last executing test programs: 23m37.526209418s ago: executing program 32 (id=106): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b702000003000000850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f00000006c0)='sched_switch\x00', r4}, 0x10) socketpair$unix(0x1, 0x5, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0x13, &(0x7f0000000080)=@framed={{0x18, 0x8, 0x0, 0x0, 0xffd0}, [@func={0x85, 0x0, 0x1, 0x0, 0x6}, @map_fd={0x18, 0x0, 0x0}, @generic={0x66, 0x8}, @initr0, @exit, @alu={0x6, 0x0, 0x3, 0xa, 0x0, 0x2}, @printk={@x, {}, {}, {}, {}, {0x5, 0x0, 0xb, 0xa}}]}, &(0x7f0000000000)='GPL\x00', 0x2, 0xff5c, &(0x7f0000000340)=""/222, 0x0, 0x8, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x78) 21m48.320235648s ago: executing program 6 (id=382): r0 = add_key$user(&(0x7f00000002c0), 0x0, &(0x7f0000000280)="85952b177328da", 0x7, 0xfffffffffffffffd) r1 = add_key$user(&(0x7f00000003c0), &(0x7f0000000440), &(0x7f00000000c0), 0xc9, 0xfffffffffffffffd) keyctl$dh_compute(0x17, &(0x7f0000000140)={r0, r1, r0}, 0x0, 0x0, 0x0) 21m47.902560356s ago: executing program 6 (id=386): syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x1) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) syz_genetlink_get_family_id$nl802154(0x0, 0xffffffffffffffff) ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(0xffffffffffffffff, 0x40045532, 0x0) r3 = socket(0x10, 0x3, 0x0) sendmsg$inet(r3, 0x0, 0x0) r4 = socket$kcm(0x10, 0x2, 0x0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r5, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f000000c300)={{0x14}, [@NFT_MSG_NEWRULE={0x70, 0x6, 0xa, 0x409, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x44, 0x4, 0x0, 0x1, [{0x14, 0x1, 0x0, 0x1, @notrack={{0xc}, @val={0x4}}}, {0x2c, 0x1, 0x0, 0x1, @immediate={{0xe}, @val={0x18, 0x2, 0x0, 0x1, [@NFTA_IMMEDIATE_DATA={0xc, 0x2, 0x0, 0x1, [@NFTA_DATA_VALUE={0x5, 0x1, "c4"}]}, @NFTA_IMMEDIATE_DREG={0x8, 0x1, 0x1, 0x0, 0x9}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}, @NFT_MSG_DELRULE={0x20, 0x8, 0xa, 0x5, 0x0, 0x0, {0x2}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14}}, 0xb8}}, 0x0) write$cgroup_subtree(r4, &(0x7f0000000000)=ANY=[@ANYBLOB="2539000020000365f507f62aa6"], 0x33fe0) sendmsg$NL802154_CMD_NEW_SEC_KEY(0xffffffffffffffff, 0x0, 0x0) ioctl$BTRFS_IOC_QUOTA_RESCAN(r1, 0x4040942c, &(0x7f0000000280)={0x0, 0x7fffffffffffffff, [0x9, 0x3, 0x4c, 0x9, 0x101, 0x6]}) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000080)={0x0}, 0x1, 0x0, 0x0, 0x4000}, 0x20000000) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)=@newsa={0x104, 0x10, 0x7, 0x70bd2c, 0x0, {{@in6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @in=@multicast1, 0xffff, 0x0, 0x4e28, 0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0xee00}, {@in=@private=0x81, 0x0, 0x2b}, @in6=@mcast1, {}, {0x0, 0x200000, 0x7}, {}, 0xfffffffd, 0x0, 0xa, 0x0, 0x0, 0x70}, [@coaddr={0x14, 0xe, @in6=@remote}]}, 0x104}, 0x1, 0x0, 0x0, 0x880}, 0x80) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x22) lseek(0xffffffffffffffff, 0x100, 0x0) accept4$nfc_llcp(r0, &(0x7f0000000080), &(0x7f0000000100)=0x60, 0x0) getdents64(0xffffffffffffffff, &(0x7f0000000540)=""/66, 0x42) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r6, 0x0, 0x0) 21m43.52933306s ago: executing program 6 (id=395): bind$inet(0xffffffffffffffff, 0x0, 0x0) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x8, &(0x7f0000000040)=0x4, 0x4) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) sched_setscheduler(0x0, 0x1, 0x0) ioctl$sock_inet_udp_SIOCOUTQ(0xffffffffffffffff, 0x894b, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x2) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$netlink(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)=[{&(0x7f0000000100)=ANY=[@ANYBLOB], 0x18}], 0x1}, 0x0) socket(0x27, 0x400000000080803, 0x4) sendmsg$netlink(0xffffffffffffffff, 0x0, 0x0) 21m41.708341124s ago: executing program 6 (id=402): prlimit64(0x0, 0xe, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) creat(0x0, 0x20) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f0000000180), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000300)={0x26, 'hash\x00', 0x0, 0x0, 'wp384\x00'}, 0x58) r2 = accept4(r1, 0x0, 0x0, 0x0) recvmmsg$unix(r2, &(0x7f0000003700)=[{{0x0, 0x700, 0x0, 0x0, 0x0, 0x500}}], 0x600, 0x0, 0x0) 21m25.921074973s ago: executing program 33 (id=402): prlimit64(0x0, 0xe, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) creat(0x0, 0x20) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f0000000180), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000300)={0x26, 'hash\x00', 0x0, 0x0, 'wp384\x00'}, 0x58) r2 = accept4(r1, 0x0, 0x0, 0x0) recvmmsg$unix(r2, &(0x7f0000003700)=[{{0x0, 0x700, 0x0, 0x0, 0x0, 0x500}}], 0x600, 0x0, 0x0) 20m40.289120143s ago: executing program 4 (id=532): r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000100)=ANY=[@ANYBLOB="120100004f92b90857152077ebb7000000010902120001000000000904"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000001740)={0x84, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000001600)={0x40, 0x19, 0x2, "b3f0"}, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000600)={0x2c, &(0x7f0000000500)={0x40, 0x30, 0x1, '*'}, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) 20m34.81872173s ago: executing program 4 (id=542): mkdir(&(0x7f0000000040)='./file0\x00', 0x0) mkdir(&(0x7f0000000400)='./file1\x00', 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000004280)='./file0\x00', 0x0, 0x0) symlinkat(&(0x7f0000000140)='./file0/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa/file0\x00', r0, &(0x7f0000000000)='./file0\x00') mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000340), 0x0, &(0x7f0000000440)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}, {@userxattr}]}) chdir(&(0x7f0000000140)='./bus\x00') link(&(0x7f0000000280)='./file0\x00', &(0x7f00000002c0)='./bus\x00') mount$overlay(0x0, 0x0, 0x0, 0x0, 0x0) 20m33.678044868s ago: executing program 4 (id=546): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0xfffffffe}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz1\x00', 0x1ff) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) read$FUSE(0xffffffffffffffff, &(0x7f0000000440)={0x2020}, 0x2020) 20m31.454835104s ago: executing program 4 (id=550): prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) iopl(0x3) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000009c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f00000002c0)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = socket(0x11, 0x3, 0x0) setsockopt$SO_BINDTODEVICE(r3, 0x1, 0x19, &(0x7f0000001040)='bond0\x00', 0x10) setsockopt$SO_TIMESTAMPING(r3, 0x1, 0x25, &(0x7f0000000040)=0xd8be, 0x4) io_setup(0x1, &(0x7f00000004c0)) 20m27.650280628s ago: executing program 4 (id=557): r0 = add_key$user(&(0x7f00000002c0), &(0x7f0000000180)={'syz', 0x2}, &(0x7f0000000280)="85952b177328", 0x6, 0xfffffffffffffffd) r1 = add_key$user(&(0x7f00000003c0), &(0x7f0000000440), &(0x7f00000000c0), 0xc9, 0xfffffffffffffffd) keyctl$dh_compute(0x17, &(0x7f0000000140)={r0, r1, r0}, 0x0, 0x0, 0x0) 20m26.516995997s ago: executing program 4 (id=560): syz_init_net_socket$x25(0x9, 0x5, 0x0) socket(0x2, 0x3, 0x100000001) sendmsg$BATADV_CMD_GET_BLA_CLAIM(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000000c0)=ANY=[@ANYBLOB="1400"], 0x14}}, 0x0) connect$inet(0xffffffffffffffff, &(0x7f0000000200)={0x2, 0x0, @remote}, 0x10) r0 = openat$vimc0(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) r1 = fsopen(&(0x7f0000000340)='hfs\x00', 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8d}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x3) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, 0x0) r3 = syz_open_dev$tty20(0xc, 0x4, 0x1) pread64(r3, 0x0, 0x0, 0x5c2fbf97) r4 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f00000002c0)={'bridge_slave_0\x00', 0x0}) r6 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000080)=ANY=[@ANYBLOB="440000001300a7cc4a372eaf541d002007000000", @ANYRES32=r5, @ANYBLOB="00000000100000001c001a80080002802d00ff0008000200", @ANYBLOB="35874207"], 0x44}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000006c0)=ANY=[@ANYBLOB="280000001000030400"/20, @ANYRES32=0x0, @ANYBLOB="00000008000500", @ANYRES32=0x0, @ANYBLOB], 0x28}, 0x1, 0xba01, 0x0, 0x4008804}, 0x0) ioctl$VIDIOC_S_CROP(r0, 0x4014563c, 0x0) getsockopt$inet_mptcp_buf(0xffffffffffffffff, 0x11c, 0x2, &(0x7f00000000c0)=""/63, &(0x7f0000000100)=0x3f) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r8, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000008c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r8, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYRESOCT=r7, @ANYRESOCT=0x0, @ANYRES16=r1], 0x68}}, 0x40040) r9 = socket$kcm(0x2, 0x3, 0x84) sendmsg$inet(r9, &(0x7f0000001000)={&(0x7f0000000000)={0x2, 0x0, @empty}, 0x10, &(0x7f0000000100)=[{&(0x7f0000001040)="5346f7f875528ef24043c68e04", 0xd}], 0x1}, 0x40440c0) 20m12.430972288s ago: executing program 34 (id=553): r0 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r0, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10) open_by_handle_at(0xffffffffffffffff, &(0x7f0000000080)=ANY=[], 0x8001) r1 = socket$inet6_dccp(0xa, 0x6, 0x0) setsockopt$inet6_int(r1, 0x29, 0x8, &(0x7f0000000040)=0x4, 0x4) write$uinput_user_dev(0xffffffffffffffff, &(0x7f00000003c0)={'syz0\x00', {0x0, 0x0, 0x0, 0x400}, 0x4a, [0x0, 0x0, 0x12, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x85b, 0x2, 0x8, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x8, 0x0, 0x0, 0xfffffffa, 0x711, 0x0, 0xfffffff3, 0x0, 0x0, 0x6, 0x0, 0x2, 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x4000000, 0x10200], [0x1, 0xffffffff, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x80000000, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200ead9, 0x0, 0x0, 0x0, 0x0, 0x10, 0x6, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x3, 0x0, 0x0, 0x0, 0x0, 0x4000000, 0x0, 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3ff, 0x0, 0x0, 0x29], [0x40, 0x0, 0x0, 0x0, 0x0, 0x6e3a, 0x0, 0x4, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x1ff, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x4dcd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x20000000, 0x0, 0x0, 0x0, 0x0, 0x2000000, 0x0, 0x0, 0x0, 0x5, 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0x7], [0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0xee, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, 0xff, 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x6, 0x0, 0xfffffffe, 0x84b, 0x0, 0x0, 0x4000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0xfffffe1b, 0x4, 0x0, 0x7, 0xfffffffd, 0x8000]}, 0x45c) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x1, 0x0) ioctl$sock_inet_udp_SIOCOUTQ(0xffffffffffffffff, 0x894b, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x2) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) fspick(0xffffffffffffffff, &(0x7f0000000180)='./file0\x00', 0x0) ioctl$sock_SIOCGIFVLAN_DEL_VLAN_CMD(r1, 0x8982, &(0x7f0000000000)={0x1, 'vlan0\x00', {}, 0x4}) socket(0x27, 0x400000000080803, 0x4) 20m11.092952482s ago: executing program 35 (id=560): syz_init_net_socket$x25(0x9, 0x5, 0x0) socket(0x2, 0x3, 0x100000001) sendmsg$BATADV_CMD_GET_BLA_CLAIM(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000000c0)=ANY=[@ANYBLOB="1400"], 0x14}}, 0x0) connect$inet(0xffffffffffffffff, &(0x7f0000000200)={0x2, 0x0, @remote}, 0x10) r0 = openat$vimc0(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) r1 = fsopen(&(0x7f0000000340)='hfs\x00', 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8d}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x3) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, 0x0) r3 = syz_open_dev$tty20(0xc, 0x4, 0x1) pread64(r3, 0x0, 0x0, 0x5c2fbf97) r4 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f00000002c0)={'bridge_slave_0\x00', 0x0}) r6 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000080)=ANY=[@ANYBLOB="440000001300a7cc4a372eaf541d002007000000", @ANYRES32=r5, @ANYBLOB="00000000100000001c001a80080002802d00ff0008000200", @ANYBLOB="35874207"], 0x44}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000006c0)=ANY=[@ANYBLOB="280000001000030400"/20, @ANYRES32=0x0, @ANYBLOB="00000008000500", @ANYRES32=0x0, @ANYBLOB], 0x28}, 0x1, 0xba01, 0x0, 0x4008804}, 0x0) ioctl$VIDIOC_S_CROP(r0, 0x4014563c, 0x0) getsockopt$inet_mptcp_buf(0xffffffffffffffff, 0x11c, 0x2, &(0x7f00000000c0)=""/63, &(0x7f0000000100)=0x3f) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r8, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000008c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r8, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYRESOCT=r7, @ANYRESOCT=0x0, @ANYRES16=r1], 0x68}}, 0x40040) r9 = socket$kcm(0x2, 0x3, 0x84) sendmsg$inet(r9, &(0x7f0000001000)={&(0x7f0000000000)={0x2, 0x0, @empty}, 0x10, &(0x7f0000000100)=[{&(0x7f0000001040)="5346f7f875528ef24043c68e04", 0xd}], 0x1}, 0x40440c0) 17m11.399482452s ago: executing program 9 (id=579): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000002000000b7030000e8ffffff850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000002c0)={0x48, 0x2, 0x6, 0x3, 0x0, 0x0, {0x5}, [@IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_TYPENAME={0xd, 0x3, 'hash:net\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_REVISION={0x5}]}, 0x48}}, 0x0) 17m9.723296651s ago: executing program 9 (id=940): bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x18, 0x4, &(0x7f00000003c0)=ANY=[@ANYBLOB="b4000000000b00007910000000000000c310000401000000950074000000000031fb0d3a42319fa204399d17d34e075fdcda533ab1aa71ab1d764152e63925789381db3fe455e8dadc7dcf81189517730bed5d8036168bd2e27cc611027d"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) socket(0x1e, 0x1, 0x0) syz_mount_image$nilfs2(&(0x7f0000000140), &(0x7f0000000000)='./file0\x00', 0x1080c, &(0x7f0000000640)=ANY=[], 0x1, 0xa8b, &(0x7f0000001400)="$eJzs3UuMHEfdAPCe3Z21HTufx/lsYpyQ2ASSCMhuvGvMw4I4ii9YMeIWKeJiOU6wcAzCkSCRpdg+ccORZW6IhzjlEgFCIhdk5cQlErHEJafAgQOWkSxxgAR70M5Wzc78PZOe8T56Z+f3k3pququmq7q3u7dfVVUAY2ui9VlvfV55+/KRfzz69y0L359qp2i0Pqc6xhZS19L4VJjfB5OL4a2b5070CmvFXOszj1/q+O3WoijOF3uLq0Wj2HPl2hvvzj177MLRi/vee/PQ9VVYdAAAGDvfunrowK6//vmBHR++9dDhYlN7ej4/b6Txbem8/3A68V8Ipmr5+mHpeqDWMXSaDumm0jAR0k32SFd0pKvndJu7fxfznw7zrfdJt6kk/8mOaZ3TY7lhFOXtuFHUJma6xicmZmYWr8mL1nX9dG3mzKnTL56tqKDAivvXw0VR7DUYxmSo5+/N7e2doOoyVTh0rAWASsXnhXc4H+8sLE97blOD5X/j6Ynev+9WX8kyMj7WevuXf5x/dznWOv+y5f/1hVVefsbK4FvT5lUtx0rLy5X3o21pPD5HiO8vDXv8yfObDPMb9ASg33OEUXm+0K+ck2tcjrvVr/xxu9iovpbCvB6+HuI795/4Nx2VvzHQ27/X3f3/LUuFq7wsBsPGHppVHnyAapVc1sf35ppJjo/v9cX4TSXxm0vit5TE31MSv7UkHsbZ7175SXGptnSdH6/pb90819pZBr0flu+z3ZvC/xuyPPF+5LD34+J7v8Nabv7xfWJYz/5w/LmTX37h+WuL7//X2tv/7bS9703jjbRvXU0J8v3CeF+9/e5/ozufiT7p7gvlubdH+tb3nd3pajuX5lN0HGfuKMfu7t9t75fuwe50jZBuSxri6VI8P7kn/C6ff+Tjal5fU2F562E5pkM58nFlRwpH62kM61XeHvu9/5+3z91FvfbiqdMnn0zjeTv902R908L0/WtcbmD5Bq3/s7vorv+zrT29PtF5XNi+NL3WeVxohOlzfabPp/H8f+47k1ta02dOfO/0Cyu98DDmzr762nePnz598ge++DJ6X+rroxgb8UvVRyZgtc2+8vL3Z8+++toTp14+/tLJl06emT94cH5u7uBX5g/Mts7rZzvP7oGNZOmfftUlAQAAAAAAAAAAAAb1w6NHrv3lnS+9v1j/f6n+X67/n9/8zfX/fxzq/8d68rkefK4HuKNHfCtNaGB1OqSrp+H/Q3l3hnx2hd99IoXtfvxS/f+cXWzXNZfn/jA9tt+b04XmBO5oL2U6tEES+wv8dAovpvBXBVSo9rPek1NY1r513tZz+xTapRhN+e+W2zPJ7Zjk+t/92nXKx/8dvWf7+kqXk5W1FtUJq15GoLd/rrv2v1dlWGrws/KydFwxDJL+9YrKOV31ehrP4Vaz2VzL/JrNj+vFQ19TwNqpuv/PfN8zh2f++I3NC0NOduPp7uNlbL8UlqPq/i8ryz/fWBzX5R8w/5Xu/7Pd/93Ax7/QY17j7vL9z8+vv9+RbbGnb/6biq784/LndqB3Dpf/hyn/vDSPFf3y717+5i9D/vGB0IA+CvnfM2D+cfkvD5txyvC/Kf+82h5/ZND8F2dQm+guR7xvnJ//xfvG2a2w/Lltz2GX/247aryd8odxNir9zA6rq//fC8217/93mT0MxfcwvpjG84Ewv+cQ+zsZtvz5/Yr8f2BXmH+t5P+b/n9H21dTWLY/5P5/8/bY6DE+0TFe77FuN+qxBkbVByv2/K/jjbl18BzFMD5DzTZ310Oz2az0IZ8njNWqev1XfZ1Qdf5Vr/8ysf/feA4f+/+N8bH/3xgf+/+N8a37ih8tddob11fs/zfGx/5/Y/z9Id/YP/DukvhPlsTvKYl/oCT+wZL4T5XE7yuJf6gk/uGS+PtK4h8pif9M+IvH+M+W/P7RkvjHPz5+/kclv9/ocn2UcV1+GGexfp79H8ZHfv7Tb//fWRIPjK6fvrX/med/++3GYv3/6fb9kPwc73Aar6dr53i9FO+fTKa4d9L430L8er/fAeMktp8R/78/VhIPjK78npf9G8ZQrXeLPYO2W9XvPJ/R8rkUfj6FX0jhEymcSeFsCvencG6NysfqeOY3vz90qbZ0vb89xA/6PnmsDxTbiZofsDzx/sCw77PHdvyGtdz877I6GAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQGUmWp8HDuyuFcWVty8fee7YqdmFKU+1UzRan1MdY/X274riyRROpvAX6cutm+dOdIa3U1gr5opaUWtPL755o53T1qIozhd7i6tFo9hz5dob7849e+zC0Yv73nvz0PXVWwMAAACw8f0vAAD//3fOHG0=") r0 = socket$inet_tcp(0x2, 0x1, 0x0) sched_setaffinity(0x0, 0x0, 0x0) syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./bus\x00', 0x1010000, &(0x7f00000002c0)={[{@utf8}, {@iocharset={'iocharset', 0x3d, 'cp932'}}, {@uni_xlate}, {@iocharset={'iocharset', 0x3d, 'cp1250'}}, {@utf8no}, {@utf8}, {@utf8no}, {@fat=@flush}, {@uni_xlateno}, {@uni_xlate}, {@utf8no}, {@fat=@codepage={'codepage', 0x3d, '862'}}, {@utf8no}, {@shortname_lower}, {@iocharset={'iocharset', 0x3d, 'cp852'}}, {@iocharset={'iocharset', 0x3d, 'koi8-ru'}}, {@numtail}]}, 0x1, 0x37c, &(0x7f00000005c0)="$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") r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) open_by_handle_at(r1, &(0x7f0000000100)=@FILEID_INO32_GEN_PARENT={0x10, 0x2, {{0x1, 0x1}, 0x4, 0x5b47}}, 0x454680) preadv(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) tee(0xffffffffffffffff, 0xffffffffffffffff, 0xfffffffffffffc01, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_emit_vhci(0x0, 0xf) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) mount(0x0, &(0x7f00000001c0)='./file0\x00', &(0x7f0000000200)='nfs\x00', 0x1011800, 0x0) setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x40, &(0x7f0000000e40)=@mangle={'mangle\x00', 0x44, 0x6, 0x520, 0x98, 0x98, 0x3b8, 0x98, 0x188, 0x488, 0x488, 0x488, 0x488, 0x488, 0x6, 0x0, {[{{@ip={@broadcast, @multicast1=0xe0007600, 0x0, 0x0, 'ip6gre0\x00', 'ip6gre0\x00', {}, {0xc93f35ddc4ae1e35}}, 0x0, 0x70, 0x98}, @inet=@DSCP={0x28}}, {{@ip={@initdev={0xac, 0x1e, 0x0, 0x0}, @local, 0x0, 0x0, 'batadv_slave_1\x00', 'veth1_virt_wifi\x00', {}, {}, 0x11}, 0x0, 0xc0, 0xf0, 0x0, {}, [@inet=@rpfilter={{0x28}, {0xf}}, @inet=@rpfilter={{0x28}}]}, @TPROXY={0x30, 'TPROXY\x00', 0x0, {0x0, 0x0, @local}}}, {{@ip={@broadcast, @multicast2, 0x0, 0x0, 'vlan1\x00', 'nr0\x00'}, 0x0, 0x70, 0x98}, @unspec=@CHECKSUM={0x28}}, {{@ip={@dev={0xac, 0x14, 0x14, 0xa}, @empty, 0x0, 0x0, 'syzkaller0\x00', 'veth1_to_team\x00'}, 0x0, 0x70, 0x198}, @common=@unspec=@SECMARK={0x128, 'SECMARK\x00', 0x0, {0x1, 0x0, 'system_u:object_r:dbusd_etc_t:s0\x00'}}}, {{@ip={@broadcast, @dev={0xac, 0x14, 0x14, 0x19}, 0x0, 0x0, '\x00', 'batadv_slave_1\x00'}, 0x0, 0xa0, 0xd0, 0x0, {}, [@common=@unspec=@mac={{0x30}, {@multicast}}]}, @TPROXY={0x30, 'TPROXY\x00', 0x0, {0x0, 0x0, @loopback}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x580) ioctl$SG_SET_KEEP_ORPHAN(0xffffffffffffffff, 0x2287, &(0x7f0000000080)=0x400) chdir(&(0x7f0000000100)='./file0\x00') openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x0, 0x20) syz_mount_image$squashfs(&(0x7f00000001c0), &(0x7f0000000200)='./file0\x00', 0x0, &(0x7f0000000240), 0x1, 0x1a2, &(0x7f0000000280)="$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") 17m3.895271306s ago: executing program 9 (id=955): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff000000000200000009000100"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f000000c300)={{0x14}, [@NFT_MSG_NEWRULE={0x70, 0x6, 0xa, 0x409, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x44, 0x4, 0x0, 0x1, [{0x14, 0x1, 0x0, 0x1, @notrack={{0xc}, @val={0x4}}}, {0x2c, 0x1, 0x0, 0x1, @immediate={{0xe}, @val={0x18, 0x2, 0x0, 0x1, [@NFTA_IMMEDIATE_DATA={0xc, 0x2, 0x0, 0x1, [@NFTA_DATA_VALUE={0x5, 0x1, "c4"}]}, @NFTA_IMMEDIATE_DREG={0x8, 0x1, 0x1, 0x0, 0x9}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}, @NFT_MSG_DELRULE={0x14, 0x8, 0xa, 0x5, 0x0, 0x0, {0x2}}], {0x14}}, 0xac}}, 0x0) 17m3.608788225s ago: executing program 9 (id=956): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x6) writev(0xffffffffffffffff, &(0x7f0000000000)=[{&(0x7f0000000080)}], 0x1) syz_mount_image$f2fs(&(0x7f0000000000), &(0x7f0000010280)='./mnt\x00', 0x0, &(0x7f0000000900)=ANY=[@ANYBLOB="616c6c6f635f6d6f64653d64656661756c742c646174615f666c7573682c6a71666d743d7666736f6c642c00002034602112c750a20ba52e24e334f7f2dd7edb454807dc55812ccca8eebadd56c635c121dc7f114dfe3c2864d6e716a6565f06df01c30f9662b2a011914af772d568f5d27fd7ebbee4ae9ac48612062859afa9146aa236", @ANYRES16], 0x1, 0x1022f, &(0x7f00000102c0)="$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") r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='blkio.bfq.avg_queue_size\x00', 0x275a, 0x0) ioctl$F2FS_IOC_RESIZE_FS(r0, 0xc080661a, &(0x7f0000000080)=0x2) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file2\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0xffffffffffffff2b, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000003c0)=ANY=[@ANYBLOB="440000001a000100000000000000000081808000000000000000004814000100fc00000000000000000000000000000314000200"], 0x44}, 0x1, 0x0, 0x0, 0xc1}, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x9) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000180)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './bus'}}]}) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01030000000000000000010000000900010073797a300000000040000000030a01020000000000000000010000000900030073797a32000000001400048008000240326565a708000140000000000900010073797a300000000048000000060a010400000000000000000100000008000b40000000000900010073797a3000000000200004801c0001800b00010072656a65637400000c000280080001400000000114"], 0xd0}}, 0x0) 16m59.182164914s ago: executing program 9 (id=962): syz_init_net_socket$x25(0x9, 0x5, 0x0) socket(0x2, 0x3, 0x100000001) sendmsg$BATADV_CMD_GET_BLA_CLAIM(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000000c0)=ANY=[@ANYBLOB="1400"], 0x14}}, 0x0) r0 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r0, &(0x7f0000000200)={0x2, 0x0, @remote}, 0x10) r1 = openat$vimc0(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) r2 = fsopen(&(0x7f0000000340)='hfs\x00', 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x3) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, 0x0) r4 = syz_open_dev$tty20(0xc, 0x4, 0x1) pread64(r4, 0x0, 0x0, 0x5c2fbf97) r5 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f00000002c0)={'bridge_slave_0\x00', 0x0}) r7 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route(r7, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000080)=ANY=[@ANYBLOB="440000001300a7cc4a372eaf541d002007000000", @ANYRES32=r6, @ANYBLOB="00000000100000001c001a80080002802d00ff0008000200", @ANYBLOB="35874207"], 0x44}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000006c0)=ANY=[@ANYBLOB="280000001000030400"/20, @ANYRES32=0x0, @ANYBLOB="00000008000500", @ANYRES32=0x0, @ANYBLOB], 0x28}, 0x1, 0xba01, 0x0, 0x4008804}, 0x0) ioctl$VIDIOC_S_CROP(r1, 0x4014563c, 0x0) getsockopt$inet_mptcp_buf(r0, 0x11c, 0x2, &(0x7f00000000c0)=""/63, &(0x7f0000000100)=0x3f) r9 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r9, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000008c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r9, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYRESOCT=r8, @ANYRESOCT=0x0, @ANYRES16=r2], 0x68}}, 0x40040) r10 = socket$kcm(0x2, 0x3, 0x84) sendmsg$inet(r10, &(0x7f0000001000)={&(0x7f0000000000)={0x2, 0x0, @empty}, 0x10, &(0x7f0000000100)=[{&(0x7f0000001040)="5346f7f875528ef24043c68e04", 0xd}], 0x1}, 0x40440c0) 16m43.794253271s ago: executing program 36 (id=962): syz_init_net_socket$x25(0x9, 0x5, 0x0) socket(0x2, 0x3, 0x100000001) sendmsg$BATADV_CMD_GET_BLA_CLAIM(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000000c0)=ANY=[@ANYBLOB="1400"], 0x14}}, 0x0) r0 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r0, &(0x7f0000000200)={0x2, 0x0, @remote}, 0x10) r1 = openat$vimc0(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) r2 = fsopen(&(0x7f0000000340)='hfs\x00', 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x3) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, 0x0) r4 = syz_open_dev$tty20(0xc, 0x4, 0x1) pread64(r4, 0x0, 0x0, 0x5c2fbf97) r5 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f00000002c0)={'bridge_slave_0\x00', 0x0}) r7 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route(r7, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000080)=ANY=[@ANYBLOB="440000001300a7cc4a372eaf541d002007000000", @ANYRES32=r6, @ANYBLOB="00000000100000001c001a80080002802d00ff0008000200", @ANYBLOB="35874207"], 0x44}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000006c0)=ANY=[@ANYBLOB="280000001000030400"/20, @ANYRES32=0x0, @ANYBLOB="00000008000500", @ANYRES32=0x0, @ANYBLOB], 0x28}, 0x1, 0xba01, 0x0, 0x4008804}, 0x0) ioctl$VIDIOC_S_CROP(r1, 0x4014563c, 0x0) getsockopt$inet_mptcp_buf(r0, 0x11c, 0x2, &(0x7f00000000c0)=""/63, &(0x7f0000000100)=0x3f) r9 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r9, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000008c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r9, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYRESOCT=r8, @ANYRESOCT=0x0, @ANYRES16=r2], 0x68}}, 0x40040) r10 = socket$kcm(0x2, 0x3, 0x84) sendmsg$inet(r10, &(0x7f0000001000)={&(0x7f0000000000)={0x2, 0x0, @empty}, 0x10, &(0x7f0000000100)=[{&(0x7f0000001040)="5346f7f875528ef24043c68e04", 0xd}], 0x1}, 0x40440c0) 9m48.146685331s ago: executing program 5 (id=1815): bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000002d00)=ANY=[@ANYRES32, @ANYRES32, @ANYBLOB='+\x00\x00\x00', @ANYRES32=0x0, @ANYBLOB="a3"], 0x20) 9m47.990381971s ago: executing program 5 (id=1816): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000040)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB], &(0x7f0000000180)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xe, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) syz_open_dev$rtc(&(0x7f0000000400), 0x7, 0x0) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) r4 = socket$tipc(0x1e, 0x5, 0x0) setsockopt$TIPC_GROUP_JOIN(r4, 0x10f, 0x87, &(0x7f0000000100)={0x43, 0x0, 0x3, 0x3}, 0x10) getsockopt$TIPC_GROUP_JOIN(r4, 0x10f, 0x87, &(0x7f00000000c0), &(0x7f0000000140)=0x4) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_mount_image$fuse(&(0x7f0000002040), &(0x7f0000000000)='./file0\x00', 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB='fd=', @ANYRESHEX, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0, @ANYBLOB=',default_permissions'], 