0, {0x3}}}, @common=@unspec=@time={{0x38}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe}}]}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'pptp\x00'}}}, {{@uncond, 0x0, 0x70, 0xd8}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x2, 0x0, 0x0, 0x0, 'syz0\x00', 'syz1\x00'}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x2f8) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) connect$unix(r1, 0x0, 0x0) r7 = syz_open_procfs(0x0, &(0x7f00000003c0)='mountinfo\x00') r8 = openat$ptmx(0xffffffffffffff9c, 0x0, 0x123f41, 0x0) write$binfmt_aout(r8, 0x0, 0xff2e) open(&(0x7f0000000200)='./bus\x00', 0x141a42, 0x0) r9 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_PKTINFO(r9, 0x10e, 0x3, &(0x7f00000000c0)=0xffff, 0x4) write(r9, &(0x7f0000000400)="240000001a005f0314f9f40400090400020000000104000000000000000004000100000073dd1d37d1bd6bdba3501b8459586c01b72a423f0825160b4d7a6f0de767a37c71e822d7dcf12a8634c4087bab7645615883e483453d7d9b657f5acfb89d91e9a064b364712e0c20d064a93ae9b13f5592744df5a5474e7e2fff055a7a24987800"/142, 0x40) recvmmsg(r7, &(0x7f0000000ac0), 0x0, 0x2040, 0x0) 10m29.285738238s ago: executing program 8 (id=2172): syz_genetlink_get_family_id$l2tp(0x0, 0xffffffffffffffff) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000000), 0x208e24b) syz_open_procfs(0x0, &(0x7f00000004c0)='net/ipv6_route\x00') mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x100000a, 0x28011, r0, 0x0) r1 = socket(0xa, 0x1, 0x0) getsockopt(r1, 0x1, 0x2f, &(0x7f0000001940)=""/8, &(0x7f0000000040)=0x8) 10m28.840173403s ago: executing program 8 (id=2174): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'rose0\x00', 0x112}) socket$kcm(0x29, 0x0, 0x0) ioctl$TUNSETQUEUE(r0, 0x400454d9, &(0x7f0000000000)={'pim6reg\x00', 0x400}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0x6, &(0x7f0000000cc0)=ANY=[@ANYBLOB="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"], &(0x7f0000000080)='GPL\x00', 0x5, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r2}, 0x10) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r5 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x94) r6 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f0000000540)=ANY=[@ANYBLOB="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"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x366, 0x10, &(0x7f0000000000), 0x1dd}, 0x48) r7 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="0f000000040000000400000012"], 0x48) bpf$BPF_PROG_DETACH(0x8, &(0x7f00000002c0)=ANY=[@ANYRES32=r7, @ANYRES32=r6, @ANYBLOB='&'], 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000000c0)={{r7}, &(0x7f0000000000), &(0x7f0000000080)=r5}, 0x20) r8 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f0000000540)=ANY=[@ANYBLOB="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"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x366, 0x10, &(0x7f0000000000), 0x1dd}, 0x48) r9 = bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="0f000000040000000400000012"], 0x48) r10 = bpf$BPF_LINK_CREATE(0x1c, &(0x7f00000001c0)={r8, r9, 0x26, 0x0, @void}, 0x10) bpf$LINK_DETACH(0x22, &(0x7f0000000480)=r10, 0x4) ioctl$TUNATTACHFILTER(r0, 0x401054d5, &(0x7f00000000c0)={0x0, 0x0}) 10m25.39037605s ago: executing program 8 (id=2178): openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) openat(0xffffffffffffff9c, 0x0, 0x800, 0x0) setreuid(0x0, 0xee00) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r1, &(0x7f0000002000/0x18000)=nil, 0x0, 0x0, 0x4498bda7e2139f51, 0x0, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000000)={0x1, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe8000/0x18000)=nil, &(0x7f00000001c0)=[@textreal={0x8, 0x0}], 0x1, 0x2, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 10m23.79998488s ago: executing program 8 (id=2181): mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) openat$binderfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = eventfd2(0x44, 0x1) r3 = openat$ptmx(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$TIOCSETD(r3, 0x5423, &(0x7f0000000100)=0x3) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x1, 0x83, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0xfffffffffffffd71, 0xffffffffffffffff}, 0x78) r4 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x1a01, 0x0) ioctl$EVIOCGPROP(r4, 0x40047438, &(0x7f0000000180)=""/246) writev(r4, &(0x7f00000000c0)=[{&(0x7f0000000000)="3613", 0x2}, {&(0x7f00000002c0)="74863c69", 0x4}], 0x2) ioctl$KVM_IOEVENTFD(r1, 0x4040ae79, &(0x7f00000000c0)={0x6, 0x0, 0x4, r2, 0x1}) ioctl$KVM_IOEVENTFD(r1, 0x4040ae79, &(0x7f0000000240)={0x6, 0x4, 0x2, r2}) ioctl$KVM_IOEVENTFD(r1, 0x4040ae79, &(0x7f0000000100)={0xd8, 0x4, 0x2, r2}) sched_setscheduler(0x0, 0x2, 0x0) syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000780)=ANY=[@ANYBLOB="2d72646d61202d6e65745f7072696f202d726c696d6974202b7f59e3b3360be805557acb6370752006667265657a65"], 0x32) io_setup(0x10000, &(0x7f00000007c0)) io_setup(0x3, &(0x7f0000000040)) io_setup(0x2, &(0x7f0000000080)) write$cgroup_int(0xffffffffffffffff, 0x0, 0x0) 10m21.805241201s ago: executing program 8 (id=2184): syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) prlimit64(0x0, 0xe, &(0x7f0000000100)={0x8, 0x80000100008b}, 0x0) unshare(0xa000200) r0 = semget(0x1, 0x2, 0x222) semtimedop(r0, &(0x7f0000000040)=[{0x0, 0x1080, 0x1000}], 0x1, 0x0) unshare(0xa000400) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_emit_ethernet(0x3e, &(0x7f0000000280)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaaaa86dd606410a600083b00fe80000000000000000000000000001efe"], 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000000)=0x3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x4000800) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) getegid() read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) semget$private(0x0, 0x6, 0x0) r4 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r4}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000180)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xb, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB], 0x0, 0x2, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @fallback=0x1d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffbff}, 0x94) futex(&(0x7f000000cffc), 0x0, 0x0, 0x0, 0x0, 0x0) futex(&(0x7f000000cffc), 0x0, 0x0, 0x0, 0x0, 0x0) futex(&(0x7f000000cffc), 0x3, 0x801, 0x0, &(0x7f0000000040), 0xfffffffc) 10m19.93955937s ago: executing program 8 (id=2187): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'rose0\x00', 0x112}) socket$kcm(0x29, 0x0, 0x0) ioctl$TUNSETQUEUE(r0, 0x400454d9, &(0x7f0000000000)={'pim6reg\x00', 0x400}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0x6, &(0x7f0000000cc0)=ANY=[@ANYBLOB="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"], &(0x7f0000000080)='GPL\x00', 0x5, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r2}, 0x10) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r5 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x94) r6 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f0000000540)=ANY=[@ANYBLOB="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"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x366, 0x10, &(0x7f0000000000), 0x1dd}, 0x48) r7 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="0f000000040000000400000012"], 0x48) bpf$BPF_PROG_DETACH(0x8, &(0x7f00000002c0)=ANY=[@ANYRES32=r7, @ANYRES32=r6, @ANYBLOB='&'], 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000000c0)={{r7}, &(0x7f0000000000), &(0x7f0000000080)=r5}, 0x20) r8 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f0000000540)=ANY=[@ANYBLOB="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"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x366, 0x10, &(0x7f0000000000), 0x1dd}, 0x48) r9 = bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="0f000000040000000400000012"], 0x48) r10 = bpf$BPF_LINK_CREATE(0x1c, &(0x7f00000001c0)={r8, r9, 0x26, 0x0, @void}, 0x10) bpf$LINK_DETACH(0x22, &(0x7f0000000480)=r10, 0x4) ioctl$TUNATTACHFILTER(r0, 0x401054d5, &(0x7f00000000c0)={0x0, 0x0}) 10m4.737395482s ago: executing program 40 (id=2187): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'rose0\x00', 0x112}) socket$kcm(0x29, 0x0, 0x0) ioctl$TUNSETQUEUE(r0, 0x400454d9, &(0x7f0000000000)={'pim6reg\x00', 0x400}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0x6, &(0x7f0000000cc0)=ANY=[@ANYBLOB="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"], &(0x7f0000000080)='GPL\x00', 0x5, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r2}, 0x10) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r5 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x94) r6 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f0000000540)=ANY=[@ANYBLOB="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"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x366, 0x10, &(0x7f0000000000), 0x1dd}, 0x48) r7 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="0f000000040000000400000012"], 0x48) bpf$BPF_PROG_DETACH(0x8, &(0x7f00000002c0)=ANY=[@ANYRES32=r7, @ANYRES32=r6, @ANYBLOB='&'], 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000000c0)={{r7}, &(0x7f0000000000), &(0x7f0000000080)=r5}, 0x20) r8 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f0000000540)=ANY=[@ANYBLOB="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"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x366, 0x10, &(0x7f0000000000), 0x1dd}, 0x48) r9 = bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="0f000000040000000400000012"], 0x48) r10 = bpf$BPF_LINK_CREATE(0x1c, &(0x7f00000001c0)={r8, r9, 0x26, 0x0, @void}, 0x10) bpf$LINK_DETACH(0x22, &(0x7f0000000480)=r10, 0x4) ioctl$TUNATTACHFILTER(r0, 0x401054d5, &(0x7f00000000c0)={0x0, 0x0}) 6m2.928160004s ago: executing program 2 (id=2685): syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000480)='./bus\x00', 0xc0ed0040, &(0x7f0000000240)={[{@noblock_validity}, {@abort}, {@acl}, {@resuid}, {@journal_dev={'journal_dev', 0x3d, 0x8}}, {@nodiscard}]}, 0xfe, 0x472, &(0x7f0000001140)="$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") bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={0x0}, 0x18) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, 0x0, 0x0, 0x2, 0x0) syz_mount_image$fuse(0x0, &(0x7f00000000c0)='./bus\x00', 0x3000009, 0x0, 0x1, 0x0, 0x0) socket$inet_icmp_raw(0x2, 0x3, 0x1) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000006900000000000001000000940000000fad413e850000000700000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r3}, 0x18) r4 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f00000000c0)={'bridge0\x00', 0x0}) sendmsg$nl_route(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=@newlink={0x44, 0x10, 0x401, 0xfffffffc, 0x80, {0x0, 0x0, 0x0, 0x0, 0x1503}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @macsec={{0xb}, {0x4}}}, @IFLA_LINK={0x8, 0x5, r5}, @IFLA_MASTER={0x8, 0xa, r5}]}, 0x44}, 0x1, 0x0, 0x0, 0x2004d808}, 0x0) pwritev(0xffffffffffffffff, &(0x7f0000000d40), 0x1000000000000258, 0x4, 0x0) r6 = dup(0xffffffffffffffff) getresuid(&(0x7f0000000800), &(0x7f0000000000), &(0x7f0000000340)=0x0) mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000b80), 0x0, &(0x7f0000000580)=ANY=[@ANYBLOB='trans=fd,rfd', @ANYRESHEX, @ANYBLOB=',wfdno=', @ANYRESHEX=r6, @ANYBLOB, @ANYRESDEC=r7]) mount$9p_tcp(&(0x7f00000001c0), &(0x7f0000000300)='./bus\x00', &(0x7f0000000340), 0x800, &(0x7f0000000380)={'trans=tcp,', {'port', 0x3d, 0x4e20}, 0x2c, {[{@debug={'debug', 0x3d, 0x3}}, {@access_user}, {@privport}, {@access_uid={'access', 0x3d, r7}}, {@cache_mmap}], [{@fsmagic={'fsmagic', 0x3d, 0x5}}, {@mask={'mask', 0x3d, 'MAY_WRITE'}}, {@fscontext={'fscontext', 0x3d, 'staff_u'}}, {@seclabel}, {@fsname={'fsname', 0x3d, '&'}}]}}) 5m56.801661852s ago: executing program 2 (id=2695): r0 = syz_usb_connect$cdc_ncm(0x5, 0x76, &(0x7f0000000340)=ANY=[@ANYBLOB="12010000020000402505a1a44000010203010902640002010000000904010001020d0000052406000105240000000d240f0100000000000000000006241a0000"], 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) 5m53.122682953s ago: executing program 2 (id=2702): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000001580)={0x0}, 0x18) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) setsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, 0x0, 0x0) fchown(0xffffffffffffffff, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000240)=0x6) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x5, &(0x7f00000002c0)=ANY=[@ANYBLOB], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r3}, 0xc) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0xe, 0x16, &(0x7f0000000940)=ANY=[@ANYBLOB="61158800000000006113500000000000bfa000000000000007000000ee0016055e15010000000000160500000000000069163e0000000000bf07000000000000260507000fff07206706000020000000150600000ee60060bf500000000000002f650000000000006507f9ff0100000007070000cddfffff1e75000000000000bf54000000000000070400000400f9ffad4301000000000095000000000000001500000000000000950000000000000032ed3c12dc8c27df8ecf264e0f84f9f17d3c30e32f1754558f2278af6d71d79a5e12814cb1d8a5d4601d295c45a6a0b9bdb7dd3997f9c9c4f6f3be4b369289aa6812b8e007e733a9a4f1b0af3dda82ee45a010fb94fe9de57b9d8a814261bdb94a05002000c6c60bf70d742a81762bab8395fa64810b5b40d893ea8fe0185473d51b546cad3f1d5ace0600006e7c955ccefa1f6ab689b555202da2e0ec2871b4a7e65836429a527dc47ebe84a423b6c8d345dc0da3085b0ab71ca1b901627b562ed04ae76002d4519af619e3cca4d69e0dee5eb106774a8f3e6916dfec88158f0200000000c8fb730a5c1bf2b2bb71a629361997a75fd552bdc206438b8ef4901fd03c16dfda44e2a2235c8ac86d8a297dff0445a15f21dce431e56723888fb126a163f16f920ae2fb494059bba8e3b680324a188076eb685d00c4e9b2ad9bc1172ba7cbebe174aba210d739a018f9bbec63222d20cecac4d03723f1c932fb3bba54b3a6aa57f1ad2e99e0e67ab9ff16d20000009f0f53acbb40b4f8e2738270001562ed834f2af97787f696649a462e7ee4bcf8b07a10d6735154beb4000000000000000000000000004000bc00f679629709e7e78f4ddc211bc3ebe6bd9d42ca0140a7afaab43176e65ec1118d50d1e827f3472f4445d253880800000000000000690884f800031e03a651bb96589a7e2e509bcc1d161347623cb5e7ac4629c8ab04871bc47287cd31cc43010000007b40407d000000210000000000000000005f37d83f84e98a523d80bd970d703f37ca364a601ae899a56715a0a62a34c6c94cce6994521629ab028acfc1d926a0f6a5489af8dc2f17923f3c40dfd1970a55c22fe3a5ac000000000000000000000000000000c1eb2d91fb79ea00000000815266b2c9e1bfadc7498e9dda5d000000bb0d00000000000000000000e4007be511fe32fbc90e2364a55e9bb66ac64423d2d00fea2594e190deae46e26c596f84eba9000000000000003cc3aa39ee4b1386bab561cda886fa642994cacd473b543ccb5f0d7b63924f17c67b13631822a11dc3c693962895496d4f6e9cc54db6c7205a6b26f92121ef53e553acdf42068fff496d2da7d6327f31d7c8cc5d325c5379b0363ce8bd1f61b007e1ff5f1be1969a1ba791ad46d800000000c7f26a0337302f3b41eae59809fd05d12f6186f117b062df67d3a63f3265dd1410eea68208a3f26b2989b832d8b34a34a4f08b34b3042065acaa10856e858d27adee7daf32903d3fc78700d429a2d4c8b6d803eb83eecfe4c7ff9e6ab5a52e83d089dad7a8710eec53f1b11cced7bc3c8da0c44d2fbf9f6f3ff3be4d1458077c2253b0c7c7a0a9fdd63bf910dc20e5cb2a88e59febc47f1212a21f631dbaa74f22bad050e9856b48ae3a03a497c37758537650fe6db80300c41fdc3d78e046f6160e1741299e8dc29906870e6431ed1eab5d067a183f064b060a8ec12725d42e3a74863d66bee966b1574f8e01b3f34a267ff0afa1e1c758a0079b747067312e9815a21cb3f1f8150d999d788535a4d3114dbc7e2bf2402a75fd7a55733360040855ed5d1c0d634fc5fb38f8709d87b27f8a5d9121fdc058447b728f134f72062fc4b1ca0780b1a7af137ff7b4ff139604faf0453b65586f65c7943d56b52f06c870edf0c5d744b5272b44c23480b2bdbff947c4dfa108cbb88202eeb81f428a5b3c299848649e1a6bff52f657a67463d7dbf85ae9321fc2cc17dc4a29b9cba8ded5de8206c812439ab129ae818837ee1562078fc524b3baf49a0be9bb7d958d5e87c6c09bf71a894bad62934782cc308e936d7637e07c4a2a3bc87b0da20000d9ef418cf19e7a8c4c328be0ce91798adc2dca871073f6bd61940aabc86b94f8cbde4d47060400e722a6a2af483ad0d3415ed0f9db009acaba9eaea93f811d434e00000000000000000000d154672fea96aedf346279ec00000000000000000000d535d41b0067f01e2e54b9154d876020b669640ead4ca44631fadf7c4ac39a1b331dbdcd52b36df021b731ef1f92330d347f88ced5c1aaadbcdd8d2257e3a9a7c7494fadf9be36f7a2334ee6e9446fa1fd486f85d672a77dc5bd21463994d49f12016305a1e394d292b66840fe32b40ad665d241a8b8a32b3100450c32832789aa8a096f41201b585cd76631c88cf958e9e9047f5af1730c5e83db12460a0768fd4b62be6c41eed307048bac8d1f7f164574241e06027654b248dcc38749eee0c1ee7c61b3f6411a559c3d45637b11e440ed5a99109b8e71d28c3d677af5f0499c6d3fc6a129775056958c9df824ebe5fa9fb306b24a8a8334910627d03efe69d4b61c4345f048c5da8aca16cea848fa77d2507c920a6bd654b00e07789382ed902c80deeff2fd5c78f42e4353e5360c3e55962efd1331e6736eaf4ee27736fa54803ee8ec1a15266ffcd8b30368740b584c2559e691e542cab3d49db327db62328f159d1e0900b3e23e84dedcd1377aa15dbeab7db181bd66980c3557c7d9f7377fcb6023accb5c368a121acf70e5f4c3f2a0ea07011c7149ea979cab2ee65cf7ffa29152b7a8fed89575e6e6fd77d4d9463d21775abac886ee6a1f2d7d8523840438a73d6307a87e2f525867fc3af7ab74520a773ae26bae74cdd405a211e8833e1ba523cde51d04a7ca6732"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xffffffffffffffd2}, 0x48) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, 0x0) socket$can_bcm(0x1d, 0x2, 0x2) ioctl$BLKTRACESTOP(0xffffffffffffffff, 0x1275, 0x0) r4 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) ioctl$UI_DEV_CREATE(r4, 0x5501) ioctl$UI_SET_PROPBIT(r4, 0x4004556e, 0xe) syz_usb_connect(0x1, 0x0, 0x0, &(0x7f0000000840)={0xa, &(0x7f00000006c0)={0xa, 0x6, 0x200, 0xf8, 0xd1, 0xc, 0x10, 0xb}, 0x1d, 0x0, 0x2, [{0x0, 0x0}, {0x2, &(0x7f0000000800)=@string={0x2}}]}) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) getpid() 5m50.018058796s ago: executing program 2 (id=2709): bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x11, 0xb, &(0x7f0000000180)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="16000000000000000400"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000b40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000500)='page_pool_state_release\x00', r1}, 0x10) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000800)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={r2, 0x2000000, 0xe, 0x0, &(0x7f00000004c0)="630b008646dc3f0adf33c9f7b986", 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x2}, 0x50) 5m49.606651237s ago: executing program 2 (id=2711): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x6) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x0, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000040)='contention_begin\x00'}, 0x18) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, 0x0, 0x0) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = openat$zero(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) read(r3, &(0x7f0000000040)=""/148, 0xffffff96) 5m48.68163314s ago: executing program 2 (id=2713): prlimit64(0x0, 0xe, &(0x7f0000000240)={0x8, 0x248}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)=ANY=[@ANYBLOB="380000006c0015000000d9fece23b82000000000", @ANYRES32=r1, @ANYBLOB="000080000000000018003480050035"], 0x38}, 0x1, 0x300}, 0x0) sched_setaffinity(0x0, 0x1, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xffffe000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f00000004c0)=@abs={0x0, 0x0, 0x4e24}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x3fffffffffffeda, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r4 = openat$procfs(0xffffffffffffff9c, &(0x7f00000001c0)='/proc/timer_list\x00', 0x0, 0x0) sendfile(0xffffffffffffffff, r4, 0x0, 0x20000023896) 5m31.548961878s ago: executing program 41 (id=2713): prlimit64(0x0, 0xe, &(0x7f0000000240)={0x8, 0x248}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)=ANY=[@ANYBLOB="380000006c0015000000d9fece23b82000000000", @ANYRES32=r1, @ANYBLOB="000080000000000018003480050035"], 0x38}, 0x1, 0x300}, 0x0) sched_setaffinity(0x0, 0x1, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xffffe000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f00000004c0)=@abs={0x0, 0x0, 0x4e24}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x3fffffffffffeda, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r4 = openat$procfs(0xffffffffffffff9c, &(0x7f00000001c0)='/proc/timer_list\x00', 0x0, 0x0) sendfile(0xffffffffffffffff, r4, 0x0, 0x20000023896) 4m14.610497614s ago: executing program 1 (id=2869): r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000004c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0}, 0x50) bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000200)={r0, &(0x7f0000000700)}, 0x20) 4m14.307061435s ago: executing program 1 (id=2872): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x14, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) syz_mount_image$ext4(&(0x7f00000003c0)='ext4\x00', &(0x7f00000002c0)='./bus\x00', 0x404, &(0x7f0000000580)={[{@orlov}, {@min_batch_time={'min_batch_time', 0x3d, 0x4}}]}, 0x1, 0x5d8, &(0x7f0000000c00)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000400)='./bus\x00', 0x20240, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000004400)='./bus\x00', 0x1c1002, 0x0) write(r1, &(0x7f0000004200)='t', 0x1) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="170000000000000004000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000300)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x13, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f0000000300)='sched_switch\x00', r3}, 0x10) sendfile(r1, r0, 0x0, 0x3ffff) 4m13.236988521s ago: executing program 1 (id=2876): r0 = socket$netlink(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xb, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000040)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000001c0)=0x5) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000001700)=0x4) socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x3fffffffffffcb5, 0x2, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="160000000000000004000000050000", @ANYBLOB], 0x50) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0}, 0x90) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r7 = bpf$PROG_LOAD(0x5, 0x0, 0x0) r8 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r6}, 0x10) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="000000010000000000000000000000007b8af8ff0000e6ffbea200000000000a07020000f8ffffffb7316c0300f707fa0000b70400000000feff8500000058", @ANYRESOCT=r5, @ANYRES64=r1, @ANYRESOCT=r8, @ANYRES64=r4, @ANYRES64, @ANYRESDEC=r8, @ANYRESHEX=0x0, @ANYRES64=r7], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x4}, 0x94) r9 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) io_setup(0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x2) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f0000000300)='sched_switch\x00', r9}, 0x10) statfs(&(0x7f0000000500)='./file0\x00', &(0x7f0000000540)=""/194) sendmsg$nl_route_sched(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)=@newqdisc={0x54, 0x10, 0x1, 0x0, 0x10000000, {0x0, 0x0, 0x0, 0x0, {0x1}, {}, {0xe, 0xd}}, [@TCA_INGRESS_BLOCK={0x8}, @TCA_STAB={0x28, 0x8, 0x0, 0x1, [{{0x1c, 0x1a, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}}, {0x8, 0x1b, [0x0, 0x0]}}]}]}, 0x54}, 0x1, 0x0, 0x0, 0x80}, 0x0) r10 = socket(0x10, 0x803, 0x0) r11 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r11, 0x8933, &(0x7f0000000100)={'team_slave_1\x00', 0x0}) sendmsg$nl_route_sched(r10, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd27, 0xffffffff, {0x0, 0x0, 0x0, r12, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x7, 0xffff}}, [@qdisc_kind_options=@q_fq_codel={{0xd}, {0x4}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r10, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000002100)=@newtfilter={0x38, 0x2c, 0xd2b, 0x70bd2b, 0x35dfdbfb, {0x0, 0x0, 0x0, r12, {0xf}, {}, {0x7, 0x4}}, [@filter_kind_options=@f_fw={{0x7}, {0xc, 0x2, [@TCA_FW_MASK={0x8, 0x5, 0x6}]}}]}, 0x38}}, 0x24040084) 4m9.270378112s ago: executing program 1 (id=2880): memfd_create(&(0x7f0000001180)='\xd9\x168\xd3\xd8\xe7G5B\"@\xd8 \x8f\xaa\x86nwZ\x11**F\xdf\xac\xc6\xa2\x00\x00\x00\x00\x00\xe0tzA\xe4\x92\xe7\x02\x99=\xeb\x00\x00Q\x00\x02\x00\x00\x00X\b\xaaO\a\xc7\b<@\xa1\x00\xa6\xd6\xc9\x9b\xcf\xdd\x10\r\x8f\xac\x9a\x89\xdb<\xd7\x8cL\x00\x00\x00\x00\x00\x00\x00\x00{\x94E$\xf4C\\|\xa0<\x19{\x85>\x8f~]\xaa4\n\xd0B(Q\x80\n\xfc3k)\x1f\xbf-^\r0?0\xd3\x95AC\xdb3~\xa0\x15\x00\x00x\xd1\x8d+\xea\xee\xed\xb1\x1d\n\x89\xd0\xb7&\xb2\x06\x10\xe0\x159\x15\x01\xbchOV\x16\xe3\xd0(}gM\x1acD\x00\xe69\xdb\xf8\a\xd2o\x03\xf0\x01.