0x0, 0x0, 0x0) mount$9p_tcp(&(0x7f0000000440), &(0x7f0000000480)='./file0\x00', &(0x7f00000004c0), 0x204000, &(0x7f0000000500)={'trans=tcp,', {'port', 0x3d, 0x4e21}, 0x2c, {[{@version_u}, {@posixacl}, {@debug={'debug', 0x3d, 0xce7}}, {@ignoreqv}], [{@rootcontext={'rootcontext', 0x3d, 'user_u'}}, {@smackfstransmute={'smackfstransmute', 0x3d, '\x7f,}/\\\\\\'}}]}}) 9m46.504657575s ago: executing program 5 (id=1819): socket$inet_mptcp(0x2, 0x1, 0x106) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x3, 0x0, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) syz_open_procfs(0x0, 0x0) syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) r3 = syz_open_dev$dri(0x0, 0x328d, 0x0) r4 = syz_open_dev$dri(&(0x7f0000000300), 0x40100001, 0x189002) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r4, 0x4010640d, &(0x7f0000000000)={0x3, 0x2}) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r4, 0xc01064b5, &(0x7f0000000140)={&(0x7f0000000100)}) ioctl$DRM_IOCTL_MODE_GETPLANE(r3, 0xc02064b6, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_SETCRTC(r3, 0xc06864a2, &(0x7f0000000580)={&(0x7f0000000040)=[0x0, 0x0], 0x2, r5, r6, 0x3, 0x0, 0xffffffff, 0x804, {0xac7c, 0x1, 0x3, 0x67, 0x42, 0x1, 0x2, 0x5, 0x412f, 0xe154, 0x1000, 0x7f, 0x6, 0xffffffff, "fe1d00003413000000000020b42717e47f00"}}) r7 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r7, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000200)={0x14, 0x2a, 0xb, 0x0, 0x0, {0x9}}, 0x14}}, 0x0) mkdir(&(0x7f0000000180)='./file0\x00', 0x0) 9m45.11339591s ago: executing program 5 (id=1823): r0 = fsopen(&(0x7f00000001c0)='ramfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) r1 = fsmount(r0, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1b, 0xc, &(0x7f0000000580)=ANY=[@ANYRES8=r0, @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c, @void, @value}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000200)=ANY=[@ANYRESHEX=r2], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r3}, 0x10) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="fdffffff010000000c0200000900000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r6 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) r7 = socket(0x10, 0x3, 0x0) sendmsg$nl_generic(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000340)=ANY=[@ANYBLOB="200000005200010000000000000000001c0000000c00010002"], 0x20}}, 0x0) r8 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x0, 0x10, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r8, @ANYBLOB="0000000000000000b702000002000000850000008600000018110000", @ANYRES32=r6, @ANYBLOB="0000000000000000b7080000fcffffff7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0x10, &(0x7f0000000180)=ANY=[], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) setsockopt$sock_attach_bpf(r4, 0x1, 0x32, 0x0, 0x0) sendmsg$unix(r5, &(0x7f00000006c0)={0x0, 0x0, 0x0}, 0x0) fchdir(r1) syz_mount_image$romfs(&(0x7f0000000140), &(0x7f0000000000)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="007a93b9d6cfc45636b907277d9dbc239676439a4b03adcc20dc27453a1a833c802e8650810eff9fdc8bb6e768076d890752db516f649dec5891435b1f58f186364bdaa1125ea94a5612d57018cabe3abbf321deff9ed2c8785be41507def3240220d808940ac2bb251873ea3f1bdb0d5ee04cf4ffd184dbadc5c6f95ad3a49841645535cd00151145a07f0000007792c93473b9878343b5f12ef5329eb2f14caa61dc0dd0aa6d91ebd9522a076cb40792e8541570a733ad433f6fc926cfa2890a6005fd74a822076e172f1f5ca254e5936e8c3eb5b4d966f1d6b8772fcc0f000f85bd3ed8c95c267f4cd1acd681b1"], 0x1, 0x12d, &(0x7f0000000200)="$eJzs2r9Kw1AUBvCjCEIfwamQgHXIf62DuyA4+QSG9t704o23JIK0U/EFFIfrI7i6iW4+QmafQN/AKZI2sTZ316Hfb7kfOZeTZDnTcTKVBjx3iPZm92cfm5lKu/3ocMADHtPCCRF1q1CU5YNLhvOfelHOXOOC9VqfvUSfvnAhWWj2AAAAAAAAAAAAAAAAAAAAAABYE9ZnHTojrR65kCz4Vc0n04tYSpblzROb6h0d4lodVfejlX69LyJ7vr8j9PFNVfdX6nbTaXek1Ub7fd5VOvbyydQRaZywhF2GYdT3933/IPTmvbx2R/uu/iYqyuexuU9kPy33id59c5+IOotja0fo2+t29+X/IyAgIDShPT9ouB1Zb9X8cAdKDv9wfhgTDeCffAcAAP//NHw5bA==") creat(&(0x7f0000000e00)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0) capset(&(0x7f0000000440)={0x20071026}, &(0x7f0000000040)={0x200000, 0x200003, 0x2930, 0x0, 0x3}) munmap(&(0x7f0000ffb000/0x2000)=nil, 0x2000) r9 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='blkio.bfq.io_queued\x00', 0x275a, 0x0) r10 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000040), 0x82000, 0x0) ioctl$PTP_SYS_OFFSET_PRECISE(r10, 0xc0403d08, 0x0) fchmod(r9, 0x20049549e2a2d659) write$sndseq(r9, &(0x7f0000000a40)=[{0x40, 0x5, 0x0, 0x81, @time={0x3, 0x1}, {0x1, 0x87}, {0x5, 0x8}, @time=@time={0x9, 0x6}}], 0x1c) syz_mount_image$ext4(&(0x7f0000000780)='ext4\x00', &(0x7f00000007c0)='./file0\x00', 0x10, &(0x7f00000014c0), 0x1, 0x793, &(0x7f0000001700)="$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") symlink(&(0x7f0000006000)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa/../file0\x00', &(0x7f0000000e40)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') 9m44.666410677s ago: executing program 5 (id=1826): bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000002d00)=ANY=[@ANYRES32, @ANYRES32, @ANYBLOB='+\x00\x00\x00\x00\x00', @ANYRES32=0x0, @ANYBLOB="a3"], 0x20) 9m44.422757317s ago: executing program 5 (id=1828): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000080000000", @ANYRES32=0x0], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000240)=@framed={{}, [@ringbuf_query={{0x18, 0x1, 0x1, 0x0, r0}}]}, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f0000000340)='sched_switch\x00', r1}, 0x18) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x3, &(0x7f0000000400)=0x9) getpid() socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x3fffffffffffcb5, 0x2, 0x0) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000080)=@framed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000004c0)='contention_begin\x00', r5}, 0x10) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r4, 0x29, 0x20, &(0x7f0000000000)={@remote, 0x200000, 0x0, 0xff, 0x1, 0x0, 0xfffe}, 0x20) syz_mount_image$vfat(&(0x7f0000000500), &(0x7f0000000300)='./file0\x00', 0x1000848, &(0x7f0000000600)=ANY=[@ANYBLOB="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", @ANYRES64], 0x1, 0x385, &(0x7f0000006400)="$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") syz_open_dev$usbmon(&(0x7f0000000080), 0x0, 0x80) syz_open_dev$usbfs(&(0x7f0000000000), 0x20000007d, 0x101902) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b00000000000000000000080000040000000000", @ANYRES32=0x0, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB='\x00'/28], 0x48) 9m28.851900937s ago: executing program 37 (id=1828): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000080000000", @ANYRES32=0x0], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000240)=@framed={{}, [@ringbuf_query={{0x18, 0x1, 0x1, 0x0, r0}}]}, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f0000000340)='sched_switch\x00', r1}, 0x18) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x3, &(0x7f0000000400)=0x9) getpid() socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x3fffffffffffcb5, 0x2, 0x0) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000080)=@framed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000004c0)='contention_begin\x00', r5}, 0x10) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r4, 0x29, 0x20, &(0x7f0000000000)={@remote, 0x200000, 0x0, 0xff, 0x1, 0x0, 0xfffe}, 0x20) syz_mount_image$vfat(&(0x7f0000000500), &(0x7f0000000300)='./file0\x00', 0x1000848, &(0x7f0000000600)=ANY=[@ANYBLOB="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", @ANYRES64], 0x1, 0x385, &(0x7f0000006400)="$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") syz_open_dev$usbmon(&(0x7f0000000080), 0x0, 0x80) syz_open_dev$usbfs(&(0x7f0000000000), 0x20000007d, 0x101902) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b00000000000000000000080000040000000000", @ANYRES32=0x0, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB='\x00'/28], 0x48) 5m48.397252277s ago: executing program 6 (id=1860): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x44, 0x86}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x5) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f07ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000540)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f0000000480), 0x400034f, 0x2, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0600000004000000ff0f000007"], 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000400007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f0000000300)='sched_switch\x00', r4}, 0x10) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) socket(0x10, 0x803, 0x0) r6 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'}) ioctl$SIOCSIFHWADDR(r5, 0x8914, &(0x7f0000000900)={'bridge0\x00', @remote}) r7 = socket$pppl2tp(0x18, 0x1, 0x1) r8 = socket$inet_udp(0x2, 0x2, 0x0) connect$pppl2tp(r7, &(0x7f00000002c0)=@pppol2tpin6={0x18, 0x1, {0x0, r8, 0x1, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @private}}}}, 0x32) 5m44.952487092s ago: executing program 6 (id=2254): openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) getpid() prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x3) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) r0 = syz_open_dev$MSR(&(0x7f0000000300), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) openat$nvram(0xffffffffffffff9c, &(0x7f0000000000), 0x40, 0x0) r1 = bpf$PROG_LOAD_XDP(0x5, &(0x7f00000001c0)={0xd, 0x3, &(0x7f0000001300)=ANY=[@ANYBLOB="1800000001000000000000000000000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x9, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r2 = fsopen(&(0x7f00000003c0)='cgroup2\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r2, 0x6, 0x0, 0x0, 0x0) r3 = fsmount(r2, 0x0, 0x0) bpf$BPF_LINK_CREATE(0x1c, &(0x7f00000000c0)={r1, r3, 0x3, 0x0, @void}, 0x62) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r4, 0xfffffffd) 5m27.34761599s ago: executing program 38 (id=2254): openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) getpid() prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x3) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) r0 = syz_open_dev$MSR(&(0x7f0000000300), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) openat$nvram(0xffffffffffffff9c, &(0x7f0000000000), 0x40, 0x0) r1 = bpf$PROG_LOAD_XDP(0x5, &(0x7f00000001c0)={0xd, 0x3, &(0x7f0000001300)=ANY=[@ANYBLOB="1800000001000000000000000000000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x9, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r2 = fsopen(&(0x7f00000003c0)='cgroup2\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r2, 0x6, 0x0, 0x0, 0x0) r3 = fsmount(r2, 0x0, 0x0) bpf$BPF_LINK_CREATE(0x1c, &(0x7f00000000c0)={r1, r3, 0x3, 0x0, @void}, 0x62) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r4, 0xfffffffd) 3m58.119843967s ago: executing program 0 (id=2448): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x5) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000440)) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0xf, &(0x7f0000000600)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB], &(0x7f0000001dc0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r3}, 0x2d) r4 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$PIO_UNIMAP(r4, 0x4b67, &(0x7f0000000040)={0x400000000000000c, &(0x7f0000000080)}) 3m54.846550523s ago: executing program 0 (id=2455): mount(0x0, &(0x7f0000000000)='./cgroup\x00', 0x0, 0x200013, 0x0) openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000440), 0x0, 0x0) r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_rx_ring(r0, 0x107, 0x5, &(0x7f0000003180)=@req3={0x1000, 0x3a, 0x1000, 0x3a, 0x7ff, 0xf84, 0x3}, 0x1c) r1 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000240)={'syz_tun\x00', 0x0}) bind$packet(r1, &(0x7f0000000300)={0x11, 0x0, r2, 0x1, 0x0, 0x6, @remote}, 0x14) syz_emit_ethernet(0x4a, 0x0, 0x0) sched_setscheduler(0x0, 0x2, 0x0) socket$inet(0x2, 0x2, 0x1) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r3 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x4) r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8) sched_setaffinity(0x0, 0xfffffef7, &(0x7f0000000740)=0x410000002) r5 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/partitions\x00', 0x0, 0x0) r6 = openat$sysctl(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/vm/drop_caches\x00', 0x1, 0x0) sendfile(r6, r5, &(0x7f0000002080)=0x64, 0x23b) pwrite64(0xffffffffffffffff, 0x0, 0x0, 0xfecf) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) getpid() mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)) unshare(0x24020400) openat(0xffffffffffffff9c, 0x0, 0x42, 0x0) syz_open_dev$usbfs(&(0x7f0000003f00), 0x1ff, 0xa401) 3m49.498095204s ago: executing program 0 (id=2466): openat$uinput(0xffffffffffffff9c, &(0x7f0000000080), 0x802, 0x0) r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='blkio.bfq.io_serviced_recursive\x00', 0x275a, 0x0) socket(0x2a, 0x2, 0x0) socket$netlink(0x10, 0x3, 0x0) pipe2(&(0x7f0000000040)={0xffffffffffffffff}, 0x0) sendmsg$AUDIT_DEL_RULE(0xffffffffffffffff, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000040)=ANY=[@ANYBLOB="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"], 0x420}, 0x1, 0x0, 0x0, 0x20040004}, 0x40000) syz_usb_connect$uac1(0x0, 0xa4, &(0x7f0000000200)=ANY=[@ANYBLOB="2a01000020000040b708000000000000030109029200030172e5000904000000010100000a24010000000201020c0d2407000005000000000000000c240000e9fffff5ffffffff092403f3ff000005024524", @ANYRES8=r0, @ANYBLOB="05", @ANYRES16=r0, @ANYRES8, @ANYRES16=r1], 0x0) 3m47.794276222s ago: executing program 0 (id=2471): syz_mount_image$ext4(&(0x7f00000000c0)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x804810, &(0x7f0000000a40), 0x26, 0x756, &(0x7f0000000a80)="$eJzs3M1rXOUaAPDnnGaafuTeyYUL9+pChBZaKD1Jmk27aty4KxQKbmtITkLISSZkJrUTC7auhdpsFARR1y7dCqX+Ae6koOBeEK1xIW5GzuSjNGam0ybpSPr7wcl53vP1vE/m8GYO5D0BvLReL38kEUMRcTUiqpvb04g42o6ORdzeOG790a2pckmi1br2S1KeFuut6va1ks31yWifEv+PiAeViHPv/z1vvbk6P1kU+fJme6SxsDRSb66en1uYnM1n88Wx8UujF8fHL46OP7WG//VY6+m3Lh2/9+2ba2vffdW4+9rA+SQm2nXHZm09XuaZbPxOKjGxY/viQSTro6TfHQAAoCfl9/wjETHQ/pZajSPtCAAAADhMWoMtAAAA4NBLot89AAAAAA7W1v8BbM3tPah5sJ38/EZEDO+Wf6A9hzjiWFQi4sR68sTMhGTjNNiT23ci4v7Ezvvvi/IOu73Ha4/uaD85R/roHq/Ofrhfjj8Tu40/6fb4E7uMPwNb707Yo87j3+P8RzqMf1d7zPH1p69UOua/E/HqwG75k+38SYf8b/eY/+7aB/c67Wt9HnFm178/yRO5urwfYmJmruj6+oEHf5592K3+E53yJ93rX+qx/nfXf5vvNJaU+c+e6v7575a/vCc+3OxHGhH3Ntdle21HjlML33/Trf7piNbzfP6f9Vj/j18O3uzxUAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAGhLI2IokjTbjtM0yyJORsR/40Ra1OqNczO1lcXpcl/EcFTSmbkiH42I6kY7Kdtj7fhx+8KO9nhE/OeH4xtJ54o8m6oV0/0uHgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAgG0nI2IokjSLiDQifq+maZZFDPRw7uAL6B8AAACwT4b73QEAAADgwHn+BwAAgMPveZ//k33uBwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAHCoXb1ypVxa649uTZXt6RvNlfnajfPTeX0+W1iZyqZqy0vZbK02W+TZVG3hadcrarWlsUuxcnOkkdcbI/Xm6vWF2spi4/rcwuRsfj2vvJCqAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAeFZD7SVJs4hI23GaZlnEvyJiOCrJzFyRj0bEvyPiYbUyWLbH+t1pAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA9l29uTo/WRT5skAgeGHBexHxD+hGl6DfIxMAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAP1Qb67OTxZFvlzvd08AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADor/SnJCLK5Uz19NDOvUeTP6rtdUS888m1j25ONhrLY+X2X7e3Nz7e3H6hH/0HAACAl8LlZzl46zl96zkeAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACgV/Xm6vxkUeTLewsuR3O1lXQ4pt81AgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAz+evAAAA//8KQsc4") pipe2$9p(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r1, &(0x7f0000000000)=ANY=[@ANYBLOB="1500000065ffff"], 0x15) r2 = dup(r1) mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f00000001c0), 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r2]) write$FUSE_BMAP(r2, &(0x7f0000000100)={0x18}, 0x18) write$FUSE_DIRENTPLUS(r2, &(0x7f00000007c0)=ANY=[@ANYBLOB="b8000000000000e3f3e6b68d64c8223f554d1c8b00e7ac687f6254a9c38d"], 0xb8) write$FUSE_NOTIFY_RETRIEVE(r2, &(0x7f00000000c0)={0x14c}, 0x137) mount$9p_fd(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000140), 0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r1]) lstat(&(0x7f0000000080)='./file0\x00', 0x0) 3m46.607263436s ago: executing program 0 (id=2473): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$TOKEN_CREATE(0x24, 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000001c0)={&(0x7f00000003c0)=ANY=[@ANYRES32=r1, @ANYRES32=r0], 0x0, 0x4a, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x28) r3 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r4 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_NAMED_QUEUE(r4, 0xc0bc5310, &(0x7f0000000300)={0x18, 0xffffffff, 0x0, 'queue1\x00', 0xfee}) ioctl$TIOCSETD(r3, 0x5423, &(0x7f0000000040)=0x11) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x9, 0x3, 0x10004, 0x5, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) r5 = inotify_init() r6 = socket$inet6(0xa, 0x2, 0x0) ioctl$sock_SIOCETHTOOL(r6, 0x89f0, &(0x7f0000000040)={'bridge0\x00', &(0x7f0000000100)=@ethtool_coalesce={0xf, 0x0, 0x6dd68c91, 0x6, 0xe, 0xfff, 0x0, 0xc0000000, 0x402, 0x3, 0x5, 0x7f, 0x3, 0x6, 0x7f, 0xfffffffc, 0x0, 0x800002, 0x80000000, 0x2, 0x1ff, 0xfffffff9, 0xc}}) readv(r5, &(0x7f0000000140)=[{&(0x7f0000000040)=""/182, 0xb6}], 0x1) 3m46.578244526s ago: executing program 3 (id=2474): socket$nl_generic(0x10, 0x3, 0x10) r0 = creat(0x0, 0x0) mkdir(0x0, 0x0) mount$fuse(0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=0x0]) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) sched_setaffinity(0x0, 0xfffffef7, &(0x7f0000000740)=0x410000002) mmap$xdp(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x2, 0x42032, 0xffffffffffffffff, 0x0) mremap(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x1000, 0x0, &(0x7f00008b5000/0x1000)=nil) setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x1b, &(0x7f0000000280)=0x1e51, 0x4) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={0x0}, 0x10) syz_open_dev$usbfs(&(0x7f0000000100), 0x76, 0x101301) prctl$PR_GET_SPECULATION_CTRL(0x35, 0x0, 0x10) r3 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='status\x00') preadv(r3, &(0x7f0000000340)=[{&(0x7f0000000080)=""/122, 0x7a}], 0x1, 0x0, 0x0) copy_file_range(r0, 0x0, r0, 0x0, 0xb, 0x0) r4 = socket$netlink(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_DROP_MEMBERSHIP(r4, 0x10e, 0xc, &(0x7f0000000640)=0x4, 0x4) ioctl$NBD_SET_SOCK(0xffffffffffffffff, 0xab00, 0xffffffffffffffff) getsockopt$inet_sctp_SCTP_DELAYED_SACK(r0, 0x84, 0x10, &(0x7f00000001c0)=@assoc_value={0x0, 0x8}, &(0x7f0000000200)=0x8) 3m45.139034419s ago: executing program 0 (id=2476): r0 = socket$inet6(0xa, 0x6, 0x0) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4e20}, 0x1c) ioctl$vim2m_VIDIOC_S_CTRL(0xffffffffffffffff, 0xc008561c, 0x0) syz_io_uring_submit(0x0, 0x0, 0x0) setsockopt$inet6_tcp_TCP_MD5SIG(r0, 0x6, 0xe, 0x0, 0x0) listen(r0, 0x101) r1 = socket$inet_dccp(0x2, 0x6, 0x0) connect$inet(r1, &(0x7f0000e5c000)={0x2, 0x4e20, @dev}, 0x10) r2 = accept4(r0, 0x0, 0x0, 0x0) r3 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000080), r2) sendmsg$IPVS_CMD_GET_INFO(r2, &(0x7f0000000200)={&(0x7f0000000040), 0xc, &(0x7f00000001c0)={&(0x7f0000000140)={0x34, r3, 0x100, 0x70bd24, 0x25dfdbfc, {}, [@IPVS_CMD_ATTR_SERVICE={0x4}, @IPVS_CMD_ATTR_SERVICE={0x1c, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x65}, @IPVS_SVC_ATTR_SCHED_NAME={0x7, 0x6, 'dh\x00'}, @IPVS_SVC_ATTR_SCHED_NAME={0x7, 0x6, 'nq\x00'}]}]}, 0x34}, 0x1, 0x0, 0x0, 0x1}, 0x40805) 3m44.79661064s ago: executing program 3 (id=2478): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000013c0)={0x11, 0x3, &(0x7f0000000280)=@framed={{0x18, 0x0, 0x0, 0x0, 0xfffffffc}}, &(0x7f0000000300)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r0 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000240), 0x2, 0x0) ioctl$IOCTL_VMCI_VERSION2(r0, 0x7a7, &(0x7f00000002c0)=0xa0000) ioctl$IOCTL_VMCI_INIT_CONTEXT(r0, 0x7a0, &(0x7f0000000100)={@my=0x1}) ioctl$IOCTL_VMCI_QUEUEPAIR_ALLOC(r0, 0x7aa, &(0x7f0000000000)={{@my=0x1}, @local}) 3m44.387522661s ago: executing program 3 (id=2479): sendmsg$inet6(0xffffffffffffffff, &(0x7f0000000700)={&(0x7f0000000040)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @remote}}, 0x1c, 0x0}, 0x0) sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000001a00)=[{{0x0, 0x0, &(0x7f0000000480)=[{&(0x7f0000000080)="1a64829bf8f72508a80cd8d857b57faf39ee3f9eea1eee8a57ed874438f5d4c1071331ca143e3e50586a06bc83689f2a60f917d4a74431cc", 0x38}], 0x1}}], 0x1, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)={{0x14}, [@NFT_MSG_NEWRULE={0x44, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x24, 0x4, 0x0, 0x1, [{0x20, 0x1, 0x0, 0x1, @ct={{0x7}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_CT_KEY={0x8, 0x2, 0x1, 0x0, 0x8}, @NFTA_CT_DREG={0x8, 0x1, 0x1, 0x0, 0x17}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14}}, 0x6c}}, 0x10) connect$inet6(0xffffffffffffffff, &(0x7f0000000080)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @remote}}, 0x19) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$alg(0x26, 0x5, 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000800)={0xffffffffffffffff, 0xe0, &(0x7f0000000700)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x37, &(0x7f0000000580)=[{}, {}, {}], 0x18, 0x10, &(0x7f0000000600), &(0x7f0000000640), 0x8, 0x76, 0x8, 0x0, 0x0}}, 0x10) bind$alg(r1, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-camellia-asm\x00'}, 0x58) sendmsg$NL80211_CMD_JOIN_MESH(r1, &(0x7f00000009c0)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000980)={0x0}, 0x1, 0x0, 0x0, 0x100000d1}, 0x4000000) ioctl$sock_bt_hidp_HIDPCONNADD(0xffffffffffffffff, 0x400448c8, &(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x82, 0xca, 0x15c2, 0x5886, 0x801, 0x0, 0x8, 'syz1\x00'}) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r2 = accept4(r1, 0x0, 0x0, 0x800) sendmmsg$alg(r2, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048"}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000013c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000001380)={0x0, 0x0, &(0x7f0000001340)={&(0x7f0000000680)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r3, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r4, @ANYBLOB="d506330080000000ffffffffffff080211000001"], 0x6f4}}, 0x0) 3m43.208190304s ago: executing program 3 (id=2483): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000140)='./file1\x00', 0x30000c6, &(0x7f0000000080), 0x1, 0x558, &(0x7f00000009c0)="$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") rename(&(0x7f0000000040)='./file1\x00', &(0x7f0000000180)='./file0/file0\x00') chdir(&(0x7f0000000140)='./bus\x00') open(&(0x7f0000000000)='./bus\x00', 0x60142, 0x0) mount(&(0x7f0000000380)=@loop={'/dev/loop', 0x0}, &(0x7f0000000140)='./bus\x00', 0x0, 0x1000, 0x0) r0 = open(&(0x7f00000001c0)='./bus\x00', 0xc000, 0x132) ioctl$LOOP_SET_STATUS64(r0, 0x4c04, &(0x7f0000000540)={0x0, 0x0, 0x0, 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, "ef359f413bb90900f7d6a4ae6dddfbd11000000000000000000ff8ee09e737ff0edf110ff4117639c2eb8f18d2b8f6277dd41905b9aafab4afaaf755a3f6a004", "036c47c6780820d1cbf7966d61ffcf33524bbd9bffbcc2542ded71038232d71e14efbac003000000852f2036dc783800000000e9b49600", "f28359738e229a4c66810000000000f300e6d902000000000000000000000001"}) creat(&(0x7f00000008c0)='./file1aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0xa6) 3m40.206494918s ago: executing program 3 (id=2489): r0 = socket$can_bcm(0x1d, 0x2, 0x2) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f00000000c0)={'vxcan0\x00', 0x0}) clock_gettime(0x0, &(0x7f0000000400)={0x0, 0x0}) sendmsg$can_bcm(r0, &(0x7f0000000500)={&(0x7f00000003c0)={0x1d, r1}, 0x10, &(0x7f00000004c0)={&(0x7f0000000440)={0x6, 0x101, 0x2, {0x0, 0x2710}, {r2, r3/1000+10000}, {0x1, 0x1, 0x1}, 0x1, @canfd={{0x4, 0x1}, 0x29, 0x0, 0x0, 0x0, "c7eef45bf400b47d7efa660da6402d83537e812fc0abc7f447478293c3ce9e6884d94f2887954893698c7b3c46e8bf59183bae67a0f3c27527e89faf0dd49c7c"}}, 0x80}, 0x1, 0x0, 0x0, 0x84}, 0x40844) listen(r0, 0xb91) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, @fallback=0x5, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000100)={0x3ff8, 0x0, 0x0, 0x4}, 0x10, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0xfffffffe, @void, @value}, 0x94) r4 = socket$inet6_mptcp(0xa, 0x1, 0x106) getsockopt$inet6_tcp_buf(r4, 0x6, 0xd, 0x0, 0x0) getsockopt$inet6_mptcp_buf(r4, 0x11c, 0x2, &(0x7f0000000100)=""/222, &(0x7f0000000000)=0x61637876) r5 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r5, &(0x7f0000000000)={0x18, 0x0, {0x2, @broadcast, 'ip_vti0\x00'}}, 0x1e) r6 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r6, &(0x7f00000000c0)={0x18, 0x0, {0x2, @broadcast, 'veth1_virt_wifi\x00'}}, 0x1e) r7 = socket(0x18, 0x0, 0x0) connect$pppoe(r7, &(0x7f0000000080)={0x18, 0x0, {0x2, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}, 'geneve1\x00'}}, 0x1e) r8 = openat$mice(0xffffffffffffff9c, &(0x7f0000000540), 0x650800) r9 = openat(r8, &(0x7f0000000380)='./cgroup.cpu/cgroup.procs\x00', 0x0, 0x0) sendmsg$IPVS_CMD_SET_INFO(r9, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000002c0)={0x84, 0x0, 0x800, 0x70bd27, 0x25dfdbfe, {}, [@IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x1b0}, @IPVS_CMD_ATTR_SERVICE={0x60, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x67}, @IPVS_SVC_ATTR_PROTOCOL={0x6, 0x2, 0x87}, @IPVS_SVC_ATTR_PORT={0x6, 0x4, 0x4e21}, @IPVS_SVC_ATTR_SCHED_NAME={0x8, 0x6, 'ovf\x00'}, @IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x4d}, @IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x41}, @IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv6=@mcast2}, @IPVS_SVC_ATTR_PE_NAME={0x8}, @IPVS_SVC_ATTR_SCHED_NAME={0x7, 0x6, 'nq\x00'}, @IPVS_SVC_ATTR_TIMEOUT={0x8, 0x8, 0x3}]}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x6}]}, 0x84}, 0x1, 0x0, 0x0, 0x20000001}, 0x0) socket$nl_route(0x10, 0x3, 0x0) 3m36.442780075s ago: executing program 3 (id=2496): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x5) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000440)) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r3 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r3}, 0x2d) r4 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$PIO_UNIMAP(r4, 0x4b67, &(0x7f0000000040)={0x400000000000000c, &(0x7f0000000080)}) 3m35.156119s ago: executing program 39 (id=2496): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x5) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000440)) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r3 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r3}, 0x2d) r4 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$PIO_UNIMAP(r4, 0x4b67, &(0x7f0000000040)={0x400000000000000c, &(0x7f0000000080)}) 3m11.602429632s ago: executing program 1 (id=2542): read$FUSE(0xffffffffffffffff, &(0x7f00000020c0)={0x2020}, 0xffffffffffffff5c) socket(0x8000000010, 0x2, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x804}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = semget(0x3, 0x3, 0x220) semctl$IPC_RMID(r3, 0x0, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)=ANY=[], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r4, 0x0, 0x0) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x78}}, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f00000001c0), r5) sendmsg$NLBL_MGMT_C_REMOVEDEF(r5, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000200)={0x14, r6, 0x1, 0x70bd29, 0x25dfdbfb}, 0x14}, 0x1, 0x0, 0x0, 0x1}, 0x40080) 3m10.27323912s ago: executing program 1 (id=2544): socket$nl_generic(0x10, 0x3, 0x10) r0 = creat(0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) mkdir(0x0, 0x0) mount$fuse(0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB='fd=']) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) sched_setaffinity(0x0, 0xfffffef7, &(0x7f0000000740)=0x410000002) mmap$xdp(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x2, 0x42032, 0xffffffffffffffff, 0x0) mremap(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x1000, 0x0, &(0x7f00008b5000/0x1000)=nil) setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x1b, &(0x7f0000000280)=0x1e51, 0x4) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={0x0}, 0x10) syz_open_dev$usbfs(&(0x7f0000000100), 0x76, 0x101301) prctl$PR_GET_SPECULATION_CTRL(0x35, 0x0, 0x10) r3 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='status\x00') preadv(r3, &(0x7f0000000340)=[{&(0x7f0000000080)=""/122, 0x7a}], 0x1, 0x0, 0x0) copy_file_range(r0, 0x0, r0, 0x0, 0xb, 0x0) r4 = socket$netlink(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_DROP_MEMBERSHIP(r4, 0x10e, 0xc, &(0x7f0000000640)=0x4, 0x4) ioctl$NBD_SET_SOCK(0xffffffffffffffff, 0xab00, 0xffffffffffffffff) getsockopt$inet_sctp_SCTP_DELAYED_SACK(r0, 0x84, 0x10, &(0x7f00000001c0)=@assoc_value={0x0, 0x8}, &(0x7f0000000200)=0x8) 3m9.99923153s ago: executing program 1 (id=2546): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000040)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000820004000000000000000c00850000000f00000095"], &(0x7f0000000180)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xe, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setaffinity(0x0, 0x0, 0x0) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) syz_open_dev$rtc(&(0x7f0000000400), 0x7, 0x0) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) r4 = socket$tipc(0x1e, 0x5, 0x0) setsockopt$TIPC_GROUP_JOIN(r4, 0x10f, 0x87, &(0x7f0000000100)={0x43, 0x0, 0x3, 0x3}, 0x10) getsockopt$TIPC_GROUP_JOIN(r4, 0x10f, 0x87, 0x0, &(0x7f0000000140)) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_mount_image$fuse(&(0x7f0000002040), &(0x7f0000000000)='./file0\x00', 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB='fd=', @ANYRESHEX, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0, @ANYBLOB=',default_permissions'], 0x0, 0x0, 0x0) mount$9p_tcp(&(0x7f0000000440), &(0x7f0000000480)='./file0\x00', &(0x7f00000004c0), 0x204000, &(0x7f0000000500)={'trans=tcp,', {'port', 0x3d, 0x4e21}, 0x2c, {[{@version_u}, {@posixacl}, {@debug={'debug', 0x3d, 0xce7}}, {@ignoreqv}], [{@rootcontext={'rootcontext', 0x3d, 'user_u'}}, {@smackfstransmute={'smackfstransmute', 0x3d, '\x7f,}/\\\\\\'}}]}}) 3m8.354896931s ago: executing program 1 (id=2549): syz_genetlink_get_family_id$ipvs(0x0, 0xffffffffffffffff) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0}, 0x18) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() ptrace$ARCH_GET_MAX_TAG_BITS(0x1e, r1, 0x0, 0x4003) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(r1, 0x5, 0x0) syz_init_net_socket$rose(0xb, 0x5, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) mbind(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x4001, &(0x7f0000000000)=0x1, 0x7, 0x0) bind$bt_hci(0xffffffffffffffff, &(0x7f0000000100)={0x1f, 0xffff, 0x3}, 0x6) write$binfmt_misc(0xffffffffffffffff, &(0x7f0000000000), 0xd) 3m6.631446679s ago: executing program 1 (id=2552): syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000002000000b7030000e8ffff"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) prlimit64(0x0, 0xe, &(0x7f00000007c0)={0xc, 0x4000008c}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) sendmsg$TIPC_NL_MON_SET(0xffffffffffffffff, 0x0, 0x4000844) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x2000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) openat$procfs(0xffffffffffffff9c, &(0x7f0000000580)='/proc/timer_list\x00', 0x0, 0x0) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000a00)={&(0x7f0000000d00)='sched_switch\x00', r0}, 0x10) mkdirat(0xffffffffffffff9c, &(0x7f0000000400)='./file0\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000400)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) chdir(&(0x7f0000000140)='./bus\x00') openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x2040, 0x0) getresgid(&(0x7f0000000c80), 0x0, &(0x7f0000009240)) 3m5.238065719s ago: executing program 1 (id=2555): unshare(0x68040200) 2m49.264706412s ago: executing program 40 (id=2555): unshare(0x68040200) 22.028008813s ago: executing program 8 (id=2751): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0x60, 0x30, 0x1, 0x0, 0x0, {}, [{0x4c, 0x1, [@m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x60}, 0x1, 0x0, 0x0, 0x800}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = syz_open_dev$vbi(&(0x7f0000000000), 0x0, 0x2) ioctl$VIDIOC_S_INPUT(r0, 0xc0045627, &(0x7f00000000c0)=0x1) syz_open_dev$vbi(&(0x7f0000000040), 0x0, 0x2) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$TOKEN_CREATE(0x24, 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000001c0)={&(0x7f00000003c0)=ANY=[@ANYRES32=r2, @ANYRES32=r1], 0x0, 0x4a, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x28) r4 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_NAMED_QUEUE(0xffffffffffffffff, 0xc0bc5310, &(0x7f0000000300)={0x18, 0xffffffff, 0x0, 'queue1\x00', 0xfee}) ioctl$TIOCSETD(r4, 0x5423, &(0x7f0000000040)=0x11) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x9, 0x3, 0x10004, 0x5, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) r5 = inotify_init() r6 = socket$inet6(0xa, 0x2, 0x0) ioctl$sock_SIOCETHTOOL(r6, 0x89f0, &(0x7f0000000040)={'bridge0\x00', &(0x7f0000000100)=@ethtool_coalesce={0xf, 0x0, 0x6dd68c91, 0x6, 0xe, 0xfff, 0x0, 0xc0000000, 0x402, 0x3, 0x5, 0x7f, 0x3, 0x6, 0x7f, 0xfffffffc, 0x0, 0x800002, 0x80000000, 0x2, 0x1ff, 0xfffffff9, 0xc}}) readv(r5, &(0x7f0000000140)=[{&(0x7f0000000040)=""/182, 0xb6}], 0x1) 20.269010461s ago: executing program 8 (id=2753): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) quotactl_fd$Q_GETFMT(0xffffffffffffffff, 0xffffffff80000402, 0x0, &(0x7f0000000280)) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x0, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) inotify_init() prctl$PR_GET_TID_ADDRESS(0x28, &(0x7f0000000040)) r3 = socket$l2tp6(0xa, 0x2, 0x73) bind$l2tp6(r3, &(0x7f0000000000)={0xa, 0x0, 0x0, @empty}, 0x20) socket$nl_route(0x10, 0x3, 0x0) r4 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000080)='/proc/diskstats\x00', 0x0, 0x0) r5 = openat$tcp_mem(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/net/ipv4/tcp_wmem\x00', 0x1, 0x0) sendfile(r5, r4, 0x0, 0x3fffff) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000300)={0x6, 0x3, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000002000095"], &(0x7f00000001c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) socket$packet(0x11, 0x2, 0x300) r6 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_MCAST_JOIN_GROUP(r6, 0x29, 0x2a, &(0x7f0000000140)={0x0, {{0xa, 0x0, 0x0, @mcast2}}}, 0x88) setsockopt$inet6_MCAST_MSFILTER(r6, 0x29, 0x30, &(0x7f0000000a80)=ANY=[@ANYRES64=r2], 0x190) 14.14594798s ago: executing program 8 (id=2759): syz_mount_image$ext4(&(0x7f00000004c0)='ext4\x00', &(0x7f0000000500)='./file0\x00', 0x0, &(0x7f0000000540), 0x1, 0x4a3, &(0x7f0000000580)="$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") write$binfmt_register(0xffffffffffffffff, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040), 0x802, 0x0) ioctl$UI_SET_EVBIT(r3, 0x40045564, 0x3) write$uinput_user_dev(r3, &(0x7f0000000080)={'syz1\x00', {0x1b10, 0x0, 0x1, 0x2}, 0x2f, [0x2, 0x4, 0x704d, 0x1, 0x5, 0x1, 0x2, 0x7db, 0x4, 0xfffffc01, 0xfffffffb, 0x8, 0x1, 0x100, 0xfe, 0x48, 0x7, 0x5, 0x2ca, 0x8, 0x76, 0x8, 0x0, 0x81, 0x40, 0x19b1, 0x8000, 0x7, 0x7fff, 0x4000000, 0x7, 0x3, 0xe, 0x7, 0x1, 0x1, 0x5, 0xf, 0x7, 0x10001, 0x9, 0x7f, 0x8, 0x6, 0xb, 0x5, 0x6, 0x40, 0x7f, 0x9, 0x1, 0x6, 0x3, 0x2284919, 0x4, 0x5643fa73, 0xfffeffff, 0x6, 0x800, 0x2, 0x8a, 0x6, 0x1, 0x6], [0xffffffd2, 0x7fffffff, 0xffff, 0x8, 0xe62, 0x3, 0x0, 0x9, 0xc33, 0x3, 0x7, 0x800, 0x6c368000, 0x4, 0x7, 0x0, 0x10, 0x5, 0x8, 0x8001, 0x3, 0x7fff, 0x9, 0x0, 0x5, 0x4, 0x7, 0x8, 0x40, 0xc10, 0x80000001, 0x3, 0x3, 0x3, 0x7, 0x8, 0x8, 0x7, 0x4, 0x9, 0x5, 0x3, 0x2, 0x0, 0x0, 0x11e, 0xa4, 0x4, 0x5, 0xd69, 0x9, 0xf404, 0xf1, 0x3, 0x3, 0x1, 0x6, 0x6, 0x0, 0x6, 0x8, 0x6, 0x4, 0x68], [0x3, 0x1, 0x4, 0xfffffffc, 0x0, 0x7fff, 0x401, 0x9, 0x2, 0xffc, 0x7, 0x4, 0xc, 0x7, 0x6, 0xa, 0x6, 0x4, 0x5, 0x5, 0x2, 0x30000000, 0x644, 0x2, 0xfffffffd, 0x7, 0x5, 0x7f, 0x7ff, 0xd, 0x400, 0xf, 0x41, 0x81, 0xc99, 0x25a, 0x2, 0x0, 0x2, 0x5d9fffa, 0x3ff, 0xff, 0x1, 0x8, 0x10000, 0xe7, 0x200, 0x7af5, 0x2, 0xb, 0x0, 0xffff, 0x7, 0x6, 0x2, 0x81, 0x8, 0x2, 0x7, 0x100, 0x8, 0x0, 0x6, 0x10], [0xffffff80, 0xd5800000, 0x0, 0x4, 0x2, 0x62a, 0x3, 0x7, 0xb343, 0x4, 0x1, 0x8, 0x8000, 0x8, 0xffffff81, 0x80000000, 0x5, 0x3, 0x200, 0xfff, 0x3, 0xfffffffd, 0x3c63, 0x7, 0x6, 0xe6, 0xffffffff, 0x3, 0x2, 0x7, 0x1, 0x7, 0x7, 0x8, 0x1, 0xf, 0x9, 0x17ce, 0x0, 0x3, 0x6fe, 0xe, 0x7, 0x13a, 0x7, 0x0, 0xb757, 0x2, 0xba, 0x996, 0x50, 0x8c1, 0x0, 0x5, 0x4, 0xf, 0x100, 0x10000400, 0x9, 0x7fff, 0x3, 0xfffffffb, 0xc, 0x2]}, 0x45c) ioctl$UI_SET_ABSBIT(r3, 0x40045567, 0x0) ioctl$UI_DEV_CREATE(r3, 0x5501) r4 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet6_opts(r4, 0x29, 0x4d, &(0x7f0000000140)=ANY=[], 0x8) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="1400000010000173c2e5864a2fad65000000000a28000000000a010400000000000000000100004008000240000000020900010073797a30000000001400000011"], 0x50}}, 0x0) sendmsg$NFT_BATCH(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)=ANY=[@ANYBLOB="140000001000009006000000000000000000000a3c000000090a050600001900000000000100000008000a40000000000900020073797a32000000000900010073797a3000000000080005400000001414000000110001"], 0x64}}, 0x0) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETSETELEM(r6, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000580)=ANY=[@ANYBLOB="2c0000000d0a010e0000000000000000010000000900010073797a30000000000900020073797a3200000000cb97d6513e5986c29fe24fffb436f3144d8b419c1118e495d11031278cdf691ed1c927eb85f567223772542f5b3ee45adbbed11d0e24f729d09ad57307776bef6b40eb5871f3a93015684942000000000000000810a9b1ab216e8cbbc0c4ffbdb873193c0bc449b3375050f820795426ec0cce6a13a91825ea7a7a70c0245a698faa7cbbcd7859cb27a6ec53aab79a3b2ba9b08509c881805190891aae10845f1cba4b33d8893df1a0a8524a208bd4acab9d765e8b"], 0x2c}}, 0x0) truncate(&(0x7f0000000180)='./file2\x00', 0x20004) 14.144409976s ago: executing program 2 (id=2760): syz_mount_image$ext4(&(0x7f00000000c0)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x804810, &(0x7f0000000a40), 0x26, 0x756, &(0x7f0000000a80)="$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") chdir(&(0x7f0000000240)='./file0\x00') pipe2$9p(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r1, &(0x7f0000000000)=ANY=[@ANYBLOB="1500000065ffff"], 0x15) r2 = dup(r1) mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f00000001c0), 0x0, &(0x7f0000000440)=ANY=[]) write$FUSE_BMAP(r2, &(0x7f0000000100)={0x18}, 0x18) write$FUSE_DIRENTPLUS(r2, &(0x7f00000007c0)=ANY=[@ANYBLOB="b8000000000000e3f3e6b68d64c8223f554d1c8b00e7ac687f6254a9c38d"], 0xb8) write$FUSE_NOTIFY_RETRIEVE(r2, &(0x7f00000000c0)={0x14c}, 0x137) mount$9p_fd(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000140), 0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r1]) truncate(&(0x7f0000000200)='./file0\x00', 0x800) fchownat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x0, 0x0) 12.352364053s ago: executing program 8 (id=2762): write$binfmt_script(0xffffffffffffffff, 0x0, 0x0) r0 = socket$inet_smc(0x2b, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setscheduler(r1, 0x1, &(0x7f0000000280)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0/file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) preadv(0xffffffffffffffff, 0x0, 0x0, 0x7fffffff, 0x80000000) mlock(&(0x7f0000ff9000/0x4000)=nil, 0x4000) madvise(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x16) sendto$inet(r0, &(0x7f0000000040)="e5", 0xffffffe4, 0x0, 0x0, 0x0) r4 = socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000007c0)=@newqdisc={0x6c, 0x24, 0xd0f, 0x70bd2d, 0x0, {0x60, 0x0, 0x0, r6, {0x0, 0xa}, {0xffff, 0xffff}, {0x0, 0xffff}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x40, 0x2, [@TCA_TBF_PARMS={0x28, 0x1, {{0x4, 0x2, 0x0, 0x0, 0x7, 0x8}, {0x12, 0x3, 0x0, 0x1, 0x8001, 0x400}, 0xa5, 0x4, 0x10000000}}, @TCA_TBF_BURST={0x8, 0x6, 0x8057}, @TCA_TBF_PRATE64={0xc, 0x5, 0x5b5707f6ed1dade4}]}}]}, 0x6c}}, 0x0) socket(0x10, 0x3, 0x0) bind$inet(0xffffffffffffffff, &(0x7f0000000080)={0x2, 0x4e21, @broadcast}, 0x10) connect$inet(0xffffffffffffffff, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) sendto$inet(0xffffffffffffffff, &(0x7f0000000000), 0xffffffffffffff94, 0x0, 0x0, 0x0) 12.351128219s ago: executing program 2 (id=2763): prlimit64(0x0, 0xe, &(0x7f0000000780)={0x8, 0x248}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x1) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000240)=@abs={0x0, 0x0, 0x4e20}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) unshare(0x42000000) openat(0xffffffffffffffff, 0x0, 0x828101, 0x0) r3 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) sendto$netrom(r3, 0x0, 0x0, 0x0, &(0x7f0000000000)={{0x2, @rose}, [@rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @bcast, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, @bcast, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @default, @null]}, 0x48) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19) socket$nl_netfilter(0x10, 0x3, 0xc) 8.719900407s ago: executing program 8 (id=2766): syz_mount_image$ext4(&(0x7f00000000c0)='ext4\x00', &(0x7f0000000640)='./file1\x00', 0x3000010, &(0x7f0000000000), 0x3e, 0x51b, &(0x7f0000001200)="$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") prlimit64(0x0, 0xe, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x6, 0x4, 0x8, 0xc, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000280)=ANY=[@ANYBLOB="18000000000000000000000000000000850000002300000018110000", @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000003000000"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00', r0}, 0x10) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='cgroup.controllers\x00', 0x275a, 0x0) read$FUSE(0xffffffffffffffff, &(0x7f0000001740)={0x2020}, 0x2020) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="01000000040000000800000008"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r5 = socket(0x10, 0x3, 0x0) write(r5, &(0x7f0000000100)="1400000052004f7fb3e4", 0xa) syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) recvmmsg(r5, &(0x7f0000005c80), 0x1b, 0x10122, 0x0) 8.718153812s ago: executing program 7 (id=2767): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x0, 0x0) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) socketpair$unix(0x1, 0x5, 0x0, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0x12, &(0x7f0000000080)=@framed={{0x18, 0x8, 0x0, 0x0, 0xffd0}, [@map_fd={0x18, 0x0, 0x0}, @generic={0x66, 0x8}, @initr0, @exit, @alu={0x6, 0x0, 0x3, 0xa, 0x0, 0x2}, @printk={@x, {}, {}, {}, {}, {0x5, 0x0, 0xb, 0xa}}]}, &(0x7f0000000000)='GPL\x00', 0x2, 0xde, &(0x7f0000000340)=""/222, 0x0, 0x8, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) 7.510738719s ago: executing program 7 (id=2768): syz_mount_image$ext4(&(0x7f00000004c0)='ext4\x00', &(0x7f0000000500)='./file0\x00', 0x0, &(0x7f0000000540), 0x1, 0x4a3, &(0x7f0000000580)="$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") write$binfmt_register(0xffffffffffffffff, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040), 0x802, 0x0) ioctl$UI_SET_EVBIT(r3, 0x40045564, 0x3) write$uinput_user_dev(r3, &(0x7f0000000080)={'syz1\x00', {0x1b10, 0x0, 0x1, 0x2}, 0x2f, [0x2, 0x4, 0x704d, 0x1, 0x5, 0x1, 0x2, 0x7db, 0x4, 0xfffffc01, 0xfffffffb, 0x8, 0x1, 0x100, 0xfe, 0x48, 0x7, 0x5, 0x2ca, 0x8, 0x76, 0x8, 0x0, 0x81, 0x40, 0x19b1, 0x8000, 0x7, 0x7fff, 0x4000000, 0x7, 0x3, 0xe, 0x7, 0x1, 0x1, 0x5, 0xf, 0x7, 0x10001, 0x9, 0x7f, 0x8, 0x6, 0xb, 0x5, 0x6, 0x40, 0x7f, 0x9, 0x1, 0x6, 0x3, 0x2284919, 0x4, 0x5643fa73, 0xfffeffff, 0x6, 0x800, 0x2, 0x8a, 0x6, 0x1, 0x6], [0xffffffd2, 0x7fffffff, 0xffff, 0x8, 0xe62, 0x3, 0x0, 0x9, 0xc33, 0x3, 0x7, 0x800, 0x6c368000, 0x4, 0x7, 0x0, 0x10, 0x5, 0x8, 0x8001, 0x3, 0x7fff, 0x9, 0x0, 0x5, 0x4, 0x7, 0x8, 0x40, 0xc10, 0x80000001, 0x3, 0x3, 0x3, 0x7, 0x8, 0x8, 0x7, 0x4, 0x9, 0x5, 0x3, 0x2, 0x0, 0x0, 0x11e, 0xa4, 0x4, 0x5, 0xd69, 0x9, 0xf404, 0xf1, 0x3, 0x3, 0x1, 0x6, 0x6, 0x0, 0x6, 0x8, 0x6, 0x4, 0x68], [0x3, 0x1, 0x4, 0xfffffffc, 0x0, 0x7fff, 0x401, 0x9, 0x2, 0xffc, 0x7, 0x4, 0xc, 0x7, 0x6, 0xa, 0x6, 0x4, 0x5, 0x5, 0x2, 0x30000000, 0x644, 0x2, 0xfffffffd, 0x7, 0x5, 0x7f, 0x7ff, 0xd, 0x400, 0xf, 0x41, 0x81, 0xc99, 0x25a, 0x2, 0x0, 0x2, 0x5d9fffa, 0x3ff, 0xff, 0x1, 0x8, 0x10000, 0xe7, 0x200, 0x7af5, 0x2, 0xb, 0x0, 0xffff, 0x7, 0x6, 0x2, 0x81, 0x8, 0x2, 0x7, 0x100, 0x8, 0x0, 0x6, 0x10], [0xffffff80, 0xd5800000, 0x0, 0x4, 0x2, 0x62a, 0x3, 0x7, 0xb343, 0x4, 0x1, 0x8, 0x8000, 0x8, 0xffffff81, 0x80000000, 0x5, 0x3, 0x200, 0xfff, 0x3, 0xfffffffd, 0x3c63, 0x7, 0x6, 0xe6, 0xffffffff, 0x3, 0x2, 0x7, 0x1, 0x7, 0x7, 0x8, 0x1, 0xf, 0x9, 0x17ce, 0x0, 0x3, 0x6fe, 0xe, 0x7, 0x13a, 0x7, 0x0, 0xb757, 0x2, 0xba, 0x996, 0x50, 0x8c1, 0x0, 0x5, 0x4, 0xf, 0x100, 0x10000400, 0x9, 0x7fff, 0x3, 0xfffffffb, 0xc, 0x2]}, 0x45c) ioctl$UI_SET_ABSBIT(r3, 0x40045567, 0x0) ioctl$UI_DEV_CREATE(r3, 0x5501) r4 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet6_opts(r4, 0x29, 0x4d, &(0x7f0000000140)=ANY=[], 0x8) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB], 0x50}}, 0x0) sendmsg$NFT_BATCH(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)=ANY=[@ANYBLOB="140000001000009006000000000000000000000a3c000000090a050600001900000000000100000008000a40000000000900020073797a32000000000900010073797a3000000000080005400000001414000000110001"], 0x64}}, 0x0) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETSETELEM(r6, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000580)=ANY=[@ANYBLOB="2c0000000d0a010e0000000000000000010000000900010073797a30000000000900020073797a3200000000cb97d6513e5986c29fe24fffb436f3144d8b419c1118e495d11031278cdf691ed1c927eb85f567223772542f5b3ee45adbbed11d0e24f729d09ad57307776bef6b40eb5871f3a93015684942000000000000000810a9b1ab216e8cbbc0c4ffbdb873193c0bc449b3375050f820795426ec0cce6a13a91825ea7a7a70c0245a698faa7cbbcd7859cb27a6ec53aab79a3b2ba9b08509c881805190891aae10845f1cba4b33d8893df1a0a8524a208bd4acab9d765e8b"], 0x2c}}, 0x0) truncate(&(0x7f0000000180)='./file2\x00', 0x20004) 7.336873298s ago: executing program 2 (id=2769): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0x60, 0x30, 0x1, 0x0, 0x0, {}, [{0x4c, 0x1, [@m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x60}, 0x1, 0x0, 0x0, 0x800}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = syz_open_dev$vbi(&(0x7f0000000000), 0x0, 0x2) ioctl$VIDIOC_S_INPUT(r0, 0xc0045627, &(0x7f00000000c0)=0x1) syz_open_dev$vbi(&(0x7f0000000040), 0x0, 0x2) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$TOKEN_CREATE(0x24, 0x0, 0x0) r4 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r5 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_NAMED_QUEUE(r5, 0xc0bc5310, &(0x7f0000000300)={0x18, 0xffffffff, 0x0, 'queue1\x00', 0xfee}) ioctl$TIOCSETD(r4, 0x5423, &(0x7f0000000040)=0x11) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x9, 0x3, 0x10004, 0x5, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) r6 = inotify_init() r7 = socket$inet6(0xa, 0x2, 0x0) ioctl$sock_SIOCETHTOOL(r7, 0x89f0, &(0x7f0000000040)={'bridge0\x00', &(0x7f0000000100)=@ethtool_coalesce={0xf, 0x0, 0x6dd68c91, 0x6, 0xe, 0xfff, 0x0, 0xc0000000, 0x402, 0x3, 0x5, 0x7f, 0x3, 0x6, 0x7f, 0xfffffffc, 0x0, 0x800002, 0x80000000, 0x2, 0x1ff, 0xfffffff9, 0xc}}) readv(r6, &(0x7f0000000140)=[{&(0x7f0000000040)=""/182, 0xb6}], 0x1) 5.596995825s ago: executing program 7 (id=2770): io_setup(0x8, &(0x7f0000002740)) r0 = socket(0x2b, 0x80801, 0x1) syz_genetlink_get_family_id$tipc2(0x0, r0) socket$kcm(0x10, 0x2, 0x0) mkdir(&(0x7f00000002c0)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000000)='cgroup2\x00', 0x0, 0x0) r1 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0) r2 = openat$cgroup_subtree(r1, &(0x7f00000001c0), 0x2, 0x0) socket$packet(0x11, 0x3, 0x300) r3 = socket$kcm(0x10, 0x2, 0x4) r4 = socket$qrtr(0x2a, 0x2, 0x0) connect$qrtr(r4, &(0x7f0000000040)={0x2a, 0xffffffff, 0xfffffffe}, 0xc) write(r4, 0x0, 0x97) sendmsg$kcm(r3, 0x0, 0x0) r5 = fsopen(&(0x7f0000000180)='ntfs3\x00', 0x0) r6 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x1001, 0x0) mkdir(0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x3) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r7 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r7, &(0x7f0000019680)=""/102392, 0x18ff8) r8 = socket$inet_udp(0x2, 0x2, 0x0) sendmsg$TEAM_CMD_OPTIONS_SET(0xffffffffffffffff, &(0x7f0000000c00)={&(0x7f0000000280), 0xc, 0x0, 0x1, 0x0, 0x0, 0x1afbd70e0f756092}, 0x20000000) ioctl$sock_inet_SIOCSARP(r8, 0x8955, &(0x7f0000000300)={{0x2, 0x4e20, @private=0xa010100}, {0x1, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}, 0x109b70819ce8d017, {0x2, 0x4e21, @initdev={0xac, 0x1e, 0x1, 0x0}}, 'team_slave_1\x00'}) dup2(r6, r5) write$cgroup_subtree(r2, &(0x7f0000000080)={[{0x2b, 'cpuset'}]}, 0x8) 5.047921495s ago: executing program 2 (id=2771): mount(0x0, &(0x7f0000000000)='./cgroup\x00', 0x0, 0x200013, 0x0) openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000440), 0x0, 0x0) socket$packet(0x11, 0x2, 0x300) r0 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000240)={'syz_tun\x00', 0x0}) bind$packet(r0, &(0x7f0000000300)={0x11, 0x0, r1, 0x1, 0x0, 0x6, @remote}, 0x14) syz_emit_ethernet(0x4a, 0x0, 0x0) sched_setscheduler(0x0, 0x2, 0x0) socket$inet(0x2, 0x2, 0x1) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x4) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) sched_setaffinity(0x0, 0xfffffef7, &(0x7f0000000740)=0x410000002) r4 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/partitions\x00', 0x0, 0x0) r5 = openat$sysctl(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/vm/drop_caches\x00', 0x1, 0x0) sendfile(r5, r4, &(0x7f0000002080)=0x64, 0x23b) r6 = openat(0xffffffffffffff9c, 0x0, 0x40042, 0x0) pwrite64(r6, 0x0, 0x0, 0xfecf) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) getpid() mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)) unshare(0x24020400) openat(0xffffffffffffff9c, 0x0, 0x42, 0x0) syz_open_dev$usbfs(&(0x7f0000003f00), 0x1ff, 0xa401) 3.687205114s ago: executing program 7 (id=2772): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) quotactl_fd$Q_GETFMT(0xffffffffffffffff, 0xffffffff80000402, 0x0, &(0x7f0000000280)) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x0, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) inotify_init() prctl$PR_GET_TID_ADDRESS(0x28, &(0x7f0000000040)) socket$l2tp6(0xa, 0x2, 0x73) bind$l2tp6(0xffffffffffffffff, &(0x7f0000000100)={0xa, 0x0, 0x0, @empty, 0x0, 0x3}, 0x20) socket$nl_route(0x10, 0x3, 0x0) r3 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000080)='/proc/diskstats\x00', 0x0, 0x0) r4 = openat$tcp_mem(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/net/ipv4/tcp_wmem\x00', 0x1, 0x0) sendfile(r4, r3, 0x0, 0x3fffff) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000300)={0x6, 0x3, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000002000095"], &(0x7f00000001c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) socket$packet(0x11, 0x2, 0x300) r5 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_MCAST_JOIN_GROUP(r5, 0x29, 0x2a, &(0x7f0000000140)={0x0, {{0xa, 0x0, 0x0, @mcast2}}}, 0x88) setsockopt$inet6_MCAST_MSFILTER(r5, 0x29, 0x30, &(0x7f0000000a80)=ANY=[@ANYRES64=r2], 0x190) 3.599543465s ago: executing program 2 (id=2773): pselect6(0x40, &(0x7f00000001c0)={0xcd, 0x0, 0x0, 0x0, 0x20000000001, 0x4a92, 0xff, 0x2}, 0x0, 0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket$inet6(0xa, 0x2, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x5, &(0x7f0000001000)=ANY=[@ANYBLOB="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"/2574], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000fc0)={&(0x7f0000000000)={0x2, 0x4001, @remote}, 0x10, 0x0}, 0x20000811) r5 = socket$kcm(0x29, 0x2, 0x0) dup2(r4, r2) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0xe, 0x5, &(0x7f0000001dc0)=ANY=[@ANYRES32], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x12, 0xffffffffffffffff, 0x8, 0x0, 0xffffffffffffff2c, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r6 = socket$kcm(0x2, 0x1, 0x0) sendmsg$inet(r6, &(0x7f0000000fc0)={&(0x7f0000000000)={0x2, 0x4001, @remote}, 0x10, 0x0}, 0x20000811) ioctl$sock_kcm_SIOCKCMATTACH(r5, 0x89e0, &(0x7f0000000040)={0xffffffffffffffff, r4}) close(r5) bind$inet6(r3, &(0x7f0000f5dfe4)={0xa, 0x4e20, 0x0, @empty}, 0x1c) sendto$inet6(r3, 0x0, 0x0, 0x0, &(0x7f0000000300)={0xa, 0x4e20, 0x0, @mcast1}, 0x1c) ioperm(0x0, 0x444, 0xb1f) syz_init_net_socket$rose(0xb, 0x5, 0x0) 1.666141873s ago: executing program 2 (id=2774): io_setup(0x8, &(0x7f0000002740)) r0 = socket(0x2b, 0x80801, 