\x1e9\xe5\x93r\x9aYAt\a\xd2\x0f\xce\x91\x85\x14\xe6\xb8\xf4\xb2\xdcJ\x9b\x1f\xaa\x9a\x86\xfe\xf9\xad\x06\xfcO\x8d\x04\xef\xee[\v)n\x94\xaa0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)=ANY=[], 0x50) bpf$MAP_CREATE(0x0, &(0x7f0000000140)=ANY=[@ANYBLOB="020000000400"/18], 0x50) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x20, 0x0, 0x0) r4 = syz_open_dev$sndctrl(0x0, 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_LIST(r4, 0xc0505510, &(0x7f0000000140)={0x3, 0x0, 0x10, 0x9, 0x0}) 4m5.929276668s ago: executing program 1 (id=2887): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'rose0\x00', 0x112}) socket$kcm(0x29, 0x0, 0x0) ioctl$TUNSETQUEUE(r0, 0x400454d9, &(0x7f0000000000)={'pim6reg\x00', 0x400}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0x6, &(0x7f0000000cc0)=ANY=[@ANYBLOB="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"], &(0x7f0000000080)='GPL\x00', 0x5, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r2}, 0x10) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r5 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4000000000000007910480000000000610400000000000095000080"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x48) close(r5) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000029c0)) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="0f000000040000000400000012"], 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000000c0)={{r6}, &(0x7f0000000000), &(0x7f0000000080)=r5}, 0x20) r7 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f0000000540)=ANY=[@ANYBLOB="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"], 0x0, 0x4, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x94) r8 = bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="0f000000040000000400000012"], 0x48) r9 = bpf$BPF_LINK_CREATE(0x1c, &(0x7f00000001c0)={r7, r8, 0x26, 0x0, @void}, 0x10) bpf$LINK_DETACH(0x22, &(0x7f0000000480)=r9, 0x4) ioctl$TUNATTACHFILTER(r0, 0x401054d5, &(0x7f00000000c0)={0x0, 0x0}) 3m49.780333157s ago: executing program 42 (id=2887): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'rose0\x00', 0x112}) socket$kcm(0x29, 0x0, 0x0) ioctl$TUNSETQUEUE(r0, 0x400454d9, &(0x7f0000000000)={'pim6reg\x00', 0x400}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0x6, &(0x7f0000000cc0)=ANY=[@ANYBLOB="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"], &(0x7f0000000080)='GPL\x00', 0x5, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r2}, 0x10) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r5 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4000000000000007910480000000000610400000000000095000080"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x48) close(r5) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000029c0)) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="0f000000040000000400000012"], 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000000c0)={{r6}, &(0x7f0000000000), &(0x7f0000000080)=r5}, 0x20) r7 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f0000000540)=ANY=[@ANYBLOB="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"], 0x0, 0x4, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x94) r8 = bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="0f000000040000000400000012"], 0x48) r9 = bpf$BPF_LINK_CREATE(0x1c, &(0x7f00000001c0)={r7, r8, 0x26, 0x0, @void}, 0x10) bpf$LINK_DETACH(0x22, &(0x7f0000000480)=r9, 0x4) ioctl$TUNATTACHFILTER(r0, 0x401054d5, &(0x7f00000000c0)={0x0, 0x0}) 2m53.514120229s ago: executing program 4 (id=2903): syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) prlimit64(0x0, 0xe, &(0x7f0000000100)={0x8, 0x80000100008b}, 0x0) unshare(0xa000200) r0 = semget(0x1, 0x2, 0x222) semtimedop(r0, &(0x7f0000000040)=[{0x0, 0x1080, 0x1000}], 0x1, 0x0) unshare(0xa000400) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000000)=0x3) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) getegid() read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) r4 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r4}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000180)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xb, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB], 0x0, 0x2, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @fallback=0x1d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffbff}, 0x94) futex(&(0x7f000000cffc), 0x0, 0x0, 0x0, 0x0, 0x0) futex(&(0x7f000000cffc), 0x0, 0x0, 0x0, 0x0, 0x0) futex(&(0x7f000000cffc), 0x3, 0x801, 0x0, &(0x7f0000000040), 0xfffffffc) 2m38.144615577s ago: executing program 43 (id=2903): syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) prlimit64(0x0, 0xe, &(0x7f0000000100)={0x8, 0x80000100008b}, 0x0) unshare(0xa000200) r0 = semget(0x1, 0x2, 0x222) semtimedop(r0, &(0x7f0000000040)=[{0x0, 0x1080, 0x1000}], 0x1, 0x0) unshare(0xa000400) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000000)=0x3) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) getegid() read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) r4 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r4}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000180)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xb, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB], 0x0, 0x2, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @fallback=0x1d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffbff}, 0x94) futex(&(0x7f000000cffc), 0x0, 0x0, 0x0, 0x0, 0x0) futex(&(0x7f000000cffc), 0x0, 0x0, 0x0, 0x0, 0x0) futex(&(0x7f000000cffc), 0x3, 0x801, 0x0, &(0x7f0000000040), 0xfffffffc) 2m2.107743061s ago: executing program 3 (id=3090): socket$packet(0x11, 0x3, 0x300) r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f00000010c0)=0x5, 0x4) setsockopt$packet_rx_ring(r0, 0x107, 0x5, &(0x7f0000000000)=@req3={0x1000, 0x3a, 0x1000, 0x3a}, 0x1c) r1 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'bridge0\x00'}) arch_prctl$ARCH_ENABLE_TAGGED_ADDR(0x4002, 0x6) syz_open_procfs(0x0, &(0x7f0000000080)='net/ip_vs\x00') prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) ppoll(&(0x7f0000000180)=[{0xffffffffffffffff, 0x2809}], 0x1, 0x0, 0x0, 0x9c) r2 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$TCSBRKP(r2, 0x5425, 0x0) r3 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) r4 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000240)='/proc/partitions\x00', 0x0, 0x0) syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) sendfile(r3, r4, 0x0, 0x20000023896) ioctl$TCSETSF(r2, 0x5404, &(0x7f0000000140)={0x0, 0xfffffffc, 0x100, 0x8000, 0xfc, "7a58beca3900000000000000000000000200"}) 2m1.070361525s ago: executing program 3 (id=3092): syz_mount_image$f2fs(&(0x7f0000000000), &(0x7f0000000300)='./file0\x00', 0x1808014, &(0x7f0000000c00)=ANY=[@ANYBLOB="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"/716, @ANYRES64, @ANYRESDEC, @ANYRES16], 0x5, 0x5593, &(0x7f00000061c0)="$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") quotactl$Q_GETFMT(0xffffffff80000400, &(0x7f00000003c0)=@loop={'/dev/loop', 0x0}, 0x0, 0x0) 1m58.062790398s ago: executing program 3 (id=3100): r0 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r0, &(0x7f0000000480)={0xa, 0x4e20, 0x0, @mcast1, 0x1}, 0x1c) r1 = socket$inet6(0xa, 0x2, 0x0) setsockopt$sock_int(r1, 0x1, 0xf, &(0x7f0000f59ffc)=0x4, 0x4) bind$inet6(r1, &(0x7f0000000480)={0xa, 0x4e20, 0x0, @mcast1, 0x2}, 0x1c) r2 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r2, &(0x7f0000000480)={0xa, 0x4e20, 0x0, @ipv4={'\x00', '\xff\xff', @multicast2}, 0x2}, 0x1c) r3 = socket$inet6(0xa, 0x2, 0x0) setsockopt$sock_int(r3, 0x1, 0xf, &(0x7f0000f59ffc)=0x4, 0x4) bind$inet6(r3, &(0x7f0000000480)={0xa, 0x4e20, 0x0, @mcast1, 0x2}, 0x1c) r4 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r4, &(0x7f00000000c0)={0xa, 0x4e20, 0x0, @mcast1, 0x5}, 0x1c) r5 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r5, &(0x7f0000000480)={0xa, 0x4e20, 0x0, @mcast1, 0x6}, 0x1c) r6 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r6, &(0x7f0000000000)={0xa, 0xe20, 0x0, @empty}, 0x1c) r7 = socket$inet6(0xa, 0x2, 0x0) setsockopt$sock_int(r7, 0x1, 0xf, &(0x7f0000000080)=0x5, 0x4) bind$inet6(r7, &(0x7f0000000480)={0xa, 0x4e20, 0x0, @mcast1, 0x2}, 0x1c) r8 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r8, &(0x7f0000000480)={0xa, 0x4e20, 0x0, @ipv4={'\x00', '\xff\xff', @multicast1}}, 0x1c) r9 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r9, &(0x7f0000000480)={0xa, 0x4e20, 0x0, @mcast2, 0x2}, 0x1c) r10 = socket$inet6(0xa, 0x2, 0x0) setsockopt$sock_int(r10, 0x1, 0xf, &(0x7f0000f59ffc)=0x3, 0x4) bind$inet6(r10, &(0x7f0000000480)={0xa, 0x4e20, 0x0, @mcast1, 0x2}, 0x1c) r11 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r11, 0x0, 0x0) 1m57.468790238s ago: executing program 3 (id=3101): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="1801000000000000000000000000ea04850000"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000040)='sched_switch\x00', r0}, 0x10) r1 = syz_open_dev$usbfs(&(0x7f0000000480), 0x76, 0x160341) ioctl$USBDEVFS_IOCTL(r1, 0xc0105512, &(0x7f0000000200)) ioctl$USBDEVFS_IOCTL(r1, 0xc0105512, &(0x7f0000000000)=@usbdevfs_connect) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff}) connect$unix(r2, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f00000000c0)='sched_switch\x00'}, 0x10) socket$inet6(0xa, 0x2, 0xff) open(&(0x7f00000000c0)='./file0\x00', 0x1298c2, 0x0) r3 = syz_open_procfs(0x0, &(0x7f0000000580)='smaps_rollup\x00') openat(r3, &(0x7f0000000040)='./file0\x00', 0x80000, 0xa2) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000240)=@framed={{}, [@ringbuf_query]}, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x1, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={0x0, r4}, 0x18) syz_mount_image$ext4(&(0x7f00000003c0)='ext4\x00', &(0x7f00000002c0)='./bus\x00', 0x404, &(0x7f0000000580)={[{@orlov}, {@min_batch_time={'min_batch_time', 0x3d, 0x4}}]}, 0x1, 0x5d8, &(0x7f0000000c00)="$eJzs3c9vFFUcAPDvbH/QUrSFGBUP0sQYSJSWFjDEeICrIQ3+iBcvVloQKdDQGi2aUBK8mBgvxph48iD+F0rkyklPHrx4MiREDUcT18x2pnTb2ZYubacyn0+y9M17O7w33X773r6+NxtAZQ2m/9Qi9kbEdBLRn8wvlnVGVji48Lx7f39yOn0kUa+/8WcSSZaXPz/JvvZlJ/dExM8/JbGnY2W9M3NXzo9PTU1ezo6HZy9MD8/MXTl47sL42cmzkxdHXxo9dvTI0WMjh9q6rqsFeSevv/9h/2djb3/3zT/JyPe/jSVxPF7Nnrj0OjbKYAw2vifJyqK+YxtdWUk6sp+TpS9x0llig1iX/PXrioinoj864v6L1x+fvlZq44BNVU8i6kBFJeIfKiofB+Tv7Ze/D66VMioBtsLdEwsTACvjv3NhbjB6GnMDO+8lsXRaJ4mI9mbmmu2KiNu3xq6fuTV2PTZpHg4oNn8tIp4uiv+kEf8D0RMDjfivNcV/Oi44lX1N819vs/7lU8XiH7bOQvz3rBr/0SL+31kS/++2Wf/g/eR7vU3x39vuJQEAAAAAAEBl3TwRES8W/f2/trj+JwrW//RFxPENqH9w2fHKv//X7mxANUCBuyciXilc/1vLV/8OdGSpxxrrAbqSM+emJg9FxOMRcSC6dqTHI6vUcfDzPV+3KhvM1v/lj7T+29lawKwddzp3NJ8zMT47/rDXDUTcvRbxTOH632Sx/08K+v/098H0A9ax5/kbp1qVrR3/wGapfxuxv7D/v3/XimT1+3MMN8YDw/moYKVnP/7ih1b1txv/bjEBDy/t/3euHv8DydL79cysv47Dc531VmXtjv+7kzcbt5zpzvI+Gp+dvTwS0Z2c7Ehzm/JH199meBTl8ZDHSxr/B55bff6vaPzfGxHzy/7v5K/mPcW5J//t+71Ve4z/oTxp/E+sq/9ff2L0xsCPrep/sP7/SKOvP5DlmP+DBV/lYdrdnF8Qjp1FRVvdXgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAB4FNQiYlcktaHFdK02NBTRFxFPxM7a1KWZ2RfOXPrg4kRa1vj8/1r+Sb/9C8dJ/vn/A0uOR5cdH46I3RHxZUdv43jo9KWpibIvHgAAAAAAAAAAAAAAAAAAALaJvhb7/1N/dJTdOmDTdZbdAKA0BfH/SxntALae/h+qS/xDdYl/qC7xD9Ul/qG6xD9Ul/iH6hL/AAAAAADwSNm97+avSUTMv9zbeKS6s7KuUlsGbLZa2Q0ASuMWP1Bdlv5AdXmPDyRrlPe0PGmtM1czffohTgYAAAAAAAAAAACAytm/1/5/qCr7/6G67P+H6sr3/+8ruR3A1vMeH4g1dvIX7v9f8ywAAAAAAAAAAAAAYCPNzF05Pz41NXlZ4q3t0YytTNTr9avpT8F2ac//PJEvhd8u7VmWyPf6PdhZ5f1OAgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAmv0XAAD//xYSJMU=") r5 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./bus\x00', 0x40, 0x0) r6 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./bus\x00', 0x1c1002, 0x0) write(r6, &(0x7f0000004200)='t', 0x1) sendfile(r6, r5, 0x0, 0x3ffff) sendfile(r6, r5, 0x0, 0x7ffff000) 1m55.702347156s ago: executing program 3 (id=3104): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="07000000040000000800000001"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000740)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b703000000030000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='sys_enter\x00', r1}, 0x18) syslog(0x3, 0x0, 0x0) 1m54.250773443s ago: executing program 3 (id=3106): r0 = socket$inet_udp(0x2, 0x2, 0x0) syz_mount_image$ext4(&(0x7f0000000240)='ext4\x00', &(0x7f0000000280)='mnt\x00', 0x0, &(0x7f0000000000), 0x0, 0x248, &(0x7f0000000940)="$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") mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='mnt/encrypted_dir\x00', 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000680)='mnt/encrypted_dir\x00', 0x800, 0x0) ioctl$FS_IOC_SET_ENCRYPTION_POLICY(r1, 0x800c6613, &(0x7f00000006c0)=@v2={0x2, @adiantum, 0x4, '\x00', @a}) chdir(&(0x7f00000002c0)='mnt/encrypted_dir\x00') ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f0000001040)={'sit0\x00', &(0x7f0000001000)={'syztnl2\x00', 0x0, 0x0, 0xa000, 0x0, 0x0, {{0x5, 0x4, 0x0, 0x3, 0x14, 0x64, 0x0, 0x0, 0x4, 0x0, @private=0xa010102, @local}}}}) prlimit64(0x0, 0xe, &(0x7f0000000300)={0x8, 0x248}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() sched_setaffinity(0x0, 0x1, &(0x7f00000002c0)=0x2) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f00000004c0)=@abs={0x0, 0x0, 0x4e22}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x3fffffffffffeda, 0x2, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) socket(0x10, 0x803, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) r5 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r6 = openat$cgroup_procs(r5, &(0x7f0000000040)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r6, &(0x7f00000001c0), 0x12) r7 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=@newtaction={0x8c, 0x30, 0x1, 0x0, 0x0, {0x7a}, [{0x78, 0x1, [@m_police={0x74, 0x1, 0x0, 0x0, {{0xb}, {0x48, 0x2, 0x0, 0x1, [[@TCA_POLICE_TBF={0x3c, 0x1, {0x0, 0xffffffffffffffff, 0x8000, 0x0, 0x0, {0x0, 0x0, 0x0, 0xfffd}}}, @TCA_POLICE_RESULT={0x8, 0x5, 0xffffffff}]]}, {0x4}, {0xc, 0xb}, {0xc, 0xa}}}]}]}, 0x8c}}, 0x0) 1m38.390084961s ago: executing program 44 (id=3106): r0 = socket$inet_udp(0x2, 0x2, 0x0) syz_mount_image$ext4(&(0x7f0000000240)='ext4\x00', &(0x7f0000000280)='mnt\x00', 0x0, &(0x7f0000000000), 0x0, 0x248, &(0x7f0000000940)="$eJzs3T9oFFkcB/DfzO5eLsly5O6ag4O7g+M47gIh1x3YxEYhICGICCpERGyURIgJdomVjYXWKqlsgtgZrdMEG0Ww8k+K2AgaLAwWWqzsTiLRbDBxN7uS+Xxg2JnZee/3hp3v221mNoDc6omIgYgoRERvRJQiIll/wB/Z0rO6OdO5MBJRqRx8ndSOy7Yza+26I2I6Iv6PiPk0idPFiMm5o0tvH+//+9JE6a8bc0c6W3qSq5aXFg+sXB+6eHvwv8kHj14OJTEQ5U/Oq/mSOvuKScRPO1HsG5EU2z0CtmL4/K0n1dz/HBF/1vJfijSyD+/y+Hfzpfj32mZtr7x6+Gsrxwo0X6VSqn4HTleA3EkjohxJ2hcR2Xqa9vVlv+GfFrrSM2Pj53pPjU2Mnmz3TAU0Szlicd/djjvdn+X/RSHLP7B7VfN/aHj2WXV9pdDu0QCtVM1/7/Gpf0L+IXfkH/JL/iG/5B/yS/4hv+Qf8kv+Ydf4frsN5B/yS/4hv+Qf8mt9/gGAfKl0tPsOZKBd2j3/AAAAAAAAAAAAAAAAAAAAG810LoysLa2qee9qxPLeiCjWq1+o/R/x2qNNu94k1cM+SrJmDTn2e4MdNOjmDt59vZVHuv3wfOfqb8X935rZW3nbLaZGI6YvRER/sbjx+ktWr7+v9+MX3i+daLBAg/Ycbm/997Otq1Wqs2+wkmQr/fXmnzR+qb3Wn3/Km/S5HWffNdgBAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAALfMhAAD//+M2bGo=") mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='mnt/encrypted_dir\x00', 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000680)='mnt/encrypted_dir\x00', 0x800, 0x0) ioctl$FS_IOC_SET_ENCRYPTION_POLICY(r1, 0x800c6613, &(0x7f00000006c0)=@v2={0x2, @adiantum, 0x4, '\x00', @a}) chdir(&(0x7f00000002c0)='mnt/encrypted_dir\x00') ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f0000001040)={'sit0\x00', &(0x7f0000001000)={'syztnl2\x00', 0x0, 0x0, 0xa000, 0x0, 0x0, {{0x5, 0x4, 0x0, 0x3, 0x14, 0x64, 0x0, 0x0, 0x4, 0x0, @private=0xa010102, @local}}}}) prlimit64(0x0, 0xe, &(0x7f0000000300)={0x8, 0x248}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() sched_setaffinity(0x0, 0x1, &(0x7f00000002c0)=0x2) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f00000004c0)=@abs={0x0, 0x0, 0x4e22}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x3fffffffffffeda, 0x2, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) socket(0x10, 0x803, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) r5 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r6 = openat$cgroup_procs(r5, &(0x7f0000000040)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r6, &(0x7f00000001c0), 0x12) r7 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=@newtaction={0x8c, 0x30, 0x1, 0x0, 0x0, {0x7a}, [{0x78, 0x1, [@m_police={0x74, 0x1, 0x0, 0x0, {{0xb}, {0x48, 0x2, 0x0, 0x1, [[@TCA_POLICE_TBF={0x3c, 0x1, {0x0, 0xffffffffffffffff, 0x8000, 0x0, 0x0, {0x0, 0x0, 0x0, 0xfffd}}}, @TCA_POLICE_RESULT={0x8, 0x5, 0xffffffff}]]}, {0x4}, {0xc, 0xb}, {0xc, 0xa}}}]}]}, 0x8c}}, 0x0) 18.25139012s ago: executing program 0 (id=3239): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x9, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b7030000ddffffff850000002d0000"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={0x0, r4}, 0x18) getsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x1c, &(0x7f0000000280)={@initdev, 0x0}, &(0x7f0000000340)=0x14) sendto$packet(0xffffffffffffffff, &(0x7f0000000500), 0x0, 0x0, &(0x7f00000005c0)={0x11, 0x15, r5, 0x1, 0x81, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x25}}, 0x14) syz_genetlink_get_family_id$tipc2(&(0x7f0000000400), 0xffffffffffffffff) r6 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000840)=ANY=[@ANYBLOB="3c0100001900010000dff8ff00000000fc0200ef0000000000000000000002000000000000000000001512000000000000000006000000000a00000008000000c0b7f85e572b0573f1f777895d7e5cc1596dbe819e39fa5809a3fb76594f059b75c5139f69d07e", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB], 0x13c}}, 0x0) write$binfmt_aout(r0, &(0x7f0000000180)=ANY=[], 0xff2e) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000140)={0x0, 0x0, 0xfffffff9, 0x7fff, 0x16, "0062ba7d82000000000000000000f7ffffff00"}) syz_open_pts(r0, 0x44100) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r7 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(r7, &(0x7f0000000000)={0xa, 0x4e22, 0x7, @ipv4={'\x00', '\xff\xff', @empty}, 0x6}, 0x1c) r8 = syz_open_dev$loop(&(0x7f0000000100), 0xd5d1, 0x0) ioctl$BLKPG(r8, 0x1269, &(0x7f0000000040)={0x1, 0x0, 0x98, &(0x7f00000003c0)={0x0, 0x800, 0x9}}) 16.646099322s ago: executing program 0 (id=3240): madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) syz_mount_image$ext4(&(0x7f00000001c0)='ext4\x00', &(0x7f0000001000)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x4c40, &(0x7f0000000000), 0xfe, 0x27a, &(0x7f0000000980)="$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") r0 = socket$netlink(0x10, 0x3, 0x0) bind$netlink(r0, 0x0, 0x0) bind$netlink(0xffffffffffffffff, 0x0, 0x0) bind$netlink(0xffffffffffffffff, &(0x7f0000000100)={0x10, 0x0, 0x25dfdbfd, 0x400}, 0xc) socket$nl_route(0x10, 0x3, 0x0) r1 = creat(&(0x7f0000000000)='./file1\x00', 0x0) fcntl$setstatus(r1, 0x4, 0x4000) io_setup(0x200, 0x0) getpid() sched_setaffinity(0x0, 0x8, &(0x7f0000000380)=0x202) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000ed07449e000000000000000018010000", @ANYRES32, @ANYBLOB="0000000000000000b70800000000396f7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000002400000095"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x4, '\x00', 0x0, @fallback=0x33, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f00000003c0)='sched_switch\x00', r2}, 0x18) io_submit(0x0, 0x3b, &(0x7f0000000540)=[&(0x7f00000000c0)={0x25, 0x0, 0x2, 0x1, 0x0, r1, &(0x7f0000000000), 0x4000}]) 16.389211588s ago: executing program 0 (id=3242): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0x6, &(0x7f0000000cc0)=ANY=[@ANYBLOB="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"], &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6}, 0x70) mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x0) r1 = socket(0x10, 0x803, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="090000000800000004040000094000000a000000"], 0x50) getsockname$packet(r1, 0x0, &(0x7f0000000200)) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10) r2 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f0000000040)={0x0, 0x0}) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) ioctl$TUNSETPERSIST(0xffffffffffffffff, 0x400454cb, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r2, 0x40182103, 0x0) 15.490051179s ago: executing program 0 (id=3243): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'rose0\x00', 0x112}) socket$kcm(0x29, 0x0, 0x0) ioctl$TUNSETQUEUE(r0, 0x400454d9, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0x6, &(0x7f0000000cc0)=ANY=[@ANYBLOB="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"], &(0x7f0000000080)='GPL\x00', 0x5, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r2}, 0x10) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r5 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4000000000000007910480000000000610400000000000095000080"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x48) close(r5) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000029c0)) r6 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f0000000540)=ANY=[@ANYBLOB="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"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000000), 0x10}, 0x94) r7 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="0f000000040000000400000012"], 0x48) bpf$BPF_PROG_DETACH(0x8, &(0x7f00000002c0)=ANY=[@ANYRES32=r7, @ANYRES32=r6, @ANYBLOB='&'], 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000000c0)={{r7}, &(0x7f0000000000), &(0x7f0000000080)=r5}, 0x20) r8 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f0000000540)=ANY=[@ANYBLOB="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"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x94) r9 = bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="0f000000040000000400000012"], 0x48) r10 = bpf$BPF_LINK_CREATE(0x1c, &(0x7f00000001c0)={r8, r9, 0x26, 0x0, @void}, 0x10) bpf$LINK_DETACH(0x22, &(0x7f0000000480)=r10, 0x4) ioctl$TUNATTACHFILTER(r0, 0x401054d5, &(0x7f00000000c0)={0x0, 0x0}) 9.692278423s ago: executing program 9 (id=3250): madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) syz_mount_image$ext4(&(0x7f00000001c0)='ext4\x00', &(0x7f0000001000)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x4c40, &(0x7f0000000000), 0xfe, 0x27a, &(0x7f0000000980)="$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") r0 = socket$netlink(0x10, 0x3, 0x0) bind$netlink(r0, 0x0, 0x0) bind$netlink(0xffffffffffffffff, 0x0, 0x0) bind$netlink(0xffffffffffffffff, &(0x7f0000000100)={0x10, 0x0, 0x25dfdbfd, 0x400}, 0xc) socket$nl_route(0x10, 0x3, 0x0) r1 = creat(&(0x7f0000000000)='./file1\x00', 0x0) fcntl$setstatus(r1, 0x4, 0x4000) io_setup(0x200, 0x0) getpid() sched_setaffinity(0x0, 0x8, &(0x7f0000000380)=0x202) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000ed07449e000000000000000018010000", @ANYRES32, @ANYBLOB="0000000000000000b70800000000396f7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000002400000095"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x4, '\x00', 0x0, @fallback=0x33, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f00000003c0)='sched_switch\x00', r2}, 0x18) io_submit(0x0, 0x3b, &(0x7f0000000540)=[&(0x7f00000000c0)={0x25, 0x0, 0x2, 0x1, 0x0, r1, &(0x7f0000000000), 0x4000}]) 9.395344213s ago: executing program 9 (id=3251): r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x40, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000240)={0x8, 0x248}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x4, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xffffe000) socketpair$unix(0x1, 0x3, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000840)=@abs={0x0, 0x0, 0x4e20}, 0x9) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x3fffffffffffeda, 0x2, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b702000003000000850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f00000006c0)='sched_switch\x00', r5}, 0x10) r6 = openat$rtc(0xffffffffffffff9c, 0x0, 0x80000, 0x0) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x10012, 0xffffffffffffffff, 0x0) ioctl$RTC_WKALM_SET(r6, 0x4028700f, 0x0) syz_clone(0x410a4400, 0x0, 0xfffffffffffffd56, 0x0, 0x0, 0xffffffffffffffff) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000280), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000340)={'bridge0\x00', 0x0}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)=@getchain={0x24, 0x11, 0x1, 0x2000000, 0x0, {0x0, 0x0, 0x0, r9, {}, {}, {0xfff3}}}, 0x24}}, 0x0) sendmsg$ETHTOOL_MSG_TSINFO_GET(r7, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000380)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r8, @ANYBLOB="01002dbd7000f1ffffff21000000140001800800", @ANYRES32=r9, @ANYBLOB="080003"], 0x28}, 0x1, 0x0, 0x0, 0x1}, 0x0) 6.401785205s ago: executing program 9 (id=3253): bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f00000001c0)='sched_switch\x00'}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x8000000000002) sched_setscheduler(r0, 0x2, &(0x7f0000000240)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_mount_image$fuse(0x0, &(0x7f00000002c0)='./file0\x00', 0x1000a0, 0x0, 0xfe, 0x0, 0x0) r3 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x2, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x80, &(0x7f00000002c0)={{'fd', 0x3d, r3}, 0x2c, {'rootmode', 0x3d, 0x4000}}) read$FUSE(r3, &(0x7f00000021c0)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r3, &(0x7f0000000080)={0x50, 0x0, r4, {0x7, 0x29, 0x9, 0xffffffff9080edc4, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x9, 0xfffffffb}}, 0x50) openat$dir(0xffffffffffffff9c, &(0x7f0000004280)='./file0\x00', 0x0, 