0x1) syz_genetlink_get_family_id$tipc2(0x0, r0) socket$kcm(0x10, 0x2, 0x0) mkdir(&(0x7f00000002c0)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000000)='cgroup2\x00', 0x0, 0x0) r1 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0) r2 = openat$cgroup_subtree(r1, &(0x7f00000001c0), 0x2, 0x0) socket$packet(0x11, 0x3, 0x300) r3 = socket$kcm(0x10, 0x2, 0x4) r4 = socket$qrtr(0x2a, 0x2, 0x0) connect$qrtr(r4, &(0x7f0000000040)={0x2a, 0xffffffff, 0xfffffffe}, 0xc) sendmsg$kcm(r3, 0x0, 0x0) syz_genetlink_get_family_id$batadv(&(0x7f0000000140), 0xffffffffffffffff) r5 = fsopen(&(0x7f0000000180)='ntfs3\x00', 0x0) r6 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x1001, 0x0) mkdir(0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x3) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r7 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r7, &(0x7f0000019680)=""/102392, 0x18ff8) r8 = socket$inet_udp(0x2, 0x2, 0x0) sendmsg$TEAM_CMD_OPTIONS_SET(0xffffffffffffffff, &(0x7f0000000c00)={&(0x7f0000000280), 0xc, 0x0, 0x1, 0x0, 0x0, 0x1afbd70e0f756092}, 0x20000000) ioctl$sock_inet_SIOCSARP(r8, 0x8955, &(0x7f0000000300)={{0x2, 0x4e20, @private=0xa010100}, {0x1, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}, 0x109b70819ce8d017, {0x2, 0x4e21, @initdev={0xac, 0x1e, 0x1, 0x0}}, 'team_slave_1\x00'}) dup2(r6, r5) write$cgroup_subtree(r2, &(0x7f0000000080)={[{0x2b, 'cpuset'}]}, 0x8) 1.267711228s ago: executing program 7 (id=2775): socket$nl_generic(0x10, 0x3, 0x10) r0 = creat(0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) mkdir(0x0, 0x0) mount$fuse(0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB, @ANYRESHEX=0x0]) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) sched_setaffinity(0x0, 0xfffffef7, &(0x7f0000000740)=0x410000002) mmap$xdp(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x2, 0x42032, 0xffffffffffffffff, 0x0) mremap(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x1000, 0x0, &(0x7f00008b5000/0x1000)=nil) setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x1b, &(0x7f0000000280)=0x1e51, 0x4) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={0x0}, 0x10) syz_open_dev$usbfs(0x0, 0x76, 0x101301) prctl$PR_GET_SPECULATION_CTRL(0x35, 0x0, 0x10) r3 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='status\x00') preadv(r3, &(0x7f0000000340)=[{&(0x7f0000000080)=""/122, 0x7a}], 0x1, 0x0, 0x0) copy_file_range(r0, 0x0, r0, 0x0, 0xb, 0x0) r4 = socket$netlink(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_DROP_MEMBERSHIP(r4, 0x10e, 0xc, &(0x7f0000000640)=0x4, 0x4) ioctl$NBD_SET_SOCK(0xffffffffffffffff, 0xab00, 0xffffffffffffffff) getsockopt$inet_sctp_SCTP_DELAYED_SACK(r0, 0x84, 0x10, &(0x7f00000001c0)=@assoc_value={0x0, 0x8}, &(0x7f0000000200)=0x8) 385.24873ms ago: executing program 7 (id=2776): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) quotactl_fd$Q_GETFMT(0xffffffffffffffff, 0xffffffff80000402, 0x0, &(0x7f0000000280)) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x0, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_GET_TID_ADDRESS(0x28, &(0x7f0000000040)) r3 = socket$l2tp6(0xa, 0x2, 0x73) bind$l2tp6(r3, &(0x7f0000000000)={0xa, 0x0, 0x0, @empty}, 0x20) bind$l2tp6(0xffffffffffffffff, &(0x7f0000000100)={0xa, 0x0, 0x0, @empty, 0x0, 0x3}, 0x20) socket$nl_route(0x10, 0x3, 0x0) r4 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000080)='/proc/diskstats\x00', 0x0, 0x0) r5 = openat$tcp_mem(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/net/ipv4/tcp_wmem\x00', 0x1, 0x0) sendfile(r5, r4, 0x0, 0x3fffff) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000300)={0x6, 0x3, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000002000095"], &(0x7f00000001c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) socket$packet(0x11, 0x2, 0x300) r6 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_MCAST_JOIN_GROUP(r6, 0x29, 0x2a, &(0x7f0000000140)={0x0, {{0xa, 0x0, 0x0, @mcast2}}}, 0x88) setsockopt$inet6_MCAST_MSFILTER(r6, 0x29, 0x30, &(0x7f0000000a80)=ANY=[@ANYRES64=r2], 0x190) 0s ago: executing program 8 (id=2777): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x0, 0x0) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) socketpair$unix(0x1, 0x5, 0x0, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0x12, &(0x7f0000000080)=@framed={{0x18, 0x8, 0x0, 0x0, 0xffd0}, [@map_fd={0x18, 0x0, 0x0}, @generic={0x66, 0x8}, @initr0, @exit, @alu={0x6, 0x0, 0x3, 0xa, 0x0, 0x2}, @printk={@x, {}, {}, {}, {}, {0x5, 0x0, 0xb, 0xa}}]}, &(0x7f0000000000)='GPL\x00', 0x2, 0xde, &(0x7f0000000340)=""/222, 0x0, 0x8, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) kernel console output (not intermixed with test programs): 104.137915][T14817] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1104.148595][T14817] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1104.173450][T13144] cdc_ncm 4-1:1.0: skipping garbage [ 1104.178898][T13144] cdc_ncm 4-1:1.0: skipping garbage [ 1104.184248][T13144] cdc_ncm 4-1:1.0: CDC Union missing and no IAD found [ 1104.192233][T13144] cdc_ncm 4-1:1.0: bind() failure [ 1104.205432][T13144] usb 4-1: USB disconnect, device number 4 [ 1104.231740][T14625] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1104.250374][T14625] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1104.297563][T14625] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1104.319438][T14625] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1104.339205][T14625] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1104.367165][ T6000] hso 9-1:0.0: Failed to find BULK IN ep [ 1104.374967][T14625] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1104.387175][ T6000] usb-storage 9-1:0.0: USB Mass Storage device detected [ 1104.588522][ T6487] hsr_slave_0: left promiscuous mode [ 1104.643919][ T6487] hsr_slave_1: left promiscuous mode [ 1104.652167][ T6487] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1104.725298][ T6487] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1104.732874][ T6000] usb 9-1: USB disconnect, device number 3 [ 1106.048231][T14844] set match dimension is over the limit! [ 1108.125285][ T6000] usb 8-1: new high-speed USB device number 15 using dummy_hcd [ 1109.139418][ T6000] usb 8-1: device descriptor read/all, error -71 [ 1109.194785][ T9329] usb 9-1: new high-speed USB device number 4 using dummy_hcd [ 1109.627708][T14862] netlink: 20 bytes leftover after parsing attributes in process `syz.0.2021'. [ 1109.637100][T14862] netlink: 20 bytes leftover after parsing attributes in process `syz.0.2021'. [ 1110.621514][ T6487] team0 (unregistering): Port device team_slave_1 removed [ 1110.705323][ T6000] usb 8-1: new high-speed USB device number 16 using dummy_hcd [ 1110.724620][ T9329] usb 9-1: Using ep0 maxpacket: 32 [ 1110.743690][ T9329] usb 9-1: config 0 has an invalid interface number: 89 but max is 0 [ 1110.765891][ T9329] usb 9-1: config 0 has no interface number 0 [ 1110.772250][ T9329] usb 9-1: config 0 interface 89 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 1110.798102][ T9329] usb 9-1: New USB device found, idVendor=12d1, idProduct=7ef3, bcdDevice=54.68 [ 1110.815203][ T6487] team0 (unregistering): Port device team_slave_0 removed [ 1110.834653][ T9329] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1110.844797][ T6000] usb 8-1: device descriptor read/64, error -71 [ 1110.889748][ T9329] usb 9-1: Product: syz [ 1110.894443][ T9329] usb 9-1: Manufacturer: syz [ 1110.933353][ T9329] usb 9-1: SerialNumber: syz [ 1110.986805][ T6000] usb usb8-port1: attempt power cycle [ 1111.023016][ T9329] usb 9-1: config 0 descriptor?? [ 1111.035278][ T9329] hub 9-1:0.89: bad descriptor, ignoring hub [ 1111.772211][ T9329] hub 9-1:0.89: probe with driver hub failed with error -5 [ 1111.801709][ T9329] option 9-1:0.89: GSM modem (1-port) converter detected [ 1111.825389][ T6000] usb 8-1: new high-speed USB device number 17 using dummy_hcd [ 1111.874107][ T6000] usb 8-1: device descriptor read/8, error -71 [ 1112.147552][ T6000] usb 8-1: new high-speed USB device number 18 using dummy_hcd [ 1112.263201][ T6000] usb 8-1: device descriptor read/8, error -71 [ 1112.389434][ T6000] usb usb8-port1: unable to enumerate USB device [ 1112.444008][T14876] loop3: detected capacity change from 0 to 256 [ 1112.459777][T14876] vfat: Unknown parameter 'quieþ' [ 1112.546932][ T9329] usb 9-1: USB disconnect, device number 4 [ 1112.573025][ T9329] option 9-1:0.89: device disconnected [ 1112.710928][ T6000] usb 8-1: new high-speed USB device number 19 using dummy_hcd [ 1114.028412][ T6000] usb 8-1: New USB device found, idVendor=0af0, idProduct=7a05, bcdDevice= 0.00 [ 1114.038233][ T6000] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1114.047303][ T6000] usb 8-1: Product: syz [ 1114.093675][ T6000] usb 8-1: Manufacturer: syz [ 1114.103711][ T6000] usb 8-1: SerialNumber: syz [ 1114.145298][ T6000] usb 8-1: config 0 descriptor?? [ 1114.858966][T14872] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1114.870631][T14872] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1115.251748][ T6000] hso 8-1:0.0: Failed to find BULK IN ep [ 1115.268627][ T6000] usb-storage 8-1:0.0: USB Mass Storage device detected [ 1115.362210][T14625] hsr_slave_0: entered promiscuous mode [ 1115.382395][T14625] hsr_slave_1: entered promiscuous mode [ 1115.396602][ T6000] usb 8-1: USB disconnect, device number 19 [ 1115.448444][T14625] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1115.464874][T14625] Cannot create hsr debugfs directory [ 1115.582567][ T1292] ieee802154 phy0 wpan0: encryption failed: -22 [ 1115.589104][ T1292] ieee802154 phy1 wpan1: encryption failed: -22 [ 1115.858885][T14902] fuse: Bad value for 'fd' [ 1118.839644][T11445] Bluetooth: hci1: command 0x0406 tx timeout [ 1119.104772][T13921] usb 4-1: new high-speed USB device number 5 using dummy_hcd [ 1119.444758][T13921] usb 4-1: Using ep0 maxpacket: 8 [ 1120.266000][T13921] usb 4-1: New USB device found, idVendor=0763, idProduct=2081, bcdDevice=d0.ab [ 1120.284609][T13921] usb 4-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 1120.292862][T13921] usb 4-1: Product: syz [ 1120.430100][T13921] usb 4-1: Manufacturer: syz [ 1120.437453][T13921] usb 4-1: SerialNumber: syz [ 1120.722546][T13921] usb 4-1: config 0 descriptor?? [ 1120.728567][T13921] usb 4-1: can't set config #0, error -71 [ 1120.770953][T13921] usb 4-1: USB disconnect, device number 5 [ 1124.544287][T14625] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 1124.618710][T14625] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 1124.744710][ T5897] usb 4-1: new high-speed USB device number 6 using dummy_hcd [ 1124.774088][T14625] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 1124.824360][T14625] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 1124.878752][T14967] fuse: Bad value for 'fd' [ 1124.895048][ T5897] usb 4-1: Using ep0 maxpacket: 8 [ 1124.932217][T14969] netlink: 4 bytes leftover after parsing attributes in process `syz.8.2051'. [ 1124.952219][ T5897] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1124.972296][ T5897] usb 4-1: New USB device found, idVendor=046d, idProduct=0892, bcdDevice=6d.2a [ 1124.994694][ T5897] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1125.015874][T14969] veth0_macvtap: left promiscuous mode [ 1125.023949][ T5897] usb 4-1: config 0 descriptor?? [ 1125.042684][ T5897] gspca_main: vc032x-2.14.0 probing 046d:0892 [ 1126.627534][T14625] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1126.656901][T14625] 8021q: adding VLAN 0 to HW filter on device team0 [ 1127.901565][ T7444] bridge0: port 1(bridge_slave_0) entered blocking state [ 1127.908796][ T7444] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1128.197130][ T5897] gspca_vc032x: reg_w err -110 [ 1128.208152][ T5897] vc032x 4-1:0.0: probe with driver vc032x failed with error -110 [ 1128.226013][ T7444] bridge0: port 2(bridge_slave_1) entered blocking state [ 1128.233251][ T7444] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1129.244959][T13144] usb 9-1: new high-speed USB device number 5 using dummy_hcd [ 1129.297686][T14625] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 1129.606382][T13144] usb 9-1: Using ep0 maxpacket: 8 [ 1129.788402][T13144] usb 9-1: device descriptor read/all, error -71 [ 1129.878682][T14625] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 1129.939689][ T5954] usb 4-1: USB disconnect, device number 6 [ 1130.642240][T13921] kernel write not supported for file /vcs (pid: 13921 comm: kworker/0:6) [ 1130.837390][T15030] fuse: Bad value for 'fd' [ 1130.853299][T15030] 9pnet_fd: p9_fd_create_tcp (15030): problem connecting socket to 127.0.0.1 [ 1132.251942][T14625] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1137.687055][T15063] netlink: 20 bytes leftover after parsing attributes in process `syz.1.2070'. [ 1137.696448][T15063] netlink: 20 bytes leftover after parsing attributes in process `syz.1.2070'. [ 1139.637251][T14625] veth0_vlan: entered promiscuous mode [ 1139.706583][T14625] veth1_vlan: entered promiscuous mode [ 1139.828137][T14625] veth0_macvtap: entered promiscuous mode [ 1139.880474][T14625] veth1_macvtap: entered promiscuous mode [ 1140.335548][T15084] netlink: 20 bytes leftover after parsing attributes in process `syz.1.2073'. [ 1140.344692][T15084] netlink: 20 bytes leftover after parsing attributes in process `syz.1.2073'. [ 1141.808970][ T9329] usb 9-1: new high-speed USB device number 7 using dummy_hcd [ 1142.034995][ T9329] usb 9-1: Using ep0 maxpacket: 8 [ 1142.100091][ T9329] usb 9-1: New USB device found, idVendor=0763, idProduct=2081, bcdDevice=d0.ab [ 1142.184078][ T9329] usb 9-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 1142.990576][ T9329] usb 9-1: Product: syz [ 1143.047760][ T9329] usb 9-1: Manufacturer: syz [ 1143.052510][ T9329] usb 9-1: SerialNumber: syz [ 1143.156707][ T9329] usb 9-1: config 0 descriptor?? [ 1143.198089][ T9329] usb 9-1: can't set config #0, error -71 [ 1143.217275][ T9329] usb 9-1: USB disconnect, device number 7 [ 1144.509782][T11445] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 1144.519414][T11445] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 1144.529690][T11445] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 1144.538108][T11445] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 1144.546408][T11445] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 1144.553690][T11445] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 1144.578043][T15125] Invalid source name [ 1144.582091][T15125] UBIFS error (pid: 15125): cannot open "/dev/sg0", error -22 [ 1144.583520][T15125] 9pnet_fd: Insufficient options for proto=fd [ 1146.195594][T15135] netlink: 20 bytes leftover after parsing attributes in process `syz.8.2082'. [ 1146.204712][T15135] netlink: 20 bytes leftover after parsing attributes in process `syz.8.2082'. [ 1147.047079][T11445] Bluetooth: hci3: command tx timeout [ 1148.971233][T15154] fuse: Bad value for 'fd' [ 1148.983052][T15154] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2086'. [ 1149.054781][T11445] Bluetooth: hci3: command tx timeout [ 1149.460720][T15162] loop7: detected capacity change from 0 to 4096 [ 1149.742056][T15162] NILFS (loop7): invalid segment: Checksum error in segment payload [ 1149.793103][T15162] NILFS (loop7): trying rollback from an earlier position [ 1150.046183][T15162] NILFS (loop7): recovery complete [ 1150.081988][T15176] NILFS (loop7): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 1151.141159][T11445] Bluetooth: hci3: command tx timeout [ 1151.500440][T15162] NILFS (loop7): error -2 reading inode: ino=70368744178112 [ 1153.473446][T11445] Bluetooth: hci3: command tx timeout [ 1154.013822][T15212] fuse: Bad value for 'fd' [ 1154.019245][T15212] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2099'. [ 1154.204772][T13144] usb 8-1: new high-speed USB device number 20 using dummy_hcd [ 1154.694679][T13144] usb 8-1: Using ep0 maxpacket: 8 [ 1154.702627][T13144] usb 8-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1154.901315][T13144] usb 8-1: New USB device found, idVendor=046d, idProduct=0892, bcdDevice=6d.2a [ 1154.911005][T13144] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1154.944792][T13144] usb 8-1: config 0 descriptor?? [ 1154.953096][T13144] gspca_main: vc032x-2.14.0 probing 046d:0892 [ 1155.875831][T13144] gspca_vc032x: reg_r err -110 [ 1155.880700][T13144] vc032x 8-1:0.0: probe with driver vc032x failed with error -110 [ 1156.990073][T15118] chnl_net:caif_netlink_parms(): no params data found [ 1157.015750][ T6000] usb 8-1: USB disconnect, device number 20 [ 1157.029356][T15212] veth0_macvtap: left promiscuous mode [ 1157.589449][T15256] netlink: 20 bytes leftover after parsing attributes in process `syz.1.2102'. [ 1157.598627][T15256] netlink: 20 bytes leftover after parsing attributes in process `syz.1.2102'. [ 1163.291610][T15118] bridge0: port 1(bridge_slave_0) entered blocking state [ 1163.300286][T15118] bridge0: port 1(bridge_slave_0) entered disabled state [ 1163.307628][T15118] bridge_slave_0: entered allmulticast mode [ 1163.321656][T15118] bridge_slave_0: entered promiscuous mode [ 1163.344807][T15118] bridge0: port 2(bridge_slave_1) entered blocking state [ 1163.360424][T15118] bridge0: port 2(bridge_slave_1) entered disabled state [ 1163.375031][T15118] bridge_slave_1: entered allmulticast mode [ 1163.390791][T15118] bridge_slave_1: entered promiscuous mode [ 1163.483826][T15118] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1165.617625][T15118] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1166.872162][ T6414] bridge_slave_1: left allmulticast mode [ 1166.894739][ T6414] bridge_slave_1: left promiscuous mode [ 1167.781106][ T6414] bridge0: port 2(bridge_slave_1) entered disabled state [ 1168.056002][ T6414] bridge_slave_0: left allmulticast mode [ 1168.326644][ T6414] bridge_slave_0: left promiscuous mode [ 1168.332731][ T6414] bridge0: port 1(bridge_slave_0) entered disabled state [ 1168.651344][T15318] 9pnet_fd: Insufficient options for proto=fd [ 1168.734652][T13921] usb 9-1: new high-speed USB device number 8 using dummy_hcd [ 1169.067706][T13921] usb 9-1: Using ep0 maxpacket: 8 [ 1169.086204][T13921] usb 9-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1169.106652][T13921] usb 9-1: New USB device found, idVendor=046d, idProduct=0892, bcdDevice=6d.2a [ 1169.126571][T13921] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1169.319609][T13921] usb 9-1: config 0 descriptor?? [ 1170.252234][T13921] gspca_main: vc032x-2.14.0 probing 046d:0892 [ 1171.663799][T13921] gspca_vc032x: reg_w err -71 [ 1171.678874][T13921] vc032x 9-1:0.0: probe with driver vc032x failed with error -71 [ 1171.706205][T13921] usb 9-1: USB disconnect, device number 8 [ 1171.976524][ T6414] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1172.001276][ T6414] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1172.057385][ T6414] bond0 (unregistering): Released all slaves [ 1172.136822][T15118] team0: Port device team_slave_0 added [ 1172.178351][T15118] team0: Port device team_slave_1 added [ 1172.594946][ T6414] hsr_slave_0: left promiscuous mode [ 1172.616901][ T6414] hsr_slave_1: left promiscuous mode [ 1172.655080][ T6414] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1172.674693][ T6414] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1172.727775][ T6414] veth1_macvtap: left promiscuous mode [ 1172.733388][ T6414] veth0_macvtap: left promiscuous mode [ 1172.798008][ T6414] veth1_vlan: left promiscuous mode [ 1172.803626][ T6414] veth0_vlan: left promiscuous mode [ 1173.680050][ T9329] usb 9-1: new high-speed USB device number 9 using dummy_hcd [ 1174.225061][ T9329] usb 9-1: Using ep0 maxpacket: 8 [ 1174.233864][ T9329] usb 9-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 1174.243266][ T9329] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1174.257915][ T9329] usb 9-1: Product: syz [ 1174.272640][ T9329] usb 9-1: Manufacturer: syz [ 1174.282753][ T9329] usb 9-1: SerialNumber: syz [ 1174.296851][ T9329] usb 9-1: config 0 descriptor?? [ 1174.565273][ T9329] usb 9-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 1175.506382][ T9329] dvb_usb_rtl28xxu 9-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -32 [ 1177.095142][ T1292] ieee802154 phy0 wpan0: encryption failed: -22 [ 1177.101475][ T1292] ieee802154 phy1 wpan1: encryption failed: -22 [ 1177.538602][ T9329] usb 9-1: USB disconnect, device number 9 [ 1183.188690][ T6414] team0 (unregistering): Port device team_slave_1 removed [ 1183.917794][T15458] netlink: 20 bytes leftover after parsing attributes in process `syz.1.2147'. [ 1183.927070][T15458] netlink: 20 bytes leftover after parsing attributes in process `syz.1.2147'. [ 1184.567588][ T6414] team0 (unregistering): Port device team_slave_0 removed [ 1186.528705][T15118] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1186.535801][T15118] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1186.580269][T15118] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1186.805215][T15473] fuse: Bad value for 'fd' [ 1186.905636][T15473] 9pnet_fd: p9_fd_create_tcp (15473): problem connecting socket to 127.0.0.1 [ 1187.628905][T15118] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1187.678016][T15118] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1188.550503][T15118] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1190.276806][T15118] hsr_slave_0: entered promiscuous mode [ 1190.302701][T15118] hsr_slave_1: entered promiscuous mode [ 1190.349693][T15118] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1190.400391][T15118] Cannot create hsr debugfs directory [ 1190.993497][T15519] fuse: Bad value for 'fd' [ 1192.015001][T15519] 9pnet_fd: p9_fd_create_tcp (15519): problem connecting socket to 127.0.0.1 [ 1193.612407][T15531] netlink: 'syz.1.2170': attribute type 3 has an invalid length. [ 1200.463335][T15592] 9pnet_fd: Insufficient options for proto=fd [ 1201.362780][ T52] usb 9-1: new high-speed USB device number 10 using dummy_hcd [ 1201.954955][ T52] usb 9-1: Using ep0 maxpacket: 8 [ 1202.134993][ T52] usb 9-1: device descriptor read/all, error -71 [ 1202.476646][T15613] loop3: detected capacity change from 0 to 22 [ 1202.483583][T15613] MTD: Attempt to mount non-MTD device "/dev/loop3" [ 1202.520245][T15613] romfs: Mounting image 'rom 637cf1fa' through the block layer [ 1202.633337][T15613] loop3: detected capacity change from 0 to 2048 [ 1202.741303][T15613] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1202.817131][ T5851] usb 8-1: new high-speed USB device number 21 using dummy_hcd [ 1203.735605][T15613] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1203.764776][ T5851] usb 8-1: Using ep0 maxpacket: 8 [ 1203.824832][ T5851] usb 8-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 1203.862692][ T5851] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1204.853527][ T5851] usb 8-1: Product: syz [ 1204.857800][ T5851] usb 8-1: Manufacturer: syz [ 1204.862481][ T5851] usb 8-1: SerialNumber: syz [ 1204.872869][ T5851] usb 8-1: config 0 descriptor?? [ 1205.849684][ T5851] usb 8-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 1206.584772][ T5851] dvb_usb_rtl28xxu 8-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -71 [ 1206.631231][ T55] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 1206.640664][ T55] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 1206.652014][ T55] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 1206.662702][ T55] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 1206.672133][ T55] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 1206.679553][ T55] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 1206.706516][ T5851] usb 8-1: USB disconnect, device number 21 [ 1208.739456][ T2953] bridge_slave_1: left allmulticast mode [ 1208.754863][T11445] Bluetooth: hci2: command tx timeout [ 1208.771913][ T2953] bridge_slave_1: left promiscuous mode [ 1209.760814][ T2953] bridge0: port 2(bridge_slave_1) entered disabled state [ 1209.803839][ T2953] bridge_slave_0: left allmulticast mode [ 1209.962255][ T2953] bridge_slave_0: left promiscuous mode [ 1210.024306][ T2953] bridge0: port 1(bridge_slave_0) entered disabled state [ 1210.816830][T11445] Bluetooth: hci2: command tx timeout [ 1211.401779][ T2953] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1211.474123][ T2953] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1212.914632][T11445] Bluetooth: hci2: command tx timeout [ 1213.038853][ T2953] bond0 (unregistering): Released all slaves [ 1213.301829][ T2953] hsr_slave_0: left promiscuous mode [ 1213.542353][ T2953] hsr_slave_1: left promiscuous mode [ 1214.375216][ T2953] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1214.451461][ T2953] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1215.004652][T11445] Bluetooth: hci2: command tx timeout [ 1215.117681][ T5897] usb 8-1: new high-speed USB device number 22 using dummy_hcd [ 1215.975543][ T5897] usb 8-1: New USB device found, idVendor=0af0, idProduct=7a05, bcdDevice= 0.00 [ 1215.995820][ T5897] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1216.024146][ T5897] usb 8-1: Product: syz [ 1216.028509][ T5897] usb 8-1: Manufacturer: syz [ 1216.033113][ T5897] usb 8-1: SerialNumber: syz [ 1216.058691][ T5897] usb 8-1: config 0 descriptor?? [ 1216.272439][T15720] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1216.292368][T15720] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1216.407363][ T2953] team0 (unregistering): Port device team_slave_1 removed [ 1216.517648][ T5897] hso 8-1:0.0: Failed to find BULK IN ep [ 1216.551718][ T2953] team0 (unregistering): Port device team_slave_0 removed [ 1216.562481][ T5897] usb-storage 8-1:0.0: USB Mass Storage device detected [ 1216.719280][ T5897] usb 8-1: USB disconnect, device number 22 [ 1219.756526][ T5897] usb 9-1: new high-speed USB device number 12 using dummy_hcd [ 1219.944626][ T5897] usb 9-1: Using ep0 maxpacket: 8 [ 1220.006327][ T5897] usb 9-1: New USB device found, idVendor=0763, idProduct=2081, bcdDevice=d0.ab [ 1221.002304][ T5897] usb 9-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 1221.144286][T15646] chnl_net:caif_netlink_parms(): no params data found [ 1221.177615][ T5897] usb 9-1: Product: syz [ 1221.195174][ T5897] usb 9-1: Manufacturer: syz [ 1221.211784][ T5897] usb 9-1: SerialNumber: syz [ 1221.235183][ T5897] usb 9-1: config 0 descriptor?? [ 1222.249002][T15772] loop7: detected capacity change from 0 to 4096 [ 1222.340233][T15772] NILFS (loop7): invalid segment: Checksum error in segment payload [ 1222.361655][T15646] bridge0: port 1(bridge_slave_0) entered blocking state [ 1222.495109][T15772] NILFS (loop7): trying rollback from an earlier position [ 1222.505058][T15646] bridge0: port 1(bridge_slave_0) entered disabled state [ 1222.519204][T15646] bridge_slave_0: entered allmulticast mode [ 1222.538259][T15646] bridge_slave_0: entered promiscuous mode [ 1222.614618][T15646] bridge0: port 2(bridge_slave_1) entered blocking state [ 1222.617773][T15772] NILFS (loop7): recovery complete [ 1222.621732][T15646] bridge0: port 2(bridge_slave_1) entered disabled state [ 1222.652252][ T5897] usb 9-1: USB disconnect, device number 12 [ 1222.696170][T15786] NILFS (loop7): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 1222.723052][T15646] bridge_slave_1: entered allmulticast mode [ 1222.769030][T15646] bridge_slave_1: entered promiscuous mode [ 1223.221169][T15646] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1223.590268][ T5897] usb 9-1: new high-speed USB device number 13 using dummy_hcd [ 1223.966441][T15646] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1224.422327][ T5897] usb 9-1: Using ep0 maxpacket: 8 [ 1224.452917][T15646] team0: Port device team_slave_0 added [ 1224.455195][ T5897] usb 9-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 1224.479885][ T5897] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1224.487984][T15646] team0: Port device team_slave_1 added [ 1224.693540][T15646] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1224.700968][T15646] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1224.735188][ T5897] usb 9-1: Product: syz [ 1224.750165][ T5897] usb 9-1: Manufacturer: syz [ 1224.767968][ T5897] usb 9-1: SerialNumber: syz [ 1224.778978][ T5897] usb 9-1: config 0 descriptor?? [ 1224.807082][T15646] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1224.868018][T15646] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1224.898250][T15646] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1225.088858][ T5897] usb 9-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 1225.128374][T15646] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1225.387759][ T5897] dvb_usb_rtl28xxu 9-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -32 [ 1226.546907][T15825] overlayfs: failed to clone upperpath [ 1227.595253][T15646] hsr_slave_0: entered promiscuous mode [ 1227.608935][ T5897] usb 9-1: USB disconnect, device number 13 [ 1227.630479][T15646] hsr_slave_1: entered promiscuous mode [ 1227.678100][T15646] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1227.716324][T15646] Cannot create hsr debugfs directory [ 1227.808909][T15836] loop8: detected capacity change from 0 to 512 [ 1227.899339][T15836] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1227.963644][T15836] ext4 filesystem being mounted at /61/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 1228.945347][T15848] input: syz1 as /devices/virtual/input/input15 [ 1230.427326][T13822] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1230.585682][ T5851] usb 8-1: new high-speed USB device number 23 using dummy_hcd [ 1230.788797][T15646] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 1231.078559][ T5851] usb 8-1: Using ep0 maxpacket: 8 [ 1231.085590][T15646] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 1231.101379][ T5851] usb 8-1: device descriptor read/all, error -71 [ 1231.671272][T15646] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 1231.719320][T15646] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 1232.974337][T15646] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1233.002481][T15646] 8021q: adding VLAN 0 to HW filter on device team0 [ 1233.024021][T12521] bridge0: port 1(bridge_slave_0) entered blocking state [ 1233.031174][T12521] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1233.066412][T12521] bridge0: port 2(bridge_slave_1) entered blocking state [ 1233.073595][T12521] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1234.579030][T15646] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1236.246345][T15646] veth0_vlan: entered promiscuous mode [ 1237.235769][T15646] veth1_vlan: entered promiscuous mode [ 1237.263696][T15646] veth0_macvtap: entered promiscuous mode [ 1237.272963][T15646] veth1_macvtap: entered promiscuous mode [ 1237.288175][T15646] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1237.314601][T15646] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1237.324435][T15646] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1237.352561][T15646] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1237.371234][T15646] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1237.382060][T15646] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1237.440486][T15646] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1237.493381][T15646] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1237.550171][T15646] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1237.595222][T15646] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1237.648481][T15646] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1237.660010][T15646] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1237.670569][T15646] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1237.681707][T15646] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1237.695285][T15646] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1237.703995][T15646] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1237.712800][T15646] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1237.748920][T15646] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1237.942006][T15938] netlink: 20 bytes leftover after parsing attributes in process `syz.0.2244'. [ 1238.020593][T12521] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1238.050359][T12521] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1238.178487][ T6804] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1238.218905][ T6804] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1238.427977][ T1292] ieee802154 phy0 wpan0: encryption failed: -22 [ 1238.434356][ T1292] ieee802154 phy1 wpan1: encryption failed: -22 [ 1239.707555][T15957] netlink: 20 bytes leftover after parsing attributes in process `syz.3.2250'. [ 1239.716733][T15957] netlink: 20 bytes leftover after parsing attributes in process `syz.3.2250'. [ 1241.113565][T15969] bridge0: port 2(bridge_slave_1) entered disabled state [ 1241.121026][T15969] bridge0: port 1(bridge_slave_0) entered disabled state [ 1241.129984][T15969] bridge0: entered allmulticast mode [ 1244.154636][ T5897] usb 8-1: new high-speed USB device number 25 using dummy_hcd [ 1244.425132][ T5897] usb 8-1: Using ep0 maxpacket: 8 [ 1244.444593][ T5897] usb 8-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 1244.462333][ T5897] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1244.508130][ T5897] usb 8-1: Product: syz [ 1244.536267][ T5897] usb 8-1: Manufacturer: syz [ 1244.551006][ T5897] usb 8-1: SerialNumber: syz [ 1244.589426][ T5897] usb 8-1: config 0 descriptor?? [ 1244.827198][ T5897] usb 8-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 1246.116356][ T5897] dvb_usb_rtl28xxu 8-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -32 [ 1247.707741][ T9329] kernel write not supported for file /vcs (pid: 9329 comm: kworker/0:2) [ 1247.790631][ T9329] usb 8-1: USB disconnect, device number 25 [ 1247.898071][T16036] fuse: Bad value for 'fd' [ 1247.925699][T16036] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2263'. [ 1252.602595][T16074] overlayfs: failed to clone upperpath [ 1261.422048][T16128] overlayfs: failed to clone upperpath [ 1262.950528][T16134] fuse: Bad value for 'fd' [ 1263.015493][T16134] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2287'. [ 1263.152056][T16135] loop8: detected capacity change from 0 to 4096 [ 1263.281564][T16135] NILFS (loop8): invalid segment: Checksum error in segment payload [ 1264.111856][T16135] NILFS (loop8): trying rollback from an earlier position [ 1264.379219][T16135] NILFS (loop8): recovery complete [ 1264.436231][T16159] NILFS (loop8): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 1264.946837][T16161] fuse: Bad value for 'fd' [ 1264.961509][T16161] 9pnet_fd: p9_fd_create_tcp (16161): problem connecting socket to 127.0.0.1 [ 1267.389811][T16176] can0: slcan on ttyS3. [ 1269.298605][ T55] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 1269.328087][ T55] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 1269.336348][ T55] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 1269.354929][ T55] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 1269.372420][ T55] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 1269.384809][ T55] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 1269.435938][T16166] can0 (unregistered): slcan off ttyS3. [ 1269.598393][T16189] loop7: detected capacity change from 0 to 256 [ 1269.676649][T16189] vfat: Unknown parameter 'quieþ' [ 1270.336364][ T5897] kernel write not supported for file /vcs (pid: 5897 comm: kworker/0:5) [ 1270.681740][ T5897] kernel write not supported for file /vcs (pid: 5897 comm: kworker/0:5) [ 1271.454731][T11445] Bluetooth: hci3: command tx timeout [ 1271.666056][T16214] loop7: detected capacity change from 0 to 2048 [ 1271.675008][T16214] NILFS (loop7): broken superblock, retrying with spare superblock (blocksize = 1024) [ 1271.710965][ T7444] netdevsim netdevsim6 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1271.768230][T16182] chnl_net:caif_netlink_parms(): no params data found [ 1271.775954][T16220] NILFS (loop7): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 1272.065083][T16228] netlink: 20 bytes leftover after parsing attributes in process `syz.1.2300'. [ 1272.853372][ T7444] netdevsim netdevsim6 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1273.526572][ T7444] netdevsim netdevsim6 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1273.543574][T11445] Bluetooth: hci3: command tx timeout [ 1273.876011][T16238] loop3: detected capacity change from 0 to 4096 [ 1274.298857][T16238] NILFS (loop3): invalid segment: Checksum error in segment payload [ 1274.431916][T16238] NILFS (loop3): trying rollback from an earlier position [ 1274.558759][T16238] NILFS (loop3): recovery complete [ 1274.636373][T16250] NILFS (loop3): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 1274.748219][ T7444] netdevsim netdevsim6 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1275.070502][T16182] bridge0: port 1(bridge_slave_0) entered blocking state [ 1275.081105][T16182] bridge0: port 1(bridge_slave_0) entered disabled state [ 1275.120454][T16182] bridge_slave_0: entered allmulticast mode [ 1275.152691][T16182] bridge_slave_0: entered promiscuous mode [ 1275.209784][T16182] bridge0: port 2(bridge_slave_1) entered blocking state [ 1275.236412][T16182] bridge0: port 2(bridge_slave_1) entered disabled state [ 1275.275016][T16182] bridge_slave_1: entered allmulticast mode [ 1275.284952][T16182] bridge_slave_1: entered promiscuous mode [ 1275.617134][T11445] Bluetooth: hci3: command tx timeout [ 1276.468742][T16182] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1276.548617][T16182] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1276.636286][T16274] netlink: 'syz.3.2314': attribute type 3 has an invalid length. [ 1277.150812][T16182] team0: Port device team_slave_0 added [ 1277.260551][ T7444] bridge_slave_1: left allmulticast mode [ 1277.282030][ T7444] bridge_slave_1: left promiscuous mode [ 1277.308527][ T7444] bridge0: port 2(bridge_slave_1) entered disabled state [ 1277.368581][ T7444] bridge_slave_0: left allmulticast mode [ 1277.380541][ T7444] bridge_slave_0: left promiscuous mode [ 1277.402761][ T7444] bridge0: port 1(bridge_slave_0) entered disabled state [ 1277.697727][T11445] Bluetooth: hci3: command tx timeout [ 1278.134898][T16289] loop8: detected capacity change from 0 to 4096 [ 1278.245155][T16289] NILFS (loop8): invalid segment: Checksum error in segment payload [ 1278.253330][T16289] NILFS (loop8): trying rollback from an earlier position [ 1278.312217][T16289] NILFS (loop8): recovery complete [ 1278.365013][T16299] NILFS (loop8): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 1278.595957][T16289] NILFS (loop8): error -2 reading inode: ino=70368744178112 [ 1280.690398][T16317] loop8: detected capacity change from 0 to 2048 [ 1280.996702][T16317] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1281.474494][T16317] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1285.522172][ T7444] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1285.555018][ T7444] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1285.592826][ T7444] bond0 (unregistering): Released all slaves [ 1285.650204][T16182] team0: Port device team_slave_1 added [ 1285.804414][T16356] 9pnet_fd: Insufficient options for proto=fd [ 1287.326850][T16182] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1287.356655][T16182] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1287.438644][T16372] loop3: detected capacity change from 0 to 1024 [ 1287.457158][T16182] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1287.660255][T16372] EXT4-fs (loop3): ext4_check_descriptors: Inode bitmap for group 0 overlaps superblock [ 1287.917986][T16372] EXT4-fs (loop3): ext4_check_descriptors: Checksum for group 0 failed (42152!=20869) [ 1288.298184][T16372] EXT4-fs (loop3): stripe (2) is not aligned with cluster size (16), stripe is disabled [ 1288.361318][T16372] EXT4-fs error (device loop3): ext4_get_journal_inode:5798: inode #5: comm syz.3.2335: unexpected bad inode w/o EXT4_IGET_BAD [ 1288.406641][T16182] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1288.414015][T16182] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1288.462942][T16372] EXT4-fs (loop3): no journal found [ 1288.476447][T16372] EXT4-fs (loop3): can't get journal size [ 1288.498262][T16182] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1288.510376][T16372] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 1291.239210][T13542] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1292.691390][T16182] hsr_slave_0: entered promiscuous mode [ 1292.742496][T16182] hsr_slave_1: entered promiscuous mode [ 1292.899087][T16182] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1292.906759][T16182] Cannot create hsr debugfs directory [ 1292.986257][ T7444] hsr_slave_0: left promiscuous mode [ 1293.219002][ T7444] hsr_slave_1: left promiscuous mode [ 1293.236681][ T7444] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1293.244719][ T7444] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1294.705409][ T7444] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1294.712863][ T7444] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1294.884305][T16443] No source specified [ 1294.889868][T16443] 9pnet_fd: Insufficient options for proto=fd [ 1295.196461][ T7444] veth1_macvtap: left promiscuous mode [ 1295.224861][ T7444] veth0_macvtap: left promiscuous mode [ 1296.196493][ T7444] veth1_vlan: left promiscuous mode [ 1296.458871][ T7444] veth0_vlan: left promiscuous mode [ 1300.134973][ T1292] ieee802154 phy0 wpan0: encryption failed: -22 [ 1300.141316][ T1292] ieee802154 phy1 wpan1: encryption failed: -22 [ 1302.654730][T16504] netlink: 20 bytes leftover after parsing attributes in process `syz.3.2362'. [ 1302.654765][T16504] netlink: 20 bytes leftover after parsing attributes in process `syz.3.2362'. [ 1303.179912][T16506] fuse: Bad value for 'fd' [ 1303.320083][T16506] 9pnet_fd: p9_fd_create_tcp (16506): problem connecting socket to 127.0.0.1 [ 1306.933176][ T7444] team0 (unregistering): Port device team_slave_1 removed [ 1307.619908][ T7444] team0 (unregistering): Port device team_slave_0 removed [ 1311.791603][T16556] syz.3.2376 (16556): drop_caches: 2 [ 1311.798369][T16556] syz.3.2376 (16556): drop_caches: 2 [ 1312.802602][ T5897] kernel write not supported for file /vcs (pid: 5897 comm: kworker/0:5) [ 1314.315026][T16583] slcan: can't register candev [ 1314.320035][T16583] Falling back ldisc for ttyS3. [ 1315.441854][T16604] fuse: Bad value for 'fd' [ 1316.375973][T16612] 9pnet_fd: p9_fd_create_tcp (16612): problem connecting socket to 127.0.0.1 [ 1317.717566][T16633] loop3: detected capacity change from 0 to 512 [ 1318.700382][T16617] syz.8.2392 (16617): drop_caches: 2 [ 1319.334075][T16617] syz.8.2392 (16617): drop_caches: 2 [ 1319.426028][T16633] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1319.524819][T16633] ext4 filesystem being mounted at /114/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 1320.112558][T16649] input: syz1 as /devices/virtual/input/input16 [ 1320.935079][T13542] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1321.232969][T16655] syz.8.2397 (16655): drop_caches: 2 [ 1321.706061][T16655] syz.8.2397 (16655): drop_caches: 2 [ 1322.201477][ T9329] kernel write not supported for file /vcs (pid: 9329 comm: kworker/0:2) [ 1323.581325][T16683] loop8: detected capacity change from 0 to 512 [ 1323.802438][T16690] netlink: 20 bytes leftover after parsing attributes in process `syz.3.2400'. [ 1323.811652][T16690] netlink: 20 bytes leftover after parsing attributes in process `syz.3.2400'. [ 1324.710828][T16683] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1324.836311][T16683] ext4 filesystem being mounted at /81/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 1325.285822][ T55] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 1325.295295][ T55] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 1325.379005][T16702] input: syz1 as /devices/virtual/input/input17 [ 1326.134749][ T55] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 1326.154270][ T55] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 1326.179520][ T55] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 1326.294861][ T55] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 1327.002438][T16711] slcan: can't register candev [ 1327.007517][T16711] Falling back ldisc for ttyS3. [ 1327.170141][T13822] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1328.462854][T11445] Bluetooth: hci2: command tx timeout [ 1328.542740][ T53] bridge_slave_1: left allmulticast mode [ 1328.558998][ T53] bridge_slave_1: left promiscuous mode [ 1328.594850][ T53] bridge0: port 2(bridge_slave_1) entered disabled state [ 1328.642734][ T53] bridge_slave_0: left allmulticast mode [ 1328.684722][ T53] bridge_slave_0: left promiscuous mode [ 1328.701541][ T53] bridge0: port 1(bridge_slave_0) entered disabled state [ 1328.742110][T16731] syz.3.2409 (16731): drop_caches: 2 [ 1328.776237][T16731] syz.3.2409 (16731): drop_caches: 2 [ 1328.925274][ T6000] usb 8-1: new high-speed USB device number 26 using dummy_hcd [ 1330.696845][T16748] slcan: can't register candev [ 1330.703247][T16748] Falling back ldisc for ttyS3. [ 1330.710230][T11445] Bluetooth: hci2: command tx timeout [ 1330.952029][ T6000] usb 8-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 1330.963296][ T6000] usb 8-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 1330.974084][ T6000] usb 8-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 1330.996318][ T6000] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1331.007497][ T53] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1331.010045][T16739] raw-gadget.0 gadget.7: fail, usb_ep_enable returned -22 [ 1331.027100][ T6000] usb 8-1: Quirk or no altset; falling back to MIDI 1.0 [ 1332.010902][ T6000] usb 8-1: USB disconnect, device number 26 [ 1332.746726][T11445] Bluetooth: hci2: command tx timeout [ 1333.237093][ T53] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1333.314831][ T53] bond0 (unregistering): Released all slaves [ 1334.844762][T11445] Bluetooth: hci2: command tx timeout [ 1336.340375][T16698] chnl_net:caif_netlink_parms(): no params data found [ 1336.347443][T16796] slcan: can't register candev [ 1336.352421][T16796] Falling back ldisc for ttyS3. [ 1337.587126][ T53] hsr_slave_0: left promiscuous mode [ 1337.672309][ T53] hsr_slave_1: left promiscuous mode [ 1337.714953][ T53] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1337.760234][ T53] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1338.369238][T16825] loop7: detected capacity change from 0 to 512 [ 1338.466445][T16825] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1339.138523][T16825] ext4 filesystem being mounted at /322/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 1340.556834][ T53] team0 (unregistering): Port device team_slave_1 removed [ 1340.665487][ T53] team0 (unregistering): Port device team_slave_0 removed [ 1340.944660][ T52] usb 4-1: new high-speed USB device number 7 using dummy_hcd [ 1341.069904][T16698] bridge0: port 1(bridge_slave_0) entered blocking state [ 1341.099017][T16698] bridge0: port 1(bridge_slave_0) entered disabled state [ 1341.126261][T16698] bridge_slave_0: entered allmulticast mode [ 1341.155698][ T52] usb 4-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 1341.166276][T16698] bridge_slave_0: entered promiscuous mode [ 1341.174594][ T52] usb 4-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 1341.199163][T16698] bridge0: port 2(bridge_slave_1) entered blocking state [ 1341.229729][ T52] usb 4-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 1341.244737][T16698] bridge0: port 2(bridge_slave_1) entered disabled state [ 1341.251950][T16698] bridge_slave_1: entered allmulticast mode [ 1341.322874][T16851] input: syz1 as /devices/virtual/input/input18 [ 1341.477220][ T52] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1341.480510][T16698] bridge_slave_1: entered promiscuous mode [ 1341.961319][T16858] fuse: Bad value for 'fd' [ 1341.965279][T16842] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 1341.999126][ T52] usb 4-1: Quirk or no altset; falling back to MIDI 1.0 [ 1342.006027][T16858] 9pnet_fd: p9_fd_create_tcp (16858): problem connecting socket to 127.0.0.1 [ 1342.727455][T16698] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1342.808417][T16698] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1343.072809][ T52] usb 4-1: USB disconnect, device number 7 [ 1343.174165][T16872] overlayfs: failed to clone upperpath [ 1344.046300][T16698] team0: Port device team_slave_0 added [ 1344.113439][T16698] team0: Port device team_slave_1 added [ 1344.376021][T16698] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1344.383016][T16698] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1344.596251][T16698] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1344.671460][T16886] netlink: 20 bytes leftover after parsing attributes in process `syz.0.2440'. [ 1344.680580][T16886] netlink: 24 bytes leftover after parsing attributes in process `syz.0.2440'. [ 1345.574216][T16698] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1345.581340][T16698] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1345.609038][T16698] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1345.793134][T16887] slcan: can't register candev [ 1345.799048][T16887] Falling back ldisc for ttyS3. [ 1348.079597][T16698] hsr_slave_0: entered promiscuous mode [ 1348.095822][T16698] hsr_slave_1: entered promiscuous mode [ 1348.111628][T16698] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1348.129432][T16698] Cannot create hsr debugfs directory [ 1348.643759][ T9373] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1348.854672][T13921] usb 4-1: new high-speed USB device number 8 using dummy_hcd [ 1349.887672][T16922] can0: slcan on ttyS3. [ 1350.094706][T13921] usb 4-1: Using ep0 maxpacket: 8 [ 1350.104203][T13921] usb 4-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 1350.113738][T13921] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1350.122418][T13921] usb 4-1: Product: syz [ 1350.126927][T13921] usb 4-1: Manufacturer: syz [ 1350.131572][T13921] usb 4-1: SerialNumber: syz [ 1350.616038][T13921] usb 4-1: config 0 descriptor?? [ 1350.862633][T16698] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 1350.900177][T16922] can0 (unregistered): slcan off ttyS3. [ 1350.937516][T16698] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 1350.968659][T16698] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 1351.020386][T16698] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 1351.096160][T13921] usb 4-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 1352.309478][T13921] dvb_usb_rtl28xxu 4-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -32 [ 1352.971023][T13921] usb 4-1: USB disconnect, device number 8 [ 1353.054761][ T52] usb 9-1: new high-speed USB device number 14 using dummy_hcd [ 1353.425472][ T52] usb 9-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 1354.218041][ T52] usb 9-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 1354.229286][ T52] usb 9-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 1354.238554][ T52] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1354.252928][T16698] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1355.347190][ T52] usb 9-1: can't set config #27, error -71 [ 1355.354750][ T52] usb 9-1: USB disconnect, device number 14 [ 1355.364512][T16698] 8021q: adding VLAN 0 to HW filter on device team0 [ 1355.381138][ T6487] bridge0: port 1(bridge_slave_0) entered blocking state [ 1355.388313][ T6487] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1356.037411][T16970] slcan: can't register candev [ 1356.042389][T16970] Falling back ldisc for ttyS3. [ 1356.085934][ T2953] bridge0: port 2(bridge_slave_1) entered blocking state [ 1356.093133][ T2953] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1357.077889][T16698] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 1357.114614][T16698] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 1359.335950][T17019] loop3: detected capacity change from 0 to 8 [ 1359.696546][T17019] SQUASHFS error: Failed to read block 0x4e8: -5 [ 1359.703474][T17019] SQUASHFS error: Failed to read block 0x4de: -5 [ 1359.710297][T17019] SQUASHFS error: Failed to read block 0x4de: -5 [ 1359.717017][T17019] SQUASHFS error: Failed to read block 0x4de: -5 [ 1359.826600][T16698] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1359.834789][ T30] audit: type=1800 audit(1742318481.510:295): pid=17019 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.2463" name="file1" dev="loop3" ino=5 res=0 errno=0 [ 1360.483267][T16698] veth0_vlan: entered promiscuous mode [ 1360.524196][T16698] veth1_vlan: entered promiscuous mode [ 1360.693939][T17035] loop8: detected capacity change from 0 to 512 [ 1360.822650][T16698] veth0_macvtap: entered promiscuous mode [ 1360.832236][T16698] veth1_macvtap: entered promiscuous mode [ 1360.854148][T16698] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1360.866236][T16698] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1360.877191][T16698] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1361.349568][T17028] netlink: 20 bytes leftover after parsing attributes in process `syz.7.2468'. [ 1361.358890][T17028] netlink: 24 bytes leftover after parsing attributes in process `syz.7.2468'. [ 1361.478041][T16698] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1361.488061][T16698] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1361.498733][T16698] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1361.499207][ T1292] ieee802154 phy0 wpan0: encryption failed: -22 [ 1361.511629][T16698] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1361.544096][T17035] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1361.577341][T17035] ext4 filesystem being mounted at /94/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 1361.596922][ T1292] ieee802154 phy1 wpan1: encryption failed: -22 [ 1361.631403][T16698] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1361.680430][T16698] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1361.714647][T16698] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1361.745976][T16698] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1362.000885][T16698] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1362.019613][T16698] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1362.030653][T16698] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1362.046128][T16698] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1362.085722][T16698] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1362.207116][T16698] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1362.408316][T16698] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1363.334921][ T2953] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1363.364685][ T2953] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1363.412484][ T7439] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1363.429007][ T7439] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1363.763606][T17085] input: syz1 as /devices/virtual/input/input19 [ 1364.283609][T13822] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1365.286840][T17101] loop3: detected capacity change from 0 to 1024 [ 1365.557008][T17101] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1367.679048][T17128] loop7: detected capacity change from 0 to 512 [ 1367.881391][T17128] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1367.904075][T17101] loop3: detected capacity change from 1024 to 64 [ 1367.974776][T17128] ext4 filesystem being mounted at /331/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 1367.998825][T13542] EXT4-fs warning (device loop3): ext4_empty_dir:3097: inode #11: lblock 0: comm syz-executor: error -12 reading directory block [ 1368.147908][T13542] EXT4-fs warning (device loop3): ext4_empty_dir:3097: inode #11: lblock 0: comm syz-executor: error -12 reading directory block [ 1368.280055][T11445] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 1368.295623][T11445] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 1368.304723][T11445] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 1368.312718][T11445] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 1368.851167][T11445] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 1368.862641][T11445] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 1369.312998][T13542] EXT4-fs warning (device loop3): ext4_empty_dir:3097: inode #11: lblock 0: comm syz-executor: error -12 reading directory block [ 1369.364526][T13542] EXT4-fs warning (device loop3): ext4_empty_dir:3097: inode #11: lblock 0: comm syz-executor: error -12 reading directory block [ 1369.441870][ T6487] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1369.475727][T13542] EXT4-fs warning (device loop3): ext4_empty_dir:3097: inode #11: lblock 0: comm syz-executor: error -12 reading directory block [ 1369.507571][T13542] EXT4-fs warning (device loop3): ext4_empty_dir:3097: inode #11: lblock 0: comm syz-executor: error -12 reading directory block [ 1369.552126][T13542] EXT4-fs warning (device loop3): ext4_empty_dir:3097: inode #11: lblock 0: comm syz-executor: error -12 reading directory block [ 1369.605300][T13542] EXT4-fs warning (device loop3): ext4_empty_dir:3097: inode #11: lblock 0: comm syz-executor: error -12 reading directory block [ 1369.653470][T13542] EXT4-fs warning (device loop3): ext4_empty_dir:3097: inode #11: lblock 0: comm syz-executor: error -12 reading directory block [ 1369.669199][T13542] EXT4-fs warning (device loop3): ext4_empty_dir:3097: inode #11: lblock 0: comm syz-executor: error -12 reading directory block [ 1369.701174][T17149] input: syz1 as /devices/virtual/input/input20 [ 1369.936132][ T6487] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1370.575496][T17107] kmmpd-loop3: attempt to access beyond end of device [ 1370.575496][T17107] loop3: rw=14337, sector=128, nr_sectors = 2 limit=64 [ 1371.195701][T17107] Buffer I/O error on dev loop3, logical block 64, lost sync page write [ 1371.230053][T17107] EXT4-fs error (device loop3): kmmpd:186: comm kmmpd-loop3: Error writing to MMP block [ 1371.374962][T11445] Bluetooth: hci3: command tx timeout [ 1371.389175][T13542] EXT4-fs error (device loop3): ext4_check_bdev_write_error:225: comm syz-executor: Error while async write back metadata [ 1371.403708][ T6487] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1371.459097][T13542] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1371.664763][T17107] kmmpd-loop3: attempt to access beyond end of device [ 1371.664763][T17107] loop3: rw=14337, sector=128, nr_sectors = 2 limit=64 [ 1371.709456][T17166] loop8: detected capacity change from 0 to 512 [ 1371.719371][T17107] Buffer I/O error on dev loop3, logical block 64, lost sync page write [ 1371.781940][T17166] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1371.874938][T17166] ext4 filesystem being mounted at /96/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 1371.888290][ T6487] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1373.055991][T17178] input: syz1 as /devices/virtual/input/input21 [ 1373.342630][T17138] chnl_net:caif_netlink_parms(): no params data found [ 1373.455222][T11445] Bluetooth: hci3: command tx timeout [ 1373.794952][T17193] overlayfs: failed to clone upperpath [ 1374.768166][T17200] loop2: detected capacity change from 0 to 2048 [ 1374.797097][T17200] NILFS (loop2): broken superblock, retrying with spare superblock (blocksize = 1024) [ 1374.886746][T17202] NILFS (loop2): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 1375.551651][T14633] Bluetooth: hci3: command tx timeout [ 1375.588373][ T55] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 1375.619257][ T55] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 1375.631828][ T55] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 1375.660358][ T55] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 1375.682631][ T55] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 1375.690556][ T55] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 1375.818210][ T9373] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1376.122833][T17219] loop7: detected capacity change from 0 to 22 [ 1376.153296][T17219] MTD: Attempt to mount non-MTD device "/dev/loop7" [ 1376.172790][T17219] romfs: Mounting image 'rom 637cf1fa' through the block layer [ 1376.281908][T17219] loop7: detected capacity change from 0 to 2048 [ 1376.375861][T17219] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1376.406619][T17219] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1377.618969][ T55] Bluetooth: hci3: command tx timeout [ 1377.663509][T13822] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1377.875123][ T55] Bluetooth: hci4: command tx timeout [ 1378.774909][ T6487] bond0 (unregistering): left promiscuous mode [ 1378.853288][T17246] netlink: 24 bytes leftover after parsing attributes in process `syz.2.2507'. [ 1379.651367][ T6487] bond0 (unregistering): Released all slaves [ 1379.943480][ T55] Bluetooth: hci4: command tx timeout [ 1382.014663][ T55] Bluetooth: hci4: command tx timeout [ 1382.024653][ T5897] usb 8-1: new high-speed USB device number 27 using dummy_hcd [ 1382.093832][T17138] bridge0: port 1(bridge_slave_0) entered blocking state [ 1382.124986][T17138] bridge0: port 1(bridge_slave_0) entered disabled state [ 1382.132261][T17138] bridge_slave_0: entered allmulticast mode [ 1382.188673][T17138] bridge_slave_0: entered promiscuous mode [ 1382.238305][ T5897] usb 8-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1382.264141][T17138] bridge0: port 2(bridge_slave_1) entered blocking state [ 1382.267073][ T5897] usb 8-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 1382.283499][T17138] bridge0: port 2(bridge_slave_1) entered disabled state [ 1382.298896][T17273] syz.8.2516 (17273): drop_caches: 2 [ 1382.306223][T17138] bridge_slave_1: entered allmulticast mode [ 1382.349598][T17138] bridge_slave_1: entered promiscuous mode [ 1382.351750][ T5897] usb 8-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 1382.357725][T17273] syz.8.2516 (17273): drop_caches: 2 [ 1382.365896][ T5897] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 1382.479785][ T5897] usb 8-1: SerialNumber: syz [ 1382.846319][T17281] syz.2.2518 (17281): drop_caches: 2 [ 1383.024180][ T5897] usb 8-1: 0:2 : does not exist [ 1383.029711][T17281] syz.2.2518 (17281): drop_caches: 2 [ 1383.044914][ T5897] usb 8-1: unit 255 not found! [ 1383.052892][ T5897] usb 8-1: unit 8 not found! [ 1383.071691][T17138] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1383.099307][ T5897] usb 8-1: USB disconnect, device number 27 [ 1383.107121][T17138] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1383.217431][ T6487] hsr_slave_0: left promiscuous mode [ 1383.224247][ T6487] hsr_slave_1: left promiscuous mode [ 1383.290176][ T6487] veth1_macvtap: left promiscuous mode [ 1383.324188][ T6487] veth1_vlan: left promiscuous mode [ 1383.386769][T17290] syz.8.2520 (17290): drop_caches: 2 [ 1383.398134][T17290] syz.8.2520 (17290): drop_caches: 2 [ 1383.647038][ T6487] veth0_vlan: left promiscuous mode [ 1384.628900][ T55] Bluetooth: hci4: command tx timeout [ 1386.231842][T17305] overlayfs: failed to clone upperpath [ 1387.152907][T17311] syz.2.2527 (17311): drop_caches: 2 [ 1387.178399][T17311] syz.2.2527 (17311): drop_caches: 2 [ 1389.553261][T17138] team0: Port device team_slave_0 added [ 1389.587732][T17138] team0: Port device team_slave_1 added [ 1392.218676][T17138] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1392.244239][T17138] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1392.321856][T17138] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1393.808793][T17350] slcan: can't register candev [ 1393.813783][T17350] Falling back ldisc for ttyS3. [ 1394.044696][T17138] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1394.051687][T17138] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1394.101573][T17138] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1394.129982][T17206] chnl_net:caif_netlink_parms(): no params data found [ 1396.475792][T17138] hsr_slave_0: entered promiscuous mode [ 1396.585637][T17138] hsr_slave_1: entered promiscuous mode [ 1396.605542][T17138] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1396.613163][T17138] Cannot create hsr debugfs directory [ 1396.623200][T17360] loop2: detected capacity change from 0 to 2048 [ 1396.638349][T17360] NILFS (loop2): broken superblock, retrying with spare superblock (blocksize = 1024) [ 1396.662241][T17367] NILFS (loop2): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 1397.004707][T13144] usb 9-1: new high-speed USB device number 15 using dummy_hcd [ 1397.999353][T13144] usb 9-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 1398.001421][ T6487] IPVS: stop unused estimator thread 0... [ 1398.103309][T13144] usb 9-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 1398.115129][T13144] usb 9-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 1398.124514][T13144] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1398.147458][T17366] raw-gadget.0 gadget.8: fail, usb_ep_enable returned -22 [ 1398.178963][T13144] usb 9-1: Quirk or no altset; falling back to MIDI 1.0 [ 1398.190760][T17206] bridge0: port 1(bridge_slave_0) entered blocking state [ 1398.216535][T17206] bridge0: port 1(bridge_slave_0) entered disabled state [ 1398.240539][T17206] bridge_slave_0: entered allmulticast mode [ 1398.258612][T17206] bridge_slave_0: entered promiscuous mode [ 1398.276591][T17206] bridge0: port 2(bridge_slave_1) entered blocking state [ 1398.284017][T17206] bridge0: port 2(bridge_slave_1) entered disabled state [ 1398.291341][T17206] bridge_slave_1: entered allmulticast mode [ 1398.298549][T17206] bridge_slave_1: entered promiscuous mode [ 1398.572776][T13144] usb 9-1: USB disconnect, device number 15 [ 1398.805247][T17387] fuse: Bad value for 'fd' [ 1398.905156][T17387] 9pnet_fd: p9_fd_create_tcp (17387): problem connecting socket to 127.0.0.1 [ 1400.164457][T17389] slcan: can't register candev [ 1400.169820][T17389] Falling back ldisc for ttyS3. [ 1402.047298][T17410] overlayfs: failed to clone upperpath [ 1402.549881][ T6487] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1402.627469][T17406] syz.7.2551 (17406): drop_caches: 2 [ 1402.659302][T17206] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1402.696155][T17406] syz.7.2551 (17406): drop_caches: 2 [ 1402.732743][T17414] loop8: detected capacity change from 0 to 512 [ 1402.739354][T17206] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1403.006674][T17414] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1403.030671][T17414] ext4 filesystem being mounted at /105/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 1403.114013][T17422] fuse: Bad value for 'fd' [ 1403.129367][T17422] 9pnet_fd: p9_fd_create_tcp (17422): problem connecting socket to 127.0.0.1 [ 1404.067673][ T6487] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1404.162371][T17426] input: syz1 as /devices/virtual/input/input22 [ 1405.417714][T13822] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1406.800616][T17206] team0: Port device team_slave_0 added [ 1406.856725][ T6487] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1406.940958][T17206] team0: Port device team_slave_1 added [ 1407.142810][ T6487] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1407.533450][T17206] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1407.548984][T17206] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1407.587408][T17206] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1407.641880][T17206] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1407.851501][T17206] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1408.559099][T17444] slcan: can't register candev [ 1408.564371][T17444] Falling back ldisc for ttyS3. [ 1408.626688][T17206] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1408.688077][T17450] loop8: detected capacity change from 0 to 512 [ 1408.757893][T17450] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1408.772111][T17450] ext4 filesystem being mounted at /108/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 1409.332057][T17457] input: syz1 as /devices/virtual/input/input23 [ 1411.251049][T17138] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 1411.399452][T13822] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1411.429266][T17206] hsr_slave_0: entered promiscuous mode [ 1411.445106][T17206] hsr_slave_1: entered promiscuous mode [ 1411.451223][T17206] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1411.482123][T17206] Cannot create hsr debugfs directory [ 1411.541765][T17138] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 1411.562200][T17467] syz.2.2565 (17467): drop_caches: 2 [ 1411.568218][T17467] syz.2.2565 (17467): drop_caches: 2 [ 1411.647938][T17469] loop8: detected capacity change from 0 to 2048 [ 1411.662023][T17469] NILFS (loop8): broken superblock, retrying with spare superblock (blocksize = 1024) [ 1411.674037][ T5897] usb 8-1: new high-speed USB device number 28 using dummy_hcd [ 1411.703176][T17470] NILFS (loop8): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 1411.740619][T17138] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 1411.788184][T17138] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 1411.926451][ T5897] usb 8-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 1411.947927][ T5897] usb 8-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 1411.958812][ T5897] usb 8-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 1411.974684][ T5897] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1411.993602][T17462] raw-gadget.0 gadget.7: fail, usb_ep_enable returned -22 [ 1412.005881][ T6487] bridge_slave_1: left allmulticast mode [ 1412.023077][ T5897] usb 8-1: Quirk or no altset; falling back to MIDI 1.0 [ 1412.030786][ T6487] bridge_slave_1: left promiscuous mode [ 1412.042300][ T6487] bridge0: port 2(bridge_slave_1) entered disabled state [ 1412.149852][ T6487] bridge_slave_0: left allmulticast mode [ 1412.166903][ T6487] bridge_slave_0: left promiscuous mode [ 1412.173232][ T6487] bridge0: port 1(bridge_slave_0) entered disabled state [ 1412.347632][ T9329] usb 8-1: USB disconnect, device number 28 [ 1417.325441][T17502] slcan: can't register candev [ 1417.330387][T17502] Falling back ldisc for ttyS3. [ 1417.794105][ T6487] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1417.808167][ T6487] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1417.819156][ T6487] bond0 (unregistering): Released all slaves [ 1420.197210][T17138] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1421.507113][ T55] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 1421.517528][ T55] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 1421.525837][ T55] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 1421.626210][ T55] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 1421.643290][ T55] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 1421.652262][ T55] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 1421.681025][T17515] syz.7.2578 (17515): drop_caches: 2 [ 1421.779308][T17515] syz.7.2578 (17515): drop_caches: 2 [ 1422.738886][ T1292] ieee802154 phy0 wpan0: encryption failed: -22 [ 1422.745962][ T1292] ieee802154 phy1 wpan1: encryption failed: -22 [ 1422.824925][T13144] usb 9-1: new high-speed USB device number 16 using dummy_hcd [ 1423.379659][T13144] usb 9-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 1423.390860][T13144] usb 9-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 1423.400744][T13144] usb 9-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 1423.410383][T13144] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1423.445117][T17540] raw-gadget.0 gadget.8: fail, usb_ep_enable returned -22 [ 1423.459147][T13144] usb 9-1: Quirk or no altset; falling back to MIDI 1.0 [ 1423.695697][ T55] Bluetooth: hci5: command tx timeout [ 1423.824255][T13144] usb 9-1: USB disconnect, device number 16 [ 1424.381650][T17138] 8021q: adding VLAN 0 to HW filter on device team0 [ 1425.145906][ T6487] hsr_slave_0: left promiscuous mode [ 1425.214155][ T6487] hsr_slave_1: left promiscuous mode [ 1425.295530][ T6487] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1425.303000][ T6487] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1425.348199][ T6487] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1425.369949][ T6487] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1425.455981][ T6487] veth1_macvtap: left promiscuous mode [ 1425.491664][ T6487] veth1_vlan: left promiscuous mode [ 1425.655011][ T6487] veth0_vlan: left promiscuous mode [ 1425.774868][ T55] Bluetooth: hci5: command tx timeout [ 1427.232742][T17577] slcan: can't register candev [ 1427.237758][T17577] Falling back ldisc for ttyS3. [ 1427.874254][ T55] Bluetooth: hci5: command tx timeout [ 1427.912495][T11445] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 1427.922791][T11445] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 1427.931129][T11445] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 1427.940042][T11445] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 1427.947624][T11445] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 1427.955431][T11445] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 1428.109351][T17588] loop7: detected capacity change from 0 to 2048 [ 1428.125584][T17588] NILFS (loop7): broken superblock, retrying with spare superblock (blocksize = 1024) [ 1428.157936][T17589] NILFS (loop7): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 1429.635811][T17595] syz.8.2593 (17595): drop_caches: 2 [ 1429.731137][T17595] syz.8.2593 (17595): drop_caches: 2 [ 1430.011202][ T55] Bluetooth: hci5: command tx timeout [ 1430.019909][ T55] Bluetooth: hci0: command tx timeout [ 1431.674036][T17604] syz.7.2595 (17604): drop_caches: 2 [ 1431.680270][T17604] syz.7.2595 (17604): drop_caches: 2 [ 1431.899986][ T6487] team0 (unregistering): Port device team_slave_1 removed [ 1431.985586][ T6487] team0 (unregistering): Port device team_slave_0 removed [ 1432.097992][T11445] Bluetooth: hci0: command tx timeout [ 1433.328042][T17621] syz.8.2598 (17621): drop_caches: 2 [ 1433.364504][T17621] syz.8.2598 (17621): drop_caches: 2 [ 1434.223465][T11445] Bluetooth: hci0: command tx timeout [ 1436.334660][T11445] Bluetooth: hci0: command tx timeout [ 1437.141841][T17632] syz.2.2599 (17632): drop_caches: 2 [ 1437.200941][ T55] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 1437.224962][ T55] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 1437.235549][ T55] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 1437.249125][ T55] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 1437.263480][ T55] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 1437.272381][ T55] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 1437.575855][T17649] loop2: detected capacity change from 0 to 512 [ 1437.734064][T17649] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1437.760475][T17649] ext4 filesystem being mounted at /37/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 1438.105329][T17662] input: syz1 as /devices/virtual/input/input24 [ 1438.727396][T16698] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1439.374742][ T55] Bluetooth: hci3: command tx timeout [ 1439.857338][T17670] syz.8.2605 (17670): drop_caches: 2 [ 1439.863372][T17670] syz.8.2605 (17670): drop_caches: 2 [ 1439.910636][T17530] chnl_net:caif_netlink_parms(): no params data found [ 1441.716013][ T55] Bluetooth: hci3: command tx timeout [ 1442.732562][T17583] chnl_net:caif_netlink_parms(): no params data found [ 1443.774965][ T55] Bluetooth: hci3: command tx timeout [ 1444.032600][T17640] chnl_net:caif_netlink_parms(): no params data found [ 1444.064833][T17530] bridge0: port 1(bridge_slave_0) entered blocking state [ 1444.071949][T17530] bridge0: port 1(bridge_slave_0) entered disabled state [ 1444.389510][T17530] bridge_slave_0: entered allmulticast mode [ 1445.096057][T17530] bridge_slave_0: entered promiscuous mode [ 1445.129231][T17739] Bluetooth: MGMT ver 1.23 [ 1445.479506][T17530] bridge0: port 2(bridge_slave_1) entered blocking state [ 1445.514886][T17530] bridge0: port 2(bridge_slave_1) entered disabled state [ 1445.522135][T17530] bridge_slave_1: entered allmulticast mode [ 1445.576556][T17530] bridge_slave_1: entered promiscuous mode [ 1445.862276][ T55] Bluetooth: hci3: command tx timeout [ 1447.580691][T17530] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1447.633871][T17758] loop7: detected capacity change from 0 to 22 [ 1447.644392][T17758] MTD: Attempt to mount non-MTD device "/dev/loop7" [ 1447.673877][T17758] romfs: Mounting image 'rom 637cf1fa' through the block layer [ 1447.715733][T17758] loop7: detected capacity change from 0 to 2048 [ 1447.758993][T17758] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1447.784395][T17583] bridge0: port 1(bridge_slave_0) entered blocking state [ 1447.797069][T17583] bridge0: port 1(bridge_slave_0) entered disabled state [ 1448.042579][T17758] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1448.052201][T17583] bridge_slave_0: entered allmulticast mode [ 1448.059816][T17583] bridge_slave_0: entered promiscuous mode [ 1448.518793][T17530] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1449.832592][T17583] bridge0: port 2(bridge_slave_1) entered blocking state [ 1449.843611][T17583] bridge0: port 2(bridge_slave_1) entered disabled state [ 1449.851692][T17583] bridge_slave_1: entered allmulticast mode [ 1449.859868][T17583] bridge_slave_1: entered promiscuous mode [ 1450.116526][T17583] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1450.176905][T17583] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1451.146760][T11445] Bluetooth: hci2: command 0x0406 tx timeout [ 1453.021217][T17640] bridge0: port 1(bridge_slave_0) entered blocking state [ 1453.049691][T17640] bridge0: port 1(bridge_slave_0) entered disabled state [ 1453.094646][T17640] bridge_slave_0: entered allmulticast mode [ 1453.101929][T17640] bridge_slave_0: entered promiscuous mode [ 1453.136800][T17640] bridge0: port 2(bridge_slave_1) entered blocking state [ 1453.144084][T17640] bridge0: port 2(bridge_slave_1) entered disabled state [ 1453.160763][T17640] bridge_slave_1: entered allmulticast mode [ 1453.179526][T17640] bridge_slave_1: entered promiscuous mode [ 1453.659033][T17530] team0: Port device team_slave_0 added [ 1453.677021][T17530] team0: Port device team_slave_1 added [ 1453.699069][T17583] team0: Port device team_slave_0 added [ 