0x18) syz_fuse_handle_req(r3, &(0x7f00000042c0)="000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001e000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000100", 0x2000, &(0x7f00000062c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000006380)={0x20, 0x0, 0x0, {0x0, 0x1c}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 6.110869294s ago: executing program 7 (id=3254): openat$vcsu(0xffffffffffffff9c, 0x0, 0x482243, 0x0) pipe2(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80000) fcntl$setpipe(r0, 0x407, 0x0) write$FUSE_INIT(r0, &(0x7f0000000340)={0x50, 0x0, 0x0, {0x7, 0x28, 0x0, 0x0, 0x0, 0x0, 0x4}}, 0x50) vmsplice(r0, &(0x7f0000000140)=[{&(0x7f0000000100)="eb", 0x20000101}], 0x1, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x3, &(0x7f0000000280)=@framed, 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x2, '\x00', 0x0, @fallback=0x7, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r1}, 0x10) fcntl$setpipe(r0, 0x407, 0x2000000) r2 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000040), 0x600041, 0x0) pwritev2(r2, 0x0, 0x0, 0xe, 0x1ff, 0x3) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, @fallback=0x35, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) syz_genetlink_get_family_id$ethtool(&(0x7f0000000000), 0xffffffffffffffff) 5.131706053s ago: executing program 0 (id=3255): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000002080)=ANY=[@ANYBLOB="02000000040000000600000005"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000001070000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000001900007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffd98, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000000)='./bus\x00', 0x20081e, &(0x7f0000000840)={[{@grpjquota}, {@max_dir_size_kb={'max_dir_size_kb', 0x3d, 0xa30}}, {@grpquota}]}, 0x1, 0x52a, &(0x7f0000001440)="$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") creat(&(0x7f00000000c0)='./bus\x00', 0x1a2) r2 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./file2\x00', 0xa4c42, 0x108) dup(0xffffffffffffffff) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x200000000000008b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x8) r3 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r3, 0x2, &(0x7f0000000000)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="0700000004000000080000000100"], 0x48) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000080)='sched_switch\x00'}, 0x18) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000680)=ANY=[@ANYBLOB="500100001000130700000000fcdbdf252001000000000000000000000000000120010000000000000000000000000001000000004e210002020000003b000000", @ANYRES32=0x0, @ANYRES32=0xee00, @ANYBLOB="fc010000000000000000000000008000000000fe3200000000000000000000000000000000000000000000000000000000000000000000000000000000000000080000000000000000000000000000000001000000000000000000000000000043050000000000000400000000000000ffffffffffffff7f0000000000000000000000000000000000000000000000000000000028bd7000003500000a000400000000000000000060001200726663343130362867636d2861657329290000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a000000080"], 0x150}, 0x1, 0x0, 0x0, 0x880}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000300)=ANY=[@ANYRESDEC=r1, @ANYBLOB="25f907aa830aff2615d864fe1ead9e351ca7ce454926b7bab3cdce9cabcebdf030037eb21c9d1302f9642f430a4fcc3eeb6cbec082cf7382c263291b53225dcf3a6b25a2aa2500949fd5c1e2ca93ee77e9534aa9771675c3c87f717a885ef381ccf35df909383dc27426c77f39871a58f7a27dc1688d8d2541e73caefba4ad08249715c6d4fb66e77616491e19fc095026fb93e2d5dac59aee453773f744c22f700e3aec2968353f66c8abbc81", @ANYRES64=r3, @ANYRESOCT=r2, @ANYRES16, @ANYRESHEX=0x0, @ANYRES64=0x0], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffff51, 0x0, 0x0, 0x0}, 0x94) r6 = syz_open_procfs(0x0, &(0x7f0000000100)='net/vlan/config\x00') preadv(r6, &(0x7f0000000040)=[{&(0x7f0000000180)=""/84, 0x54}], 0x1, 0x0, 0x0) 5.097545406s ago: executing program 9 (id=3256): r0 = socket$inet_tcp(0x2, 0x1, 0x0) pipe(0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={0x0, 0x0, 0x5a}, 0x28) r1 = socket(0x1, 0x803, 0x0) getsockname$packet(r1, 0x0, &(0x7f0000000200)) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f0000000180)=0x2) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000500)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x50) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0x11, 0x7, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b702000003000200850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x3, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f00000006c0)='sched_switch\x00', r6}, 0x10) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r7 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r7, &(0x7f0000000340)={0x2, 0x4e1e, 0x0, @mcast2, 0x8}, 0x1c) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) r8 = socket$inet_udp(0x2, 0x2, 0x0) close(r8) socket$nl_route(0x10, 0x3, 0x0) write$binfmt_misc(0xffffffffffffffff, 0x0, 0x0) splice(0xffffffffffffffff, 0x0, r8, 0x0, 0x4ffe6, 0x0) setsockopt$inet_buf(r0, 0x0, 0x8008000000010, &(0x7f0000000140)="17000000020001000003be8c5ee176889600330002956019fd6ee17e03000a0002000098fc58d90a00bb6a880000d6c802000037c0274f5233e4aa37f5e02bdba67e06000000e28900000200df0181c8d0bae99dfde06a0755045f3973a803005f1efcd5e6236bd971a54d6f477050956981d7198a02000000fc0607bdff59100ac45761547a681f009cee4a5acb3da400001fb700674f00c88ebbf9315033bf79ac2dfc06ea1d003901000000000000ea00000000000000", 0xef) 4.885107197s ago: executing program 7 (id=3257): socket$packet(0x11, 0xa, 0x300) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$TIPC_DEST_DROPPABLE(r0, 0x10f, 0x81, &(0x7f0000000080), 0x4a) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f00000000c0)=0x9, 0x4) sendmmsg$inet(r0, &(0x7f0000001540)=[{{0x0, 0xfffffffffffffda1, 0x0}}], 0x40001b6, 0x0) close(r1) r2 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000240)={'syz_tun\x00', 0x0}) bind$packet(r2, &(0x7f0000000300)={0x11, 0x0, r3, 0x1, 0x0, 0x6, @remote}, 0x14) r4 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000240)={'syz_tun\x00', 0x0}) r6 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000040), 0x4000, 0x0) ioctl$RTC_SET_TIME(r6, 0x4024700a, &(0x7f0000000100)={0x1e, 0x15, 0x10, 0x1a, 0x8, 0x8001, 0x0, 0x33}) bind$packet(r4, &(0x7f0000000300)={0x11, 0x0, r5, 0x1, 0x8, 0x6, @remote}, 0x14) syz_emit_ethernet(0xb6, &(0x7f0000000340)={@empty, @link_local, @void, {@ipv4={0x800, @udp={{0x1b, 0x4, 0x0, 0x3e, 0xa8, 0x0, 0xe000, 0x2, 0x11, 0x0, @empty, @empty, {[@ssrr={0x89, 0x7, 0x55, [@remote]}, @timestamp_prespec={0x44, 0x4c, 0x1a, 0x3, 0x9, [{@remote, 0x3}, {@loopback, 0x760}, {@remote, 0x3b4c}, {@loopback, 0x7}, {@remote, 0x9}, {@multicast1, 0xf5c}, {@remote, 0x3719}, {@rand_addr=0x64010101, 0x1da}, {@private=0xa010101, 0x8000}]}, @timestamp_addr={0x44, 0x4, 0xc5, 0x1, 0x7}]}}, {0x0, 0x0, 0x3c, 0x0, @opaque="ae87490ce97a93d62fcb4444d79df0bdf6d5a20310abf827452ec16974b00e958d1b0c72d9c1dfc92ac13c4de54ae6da1f370931"}}}}}, 0x0) 3.812925656s ago: executing program 9 (id=3258): syz_open_dev$vcsn(&(0x7f0000000000), 0x1, 0x1) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000070000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) syz_clone(0x100411, 0x0, 0x0, 0x0, 0x0, 0x0) rt_sigtimedwait(&(0x7f0000000000)={[0xfffffffffffffffe]}, 0x0, 0x0, 0x8) ioctl$sock_SIOCSIFVLAN_SET_VLAN_FLAG_CMD(0xffffffffffffffff, 0x8983, &(0x7f0000000640)={0x7, 'geneve1\x00', {0x6}, 0x7f}) ioctl$sock_TIOCINQ(r1, 0x541b, &(0x7f0000000540)) 3.435688604s ago: executing program 7 (id=3259): madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) syz_mount_image$ext4(&(0x7f00000001c0)='ext4\x00', &(0x7f0000001000)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x4c40, &(0x7f0000000000), 0xfe, 0x27a, &(0x7f0000000980)="$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") r0 = socket$netlink(0x10, 0x3, 0x0) bind$netlink(r0, 0x0, 0x0) bind$netlink(0xffffffffffffffff, 0x0, 0x0) bind$netlink(0xffffffffffffffff, &(0x7f0000000100)={0x10, 0x0, 0x25dfdbfd, 0x400}, 0xc) socket$nl_route(0x10, 0x3, 0x0) r1 = creat(&(0x7f0000000000)='./file1\x00', 0x0) fcntl$setstatus(r1, 0x4, 0x4000) io_setup(0x200, &(0x7f0000000140)=0x0) getpid() sched_setaffinity(0x0, 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000ed07449e000000000000000018010000", @ANYRES32, @ANYBLOB="0000000000000000b70800000000396f7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000002400000095"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x4, '\x00', 0x0, @fallback=0x33, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f00000003c0)='sched_switch\x00', r3}, 0x18) io_submit(r2, 0x3b, &(0x7f0000000540)=[&(0x7f00000000c0)={0x25, 0x0, 0x2, 0x1, 0x0, r1, &(0x7f0000000000), 0x4000}]) 2.755089072s ago: executing program 0 (id=3260): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000001c0)=0x5) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000001700)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x3fffffffffffcb5, 0x2, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="160000000000000004000000050000"], 0x50) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0}, 0x90) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000058"], 0x0}, 0x90) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x1) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f0000000300)='sched_switch\x00', r4}, 0x10) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x4000) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) clock_getres(0x3, 0x0) 2.526409495s ago: executing program 7 (id=3261): prlimit64(0x0, 0xe, &(0x7f0000000240)={0x8, 0x248}, 0x0) sched_setscheduler(0x0, 0x1, 0x0) sched_setaffinity(0x0, 0x1, &(0x7f00000002c0)=0x2) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xd5cd7000) socketpair$unix(0x1, 0x2, 0x0, 0x0) connect$unix(0xffffffffffffffff, &(0x7f00000004c0)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x651, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x3fffffffffffeda, 0x2, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f00000002c0)=ANY=[@ANYBLOB="180000001800ff0f0000000000000000850000006d000000850000000800000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10) bpf$PROG_LOAD(0x5, 0x0, 0x0) socket$pppl2tp(0x18, 0x1, 0x1) syz_mount_image$ext4(&(0x7f0000000240)='ext4\x00', &(0x7f00000007c0)='./mnt\x00', 0x840, &(0x7f0000000080)={[{@test_dummy_encryption_v1}, {@test_dummy_encryption_v1}]}, 0x1, 0x241, &(0x7f0000000540)="$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") inotify_rm_watch(0xffffffffffffffff, 0x0) 1.318805577s ago: executing program 7 (id=3262): syz_usb_connect$uac1(0x0, 0x96, 0x0, 0x0) socket$packet(0x11, 0x3, 0x300) r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) r1 = eventfd(0xc) ioctl$VHOST_SET_LOG_FD(r0, 0x4004af07, &(0x7f0000000240)=r1) ioctl$VHOST_SET_VRING_KICK(r0, 0x4008af20, &(0x7f0000000040)={0x1, r1}) recvmmsg(0xffffffffffffffff, &(0x7f0000001040)=[{{0x0, 0x0, &(0x7f0000000d80)=[{&(0x7f0000000840)=""/204, 0xcc}, {&(0x7f0000000940)=""/121, 0x79}, {&(0x7f0000000a40)=""/206, 0xce}, {0x0}], 0x4, &(0x7f0000000e00)=""/98, 0x62}, 0x3c}], 0x1, 0x40000000, 0x0) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000140)={0x0, 0x0, 0x0, &(0x7f0000000500)=""/67, 0x0}) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000280)={0x1, 0x1, 0x0, &(0x7f00000000c0)=""/87, 0x0}) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000700)) ioctl$VHOST_SET_VRING_ERR(r0, 0x4008af22, &(0x7f00000002c0)={0x1, r1}) ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, &(0x7f0000000000)=0x1) unshare(0x64000600) sendmsg$key(0xffffffffffffffff, 0x0, 0x0) 186.464871ms ago: executing program 9 (id=3263): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'rose0\x00', 0x112}) socket$kcm(0x29, 0x0, 0x0) ioctl$TUNSETQUEUE(r0, 0x400454d9, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0x6, &(0x7f0000000cc0)=ANY=[@ANYBLOB="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"], &(0x7f0000000080)='GPL\x00', 0x5, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r2}, 0x10) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r5 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4000000000000007910480000000000610400000000000095000080"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x48) close(r5) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000029c0)) r6 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f0000000540)=ANY=[@ANYBLOB="b4050000fdff7f006110580000000000c60000000000000095000000000000009f33ef60916e6e713f1eeb0b725ad99b817fd98cd8073a46b08b94214d816f770600dcca55f21f3ca9e822d182054d54d53cd2b6db714e4beb4147000001000000008f2b9000f22425e4097ed62cbc891061017cfa6f6148a1c1e43f00001bde60beac671e8e8fdecb03588aa623fa71f31bf0f871ab5c2ff88afc60027f4e5b5271ed58e835cf0d0000000098b51fe68db8d9dbe87dcff414ed000000000000000000000000000000000000000000000000000000b347abe6352a080f8140e5fd10747b6ecdb3542646bf636e3d6e700e5b0500000000000000eb9e1403e6c8f7a187eaf60f3a17f0f046a307a403c19d9829c90bd2114252581567acae715cbe1b57d5cda432c5b910400623d24195405f2e76ccb7b37b41215c184e731fb1"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000000), 0x10}, 0x94) r7 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="0f000000040000000400000012"], 0x48) bpf$BPF_PROG_DETACH(0x8, &(0x7f00000002c0)=ANY=[@ANYRES32=r7, @ANYRES32=r6, @ANYBLOB='&'], 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000000c0)={{r7}, &(0x7f0000000000), &(0x7f0000000080)=r5}, 0x20) r8 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f0000000540)=ANY=[@ANYBLOB="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"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x94) r9 = bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="0f000000040000000400000012"], 0x48) r10 = bpf$BPF_LINK_CREATE(0x1c, &(0x7f00000001c0)={r8, r9, 0x26, 0x0, @void}, 0x10) bpf$LINK_DETACH(0x22, &(0x7f0000000480)=r10, 0x4) ioctl$TUNATTACHFILTER(r0, 0x401054d5, &(0x7f00000000c0)={0x0, 0x0}) 0s ago: executing program 7 (id=3264): socket$nl_generic(0x10, 0x3, 0x10) openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000040), 0x28a400) socket$nl_generic(0x10, 0x3, 0x10) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000080), 0x42, 0x0) syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f00000001c0)='./file0\x00', 0x800718, &(0x7f0000000480)={[{@nodioread_nolock}, {@journal_dev={'journal_dev', 0x3d, 0x40000ff}}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x5c}}, {@nombcache}, {@resgid}, {@barrier}, {@init_itable_val={'init_itable', 0x3d, 0x8d55}}]}, 0x0, 0x46f, &(0x7f0000001040)="$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") socket(0x10, 0x3, 0x6) socket$inet(0x2, 0x3, 0x1) open(&(0x7f00009e1000)='./file0\x00', 0x8060, 0x0) creat(&(0x7f0000000040)='./file7\x00', 0x1a2) open(&(0x7f0000000040)='./file0\x00', 0x0, 0x0) syz_open_procfs(0x0, &(0x7f0000000000)='fdinfo/4\x00') r1 = socket(0x10, 0x3, 0x0) bind$netlink(r1, &(0x7f0000177ff4)={0x10, 0x0, 0x1}, 0xc) write(r1, &(0x7f0000000140)="2600000022004701050000070000000000000020002b1f000a4a51f1ee839cd53400b017ca5b", 0x26) connect$netlink(r1, &(0x7f00000005c0)=@proc={0x10, 0x0, 0x1}, 0xc) setsockopt$sock_int(r1, 0x1, 0x21, &(0x7f0000b4bffc)=0x8, 0x4) clock_gettime(0x2, &(0x7f0000000500)={0x0, 0x0}) setsockopt$sock_timeval(r1, 0x1, 0x43, &(0x7f00000001c0)={r2, r3/1000+10000}, 0x10) write(r1, &(0x7f0000000540)="fbd7c6d8f66fab", 0x7) r4 = socket(0x10, 0x803, 0x0) r5 = socket(0x10, 0x803, 0x0) ioctl$sock_SIOCETHTOOL(r5, 0x8946, 0x0) ioctl$sock_SIOCETHTOOL(r4, 0x8946, &(0x7f00000002c0)={'veth0_to_team\x00', &(0x7f0000000000)=@ethtool_channels={0x3d, 0x0, 0x0, 0x0, 0x0, 0x1, 0x2}}) r6 = socket$inet_udp(0x2, 0x2, 0x0) syz_usb_connect$uac1(0x3, 0xdc, &(0x7f00000001c0)=ANY=[@ANYBLOB="12010000000000106b1d01014000010203010902ca0003010070000904000000010100000a24010800000201020d24060000030800000000000000240803960c03112d9cd2ce0c240208000103000000ff000924060506020100000924030003030005490c240206", @ANYRES8=r6, @ANYRES16=r0], 0x0) kernel console output (not intermixed with test programs): command 0x0c1a tx timeout [ 1248.650812][ T4283] Bluetooth: hci3: command 0x0c1a tx timeout [ 1248.656940][ T4283] Bluetooth: hci2: command 0x0c1a tx timeout [ 1248.663236][ T4277] Bluetooth: hci1: command 0x0c1a tx timeout [ 1248.738246][T16143] loop1: detected capacity change from 0 to 512 [ 1248.831666][T16143] EXT4-fs (loop1): orphan cleanup on readonly fs [ 1248.886374][T16143] EXT4-fs error (device loop1): ext4_do_update_inode:5267: inode #15: comm syz.1.2725: corrupted inode contents [ 1248.905705][T16143] EXT4-fs error (device loop1): ext4_dirty_inode:6132: inode #15: comm syz.1.2725: mark_inode_dirty error [ 1248.921438][T16143] EXT4-fs error (device loop1): ext4_do_update_inode:5267: inode #15: comm syz.1.2725: corrupted inode contents [ 1248.936558][T16143] EXT4-fs error (device loop1): ext4_xattr_delete_inode:2968: inode #15: comm syz.1.2725: mark_inode_dirty error [ 1248.955764][T16143] EXT4-fs error (device loop1): ext4_xattr_delete_inode:2971: inode #15: comm syz.1.2725: mark inode dirty (error -117) [ 1248.975756][T16143] EXT4-fs warning (device loop1): ext4_evict_inode:299: xattr delete (err -117) [ 1249.000931][T16143] EXT4-fs (loop1): 1 orphan inode deleted [ 1249.017094][T16143] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none. [ 1249.967456][T16159] loop9: detected capacity change from 0 to 2048 [ 1250.010882][T16145] Bluetooth: hci4: command 0x0406 tx timeout [ 1250.055647][T12351] EXT4-fs (loop1): unmounting filesystem. [ 1250.418911][T16159] loop9: p1 < > [ 1250.650757][ T4283] Bluetooth: hci6: command 0x0406 tx timeout [ 1250.730759][T16145] Bluetooth: hci2: command 0x0406 tx timeout [ 1250.736959][T16145] Bluetooth: hci1: command 0x0406 tx timeout [ 1250.744920][T16145] Bluetooth: hci3: command 0x0406 tx timeout [ 1256.659468][T16213] loop7: detected capacity change from 0 to 512 [ 1256.671754][T16213] EXT4-fs (loop7): Test dummy encryption mode enabled [ 1256.679207][T16213] EXT4-fs (loop7): ext4_check_descriptors: Checksum for group 0 failed (17031!=33349) [ 1256.843004][T16213] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=8802e01c, mo2=0002] [ 1256.852729][T16213] EXT4-fs (loop7): orphan cleanup on readonly fs [ 1256.864721][T16213] EXT4-fs error (device loop7): ext4_validate_block_bitmap:438: comm syz.7.2745: bg 0: block 361: padding at end of block bitmap is not set [ 1256.887175][T16213] EXT4-fs error (device loop7) in ext4_mb_clear_bb:6181: Corrupt filesystem [ 1256.897396][T16213] EXT4-fs error (device loop7): ext4_clear_blocks:883: inode #11: comm syz.7.2745: attempt to clear invalid blocks 33619980 len 1 [ 1256.934499][T16213] EXT4-fs error (device loop7): ext4_free_branches:1030: inode #11: comm syz.7.2745: invalid indirect mapped block 1811939328 (level 0) [ 1256.951868][T16213] EXT4-fs error (device loop7): ext4_free_branches:1030: inode #11: comm syz.7.2745: invalid indirect mapped block 2185560079 (level 1) [ 1256.967504][T16213] EXT4-fs (loop7): 1 truncate cleaned up [ 1256.973403][T16213] EXT4-fs (loop7): mounted filesystem without journal. Quota mode: none. [ 1256.985349][T16213] EXT4-fs (loop7): unmounting filesystem. [ 1260.712950][T16236] tipc: Started in network mode [ 1260.724388][T16236] tipc: Node identity fe80000000000000000000000000001, cluster identity 4711 [ 1260.824931][T16236] tipc: Enabling of bearer rejected, failed to enable media [ 1264.058415][T16145] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 1264.078886][ T4272] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 1264.088120][T16145] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 1264.133649][ T4272] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 1264.143369][T16145] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 1264.153098][ T4272] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 1264.446153][T16279] loop7: detected capacity change from 0 to 1024 [ 1264.506922][T16279] EXT4-fs: Ignoring removed mblk_io_submit option [ 1264.676654][T16279] EXT4-fs (loop7): mounted filesystem without journal. Quota mode: none. [ 1264.750311][T16279] ext4 filesystem being mounted at /376/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 1265.734150][ T8677] EXT4-fs (loop7): unmounting filesystem. [ 1266.719565][ T4283] Bluetooth: hci5: command 0x0409 tx timeout [ 1266.955931][T16276] chnl_net:caif_netlink_parms(): no params data found [ 1268.485703][T16276] bridge0: port 1(bridge_slave_0) entered blocking state [ 1268.540951][T16276] bridge0: port 1(bridge_slave_0) entered disabled state [ 1268.593405][T16276] device bridge_slave_0 entered promiscuous mode [ 1268.740913][ T4283] Bluetooth: hci5: command 0x041b tx timeout [ 1268.748978][T16276] bridge0: port 2(bridge_slave_1) entered blocking state [ 1268.763554][T16276] bridge0: port 2(bridge_slave_1) entered disabled state [ 1268.825417][T16276] device bridge_slave_1 entered promiscuous mode [ 1269.946987][T16276] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1270.124757][T16276] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1270.256416][T16324] loop7: detected capacity change from 0 to 4096 [ 1270.328450][T16324] EXT4-fs (loop7): Test dummy encryption mode enabled [ 1270.396471][T16324] [EXT4 FS bs=4096, gc=1, bpg=524288, ipg=32, mo=a842c018, mo2=0003] [ 1270.405211][T16324] System zones: 0-5 [ 1270.661332][T16324] EXT4-fs (loop7): mounted filesystem without journal. Quota mode: writeback. [ 1270.823159][ T4283] Bluetooth: hci5: command 0x040f tx timeout [ 1271.033543][T16324] fscrypt (loop7): Missing crypto API support for AES-256-CTS-CBC (API name: "cts(cbc(aes))") [ 1271.045482][T16328] overlayfs: failed to resolve './bus': -2 [ 1271.263361][T16276] team0: Port device team_slave_0 added [ 1271.370092][T16276] team0: Port device team_slave_1 added [ 1272.347792][ T8677] EXT4-fs (loop7): unmounting filesystem. [ 1272.631375][T16276] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1272.638394][T16276] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1272.815393][T16276] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1272.891261][ T4283] Bluetooth: hci5: command 0x0419 tx timeout [ 1273.116682][T11106] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1273.266843][T16276] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1273.302192][T16276] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1273.526590][T16276] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1273.767011][T16341] loop7: detected capacity change from 0 to 131072 [ 1273.779905][T16341] F2FS-fs (loop7): Test dummy encryption mode enabled [ 1273.794578][T16341] F2FS-fs (loop7): invalid crc value [ 1273.811027][T16341] F2FS-fs (loop7): Found nat_bits in checkpoint [ 1273.908579][T16341] F2FS-fs (loop7): Mounted with checkpoint version = 48b305e5 [ 1275.359099][T16361] fscrypt (loop7, inode 10): Missing crypto API support for AES-256-XTS (API name: "xts(aes)") [ 1275.600364][T11106] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1277.202696][T11106] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1278.389312][T16276] device hsr_slave_0 entered promiscuous mode [ 1278.541371][T16276] device hsr_slave_1 entered promiscuous mode [ 1278.602755][T16276] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1278.610406][T16276] Cannot create hsr debugfs directory [ 1278.758782][T16389] loop7: detected capacity change from 0 to 1024 [ 1278.966088][T11106] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1279.042210][T16389] EXT4-fs (loop7): mounted filesystem without journal. Quota mode: none. [ 1279.943350][ T8677] EXT4-fs (loop7): unmounting filesystem. [ 1286.243762][T16475] input: syz1 as /devices/virtual/input/input26 [ 1286.293495][T16462] block device autoloading is deprecated and will be removed. [ 1286.325004][T16474] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 1286.338879][T16474] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 1286.624390][T16276] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 1286.649820][T16276] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 1286.751317][T16276] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 1286.774578][T16276] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 1288.693929][T11106] device hsr_slave_0 left promiscuous mode [ 1288.720349][T11106] device hsr_slave_1 left promiscuous mode [ 1288.748275][T11106] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1288.776581][T11106] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1288.821715][T11106] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1288.849601][T11106] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1288.861420][T11106] device bridge_slave_1 left promiscuous mode [ 1288.867888][T11106] bridge0: port 2(bridge_slave_1) entered disabled state [ 1288.939550][T11106] device bridge_slave_0 left promiscuous mode [ 