1454.543913][T17530] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1454.574683][T17530] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1454.635526][T17530] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1454.661158][T17583] team0: Port device team_slave_1 added [ 1454.788082][T17583] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1454.804816][T17583] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1454.926551][T17583] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1454.972689][T17640] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1455.327449][T17640] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1455.369265][T17530] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1455.404780][T17530] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1455.484750][T17530] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1455.520575][T17583] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1455.535151][T17583] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1455.594666][T17583] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1455.751501][T17640] team0: Port device team_slave_0 added [ 1455.839778][T17583] hsr_slave_0: entered promiscuous mode [ 1455.857241][T17583] hsr_slave_1: entered promiscuous mode [ 1455.863321][T17583] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1455.891677][T17583] Cannot create hsr debugfs directory [ 1455.926550][T17640] team0: Port device team_slave_1 added [ 1455.997306][T17530] hsr_slave_0: entered promiscuous mode [ 1456.003684][T17530] hsr_slave_1: entered promiscuous mode [ 1456.040348][T17530] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1456.064675][T17530] Cannot create hsr debugfs directory [ 1456.333163][T17851] syz.2.2629 (17851): drop_caches: 2 [ 1456.340327][T17851] syz.2.2629 (17851): drop_caches: 2 [ 1456.545999][ T6487] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1456.640047][T17640] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1456.687111][T17640] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1456.726584][T17640] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1456.838620][T17640] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1456.864880][T17640] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1456.912456][T17640] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1458.141025][ T6487] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1462.074665][ T6487] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1462.797503][ T6487] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1462.940640][T17640] hsr_slave_0: entered promiscuous mode [ 1462.963910][T17640] hsr_slave_1: entered promiscuous mode [ 1462.985345][T17640] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1463.013651][T17640] Cannot create hsr debugfs directory [ 1466.785715][ T6487] bridge_slave_1: left allmulticast mode [ 1466.791508][ T6487] bridge_slave_1: left promiscuous mode [ 1466.797333][ T6487] bridge0: port 2(bridge_slave_1) entered disabled state [ 1466.819070][ T6487] bridge_slave_0: left allmulticast mode [ 1466.830690][ T6487] bridge_slave_0: left promiscuous mode [ 1466.836602][ T6487] bridge0: port 1(bridge_slave_0) entered disabled state [ 1467.359753][ T6487] bridge_slave_1: left allmulticast mode [ 1467.374663][ T6487] bridge_slave_1: left promiscuous mode [ 1467.380401][ T6487] bridge0: port 2(bridge_slave_1) entered disabled state [ 1467.427936][ T6487] bridge_slave_0: left allmulticast mode [ 1467.433645][ T6487] bridge_slave_0: left promiscuous mode [ 1467.464884][ T6487] bridge0: port 1(bridge_slave_0) entered disabled state [ 1470.520023][T17962] syz.8.2649 (17962): drop_caches: 2 [ 1470.648435][T17965] netlink: 60 bytes leftover after parsing attributes in process `syz.7.2648'. [ 1471.245910][T17962] syz.8.2649 (17962): drop_caches: 2 [ 1472.460598][ T6487] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1472.552843][ T6487] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1472.594746][ T6487] bond0 (unregistering): Released all slaves [ 1472.819119][ T6487] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1472.837165][ T6487] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1472.847828][ T6487] bond0 (unregistering): Released all slaves [ 1472.954510][ T6487] bond0 (unregistering): Released all slaves [ 1479.931993][ T6487] hsr_slave_0: left promiscuous mode [ 1480.904716][ T6487] hsr_slave_1: left promiscuous mode [ 1480.910906][ T6487] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1480.924791][ T6487] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1482.154190][ T6487] hsr_slave_0: left promiscuous mode [ 1482.177009][ T6487] hsr_slave_1: left promiscuous mode [ 1482.182902][ T6487] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1482.430968][ T6487] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1482.665145][ T6487] hsr_slave_0: left promiscuous mode [ 1483.452639][ T6487] hsr_slave_1: left promiscuous mode [ 1483.538302][T11445] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 1483.549599][T11445] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 1483.557638][T11445] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 1483.566137][T11445] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 1483.573713][T11445] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 1483.581662][T11445] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 1483.627905][ T6487] dummy0: left promiscuous mode [ 1483.633197][ T6487] veth1_macvtap: left promiscuous mode [ 1483.638886][ T6487] veth1_vlan: left promiscuous mode [ 1483.644151][ T6487] veth0_vlan: left promiscuous mode [ 1484.192279][ T1292] ieee802154 phy0 wpan0: encryption failed: -22 [ 1484.199345][ T1292] ieee802154 phy1 wpan1: encryption failed: -22 [ 1485.034888][ T6487] team0 (unregistering): Port device team_slave_1 removed [ 1485.064131][ T6487] team0 (unregistering): Port device team_slave_0 removed [ 1485.376322][ T6487] team0 (unregistering): Port device team_slave_1 removed [ 1485.405510][ T6487] team0 (unregistering): Port device team_slave_0 removed [ 1485.616957][T11445] Bluetooth: hci4: command tx timeout [ 1486.118231][ T55] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 1486.128641][ T55] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 1486.144961][ T55] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 1486.153395][ T55] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 1486.167371][ T55] Bluetooth: hci7: unexpected cc 0x0c25 length: 249 > 3 [ 1486.175206][ T55] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 1487.727642][T11445] Bluetooth: hci4: command tx timeout [ 1488.324148][T18088] syz.2.2665 (18088): drop_caches: 2 [ 1488.348008][T18088] syz.2.2665 (18088): drop_caches: 2 [ 1488.354800][T11445] Bluetooth: hci7: command tx timeout [ 1490.204698][T11445] Bluetooth: hci4: command tx timeout [ 1490.480336][T11445] Bluetooth: hci7: command tx timeout [ 1492.134093][T18057] chnl_net:caif_netlink_parms(): no params data found [ 1493.032924][T11445] Bluetooth: hci4: command tx timeout [ 1493.034643][ T55] Bluetooth: hci7: command tx timeout [ 1494.471868][T18075] chnl_net:caif_netlink_parms(): no params data found [ 1494.587835][T17640] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 1494.904253][ T5897] usb 3-1: new high-speed USB device number 8 using dummy_hcd [ 1495.135286][ T55] Bluetooth: hci7: command tx timeout [ 1495.911056][T11445] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 1495.920302][T11445] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 1495.928929][T11445] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 1495.939007][T11445] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 1495.947103][T11445] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 1495.954360][T11445] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 1495.986178][ T5897] usb 3-1: config 1 has an invalid descriptor of length 129, skipping remainder of the config [ 1496.015524][ T5897] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 1496.305176][T18057] bridge0: port 1(bridge_slave_0) entered blocking state [ 1496.312310][T18057] bridge0: port 1(bridge_slave_0) entered disabled state [ 1496.376347][T18057] bridge_slave_0: entered allmulticast mode [ 1496.468501][T18057] bridge_slave_0: entered promiscuous mode [ 1497.267538][ T5897] usb 3-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 1497.314727][ T5897] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 1497.322778][ T5897] usb 3-1: SerialNumber: syz [ 1498.322501][ T55] Bluetooth: hci5: command tx timeout [ 1498.447740][ T5897] usb 3-1: invalid UAC_HEADER (v1) [ 1498.554710][T18057] bridge0: port 2(bridge_slave_1) entered blocking state [ 1498.582728][T18057] bridge0: port 2(bridge_slave_1) entered disabled state [ 1498.613198][T18057] bridge_slave_1: entered allmulticast mode [ 1498.726718][ T5897] snd-usb-audio 3-1:1.0: probe with driver snd-usb-audio failed with error -22 [ 1498.766624][ T5897] usb 3-1: USB disconnect, device number 8 [ 1498.923256][T18057] bridge_slave_1: entered promiscuous mode [ 1499.003842][T18075] bridge0: port 1(bridge_slave_0) entered blocking state [ 1499.023676][T18075] bridge0: port 1(bridge_slave_0) entered disabled state [ 1499.044142][T18075] bridge_slave_0: entered allmulticast mode [ 1499.068048][T18075] bridge_slave_0: entered promiscuous mode [ 1499.102774][ T5851] usb 9-1: new high-speed USB device number 17 using dummy_hcd [ 1500.194407][ T5851] usb 9-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1500.504214][ T5851] usb 9-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 1500.568029][ T5851] usb 9-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 1500.588718][ T55] Bluetooth: hci5: command tx timeout [ 1500.659549][ T5851] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 1500.733876][ T5851] usb 9-1: SerialNumber: syz [ 1500.849780][T18057] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1501.066173][ T5851] usb 9-1: 0:2 : does not exist [ 1501.085327][ T5851] usb 9-1: unit 5 not found! [ 1502.025115][T18202] 9pnet_virtio: no channels available for device 127.0.0.1 [ 1502.113764][ T5851] usb 9-1: USB disconnect, device number 17 [ 1502.347003][T18075] bridge0: port 2(bridge_slave_1) entered blocking state [ 1502.354951][T18075] bridge0: port 2(bridge_slave_1) entered disabled state [ 1502.362514][T18075] bridge_slave_1: entered allmulticast mode [ 1502.369624][T18075] bridge_slave_1: entered promiscuous mode [ 1502.477002][T18057] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1502.654647][ T55] Bluetooth: hci5: command tx timeout [ 1503.490765][T18211] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci5/hci5:200/input25 [ 1503.688626][T18075] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1503.916721][T18057] team0: Port device team_slave_0 added [ 1503.957169][T18075] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1505.091650][ T55] Bluetooth: hci5: command tx timeout [ 1505.326438][T18057] team0: Port device team_slave_1 added [ 1506.468306][T18236] syz.7.2687 (18236): drop_caches: 2 [ 1506.524936][T18236] syz.7.2687 (18236): drop_caches: 2 [ 1507.251379][T18244] loop8: detected capacity change from 0 to 512 [ 1507.274395][T18243] loop7: detected capacity change from 0 to 512 [ 1507.310695][T18244] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1507.344845][T18244] ext4 filesystem being mounted at /150/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 1507.420303][T18243] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1507.434956][T18243] ext4 filesystem being mounted at /382/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 1507.479147][T18057] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1507.522840][T18057] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1507.562356][T18057] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1507.860660][T18259] input: syz1 as /devices/virtual/input/input26 [ 1508.515529][T18261] input: syz1 as /devices/virtual/input/input27 [ 1508.567361][T18075] team0: Port device team_slave_0 added [ 1509.536685][T18075] team0: Port device team_slave_1 added [ 1509.816966][ T6487] IPVS: stop unused estimator thread 0... [ 1509.928813][T18057] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1509.944260][T18057] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1510.006507][ T9373] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1510.025472][T13822] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1510.044760][T18057] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1510.776589][T18075] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1510.783591][T18075] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1511.114782][T18075] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1512.822283][T18057] hsr_slave_0: entered promiscuous mode [ 1512.828843][T18057] hsr_slave_1: entered promiscuous mode [ 1512.835022][T18057] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1512.842605][T18057] Cannot create hsr debugfs directory [ 1513.109035][T18075] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1513.132260][T18075] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1514.134707][T18075] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1515.120295][T18163] chnl_net:caif_netlink_parms(): no params data found [ 1515.549899][T18075] hsr_slave_0: entered promiscuous mode [ 1515.580817][T18075] hsr_slave_1: entered promiscuous mode [ 1515.615878][T18075] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1515.623471][T18075] Cannot create hsr debugfs directory [ 1516.199554][T18308] syz.2.2697 (18308): drop_caches: 2 [ 1516.215330][T18308] syz.2.2697 (18308): drop_caches: 2 [ 1521.000787][T18163] bridge0: port 1(bridge_slave_0) entered blocking state [ 1521.028492][T18163] bridge0: port 1(bridge_slave_0) entered disabled state [ 1521.043986][T18163] bridge_slave_0: entered allmulticast mode [ 1521.054087][T18163] bridge_slave_0: entered promiscuous mode [ 1521.070489][T18163] bridge0: port 2(bridge_slave_1) entered blocking state [ 1521.083493][T18163] bridge0: port 2(bridge_slave_1) entered disabled state [ 1521.094241][T18163] bridge_slave_1: entered allmulticast mode [ 1521.120751][T18163] bridge_slave_1: entered promiscuous mode [ 1521.431022][T18163] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1521.473550][T18350] loop7: detected capacity change from 0 to 4096 [ 1521.526894][T18163] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1521.554970][T18350] NILFS (loop7): invalid segment: Checksum error in segment payload [ 1521.563597][T18350] NILFS (loop7): trying rollback from an earlier position [ 1521.618300][T18350] NILFS (loop7): recovery complete [ 1521.642522][T18358] NILFS (loop7): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 1521.649197][T18057] netdevsim netdevsim9 netdevsim0: renamed from eth0 [ 1521.706678][T18362] fuse: Bad value for 'fd' [ 1521.723961][T18362] netlink: 4 bytes leftover after parsing attributes in process `syz.8.2704'. [ 1521.815452][T18057] netdevsim netdevsim9 netdevsim1: renamed from eth1 [ 1521.903281][T18057] netdevsim netdevsim9 netdevsim2: renamed from eth2 [ 1521.966203][T18163] team0: Port device team_slave_0 added [ 1522.045644][T18057] netdevsim netdevsim9 netdevsim3: renamed from eth3 [ 1522.088311][T18163] team0: Port device team_slave_1 added [ 1522.267783][T18163] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1522.291044][T18163] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1522.455002][T18163] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1522.478909][T18163] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1522.493325][T18163] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1522.523615][T18163] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1523.779309][T18382] loop8: detected capacity change from 0 to 256 [ 1523.806680][T18382] exFAT-fs (loop8): failed to load upcase table (idx : 0x00017f3e, chksum : 0x0b83170a, utbl_chksum : 0xe619d30d) [ 1525.667514][T18163] hsr_slave_0: entered promiscuous mode [ 1525.673916][T18163] hsr_slave_1: entered promiscuous mode [ 1525.697717][T18163] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1525.726890][T18163] Cannot create hsr debugfs directory [ 1526.568070][ T6487] bridge_slave_1: left allmulticast mode [ 1526.588152][ T6487] bridge_slave_1: left promiscuous mode [ 1526.603729][ T6487] bridge0: port 2(bridge_slave_1) entered disabled state [ 1526.739379][T18410] syz.2.2708 (18410): drop_caches: 2 [ 1526.763710][T18410] syz.2.2708 (18410): drop_caches: 2 [ 1526.815399][ T6487] bridge_slave_0: left allmulticast mode [ 1526.821095][ T6487] bridge_slave_0: left promiscuous mode [ 1526.860193][ T6487] bridge0: port 1(bridge_slave_0) entered disabled state [ 1526.892899][ T6487] bridge_slave_1: left allmulticast mode [ 1526.931261][ T6487] bridge_slave_1: left promiscuous mode [ 1526.952280][ T6487] bridge0: port 2(bridge_slave_1) entered disabled state [ 1526.983441][ T6487] bridge_slave_0: left allmulticast mode [ 1527.000266][ T6487] bridge_slave_0: left promiscuous mode [ 1527.126792][ T6487] bridge0: port 1(bridge_slave_0) entered disabled state [ 1527.245169][ T6487] bridge_slave_1: left allmulticast mode [ 1527.257990][ T6487] bridge_slave_1: left promiscuous mode [ 1527.335116][ T6487] bridge0: port 2(bridge_slave_1) entered disabled state [ 1527.389462][ T6487] bridge_slave_0: left allmulticast mode [ 1527.409167][ T6487] bridge_slave_0: left promiscuous mode [ 1527.430376][ T6487] bridge0: port 1(bridge_slave_0) entered disabled state [ 1528.025779][T18419] 9pnet_fd: p9_fd_create_tcp (18419): problem connecting socket to 127.0.0.1 [ 1529.016355][ T6487] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1529.049580][ T6487] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1529.122332][T18423] loop2: detected capacity change from 0 to 512 [ 1529.124768][ T6487] bond0 (unregistering): Released all slaves [ 1529.156618][T18423] EXT4-fs (loop2): blocks per group (95) and clusters per group (32768) inconsistent [ 1529.157024][ T6487] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1529.232754][ T6487] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1529.263959][ T6487] bond0 (unregistering): Released all slaves [ 1529.289544][ T6487] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1529.311782][ T6487] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1529.356834][ T6487] bond0 (unregistering): Released all slaves [ 1529.394444][T18075] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 1529.445232][T18075] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 1529.491450][T18075] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 1529.758123][T18075] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 1529.877527][T18429] loop8: detected capacity change from 0 to 2048 [ 1530.737873][ T6487] hsr_slave_0: left promiscuous mode [ 1530.776140][ T6487] hsr_slave_1: left promiscuous mode [ 1530.782069][ T6487] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1530.897298][T18429] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1530.915127][ T6487] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1530.967492][ T6487] hsr_slave_0: left promiscuous mode [ 1530.997002][ T6487] hsr_slave_1: left promiscuous mode [ 1531.002896][ T6487] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1531.145863][ T30] audit: type=1800 audit(1742318652.810:296): pid=18429 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.8.2713" name="file2" dev="loop8" ino=16 res=0 errno=0 [ 1531.311000][ T6487] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1531.342201][ T6487] hsr_slave_0: left promiscuous mode [ 1531.432478][T18441] EXT4-fs error (device loop8): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 1531.523435][ T6487] hsr_slave_1: left promiscuous mode [ 1531.611157][ T6487] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1531.693017][ T6487] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1531.844741][T17552] usb 8-1: new high-speed USB device number 29 using dummy_hcd [ 1531.960848][T13822] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1532.304635][T17552] usb 8-1: Using ep0 maxpacket: 8 [ 1532.314208][T17552] usb 8-1: New USB device found, idVendor=0763, idProduct=2081, bcdDevice=d0.ab [ 1532.337529][T17552] usb 8-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 1532.346088][T17552] usb 8-1: Product: syz [ 1532.350329][T17552] usb 8-1: Manufacturer: syz [ 1532.355596][T17552] usb 8-1: SerialNumber: syz [ 1532.648949][T17552] usb 8-1: config 0 descriptor?? [ 1532.900519][T18445] slcan: can't register candev [ 1532.905731][T18445] Falling back ldisc for ttyS3. [ 1533.156984][ T6487] team0 (unregistering): Port device team_slave_1 removed [ 1533.227602][ T6487] team0 (unregistering): Port device team_slave_0 removed [ 1533.263461][T18451] syz.8.2716 (18451): drop_caches: 2 [ 1533.308276][T18451] syz.8.2716 (18451): drop_caches: 2 [ 1534.114934][T18454] loop8: detected capacity change from 0 to 2048 [ 1534.139088][ T6487] team0 (unregistering): Port device team_slave_1 removed [ 1534.192403][T18454] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1534.212939][ T6487] team0 (unregistering): Port device team_slave_0 removed [ 1534.216771][ T30] audit: type=1800 audit(1742318655.990:297): pid=18454 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.8.2717" name="file2" dev="loop8" ino=16 res=0 errno=0 [ 1534.685496][T18459] EXT4-fs error (device loop8): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 1535.185191][ T6487] team0 (unregistering): Port device team_slave_1 removed [ 1535.246470][ T6487] team0 (unregistering): Port device team_slave_0 removed [ 1535.391905][T13822] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1535.642172][T18057] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1535.703151][T18057] 8021q: adding VLAN 0 to HW filter on device team0 [ 1536.648429][ T53] bridge0: port 1(bridge_slave_0) entered blocking state [ 1536.655604][ T53] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1536.691779][ T53] bridge0: port 2(bridge_slave_1) entered blocking state [ 1536.698936][ T53] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1536.761828][T18465] sch_tbf: burst 32855 is lower than device lo mtu (65550) ! [ 1537.020160][T17552] usb 8-1: USB disconnect, device number 29 [ 1537.644147][T18480] hub 6-0:1.0: USB hub found [ 1537.654124][T18477] loop8: detected capacity change from 0 to 2048 [ 1537.664309][T18480] hub 6-0:1.0: 1 port detected [ 1537.749485][T18477] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1537.791320][ T30] audit: type=1800 audit(1742318659.570:298): pid=18477 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.8.2721" name="file2" dev="loop8" ino=16 res=0 errno=0 [ 1538.662427][T18494] sch_tbf: burst 32855 is lower than device lo mtu (65550) ! [ 1539.105619][T18492] EXT4-fs error (device loop8): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 1539.497319][T13822] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1539.499743][T18057] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 1539.668922][T18501] loop2: detected capacity change from 0 to 512 [ 1539.755074][T18501] EXT4-fs (loop2): blocks per group (95) and clusters per group (32768) inconsistent [ 1539.980080][T18075] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1543.489840][T18075] 8021q: adding VLAN 0 to HW filter on device team0 [ 1543.535172][T18163] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 1543.635763][T18163] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 1544.029109][T18527] loop7: detected capacity change from 0 to 256 [ 1544.939287][T18528] 9pnet_fd: p9_fd_create_tcp (18528): problem connecting socket to 127.0.0.1 [ 1545.040576][T18163] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 1545.099298][T18527] exFAT-fs (loop7): failed to load upcase table (idx : 0x00017f3e, chksum : 0x0b83170a, utbl_chksum : 0xe619d30d) [ 1545.887250][ T1292] ieee802154 phy0 wpan0: encryption failed: -22 [ 1545.893673][ T1292] ieee802154 phy1 wpan1: encryption failed: -22 [ 1545.918261][ T3486] bridge0: port 1(bridge_slave_0) entered blocking state [ 1545.925414][ T3486] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1546.919020][ T3486] bridge0: port 2(bridge_slave_1) entered blocking state [ 1546.926220][ T3486] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1547.711052][T18534] slcan: can't register candev [ 1547.716068][T18534] Falling back ldisc for ttyS3. [ 1547.771057][T11445] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 1547.845945][T11445] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 1547.862217][T11445] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 1547.905283][T11445] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 1547.912527][T18163] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 1547.928691][T11445] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 1547.944215][T11445] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 1548.171116][T18547] loop8: detected capacity change from 0 to 512 [ 1548.292367][T18547] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1548.329116][T18547] ext4 filesystem being mounted at /167/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 1548.586365][T11445] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 1548.607647][T11445] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 1548.615551][T11445] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 1548.623935][T11445] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 1548.631566][T11445] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 1548.639371][T11445] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 1548.735161][ T5954] usb 3-1: new high-speed USB device number 9 using dummy_hcd [ 1548.888263][T18558] input: syz1 as /devices/virtual/input/input28 [ 1549.817749][ T5954] usb 3-1: Using ep0 maxpacket: 8 [ 1549.849524][T18163] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1549.861208][ T5954] usb 3-1: New USB device found, idVendor=0763, idProduct=2081, bcdDevice=d0.ab [ 1549.884636][ T5954] usb 3-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 1549.917844][T13822] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1549.923090][T18163] 8021q: adding VLAN 0 to HW filter on device team0 [ 1550.046154][T17337] bridge0: port 1(bridge_slave_0) entered blocking state [ 1550.053318][T17337] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1550.117481][T17337] bridge0: port 2(bridge_slave_1) entered blocking state [ 1550.124691][T17337] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1550.174983][T11445] Bluetooth: hci0: command tx timeout [ 1550.179713][ T5954] usb 3-1: Product: syz [ 1550.186648][ T5954] usb 3-1: Manufacturer: syz [ 1550.191257][ T5954] usb 3-1: SerialNumber: syz [ 1550.223307][ T5954] usb 3-1: config 0 descriptor?? [ 1550.706077][T11445] Bluetooth: hci3: command tx timeout [ 1551.272965][T18538] chnl_net:caif_netlink_parms(): no params data found [ 1551.391755][ T5954] usb 3-1: USB disconnect, device number 9 [ 1552.194249][T18578] 9pnet_fd: p9_fd_create_tcp (18578): problem connecting socket to 127.0.0.1 [ 1552.344611][T11445] Bluetooth: hci0: command tx timeout [ 1552.527136][T18553] chnl_net:caif_netlink_parms(): no params data found [ 1552.746898][T18588] syz.2.2735 (18588): drop_caches: 2 [ 1552.747871][T11445] Bluetooth: hci3: command tx timeout [ 1552.753518][T18588] syz.2.2735 (18588): drop_caches: 2 [ 1553.456368][T18595] loop7: detected capacity change from 0 to 512 [ 1553.464422][T18595] EXT4-fs (loop7): blocks per group (95) and clusters per group (32768) inconsistent [ 1553.526818][T18538] bridge0: port 1(bridge_slave_0) entered blocking state [ 1553.534369][T18538] bridge0: port 1(bridge_slave_0) entered disabled state [ 1553.742470][T18538] bridge_slave_0: entered allmulticast mode [ 1553.951723][T18538] bridge_slave_0: entered promiscuous mode [ 1554.411261][T18538] bridge0: port 2(bridge_slave_1) entered blocking state [ 1554.424727][T11445] Bluetooth: hci0: command tx timeout [ 1554.496898][T18538] bridge0: port 2(bridge_slave_1) entered disabled state [ 1554.624860][T18538] bridge_slave_1: entered allmulticast mode [ 1554.636109][T18538] bridge_slave_1: entered promiscuous mode [ 1555.443191][T11445] Bluetooth: hci3: command tx timeout [ 1556.505803][T11445] Bluetooth: hci0: command tx timeout [ 1556.845186][ T55] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 1556.863179][ T55] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 1556.915048][ T55] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 1556.924015][ T55] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 1556.931837][ T55] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 1556.940052][ T55] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 1557.465982][ T55] Bluetooth: hci3: command tx timeout [ 1557.807174][T18615] slcan: can't register candev [ 1557.812146][T18615] Falling back ldisc for ttyS3. [ 1558.117741][T18538] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1558.170692][T18538] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1558.252086][T18553] bridge0: port 1(bridge_slave_0) entered blocking state [ 1558.292897][T18553] bridge0: port 1(bridge_slave_0) entered disabled state [ 1558.315156][T18553] bridge_slave_0: entered allmulticast mode [ 1558.336032][T18553] bridge_slave_0: entered promiscuous mode [ 1558.352218][T18553] bridge0: port 2(bridge_slave_1) entered blocking state [ 1558.361771][T18553] bridge0: port 2(bridge_slave_1) entered disabled state [ 1558.381137][T18553] bridge_slave_1: entered allmulticast mode [ 1558.392432][T18553] bridge_slave_1: entered promiscuous mode [ 1558.481023][T18553] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1558.526708][T18553] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1558.975214][ T55] Bluetooth: hci4: command tx timeout [ 1559.081001][T18538] team0: Port device team_slave_0 added [ 1559.094154][T18553] team0: Port device team_slave_0 added [ 1559.179954][T18538] team0: Port device team_slave_1 added [ 1559.401336][T18553] team0: Port device team_slave_1 added [ 1559.529022][T18538] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1559.544485][T18538] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1559.580054][T18538] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1559.725639][T18538] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1559.732652][T18538] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1559.771797][T18538] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1559.837611][T18553] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1559.847560][T18553] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1559.879014][T18553] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1559.894894][T18553] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1559.901983][T18553] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1559.929018][T18553] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1560.169323][T18636] 9pnet_fd: p9_fd_create_tcp (18636): problem connecting socket to 127.0.0.1 [ 1561.055913][ T55] Bluetooth: hci4: command tx timeout [ 1562.029977][T18538] hsr_slave_0: entered promiscuous mode [ 1563.431253][T18648] slcan: can't register candev [ 1563.438210][T18648] Falling back ldisc for ttyS3. [ 1563.452423][ T55] Bluetooth: hci4: command tx timeout [ 1563.695147][T18538] hsr_slave_1: entered promiscuous mode [ 1563.713054][T18538] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1563.732731][T18538] Cannot create hsr debugfs directory [ 1563.952889][T18553] hsr_slave_0: entered promiscuous mode [ 1564.015603][T18553] hsr_slave_1: entered promiscuous mode [ 1564.032126][T18553] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1564.056942][T18553] Cannot create hsr debugfs directory [ 1564.088940][T18653] loop8: detected capacity change from 0 to 512 [ 1564.282659][T18653] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1564.427960][T18653] ext4 filesystem being mounted at /172/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 1565.248408][T18664] input: syz1 as /devices/virtual/input/input29 [ 1565.810484][ T55] Bluetooth: hci4: command tx timeout [ 1566.211957][T13822] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1566.824665][T18672] Bluetooth: MGMT ver 1.23 [ 1567.648339][T18674] slcan: can't register candev [ 1567.653298][T18674] Falling back ldisc for ttyS3. [ 1569.040304][T18610] chnl_net:caif_netlink_parms(): no params data found [ 1569.219554][ T6487] bridge_slave_1: left allmulticast mode [ 1569.237096][ T6487] bridge_slave_1: left promiscuous mode [ 1569.242866][ T6487] bridge0: port 2(bridge_slave_1) entered disabled state [ 1569.283313][ T6487] bridge_slave_0: left allmulticast mode [ 1569.308819][ T6487] bridge_slave_0: left promiscuous mode [ 1569.325134][ T6487] bridge0: port 1(bridge_slave_0) entered disabled state [ 1570.249924][ T6487] bridge_slave_1: left allmulticast mode [ 1570.256646][ T6487] bridge_slave_1: left promiscuous mode [ 1570.262472][ T6487] bridge0: port 2(bridge_slave_1) entered disabled state [ 1570.288679][ T6487] bridge_slave_0: left allmulticast mode [ 1570.294321][ T6487] bridge_slave_0: left promiscuous mode [ 1570.306039][ T6487] bridge0: port 1(bridge_slave_0) entered disabled state [ 1571.200977][T18688] dccp_close: ABORT with 84 bytes unread [ 1572.753010][ T6487] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1572.948473][ T6487] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1572.959100][ T6487] bond0 (unregistering): Released all slaves [ 1573.202681][T18700] slcan: can't register candev [ 1573.210572][T18700] Falling back ldisc for ttyS3. [ 1573.852402][ T6487] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1573.867764][ T6487] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1573.878118][ T6487] bond0 (unregistering): Released all slaves [ 1574.163100][T18711] loop8: detected capacity change from 0 to 512 [ 1574.269125][T18712] loop2: detected capacity change from 0 to 2048 [ 1574.329184][T18712] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1574.346200][T18711] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1574.393714][T18712] ext4 filesystem being mounted at /96/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 1574.416256][T18711] ext4 filesystem being mounted at /175/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 1575.273923][T18724] input: syz1 as /devices/virtual/input/input30 [ 1575.626109][T18610] bridge0: port 1(bridge_slave_0) entered blocking state [ 1575.633317][T18610] bridge0: port 1(bridge_slave_0) entered disabled state [ 1575.668345][T18610] bridge_slave_0: entered allmulticast mode [ 1575.717827][T18610] bridge_slave_0: entered promiscuous mode [ 1575.885021][T13822] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1575.905849][T16698] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1575.946149][ T6487] hsr_slave_0: left promiscuous mode [ 1576.014038][ T6487] hsr_slave_1: left promiscuous mode [ 1576.025434][ T6487] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1576.093123][ T6487] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1576.125619][ T6487] hsr_slave_0: left promiscuous mode [ 1576.387011][ T6487] hsr_slave_1: left promiscuous mode [ 1576.393068][ T6487] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1577.372933][ T6487] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1578.482513][ T6487] team0 (unregistering): Port device team_slave_1 removed [ 1578.517887][ T6487] team0 (unregistering): Port device team_slave_0 removed [ 1578.979470][ T6487] team0 (unregistering): Port device team_slave_1 removed [ 1579.014505][ T6487] team0 (unregistering): Port device team_slave_0 removed [ 1579.339348][T18610] bridge0: port 2(bridge_slave_1) entered blocking state [ 1579.346877][T18610] bridge0: port 2(bridge_slave_1) entered disabled state [ 1579.354158][T18610] bridge_slave_1: entered allmulticast mode [ 1579.362247][T18610] bridge_slave_1: entered promiscuous mode [ 1579.369284][T18737] sch_tbf: burst 32855 is lower than device lo mtu (65550) ! [ 1579.578863][T18748] loop8: detected capacity change from 0 to 512 [ 1579.592912][T18748] EXT4-fs (loop8): blocks per group (95) and clusters per group (32768) inconsistent [ 1579.781461][T18610] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1579.860399][T18610] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1579.918680][T18610] team0: Port device team_slave_0 added [ 1580.209338][T18610] team0: Port device team_slave_1 added [ 1580.595058][T18610] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1580.611234][T18610] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1580.647832][T18610] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1580.673558][T18610] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1580.684000][T18610] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1580.783874][T18610] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1580.880719][T18754] loop7: detected capacity change from 0 to 512 [ 1580.938151][T18610] hsr_slave_0: entered promiscuous mode [ 1580.944655][T18610] hsr_slave_1: entered promiscuous mode [ 1580.950908][T18610] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1580.959251][T18610] Cannot create hsr debugfs directory [ 1581.019456][T18754] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1581.079267][T18754] ext4 filesystem being mounted at /404/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 1581.549460][T18764] input: syz1 as /devices/virtual/input/input31 [ 1582.482347][T18763] can0: slcan on ttyS3. [ 1582.985515][ T9373] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1583.055851][T18755] can0 (unregistered): slcan off ttyS3. [ 1583.778156][T18538] netdevsim netdevsim9 netdevsim0: renamed from eth0 [ 1583.886629][T18538] netdevsim netdevsim9 netdevsim1: renamed from eth1 [ 1583.909231][T18538] netdevsim netdevsim9 netdevsim2: renamed from eth2 [ 1584.007172][T18776] syz.2.2771 (18776): drop_caches: 2 [ 1584.019692][T18776] syz.2.2771 (18776): drop_caches: 2 [ 1584.625230][T18538] netdevsim netdevsim9 netdevsim3: renamed from eth3 [ 1587.795867][T18538] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1588.042210][T18538] 8021q: adding VLAN 0 to HW filter on device team0 [ 1588.085601][ T7444] bridge_slave_1: left allmulticast mode [ 1588.093586][ T7444] bridge_slave_1: left promiscuous mode [ 1588.103857][ T7444] bridge0: port 2(bridge_slave_1) entered disabled state [ 1588.138063][ T7444] bridge_slave_0: left allmulticast mode [ 1588.143908][ T7444] bridge_slave_0: left promiscuous mode [ 1588.154197][ T7444] bridge0: port 1(bridge_slave_0) entered disabled state [ 1588.632820][T18797] ------------[ cut here ]------------ [ 1588.638313][T18797] DEBUG_LOCKS_WARN_ON(1) [ 1588.638401][T18797] WARNING: CPU: 0 PID: 18797 at kernel/locking/lockdep.c:234 __lock_acquire+0x564/0x2100 [ 1588.652418][T18797] Modules linked in: [ 1588.656303][T18797] CPU: 0 UID: 0 PID: 18797 Comm: syz.7.2776 Not tainted 6.14.0-rc7-syzkaller-00050-gfc444ada1310 #0 [ 1588.667045][T18797] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 1588.677084][T18797] RIP: 0010:__lock_acquire+0x564/0x2100 [ 1588.682628][T18797] Code: 00 00 83 3d 61 52 a0 0e 00 75 23 90 48 c7 c7 40 b2 2a 8c 48 c7 c6 40 b5 2a 8c e8 f7 bc e4 ff 48 ba 00 00 00 00 00 fc ff df 90 <0f> 0b 90 90 90 31 db 48 81 c3 c4 00 00 00 48 89 d8 48 c1 e8 03 0f [ 1588.702228][T18797] RSP: 0018:ffffc90003eff0f0 EFLAGS: 00010046 [ 1588.708288][T18797] RAX: d076d52796e63d00 RBX: 0000000000001b20 RCX: 0000000000080000 [ 1588.716261][T18797] RDX: dffffc0000000000 RSI: 000000000007ffff RDI: 0000000000080000 [ 1588.724244][T18797] RBP: 00000000000c1b20 R08: ffffffff81819e52 R09: fffffbfff1d3a69c [ 1588.732209][T18797] R10: dffffc0000000000 R11: fffffbfff1d3a69c R12: ffff8880301b0ad4 [ 1588.740172][T18797] R13: 0000000000000005 R14: 1ffff11006036167 R15: ffff8880301b0b38 [ 1588.748134][T18797] FS: 00007f5a281276c0(0000) GS:ffff8880b8600000(0000) knlGS:0000000000000000 [ 1588.757051][T18797] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 1588.763630][T18797] CR2: 000000110c2d89ae CR3: 000000005d11a000 CR4: 0000000000350ef0 [ 1588.771603][T18797] Call Trace: [ 1588.774870][T18797] [ 1588.777792][T18797] ? __warn+0x165/0x4d0 [ 1588.781951][T18797] ? __lock_acquire+0x564/0x2100 [ 1588.786892][T18797] ? report_bug+0x2b3/0x500 [ 1588.791394][T18797] ? __lock_acquire+0x564/0x2100 [ 1588.796354][T18797] ? handle_bug+0x60/0x90 [ 1588.800674][T18797] ? exc_invalid_op+0x1a/0x50 [ 1588.805342][T18797] ? asm_exc_invalid_op+0x1a/0x20 [ 1588.810388][T18797] ? __warn_printk+0x292/0x360 [ 1588.815157][T18797] ? __lock_acquire+0x564/0x2100 [ 1588.820117][T18797] lock_acquire+0x1ed/0x550 [ 1588.824621][T18797] ? raw_spin_rq_lock_nested+0xb0/0x140 [ 1588.830280][T18797] ? __pfx_lock_acquire+0x10/0x10 [ 1588.835354][T18797] ? rcu_note_context_switch+0xd44/0x1060 [ 1588.841100][T18797] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1588.846750][T18797] ? psi_task_change+0xed/0x270 [ 1588.851605][T18797] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1588.857240][T18797] ? mark_lock+0x9a/0x360 [ 1588.861567][T18797] _raw_spin_lock_nested+0x31/0x40 [ 1588.866686][T18797] ? raw_spin_rq_lock_nested+0xb0/0x140 [ 1588.872266][T18797] raw_spin_rq_lock_nested+0xb0/0x140 [ 1588.877647][T18797] __schedule+0x357/0x4c90 [ 1588.882093][T18797] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1588.887734][T18797] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1588.893370][T18797] ? mark_lock+0x9a/0x360 [ 1588.897715][T18797] ? __pfx___schedule+0x10/0x10 [ 1588.902567][T18797] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1588.908224][T18797] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 1588.914207][T18797] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1588.919931][T18797] ? preempt_schedule_irq+0xf0/0x1c0 [ 1588.925231][T18797] preempt_schedule_irq+0xfb/0x1c0 [ 1588.930358][T18797] ? __pfx_preempt_schedule_irq+0x10/0x10 [ 1588.936083][T18797] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1588.941725][T18797] irqentry_exit+0x5e/0x90 [ 1588.946141][T18797] asm_sysvec_reschedule_ipi+0x1a/0x20 [ 1588.951607][T18797] RIP: 0010:__unix_dgram_recvmsg+0x7b9/0x1320 [ 1588.957683][T18797] Code: 8b 44 24 60 42 0f b6 04 30 84 c0 0f 85 d3 07 00 00 44 8b b4 24 20 01 00 00 44 29 f3 48 89 df 4c 89 e6 e8 5a ce 25 f7 4c 39 e3 <73> 0a e8 f0 cb 25 f7 49 89 dc eb 45 48 89 df 4c 89 e6 e8 40 ce 25 [ 1588.977285][T18797] RSP: 0018:ffffc90003eff720 EFLAGS: 00000246 [ 1588.983360][T18797] RAX: 0000000000000002 RBX: 0000000000000000 RCX: ffff8880301b0000 [ 1588.991336][T18797] RDX: ffff88804bc5dcf0 RSI: 0000000000000000 RDI: 0000000000000000 [ 1588.999311][T18797] RBP: ffffc90003eff8b0 R08: ffffffff8a9c13d6 R09: 1ffffffff28a991f [ 1589.007284][T18797] R10: dffffc0000000000 R11: fffffbfff28a9920 R12: 0000000000000000 [ 1589.015253][T18797] R13: 1ffff920007dfef4 R14: 0000000000000000 R15: ffff88804bc5dc80 [ 1589.023264][T18797] ? __unix_dgram_recvmsg+0x7b6/0x1320 [ 1589.028752][T18797] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1589.034386][T18797] ? __pfx___unix_dgram_recvmsg+0x10/0x10 [ 1589.040104][T18797] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1589.045736][T18797] ? iovec_from_user+0x61/0x240 [ 1589.050586][T18797] ? __pfx___might_resched+0x10/0x10 [ 1589.055866][T18797] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1589.061495][T18797] ? __import_iovec+0x3bf/0x830 [ 1589.066339][T18797] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1589.072148][T18797] ? unix_dgram_recvmsg+0xb6/0xe0 [ 1589.077160][T18797] ? __pfx_unix_dgram_recvmsg+0x10/0x10 [ 1589.082699][T18797] sock_recvmsg_nosec+0x190/0x1d0 [ 1589.087726][T18797] ____sys_recvmsg+0x3cd/0x480 [ 1589.092488][T18797] ? __pfx_____sys_recvmsg+0x10/0x10 [ 1589.097771][T18797] ? do_recvmmsg+0x44e/0xab0 [ 1589.102354][T18797] ? __might_fault+0xaa/0x120 [ 1589.107021][T18797] do_recvmmsg+0x426/0xab0 [ 1589.111432][T18797] ? __pfx_do_recvmmsg+0x10/0x10 [ 1589.116356][T18797] ? __pfx_futex_wake_mark+0x10/0x10 [ 1589.121646][T18797] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1589.127281][T18797] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1589.132915][T18797] ? futex_wait+0x285/0x360 [ 1589.137449][T18797] ? __pfx_futex_wait+0x10/0x10 [ 1589.142319][T18797] ? kasan_quarantine_put+0xdc/0x230 [ 1589.147607][T18797] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1589.153249][T18797] ? sched_setaffinity+0x362/0x4b0 [ 1589.158377][T18797] ? __pfx_do_futex+0x10/0x10 [ 1589.163066][T18797] __x64_sys_recvmmsg+0x199/0x250 [ 1589.168092][T18797] ? __pfx___x64_sys_recvmmsg+0x10/0x10 [ 1589.173636][T18797] ? do_syscall_64+0x100/0x230 [ 1589.178403][T18797] ? do_syscall_64+0xb6/0x230 [ 1589.183080][T18797] do_syscall_64+0xf3/0x230 [ 1589.187599][T18797] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1589.193491][T18797] RIP: 0033:0x7f5a2738d169 [ 1589.197902][T18797] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1589.217503][T18797] RSP: 002b:00007f5a28127038 EFLAGS: 00000246 ORIG_RAX: 000000000000012b [ 1589.225913][T18797] RAX: ffffffffffffffda RBX: 00007f5a275a6080 RCX: 00007f5a2738d169 [ 1589.233879][T18797] RDX: 0000000000010106 RSI: 00004000000000c0 RDI: 0000000000000003 [ 1589.241859][T18797] RBP: 00007f5a2740e2a0 R08: 0000000000000000 R09: 0000000000000000 [ 1589.249822][T18797] R10: 0000000000000002 R11: 0000000000000246 R12: 0000000000000000 [ 1589.257805][T18797] R13: 0000000000000000 R14: 00007f5a275a6080 R15: 00007ffcc94661b8 [ 1589.265776][T18797] [ 1589.268783][T18797] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 1589.276048][T18797] CPU: 0 UID: 0 PID: 18797 Comm: syz.7.2776 Not tainted 6.14.0-rc7-syzkaller-00050-gfc444ada1310 #0 [ 1589.286797][T18797] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 1589.296842][T18797] Call Trace: [ 1589.300119][T18797] [ 1589.303045][T18797] dump_stack_lvl+0x241/0x360 [ 1589.307724][T18797] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1589.312917][T18797] ? __pfx__printk+0x10/0x10 [ 1589.317504][T18797] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1589.323138][T18797] ? vscnprintf+0x5d/0x90 [ 1589.327471][T18797] panic+0x349/0x880 [ 1589.331357][T18797] ? __warn+0x174/0x4d0 [ 1589.335519][T18797] ? __pfx_panic+0x10/0x10 [ 1589.339931][T18797] __warn+0x344/0x4d0 [ 1589.343911][T18797] ? __lock_acquire+0x564/0x2100 [ 1589.348846][T18797] report_bug+0x2b3/0x500 [ 1589.353168][T18797] ? __lock_acquire+0x564/0x2100 [ 1589.358104][T18797] handle_bug+0x60/0x90 [ 1589.362243][T18797] exc_invalid_op+0x1a/0x50 [ 1589.366734][T18797] asm_exc_invalid_op+0x1a/0x20 [ 1589.371580][T18797] RIP: 0010:__lock_acquire+0x564/0x2100 [ 1589.377122][T18797] Code: 00 00 83 3d 61 52 a0 0e 00 75 23 90 48 c7 c7 40 b2 2a 8c 48 c7 c6 40 b5 2a 8c e8 f7 bc e4 ff 48 ba 00 00 00 00 00 fc ff df 90 <0f> 0b 90 90 90 31 db 48 81 c3 c4 00 00 00 48 89 d8 48 c1 e8 03 0f [ 1589.396809][T18797] RSP: 0018:ffffc90003eff0f0 EFLAGS: 00010046 [ 1589.402882][T18797] RAX: d076d52796e63d00 RBX: 0000000000001b20 RCX: 0000000000080000 [ 1589.410845][T18797] RDX: dffffc0000000000 RSI: 000000000007ffff RDI: 0000000000080000 [ 1589.418805][T18797] RBP: 00000000000c1b20 R08: ffffffff81819e52 R09: fffffbfff1d3a69c [ 1589.426768][T18797] R10: dffffc0000000000 R11: fffffbfff1d3a69c R12: ffff8880301b0ad4 [ 1589.434736][T18797] R13: 0000000000000005 R14: 1ffff11006036167 R15: ffff8880301b0b38 [ 1589.442713][T18797] ? __warn_printk+0x292/0x360 [ 1589.447508][T18797] lock_acquire+0x1ed/0x550 [ 1589.452014][T18797] ? raw_spin_rq_lock_nested+0xb0/0x140 [ 1589.457579][T18797] ? __pfx_lock_acquire+0x10/0x10 [ 1589.462599][T18797] ? rcu_note_context_switch+0xd44/0x1060 [ 1589.468327][T18797] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1589.473959][T18797] ? psi_task_change+0xed/0x270 [ 1589.478801][T18797] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1589.484434][T18797] ? mark_lock+0x9a/0x360 [ 1589.488756][T18797] _raw_spin_lock_nested+0x31/0x40 [ 1589.493861][T18797] ? raw_spin_rq_lock_nested+0xb0/0x140 [ 1589.499398][T18797] raw_spin_rq_lock_nested+0xb0/0x140 [ 1589.504765][T18797] __schedule+0x357/0x4c90 [ 1589.509175][T18797] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1589.514814][T18797] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1589.520443][T18797] ? mark_lock+0x9a/0x360 [ 1589.524758][T18797] ? __pfx___schedule+0x10/0x10 [ 1589.529603][T18797] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1589.535234][T18797] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 1589.541212][T18797] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1589.546842][T18797] ? preempt_schedule_irq+0xf0/0x1c0 [ 1589.552120][T18797] preempt_schedule_irq+0xfb/0x1c0 [ 1589.557224][T18797] ? __pfx_preempt_schedule_irq+0x10/0x10 [ 1589.562938][T18797] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1589.568670][T18797] irqentry_exit+0x5e/0x90 [ 1589.573080][T18797] asm_sysvec_reschedule_ipi+0x1a/0x20 [ 1589.578540][T18797] RIP: 0010:__unix_dgram_recvmsg+0x7b9/0x1320 [ 1589.584619][T18797] Code: 8b 44 24 60 42 0f b6 04 30 84 c0 0f 85 d3 07 00 00 44 8b b4 24 20 01 00 00 44 29 f3 48 89 df 4c 89 e6 e8 5a ce 25 f7 4c 39 e3 <73> 0a e8 f0 cb 25 f7 49 89 dc eb 45 48 89 df 4c 89 e6 e8 40 ce 25 [ 1589.604330][T18797] RSP: 0018:ffffc90003eff720 EFLAGS: 00000246 [ 1589.610391][T18797] RAX: 0000000000000002 RBX: 0000000000000000 RCX: ffff8880301b0000 [ 1589.618348][T18797] RDX: ffff88804bc5dcf0 RSI: 0000000000000000 RDI: 0000000000000000 [ 1589.626304][T18797] RBP: ffffc90003eff8b0 R08: ffffffff8a9c13d6 R09: 1ffffffff28a991f [ 1589.634259][T18797] R10: dffffc0000000000 R11: fffffbfff28a9920 R12: 0000000000000000 [ 1589.642219][T18797] R13: 1ffff920007dfef4 R14: 0000000000000000 R15: ffff88804bc5dc80 [ 1589.650198][T18797] ? __unix_dgram_recvmsg+0x7b6/0x1320 [ 1589.655670][T18797] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1589.661302][T18797] ? __pfx___unix_dgram_recvmsg+0x10/0x10 [ 1589.667019][T18797] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1589.672662][T18797] ? iovec_from_user+0x61/0x240 [ 1589.677507][T18797] ? __pfx___might_resched+0x10/0x10 [ 1589.682785][T18797] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1589.688415][T18797] ? __import_iovec+0x3bf/0x830 [ 1589.693269][T18797] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1589.698899][T18797] ? unix_dgram_recvmsg+0xb6/0xe0 [ 1589.703910][T18797] ? __pfx_unix_dgram_recvmsg+0x10/0x10 [ 1589.709446][T18797] sock_recvmsg_nosec+0x190/0x1d0 [ 1589.714471][T18797] ____sys_recvmsg+0x3cd/0x480 [ 1589.719227][T18797] ? __pfx_____sys_recvmsg+0x10/0x10 [ 1589.724512][T18797] ? do_recvmmsg+0x44e/0xab0 [ 1589.729107][T18797] ? __might_fault+0xaa/0x120 [ 1589.733776][T18797] do_recvmmsg+0x426/0xab0 [ 1589.738194][T18797] ? __pfx_do_recvmmsg+0x10/0x10 [ 1589.743119][T18797] ? __pfx_futex_wake_mark+0x10/0x10 [ 1589.748408][T18797] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1589.754058][T18797] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1589.759692][T18797] ? futex_wait+0x285/0x360 [ 1589.764193][T18797] ? __pfx_futex_wait+0x10/0x10 [ 1589.769045][T18797] ? kasan_quarantine_put+0xdc/0x230 [ 1589.774370][T18797] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1589.780015][T18797] ? sched_setaffinity+0x362/0x4b0 [ 1589.785134][T18797] ? __pfx_do_futex+0x10/0x10 [ 1589.789814][T18797] __x64_sys_recvmmsg+0x199/0x250 [ 1589.794836][T18797] ? __pfx___x64_sys_recvmmsg+0x10/0x10 [ 1589.800372][T18797] ? do_syscall_64+0x100/0x230 [ 1589.805135][T18797] ? do_syscall_64+0xb6/0x230 [ 1589.809827][T18797] do_syscall_64+0xf3/0x230 [ 1589.814364][T18797] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1589.820256][T18797] RIP: 0033:0x7f5a2738d169 [ 1589.824662][T18797] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1589.844262][T18797] RSP: 002b:00007f5a28127038 EFLAGS: 00000246 ORIG_RAX: 000000000000012b [ 1589.852689][T18797] RAX: ffffffffffffffda RBX: 00007f5a275a6080 RCX: 00007f5a2738d169 [ 1589.860650][T18797] RDX: 0000000000010106 RSI: 00004000000000c0 RDI: 0000000000000003 [ 1589.868619][T18797] RBP: 00007f5a2740e2a0 R08: 0000000000000000 R09: 0000000000000000 [ 1589.876590][T18797] R10: 0000000000000002 R11: 0000000000000246 R12: 0000000000000000 [ 1589.884558][T18797] R13: 0000000000000000 R14: 00007f5a275a6080 R15: 00007ffcc94661b8 [ 1589.892546][T18797] [ 1589.895789][T18797] Kernel Offset: disabled [ 1589.900109][T18797] Rebooting in 86400 seconds..