1288.950943][T11106] bridge0: port 1(bridge_slave_0) entered disabled state [ 1289.112569][T11106] device veth1_macvtap left promiscuous mode [ 1289.139434][T11106] device veth0_macvtap left promiscuous mode [ 1289.169066][T11106] device veth1_vlan left promiscuous mode [ 1289.180084][T11106] device veth0_vlan left promiscuous mode [ 1291.351820][T16511] loop7: detected capacity change from 0 to 128 [ 1293.663592][T16531] loop9: detected capacity change from 0 to 1024 [ 1293.678965][T16531] EXT4-fs: Ignoring removed mblk_io_submit option [ 1293.881329][T16531] EXT4-fs (loop9): mounted filesystem without journal. Quota mode: none. [ 1293.915697][T16531] ext4 filesystem being mounted at /254/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 1294.892683][T11005] EXT4-fs (loop9): unmounting filesystem. [ 1295.075251][T16541] loop9: detected capacity change from 0 to 2048 [ 1295.083739][T16541] EXT4-fs (loop9): couldn't mount as ext3 due to feature incompatibilities [ 1295.137481][T13816] I/O error, dev loop9, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 1295.287222][T11106] team0 (unregistering): Port device team_slave_1 removed [ 1295.379853][T11106] team0 (unregistering): Port device team_slave_0 removed [ 1295.443429][T11106] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1295.518896][T11106] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1297.276812][T11106] bond0 (unregistering): Released all slaves [ 1297.617039][T16276] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1297.759308][T16276] 8021q: adding VLAN 0 to HW filter on device team0 [ 1297.821139][ T4496] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 1298.205704][ T4496] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 1298.492530][ T4496] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 1298.514772][ T4496] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 1298.523829][ T4496] bridge0: port 1(bridge_slave_0) entered blocking state [ 1298.531037][ T4496] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1298.554090][ T4496] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 1298.568594][ T4496] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 1298.585092][ T4496] bridge0: port 2(bridge_slave_1) entered blocking state [ 1298.592299][ T4496] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1298.635598][ T4496] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 1298.692520][ T4496] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 1298.722067][ T4496] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 1298.747377][ T4496] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 1298.845899][ T4496] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 1298.864987][ T4496] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 1298.898354][ T4496] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 1298.947780][ T4496] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 1298.986686][T11002] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 1299.026575][T11002] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 1300.416419][T11002] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 1300.429677][ T1267] ieee802154 phy0 wpan0: encryption failed: -22 [ 1300.436164][ T1267] ieee802154 phy1 wpan1: encryption failed: -22 [ 1300.456069][T11002] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 1300.475564][T16582] loop9: detected capacity change from 0 to 1024 [ 1300.486454][T16582] EXT4-fs: Ignoring removed mblk_io_submit option [ 1300.541555][T16582] EXT4-fs (loop9): mounted filesystem without journal. Quota mode: none. [ 1300.551295][T16582] ext4 filesystem being mounted at /258/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 1300.572034][T16276] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 1301.356430][T11005] EXT4-fs (loop9): unmounting filesystem. [ 1308.256886][T11002] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 1308.301636][T11002] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 1308.332160][T16276] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1308.420852][T11002] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 1308.441134][T11002] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 1308.535751][T11002] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 1308.544533][T11002] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 1308.553461][T11002] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 1308.561675][T11002] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 1308.615714][T16276] device veth0_vlan entered promiscuous mode [ 1308.683584][T16276] device veth1_vlan entered promiscuous mode [ 1308.814518][ T4448] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 1308.841814][ T4448] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 1308.896211][ T4448] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 1308.968353][ T4448] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 1309.024832][T16276] device veth0_macvtap entered promiscuous mode [ 1309.058465][T16276] device veth1_macvtap entered promiscuous mode [ 1309.148455][T16276] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1309.334988][T16276] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1309.360771][T16276] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1310.250734][T16276] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1310.290668][T16276] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1310.320833][T16276] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1310.336651][T16650] loop9: detected capacity change from 0 to 128 [ 1310.353407][T16276] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1311.840503][T16276] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1311.906301][T16276] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1311.999753][T16276] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1312.088398][T16276] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1312.389566][T16276] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1312.951428][T16276] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1313.083811][T16276] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1313.264670][T16276] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1313.400119][T16276] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1313.528317][T16276] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1313.668044][T16276] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1313.690981][T16662] FAT-fs (loop9): error, corrupted directory (invalid entries) [ 1313.699219][T16662] FAT-fs (loop9): Filesystem has been set read-only [ 1313.729028][T16276] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1313.809066][T16276] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1313.895151][T16276] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1313.999274][T16276] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1314.657528][ T31] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 1314.666933][ T31] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 1314.675364][ T31] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 1314.684718][ T31] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 1314.761070][ T31] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 1314.822084][ T31] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 1314.885343][T16276] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1314.927206][T16276] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1314.963278][T16276] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1314.973454][T16276] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1315.272500][T16589] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1315.420791][T16589] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1316.315861][ T9553] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 1316.452307][ T4496] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1316.470693][ T4496] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1316.493700][T16589] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 1318.890222][T16701] loop7: detected capacity change from 0 to 128 [ 1321.208682][T16719] loop7: detected capacity change from 0 to 1024 [ 1321.228665][T16720] loop3: detected capacity change from 0 to 512 [ 1321.294217][T16719] EXT4-fs (loop7): mounted filesystem without journal. Quota mode: writeback. [ 1321.414864][T16720] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 1321.475568][T16720] ext4 filesystem being mounted at /2/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 1321.549462][ T8677] EXT4-fs (loop7): unmounting filesystem. [ 1323.005225][T16276] EXT4-fs (loop3): unmounting filesystem. [ 1325.772638][ T4317] usb 2-1: new high-speed USB device number 11 using dummy_hcd [ 1326.096986][ T4317] usb 2-1: New USB device found, idVendor=9710, idProduct=7730, bcdDevice=96.33 [ 1326.107645][ T4317] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1326.124986][ T4317] usb 2-1: config 0 descriptor?? [ 1326.548379][ T4317] usb 2-1: Cannot read MAC address [ 1326.684005][ T4317] MOSCHIP usb-ethernet driver: probe of 2-1:0.0 failed with error -71 [ 1327.712395][T16145] Bluetooth: hci2: command 0x1003 tx timeout [ 1327.722662][ T4283] Bluetooth: hci2: Opcode 0x1003 failed: -110 [ 1327.753391][ T4317] usb 2-1: USB disconnect, device number 11 [ 1328.314024][T16787] netlink: 28 bytes leftover after parsing attributes in process `syz.3.2847'. [ 1329.119136][T16794] loop7: detected capacity change from 0 to 512 [ 1329.350867][T16794] EXT4-fs (loop7): mounted filesystem without journal. Quota mode: writeback. [ 1329.426560][T16794] ext4 filesystem being mounted at /400/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 1329.577880][T16794] EXT4-fs error (device loop7): ext4_validate_block_bitmap:438: comm syz.7.2855: bg 0: block 387: padding at end of block bitmap is not set [ 1329.598209][T16794] Quota error (device loop7): write_blk: dquota write failed [ 1329.606270][T16794] Quota error (device loop7): find_free_dqentry: Can't write quota data block 5 [ 1329.622358][T16794] Quota error (device loop7): qtree_write_dquot: Error -28 occurred while creating quota [ 1329.695335][T16794] EXT4-fs error (device loop7): ext4_acquire_dquot:6835: comm syz.7.2855: Failed to acquire dquot type 1 [ 1330.977999][ T8677] EXT4-fs (loop7): unmounting filesystem. [ 1337.670648][T16887] loop9: detected capacity change from 0 to 16 [ 1339.333403][T16887] erofs: (device loop9): erofs_init_device: empty device tag @ pos 0 [ 1342.296201][T16910] device syzkaller0 entered promiscuous mode [ 1344.540739][T11570] usb 1-1: new high-speed USB device number 23 using dummy_hcd [ 1346.988313][T11570] usb 1-1: unable to read config index 0 descriptor/start: -71 [ 1347.027487][T11570] usb 1-1: can't read configurations, error -71 [ 1350.747594][T16970] loop9: detected capacity change from 0 to 256 [ 1351.669106][T16970] FAT-fs (loop9): bogus number of FAT sectors [ 1351.675609][T16970] FAT-fs (loop9): Can't find a valid FAT filesystem [ 1353.002540][T16977] loop3: detected capacity change from 0 to 1024 [ 1353.018044][T16977] EXT4-fs: Ignoring removed mblk_io_submit option [ 1353.108107][T16977] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none. [ 1353.123498][T16977] ext4 filesystem being mounted at /9/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 1353.930499][T16276] EXT4-fs (loop3): unmounting filesystem. [ 1356.099495][T16962] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 1356.108435][T16962] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 1356.116020][T16962] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 1357.192691][T17005] netlink: 4 bytes leftover after parsing attributes in process `syz.9.2897'. [ 1361.690246][ T1267] ieee802154 phy0 wpan0: encryption failed: -22 [ 1361.713298][ T1267] ieee802154 phy1 wpan1: encryption failed: -22 [ 1361.915838][T17036] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2905'. [ 1362.124128][T17036] block device autoloading is deprecated and will be removed. [ 1363.099407][T17049] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready [ 1363.112921][T17049] IPv6: ADDRCONF(NETDEV_CHANGE): tunl0: link becomes ready [ 1363.121374][T17049] IPv6: ADDRCONF(NETDEV_CHANGE): gre0: link becomes ready [ 1363.129611][T17049] IPv6: ADDRCONF(NETDEV_CHANGE): gretap0: link becomes ready [ 1363.137961][T17049] IPv6: ADDRCONF(NETDEV_CHANGE): erspan0: link becomes ready [ 1363.146203][T17049] IPv6: ADDRCONF(NETDEV_CHANGE): ip_vti0: link becomes ready [ 1363.154965][T17049] IPv6: ADDRCONF(NETDEV_CHANGE): ip6_vti0: link becomes ready [ 1363.169077][T17049] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 1363.184688][T17049] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 1363.194887][T17049] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 1364.221925][ T4283] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 1364.233784][ T4283] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 1364.243608][ T4283] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 1364.253621][ T4283] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 1364.261265][ T4283] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 1364.269937][ T4283] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 1364.616625][T17056] loop7: detected capacity change from 0 to 8192 [ 1365.082867][T17056] loop7: p4 < > [ 1365.480772][T15618] usb 4-1: new high-speed USB device number 24 using dummy_hcd [ 1365.668676][T17052] overlayfs: option "workdir=./file0" is useless in a non-upper mount, ignore [ 1365.682665][T15618] usb 4-1: config 1 interface 0 altsetting 127 bulk endpoint 0x81 has invalid maxpacket 64 [ 1365.698230][T15618] usb 4-1: config 1 interface 0 altsetting 127 bulk endpoint 0x2 has invalid maxpacket 32 [ 1365.719105][T15618] usb 4-1: config 1 interface 0 has no altsetting 0 [ 1365.736234][T15618] usb 4-1: New USB device found, idVendor=0bda, idProduct=8150, bcdDevice= 0.40 [ 1365.755117][T15618] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1365.760875][T17052] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 1365.774617][T15618] usb 4-1: Product: syz [ 1365.783149][T15618] usb 4-1: Manufacturer: syz [ 1365.793254][T15618] usb 4-1: SerialNumber: syz [ 1365.809906][T17066] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 1365.820759][T17066] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 1367.001872][ T4283] Bluetooth: hci1: command 0x0409 tx timeout [ 1367.147221][ T31] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1367.438518][T15618] rtl8150 4-1:1.0: couldn't reset the device [ 1367.469940][T15618] rtl8150: probe of 4-1:1.0 failed with error -5 [ 1367.545108][T15618] usb 4-1: USB disconnect, device number 24 [ 1367.716696][T13816] udevd[13816]: inotify_add_watch(7, /dev/loop7p4, 10) failed: No such file or directory [ 1367.730465][ T31] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1367.945745][ T31] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1368.269936][ T31] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1368.327250][T17057] chnl_net:caif_netlink_parms(): no params data found [ 1368.524153][T17057] bridge0: port 1(bridge_slave_0) entered blocking state [ 1368.531538][T17057] bridge0: port 1(bridge_slave_0) entered disabled state [ 1368.541161][T17057] device bridge_slave_0 entered promiscuous mode [ 1368.550257][T17057] bridge0: port 2(bridge_slave_1) entered blocking state [ 1368.558561][T17057] bridge0: port 2(bridge_slave_1) entered disabled state [ 1368.567381][T17057] device bridge_slave_1 entered promiscuous mode [ 1368.646098][T17057] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1368.667631][T17057] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1368.778723][T17057] team0: Port device team_slave_0 added [ 1368.815176][T17107] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 1368.872941][T17107] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 1369.050874][ T4283] Bluetooth: hci1: command 0x041b tx timeout [ 1369.178807][T17057] team0: Port device team_slave_1 added [ 1369.376068][T17057] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1369.493723][T17057] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1369.716553][T17057] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1370.315570][T17122] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready [ 1370.345388][T17122] IPv6: ADDRCONF(NETDEV_CHANGE): tunl0: link becomes ready [ 1370.376629][T17122] IPv6: ADDRCONF(NETDEV_CHANGE): gre0: link becomes ready [ 1370.420273][T17122] IPv6: ADDRCONF(NETDEV_CHANGE): gretap0: link becomes ready [ 1370.462781][T17122] IPv6: ADDRCONF(NETDEV_CHANGE): erspan0: link becomes ready [ 1370.482175][T17122] IPv6: ADDRCONF(NETDEV_CHANGE): ip_vti0: link becomes ready [ 1370.499984][T17122] IPv6: ADDRCONF(NETDEV_CHANGE): ip6_vti0: link becomes ready [ 1370.517590][T17122] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 1370.542103][T17122] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 1370.562570][T17122] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 1370.649081][T17132] loop7: detected capacity change from 0 to 128 [ 1371.167505][ T4283] Bluetooth: hci1: command 0x040f tx timeout [ 1371.312802][T17057] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1371.319811][T17057] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1371.467984][T17057] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1373.280891][ T4283] Bluetooth: hci1: command 0x0419 tx timeout [ 1374.679704][T17136] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1374.783420][T17136] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1375.921391][T17136] netdevsim netdevsim9 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1375.930488][T17136] netdevsim netdevsim9 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1375.945441][T17136] netdevsim netdevsim9 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1375.954835][T17136] netdevsim netdevsim9 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1376.233100][T17184] loop7: detected capacity change from 0 to 128 [ 1376.313726][T17057] device hsr_slave_0 entered promiscuous mode [ 1376.399364][T17057] device hsr_slave_1 entered promiscuous mode [ 1376.409319][T17057] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1376.417420][T17057] Cannot create hsr debugfs directory [ 1377.062961][T17204] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 1378.102853][T17204] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 1378.109039][T17204] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 1378.115532][T17204] Bluetooth: hci6: Opcode 0x0c1a failed: -4 [ 1378.121700][T17204] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 1378.127857][T17204] Bluetooth: hci5: Opcode 0x0c1a failed: -4 [ 1378.135410][T17204] Bluetooth: hci5: Opcode 0x0406 failed: -4 [ 1378.162282][T17204] Bluetooth: hci5: Suspend notifier action (1) failed: -4 [ 1378.170064][T17204] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 1378.178352][T17204] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 1378.226176][T17204] Bluetooth: hci1: Suspend notifier action (1) failed: -4 [ 1378.711613][T17216] loop9: detected capacity change from 0 to 256 [ 1380.180881][ T4283] Bluetooth: hci1: command 0x0c1a tx timeout [ 1380.180969][T16145] Bluetooth: hci5: command 0x0c1a tx timeout [ 1380.193619][T16145] Bluetooth: hci3: command 0x0c1a tx timeout [ 1380.200181][T16145] Bluetooth: hci6: command 0x0c1a tx timeout [ 1380.208305][ T4283] Bluetooth: hci0: command 0x0c1a tx timeout [ 1380.215734][T16145] Bluetooth: hci4: command 0x0c1a tx timeout [ 1381.942976][T17245] loop7: detected capacity change from 0 to 128 [ 1382.250640][ T4277] Bluetooth: hci1: command 0x0406 tx timeout [ 1382.256800][ T4277] Bluetooth: hci5: command 0x0406 tx timeout [ 1382.627618][T17230] loop3: detected capacity change from 0 to 40427 [ 1382.667473][T17230] F2FS-fs (loop3): Invalid SB checksum offset: 0 [ 1382.700641][T17230] F2FS-fs (loop3): Can't find valid F2FS filesystem in 2th superblock [ 1382.752398][T17230] F2FS-fs (loop3): invalid crc value [ 1382.821358][T17230] F2FS-fs (loop3): Disable nat_bits due to incorrect cp_ver (10241045589465957861, 585327988383614437) [ 1383.456366][T17266] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready [ 1383.481237][T17266] IPv6: ADDRCONF(NETDEV_CHANGE): tunl0: link becomes ready [ 1383.491197][T17266] IPv6: ADDRCONF(NETDEV_CHANGE): tunl0: link becomes ready [ 1383.498811][T17266] IPv6: ADDRCONF(NETDEV_CHANGE): gre0: link becomes ready [ 1383.511003][T17266] IPv6: ADDRCONF(NETDEV_CHANGE): gre0: link becomes ready [ 1383.518478][T17266] IPv6: ADDRCONF(NETDEV_CHANGE): gretap0: link becomes ready [ 1383.551101][T17266] IPv6: ADDRCONF(NETDEV_CHANGE): gretap0: link becomes ready [ 1383.558801][T17266] IPv6: ADDRCONF(NETDEV_CHANGE): erspan0: link becomes ready [ 1383.581279][T17266] IPv6: ADDRCONF(NETDEV_CHANGE): erspan0: link becomes ready [ 1383.588990][T17266] IPv6: ADDRCONF(NETDEV_CHANGE): ip_vti0: link becomes ready [ 1383.611028][T17266] IPv6: ADDRCONF(NETDEV_CHANGE): ip_vti0: link becomes ready [ 1383.619249][T17266] IPv6: ADDRCONF(NETDEV_CHANGE): ip6_vti0: link becomes ready [ 1383.655953][T17266] IPv6: ADDRCONF(NETDEV_CHANGE): ip6_vti0: link becomes ready [ 1383.727887][T17266] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 1383.751815][T17266] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 1383.782075][T17266] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 1383.836386][T17057] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 1384.706418][T17279] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 1384.715678][T17279] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 1384.723634][T17279] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 1384.854893][T17284] loop9: detected capacity change from 0 to 2048 [ 1384.889880][ T31] device hsr_slave_0 left promiscuous mode [ 1384.924357][ T31] device hsr_slave_1 left promiscuous mode [ 1384.941730][T17284] EXT4-fs (loop9): mounted filesystem without journal. Quota mode: none. [ 1384.984234][ T31] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1385.008968][ T31] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1385.084022][ T31] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1385.111788][ T31] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1385.141759][ T31] device bridge_slave_1 left promiscuous mode [ 1385.148073][ T31] bridge0: port 2(bridge_slave_1) entered disabled state [ 1385.156519][T17284] EXT4-fs error (device loop9): ext4_validate_block_bitmap:438: comm syz.9.2946: bg 0: block 234: padding at end of block bitmap is not set [ 1385.191537][T17284] EXT4-fs (loop9): Delayed block allocation failed for inode 19 at logical offset 0 with max blocks 300 with error 28 [ 1385.214881][T17284] EXT4-fs (loop9): This should not happen!! Data will be lost [ 1385.214881][T17284] [ 1385.230253][ T31] device bridge_slave_0 left promiscuous mode [ 1385.258933][ T31] bridge0: port 1(bridge_slave_0) entered disabled state [ 1385.288643][T17284] EXT4-fs (loop9): Total free blocks count 0 [ 1385.315186][T17284] EXT4-fs (loop9): Free/Dirty block details [ 1385.330724][ T4318] usb 4-1: new high-speed USB device number 25 using dummy_hcd [ 1385.348915][T17284] EXT4-fs (loop9): free_blocks=0 [ 1385.371072][T17284] EXT4-fs (loop9): dirty_blocks=304 [ 1385.376381][T17284] EXT4-fs (loop9): Block reservation details [ 1385.440674][T17284] EXT4-fs (loop9): i_reserved_data_blocks=19 [ 1385.530910][ T4318] usb 4-1: Using ep0 maxpacket: 8 [ 1385.544192][ T4318] usb 4-1: unable to get BOS descriptor or descriptor too short [ 1385.584029][ T31] device veth1_macvtap left promiscuous mode [ 1385.590141][ T31] device veth0_macvtap left promiscuous mode [ 1385.619104][ T4318] usb 4-1: config 8 interface 0 altsetting 7 endpoint 0x83 has invalid wMaxPacketSize 0 [ 1385.652795][ T31] device veth1_vlan left promiscuous mode [ 1385.658688][ T31] device veth0_vlan left promiscuous mode [ 1385.670735][ T4318] usb 4-1: config 8 interface 0 altsetting 7 bulk endpoint 0x83 has invalid maxpacket 0 [ 1385.694376][ T4318] usb 4-1: config 8 interface 0 has no altsetting 0 [ 1385.742253][T11005] EXT4-fs (loop9): unmounting filesystem. [ 1385.750461][ T4318] usb 4-1: New USB device found, idVendor=07fd, idProduct=0001, bcdDevice=6a.e5 [ 1385.820761][ T4318] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1386.514027][ T4318] usb 4-1: Product: syz [ 1386.518321][ T4318] usb 4-1: Manufacturer: syz [ 1386.523640][ T4318] usb 4-1: SerialNumber: syz [ 1386.848845][T17302] loop9: detected capacity change from 0 to 4096 [ 1386.999964][T17302] EXT4-fs (loop9): Test dummy encryption mode enabled [ 1387.891393][T17302] EXT4-fs (loop9): mounted filesystem without journal. Quota mode: writeback. [ 1388.290120][T11005] EXT4-fs (loop9): unmounting filesystem. [ 1389.354893][ T4277] Bluetooth: hci5: command 0x0406 tx timeout [ 1390.408495][ T31] team0 (unregistering): Port device team_slave_1 removed [ 1390.582638][ T31] team0 (unregistering): Port device team_slave_0 removed [ 1390.770131][ T31] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1390.879215][ T31] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1391.666160][ T4318] usb 4-1: selecting invalid altsetting 0 [ 1392.400256][ T4318] snd-usb-audio: probe of 4-1:8.0 failed with error -12 [ 1392.495162][T12103] udevd[12103]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:8.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1392.746717][ T31] bond0 (unregistering): Released all slaves [ 1393.458379][T17057] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 1393.475363][T17057] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 1393.520833][ T4318] usb 4-1: USB disconnect, device number 25 [ 1393.556680][T17057] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 1393.740493][T17360] loop3: detected capacity change from 0 to 128 [ 1393.851279][T17360] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none. [ 1393.872887][T17360] ext4 filesystem being mounted at /22/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 1393.918986][T17360] syz.3.2957[17360] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 1393.919123][T17360] syz.3.2957[17360] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 1394.042071][T17057] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1394.115325][ T9554] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 1394.132070][ T9554] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 1394.170495][T17057] 8021q: adding VLAN 0 to HW filter on device team0 [ 1394.267750][T16276] EXT4-fs (loop3): unmounting filesystem. [ 1394.277760][T16589] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 1394.314629][T16589] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 1394.346276][T16589] bridge0: port 1(bridge_slave_0) entered blocking state [ 1394.353518][T16589] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1396.383651][T17057] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 1396.411934][T17057] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 1396.640854][T16589] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 1397.635856][T16589] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 1397.672204][T16589] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 1397.703411][T16589] bridge0: port 2(bridge_slave_1) entered blocking state [ 1397.710623][T16589] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1397.758739][T16589] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 1397.826677][T16589] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 1397.854155][T17392] loop9: detected capacity change from 0 to 128 [ 1397.911873][T16589] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 1397.978861][T17398] loop3: detected capacity change from 0 to 128 [ 1397.995651][T16589] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 1398.026539][T16589] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 1398.051647][T16589] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 1398.141000][T16589] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 1398.181082][T16589] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 1398.209379][T16589] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 1398.226129][T16589] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 1398.265209][T16589] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 1398.291348][T16589] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 1398.669975][T17410] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 1398.685265][T17410] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 1398.693415][T17410] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 1399.583432][T17415] netlink: 64 bytes leftover after parsing attributes in process `syz.7.2968'. [ 1400.104371][T17426] overlayfs: unrecognized mount option "de=00000000000000000040000" or missing value [ 1401.067075][T17444] loop3: detected capacity change from 0 to 128 [ 1402.553616][T17455] netlink: 44 bytes leftover after parsing attributes in process `syz.7.2979'. [ 1402.712299][T17463] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 1402.727527][T17463] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 1402.735805][T17463] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 1403.618330][ T4493] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 1403.639495][ T4493] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 1403.709632][T17057] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1405.336851][T17486] overlayfs: unrecognized mount option "de=00000000000000000040000" or missing value [ 1405.389694][T17492] netlink: 132 bytes leftover after parsing attributes in process `syz.7.2986'. [ 1406.817232][T17507] netlink: 4 bytes leftover after parsing attributes in process `syz.7.2988'. [ 1407.557050][T17503] loop3: detected capacity change from 0 to 128 [ 1409.058851][T17527] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready [ 1409.068003][T17527] IPv6: ADDRCONF(NETDEV_CHANGE): tunl0: link becomes ready [ 1409.075677][T17527] IPv6: ADDRCONF(NETDEV_CHANGE): gre0: link becomes ready [ 1409.083122][T17527] IPv6: ADDRCONF(NETDEV_CHANGE): gretap0: link becomes ready [ 1409.091198][T17527] IPv6: ADDRCONF(NETDEV_CHANGE): erspan0: link becomes ready [ 1409.098963][T17527] IPv6: ADDRCONF(NETDEV_CHANGE): ip_vti0: link becomes ready [ 1409.106799][T17527] IPv6: ADDRCONF(NETDEV_CHANGE): ip6_vti0: link becomes ready [ 1409.116076][T17527] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 1409.125092][T17527] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 1409.132761][T17527] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 1409.424893][T17533] loop7: detected capacity change from 0 to 512 [ 1409.475379][T17533] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 1409.618162][T17533] EXT4-fs (loop7): mounted filesystem without journal. Quota mode: writeback. [ 1409.647765][T17533] ext4 filesystem being mounted at /432/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 1409.750978][ T26] audit: type=1800 audit(1768223021.094:1732): pid=17533 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.7.2994" name="file2" dev="loop7" ino=16 res=0 errno=0 [ 1410.554409][ T8677] EXT4-fs (loop7): unmounting filesystem. [ 1410.715351][T17524] loop9: detected capacity change from 0 to 40427 [ 1410.721841][ T31] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 1410.723839][ T31] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 1410.809097][ T31] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 1410.824208][T17524] F2FS-fs (loop9): Invalid log_blocksize (268), supports only 12 [ 1410.832802][ T31] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 1410.888806][T17524] F2FS-fs (loop9): Can't find valid F2FS filesystem in 1th superblock [ 1410.897774][T17057] device veth0_vlan entered promiscuous mode [ 1410.904298][ T31] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 1410.941766][ T31] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 1410.982191][T17057] device veth1_vlan entered promiscuous mode [ 1410.989132][T17524] F2FS-fs (loop9): invalid crc value [ 1411.029425][T17551] loop3: detected capacity change from 0 to 128 [ 1411.057907][T17524] F2FS-fs (loop9): Found nat_bits in checkpoint [ 1411.081212][T17551] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none. [ 1411.151724][T17551] ext4 filesystem being mounted at /34/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 1411.206369][ T4493] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 1411.224729][ T4493] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 1411.295933][ T4493] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 1411.336851][ T4493] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 1411.375659][T17551] syz.3.2996[17551] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 1411.375769][T17551] syz.3.2996[17551] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 1411.409450][T17057] device veth0_macvtap entered promiscuous mode [ 1411.510335][T17057] device veth1_macvtap entered promiscuous mode [ 1411.623883][T17057] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1411.683986][T17057] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1411.750647][T17057] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1411.806077][T17057] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1411.837757][T17057] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1411.869187][T17057] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1411.909787][T17057] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1411.951736][T17057] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1411.987517][T16276] EXT4-fs (loop3): unmounting filesystem. [ 1412.018752][T17057] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1412.090875][ T31] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 1412.118552][ T31] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 1412.187263][ T31] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 1412.234927][ T31] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 1412.269015][T17057] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1412.280336][T17057] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1412.292919][T17057] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1412.303994][T17057] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1412.357105][T17057] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1412.378617][T17057] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1412.390205][T17057] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1412.411051][T17057] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1412.430522][T17057] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1412.479511][T17572] overlayfs: unrecognized mount option "de=00000000000000000040000" or missing value [ 1412.523204][ T4493] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 1412.563273][ T4493] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 1412.616250][T17057] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1412.640586][T17057] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1412.649360][T17057] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1412.681975][T17580] binder: BINDER_SET_CONTEXT_MGR already set [ 1412.688027][T17580] binder: 17566:17580 ioctl 4018620d 200000004a80 returned -16 [ 1412.698373][T17057] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1414.049657][T17599] netlink: 4 bytes leftover after parsing attributes in process `syz.9.3000'. [ 1414.875354][T17611] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 1414.885238][T17611] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 1414.892945][T17611] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 1415.700083][T17617] loop7: detected capacity change from 0 to 1024 [ 1415.861656][T17617] EXT4-fs: Ignoring removed orlov option [ 1416.205733][ T9553] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1416.216146][T17617] EXT4-fs: Ignoring removed nomblk_io_submit option [ 1416.224333][ T9553] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1416.257559][T11106] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1416.298533][ T4525] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 1416.340583][T11106] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1416.370870][T17617] EXT4-fs (loop7): mounted filesystem without journal. Quota mode: none. [ 1416.402178][ T4525] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 1416.673616][ T8677] EXT4-fs (loop7): unmounting filesystem. [ 1425.259724][ T1267] ieee802154 phy0 wpan0: encryption failed: -22 [ 1425.266084][ T1267] ieee802154 phy1 wpan1: encryption failed: -22 [ 1428.076039][T17673] netlink: 'syz.7.3017': attribute type 12 has an invalid length. [ 1428.509736][T17687] loop3: detected capacity change from 0 to 4096 [ 1428.546065][T17681] loop9: detected capacity change from 0 to 1024 [ 1428.616210][T17681] EXT4-fs: Ignoring removed orlov option [ 1429.167419][T17681] EXT4-fs: Ignoring removed nomblk_io_submit option [ 1429.273823][T17687] EXT4-fs: Ignoring removed mblk_io_submit option [ 1429.303792][T17681] EXT4-fs (loop9): mounted filesystem without journal. Quota mode: none. [ 1429.337319][T17687] EXT4-fs (loop3): Test dummy encryption mode enabled [ 1429.603027][T17687] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 1429.842896][T11005] EXT4-fs (loop9): unmounting filesystem. [ 1431.177151][T16276] EXT4-fs (loop3): unmounting filesystem. [ 1431.910690][T15609] usb 4-1: new high-speed USB device number 26 using dummy_hcd [ 1432.243977][T15609] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1432.265069][T15609] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 1432.286779][T15609] usb 4-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 1434.124301][T15609] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=67 [ 1434.132771][T15609] usb 4-1: SerialNumber: syz [ 1434.360224][T15609] usb 4-1: 0:2 : does not exist [ 1434.365424][T15609] usb 4-1: unit 5: unexpected type 0x09 [ 1434.413081][T15609] usb 4-1: USB disconnect, device number 26 [ 1434.459677][ T4283] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 1434.472593][ T4283] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 1434.480870][ T4283] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 1434.491110][ T4283] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 1434.499941][ T4283] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 1434.507419][ T4283] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 1434.762232][T13816] udevd[13816]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1435.331890][T17756] chnl_net:caif_netlink_parms(): no params data found [ 1435.570427][T17756] bridge0: port 1(bridge_slave_0) entered blocking state [ 1435.619359][T17756] bridge0: port 1(bridge_slave_0) entered disabled state [ 1435.641696][T17756] device bridge_slave_0 entered promiscuous mode [ 1435.663665][T17756] bridge0: port 2(bridge_slave_1) entered blocking state [ 1435.682231][T17756] bridge0: port 2(bridge_slave_1) entered disabled state [ 1435.702416][T17756] device bridge_slave_1 entered promiscuous mode [ 1436.569297][ T4525] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1436.590877][ T4277] Bluetooth: hci1: command 0x0409 tx timeout [ 1436.664001][T17790] loop3: detected capacity change from 0 to 512 [ 1436.671799][T17790] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 1436.690079][T17790] EXT4-fs error (device loop3): ext4_orphan_get:1399: inode #15: comm syz.3.3043: inode has both inline data and extents flags [ 1436.717642][T17790] EXT4-fs error (device loop3): ext4_orphan_get:1404: comm syz.3.3043: couldn't read orphan inode 15 (err -117) [ 1436.730235][T17790] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 1436.923946][T17756] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1437.083151][ T4525] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1437.114833][T17790] EXT4-fs error (device loop3): ext4_lookup:1858: inode #15: comm syz.3.3043: inode has both inline data and extents flags [ 1437.239212][T17756] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1437.304532][T17790] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3043'. [ 1437.313740][T17790] device bridge_slave_1 left promiscuous mode [ 1437.321974][T17790] bridge0: port 2(bridge_slave_1) entered disabled state [ 1437.353168][T17790] device bridge_slave_0 left promiscuous mode [ 1437.359430][T17790] bridge0: port 1(bridge_slave_0) entered disabled state [ 1437.475614][ T7] usb 1-1: new high-speed USB device number 25 using dummy_hcd [ 1437.660716][ T7] usb 1-1: Using ep0 maxpacket: 16 [ 1437.668024][ T7] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1437.691615][ T4525] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1437.773580][ T7] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1437.815133][ T7] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 1437.880673][ T7] usb 1-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 1437.900169][ T7] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1437.951170][ T7] usb 1-1: config 0 descriptor?? [ 1437.985040][T16276] EXT4-fs (loop3): unmounting filesystem. [ 1438.154613][ T4525] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1438.207058][T17756] team0: Port device team_slave_0 added [ 1438.238230][T17756] team0: Port device team_slave_1 added [ 1438.376611][ T7] microsoft 0003:045E:07DA.000C: unknown main item tag 0x0 [ 1438.402568][T17756] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1438.428938][ T7] microsoft 0003:045E:07DA.000C: unknown main item tag 0xe [ 1438.460712][T17756] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1438.475489][ T7] microsoft 0003:045E:07DA.000C: unknown main item tag 0x0 [ 1438.612224][T17756] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1438.650787][ T4283] Bluetooth: hci1: command 0x041b tx timeout [ 1439.234652][T17756] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1439.274036][T17756] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1439.328165][ T7] microsoft 0003:045E:07DA.000C: unknown main item tag 0x0 [ 1439.335865][ T7] microsoft 0003:045E:07DA.000C: unknown main item tag 0x0 [ 1439.343421][ T7] microsoft 0003:045E:07DA.000C: ignoring exceeding usage max [ 1439.356989][ T7] microsoft 0003:045E:07DA.000C: item fetching failed at offset 26/34 [ 1439.381118][ T7] microsoft 0003:045E:07DA.000C: parse failed [ 1439.387276][ T7] microsoft: probe of 0003:045E:07DA.000C failed with error -22 [ 1439.432840][ T7] usb 1-1: USB disconnect, device number 25 [ 1439.452799][T17756] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1440.283285][T17825] loop3: detected capacity change from 0 to 512 [ 1440.937060][ T4277] Bluetooth: hci1: command 0x040f tx timeout [ 1440.992237][T17825] EXT4-fs (loop3): orphan cleanup on readonly fs [ 1441.009724][T17825] EXT4-fs error (device loop3): ext4_do_update_inode:5267: inode #15: comm syz.3.3046: corrupted inode contents [ 1441.022194][T17825] EXT4-fs error (device loop3): ext4_dirty_inode:6132: inode #15: comm syz.3.3046: mark_inode_dirty error [ 1441.034421][T17825] EXT4-fs error (device loop3): ext4_do_update_inode:5267: inode #15: comm syz.3.3046: corrupted inode contents [ 1441.048014][T17825] EXT4-fs error (device loop3): ext4_xattr_delete_inode:2968: inode #15: comm syz.3.3046: mark_inode_dirty error [ 1441.063746][T17825] EXT4-fs error (device loop3): ext4_xattr_delete_inode:2971: inode #15: comm syz.3.3046: mark inode dirty (error -117) [ 1441.076874][T17825] EXT4-fs warning (device loop3): ext4_evict_inode:299: xattr delete (err -117) [ 1441.086156][T17825] EXT4-fs (loop3): 1 orphan inode deleted [ 1441.091986][T17825] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none. [ 1441.362249][T16276] EXT4-fs (loop3): unmounting filesystem. [ 1442.134328][T17756] device hsr_slave_0 entered promiscuous mode [ 1442.217396][T17756] device hsr_slave_1 entered promiscuous mode [ 1442.270406][T17833] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3047'. [ 1442.947951][T17850] loop7: detected capacity change from 0 to 2048 [ 1443.040880][ T4277] Bluetooth: hci1: command 0x0419 tx timeout [ 1443.051724][T17850] EXT4-fs (loop7): mounted filesystem without journal. Quota mode: none. [ 1443.144107][ T26] audit: type=1804 audit(1768223054.484:1733): pid=17857 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.7.3054" name="/newroot/446/bus/bus" dev="loop7" ino=18 res=1 errno=0 [ 1443.310666][ T26] audit: type=1800 audit(1768223054.484:1734): pid=17857 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.7.3054" name="bus" dev="loop7" ino=18 res=0 errno=0 [ 1443.620618][T17854] EXT4-fs error (device loop7): ext4_validate_block_bitmap:438: comm ext4lazyinit: bg 0: block 234: padding at end of block bitmap is not set [ 1444.292894][ T8677] EXT4-fs (loop7): unmounting filesystem. [ 1448.976922][T17886] loop9: detected capacity change from 0 to 512 [ 1449.945653][T17886] EXT4-fs (loop9): orphan cleanup on readonly fs [ 1449.965066][T17886] EXT4-fs error (device loop9): ext4_do_update_inode:5267: inode #15: comm syz.9.3057: corrupted inode contents [ 1449.989916][T17886] EXT4-fs error (device loop9): ext4_dirty_inode:6132: inode #15: comm syz.9.3057: mark_inode_dirty error [ 1450.019816][T17886] EXT4-fs error (device loop9): ext4_do_update_inode:5267: inode #15: comm syz.9.3057: corrupted inode contents [ 1450.033817][T17886] EXT4-fs error (device loop9): ext4_xattr_delete_inode:2968: inode #15: comm syz.9.3057: mark_inode_dirty error [ 1450.047353][T17886] EXT4-fs error (device loop9): ext4_xattr_delete_inode:2971: inode #15: comm syz.9.3057: mark inode dirty (error -117) [ 1450.064572][T17886] EXT4-fs warning (device loop9): ext4_evict_inode:299: xattr delete (err -117) [ 1450.074498][T17886] EXT4-fs (loop9): 1 orphan inode deleted [ 1450.080806][T17886] EXT4-fs (loop9): mounted filesystem without journal. Quota mode: none. [ 1450.597828][T11005] EXT4-fs (loop9): unmounting filesystem. [ 1451.499995][T17756] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 1451.845370][T17756] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 1452.863908][T17756] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 1452.925225][T17756] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 1455.287324][T17756] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1455.395269][T17756] 8021q: adding VLAN 0 to HW filter on device team0 [ 1455.483492][T17756] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 1455.596293][T17756] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 1455.677745][ T5130] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 1455.696470][ T5130] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 1455.743464][ T5130] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 1455.793081][ T5130] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 1455.925279][ T5130] bridge0: port 1(bridge_slave_0) entered blocking state [ 1455.932490][ T5130] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1456.044374][ T5130] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 1456.075818][ T5130] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 1456.106054][ T5130] bridge0: port 2(bridge_slave_1) entered blocking state [ 1456.113257][ T5130] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1456.411109][ T5130] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 1456.432020][ T5130] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 1456.492861][ T5130] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 1456.559672][ T5130] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 1456.629043][ T5130] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 1456.641568][ T5130] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 1456.664362][ T5130] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 1456.710799][ T126] usb 10-1: new full-speed USB device number 6 using dummy_hcd [ 1457.368295][T17989] loop7: detected capacity change from 0 to 512 [ 1458.145884][ T5130] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 1458.164716][T17989] EXT4-fs (loop7): orphan cleanup on readonly fs [ 1458.173677][T17989] EXT4-fs error (device loop7): ext4_do_update_inode:5267: inode #15: comm syz.7.3076: corrupted inode contents [ 1458.186222][T17989] EXT4-fs error (device loop7): ext4_dirty_inode:6132: inode #15: comm syz.7.3076: mark_inode_dirty error [ 1458.198229][T17989] EXT4-fs error (device loop7): ext4_do_update_inode:5267: inode #15: comm syz.7.3076: corrupted inode contents [ 1458.210974][T17989] EXT4-fs error (device loop7): ext4_xattr_delete_inode:2968: inode #15: comm syz.7.3076: mark_inode_dirty error [ 1458.224363][T17989] EXT4-fs error (device loop7): ext4_xattr_delete_inode:2971: inode #15: comm syz.7.3076: mark inode dirty (error -117) [ 1458.238732][T17989] EXT4-fs warning (device loop7): ext4_evict_inode:299: xattr delete (err -117) [ 1458.248412][T17989] EXT4-fs (loop7): 1 orphan inode deleted [ 1458.254542][T17989] EXT4-fs (loop7): mounted filesystem without journal. Quota mode: none. [ 1458.337347][ T126] usb 10-1: config 0 has an invalid interface number: 251 but max is 0 [ 1458.430664][ T126] usb 10-1: config 0 has no interface number 0 [ 1458.446872][ T5130] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 1458.461632][ T8677] EXT4-fs (loop7): unmounting filesystem. [ 1458.521381][ T5130] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 1458.524316][ T126] usb 10-1: New USB device found, idVendor=0b95, idProduct=172a, bcdDevice=f7.f4 [ 1458.616571][ T126] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1458.665837][ T126] usb 10-1: Product: syz [ 1458.670156][ T126] usb 10-1: Manufacturer: syz [ 1458.720751][ T126] usb 10-1: SerialNumber: syz [ 1458.772089][ T126] usb 10-1: config 0 descriptor?? [ 1459.010962][ T5130] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 1459.026287][ T5130] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 1459.092441][ T5130] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 1459.262309][ T4525] device hsr_slave_0 left promiscuous mode [ 1459.352681][ T4525] device hsr_slave_1 left promiscuous mode [ 1459.367004][ T4525] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1459.385029][ T4525] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1459.393686][ T126] asix 10-1:0.251 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -71 [ 1459.430789][ T126] asix 10-1:0.251 (unnamed net_device) (uninitialized): Failed to read software interface selection register: -71 [ 1459.473458][ T126] asix: probe of 10-1:0.251 failed with error -71 [ 1459.504433][ T126] usb 10-1: USB disconnect, device number 6 [ 1459.581279][ T4525] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1459.619319][ T4525] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1459.692089][ T4525] device bridge_slave_1 left promiscuous mode [ 1459.698386][ T4525] bridge0: port 2(bridge_slave_1) entered disabled state [ 1459.777644][ T4525] device bridge_slave_0 left promiscuous mode [ 1459.829082][ T4525] bridge0: port 1(bridge_slave_0) entered disabled state [ 1460.201054][ T4525] device veth1_macvtap left promiscuous mode [ 1460.207122][ T4525] device veth0_macvtap left promiscuous mode [ 1460.240974][ T4525] device veth1_vlan left promiscuous mode [ 1460.246885][ T4525] device veth0_vlan left promiscuous mode [ 1461.159311][T18015] overlayfs: upper fs does not support file handles, falling back to index=off. [ 1461.170577][T18015] overlayfs: NFS export requires "index=on", falling back to nfs_export=off. [ 1464.769226][T18041] netlink: 60 bytes leftover after parsing attributes in process `syz.7.3086'. [ 1465.254998][T18040] loop7: detected capacity change from 0 to 512 [ 1465.408804][T18040] EXT4-fs (loop7): orphan cleanup on readonly fs [ 1465.431013][T18040] EXT4-fs error (device loop7): ext4_do_update_inode:5267: inode #15: comm syz.7.3086: corrupted inode contents [ 1465.443820][T18040] EXT4-fs error (device loop7): ext4_dirty_inode:6132: inode #15: comm syz.7.3086: mark_inode_dirty error [ 1465.455785][T18040] EXT4-fs error (device loop7): ext4_do_update_inode:5267: inode #15: comm syz.7.3086: corrupted inode contents [ 1465.468538][T18040] EXT4-fs error (device loop7): ext4_xattr_delete_inode:2968: inode #15: comm syz.7.3086: mark_inode_dirty error [ 1465.481070][T18040] EXT4-fs error (device loop7): ext4_xattr_delete_inode:2971: inode #15: comm syz.7.3086: mark inode dirty (error -117) [ 1465.495714][T18040] EXT4-fs warning (device loop7): ext4_evict_inode:299: xattr delete (err -117) [ 1465.504938][T18040] EXT4-fs (loop7): 1 orphan inode deleted [ 1465.510864][T18040] EXT4-fs (loop7): mounted filesystem without journal. Quota mode: none. [ 1465.599411][ T8677] EXT4-fs (loop7): unmounting filesystem. [ 1467.666820][ T4525] team0 (unregistering): Port device team_slave_1 removed [ 1467.798273][ T4525] team0 (unregistering): Port device team_slave_0 removed [ 1467.896170][ T4525] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1468.030459][ T4525] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1468.660445][T18069] loop7: detected capacity change from 0 to 2048 [ 1468.717726][T18069] Alternate GPT is invalid, using primary GPT. [ 1468.729575][T18069] loop7: p2 p3 p7 [ 1469.157998][ T4525] bond0 (unregistering): Released all slaves [ 1469.325445][T18068] netlink: 4 bytes leftover after parsing attributes in process `syz.7.3091'. [ 1469.634905][ T4493] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 1469.651407][ T4493] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 1469.727078][T17756] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1469.896916][T18071] loop3: detected capacity change from 0 to 40427 [ 1469.934711][T18071] F2FS-fs (loop3): Invalid log_blocksize (268), supports only 12 [ 1469.972576][T18071] F2FS-fs (loop3): Can't find valid F2FS filesystem in 1th superblock [ 1470.016275][T18071] F2FS-fs (loop3): invalid crc value [ 1470.038259][T18082] loop9: detected capacity change from 0 to 128 [ 1470.185116][T18071] F2FS-fs (loop3): Found nat_bits in checkpoint [ 1470.808594][T18093] netlink: 60 bytes leftover after parsing attributes in process `syz.0.3096'. [ 1471.894117][T18071] F2FS-fs (loop3): Try to recover 1th superblock, ret: 0 [ 1471.904099][T18071] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5 [ 1472.821748][T18118] hub 8-0:1.0: USB hub found [ 1472.840849][T18118] hub 8-0:1.0: 1 port detected [ 1473.095286][T18102] loop7: detected capacity change from 0 to 131072 [ 1473.113324][T18102] F2FS-fs (loop7): Test dummy encryption mode enabled [ 1473.122225][T18102] F2FS-fs (loop7): invalid crc value [ 1473.123536][T18122] loop3: detected capacity change from 0 to 1024 [ 1473.170561][T18102] F2FS-fs (loop7): Found nat_bits in checkpoint [ 1473.220205][T18102] F2FS-fs (loop7): Mounted with checkpoint version = 48b305e5 [ 1473.231462][T18122] EXT4-fs: Ignoring removed orlov option [ 1473.398829][T18122] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 1473.786265][T18133] fscrypt (loop7, inode 10): Missing crypto API support for AES-256-CTS-CBC (API name: "cts(cbc(aes))") [ 1473.940739][ T26] audit: type=1804 audit(1768223085.264:1735): pid=18140 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.3.3101" name="/newroot/56/bus/bus" dev="loop3" ino=18 res=1 errno=0 [ 1474.453958][T11119] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 1474.486048][T16276] EXT4-fs (loop3): unmounting filesystem. [ 1474.521084][T11119] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 1475.421386][ T4497] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 1475.478238][ T4497] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 1475.527781][ T4497] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 1475.641223][ T4497] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 1475.706802][T17756] device veth0_vlan entered promiscuous mode [ 1475.744759][T17756] device veth1_vlan entered promiscuous mode [ 1475.851740][T11182] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 1475.867841][T11182] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 1482.986392][T18167] loop3: detected capacity change from 0 to 128 [ 1484.152543][T17756] device veth0_macvtap entered promiscuous mode [ 1484.493181][ T1267] ieee802154 phy0 wpan0: encryption failed: -22 [ 1484.499602][ T1267] ieee802154 phy1 wpan1: encryption failed: -22 [ 1484.527226][T11182] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 1484.556153][T17756] device veth1_macvtap entered promiscuous mode [ 1484.621251][T18167] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none. [ 1484.657746][T18174] netlink: 60 bytes leftover after parsing attributes in process `syz.0.3108'. [ 1484.682187][T18167] ext4 filesystem being mounted at /58/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 1484.779784][T18182] syz.9.3110[18182] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 1484.779889][T18182] syz.9.3110[18182] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 1484.988021][T17756] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1485.105219][T18186] loop7: detected capacity change from 0 to 128 [ 1485.260752][T17756] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1485.438813][T17756] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1485.450252][T17756] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1485.460776][T17756] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1485.479962][T17756] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1485.614459][T18192] loop9: detected capacity change from 0 to 256 [ 1485.621799][T18192] exfat: Deprecated parameter 'namecase' [ 1487.295320][T17756] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1488.255339][T18192] exFAT-fs (loop9): failed to load upcase table (idx : 0x00010000, chksum : 0xf6e0d861, utbl_chksum : 0xe619d30d) [ 1488.270761][T17756] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1488.283094][T17756] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1488.643562][T11120] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 1488.843195][T11120] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 1488.903625][T17756] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1488.944632][T17756] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1488.992164][T17756] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1489.736815][T18201] syz.9.3113[18201] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 1489.736920][T18201] syz.9.3113[18201] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 1489.790643][T17756] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1489.855326][T17756] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1489.878213][T17756] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1489.899092][T17756] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1489.916456][T17756] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1490.080803][T17756] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1490.215867][T11120] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 1490.249405][T11120] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 1490.402501][T17756] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1490.463849][T17756] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1490.528659][T17756] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1490.604507][T18214] loop9: detected capacity change from 0 to 2048 [ 1490.620526][T17756] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1490.772284][T18214] EXT4-fs (loop9): mounted filesystem without journal. Quota mode: none. [ 1491.756097][T11005] EXT4-fs (loop9): unmounting filesystem. [ 1491.971446][ T31] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1492.009861][ T31] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1492.264969][ T31] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 1492.359785][T11106] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1493.144450][T11106] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1493.217659][T18231] loop9: detected capacity change from 0 to 256 [ 1493.228463][ T31] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 1493.341427][T13816] I/O error, dev loop9, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 1496.749015][T18248] overlayfs: option "workdir=./file0" is useless in a non-upper mount, ignore [ 1496.758026][T18248] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 1497.906482][ T4277] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 1497.922032][ T4277] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 1497.930249][ T4277] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 1497.939041][ T4277] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 1497.948043][ T4277] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 1497.955807][ T4277] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 1498.093832][ T4283] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 1498.106584][ T4283] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 1498.115093][ T4283] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 1498.123584][ T4283] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 1498.131950][ T4283] Bluetooth: hci7: unexpected cc 0x0c25 length: 249 > 3 [ 1498.139269][ T4283] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 1498.444272][T18260] input: syz1 as /devices/virtual/input/input28 [ 1498.519500][T18264] loop7: detected capacity change from 0 to 128 [ 1498.595605][T18264] EXT4-fs (loop7): mounted filesystem without journal. Quota mode: none. [ 1498.646024][T18264] ext4 filesystem being mounted at /467/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 1498.849925][T18264] syz.7.3126[18264] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 1498.850026][T18264] syz.7.3126[18264] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 1499.001551][ T5130] netdevsim netdevsim6 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1499.145636][ T8677] EXT4-fs (loop7): unmounting filesystem. [ 1499.607324][ T5130] netdevsim netdevsim6 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1499.933486][ T5130] netdevsim netdevsim6 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1500.010693][ T4277] Bluetooth: hci2: command 0x0409 tx timeout [ 1500.171511][ T4277] Bluetooth: hci7: command 0x0409 tx timeout [ 1500.654169][ T5130] netdevsim netdevsim6 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1501.124107][T18256] chnl_net:caif_netlink_parms(): no params data found [ 1501.503785][T18254] chnl_net:caif_netlink_parms(): no params data found [ 1501.791334][T18256] bridge0: port 1(bridge_slave_0) entered blocking state [ 1501.810864][T18256] bridge0: port 1(bridge_slave_0) entered disabled state [ 1501.875866][T18256] device bridge_slave_0 entered promiscuous mode [ 1501.923689][T18256] bridge0: port 2(bridge_slave_1) entered blocking state [ 1501.968066][T18256] bridge0: port 2(bridge_slave_1) entered disabled state [ 1501.992065][T18256] device bridge_slave_1 entered promiscuous mode [ 1502.090851][ T4277] Bluetooth: hci2: command 0x041b tx timeout [ 1502.250684][ T4277] Bluetooth: hci7: command 0x041b tx timeout [ 1502.506928][T18313] overlayfs: option "workdir=./file0" is useless in a non-upper mount, ignore [ 1502.515990][T18313] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 1504.437887][ T4277] Bluetooth: hci2: command 0x040f tx timeout [ 1504.444919][ T4283] Bluetooth: hci7: command 0x040f tx timeout [ 1504.530798][T18256] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1504.676155][T18320] platform regulatory.0: loading /lib/firmware/regulatory.db failed with error -12 [ 1504.686053][T18254] bridge0: port 1(bridge_slave_0) entered blocking state [ 1504.701074][T18254] bridge0: port 1(bridge_slave_0) entered disabled state [ 1504.710635][T18320] platform regulatory.0: Direct firmware load for regulatory.db failed with error -12 [ 1504.720286][T18320] platform regulatory.0: Falling back to sysfs fallback for: regulatory.db [ 1504.740759][T18254] device bridge_slave_0 entered promiscuous mode [ 1504.792869][T18256] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1505.019633][T18254] bridge0: port 2(bridge_slave_1) entered blocking state [ 1505.034513][T18254] bridge0: port 2(bridge_slave_1) entered disabled state [ 1505.121828][T18254] device bridge_slave_1 entered promiscuous mode [ 1505.255873][T18256] team0: Port device team_slave_0 added [ 1505.396339][T18338] netlink: 'syz.0.3139': attribute type 12 has an invalid length. [ 1505.426864][T18256] team0: Port device team_slave_1 added [ 1505.619158][T18254] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1505.665229][T18256] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1505.844081][T18256] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1506.759587][ T4277] Bluetooth: hci7: command 0x0419 tx timeout [ 1506.765782][ T4277] Bluetooth: hci2: command 0x0419 tx timeout [ 1506.952662][T18256] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1509.138669][T18254] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1509.237456][T18256] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1509.263826][T18256] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1509.379251][T18256] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1509.401348][T18356] netlink: 'syz.7.3142': attribute type 13 has an invalid length. [ 1509.409677][T18356] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready [ 1509.428153][T18356] IPv6: ADDRCONF(NETDEV_CHANGE): tunl0: link becomes ready [ 1509.436348][T18356] IPv6: ADDRCONF(NETDEV_CHANGE): gre0: link becomes ready [ 1509.445192][T18356] gretap0: refused to change device tx_queue_len [ 1509.451757][T18356] IPv6: ADDRCONF(NETDEV_CHANGE): gretap0: link becomes ready [ 1509.459317][T18356] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check. [ 1509.634734][T18167] EXT4-fs (loop3): unmounting filesystem. [ 1509.879895][ T26] audit: type=1326 audit(1768223121.214:1736): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18361 comm="syz.7.3143" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd2c638f749 code=0x7fc00000 [ 1509.925672][T18254] team0: Port device team_slave_0 added [ 1509.939041][ T26] audit: type=1326 audit(1768223121.214:1737): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18361 comm="syz.7.3143" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd2c638f749 code=0x7fc00000 [ 1509.993879][T18254] team0: Port device team_slave_1 added [ 1510.037864][ T26] audit: type=1326 audit(1768223121.214:1738): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18361 comm="syz.7.3143" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd2c638f749 code=0x7fc00000 [ 1510.132542][ T26] audit: type=1326 audit(1768223121.214:1739): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18361 comm="syz.7.3143" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd2c638f749 code=0x7fc00000 [ 1510.224998][ T26] audit: type=1326 audit(1768223121.214:1740): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18361 comm="syz.7.3143" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd2c638f749 code=0x7fc00000 [ 1510.248021][ T26] audit: type=1326 audit(1768223121.214:1741): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18361 comm="syz.7.3143" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd2c638f749 code=0x7fc00000 [ 1510.271718][ T26] audit: type=1326 audit(1768223121.214:1742): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18361 comm="syz.7.3143" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd2c638f749 code=0x7fc00000 [ 1510.305804][ T26] audit: type=1326 audit(1768223121.214:1743): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18361 comm="syz.7.3143" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd2c638f749 code=0x7fc00000 [ 1510.342011][ T26] audit: type=1326 audit(1768223121.214:1744): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18361 comm="syz.7.3143" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd2c638f749 code=0x7fc00000 [ 1510.555230][ T26] audit: type=1326 audit(1768223121.214:1745): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18361 comm="syz.7.3143" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd2c638f749 code=0x7fc00000 [ 1512.382447][T18254] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1512.389483][T18254] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1512.515598][T18254] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1512.569109][T18256] device hsr_slave_0 entered promiscuous mode [ 1512.611865][T18256] device hsr_slave_1 entered promiscuous mode [ 1512.644398][T18256] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1512.679630][T18387] loop7: detected capacity change from 0 to 1024 [ 1512.692582][T18256] Cannot create hsr debugfs directory [ 1512.709312][T18387] EXT4-fs: Ignoring removed orlov option [ 1512.731200][T18387] EXT4-fs: Ignoring removed nomblk_io_submit option [ 1512.809896][T18387] EXT4-fs (loop7): mounted filesystem without journal. Quota mode: none. [ 1513.051423][T18254] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1513.060763][T18254] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1513.099591][T18254] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1513.247521][T18254] device hsr_slave_0 entered promiscuous mode [ 1513.277179][T18254] device hsr_slave_1 entered promiscuous mode [ 1513.295154][ T8677] EXT4-fs (loop7): unmounting filesystem. [ 1513.301564][T18254] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1513.309415][T18254] Cannot create hsr debugfs directory [ 1514.440746][T18380] usb 1-1: new full-speed USB device number 26 using dummy_hcd [ 1514.596281][ T5130] device hsr_slave_0 left promiscuous mode [ 1514.631034][ T5130] device hsr_slave_1 left promiscuous mode [ 1514.640964][ T5130] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1514.664049][ T5130] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1514.742057][T18380] usb 1-1: config 0 interface 0 altsetting 6 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 1514.771774][T18380] usb 1-1: config 0 interface 0 altsetting 6 endpoint 0x81 has invalid maxpacket 1024, setting to 64 [ 1514.791445][ T5130] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1514.810931][ T5130] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1514.820917][T18380] usb 1-1: config 0 interface 0 altsetting 6 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1514.864819][T18380] usb 1-1: config 0 interface 0 has no altsetting 0 [ 1514.891411][T18380] usb 1-1: New USB device found, idVendor=056a, idProduct=00fb, bcdDevice= 0.00 [ 1514.940612][T18380] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1514.973121][T18380] usb 1-1: config 0 descriptor?? [ 1514.978839][T18419] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 1515.005773][ T5130] device bridge_slave_1 left promiscuous mode [ 1515.028493][ T5130] bridge0: port 2(bridge_slave_1) entered disabled state [ 1515.042900][ T5130] device bridge_slave_0 left promiscuous mode [ 1515.059613][ T5130] bridge0: port 1(bridge_slave_0) entered disabled state [ 1515.672251][T18436] overlayfs: option "workdir=./file0" is useless in a non-upper mount, ignore [ 1515.681886][T18436] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 1516.043254][T18440] loop9: detected capacity change from 0 to 256 [ 1516.050464][T18440] exfat: Deprecated parameter 'namecase' [ 1516.069583][T18440] exFAT-fs (loop9): failed to load upcase table (idx : 0x00010000, chksum : 0xf6e0d861, utbl_chksum : 0xe619d30d) [ 1516.178560][ T5130] device veth1_macvtap left promiscuous mode [ 1516.210398][ T5130] device veth0_macvtap left promiscuous mode [ 1516.227770][ T5130] device veth1_vlan left promiscuous mode [ 1516.233926][ T5130] device veth0_vlan left promiscuous mode [ 1516.416436][T18380] wacom 0003:056A:00FB.000D: unknown main item tag 0x0 [ 1516.439900][T18380] wacom 0003:056A:00FB.000D: unknown main item tag 0x0 [ 1516.465543][T18380] wacom 0003:056A:00FB.000D: unknown main item tag 0x0 [ 1516.491163][T18380] wacom 0003:056A:00FB.000D: hidraw0: USB HID v0.07 Device [HID 056a:00fb] on usb-dummy_hcd.0-1/input0 [ 1516.727398][T18380] usb 1-1: USB disconnect, device number 26 [ 1517.783393][T18451] fido_id[18451]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.0/usb1/report_descriptor': No such file or directory [ 1517.877513][T18454] loop7: detected capacity change from 0 to 512 [ 1517.909512][T18454] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 1518.018730][T18454] EXT4-fs (loop7): mounted filesystem without journal. Quota mode: writeback. [ 1518.033252][T18454] ext4 filesystem being mounted at /480/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 1518.092175][ T26] kauditd_printk_skb: 56 callbacks suppressed [ 1518.092191][ T26] audit: type=1800 audit(1768223129.434:1802): pid=18454 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.7.3160" name="file2" dev="loop7" ino=16 res=0 errno=0 [ 1519.273635][ T8677] EXT4-fs (loop7): unmounting filesystem. [ 1520.130346][ T5130] team0 (unregistering): Port device team_slave_1 removed [ 1520.653442][ T5130] team0 (unregistering): Port device team_slave_0 removed [ 1520.726761][ T5130] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1520.851203][ T5130] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1521.149135][T18485] block device autoloading is deprecated and will be removed. [ 1521.157341][T18485] I/O error, dev loop1, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 1 [ 1521.167252][T18485] FAT-fs (loop1): unable to read boot sector [ 1521.281431][T18485] 9pnet_fd: Insufficient options for proto=fd [ 1522.789368][ T5130] bond0 (unregistering): Released all slaves [ 1523.055197][T18452] netlink: 4 bytes leftover after parsing attributes in process `syz.9.3159'. [ 1523.184734][T18481] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 1523.191074][T18481] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 1523.197112][T18481] Bluetooth: hci6: Opcode 0x0c1a failed: -4 [ 1523.203305][T18481] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 1523.209390][T18481] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 1523.215532][T18481] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 1523.251183][T18481] Bluetooth: hci2: Suspend notifier action (1) failed: -4 [ 1523.258593][T18481] Bluetooth: hci7: Opcode 0x0c1a failed: -4 [ 1523.265234][T18481] Bluetooth: hci7: Opcode 0x0406 failed: -4 [ 1523.272108][T18481] Bluetooth: hci7: Suspend notifier action (1) failed: -4 [ 1525.290562][ T4277] Bluetooth: hci2: command 0x0c1a tx timeout [ 1525.291401][ T4283] Bluetooth: hci3: command 0x0c1a tx timeout [ 1525.296653][ T4277] Bluetooth: hci6: command 0x0c1a tx timeout [ 1525.309448][ T4277] Bluetooth: hci0: command 0x0c1a tx timeout [ 1525.310775][T16145] Bluetooth: hci4: command 0x0c1a tx timeout [ 1525.317525][ T4277] Bluetooth: hci7: command 0x0c1a tx timeout [ 1526.043485][ T5130] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1526.516519][ T5130] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1527.040405][ T5130] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1527.145738][T18256] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 1527.302618][ T5130] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1527.370895][T18520] Bluetooth: hci7: command 0x0406 tx timeout [ 1527.376991][T18520] Bluetooth: hci2: command 0x0406 tx timeout [ 1527.480920][T18256] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 1527.537715][T18256] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 1527.611400][T18256] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 1528.038844][T18550] netlink: 'syz.7.3176': attribute type 53 has an invalid length. [ 1528.512832][T18256] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1528.531512][T18256] 8021q: adding VLAN 0 to HW filter on device team0 [ 1528.617294][T18560] device syzkaller0 entered promiscuous mode [ 1529.332043][T11182] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 1529.395569][T11182] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 1529.544135][T11182] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 1529.692041][T11182] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 1529.825031][T11182] bridge0: port 1(bridge_slave_0) entered blocking state [ 1529.832367][T11182] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1530.069343][T11182] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 1530.211927][T11182] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 1530.292541][T11182] bridge0: port 2(bridge_slave_1) entered blocking state [ 1530.299708][T11182] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1531.315344][T11182] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 1532.098287][T18570] loop7: detected capacity change from 0 to 512 [ 1532.106110][T18570] EXT4-fs: Ignoring removed orlov option [ 1532.122582][T18570] EXT4-fs (loop7): mounting ext3 file system using the ext4 subsystem [ 1532.346800][T18570] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=8002c119, mo2=0002] [ 1532.375145][T18570] EXT4-fs error (device loop7): ext4_xattr_ibody_find:2200: inode #15: comm syz.7.3181: corrupted in-inode xattr [ 1532.396600][T18570] EXT4-fs error (device loop7): ext4_orphan_get:1404: comm syz.7.3181: couldn't read orphan inode 15 (err -117) [ 1532.419515][T18570] EXT4-fs (loop7): mounted filesystem without journal. Quota mode: none. [ 1533.218355][ T8677] EXT4-fs (loop7): unmounting filesystem. [ 1534.883038][T18587] netlink: 8 bytes leftover after parsing attributes in process `syz.7.3185'. [ 1534.899243][T18587] loop7: detected capacity change from 0 to 512 [ 1535.090951][T18587] EXT4-fs (loop7): 1 orphan inode deleted [ 1535.096763][T18587] EXT4-fs (loop7): mounted filesystem without journal. Quota mode: writeback. [ 1535.112578][T18587] ext4 filesystem being mounted at /489/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 1535.136049][T11178] Quota error (device loop7): do_check_range: Getting dqdh_entries 15 out of range 0-14 [ 1535.148869][T11178] EXT4-fs error (device loop7): ext4_release_dquot:6871: comm kworker/u4:48: Failed to release dquot type 1 [ 1536.041632][ T8677] EXT4-fs (loop7): unmounting filesystem. [ 1536.478113][T18595] loop7: detected capacity change from 0 to 512 [ 1538.202462][T18599] loop7: detected capacity change from 0 to 128 [ 1540.307771][T11182] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 1540.317164][T11182] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 1540.333666][T18602] netlink: 20 bytes leftover after parsing attributes in process `syz.7.3188'. [ 1540.463825][T11182] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 1540.491060][T11182] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 1540.520300][T11182] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 1540.542538][T11182] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 1540.569779][T11182] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 1540.596818][T11182] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 1540.626138][T11182] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 1540.648882][T11182] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 1540.688986][T18256] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 1540.719417][T11182] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 1541.650842][T18254] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 1541.713831][T18254] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 1541.810239][T18254] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 1542.057778][T18254] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 1542.215325][T18633] syz.0.3194[18633] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 1542.215645][T18633] syz.0.3194[18633] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 1542.803994][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 1542.925016][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 1543.116398][T18256] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1543.166623][T18653] loop7: detected capacity change from 0 to 512 [ 1543.284709][T18653] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 1543.387129][T18653] EXT4-fs (loop7): mounted filesystem without journal. Quota mode: writeback. [ 1543.442847][T18653] ext4 filesystem being mounted at /495/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 1543.517050][ T26] audit: type=1800 audit(1768223154.854:1803): pid=18653 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.7.3198" name="file2" dev="loop7" ino=16 res=0 errno=0 [ 1543.609010][T18254] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1543.792812][T11182] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 1543.813903][T11182] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 1543.831742][T18254] 8021q: adding VLAN 0 to HW filter on device team0 [ 1543.873063][T18668] netlink: 96 bytes leftover after parsing attributes in process `syz.7.3198'. [ 1544.619384][ T8677] EXT4-fs (loop7): unmounting filesystem. [ 1544.771075][ T2894] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 1544.800365][ T2894] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 1544.829640][ T2894] bridge0: port 1(bridge_slave_0) entered blocking state [ 1544.836959][ T2894] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1544.880804][ T2894] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 1545.035206][ T2894] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 1545.081369][ T2894] bridge0: port 2(bridge_slave_1) entered blocking state [ 1545.088543][ T2894] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1545.098041][ T2894] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 1545.107698][ T2894] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 1545.271010][T18681] overlayfs: option "workdir=./file0" is useless in a non-upper mount, ignore [ 1545.279972][T18681] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 1545.400655][ T5130] device hsr_slave_0 left promiscuous mode [ 1545.435410][ T5130] device hsr_slave_1 left promiscuous mode [ 1545.577303][ T5130] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1545.782411][ T5130] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1545.849527][ T5130] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1545.901941][ T5130] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1545.971033][ T1267] ieee802154 phy0 wpan0: encryption failed: -22 [ 1545.977399][ T1267] ieee802154 phy1 wpan1: encryption failed: -22 [ 1546.135939][ T5130] device veth1_macvtap left promiscuous mode [ 1546.151829][ T5130] device veth0_macvtap left promiscuous mode [ 1546.178404][ T5130] device veth1_vlan left promiscuous mode [ 1546.194990][ T5130] device veth0_vlan left promiscuous mode [ 1547.554172][T18695] loop9: detected capacity change from 0 to 128 [ 1547.615708][T18695] EXT4-fs (loop9): mounted filesystem without journal. Quota mode: none. [ 1547.638140][T18695] ext4 filesystem being mounted at /355/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 1547.873600][T18695] syz.9.3204[18695] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 1547.873712][T18695] syz.9.3204[18695] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 1548.603954][T11005] EXT4-fs (loop9): unmounting filesystem. [ 1549.929741][T18725] loop9: detected capacity change from 0 to 512 [ 1549.937454][T18725] EXT4-fs: Ignoring removed orlov option [ 1549.962698][T18725] EXT4-fs (loop9): mounting ext3 file system using the ext4 subsystem [ 1549.992188][T18725] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=8002c119, mo2=0002] [ 1550.001971][ T5130] team0 (unregistering): Port device team_slave_1 removed [ 1550.015345][T18725] EXT4-fs error (device loop9): ext4_xattr_ibody_find:2200: inode #15: comm syz.9.3207: corrupted in-inode xattr [ 1550.055270][T18725] EXT4-fs error (device loop9): ext4_orphan_get:1404: comm syz.9.3207: couldn't read orphan inode 15 (err -117) [ 1550.103321][T18725] EXT4-fs (loop9): mounted filesystem without journal. Quota mode: none. [ 1550.230328][ T5130] team0 (unregistering): Port device team_slave_0 removed [ 1550.356764][ T5130] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1550.460845][ T5130] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1550.782991][T11005] EXT4-fs (loop9): unmounting filesystem. [ 1552.570049][ T5130] bond0 (unregistering): Released all slaves [ 1552.660345][T11182] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 1552.670286][T11182] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 1552.688843][T11182] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 1552.700282][T11182] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 1552.770898][ T4496] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 1552.801460][ T4496] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 1553.024155][T18775] loop7: detected capacity change from 0 to 512 [ 1553.031746][T18254] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 1553.053698][T18254] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 1553.113648][T18775] EXT4-fs (loop7): encrypted files will use data=ordered instead of data journaling mode [ 1553.182217][T18775] EXT4-fs error (device loop7): ext4_orphan_get:1399: inode #15: comm syz.7.3210: inode has both inline data and extents flags [ 1553.425309][T18781] overlayfs: option "workdir=./file0" is useless in a non-upper mount, ignore [ 1553.434483][T18781] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 1553.979722][T16589] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 1553.991317][T16589] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 1554.000164][T16589] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 1554.009153][T16589] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 1554.020885][T16589] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 1554.044827][T18775] EXT4-fs error (device loop7): ext4_orphan_get:1404: comm syz.7.3210: couldn't read orphan inode 15 (err -117) [ 1554.111052][T18775] EXT4-fs (loop7): mounted filesystem without journal. Quota mode: writeback. [ 1554.509775][T18775] EXT4-fs error (device loop7): ext4_lookup:1858: inode #15: comm syz.7.3210: inode has both inline data and extents flags [ 1554.560778][T18789] netlink: 4 bytes leftover after parsing attributes in process `syz.7.3210'. [ 1554.569746][T18789] device bridge_slave_1 left promiscuous mode [ 1554.576153][T18789] bridge0: port 2(bridge_slave_1) entered disabled state [ 1554.715121][T18789] device bridge_slave_0 left promiscuous mode [ 1554.723346][T18789] bridge0: port 1(bridge_slave_0) entered disabled state [ 1555.135985][ T4272] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 1555.146598][ T4272] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 1555.160041][ T4272] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 1555.175126][ T4272] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 1555.183156][ T4272] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 1555.190826][ T4272] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 1555.320364][T18788] loop9: detected capacity change from 0 to 8192 [ 1555.601389][ T8677] EXT4-fs (loop7): unmounting filesystem. [ 1556.837333][T18520] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 1556.866213][T18520] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 1556.875515][T18520] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 1556.884028][T18520] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 1556.982596][ T4272] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 1556.994206][ T4272] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 1557.464385][ T4272] Bluetooth: hci1: command 0x0409 tx timeout [ 1557.846822][T18813] loop7: detected capacity change from 0 to 128 [ 1557.962208][T18813] EXT4-fs (loop7): mounted filesystem without journal. Quota mode: none. [ 1557.972428][T18813] ext4 filesystem being mounted at /500/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 1558.017463][T18816] netlink: 96 bytes leftover after parsing attributes in process `syz.0.3215'. [ 1558.026652][T18813] syz.7.3214[18813] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 1558.026754][T18813] syz.7.3214[18813] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 1558.582132][ T26] audit: type=1326 audit(1768223169.924:1804): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18825 comm="syz.0.3217" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f998f18f749 code=0x7ffc0000 [ 1558.744394][ T26] audit: type=1326 audit(1768223169.954:1805): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18825 comm="syz.0.3217" exe="/root/syz-executor" sig=0 arch=c000003e syscall=305 compat=0 ip=0x7f998f18f749 code=0x7ffc0000 [ 1558.767661][ T8677] EXT4-fs (loop7): unmounting filesystem. [ 1558.869388][ T26] audit: type=1326 audit(1768223169.964:1806): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18825 comm="syz.0.3217" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f998f18f749 code=0x7ffc0000 [ 1558.968177][ T26] audit: type=1326 audit(1768223169.964:1807): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18825 comm="syz.0.3217" exe="/root/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7f998f18f749 code=0x7ffc0000 [ 1559.051231][ T4277] Bluetooth: hci2: command 0x0409 tx timeout [ 1559.076814][ T26] audit: type=1326 audit(1768223169.964:1808): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18825 comm="syz.0.3217" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f998f18f749 code=0x7ffc0000 [ 1559.136524][T18796] chnl_net:caif_netlink_parms(): no params data found [ 1559.342965][ T26] audit: type=1326 audit(1768223169.964:1809): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18825 comm="syz.0.3217" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f998f18f749 code=0x7ffc0000 [ 1560.171358][ T4277] Bluetooth: hci1: command 0x041b tx timeout [ 1560.271884][T18851] overlayfs: option "workdir=./file0" is useless in a non-upper mount, ignore [ 1560.281164][T18851] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 1561.063644][T18859] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3221'. [ 1561.510335][ T4272] Bluetooth: hci2: command 0x041b tx timeout [ 1562.250615][ T4277] Bluetooth: hci1: command 0x040f tx timeout [ 1562.290341][T18806] chnl_net:caif_netlink_parms(): no params data found [ 1562.777960][T18796] bridge0: port 1(bridge_slave_0) entered blocking state [ 1562.799238][T18796] bridge0: port 1(bridge_slave_0) entered disabled state [ 1562.808309][T18796] device bridge_slave_0 entered promiscuous mode [ 1562.955131][T18796] bridge0: port 2(bridge_slave_1) entered blocking state [ 1562.970383][T18796] bridge0: port 2(bridge_slave_1) entered disabled state [ 1563.030415][T18796] device bridge_slave_1 entered promiscuous mode [ 1563.905548][T18806] bridge0: port 1(bridge_slave_0) entered blocking state [ 1563.924954][T18806] bridge0: port 1(bridge_slave_0) entered disabled state [ 1563.933274][T18806] device bridge_slave_0 entered promiscuous mode [ 1564.059375][T18806] bridge0: port 2(bridge_slave_1) entered blocking state [ 1564.069176][T18806] bridge0: port 2(bridge_slave_1) entered disabled state [ 1564.096484][T18806] device bridge_slave_1 entered promiscuous mode [ 1564.250732][ T4277] Bluetooth: hci2: command 0x040f tx timeout [ 1564.286075][T18796] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1564.330577][ T4277] Bluetooth: hci1: command 0x0419 tx timeout [ 1564.339632][T18806] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1564.361999][T18796] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1564.415470][T18806] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1564.789916][T18796] team0: Port device team_slave_0 added [ 1564.877589][T18806] team0: Port device team_slave_0 added [ 1564.918975][T18796] team0: Port device team_slave_1 added [ 1564.932229][T18806] team0: Port device team_slave_1 added [ 1565.302568][T18806] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1565.309569][T18806] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1566.290208][T18806] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1566.316113][T18796] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1566.324062][T18796] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1566.351343][ T4277] Bluetooth: hci2: command 0x0419 tx timeout [ 1566.357666][T18796] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1566.371126][T18806] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1566.378312][T18806] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1566.404980][T18806] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1566.417715][T18796] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1566.425264][T18796] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1566.451727][T18796] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1566.645465][T18909] loop7: detected capacity change from 0 to 128 [ 1566.669891][T18806] device hsr_slave_0 entered promiscuous mode [ 1566.681548][T18806] device hsr_slave_1 entered promiscuous mode [ 1566.791675][T18909] EXT4-fs (loop7): mounted filesystem without journal. Quota mode: none. [ 1566.810994][T18909] ext4 filesystem being mounted at /504/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 1567.108391][T18916] overlayfs: option "workdir=./file0" is useless in a non-upper mount, ignore [ 1567.117631][T18916] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 1567.522282][T18796] device hsr_slave_0 entered promiscuous mode [ 1567.539840][T18796] device hsr_slave_1 entered promiscuous mode [ 1567.620821][T18796] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1567.628442][T18796] Cannot create hsr debugfs directory [ 1567.640951][T18909] syz.7.3227[18909] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 1567.641058][T18909] syz.7.3227[18909] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 1567.871432][ T8677] EXT4-fs (loop7): unmounting filesystem. [ 1572.315419][T18976] netlink: 132 bytes leftover after parsing attributes in process `syz.0.3239'. [ 1573.196350][T18621] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 1573.238102][T18621] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 1573.260834][T18621] buffer_io_error: 46 callbacks suppressed [ 1573.260853][T18621] Buffer I/O error on dev loop7p9, logical block 0, async page read [ 1573.595461][T18981] syz.0.3240[18981] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 1573.595570][T18981] syz.0.3240[18981] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 1573.692221][T18621] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 1573.805113][T18621] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 1573.822336][T18986] loop7: detected capacity change from 0 to 512 [ 1573.834419][T18621] Buffer I/O error on dev loop7p9, logical block 0, async page read [ 1573.859892][T18986] EXT4-fs (loop7): encrypted files will use data=ordered instead of data journaling mode [ 1573.924765][T18986] EXT4-fs error (device loop7): ext4_orphan_get:1399: inode #15: comm syz.7.3241: inode has both inline data and extents flags [ 1573.991905][T18986] EXT4-fs error (device loop7): ext4_orphan_get:1404: comm syz.7.3241: couldn't read orphan inode 15 (err -117) [ 1574.051569][T18986] EXT4-fs (loop7): mounted filesystem without journal. Quota mode: writeback. [ 1574.230788][T16589] device hsr_slave_0 left promiscuous mode [ 1574.248772][T16589] device hsr_slave_1 left promiscuous mode [ 1574.271057][T16589] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1574.299398][T16589] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1574.324981][T16589] device bridge_slave_1 left promiscuous mode [ 1574.340722][T16589] bridge0: port 2(bridge_slave_1) entered disabled state [ 1574.380062][T16589] device bridge_slave_0 left promiscuous mode [ 1574.399083][T16589] bridge0: port 1(bridge_slave_0) entered disabled state [ 1574.451401][T16589] device hsr_slave_0 left promiscuous mode [ 1574.467585][T16589] device hsr_slave_1 left promiscuous mode [ 1574.493883][T16589] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1574.531618][T16589] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1574.562134][T16589] device bridge_slave_1 left promiscuous mode [ 1574.568846][T16589] bridge0: port 2(bridge_slave_1) entered disabled state [ 1574.661034][T16589] device bridge_slave_0 left promiscuous mode [ 1574.667291][T16589] bridge0: port 1(bridge_slave_0) entered disabled state [ 1574.736661][T18986] EXT4-fs error (device loop7): ext4_lookup:1858: inode #15: comm syz.7.3241: inode has both inline data and extents flags [ 1575.818958][ T8677] EXT4-fs (loop7): unmounting filesystem. [ 1577.673068][T16589] team0 (unregistering): Port device team_slave_1 removed [ 1577.791369][T16589] team0 (unregistering): Port device team_slave_0 removed [ 1577.969641][T19036] loop9: detected capacity change from 0 to 512 [ 1577.976974][T19036] EXT4-fs: Ignoring removed oldalloc option [ 1577.984018][T19036] EXT4-fs (loop9): encrypted files will use data=ordered instead of data journaling mode [ 1578.338418][T19036] EXT4-fs warning (device loop9): ext4_expand_extra_isize_ea:2823: Unable to expand inode 11. Delete some EAs or run e2fsck. [ 1578.352049][T19036] EXT4-fs (loop9): 1 truncate cleaned up [ 1578.358262][T19036] EXT4-fs (loop9): mounted filesystem without journal. Quota mode: writeback. [ 1578.495406][T19036] overlayfs: missing 'workdir' [ 1579.287322][T16589] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1579.517836][T16589] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1580.010281][T11005] EXT4-fs (loop9): unmounting filesystem. [ 1580.109990][T19056] loop9: detected capacity change from 0 to 128 [ 1580.165747][T19056] EXT4-fs (loop9): mounted filesystem without journal. Quota mode: none. [ 1580.175631][T19056] ext4 filesystem being mounted at /374/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 1580.453239][T11005] EXT4-fs (loop9): unmounting filesystem. [ 1580.539921][T19062] loop9: detected capacity change from 0 to 128 [ 1580.567380][T19062] EXT4-fs (loop9): mounted filesystem without journal. Quota mode: none. [ 1580.587298][T19062] ext4 filesystem being mounted at /375/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 1580.636026][T19062] syz.9.3250[19062] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 1580.636175][T19062] syz.9.3250[19062] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 1580.731177][T11005] EXT4-fs (loop9): unmounting filesystem. [ 1580.846992][T16589] bond0 (unregistering): Released all slaves [ 1581.441857][T16589] team0 (unregistering): Port device team_slave_1 removed [ 1582.223826][T16589] team0 (unregistering): Port device team_slave_0 removed [ 1582.311775][T16589] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1582.439607][T16589] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1583.418760][T16589] bond0 (unregistering): Released all slaves [ 1583.870576][T18796] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 1583.877386][T19072] capability: warning: `syz.7.3252' uses deprecated v2 capabilities in a way that may be insecure [ 1583.918891][T18621] udevd[18621]: inotify_add_watch(7, /dev/loop7p9, 10) failed: No such file or directory [ 1584.072793][T18796] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 1584.106470][T18806] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 1584.172449][T18806] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 1584.182416][T18796] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 1584.194358][T18806] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 1584.405714][T18796] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 1584.651476][T18806] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 1586.185863][T18806] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1586.374911][T18796] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1586.430390][T11119] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 1586.446905][T11119] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 1586.502207][T18806] 8021q: adding VLAN 0 to HW filter on device team0 [ 1586.537028][T11119] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 1586.561443][T11119] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 1586.589960][T11119] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 1586.611792][T11119] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 1586.641485][T11119] bridge0: port 1(bridge_slave_0) entered blocking state [ 1586.648647][T11119] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1586.703731][T18796] 8021q: adding VLAN 0 to HW filter on device team0 [ 1586.721945][T11119] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 1586.753844][ T2894] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 1586.773201][ T2894] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 1586.795695][T19121] loop7: detected capacity change from 0 to 128 [ 1586.829331][ T2894] bridge0: port 2(bridge_slave_1) entered blocking state [ 1586.836625][ T2894] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1586.895301][T19121] EXT4-fs (loop7): mounted filesystem without journal. Quota mode: none. [ 1586.905628][ T2894] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 1586.948126][T19121] ext4 filesystem being mounted at /513/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 1586.988668][ T2894] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 1587.063800][ T2894] bridge0: port 1(bridge_slave_0) entered blocking state [ 1587.071006][ T2894] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1587.132256][ T2894] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 1587.204214][T19121] syz.7.3259[19121] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 1587.204326][T19121] syz.7.3259[19121] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 1587.381846][T18348] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 1587.475700][T18348] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 1587.550792][T11119] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 1587.568338][T11119] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 1587.597250][T11119] bridge0: port 2(bridge_slave_1) entered blocking state [ 1587.604478][T11119] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1587.607960][ T8677] EXT4-fs (loop7): unmounting filesystem. [ 1587.652743][T11119] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 1587.687191][T11119] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 1587.862759][T11119] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 1587.943374][T11119] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 1588.080297][T18796] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 1588.128419][T18796] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 1588.198668][T11119] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 1588.231247][T11119] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 1588.250225][T19140] loop7: detected capacity change from 0 to 128 [ 1588.262405][T19140] EXT4-fs (loop7): Test dummy encryption mode enabled [ 1588.274680][T11119] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 1588.302710][T19140] EXT4-fs (loop7): mounted filesystem without journal. Quota mode: none. [ 1588.311620][T19140] ext4 filesystem being mounted at /514/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 1588.350708][T11119] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 1588.405173][T11119] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 1588.461393][T11119] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 1588.491753][T11119] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 1588.521631][T11119] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 1588.537409][T11119] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 1588.568028][T11119] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 1588.601335][T11119] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 1588.631758][T11119] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 1588.661244][T11119] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 1588.690877][T11119] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 1588.721354][T11119] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 1588.730030][T11119] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 1588.762846][ T8677] EXT4-fs (loop7): unmounting filesystem. [ 1588.771525][T11119] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 1589.988744][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 1590.009152][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 1590.077219][T18806] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1590.193574][T18796] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1590.269971][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 1590.298561][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 1590.489179][T19178] loop7: detected capacity change from 0 to 512 [ 1590.675808][T19178] [ 1590.678204][T19178] ====================================================== [ 1590.685243][T19178] WARNING: possible circular locking dependency detected [ 1590.692310][T19178] syzkaller #0 Not tainted [ 1590.696744][T19178] ------------------------------------------------------ [ 1590.703782][T19178] syz.7.3264/19178 is trying to acquire lock: [ 1590.709861][T19178] ffff88807d9eeb98 (&sbi->s_writepages_rwsem){++++}-{0:0}, at: ext4_writepages+0x1c0/0x2e50 [ 1590.720070][T19178] [ 1590.720070][T19178] but task is already holding lock: [ 1590.727905][T19178] ffff888075bd5108 (&ei->xattr_sem){++++}-{3:3}, at: __ext4_mark_inode_dirty+0x3fe/0x770 [ 1590.737883][T19178] [ 1590.737883][T19178] which lock already depends on the new lock. [ 1590.737883][T19178] [ 1590.748309][T19178] [ 1590.748309][T19178] the existing dependency chain (in reverse order) is: [ 1590.757360][T19178] [ 1590.757360][T19178] -> #1 (&ei->xattr_sem){++++}-{3:3}: [ 1590.764975][T19178] down_write+0x36/0x60 [ 1590.769792][T19178] ext4_destroy_inline_data+0x24/0xe0 [ 1590.775760][T19178] ext4_writepages+0x5df/0x2e50 [ 1590.781174][T19178] do_writepages+0x3b7/0x610 [ 1590.786393][T19178] __writeback_single_inode+0x156/0x1160 [ 1590.792679][T19178] writeback_sb_inodes+0xad8/0x17d0 [ 1590.798468][T19178] __writeback_inodes_wb+0x12a/0x3f0 [ 1590.804345][T19178] wb_writeback+0x47a/0xd00 [ 1590.809413][T19178] wb_workfn+0xbdd/0xec0 [ 1590.814242][T19178] process_one_work+0x898/0x1160 [ 1590.819800][T19178] worker_thread+0xaa2/0x1250 [ 1590.825039][T19178] kthread+0x29d/0x330 [ 1590.829679][T19178] ret_from_fork+0x1f/0x30 [ 1590.834689][T19178] [ 1590.834689][T19178] -> #0 (&sbi->s_writepages_rwsem){++++}-{0:0}: [ 1590.843169][T19178] __lock_acquire+0x2cf8/0x7c50 [ 1590.848620][T19178] lock_acquire+0x1b4/0x490 [ 1590.853689][T19178] percpu_down_read+0x44/0x1a0 [ 1590.859021][T19178] ext4_writepages+0x1c0/0x2e50 [ 1590.864432][T19178] do_writepages+0x3b7/0x610 [ 1590.869600][T19178] __writeback_single_inode+0x156/0x1160 [ 1590.875804][T19178] writeback_single_inode+0x221/0x8b0 [ 1590.881749][T19178] write_inode_now+0x15d/0x1d0 [ 1590.887082][T19178] iput+0x613/0x980 [ 1590.891478][T19178] ext4_xattr_block_set+0x2736/0x32a0 [ 1590.897512][T19178] ext4_expand_extra_isize_ea+0x109b/0x19b0 [ 1590.903975][T19178] __ext4_expand_extra_isize+0x301/0x3e0 [ 1590.910166][T19178] __ext4_mark_inode_dirty+0x47f/0x770 [ 1590.916206][T19178] ext4_evict_inode+0xa73/0x1100 [ 1590.921713][T19178] evict+0x485/0x870 [ 1590.926178][T19178] ext4_orphan_cleanup+0xbd3/0x1400 [ 1590.931945][T19178] ext4_fill_super+0x7738/0x7cd0 [ 1590.937450][T19178] get_tree_bdev+0x3f1/0x610 [ 1590.942684][T19178] vfs_get_tree+0x88/0x270 [ 1590.947747][T19178] do_new_mount+0x24a/0xa40 [ 1590.952803][T19178] __se_sys_mount+0x2d6/0x3c0 [ 1590.958038][T19178] do_syscall_64+0x4c/0xa0 [ 1590.963093][T19178] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1590.969555][T19178] [ 1590.969555][T19178] other info that might help us debug this: [ 1590.969555][T19178] [ 1590.979838][T19178] Possible unsafe locking scenario: [ 1590.979838][T19178] [ 1590.987321][T19178] CPU0 CPU1 [ 1590.992733][T19178] ---- ---- [ 1590.998123][T19178] lock(&ei->xattr_sem); [ 1591.002495][T19178] lock(&sbi->s_writepages_rwsem); [ 1591.010251][T19178] lock(&ei->xattr_sem); [ 1591.017146][T19178] lock(&sbi->s_writepages_rwsem); [ 1591.022390][T19178] [ 1591.022390][T19178] *** DEADLOCK *** [ 1591.022390][T19178] [ 1591.030566][T19178] 3 locks held by syz.7.3264/19178: [ 1591.035807][T19178] #0: ffff88807449c0e0 (&type->s_umount_key#27/1){+.+.}-{3:3}, at: alloc_super+0x1fa/0x930 [ 1591.045987][T19178] #1: ffff88807449c650 (sb_internal){.+.+}-{0:0}, at: ext4_evict_inode+0x436/0x1100 [ 1591.055547][T19178] #2: ffff888075bd5108 (&ei->xattr_sem){++++}-{3:3}, at: __ext4_mark_inode_dirty+0x3fe/0x770 [ 1591.065888][T19178] [ 1591.065888][T19178] stack backtrace: [ 1591.071928][T19178] CPU: 0 PID: 19178 Comm: syz.7.3264 Not tainted syzkaller #0 [ 1591.079426][T19178] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 1591.089538][T19178] Call Trace: [ 1591.092853][T19178] [ 1591.095835][T19178] dump_stack_lvl+0x168/0x22e [ 1591.100561][T19178] ? load_image+0x3b0/0x3b0 [ 1591.105134][T19178] ? show_regs_print_info+0x12/0x12 [ 1591.110385][T19178] ? print_circular_bug+0x12b/0x1a0 [ 1591.115656][T19178] check_noncircular+0x274/0x310 [ 1591.120644][T19178] ? add_chain_block+0x940/0x940 [ 1591.125627][T19178] ? lockdep_lock+0xdc/0x1e0 [ 1591.130266][T19178] ? __schedule+0x10ba/0x40b0 [ 1591.134997][T19178] ? _find_first_zero_bit+0xcf/0x100 [ 1591.140397][T19178] __lock_acquire+0x2cf8/0x7c50 [ 1591.145303][T19178] ? finish_task_switch+0x265/0x8f0 [ 1591.150619][T19178] ? verify_lock_unused+0x140/0x140 [ 1591.155880][T19178] ? __sched_text_start+0x8/0x8 [ 1591.160785][T19178] ? lock_chain_count+0x20/0x20 [ 1591.165691][T19178] ? mark_lock+0x94/0x320 [ 1591.170087][T19178] lock_acquire+0x1b4/0x490 [ 1591.174648][T19178] ? ext4_writepages+0x1c0/0x2e50 [ 1591.179729][T19178] ? __might_sleep+0xd0/0xd0 [ 1591.184380][T19178] ? read_lock_is_recursive+0x10/0x10 [ 1591.189827][T19178] ? ext4_writepages+0xdf/0x2e50 [ 1591.194810][T19178] ? kasan_check_range+0x7b/0x290 [ 1591.199978][T19178] percpu_down_read+0x44/0x1a0 [ 1591.204796][T19178] ? ext4_writepages+0x1c0/0x2e50 [ 1591.209866][T19178] ext4_writepages+0x1c0/0x2e50 [ 1591.214770][T19178] ? _raw_spin_unlock_irqrestore+0xaa/0x100 [ 1591.220709][T19178] ? _raw_spin_unlock+0x40/0x40 [ 1591.225596][T19178] ? verify_lock_unused+0x140/0x140 [ 1591.230869][T19178] ? mark_lock+0x94/0x320 [ 1591.235247][T19178] ? ext4_read_folio+0x370/0x370 [ 1591.240235][T19178] ? __lock_acquire+0x13c0/0x7c50 [ 1591.245318][T19178] ? __lock_acquire+0x7c50/0x7c50 [ 1591.250402][T19178] ? do_raw_spin_lock+0x11d/0x280 [ 1591.255483][T19178] ? rcu_read_unlock+0x8c/0xa0 [ 1591.260354][T19178] ? do_raw_spin_unlock+0x11d/0x230 [ 1591.265598][T19178] ? ext4_read_folio+0x370/0x370 [ 1591.270568][T19178] do_writepages+0x3b7/0x610 [ 1591.275194][T19178] ? __writepage+0x130/0x130 [ 1591.279843][T19178] ? writeback_single_inode+0x216/0x8b0 [ 1591.285451][T19178] ? __lock_acquire+0x7c50/0x7c50 [ 1591.290522][T19178] ? do_raw_spin_lock+0x11d/0x280 [ 1591.295605][T19178] __writeback_single_inode+0x156/0x1160 [ 1591.301288][T19178] writeback_single_inode+0x221/0x8b0 [ 1591.306702][T19178] ? write_inode_now+0x1d0/0x1d0 [ 1591.311689][T19178] write_inode_now+0x15d/0x1d0 [ 1591.316514][T19178] ? bdi_split_work_to_wbs+0x890/0x890 [ 1591.322024][T19178] ? do_raw_spin_unlock+0x11d/0x230 [ 1591.327272][T19178] iput+0x613/0x980 [ 1591.331125][T19178] ext4_xattr_block_set+0x2736/0x32a0 [ 1591.336537][T19178] ? __might_sleep+0xd0/0xd0 [ 1591.341185][T19178] ? xattr_find_entry+0x12b/0x2f0 [ 1591.346251][T19178] ? ext4_xattr_block_find+0x2b0/0x2b0 [ 1591.351846][T19178] ? ext4_xattr_block_find+0x241/0x2b0 [ 1591.357438][T19178] ext4_expand_extra_isize_ea+0x109b/0x19b0 [ 1591.363400][T19178] __ext4_expand_extra_isize+0x301/0x3e0 [ 1591.369135][T19178] __ext4_mark_inode_dirty+0x47f/0x770 [ 1591.374667][T19178] ext4_evict_inode+0xa73/0x1100 [ 1591.379651][T19178] ? _raw_spin_unlock+0x24/0x40 [ 1591.384548][T19178] ? ext4_inode_is_fast_symlink+0x390/0x390 [ 1591.390491][T19178] ? do_raw_spin_unlock+0x11d/0x230 [ 1591.395749][T19178] ? ext4_inode_is_fast_symlink+0x390/0x390 [ 1591.401703][T19178] evict+0x485/0x870 [ 1591.405637][T19178] ? __lock_acquire+0x7c50/0x7c50 [ 1591.410714][T19178] ? proc_nr_inodes+0x2f0/0x2f0 [ 1591.415601][T19178] ? do_raw_spin_unlock+0x11d/0x230 [ 1591.420852][T19178] ? _raw_spin_unlock+0x24/0x40 [ 1591.425749][T19178] ? iput+0x768/0x980 [ 1591.429769][T19178] ext4_orphan_cleanup+0xbd3/0x1400 [ 1591.435028][T19178] ? ext4_orphan_del+0xb90/0xb90 [ 1591.440018][T19178] ? errseq_check_and_advance+0x62/0x120 [ 1591.445698][T19178] ext4_fill_super+0x7738/0x7cd0 [ 1591.450687][T19178] ? ext4_parse_test_dummy_encryption+0xb0/0xb0 [ 1591.456970][T19178] ? snprintf+0xd7/0x120 [ 1591.461281][T19178] ? preempt_count_add+0x8d/0x190 [ 1591.466353][T19178] ? set_blocksize+0x1d0/0x470 [ 1591.471228][T19178] ? sb_set_blocksize+0xa5/0xe0 [ 1591.476124][T19178] get_tree_bdev+0x3f1/0x610 [ 1591.480759][T19178] ? ext4_parse_test_dummy_encryption+0xb0/0xb0 [ 1591.487038][T19178] vfs_get_tree+0x88/0x270 [ 1591.491497][T19178] do_new_mount+0x24a/0xa40 [ 1591.496054][T19178] __se_sys_mount+0x2d6/0x3c0 [ 1591.500783][T19178] ? __x64_sys_mount+0xc0/0xc0 [ 1591.505580][T19178] ? lockdep_hardirqs_on+0x94/0x140 [ 1591.510810][T19178] ? __x64_sys_mount+0x1c/0xc0 [ 1591.515700][T19178] do_syscall_64+0x4c/0xa0 [ 1591.520166][T19178] ? clear_bhb_loop+0x60/0xb0 [ 1591.524946][T19178] ? clear_bhb_loop+0x60/0xb0 [ 1591.529669][T19178] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1591.535615][T19178] RIP: 0033:0x7fd2c6390eea [ 1591.540086][T19178] Code: d8 64 89 02 48 c7 c0 ff ff ff ff eb a6 e8 de 1a 00 00 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 49 89 ca b8 a5 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1591.559744][T19178] RSP: 002b:00007fd2c7285e68 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 1591.568205][T19178] RAX: ffffffffffffffda RBX: 00007fd2c7285ef0 RCX: 00007fd2c6390eea [ 1591.576227][T19178] RDX: 0000200000000180 RSI: 00002000000001c0 RDI: 00007fd2c7285eb0 [ 1591.584244][T19178] RBP: 0000200000000180 R08: 00007fd2c7285ef0 R09: 0000000000800718 [ 1591.592270][T19178] R10: 0000000000800718 R11: 0000000000000246 R12: 00002000000001c0 [ 1591.600275][T19178] R13: 00007fd2c7285eb0 R14: 000000000000046f R15: 0000200000000480 [ 1591.608302][T19178] [ 1591.655798][T19178] ------------[ cut here ]------------ [ 1591.661457][T19178] EA inode 11 i_nlink=2 [ 1591.669569][T19178] WARNING: CPU: 0 PID: 19178 at fs/ext4/xattr.c:1022 ext4_xattr_inode_update_ref+0x4be/0x520 [ 1591.684294][T19178] Modules linked in: [ 1591.688238][T19178] CPU: 0 PID: 19178 Comm: syz.7.3264 Not tainted syzkaller #0 [ 1591.695777][T19178] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 1591.705925][T19178] RIP: 0010:ext4_xattr_inode_update_ref+0x4be/0x520 [ 1591.712633][T19178] Code: 8d 7d 40 4c 89 f8 48 c1 e8 03 42 80 3c 30 00 74 08 4c 89 ff e8 93 ec 9c ff 49 8b 37 48 c7 c7 40 92 80 8a 89 da e8 72 bd 18 ff <0f> 0b 49 be 00 00 00 00 00 fc ff df 4c 8b 6c 24 10 4c 8b 7c 24 08 [ 1591.732368][T19178] RSP: 0018:ffffc90003d07200 EFLAGS: 00010246 [ 1591.738508][T19178] RAX: 7db669eb7eadca00 RBX: 0000000000000002 RCX: 0000000000080000 [ 1591.746616][T19178] RDX: ffffc900041e9000 RSI: 000000000007ffff RDI: 0000000000080000 [ 1591.754654][T19178] RBP: ffffc90003d072e8 R08: dffffc0000000000 R09: ffffed10171c4f3c [ 1591.762729][T19178] R10: ffffed10171c4f3c R11: 1ffff110171c4f3b R12: ffffc90003d07260 [ 1591.770768][T19178] R13: ffff888075bd7108 R14: dffffc0000000000 R15: ffff888075bd7148 [ 1591.778796][T19178] FS: 00007fd2c72866c0(0000) GS:ffff8880b8e00000(0000) knlGS:0000000000000000 [ 1591.787820][T19178] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 1591.794501][T19178] CR2: 00002000004b2000 CR3: 0000000045951000 CR4: 00000000003506f0 [ 1591.802604][T19178] Call Trace: [ 1591.805926][T19178] [ 1591.808894][T19178] ? ext4_xattr_block_csum+0x500/0x500 [ 1591.814444][T19178] ? ext4_xattr_inode_iget+0x3f0/0x600 [ 1591.819967][T19178] ext4_xattr_set_entry+0xb33/0x1e90 [ 1591.825377][T19178] ext4_xattr_ibody_set+0x250/0x690 [ 1591.830671][T19178] ext4_expand_extra_isize_ea+0x10e5/0x19b0 [ 1591.836643][T19178] __ext4_expand_extra_isize+0x301/0x3e0 [ 1591.842367][T19178] __ext4_mark_inode_dirty+0x47f/0x770 [ 1591.847896][T19178] ext4_evict_inode+0xa73/0x1100 [ 1591.852927][T19178] ? _raw_spin_unlock+0x24/0x40 [ 1591.857832][T19178] ? ext4_inode_is_fast_symlink+0x390/0x390 [ 1591.863822][T19178] ? do_raw_spin_unlock+0x11d/0x230 [ 1591.869108][T19178] ? ext4_inode_is_fast_symlink+0x390/0x390 [ 1591.875097][T19178] evict+0x485/0x870 [ 1591.879058][T19178] ? __lock_acquire+0x7c50/0x7c50 [ 1591.884190][T19178] ? proc_nr_inodes+0x2f0/0x2f0 [ 1591.889103][T19178] ? do_raw_spin_unlock+0x11d/0x230 [ 1591.894416][T19178] ? _raw_spin_unlock+0x24/0x40 [ 1591.899417][T19178] ? iput+0x768/0x980 [ 1591.903496][T19178] ext4_orphan_cleanup+0xbd3/0x1400 [ 1591.908757][T19178] ? ext4_orphan_del+0xb90/0xb90 [ 1591.913796][T19178] ? errseq_check_and_advance+0x62/0x120 [ 1591.919492][T19178] ext4_fill_super+0x7738/0x7cd0 [ 1591.924528][T19178] ? ext4_parse_test_dummy_encryption+0xb0/0xb0 [ 1591.930857][T19178] ? snprintf+0xd7/0x120 [ 1591.935142][T19178] ? preempt_count_add+0x8d/0x190 [ 1591.940221][T19178] ? set_blocksize+0x1d0/0x470 [ 1591.945072][T19178] ? sb_set_blocksize+0xa5/0xe0 [ 1591.949972][T19178] get_tree_bdev+0x3f1/0x610 [ 1591.954643][T19178] ? ext4_parse_test_dummy_encryption+0xb0/0xb0 [ 1591.960968][T19178] vfs_get_tree+0x88/0x270 [ 1591.965439][T19178] do_new_mount+0x24a/0xa40 [ 1591.969988][T19178] __se_sys_mount+0x2d6/0x3c0 [ 1591.974766][T19178] ? __x64_sys_mount+0xc0/0xc0 [ 1591.979583][T19178] ? lockdep_hardirqs_on+0x94/0x140 [ 1591.984869][T19178] ? __x64_sys_mount+0x1c/0xc0 [ 1591.989710][T19178] do_syscall_64+0x4c/0xa0 [ 1591.994215][T19178] ? clear_bhb_loop+0x60/0xb0 [ 1591.998951][T19178] ? clear_bhb_loop+0x60/0xb0 [ 1592.003718][T19178] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1592.009661][T19178] RIP: 0033:0x7fd2c6390eea [ 1592.014154][T19178] Code: d8 64 89 02 48 c7 c0 ff ff ff ff eb a6 e8 de 1a 00 00 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 49 89 ca b8 a5 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1592.033848][T19178] RSP: 002b:00007fd2c7285e68 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 1592.042343][T19178] RAX: ffffffffffffffda RBX: 00007fd2c7285ef0 RCX: 00007fd2c6390eea [ 1592.050360][T19178] RDX: 0000200000000180 RSI: 00002000000001c0 RDI: 00007fd2c7285eb0 [ 1592.058421][T19178] RBP: 0000200000000180 R08: 00007fd2c7285ef0 R09: 0000000000800718 [ 1592.066477][T19178] R10: 0000000000800718 R11: 0000000000000246 R12: 00002000000001c0 [ 1592.074526][T19178] R13: 00007fd2c7285eb0 R14: 000000000000046f R15: 0000200000000480 [ 1592.082609][T19178] [ 1592.085682][T19178] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 1592.093002][T19178] CPU: 0 PID: 19178 Comm: syz.7.3264 Not tainted syzkaller #0 [ 1592.100587][T19178] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 1592.110684][T19178] Call Trace: [ 1592.113991][T19178] [ 1592.116946][T19178] dump_stack_lvl+0x168/0x22e [ 1592.121669][T19178] ? memcpy+0x3c/0x60 [ 1592.125769][T19178] ? show_regs_print_info+0x12/0x12 [ 1592.131016][T19178] ? load_image+0x3b0/0x3b0 [ 1592.135564][T19178] panic+0x2c9/0x710 [ 1592.139485][T19178] ? bpf_jit_dump+0xd0/0xd0 [ 1592.144020][T19178] __warn+0x2f8/0x4f0 [ 1592.148025][T19178] ? ext4_xattr_inode_update_ref+0x4be/0x520 [ 1592.154029][T19178] ? ext4_xattr_inode_update_ref+0x4be/0x520 [ 1592.160033][T19178] report_bug+0x2ba/0x4f0 [ 1592.164470][T19178] ? ext4_xattr_inode_update_ref+0x4be/0x520 [ 1592.170477][T19178] handle_bug+0x3a/0x70 [ 1592.174661][T19178] exc_invalid_op+0x16/0x40 [ 1592.179292][T19178] asm_exc_invalid_op+0x16/0x20 [ 1592.184192][T19178] RIP: 0010:ext4_xattr_inode_update_ref+0x4be/0x520 [ 1592.190852][T19178] Code: 8d 7d 40 4c 89 f8 48 c1 e8 03 42 80 3c 30 00 74 08 4c 89 ff e8 93 ec 9c ff 49 8b 37 48 c7 c7 40 92 80 8a 89 da e8 72 bd 18 ff <0f> 0b 49 be 00 00 00 00 00 fc ff df 4c 8b 6c 24 10 4c 8b 7c 24 08 [ 1592.210524][T19178] RSP: 0018:ffffc90003d07200 EFLAGS: 00010246 [ 1592.216624][T19178] RAX: 7db669eb7eadca00 RBX: 0000000000000002 RCX: 0000000000080000 [ 1592.224623][T19178] RDX: ffffc900041e9000 RSI: 000000000007ffff RDI: 0000000000080000 [ 1592.232626][T19178] RBP: ffffc90003d072e8 R08: dffffc0000000000 R09: ffffed10171c4f3c [ 1592.240621][T19178] R10: ffffed10171c4f3c R11: 1ffff110171c4f3b R12: ffffc90003d07260 [ 1592.248616][T19178] R13: ffff888075bd7108 R14: dffffc0000000000 R15: ffff888075bd7148 [ 1592.256622][T19178] ? ext4_xattr_block_csum+0x500/0x500 [ 1592.262111][T19178] ? ext4_xattr_inode_iget+0x3f0/0x600 [ 1592.267623][T19178] ext4_xattr_set_entry+0xb33/0x1e90 [ 1592.272942][T19178] ext4_xattr_ibody_set+0x250/0x690 [ 1592.278190][T19178] ext4_expand_extra_isize_ea+0x10e5/0x19b0 [ 1592.284140][T19178] __ext4_expand_extra_isize+0x301/0x3e0 [ 1592.289815][T19178] __ext4_mark_inode_dirty+0x47f/0x770 [ 1592.295311][T19178] ext4_evict_inode+0xa73/0x1100 [ 1592.300279][T19178] ? _raw_spin_unlock+0x24/0x40 [ 1592.305155][T19178] ? ext4_inode_is_fast_symlink+0x390/0x390 [ 1592.311080][T19178] ? do_raw_spin_unlock+0x11d/0x230 [ 1592.316309][T19178] ? ext4_inode_is_fast_symlink+0x390/0x390 [ 1592.322229][T19178] evict+0x485/0x870 [ 1592.326152][T19178] ? __lock_acquire+0x7c50/0x7c50 [ 1592.331206][T19178] ? proc_nr_inodes+0x2f0/0x2f0 [ 1592.336083][T19178] ? do_raw_spin_unlock+0x11d/0x230 [ 1592.341309][T19178] ? _raw_spin_unlock+0x24/0x40 [ 1592.346184][T19178] ? iput+0x768/0x980 [ 1592.350189][T19178] ext4_orphan_cleanup+0xbd3/0x1400 [ 1592.355422][T19178] ? ext4_orphan_del+0xb90/0xb90 [ 1592.360386][T19178] ? errseq_check_and_advance+0x62/0x120 [ 1592.366045][T19178] ext4_fill_super+0x7738/0x7cd0 [ 1592.371017][T19178] ? ext4_parse_test_dummy_encryption+0xb0/0xb0 [ 1592.377289][T19178] ? snprintf+0xd7/0x120 [ 1592.381552][T19178] ? preempt_count_add+0x8d/0x190 [ 1592.386599][T19178] ? set_blocksize+0x1d0/0x470 [ 1592.391394][T19178] ? sb_set_blocksize+0xa5/0xe0 [ 1592.396270][T19178] get_tree_bdev+0x3f1/0x610 [ 1592.400888][T19178] ? ext4_parse_test_dummy_encryption+0xb0/0xb0 [ 1592.407170][T19178] vfs_get_tree+0x88/0x270 [ 1592.411612][T19178] do_new_mount+0x24a/0xa40 [ 1592.416150][T19178] __se_sys_mount+0x2d6/0x3c0 [ 1592.420853][T19178] ? __x64_sys_mount+0xc0/0xc0 [ 1592.425647][T19178] ? lockdep_hardirqs_on+0x94/0x140 [ 1592.430871][T19178] ? __x64_sys_mount+0x1c/0xc0 [ 1592.435660][T19178] do_syscall_64+0x4c/0xa0 [ 1592.440104][T19178] ? clear_bhb_loop+0x60/0xb0 [ 1592.444818][T19178] ? clear_bhb_loop+0x60/0xb0 [ 1592.449518][T19178] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1592.455434][T19178] RIP: 0033:0x7fd2c6390eea [ 1592.459870][T19178] Code: d8 64 89 02 48 c7 c0 ff ff ff ff eb a6 e8 de 1a 00 00 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 49 89 ca b8 a5 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1592.479494][T19178] RSP: 002b:00007fd2c7285e68 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 1592.487961][T19178] RAX: ffffffffffffffda RBX: 00007fd2c7285ef0 RCX: 00007fd2c6390eea [ 1592.495953][T19178] RDX: 0000200000000180 RSI: 00002000000001c0 RDI: 00007fd2c7285eb0 [ 1592.503946][T19178] RBP: 0000200000000180 R08: 00007fd2c7285ef0 R09: 0000000000800718 [ 1592.511936][T19178] R10: 0000000000800718 R11: 0000000000000246 R12: 00002000000001c0 [ 1592.519926][T19178] R13: 00007fd2c7285eb0 R14: 000000000000046f R15: 0000200000000480 [ 1592.527926][T19178] [ 1592.531535][T19178] Kernel Offset: disabled [ 1592.535874][T19178] Rebooting in 86400 seconds..